BSOD 0x0000003b

Constant BSOD for a few days now (happen randomly w/o any notification). Tried from changing antivirus (Avast->Avira), cleaning graphic drivers, sfc scans and repairs, partition defragmentation,...

I attached latest dump file.

Thank you for your time and help!

Hi Marjomire123.

You have Entrust Entelligence Security Provider which is causing the BSOD. It looks like an old version (4 years old, I am not very aware of their update policy).

Try to get an update to the latest. If no update is possible, I will suggest you to uninstall it.

Let us know the results.
___________________________________________

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80003f638f5, fffff8800ae32a70, 0}

*** WARNING: Unable to verify timestamp for eetd64.sys
*** ERROR: Module load completed but symbols could not be loaded for eetd64.sys
Probably caused by : eetd64.sys ( eetd64+16ac )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80003f638f5, Address of the instruction which caused the bugcheck
Arg3: fffff8800ae32a70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!RtlCompareUnicodeStrings+a5
fffff800`03f638f5 430fb70c11      movzx   ecx,word ptr [r9+r10]

CONTEXT:  fffff8800ae32a70 -- (.cxr 0xfffff8800ae32a70;r)
rax=000000000000005c rbx=0000000000000047 rcx=fffff8a01bac6a80
rdx=0000000000000047 rsi=0000000000000001 rdi=0000000000000047
rip=fffff80003f638f5 rsp=fffff8800ae33458 rbp=fffffa8003ee08b0
 r8=0000000000000000  r9=0000075fe4539580 r10=fffff8a01bac6a80
r11=fffff8a01bac6b0e r12=fffff8800ae33598 r13=fffffa8003ee0800
r14=fffff88000c3da00 r15=0000000000000000
iopl=0         nv up ei pl nz na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010203
nt!RtlCompareUnicodeStrings+0xa5:
fffff800`03f638f5 430fb70c11      movzx   ecx,word ptr [r9+r10] ds:002b:00000000`00000000=????
Last set context:
rax=000000000000005c rbx=0000000000000047 rcx=fffff8a01bac6a80
rdx=0000000000000047 rsi=0000000000000001 rdi=0000000000000047
rip=fffff80003f638f5 rsp=fffff8800ae33458 rbp=fffffa8003ee08b0
 r8=0000000000000000  r9=0000075fe4539580 r10=fffff8a01bac6a80
r11=fffff8a01bac6b0e r12=fffff8800ae33598 r13=fffffa8003ee0800
r14=fffff88000c3da00 r15=0000000000000000
iopl=0         nv up ei pl nz na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010203
nt!RtlCompareUnicodeStrings+0xa5:
fffff800`03f638f5 430fb70c11      movzx   ecx,word ptr [r9+r10] ds:002b:00000000`00000000=????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  Avira.OE.Servi

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre

LAST_CONTROL_TRANSFER:  from fffff80003f2888a to fffff80003f638f5

STACK_TEXT:  
fffff880`0ae33458 fffff800`03f2888a : fffff8a0`1bac6a00 00000000`00000001 fffff8a0`15a44c70 fffff880`0ae33560 : nt!RtlCompareUnicodeStrings+0xa5
fffff880`0ae33460 fffff880`06ff36ac : 00000000`00000000 fffff8a0`1bac6a00 fffffa80`03ee08b0 00000000`00000001 : nt!RtlCompareUnicodeString+0x26
fffff880`0ae334a0 00000000`00000000 : fffff8a0`1bac6a00 fffffa80`03ee08b0 00000000`00000001 00000000`00000000 : eetd64+0x16ac


FOLLOWUP_IP: 
eetd64+16ac
fffff880`06ff36ac ??              ???

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  eetd64+16ac

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: eetd64

IMAGE_NAME:  eetd64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4b750ba8

STACK_COMMAND:  .cxr 0xfffff8800ae32a70 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_eetd64+16ac

BUCKET_ID:  X64_0x3B_eetd64+16ac

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x3b_eetd64+16ac

FAILURE_ID_HASH:  {240dd93d-a857-4e02-8cf8-3e770587a560}

Followup: MachineOwner
---------

0: kd> lmvm eetd64
start             end                 module name
fffff880`06ff2000 fffff880`06ffd000   eetd64   T (no symbols)           
    Loaded symbol image file: eetd64.sys
    Image path: eetd64.sys
    Image name: eetd64.sys
    Timestamp:        Fri Feb 12 13:34:56 2010 (4B750BA8)
    CheckSum:         00008C78
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4