BSOD on shutdown/restart of windows 7 64 bit Dell PC - EbNDIS.sys

[skjom]

Have a BSOD on shutdown/restart of the PC where the bluescreen just flashes up on screen for about 4 seconds then goes away again i.e on restart the blue screen flashes up before the dell logo and system boots as normal- i have never seen a blue screen do this before. The blue screen never comes up during normal running of the pc just on shutdown/restart.

i am guessing the fault is with a network driver. I have two NIC on the PC- one internal NIC from Dell and one Intel Gigabit PCIe card. Disabling either one of the cards gets rid of the blue screen. Doesnt matter which is disabled as long as one is disabled so it doesnt appear isolated to one card more some form of conflict.

My real problem is i cannot update the driver for the PCIe card or replace it- it is attached to a camera and the driver and card are the only compatible version with the camera. I also do not have space to add a new NIC card and i need both NIC's to work so i need to somehow get rid of bluescreen without changing the PCIe NIC driver or disabling one of the cards. If it pointed to be an issue with the PCIe NIC hardware i could replace it with an exact card. I have re-installed windows but the issue remains.
Any help would be appreciated i cant find any info on "EbNDIS.sys"

 

[Arc]

Hello skjom, can you post it following the Blue Screen of Death (BSOD) Posting Instructions?

 

[skjom]

i do not have access to the pc in question for the next few days so i cannot execute SF_Diagnostic_Tool

 

[Arc]

OK, we may wait!

But this dump will be very interesting. Wish to see it!

 

[skjom]

updated with correct logs thanks

 

[Arc]

Well, let us see it.

► EbEDIS.sys ... your ethernet driver.

Name    [00000015] Ethernet Bus Network Interface Card
Driver    c:\windows\system32\drivers\ebndis.sys (2.3.2.1720, 70.50 KB (72,192 bytes), [COLOR=Red]20/07/2010[/COLOR] 14:00)

Update the driver, it is of 2010.

► TrendMicro.

BugCheck D1, {0, 2, 0, fffff8800614aa19}

*** WARNING: Unable to verify timestamp for EbNDIS.sys
*** ERROR: Module load completed but symbols could not be loaded for EbNDIS.sys
*** WARNING: Unable to verify timestamp for [B][COLOR=Red]tmlwf.sys[/COLOR][/B]
*** ERROR: Module load completed but symbols could not be loaded for tmlwf.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : EbNDIS.sys ( EbNDIS+3a19 )

Followup: MachineOwner
---------

Better you uninstall it.

► McAfee

Start Menu\Programs\McAfee

Uninstall it. Keeping it in the system, you will never be able to solve your crash problesm, specially if it is network related.

Well, a deep search indicates that McAfee is the direct cause of the crash.

fffff880`035cb518  fffff880`0180761eUnable to load image \SystemRoot\system32\drivers\mfetdik.sys, Win32 error 0n2
[COLOR=Red]*** WARNING: Unable to verify timestamp for mfetdik.sys
*** ERROR: Module load completed but symbols could not be loaded for mfetdik.sys
 mfetdik+0x761e[/COLOR]

Uninstall both TrendMicro and McAfee, use Microsoft Security Essentials - Microsoft Windows only.

Let us know the results.

 

[skjom]

thanks will uninstall trend micro,

had the issue before mcafee was installed- so it cant be causing it

i cant update the driver, the version in use needs to stay as its the only compatible version with the camera the networkcard is attached to.

 

[Arc]

thanks will uninstall trend micro,

had the issue before mcafee was installed- so it cant be causing it

i cant update the driver, the version in use needs to stay as its the only compatible version with the camera the networkcard is attached to.

I wish you best of your luck

 

[skjom]

removed trend micro and McAfree.
the issue still exists.
What i do notice is that if either one of the NIC adapters is disabled the issue goes away- it doesn't matter which as long as one of the adapters is disabled.

Is it possible that there is some conflict between the two devices? or is there some way of checking what interrupts they use and if there is a conflcit there?

 

[Arc]

Hello skjom, I an thinking that you need to update the Intel Storage drivers. It's way back old.

lmvm iastor
start             end                 module name
fffff880`01040000 fffff880`01194000   iaStor     (deferred)             
    Image path: \SystemRoot\system32\drivers\iaStor.sys
    [COLOR=Red]Image name: iaStor.sys
    Timestamp:        Sat Nov 06 13:14:52 2010[/COLOR] (4CD50774)
    CheckSum:         0007413F
    ImageSize:        00154000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Get it from http://downloadcenter.intel.com/SearchResult.aspx?lang=eng&keyword=%22Intel+Rapid+Storage+Technology+%28Intel+RST%29%22.

At one point I am totally clueless I have no idea what EbNdis may be ... but it is somehow any USB network adapter related that I can say.

lmvm EbNDIS
start             end                 module name
fffff880`06200000 fffff880`06218000   EbNDIS   T (no symbols)           
    Loaded symbol image file: EbNDIS.sys
    Image path: \SystemRoot\system32\DRIVERS\EbNDIS.sys
    [COLOR=Red]Image name: EbNDIS.sys
    Timestamp:        Tue Jul 20 23:30:45 2010 [/COLOR](4C45E44D)
    CheckSum:         00017D71
    ImageSize:        00018000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Among those two, you may select the stable one by a trial and error process .... In the mean time, I am seeking for more help, if anybody can say anything on EbNdis.sys.

* EDIT : Mate I am extremely sorry .... even a google search failed to locate anything other than your thread ... I dont know how can I help you there ....

Mind to do a virus scan?
http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html
If it helps anyhow?

** EDIT Again:

ebndis    Ethernet Bus Network Interface Card    c:\windows\system32\drivers\ebndis.sys    Kernel Driver

Is this one has anything to do with it?
http://www.dell.com/us/business/p/intel-pro1000-pf/pd
If so, downloads may be available here ....
http://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=18713

Have a look please?