Hi,
Well, after several years of using Windows 7, I've got my first BSOD. Yes, first
I got the BSOD in the middle of a local game against Bots. I've noticed a drop in FPS after this new feature was implemented in the latest update of DOTA 2.
I'm attaching the file here following the instructions. Thanks in advance.
Your BSOD was caused by Eset antivirus. Please remove it with the Eset Removal Tool to test: Uninstallers (removal tools) for common antivirus software - ESET KnowledgebaseCode:******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D1, {fffff8800c8410d0, 2, 0, fffff8800426013e} *** WARNING: Unable to verify timestamp for eamonm.sys *** ERROR: Module load completed but symbols could not be loaded for eamonm.sys Probably caused by : eamonm.sys ( eamonm+313e ) Followup: MachineOwner --------- 2: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: fffff8800c8410d0, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, value 0 = read operation, 1 = write operation Arg4: fffff8800426013e, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b9100 GetUlongFromAddress: unable to read from fffff800034b91c0 fffff8800c8410d0 Nonpaged pool CURRENT_IRQL: 2 FAULTING_IP: eamonm+313e fffff880`0426013e 483933 cmp qword ptr [rbx],rsi CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0xD1 PROCESS_NAME: svchost.exe TRAP_FRAME: fffff88006c14260 -- (.trap 0xfffff88006c14260) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000 rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8800426013e rsp=fffff88006c143f0 rbp=fffffa8007e8d0c0 r8=fffff88006c14510 r9=0000000000000000 r10=fffffa800420f010 r11=fffff88006c14578 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na pe nc eamonm+0x313e: fffff880`0426013e 483933 cmp qword ptr [rbx],rsi ds:00000000`00000000=???????????????? Resetting default scope LAST_CONTROL_TRANSFER: from fffff800032801e9 to fffff80003280c40 STACK_TEXT: fffff880`06c14118 fffff800`032801e9 : 00000000`0000000a fffff880`0c8410d0 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx fffff880`06c14120 fffff800`0327ee60 : fffffa80`009e82c0 fffff800`03270d34 00000000`00000000 fffff880`0c8410d0 : nt!KiBugCheckDispatch+0x69 fffff880`06c14260 fffff880`0426013e : 00000000`00000000 fffffa80`04c36880 00000000`000007bc fffff880`01dffff8 : nt!KiPageFault+0x260 fffff880`06c143f0 00000000`00000000 : fffffa80`04c36880 00000000`000007bc fffff880`01dffff8 ffffffff`ffffffd6 : eamonm+0x313e STACK_COMMAND: kb FOLLOWUP_IP: eamonm+313e fffff880`0426013e 483933 cmp qword ptr [rbx],rsi SYMBOL_STACK_INDEX: 3 SYMBOL_NAME: eamonm+313e FOLLOWUP_NAME: MachineOwner MODULE_NAME: eamonm IMAGE_NAME: eamonm.sys DEBUG_FLR_IMAGE_TIMESTAMP: 50a4f5d2 FAILURE_BUCKET_ID: X64_0xD1_eamonm+313e BUCKET_ID: X64_0xD1_eamonm+313e Followup: MachineOwner ---------
Microsoft Security Essentials.
Recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software. It is free and lightweight:-
- Microsoft Security Essentials, Free antivirus for windows.
- Malwarebytes Anti-Malware Free
- Good and Free system security combination
WarningDo not start the free trial of Malware Bytes; remember to deselect that option when prompted.
Run a full scan with both (separately) once downloaded, installed and updated.
Perform a System File Check to check the integrity of all protected Windows 7 :
- Click on the start
- Type CMD on Search
- Left click and Run as Administrator
- Type
Code:SFC /scannow
Full tutorial here:
Disk Check on your hard drive for file system errors and bad sectors on it.
Number down items at start-up. Keep only your anti-virus, this also improves the time for logging into windows.
If you get a BSOD again. Please upload all the files following the Blue Screen of Death (BSOD) Posting Instructions
Good luck.
That seems fairly strange. I've already been using Nod32 since I reformatted this machine and this is the first time I had a BSOD, let alone one that is related to it.
Yes, I use MSE on my virtual machines since I only have one license for Nod32. However, I really like Nod32 and will probably keep it.
Is the sfc scannow necessary at this point for me? I have no reason suspect that my system files have been tampered with. Please enlighten me.
I've been playing for several hours now and thankfully no BSOD yet :)
Really appreciate the detailed response.
Is this the latest version of Eset?
If not you might want to upgrade and see if the BSOD-s come again. File checker never harms, its just a integrity "checker".
Do keep us posted.
Yes, the latest updated version 5 that is. Heard version 6 came out and I haven't checked yet if I'm eligible for a free upgrade.
Sounds good. Will do the the sfc /scannow a bit later and see if it finds anything. Have to get my win ratio up first. I've been losing the whole day. Lol.
Quote