Hello tiesgr,
The dumps point to
eamonm.sys as the probable cause.
eamonm.sys is related to ESET Antivirus, which is notorious for causing BSODs.
In order to eradicate the BSOD, please try to do the following:
Remove/Uninstall ESET and use MSE at least to test. Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00001018, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 9223b031, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from 82988848
Unable to read MiSystemVaType memory at 82967e20
00001018
CURRENT_IRQL: 2
FAULTING_IP:
eamonm+7031
9223b031 83791800 cmp dword ptr [ecx+18h],0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: poqexec.exe
TRAP_FRAME: 8a13673c -- (.trap 0xffffffff8a13673c)
ErrCode = 00000000
eax=00000000 ebx=85cde8b0 ecx=00001000 edx=00000016 esi=92292f54 edi=000001a8
eip=9223b031 esp=8a1367b0 ebp=8a136824 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
eamonm+0x7031:
9223b031 83791800 cmp dword ptr [ecx+18h],0 ds:0023:00001018=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 9223b031 to 828605fb
STACK_TEXT:
8a13673c 9223b031 badb0d00 00000016 8a136758 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
8a136824 8881eaeb 85ce6a80 8a136844 8a136870 eamonm+0x7031
8a136890 888219f0 8a1368d4 85ce6e28 00000000 fltmgr!FltpPerformPreCallbacks+0x34d
8a1368a8 888351fe 8a1368d4 88838f3c 00000000 fltmgr!FltpPassThroughInternal+0x40
8a1368bc 888358b7 8a1368d4 85ce6e28 85cf1ae8 fltmgr!FltpCreateInternal+0x24
8a136900 8285658e 856bb1d0 856bbae0 85cf1b44 fltmgr!FltpCreate+0x2c9
8a136918 82a65367 aa5a3c82 8a136ac0 00000000 nt!IofCallDriver+0x63
8a1369f0 82a44b6e 856919d0 858d8de8 85ca4d20 nt!IopParseDevice+0xed7
8a136a6c 82a54f80 00000000 8a136ac0 00000240 nt!ObpLookupObjectName+0x4fa
8a136acc 82a4ba5e 8a136c30 848d8de8 8a136b00 nt!ObOpenObjectByName+0x165
8a136b48 82a8cf8a 8a136bf8 00100002 8a136c30 nt!IopCreateFile+0x673
8a136ba4 82a1d326 8a136bf8 00100002 8a136c30 nt!IoCreateFileEx+0x9e
8a136c70 82a77182 8a136ce4 85ced008 85cdee58 nt!IopOpenLinkOrRenameTarget+0x12f
8a136d18 8285d21a 00000014 0010fb70 004a3f78 nt!NtSetInformationFile+0x967
8a136d18 771770b4 00000014 0010fb70 004a3f78 nt!KiFastCallEntry+0x12a
0010faa4 00000000 00000000 00000000 00000000 0x771770b4
STACK_COMMAND: kb
FOLLOWUP_IP:
eamonm+7031
9223b031 83791800 cmp dword ptr [ecx+18h],0
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: eamonm+7031
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: eamonm
IMAGE_NAME: eamonm.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4c18e21e
FAILURE_BUCKET_ID: 0xD1_eamonm+7031
BUCKET_ID: 0xD1_eamonm+7031
Followup: MachineOwner
---------