Jump to content
An upgrade will take place on September 23, 2020 at 16:00 CEST (14:00 GMT). The Forum will not be accessible for a short period of time. ×

Archived

This topic is now archived and is closed to further replies.

MikeRigsby

Win10 x64 Version 2004 eamonm.sys BSOD Loop

Recommended Posts

The issue mentioned in these forum discussions listed below is happening again with the most recent Windows Enterprise x64 upgrade to Version 2004. I've already had to fix two systems this morning and likely going to have over a hundred more to deal with.

The "fix" is to boot the system into Safe Mode and use the esetuninstaller tool to remove ESET. You can, apparently since at the moment it seems to work, re-install it once Windows boots.

 

Share this post


Link to post
Share on other sites

My specifics here are that these systems having the issue are running ESET Endpoint Security version 7.2.

I'm hoping that pushing out the 7.3 update to the 200 remaining PCs before the users install Windows 10 v2004 that it will keep this from happening.

Share this post


Link to post
Share on other sites

I understand the need to always ask for memory dump files when issues arise but this is clearly a known issue already and it's the exact same issue as was mentioned in those earlier forum threads. I've attached the dump file for one of the two systems that I've had this issue on so far today.

I am currently in the process of installing the version 2004 update on my own work PC, which is already running EES 7.3, so once it finishes the long install process I'll see if I also have the same eamonm.sys BSOD.

My hope is that it is/was only happening on systems still running 7.2.

Memory Dumps.zip

Share this post


Link to post
Share on other sites

You have an old version of the eamonm.sys driver installed, it's from v7.2:

    Image path: \SystemRoot\system32\DRIVERS\eamonm.sys
    Image name: eamonm.sys
    Browse all global symbols  functions  data
    Timestamp:        Thu Oct  3 11:21:28 2019 (5D95BD98)

 

What ESET product and version is installed? Uninstall it, reboot the machine and install the latest v7.3.2036 from scratch. By the way it's weird that you were able to upgrade to Win10 2004 with Endpoint 7.2 since Microsoft doesn't allow it and upgrade to Endpoint 7.3 is currently required.

Share this post


Link to post
Share on other sites

Ok, I can now verify.

If the system is running ESET 7.3 before the Windows 10 2004 update is installed it seems to work fine. This is only happening on systems running 7.2.

I'm not sure how to to uninstall eamonm.sys 'from scratch' and reinstall it but I did totally uninstall ESET completely and reinstall on the affected PCs as part of my troubleshooting to discover this and the file version of eamonm.sys in EES 7.3 is still 10.14.32.0. So it doesn't seem like the version of the .sys file is what's causing this problem.

Share this post


Link to post
Share on other sites

FWIW, I see forums on Microsoft's Answers site dating clear back to 2016 of people having this exact same issue so this has been a problem for a long time.

Share this post


Link to post
Share on other sites

I meant uninstalling Endpoint 7.2 which was affected by this issue in certain system configurations and installing the latest Endpoint 7.3.2036. With Endpoint 7.2 it is not possible to update Windows 10 to v2004.

This issue was new in Endpoint 7.2 and was fixed in Endpoint 7.3.

Share this post


Link to post
Share on other sites

If we happen to not be updating everything as we should be, I'd definitely like to know.

Why is the most recent version of both the ESET server software and the client EES 7.3 still using eamonm.sys 10.x, or at the very least not replacing it with the newer version of eamonm.sys, if you're telling me that we need version 13.1? 

Is there some setting that we're missing that is keeping those files from being replaced during the updates?

Share this post


Link to post
Share on other sites

I'm not telling you to install a consumer product 13.1. It was a mistake and I amended the version number after I realized that you had Endpoint installed and not a consumer product.

The version of drivers doesn't tell anything about what version of products it's used with. You wrote that you had Endpoint v7.2 installed on some machines and the troublesome version of driver was included in it so I don't see any issue with the driver not updating during upgrade.

Share this post


Link to post
Share on other sites

391366927_Annotation2020-07-06111914.jpg.f015e8f5dd8d52cd30a3c6732e2423f2.jpg

I just installed EES 7.3 from scratch on a brand new PC that has never had ESET on it at all, brand new fresh Windows install, and the version of eamonm.sys is still 10.14.32, and even states that the product version is for 7.3.2026.0.

So if that version is only for 7.2, it seems like something is wrong on ESET's side of things.

Share this post


Link to post
Share on other sites

I'm not too worried about this, since I've already figured out the version issue before I even made this post. I mainly just wanted to bring this to ESET's attention and also for anyone else out there who might run into this issue again with this new Windows update.

Share this post


Link to post
Share on other sites
7 minutes ago, MikeRigsby said:

So if that version is only for 7.2, it seems like something is wrong on ESET's side of things.

I was talking about eamonm.sys installed on the machine on which the dump was generated:

image.png

Do you mean that you had Endpoint 7.3 on that machine and not Endpoint 7.2?

Share this post


Link to post
Share on other sites

Nope, it was definitely 7.2, which was totally the problem. I was confused when you said 'version 13.1' when the version for EES 7.3 is still 10.14.

Just a miscommunication.

I've pushed out the 7.3 update across our entire Enterprise so this shouldn't come up again, hopefully.

Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...