Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

e1r63x64.sys BSOD


  • Please log in to reply
5 replies to this topic

#1 Ruben-e

Ruben-e

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:02:05 AM

Posted 23 July 2018 - 05:58 AM

On 21 July our Windows Server 2012 suffered a BSOD at random (nobody was accessing the server and nothing was scheduled to run on the server at that time)

 

http://speccy.piriform.com/results/jYvjO2jVWXd2KKUDCKtQQwR

 

Attached Files


Edited by Ruben-e, 23 July 2018 - 07:06 AM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,435 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:05 PM

Posted 23 July 2018 - 06:23 AM

BC BSODs Posting Instructions - http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

Louis



#3 dmccoy

dmccoy

  • BSOD Kernel Dump Expert
  • 1,195 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:05 PM

Posted 23 July 2018 - 01:25 PM

Looks like it is caused by Kaspersky driver. I recommend uninstalling and only use Windows Defender.

Probably caused by : klbackupdisk.sys ( klbackupdisk+2fb3 )

fffff880`0099daa0 fffffa80`00002f72 : fffffa80`00002000 00000000`00000000 fffffa80`2c1f4600 fffffa80`14df2e58 : klbackupdisk+0x2fb3

 Image name: klbackupdisk.sys
    Browse all global symbols  functions  data
    Timestamp:        Mon Dec  4 07:05:50 2017 (5A25644E)

We are all volunteers so please by kind, courteous and respectful

 

I try to respond in 24-48 hours normally and I am more active on weekdays than weekends. However, sometimes due to my health, family or life it may take me a little longer. If you have not heard from me within 72 hours then please PM me a reminder. 

 

BC BSOD Posting Instructions 


#4 Ruben-e

Ruben-e
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:02:05 AM

Posted 24 July 2018 - 06:43 AM

 

Looks like it is caused by Kaspersky driver. I recommend uninstalling and only use Windows Defender.

Probably caused by : klbackupdisk.sys ( klbackupdisk+2fb3 )

fffff880`0099daa0 fffffa80`00002f72 : fffffa80`00002000 00000000`00000000 fffffa80`2c1f4600 fffffa80`14df2e58 : klbackupdisk+0x2fb3

 Image name: klbackupdisk.sys
    Browse all global symbols  functions  data
    Timestamp:        Mon Dec  4 07:05:50 2017 (5A25644E)

 

We are running Kaspersky Endpoint Security and the Security Center is running from this server. Last year we got hacked and the hackers managed to get into this very server to execute ransomware network-wide through GPO. The server was then completely reloaded to ensure nothing was hiding in the background and since then we've had Kaspersky running on there.

 

I'll log a ticket with them to see if they can assist with diagnosing this BSOD.

 

Thank you for isolating the core of the BSOD.



#5 dmccoy

dmccoy

  • BSOD Kernel Dump Expert
  • 1,195 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:05 PM

Posted 26 July 2018 - 03:31 PM

You're welcome. Good luck and let us know if anything else.


We are all volunteers so please by kind, courteous and respectful

 

I try to respond in 24-48 hours normally and I am more active on weekdays than weekends. However, sometimes due to my health, family or life it may take me a little longer. If you have not heard from me within 72 hours then please PM me a reminder. 

 

BC BSOD Posting Instructions 


#6 jcgriff2

jcgriff2

  • BSOD Kernel Dump Expert
  • 1,109 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey Shore
  • Local time:08:05 PM

Posted 27 July 2018 - 09:05 PM

Where did "e1r63x64.sys" come from in the thread title?

I am nearly 100% positive that it is an Intel Ethernet driver. It would be listed as Intel or possibly under your system manufacturer's name because you're running a server.

If it is listed as Intel (see below), go to Intel and download/install the latest version of that driver.

https://downloadcenter.intel.com/

Otherwise, go to your system manufacturer's support site and check for updates.

To find out the exact name of the Intel device, click on WIN key; type cmd.exe; RIGHT-click on cmd.exe or Command Prompt; select "Run as Administrator"

In the CMD screen, type or copy/paste the command: systeminfo - it will take a minute or two to run. At the end of the run, it will list your NICs. Disregard the ones that say "Status: Media disconnected"; look for Intel or system manufacturer name.

Regards. . .

jcgriff2

Edited by jcgriff2, 27 July 2018 - 09:19 PM.

Microsoft MVP 2009-2015
Microsoft Windows Insider MVP 2018 - Present




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users