MikeRigsby 0 Posted July 6, 2020 Share Posted July 6, 2020 The issue mentioned in these forum discussions listed below is happening again with the most recent Windows Enterprise x64 upgrade to Version 2004. I've already had to fix two systems this morning and likely going to have over a hundred more to deal with. The "fix" is to boot the system into Safe Mode and use the esetuninstaller tool to remove ESET. You can, apparently since at the moment it seems to work, re-install it once Windows boots. Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 My specifics here are that these systems having the issue are running ESET Endpoint Security version 7.2. I'm hoping that pushing out the 7.3 update to the 200 remaining PCs before the users install Windows 10 v2004 that it will keep this from happening. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,069 Posted July 6, 2020 Administrators Share Posted July 6, 2020 Please provide a kernel or complete memory dump from the crash. For information how to configure Windows to generate complete memory dumps, please read https://support.eset.com/en/kb380-how-do-i-generate-a-memory-dump-manually. Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 I understand the need to always ask for memory dump files when issues arise but this is clearly a known issue already and it's the exact same issue as was mentioned in those earlier forum threads. I've attached the dump file for one of the two systems that I've had this issue on so far today. I am currently in the process of installing the version 2004 update on my own work PC, which is already running EES 7.3, so once it finishes the long install process I'll see if I also have the same eamonm.sys BSOD. My hope is that it is/was only happening on systems still running 7.2. Memory Dumps.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 5,069 Posted July 6, 2020 Administrators Share Posted July 6, 2020 You have an old version of the eamonm.sys driver installed, it's from v7.2: Image path: \SystemRoot\system32\DRIVERS\eamonm.sys Image name: eamonm.sys Browse all global symbols functions data Timestamp: Thu Oct 3 11:21:28 2019 (5D95BD98) What ESET product and version is installed? Uninstall it, reboot the machine and install the latest v7.3.2036 from scratch. By the way it's weird that you were able to upgrade to Win10 2004 with Endpoint 7.2 since Microsoft doesn't allow it and upgrade to Endpoint 7.3 is currently required. Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 Ok, I can now verify. If the system is running ESET 7.3 before the Windows 10 2004 update is installed it seems to work fine. This is only happening on systems running 7.2. I'm not sure how to to uninstall eamonm.sys 'from scratch' and reinstall it but I did totally uninstall ESET completely and reinstall on the affected PCs as part of my troubleshooting to discover this and the file version of eamonm.sys in EES 7.3 is still 10.14.32.0. So it doesn't seem like the version of the .sys file is what's causing this problem. Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 FWIW, I see forums on Microsoft's Answers site dating clear back to 2016 of people having this exact same issue so this has been a problem for a long time. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,069 Posted July 6, 2020 Administrators Share Posted July 6, 2020 I meant uninstalling Endpoint 7.2 which was affected by this issue in certain system configurations and installing the latest Endpoint 7.3.2036. With Endpoint 7.2 it is not possible to update Windows 10 to v2004. This issue was new in Endpoint 7.2 and was fixed in Endpoint 7.3. Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 If we happen to not be updating everything as we should be, I'd definitely like to know. Why is the most recent version of both the ESET server software and the client EES 7.3 still using eamonm.sys 10.x, or at the very least not replacing it with the newer version of eamonm.sys, if you're telling me that we need version 13.1? Is there some setting that we're missing that is keeping those files from being replaced during the updates? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,069 Posted July 6, 2020 Administrators Share Posted July 6, 2020 I'm not telling you to install a consumer product 13.1. It was a mistake and I amended the version number after I realized that you had Endpoint installed and not a consumer product. The version of drivers doesn't tell anything about what version of products it's used with. You wrote that you had Endpoint v7.2 installed on some machines and the troublesome version of driver was included in it so I don't see any issue with the driver not updating during upgrade. MikeRigsby 1 Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 I just installed EES 7.3 from scratch on a brand new PC that has never had ESET on it at all, brand new fresh Windows install, and the version of eamonm.sys is still 10.14.32, and even states that the product version is for 7.3.2026.0. So if that version is only for 7.2, it seems like something is wrong on ESET's side of things. Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 I'm not too worried about this, since I've already figured out the version issue before I even made this post. I mainly just wanted to bring this to ESET's attention and also for anyone else out there who might run into this issue again with this new Windows update. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,069 Posted July 6, 2020 Administrators Share Posted July 6, 2020 7 minutes ago, MikeRigsby said: So if that version is only for 7.2, it seems like something is wrong on ESET's side of things. I was talking about eamonm.sys installed on the machine on which the dump was generated: Do you mean that you had Endpoint 7.3 on that machine and not Endpoint 7.2? Link to comment Share on other sites More sharing options...
MikeRigsby 0 Posted July 6, 2020 Author Share Posted July 6, 2020 Nope, it was definitely 7.2, which was totally the problem. I was confused when you said 'version 13.1' when the version for EES 7.3 is still 10.14. Just a miscommunication. I've pushed out the 7.3 update across our entire Enterprise so this shouldn't come up again, hopefully. Link to comment Share on other sites More sharing options...
Recommended Posts