BSOD again, please help


  1. Posts : 5
    Windows 7 Professional x64
       #1

    BSOD again, please help


    I'm getting a BSOD. Help is very much appreciated, you guys are awesome =D. Thanks in advance.

    - x64
    - originally XP on system
    - Full retail

    - Age of system 3-4 years old
    - Age of OS installation around 7 months
      My Computer


  2. Posts : 11,990
    Windows 7 Ultimate 32 bit
       #2

    Hi and welcome to the forum. I looked at your two dumps from October as well as your latest dump to try to get a feel for what is going on. All three dumps indicate memory corruption.
    Error code 7E, SYSTEM_THREAD_EXCEPTION_NOT_HANDLED. Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control.

    Error code 1E, KMODE_EXCEPTION_NOT_HANDLED. Usual causes: Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS.

    Error code A, IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.
    You latest dump is error code A; note the usual causes. This dump directly blames eamon.sys. Eset. Eset is know to cause BSOD's on some Win 7 systems. I suggest you uninstall it using this removal tool:Tool. Download and install Microsoft Security Essentials in its place. Make sure Windows Firewall is turned on. Let's see if this clears up the problem. Post back and let us know. If you get another BSOD, upload it and we will go from there.

    Code:
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02c08000 PsLoadedModuleList = 0xfffff800`02e45e50
    Debug session time: Wed Dec 15 19:19:06.581 2010 (GMT-5)
    System Uptime: 0 days 7:00:16.422
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ...............................
    Loading User Symbols
    Loading unloaded module list
    ..........
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck A, {3000000031ec, 2, 1, fffff80002c63d8e}
    
    Unable to load image \SystemRoot\system32\DRIVERS\eamon.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for eamon.sys
    *** ERROR: Module load completed but symbols could not be loaded for eamon.sys
    Probably caused by : eamon.sys ( eamon+5b07 )
    
    Followup: MachineOwner
    ---------
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 00003000000031ec, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000001, bitfield :
        bit 0 : value 0 = read operation, 1 = write operation
        bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: fffff80002c63d8e, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eb00e0
     00003000000031ec 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    nt!CcFlushCache+11e
    fffff800`02c63d8e ff87ec010000    inc     dword ptr [rdi+1ECh]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xA
    
    PROCESS_NAME:  VSSVC.exe
    
    TRAP_FRAME:  fffff88007379460 -- (.trap 0xfffff88007379460)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa8003c65748 rbx=0000000000000000 rcx=fffff880009e7840
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff80002c63d8e rsp=fffff880073795f0 rbp=fffff88007379728
     r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
    r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl zr na po nc
    nt!CcFlushCache+0x11e:
    fffff800`02c63d8e ff87ec010000    inc     dword ptr [rdi+1ECh] ds:9b48:00000000`000001ec=????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002c77ca9 to fffff80002c78740
    
    STACK_TEXT:  
    fffff880`07379318 fffff800`02c77ca9 : 00000000`0000000a 00003000`000031ec 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
    fffff880`07379320 fffff800`02c76920 : 00000000`00000000 fffff880`009e7180 fffffa80`024992a0 fffffa80`0294e060 : nt!KiBugCheckDispatch+0x69
    fffff880`07379460 fffff800`02c63d8e : fffff8a0`03419c00 fffff980`0e7d3108 fffff8a0`03419c70 fffff880`012ea961 : nt!KiPageFault+0x260
    fffff880`073795f0 fffff880`01301642 : fffffa80`03c65748 00000000`00000000 fffff8a0`00000000 00000000`00000001 : nt!CcFlushCache+0x11e
    fffff880`073796f0 fffff880`012b09e7 : 00000000`00000000 fffff8a0`07c3dc70 00000000`00000000 00000000`00000001 : Ntfs!NtfsFlushUserStream+0x92
    fffff880`07379770 fffff880`01301bbd : fffffa80`02e8b010 fffffa80`03718180 fffffa80`06085001 fffffa80`012ab100 : Ntfs!NtfsFlushVolume+0x2c7
    fffff880`073798a0 fffff880`013025f0 : fffffa80`02e8b010 fffffa80`054fd8c0 fffffa80`0561d720 00000000`00000000 : Ntfs!NtfsCommonFlushBuffers+0x459
    fffff880`07379980 fffff880`010c123f : fffffa80`054fdc60 fffffa80`054fd8c0 fffffa80`02e8b010 fffff880`073799a8 : Ntfs!NtfsFsdFlushBuffers+0x104
    fffff880`073799f0 fffff880`010bf6df : fffffa80`0349d040 fffffa80`0484d040 fffffa80`0349d000 fffffa80`054fd8c0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
    fffff880`07379a80 fffff880`03475b07 : fffffa80`054fd8c0 00000000`00000801 fffffa80`0294e060 00000000`0280f710 : fltmgr!FltpDispatch+0xcf
    fffff880`07379ae0 fffffa80`054fd8c0 : 00000000`00000801 fffffa80`0294e060 00000000`0280f710 00000000`00000000 : eamon+0x5b07
    fffff880`07379ae8 00000000`00000801 : fffffa80`0294e060 00000000`0280f710 00000000`00000000 fffffa80`0484d040 : 0xfffffa80`054fd8c0
    fffff880`07379af0 fffffa80`0294e060 : 00000000`0280f710 00000000`00000000 fffffa80`0484d040 fffffa80`054fd8c0 : 0x801
    fffff880`07379af8 00000000`0280f710 : 00000000`00000000 fffffa80`0484d040 fffffa80`054fd8c0 fffff800`02f8eca9 : 0xfffffa80`0294e060
    fffff880`07379b00 00000000`00000000 : fffffa80`0484d040 fffffa80`054fd8c0 fffff800`02f8eca9 00000000`00000002 : 0x280f710
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    eamon+5b07
    fffff880`03475b07 ??              ???
    
    SYMBOL_STACK_INDEX:  a
    
    SYMBOL_NAME:  eamon+5b07
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: eamon
    
    IMAGE_NAME:  eamon.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4ac1e6c3
    
    FAILURE_BUCKET_ID:  X64_0xA_eamon+5b07
    
    BUCKET_ID:  X64_0xA_eamon+5b07
    
    Followup: MachineOwner
    ---------
      My Computer


  3. Posts : 5
    Windows 7 Professional x64
    Thread Starter
       #3

    Alright, thanks a ton. I'll let you know if it happens again
      My Computer


  4. Posts : 11,990
    Windows 7 Ultimate 32 bit
       #4

    You are very welcome - and we will be here.:)
      My Computer


 

Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:08.
Find Us