Easy Anti-Cheat still causing BSODs

[willy bammy]

Ever since the recent easy anti cheat update I keep getting BSODs at random when trying to launch the game.
It will try initializing easy anti cheat, then fail with error code 30004. about 10 seconds after it fails, my computer will BSOD. The blue screen shows the stop code is KERNEL_SECURITY_CHECK_FAILURE

The last time I ran the game (earlier) I was anticipating it would do this, so I copied the error details provided by EAC:
ProductId: 308527832 (32bit)
Windows Version: 10.0 (Build 19045)
Error Code: 30004
Process Exit Code: 0h
UUID: 4080486c-c0c8-f261-4913-a0be8935fa2f
Followed by an extremely long process list

I've checked the DMP file generated by the bsod, stating:
"KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine."

As well as pointing to Easy Anti Cheat as the culprit:
"SYMBOL_NAME: EasyAntiCheat_EOS+2bff7

MODULE_NAME: EasyAntiCheat_EOS

IMAGE_NAME: EasyAntiCheat_EOS.sys

STACK_COMMAND: .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET: 2bff7

FAILURE_BUCKET_ID: 0x139_MISSING_GSFRAME_EasyAntiCheat_EOS!unknown_function"

Before this last crash I had tried both repairing & uninstalling/reinstalling EAC, as well as updating graphics drivers. Neither worked.

This time I've tried repairing system files with sfc /scannow, with it stating corrupted files were repaired, but checking the details of the process suggest that it repaired a file related to Microsoft One Drive (I have been constantly getting notifs asking me to log in again, maybe thats it) so likely unrelated

Not sure what else to try doing to fix this. I would like to play one of my favorite games again without taking a gamble on if my PC will crash or not

[potato]

it's probably this

https://signmycode.com/resources/how-to-enable-kernel-mode-hardware-enforced-stack-protection-in-windows-11

eac doesn't play well with core isolation

[willy bammy]

Originally posted by potato:

it's probably this

https://signmycode.com/resources/how-to-enable-kernel-mode-hardware-enforced-stack-protection-in-windows-11

eac doesn't play well with core isolation

does this all apply to windows 10, I've never even heard of this so I'm not sure if I even have this on or not

[potato]

Originally posted by brony joprano:

does this all apply to windows 10, I've never even heard of this so I'm not sure if I even have this on or not

it should be in win10 too as it was part of a big update to windows last year

it was turned on by default on update

https://www.ninjaone.com/blog/how-to-enable-and-disable-kernel-mode/

A 64-bit processor with Control-flow Enforcement Technology (Intel CET).
Windows 10 version 20H1, or Windows 11 version 22H2.

[willy bammy]

Following the instructions in your link, there isn't a section named "Kernel-Mode Hardware-enforced Stack Protection" but there is a toggle for "Memory Integrity" which is turned off. I cannot turn it on. The conflicting driver preventing me from doing it "xusb21.sys"

I've had this driver since the computer was built, it is likely related to my adapter for my wireless xbox controller. So I imagine I've never had this mode turned on, then

edit: I've just tried finding xusb21.sys using System Information and it could not be found

[willy bammy]

my adapter actually doesn't use xusb21.sys, checking its driver details in device manager states ts driver is xusb22.sys

[potato]

i dunno then

maybe someone else can help you

good luck

[dark-breed]

did you tried a clean reinstall of EAC with delete all registry entries ?

delete the 'EasyAntiCheat_EOS' folder in C:\Program Files (x86)

then Use Registry Editor to delete all keys and values that had 'EasyAntiCheat_EOS' to do this search up "REGEDIT" in search.
right-click on HKEY_LOCAL_MACHINE > Find and look up the term EasyAntiCheat_EOS and delete any you can find by search again.

then go into elden ring's game files in the installation folder and navigate to easy anti cheat, and click on the install_easyanticheat_eos_setup

a prompt will pop up and hit enter

[willy bammy]

Originally posted by dark-breed:

did you tried a clean reinstall of EAC with delete all registry entries ?

delete the 'EasyAntiCheat_EOS' folder in C:\Program Files (x86)

then Use Registry Editor to delete all keys and values that had 'EasyAntiCheat_EOS' to do this search up "REGEDIT" in search.
right-click on HKEY_LOCAL_MACHINE > Find and look up the term EasyAntiCheat_EOS and delete any you can find by search again.

then go into elden ring's game files in the installation folder and navigate to easy anti cheat, and click on the install_easyanticheat_eos_setup

a prompt will pop up and hit enter

I tried reinstalling easy anti cheat once before, going into the files and deleting it. I will try it again the way that you have mentioned here, since I didn't do anything in regedit when uninstalling it

Currently I am trying to figure out as well what's going on with xusb21.sys, since that driver seemingly doesn't exist on my machine yet is causing conflicts with memory integrity

[dark-breed]

Originally posted by brony joprano:

Originally posted by dark-breed:

did you tried a clean reinstall of EAC with delete all registry entries ?

delete the 'EasyAntiCheat_EOS' folder in C:\Program Files (x86)

then Use Registry Editor to delete all keys and values that had 'EasyAntiCheat_EOS' to do this search up "REGEDIT" in search.
right-click on HKEY_LOCAL_MACHINE > Find and look up the term EasyAntiCheat_EOS and delete any you can find by search again.

then go into elden ring's game files in the installation folder and navigate to easy anti cheat, and click on the install_easyanticheat_eos_setup

a prompt will pop up and hit enter

I tried reinstalling easy anti cheat once before, going into the files and deleting it. I will try it again the way that you have mentioned here, since I didn't do anything in regedit when uninstalling it

Currently I am trying to figure out as well what's going on with xusb21.sys, since that driver seemingly doesn't exist on my machine yet is causing conflicts with memory integrity

xusb21.sys is a older driver for the xbox wireless hub, windows does not forget if a update exchanged it by xusb22.sys the old driver and his registry entries will be part of the system for ever. you could boot into safe mode delete the old driver file (xusb21.sys) manually and remove the registry entries related to it.

it is also possible that it is packed into the xusb22.sys as hidden device.

you could check this too

Open Command Prompt as Administrator.

Run the command:

sc.exe qc xusb21

In the output, if the BINARY_PATH_NAME reads xusb21.sys, then run this command to delete the driver:

sc.exe delete xusb21

Reboot if required. Then make sure the file xusb21.sys does not exist in C:\Windows\System32\Drivers.

[willy bammy]

Originally posted by dark-breed:

Originally posted by brony joprano:

I tried reinstalling easy anti cheat once before, going into the files and deleting it. I will try it again the way that you have mentioned here, since I didn't do anything in regedit when uninstalling it

Currently I am trying to figure out as well what's going on with xusb21.sys, since that driver seemingly doesn't exist on my machine yet is causing conflicts with memory integrity

xusb21.sys is a older driver for the xbox wireless hub, windows does not forget if a update exchanged it by xusb22.sys the old driver and his registry entries will be part of the system for ever. you could boot into safe mode delete the old driver file (xusb21.sys) manually and remove the registry entries related to it.

it is also possible that it is packed into the xusb22.sys as hidden device.

I was able to locate xusb21.sys using the publisher name. I used the command line to get a list of drivers and it appeared there, simply uninstalled it and now memory integrity can be turned on

Going to still delete EAC and reinstall it

Originally posted by dark-breed:

Reboot if required. Then make sure the file xusb21.sys does not exist in C:\Windows\System32\Drivers.

it was never in that folder anyway, I had looked there. Everywhere I could've looked for drivers, it was missing. I found it running dism /online /get-drivers /format:table​

[CazadorDeLobo]

There is potential a chkdsk run is required on the game drive after a crash that corrupted files. Look into how to do this with command prompt while in Windows; doing this with the Advanced Startup troubleshooting option will require you to check the labels match the drive you're trying to repair, since it labels based on hardware order(longer explanation exists).

Also try "dism /online /cleanup-image /restore-health" instead of "sfc /scannow" for a more thorough repair process

[willy bammy]

Originally posted by CazadorDeLobo:

There is potential a chkdsk run is required on the game drive after a crash that corrupted files. Look into how to do this with command prompt while in Windows; doing this with the Advanced Startup troubleshooting option will require you to check the labels match the drive you're trying to repair, since it labels based on hardware order(longer explanation exists).

Also try "dism /online /cleanup-image /restore-health" instead of "sfc /scannow" for a more thorough repair process

I'll try a chkdsk when I can. And I did run that command before I did sfc /scannow earlier, just forgot to mention

[CazadorDeLobo]

Originally posted by brony joprano:

Originally posted by CazadorDeLobo:

There is potential a chkdsk run is required on the game drive after a crash that corrupted files. Look into how to do this with command prompt while in Windows; doing this with the Advanced Startup troubleshooting option will require you to check the labels match the drive you're trying to repair, since it labels based on hardware order(longer explanation exists).

Also try "dism /online /cleanup-image /restore-health" instead of "sfc /scannow" for a more thorough repair process

I'll try a chkdsk when I can. And I did run that command before I did sfc /scannow earlier, just forgot to mention

I had to do it after trying to play ER shortly after launch because boy was it not ready for PC

[willy bammy]

Originally posted by dark-breed:

right-click on HKEY_LOCAL_MACHINE > Find and look up the term EasyAntiCheat_EOS and delete any you can find by search again.

I'm in the process of doing this currently, should I also get rid of anything labeled just EasyAntiCheat or does not matter

[dark-breed]

Originally posted by brony joprano:

Originally posted by dark-breed:

right-click on HKEY_LOCAL_MACHINE > Find and look up the term EasyAntiCheat_EOS and delete any you can find by search again.

I'm in the process of doing this currently, should I also get rid of anything labeled just EasyAntiCheat or does not matter

you can remove any registry key that contain this string EasyAntiCheat_EOS the strings with only EasyAntiCheat are related to the epic launcher

just to make clear what has to be removed

https://www.youtube.com/watch?v=CxPbHb3Xacs