BSOD epfw.sys

Drayton359 · 03 Jul 2010

I keep getting a BSOD listing epfw.sys as the cause.

I have ESET internet security, I have deleted this file and finally managed to delete ESET, had to delete in safe mode in the end as it kept saying I didn't have permission to delete eventhough I am an Admin.

Tried to re-install but got a BSOD in the middle of installing with epfw.sys as the cause again.

Have attached some minidumps, maybe something else is causing it.

Tews · 03 Jul 2010

Your .dmp file is indeed still pointing to epfw.sys (ESET Internet Security) as the cause of your crash... To completly remove ESET, download Revo Uninstaller and use that to remove ESET, then install MSE and see if this doesnt resolve your problem..
Be sure to turn Driver Verifier off...

Code:

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 000000000000054c, Handle value being referenced.
Arg3: fffffa8006a90b30, Address of the current process.
Arg4: fffff88009b9cce2, Address inside the driver that is performing the incorrect reference.

Debugging Details:
------------------


BUGCHECK_STR:  0xc4_f6

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP


FOLLOWUP_IP: 
epfw+17ce2
fffff880`09b9cce2 85c0            test    eax,eax

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  epfw+17ce2

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: epfw

IMAGE_NAME:  epfw.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4baa6441

FAILURE_BUCKET_ID:  X64_0xc4_f6_VRF_epfw+17ce2

BUCKET_ID:  X64_0xc4_f6_VRF_epfw+17ce2

Followup: MachineOwner
---------

These drivers are way out of date, and should be updated... ASACPI.sys is notorious for causing BSODs' in Windows 7!
Make sure that you have the latest version of Acronis installed..

Code:

 ASACPI   ASACPI.sys   Sun Mar 27 22:30:36 2005 (42476C4C)
 speedfan speedfan.sys Sun Sep 24 09:26:48 2006 (45168798)
 tifsfilt.sys Wed Aug 29 08:37:29 2007 (46D56889) Tifsfilt.sys is related to Acronis True Image software.   
timntr.sys   Wed Aug 29 08:38:23 2007 (46D568BF) TIMNTR.SYS is related to True Image Backup Archive Explorer (Server Edition).