Sign in to follow this  
KaiFrost

Install of EMISoft antivirus has resulted in endless blue screen of death reboot cycle.

Recommended Posts

Hi there, 

 
I'm running latest fully patched Windows 10 on a "Samsung Book S"
 
I signed up for EMIsoft antivirus protection last night and downloaded the installer from the main web page. I followed the instructions and installed the software as per the instructions. 
 
The initial install went find and then a popup told me that I needed to reboot my system to install the core protections. I did this and on reboot It booted into a blue screen of death with the message "inaccessible boot device". It then proceeds to go into a reboot cycle saying this every time and sometimes "repair device". When I chose repair it says it's unable to diagnose the problem and reboots into the blue screen again. 
 
I am worried that this have something to do with the ARM processor in the new Samsung Book S and you haven't got code to support it in your installer. If this is the case the installer really should detect windows ARM and not proceed. 
 
Any help or support you could provide to help me rescue my PC would be great... At the moment I'm looking at a full reinstall and losing all my data.

Regards, Kai

Share this post


Link to post
Share on other sites
On 3/26/2020 at 8:50 PM, KaiFrost said:

I am worried that this have something to do with the ARM processor in the new Samsung Book S and you haven't got code to support it in your installer.

That's correct, Emsisoft Anti-Malware is only compatible with Intel x86 based processors or AMD64/Intel EM64T based processors.

The reason for the BSoD on startup is due to a disk filter driver that is crashing. When the disk filter driver isn't running, Windows can't read from the hard drive. You should be able to fix it by booting into the Recovery Mode and open a Command Prompt (I would believe it is in the "Troubleshooting" category). Once you're there, run regedit, and try the following:

1. Click on "HKEY_LOCAL_MACHINE" to select it.
2. Click on 'File' and select "Load Hive".
3. Load the system registry hive from the offline installation of Windows. The path should be as follows (note that the C drive should be the Recovery Environment, and the D drive should be the offline installation of Windows):
-- D:\Windows\System32\config\SYSTEM
4. Give it a name that's easy to find ("Offline-System" for instance).
5. If it wasn't expanded automatically, then expand "HKEY_LOCAL_MACHINE" and select the offline system registry hive you loaded.
6. Navigate to the following subkey (when you get to 'Classes' you can click on one of the subkeys, and then type out "{4d" to quickly jump to the fist entry that begins with that characters, and then use the down arrow on the keyboard to scroll through them until you find one that has an entry in the list on the right for 'Class' that has a value of 'DiskDrive' like in the screenshot at the bottom of my e-mail):
-- ...\ControlSet001\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}
7. Once you have the correct subkey selected, look in the list on the right for 'UpperFilters' (it's on the bottom of the list in my screenshot).
8. If the value for UpperFilters contains "eppdisk" like in my screenshot, then please try double-clicking on UpperFilters, and remove the line that says "eppdisk". If it does not, then skip steps #8 and #9, and let me know what it says (also see note below instructions).
9. Click 'OK' to save your changes. Regedit will display a warning message, however this does not mean that anything went wrong (it always displays this warning when editing this registry value).
10. Click in the list on the left again, and tap the left arrow key until it collapses everything except "HKEY_LOCAL_MACHINE".
11. Click on your imported offline system registry hive to select it.
12. Click on 'File', and select "Unload Hive".
13. Close regedit.
14. Type 'exit' into the Command Prompt, and this should shut off the computer.
15. Try starting the computer normally.

Note: You can export the {4D36E967-E325-11CE-BFC1-08002BE10318} registry key while the offline system hive is still loaded and send me the saved five if you would like. Simply right-click on a registry key (these are in the list on the left) and select 'Export' from the menu, and be sure to save it somewhere on the D drive (or on removable media if you have some available). Sending us the export of the registry key will help us to determine what's going on.

Regedit_Finding_UpperFilters_Screenshot.png
Download Image

Edited by GT500
Fixed drive letters that the forums converted into smiley faces...
  • Like 1

Share this post


Link to post
Share on other sites

Arthur, to prevent this from happening again, the installer should check what processor the device has. The installer should have not ran at all or should have shown an incompatibility warning in this case.

Share this post


Link to post
Share on other sites
3 hours ago, grayskull said:

Arthur, to prevent this from happening again, the installer should check what processor the device has.

The issue was already reported to QA before this topic was posted, and I'm sure that it will be resolved as soon possible.

Of course we also need to give those who have already run into this issue a way to repair their computers without needing to reinstall Windows or hire a tech to do it for them. ;)

Share this post


Link to post
Share on other sites
On 3/28/2020 at 2:19 PM, GT500 said:

The issue was already reported to QA before this topic was posted, and I'm sure that it will be resolved as soon possible.

Of course we also need to give those who have already run into this issue a way to repair their computers without needing to reinstall Windows or hire a tech to do it for them. ;)

Indeed! I ended up having to re-install because I needed my laptop back before the above fix came to light. But I super appreciate that fact that EMISoft found a fix and posted it for others so they won't have the same issue I did.. great work guys!

Share this post


Link to post
Share on other sites
7 hours ago, KaiFrost said:

But I super appreciate that fact that EMISoft found a fix and posted it for others so they won't have the same issue I did..

Although in retrospect it might have been nice if the forums hadn't converted the drive letters in the instructions into smiley faces. :rolleyes:

I'll see if I can fix it in case anyone needs the instructions.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.