Blue screen - driver overrun stack buffer - ntoskrnl.exe

By sagarkawna
Apr 2, 2010
  1. On viewing the minidump file it is seen that
    1. Bug check string: Driver overran stack buffer
    2. Bug check code: 0x000000f7
    3. Caused by driver: Zvonline.sys
    4.drivers in stack: Ntoskrnl.exe & zvonline.sys(this is my antivirus file net protector)

    i have attached minidump file
    kindly help

    Attached Files:

  2. Route44

    Route44 TechSpot Ambassador Posts: 11,984   +72


    This indicates that a driver has overrun a stack-based buffer.
    Parameter. A driver overran a stack-based buffer (or local variable) in a way that would have overwritten the function's return address and jumped back to an arbitrary address when the function returned. Basically the driver overran its local variable.

    This is the classic "buffer overrun" hacking attack. The system has been brought down to prevent a malicious user from gaining complete control of it.

    Generally this is a bad driver causing this type of error. Check to see in what programs you are getting this error. Also take a look in your event viewer for any problems. You just need to trace this down to what software is causing the problem.

    As per your minidump plus what you already listed as "Caused by" is the driver Zvonline.sys. Either a) Update your antivirus or b) uninstall and reinstall said antivirus.

    By the way, what antivirus are you running?
  3. sagarkawna

    sagarkawna TS Rookie Topic Starter

    i have done the uninstall and install of antivirus but it does not work

    I dont no what is ntoskrnl.exe it is also associated with this crash along with zvonline.exe

    kindly help
  4. Route44

    Route44 TechSpot Ambassador Posts: 11,984   +72

    ntoskrnl.exe is a core Windows Operating System driver. In the case of OS drivers they are usuaslly too general to be of much help and they function more as stating there is a problem rather than being the problem themselves. Don't concern yourself with ntoskrnl.exe because that is not your issue.

    Your isssue is the driver Zvonline.sys and the software it belongs to. Did you attempt to follow the advice given to you in my previous post? What antivirus are you running?
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...