BSOD And Shutdown During Norton Virus Scan [Dump Data]

BSOD And Shutdown During Norton Virus Scan

Hi,
I have not been able to complete a Norton Virus Scan(part of SystemWorks
2005)for a couple of months, except once last week. Now the computer is
shutting down again during the virus scan. First the BSOD then shutdown.
Due to time constraints it is difficult for me to sit and wait for this to happen
during a scan. I have seen the BSOD once.

This only occurs during a virus scan(manual or scheduled). The computer
will run for hours and hours with no problem.Norton Autoupdates is working
and Win Autoupdates are working.

The computer was shutting down this way even though Startup and Recovery
Automatically Restart was checked. No restart.

The Event Log does not show an error during the time the computer shutdown
occurs.

System Info: Fujitsu NSeries Lifebook XP Home, 512MB RAM

I did a search for this problem but did not find this specific one.
If this is not the correct forum please let me know or move it to
the correct one.

Thanks,
Gary in Oregon

 

BSOD And Shutdown During Norton Virus Scan

Hi,
Crister, Thanks for your reply.
I have followed your advice and here are the results.
Although I had already set the computer to not restart automatically,
I did look at this setting to make sure it was unchecked. Also
I have downloaded and installed the debugging tools from Microsoft
and downloaded, saved, and run debugwiz.zip. See below for failure
to find any .dmp files that are current.

The computer still shuts down during the virus scan.
This time, no BSOD, only shutdown to a Black screen
with no error message. I tried this twice with a restart
and got the same sudden shutdown while halfway through
the virus scan and black screen only.

Although the computer is set to memory dump (and I did check to
make sure in the Write to system log settings ) it does not appear
to be writing a dump file. The file to write to is listed as
%systemroot%\minidump and I am not able to find this with
a search for the exact name above or by using *.dmp as a file name
to search by on C:\ . The only .dmp files it finds are in C:\Windows\
Minidump and they are 5 months old.

The Event Viewer shows three errors with times in the following proximity
to the virus scan running or shutting down. The first occurs about 3 minutes
after the virus scan started. The second about halfway through before it shut
down, and the third about 4 minutes prior to shutdown.
The errors are all the same and here is the text from the Event Viewer.

Source ACPIEC Event 1 User NA
\Device\ACPIEC: The embedded controller (EC) hardware didn't respond within the timeout period. This may indicate an error in the EC hardware or firmware, or possibly a poorly designed BIOS which accesses the EC in an unsafe manner. The EC driver will retry the failed transaction if possible.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I think that is all the info I can give at this point.

Thanks for any advice.

Gary

 

Could this be an 'overheating' problem? Is the laptop getting proper air circulation while the a/v scan is running?

B

 

BSOD And Shutdown During Norton Virus Scan

Hi Mr. B and thanks for your reply.

It might be an overheating problem as the laptop does
get pretty warm. I have propped it up in the past to allow
more circulation underneath. But this didn't seem to make
any difference in the sudden shutdown. I will try it again
with more airspace underneath.

Wonder why it can run all day though and not shut down.
But running the virus scan, it shuts down everytime but
once.

Also wondering, why no memory dumps or error reporting except
as I noted in my last post.

Still workin' on it....

Gary

 

Gary,

Virus scan is 'processor intensive'... more work = more heat.

Symantec stuff is very resource hungry, when time to renew may want to consider a different a/v program. I used Symantec a/v for years, switched to NOD32 a couple of years ago and love it.

B

 

BSOD And Shutdown During Norton Virus Scan

Hi Again, Mr. B

I have run the virus scan with the computer propped up to almost
2" of airspace all around. Although the computer is noticably cooler,
same result. Almost to the minute, 30 minutes of scan time and
sudden shutdown. No BSOD, just shutdown to black screen.

No events in event log during the scan time, no .dmp files found
searching C:\ to include hidden files.

Hmmmmmm

I appreciate your advise on the a/v scan. Will look into it when it
is time to renew. In the meantime...

Still workin' on it...
Gary in Oregon

 

Gary,

Sorry I wasn't more help... if I get any other ideas, I will post back. Have you checked the Fujitsu website to see if there is any information about this problem?

B

 

BSOD And Shutdown During Norton Virus Scan

Thanks Mr. B and Christer for your efforts.
I really appreciate the info.

Christer, interesting Google results. I am checking them
out. I have looked at the Fujitsu site and there does not
seem to be a driver update for ACPI.

I guess this isn't a BSOD issue so I will change the title next
time I post.

Please, though, if you think of anything else, post here or email
at Removed by moderator for your security

All responses on the Board, please.

Still workin' on it.....

See ya,
Gary

 

Hi,
Below is the Dump Data from my BSOD minidump. .

-Is there a way to lengthen the time the BSOD stays on the screen ?

Thanks for any continued advice on this !
Gary
......................
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini052506-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Thu May 25 08:34:37.698 2006 (GMT-7)
System Uptime: 0 days 0:46:55.274
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {4020053, ff, 0, 804e35e9}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
Probably caused by : SYMEVENT.SYS ( SYMEVENT!SYMEvent_GetVMDataPtr+86a4 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 04020053, memory referenced
Arg2: 000000ff, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 804e35e9, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 04020053

CURRENT_IRQL: ff

FAULTING_IP:
nt!ExAcquireResourceExclusiveLite+36
804e35e9 66837e0c00 cmp word ptr [esi+0xc],0x0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from f85f3df2 to 804e35e9

STACK_TEXT:
f8b87260 f85f3df2 04020047 00000001 00000001 nt!ExAcquireResourceExclusiveLite+0x36
f8b872dc f85f3dc9 fc6afc98 82f2e100 00000001 Ntfs!NtfsFlushVolume+0xfa
f8b8737c f85e7385 fc6afc98 fb52d008 f8b80000 Ntfs!NtfsCommonVolumeOpen+0x341
f8b87454 804e37f7 82f2e020 fb52d008 82e87678 Ntfs!NtfsFsdCreate+0x154
f8b87464 f8657876 804e8a39 82f85580 00000000 nt!IopfCallDriver+0x31
f8b874b0 804e37f7 82f2fcc8 00000001 f8b87508 sr!SrCreate+0x150
f8b874c0 f0023084 00000000 f8b87508 82bbb240 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f8b87614 8056316c 82f2c9e0 00000000 82db1008 SYMEVENT!SYMEvent_GetVMDataPtr+0x86a4
f8b8769c 8056729a 00000000 f8b876dc 00000240 nt!ObpLookupObjectName+0x56a
f8b876f0 80570b73 00000000 00000000 fca7f800 nt!ObOpenObjectByName+0xeb
f8b8776c 80570c42 f8b87910 00100003 f8b878f8 nt!IopCreateFile+0x407
f8b877c8 80570d78 f8b87910 00100003 f8b878f8 nt!IoCreateFile+0x8e
f8b87808 804de7ec f8b87910 00100003 f8b878f8 nt!NtCreateFile+0x30
f8b87808 804dc9b1 f8b87910 00100003 f8b878f8 nt!KiFastCallEntry+0xf8
f8b878ac 8062a156 f8b87910 00100003 f8b878f8 nt!ZwCreateFile+0x11
f8b87b18 8062a2fe f8b87b30 00000000 001f0003 nt!PopFlushVolumeWorker+0xe3
f8b87b74 806658a1 f8b87c58 f8b87cdc 80665527 nt!PopFlushVolumes+0x148
f8b87c44 804de7ec 00000006 00000004 c0000004 nt!NtSetSystemPowerState+0x36d
f8b87c44 804dd9a1 00000006 00000004 c0000004 nt!KiFastCallEntry+0xf8
f8b87cc8 80629ac3 00000006 00000004 c0000004 nt!ZwSetSystemPowerState+0x11
f8b87d0c 80629ca8 00000000 00000006 00000004 nt!PopIssueActionRequest+0x66
f8b87d34 80507ef8 8055ff90 8056147c 82fc6b30 nt!PopPolicyWorkerAction+0x3d
f8b87d74 804e426b 80000000 00000000 82fc6b30 nt!PopPolicyWorkerThread+0xbf
f8b87dac 8057be15 80000000 00000000 00000000 nt!ExpWorkerThread+0x100
f8b87ddc 804fa4da 804e4196 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
SYMEVENT!SYMEvent_GetVMDataPtr+86a4
f0023084 894618 mov [esi+0x18],eax

SYMBOL_STACK_INDEX: 7

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: SYMEVENT!SYMEvent_GetVMDataPtr+86a4

MODULE_NAME: SYMEVENT

IMAGE_NAME: SYMEVENT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 42ddb287

FAILURE_BUCKET_ID: 0xA_SYMEVENT!SYMEvent_GetVMDataPtr+86a4

BUCKET_ID: 0xA_SYMEVENT!SYMEvent_GetVMDataPtr+86a4

Followup: MachineOwner
---------

eax=82fc6b30 ebx=00000000 ecx=fc6afcc8 edx=fc6a0000 esi=04020047 edi=82fc6b30
eip=804e35e9 esp=f8b87258 ebp=f8b87260 iopl=0 nv up di pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010006
nt!ExAcquireResourceExclusiveLite+0x36:
804e35e9 66837e0c00 cmp word ptr [esi+0xc],0x0 ds:0023:04020053=????
ChildEBP RetAddr Args to Child
f8b87260 f85f3df2 04020047 00000001 00000001 nt!ExAcquireResourceExclusiveLite+0x36 (FPO: [Non-Fpo])
f8b872dc f85f3dc9 fc6afc98 82f2e100 00000001 Ntfs!NtfsFlushVolume+0xfa (FPO: [Non-Fpo])
f8b8737c f85e7385 fc6afc98 fb52d008 f8b80000 Ntfs!NtfsCommonVolumeOpen+0x341 (FPO: [Non-Fpo])
f8b87454 804e37f7 82f2e020 fb52d008 82e87678 Ntfs!NtfsFsdCreate+0x154 (FPO: [Non-Fpo])
f8b87464 f8657876 804e8a39 82f85580 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f8b874b0 804e37f7 82f2fcc8 00000001 f8b87508 sr!SrCreate+0x150 (FPO: [Non-Fpo])
f8b874c0 f0023084 00000000 f8b87508 82bbb240 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
WARNING: Stack unwind information not available. Following frames may be wrong.
f8b87614 8056316c 82f2c9e0 00000000 82db1008 SYMEVENT!SYMEvent_GetVMDataPtr+0x86a4
f8b8769c 8056729a 00000000 f8b876dc 00000240 nt!ObpLookupObjectName+0x56a (FPO: [Non-Fpo])
f8b876f0 80570b73 00000000 00000000 fca7f800 nt!ObOpenObjectByName+0xeb (FPO: [Non-Fpo])
f8b8776c 80570c42 f8b87910 00100003 f8b878f8 nt!IopCreateFile+0x407 (FPO: [Non-Fpo])
f8b877c8 80570d78 f8b87910 00100003 f8b878f8 nt!IoCreateFile+0x8e (FPO: [Non-Fpo])
f8b87808 804de7ec f8b87910 00100003 f8b878f8 nt!NtCreateFile+0x30 (FPO: [Non-Fpo])
f8b87808 804dc9b1 f8b87910 00100003 f8b878f8 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f8b8783c)
f8b878ac 8062a156 f8b87910 00100003 f8b878f8 nt!ZwCreateFile+0x11 (FPO: [11,0,0])
f8b87b18 8062a2fe f8b87b30 00000000 001f0003 nt!PopFlushVolumeWorker+0xe3 (FPO: [Non-Fpo])
f8b87b74 806658a1 f8b87c58 f8b87cdc 80665527 nt!PopFlushVolumes+0x148 (FPO: [Non-Fpo])
f8b87c44 804de7ec 00000006 00000004 c0000004 nt!NtSetSystemPowerState+0x36d (FPO: [Non-Fpo])
f8b87c44 804dd9a1 00000006 00000004 c0000004 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f8b87c58)
f8b87cc8 80629ac3 00000006 00000004 c0000004 nt!ZwSetSystemPowerState+0x11 (FPO: [3,0,0])
start end module name
804d7000 806eb100 nt ntoskrnl.exe Tue Mar 01 16:59:37 2005 (42250FF9)
806ec000 806ffd80 hal halacpi.dll Tue Aug 03 22:59:04 2004 (41107B28)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 17:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Tue Aug 03 23:00:51 2004 (41107B93)
bf9d4000 bfa15880 ati2dvag ati2dvag.dll Mon Jan 20 19:45:02 2003 (3E2CC23E)
bfa16000 bfb2d440 ati3d2ag ati3d2ag.dll Mon Jan 20 19:18:25 2003 (3E2CBC01)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 00:56:56 2004 (411096C8)
eed64000 eed75980 NAVENG NAVENG.Sys Thu Feb 23 15:37:13 2006 (43FE4729)
eed76000 eee37b40 NavEx15 NavEx15.Sys Thu Feb 23 15:57:28 2006 (43FE4BE8)
eee38000 eee90000 SAVRT SAVRT.SYS Mon Mar 07 14:49:41 2005 (422CDA85)
eee90000 eeed0100 HTTP HTTP.sys Fri Oct 08 16:48:20 2004 (41672744)
ef2e1000 ef2e98a0 NPDRIVER NPDRIVER.SYS Mon Jan 24 16:38:00 2005 (41F594E8)
ef656000 ef66a400 wdmaud wdmaud.sys Tue Aug 03 23:15:03 2004 (41107EE7)
ef75b000 ef78a700 symidsco symidsco.sys Tue Jan 10 18:55:48 2006 (43C473B4)
ef78b000 ef7b3dc0 SYMFW SYMFW.SYS Tue Apr 05 11:11:07 2005 (4252D4BB)
ef8e4000 ef8e6f60 SYMREDRV SYMREDRV.SYS Tue Apr 05 11:11:10 2005 (4252D4BE)
ef964000 ef96e180 SYMNDIS SYMNDIS.SYS Tue Apr 05 11:11:01 2005 (4252D4B5)
ef994000 ef9e5300 srv srv.sys Mon May 09 17:17:49 2005 (427FFDAD)
efad6000 efb02400 mrxdav mrxdav.sys Tue Aug 03 23:00:49 2004 (41107B91)
efbb3000 efbc1d80 sysaudio sysaudio.sys Tue Aug 03 23:15:54 2004 (41107F1A)
efc07000 efc0aee0 Aspi32 Aspi32.SYS Mon May 06 09:43:02 2002 (3CD6B296)
efc97000 efc9a280 ndisuio ndisuio.sys Tue Aug 03 23:03:10 2004 (41107C1E)
efd0b000 efd1a900 Cdfs Cdfs.SYS Tue Aug 03 23:14:09 2004 (41107EB1)
efdab000 efdc2480 dump_atapi dump_atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
efdc3000 efde6000 Fastfat Fastfat.SYS Tue Aug 03 23:14:15 2004 (41107EB7)
efeae000 efecef00 ipnat ipnat.sys Wed Sep 29 15:28:36 2004 (415B3714)
efecf000 eff3d400 mrxsmb mrxsmb.sys Tue Jan 18 20:26:50 2005 (41EDE18A)
eff3e000 eff68a00 rdbss rdbss.sys Wed Oct 27 18:13:57 2004 (418047D5)
eff69000 eff7c000 SAVRTPEL SAVRTPEL.SYS Mon Mar 07 14:49:43 2005 (422CDA87)
eff7c000 effce000 SPBBCDrv SPBBCDrv.sys Wed Jul 21 16:08:26 2004 (40FEF76A)
effce000 effefd00 afd afd.sys Tue Aug 03 23:14:13 2004 (41107EB5)
efff0000 f0017c00 netbt netbt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
f0018000 f0034cc0 SYMEVENT SYMEVENT.SYS Tue Jul 19 19:10:15 2005 (42DDB287)
f0035000 f0074ce0 SYMTDI SYMTDI.SYS Tue Apr 05 11:10:52 2005 (4252D4AC)
f0075000 f00ccd80 tcpip tcpip.sys Thu Jan 12 18:28:12 2006 (43C7103C)
f00cd000 f00df400 ipsec ipsec.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f8148000 f817b200 update update.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8224000 f8226900 Dxapi Dxapi.sys Fri Aug 17 13:53:19 2001 (3B7D843F)
f8244000 f8254e00 psched psched.sys Tue Aug 03 23:04:16 2004 (41107C60)
f8255000 f826b680 ndiswan ndiswan.sys Tue Aug 03 23:14:30 2004 (41107EC6)
f826c000 f8294980 bcmwl5 bcmwl5.sys Wed Feb 12 14:25:07 2003 (3E4AC9C3)
f8295000 f82b7e80 USBPORT USBPORT.SYS Tue Aug 03 23:08:34 2004 (41107D62)
f82db000 f82fe980 portcls portcls.sys Tue Aug 03 23:15:47 2004 (41107F13)
f82ff000 f832c6a0 STAC97 STAC97.sys Tue Oct 22 07:36:43 2002 (3DB5627B)
f832d000 f8449c00 AGRSM AGRSM.sys Wed Jan 22 14:47:52 2003 (3E2F1F98)
f844a000 f846c680 ks ks.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f846d000 f8480780 VIDEOPRT VIDEOPRT.SYS Tue Aug 03 23:07:04 2004 (41107D08)
f8481000 f850c280 ati2mtag ati2mtag.sys Mon Jan 20 19:44:36 2003 (3E2CC224)
f8511000 f8513280 rasacd rasacd.sys Fri Aug 17 13:55:39 2001 (3B7D84CB)
f8566000 f8580580 Mup Mup.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f8581000 f85ada80 NDIS NDIS.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f85ae000 f863a480 Ntfs Ntfs.sys Tue Aug 03 23:15:06 2004 (41107EEA)
f863b000 f8651780 KSecDD KSecDD.sys Tue Aug 03 22:59:45 2004 (41107B51)
f8652000 f8663f00 sr sr.sys Tue Aug 03 23:06:22 2004 (41107CDE)
f8664000 f8682780 fltmgr fltmgr.sys Tue Aug 03 23:01:17 2004 (41107BAD)
f8683000 f869a480 atapi atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
f869b000 f86b9880 ftdisk ftdisk.sys Fri Aug 17 13:52:41 2001 (3B7D8419)
f86ba000 f86d7480 pcmcia pcmcia.sys Tue Aug 03 23:07:45 2004 (41107D31)
f86d8000 f86e8a80 pci pci.sys Tue Aug 03 23:07:45 2004 (41107D31)
f86e9000 f8716d80 ACPI ACPI.sys Tue Aug 03 23:07:35 2004 (41107D27)
f8738000 f8740c00 isapnp isapnp.sys Fri Aug 17 13:58:01 2001 (3B7D8559)
f8748000 f8756e80 ohci1394 ohci1394.sys Tue Aug 03 23:10:05 2004 (41107DBD)
f8758000 f8765000 1394BUS 1394BUS.SYS Tue Aug 03 23:10:03 2004 (41107DBB)
f8768000 f8772500 MountMgr MountMgr.sys Tue Aug 03 22:58:29 2004 (41107B05)
f8778000 f8784c80 VolSnap VolSnap.sys Tue Aug 03 23:00:14 2004 (41107B6E)
f8788000 f8790e00 disk disk.sys Tue Aug 03 22:59:53 2004 (41107B59)
f8798000 f87a4200 CLASSPNP CLASSPNP.SYS Tue Aug 03 23:14:26 2004 (41107EC2)
f87b8000 f87c4880 rasl2tp rasl2tp.sys Tue Aug 03 23:14:21 2004 (41107EBD)
f87c8000 f87d2200 raspppoe raspppoe.sys Tue Aug 03 23:05:06 2004 (41107C92)
f87d8000 f87e3d00 raspptp raspptp.sys Tue Aug 03 23:14:26 2004 (41107EC2)
f87e8000 f87f0900 msgpc msgpc.sys Tue Aug 03 23:04:11 2004 (41107C5B)
f8808000 f8811f00 termdd termdd.sys Tue Aug 03 22:58:52 2004 (41107B1C)
f8818000 f8821480 NDProxy NDProxy.SYS Fri Aug 17 13:55:30 2001 (3B7D84C2)
f8868000 f8876100 usbhub usbhub.sys Tue Aug 03 23:08:40 2004 (41107D68)
f8878000 f8880700 netbios netbios.sys Tue Aug 03 23:03:19 2004 (41107C27)
f8888000 f8890880 Fips Fips.SYS Fri Aug 17 18:31:49 2001 (3B7DC585)
f8898000 f88a0700 wanarp wanarp.sys Tue Aug 03 23:04:57 2004 (41107C89)
f88a8000 f88b6d80 arp1394 arp1394.sys Tue Aug 03 22:58:28 2004 (41107B04)
f8938000 f8940d00 intelppm intelppm.sys Tue Aug 03 22:59:19 2004 (41107B37)
f8948000 f8957180 nic1394 nic1394.sys Tue Aug 03 22:58:28 2004 (41107B04)
f8958000 f8962380 imapi imapi.sys Tue Aug 03 23:00:12 2004 (41107B6C)
f8968000 f8974180 cdrom cdrom.sys Tue Aug 03 22:59:52 2004 (41107B58)
f8978000 f8986080 redbook redbook.sys Tue Aug 03 22:59:34 2004 (41107B46)
f8988000 f8996b80 drmk drmk.sys Tue Aug 03 23:07:54 2004 (41107D3A)
f8998000 f89a4e00 i8042prt i8042prt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
f89a8000 f89b5500 Apfiltr Apfiltr.sys Wed Jan 16 18:53:32 2002 (3C463CAC)
f89b8000 f89be200 PCIIDEX PCIIDEX.SYS Tue Aug 03 22:59:40 2004 (41107B4C)
f89c0000 f89c4900 PartMgr PartMgr.sys Fri Aug 17 18:32:23 2001 (3B7DC5A7)
f89c8000 f89cc080 PxHelp20 PxHelp20.sys Fri Jan 03 14:10:17 2003 (3E160A49)
f89d0000 f89d6b00 sisagp sisagp.sys Wed May 22 01:11:07 2002 (3CEB529B)
f8a20000 f8a24d00 BtnHnd BtnHnd.sys Wed Nov 06 18:00:09 2002 (3DC9C929)
f8a78000 f8a7f9a0 SYMIDS SYMIDS.SYS Tue Apr 05 11:11:16 2005 (4252D4C4)
f8a80000 f8a86000 symlcbrd symlcbrd.sys Thu Sep 02 18:56:06 2004 (4137CF36)
f8a90000 f8a91000 fdc fdc.sys unavailable (00000000)
f8a98000 f8a9f000 GEARAspiWDM GEARAspiWDM.sys Mon Apr 05 15:37:14 2004 (4071DF9A)
f8aa0000 f8aa7580 Modem Modem.SYS Tue Aug 03 23:08:04 2004 (41107D44)
f8aa8000 f8aac280 usbohci usbohci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f8ab0000 f8ab6800 usbehci usbehci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f8ab8000 f8abe000 kbdclass kbdclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8ac0000 f8ac5a00 mouclass mouclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8ac8000 f8acc880 TDI TDI.SYS Tue Aug 03 23:07:47 2004 (41107D33)
f8ad0000 f8ad4580 ptilink ptilink.sys Fri Aug 17 13:49:53 2001 (3B7D8371)
f8ad8000 f8adc080 raspti raspti.sys Fri Aug 17 13:55:32 2001 (3B7D84C4)
f8ae0000 f8ae5000 flpydisk flpydisk.sys Tue Aug 03 22:59:24 2004 (41107B3C)
f8af0000 f8af5200 vga vga.sys Tue Aug 03 23:07:06 2004 (41107D0A)
f8af8000 f8afca80 Msfs Msfs.SYS Tue Aug 03 23:00:37 2004 (41107B85)
f8b00000 f8b07880 Npfs Npfs.SYS Tue Aug 03 23:00:38 2004 (41107B86)
f8b28000 f8b2c500 watchdog watchdog.sys Tue Aug 03 23:07:32 2004 (41107D24)
f8b48000 f8b4b000 BOOTVID BOOTVID.dll Fri Aug 17 13:49:09 2001 (3B7D8345)
f8b4c000 f8b4e480 compbatt compbatt.sys Fri Aug 17 13:57:58 2001 (3B7D8556)
f8b50000 f8b53700 BATTC BATTC.SYS Fri Aug 17 13:57:52 2001 (3B7D8550)
f8b54000 f8b56d80 ACPIEC ACPIEC.sys Fri Aug 17 13:57:55 2001 (3B7D8553)
f8bf0000 f8bf3700 CmBatt CmBatt.sys Tue Aug 03 23:07:39 2004 (41107D2B)
f8c18000 f8c1a580 ndistapi ndistapi.sys Fri Aug 17 13:55:29 2001 (3B7D84C1)
f8c28000 f8c2bc80 mssmbios mssmbios.sys Tue Aug 03 23:07:47 2004 (41107D33)
f8c38000 f8c39b80 kdcom kdcom.dll Fri Aug 17 13:49:10 2001 (3B7D8346)
f8c3a000 f8c3b100 WMILIB WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f8c58000 f8c59480 FUJ02B1 FUJ02B1.sys Tue Jul 31 20:00:21 2001 (3B6770C5)
f8c5e000 f8c5f100 swenum swenum.sys Tue Aug 03 22:58:41 2004 (41107B11)
f8c62000 f8c63280 USBD USBD.SYS Fri Aug 17 14:02:58 2001 (3B7D8682)
f8c66000 f8c67f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 13:49:37 2001 (3B7D8361)
f8c68000 f8c69080 Beep Beep.SYS Fri Aug 17 13:47:33 2001 (3B7D82E5)
f8c6a000 f8c6b080 mnmdd mnmdd.SYS Fri Aug 17 13:57:28 2001 (3B7D8538)
f8c6c000 f8c6d080 RDPCDD RDPCDD.sys Fri Aug 17 13:46:56 2001 (3B7D82C0)
f8c6e000 f8c6f100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f8cba000 f8cbb620 SYMDNS SYMDNS.SYS Tue Apr 05 11:10:54 2005 (4252D4AE)
f8d00000 f8d00d00 pciide pciide.sys Fri Aug 17 13:51:49 2001 (3B7D83E5)
f8d01000 f8d01d80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 13:57:55 2001 (3B7D8553)
f8d53000 f8d53d00 dxgthk dxgthk.sys Fri Aug 17 13:53:12 2001 (3B7D8438)
f8dcd000 f8dcdc00 audstub audstub.sys Fri Aug 17 13:59:40 2001 (3B7D85BC)
f8e3d000 f8e3db80 Null Null.SYS Fri Aug 17 13:47:39 2001 (3B7D82EB)

Unloaded modules:
ee5b8000 ee5e2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee74a000 ee774000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef569000 ef593000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8e7e000 f8e7f000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef73b000 ef748000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef74b000 ef759000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef593000 ef5b6000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8cc6000 f8cc8000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
efde6000 efdf6000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
efa9a000 efaae000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f88e8000 f88f1000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8ae8000 f8aed000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8515000 f8518000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

BSOD And Shutdown During Norton Virus Scan-continues

Hi
FYI I have run two more virus scans,one scheduled and the other manually started. Both resulted in sudden shutdown with no BSOD,no .dmp files, and no events logged during the scan times.

I also sent this info to Symantec over 72 hours ago but have heard nothing from them.

I wonder if this could be a hard drive problem? Is there a way to check? I am not getting any error messages about the hard drive.

Gary

 

Go to your hard drive manufacturer's website, there should be some diagnostic tools you can download and run. These should tell you if the hard drive is on its way out.
If you need to find out you hard drives brand... download the *free* version of Everest here: MajorGeeks.

B

 

Same Problem

I have the same problem with my Nseries laptop. Did you have any luck with the problem? Fujitsu wants me to reinstall Windows, this would be a major problem and any other way around it would be much appreciated.

 

Had the same problem on a desktop computer.
Drove me crazy.
Overheating wasn't the problem. Computer could kcunk kchunk along defragmenting n doing other things all day long - UNTIL I ran Norton.

After numerous contacts with Symantic support decided on a clean install of Norton.

It solved the problem.

However doing a clean install of Norton is a bit involved.
Program is an octopus with tentacles everywhere.

Remove Norton thru Add/Remove programs.
If have any other Symantic programs gonna have to remove those also.
A few re-boots.
THEN do a search for any folders with Norton or Symantic and delete them.

Reinstall everything.
A few re-boots involved.
Update everything, hopefully on a broadband connection.
More re-boots.

After doing all that took me 2 weeks until was brave enough to do a registry clean-up.

It's a hassel - but much easier then reinstalling Windows.

 

BSOD And Shutdown During Norton Virus Scan(Dump Data)

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Fri Jun 2 15:01:19.830 2006 (GMT-7)
System Uptime: 0 days 0:46:01.407
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1902fe, f8b8b178, f8b8ae74, 804fb587}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
Probably caused by : hardware ( Ntfs!NtfsGetNextFcbTableEntry+17 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001902fe
Arg2: f8b8b178
Arg3: f8b8ae74
Arg4: 804fb587

Debugging Details:
------------------


EXCEPTION_RECORD: f8b8b178 -- (.exr fffffffff8b8b178)
.exr fffffffff8b8b178
ExceptionAddress: 804fb587 (nt!RtlRealSuccessor+0x00000013)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 0688824d
Attempt to read from address 0688824d

CONTEXT: f8b8ae74 -- (.cxr fffffffff8b8ae74)
.cxr fffffffff8b8ae74
eax=06888249 ebx=00000000 ecx=06888249 edx=82fba038 esi=f8b8b294 edi=e15fc008
eip=804fb587 esp=f8b8b240 ebp=f8b8b240 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210202
nt!RtlRealSuccessor+0x13:
804fb587 8b4804 mov ecx,[eax+0x4] ds:0023:0688824d=????????
.cxr
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

READ_ADDRESS: 0688824d

BUGCHECK_STR: 0x24

MISALIGNED_IP:
nt!RtlRealSuccessor+13
804fb587 8b4804 mov ecx,[eax+0x4]

LAST_CONTROL_TRANSFER: from 8051175f to 804fb587

STACK_TEXT:
f8b8b240 8051175f e13a2aa8 82f65260 f8b8b260 nt!RtlRealSuccessor+0x13
f8b8b250 f85f3db1 82f653c8 f8b8b294 f8b8b2dc nt!RtlEnumerateGenericTableWithoutSplayingAvl+0x32
f8b8b260 f85f39bf 82f65100 f8b8b294 00000001 Ntfs!NtfsGetNextFcbTableEntry+0x17
f8b8b2dc f85f3dc9 827b4370 82f65100 00000001 Ntfs!NtfsFlushVolume+0x43c
f8b8b37c f85e7385 827b4370 82d9fce8 f8b80000 Ntfs!NtfsCommonVolumeOpen+0x341
f8b8b454 804e37f7 82f65020 82d9fce8 f8f30f90 Ntfs!NtfsFsdCreate+0x154
f8b8b464 f8657876 804e8a39 82f3cd10 00000000 nt!IopfCallDriver+0x31
f8b8b4b0 804e37f7 82f54ac0 00000001 f8b8b508 sr!SrCreate+0x150
f8b8b4c0 f004b084 00000000 f8b8b508 82d92db8 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f8b8b614 8056316c 82f67740 00000000 82edbf30 SYMEVENT!SYMEvent_GetVMDataPtr+0x86a4
f8b8b69c 8056729a 00000000 f8b8b6dc 00000240 nt!ObpLookupObjectName+0x56a
f8b8b6f0 80570b73 00000000 00000000 fca7f800 nt!ObOpenObjectByName+0xeb
f8b8b76c 80570c42 f8b8b910 00100003 f8b8b8f8 nt!IopCreateFile+0x407
f8b8b7c8 80570d78 f8b8b910 00100003 f8b8b8f8 nt!IoCreateFile+0x8e
f8b8b808 804de7ec f8b8b910 00100003 f8b8b8f8 nt!NtCreateFile+0x30
f8b8b808 804dc9b1 f8b8b910 00100003 f8b8b8f8 nt!KiFastCallEntry+0xf8
f8b8b8ac 8062a156 f8b8b910 00100003 f8b8b8f8 nt!ZwCreateFile+0x11
f8b8bb18 8062a2fe f8b8bb30 00000000 001f0003 nt!PopFlushVolumeWorker+0xe3
f8b8bb74 806658a1 f8b8bc58 f8b8bcdc 80665527 nt!PopFlushVolumes+0x148
f8b8bc44 804de7ec 00000006 00000004 c0000004 nt!NtSetSystemPowerState+0x36d
f8b8bc44 804dd9a1 00000006 00000004 c0000004 nt!KiFastCallEntry+0xf8
f8b8bcc8 80629ac3 00000006 00000004 c0000004 nt!ZwSetSystemPowerState+0x11
f8b8bd0c 80629ca8 00000000 00000006 00000004 nt!PopIssueActionRequest+0x66
f8b8bd34 80507ef8 8055ff90 8056147c 82fc68b8 nt!PopPolicyWorkerAction+0x3d
f8b8bd74 804e426b 80000000 00000000 82fc68b8 nt!PopPolicyWorkerThread+0xbf
f8b8bdac 8057be15 80000000 00000000 00000000 nt!ExpWorkerThread+0x100
f8b8bddc 804fa4da 804e4196 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
Ntfs!NtfsGetNextFcbTableEntry+17
f85f3db1 85c0 test eax,eax

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: Ntfs!NtfsGetNextFcbTableEntry+17

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .cxr 0xfffffffff8b8ae74 ; kb

MODULE_NAME: hardware

FAILURE_BUCKET_ID: IP_MISALIGNED

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

eax=ffdff13c ebx=f8b8b178 ecx=00000000 edx=00000000 esi=827b4370 edi=c0000005
eip=8053331e esp=f8b8ac50 ebp=f8b8ac68 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!KeBugCheckEx+0x1b:
8053331e 5d pop ebp
ChildEBP RetAddr Args to Child
f8b8ac68 f85bc051 00000024 001902fe f8b8b178 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f8b8ac98 f85e737b 827b4370 f8b8acc4 804e24f1 Ntfs!NtfsExceptionFilter+0x1cd (FPO: [Non-Fpo])
f8b8aca4 804e24f1 f8b8accc 00000000 f8b8accc Ntfs!NtfsFsdCreate+0x208 (FPO: [Non-Fpo])
f8b8accc 804db49a f8b8b178 f8b8b444 f8b8ae74 nt!_except_handler3+0x61 (FPO: [Uses EBP] [3,0,7])
f8b8acf0 804db46b f8b8b178 f8b8b444 f8b8ae74 nt!ExecuteHandler2+0x26
f8b8ada0 80513486 f8b8b178 f8b8ae74 0688824d nt!ExecuteHandler+0x24
f8b8b15c 804df235 f8b8b178 00000000 f8b8b1cc nt!KiDispatchException+0x13e (FPO: [Non-Fpo])
f8b8b1c4 804df1e6 f8b8b240 804fb587 badb0d00 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
f8b8b240 8051175f e13a2aa8 82f65260 f8b8b260 nt!KiExceptionExit+0x18a
f8b8b240 8051175f e13a2aa8 82f65260 f8b8b260 nt!RtlEnumerateGenericTableWithoutSplayingAvl+0x32 (FPO: [Non-Fpo])
f8b8b250 f85f3db1 82f653c8 f8b8b294 f8b8b2dc nt!RtlEnumerateGenericTableWithoutSplayingAvl+0x32 (FPO: [Non-Fpo])
f8b8b260 f85f39bf 82f65100 f8b8b294 00000001 Ntfs!NtfsGetNextFcbTableEntry+0x17 (FPO: [Non-Fpo])
f8b8b2dc f85f3dc9 827b4370 82f65100 00000001 Ntfs!NtfsFlushVolume+0x43c (FPO: [Non-Fpo])
f8b8b37c f85e7385 827b4370 82d9fce8 f8b80000 Ntfs!NtfsCommonVolumeOpen+0x341 (FPO: [Non-Fpo])
f8b8b454 804e37f7 82f65020 82d9fce8 f8f30f90 Ntfs!NtfsFsdCreate+0x154 (FPO: [Non-Fpo])
f8b8b464 f8657876 804e8a39 82f3cd10 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f8b8b4b0 804e37f7 82f54ac0 00000001 f8b8b508 sr!SrCreate+0x150 (FPO: [Non-Fpo])
f8b8b4c0 f004b084 00000000 f8b8b508 82d92db8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
WARNING: Stack unwind information not available. Following frames may be wrong.
f8b8b614 8056316c 82f67740 00000000 82edbf30 SYMEVENT!SYMEvent_GetVMDataPtr+0x86a4
f8b8b69c 8056729a 00000000 f8b8b6dc 00000240 nt!ObpLookupObjectName+0x56a (FPO: [Non-Fpo])
start end module name
804d7000 806eb100 nt ntoskrnl.exe Tue Mar 01 16:59:37 2005 (42250FF9)
806ec000 806ffd80 hal halacpi.dll Tue Aug 03 22:59:04 2004 (41107B28)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 17:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Tue Aug 03 23:00:51 2004 (41107B93)
bf9d4000 bfa15880 ati2dvag ati2dvag.dll Mon Jan 20 19:45:02 2003 (3E2CC23E)
bfa16000 bfb2d440 ati3d2ag ati3d2ag.dll Mon Jan 20 19:18:25 2003 (3E2CBC01)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 00:56:56 2004 (411096C8)
eed64000 eeda4100 HTTP HTTP.sys Fri Oct 08 16:48:20 2004 (41672744)
eef35000 eef46980 NAVENG NAVENG.Sys Thu Feb 23 15:37:13 2006 (43FE4729)
eef47000 ef008b40 NavEx15 NavEx15.Sys Thu Feb 23 15:57:28 2006 (43FE4BE8)
ef009000 ef061000 SAVRT SAVRT.SYS Mon Mar 07 14:49:41 2005 (422CDA85)
ef181000 ef1898a0 NPDRIVER NPDRIVER.SYS Mon Jan 24 16:38:00 2005 (41F594E8)
ef566000 ef57a400 wdmaud wdmaud.sys Tue Aug 03 23:15:03 2004 (41107EE7)
ef6cb000 ef6d9d80 sysaudio sysaudio.sys Tue Aug 03 23:15:54 2004 (41107F1A)
ef783000 ef7b2700 symidsco symidsco.sys Tue Jan 10 18:55:48 2006 (43C473B4)
ef7b3000 ef7dbdc0 SYMFW SYMFW.SYS Tue Apr 05 11:11:07 2005 (4252D4BB)
ef974000 ef97e180 SYMNDIS SYMNDIS.SYS Tue Apr 05 11:11:01 2005 (4252D4B5)
ef994000 ef9e5300 srv srv.sys Mon May 09 17:17:49 2005 (427FFDAD)
efade000 efae0f60 SYMREDRV SYMREDRV.SYS Tue Apr 05 11:11:10 2005 (4252D4BE)
efafe000 efb2a400 mrxdav mrxdav.sys Tue Aug 03 23:00:49 2004 (41107B91)
efb53000 efb62900 Cdfs Cdfs.SYS Tue Aug 03 23:14:09 2004 (41107EB1)
efc13000 efc16ee0 Aspi32 Aspi32.SYS Mon May 06 09:43:02 2002 (3CD6B296)
efd23000 efd26280 ndisuio ndisuio.sys Tue Aug 03 23:03:10 2004 (41107C1E)
efdab000 efdc2480 dump_atapi dump_atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
efdeb000 efe0e000 Fastfat Fastfat.SYS Tue Aug 03 23:14:15 2004 (41107EB7)
efeae000 efecef00 ipnat ipnat.sys Wed Sep 29 15:28:36 2004 (415B3714)
efecf000 eff3d400 mrxsmb mrxsmb.sys Tue Jan 18 20:26:50 2005 (41EDE18A)
eff3e000 eff68a00 rdbss rdbss.sys Wed Oct 27 18:13:57 2004 (418047D5)
eff69000 eff7c000 SAVRTPEL SAVRTPEL.SYS Mon Mar 07 14:49:43 2005 (422CDA87)
eff7c000 effce000 SPBBCDrv SPBBCDrv.sys Wed Jul 21 16:08:26 2004 (40FEF76A)
effce000 effefd00 afd afd.sys Tue Aug 03 23:14:13 2004 (41107EB5)
efff0000 f0017c00 netbt netbt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
f0040000 f005ccc0 SYMEVENT SYMEVENT.SYS Tue Jul 19 19:10:15 2005 (42DDB287)
f005d000 f009cce0 SYMTDI SYMTDI.SYS Tue Apr 05 11:10:52 2005 (4252D4AC)
f009d000 f00f4d80 tcpip tcpip.sys Thu Jan 12 18:28:12 2006 (43C7103C)
f00f5000 f0107400 ipsec ipsec.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f8148000 f817b200 update update.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8244000 f8254e00 psched psched.sys Tue Aug 03 23:04:16 2004 (41107C60)
f8255000 f826b680 ndiswan ndiswan.sys Tue Aug 03 23:14:30 2004 (41107EC6)
f826c000 f8294980 bcmwl5 bcmwl5.sys Wed Feb 12 14:25:07 2003 (3E4AC9C3)
f8295000 f82b7e80 USBPORT USBPORT.SYS Tue Aug 03 23:08:34 2004 (41107D62)
f82db000 f82fe980 portcls portcls.sys Tue Aug 03 23:15:47 2004 (41107F13)
f82ff000 f832c6a0 STAC97 STAC97.sys Tue Oct 22 07:36:43 2002 (3DB5627B)
f832d000 f8449c00 AGRSM AGRSM.sys Wed Jan 22 14:47:52 2003 (3E2F1F98)
f844a000 f846c680 ks ks.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f846d000 f8480780 VIDEOPRT VIDEOPRT.SYS Tue Aug 03 23:07:04 2004 (41107D08)
f8481000 f850c280 ati2mtag ati2mtag.sys Mon Jan 20 19:44:36 2003 (3E2CC224)
f8525000 f8528c80 mssmbios mssmbios.sys Tue Aug 03 23:07:47 2004 (41107D33)
f8566000 f8580580 Mup Mup.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f8581000 f85ada80 NDIS NDIS.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f85ae000 f863a480 Ntfs Ntfs.sys Tue Aug 03 23:15:06 2004 (41107EEA)
f863b000 f8651780 KSecDD KSecDD.sys Tue Aug 03 22:59:45 2004 (41107B51)
f8652000 f8663f00 sr sr.sys Tue Aug 03 23:06:22 2004 (41107CDE)
f8664000 f8682780 fltmgr fltmgr.sys Tue Aug 03 23:01:17 2004 (41107BAD)
f8683000 f869a480 atapi atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
f869b000 f86b9880 ftdisk ftdisk.sys Fri Aug 17 13:52:41 2001 (3B7D8419)
f86ba000 f86d7480 pcmcia pcmcia.sys Tue Aug 03 23:07:45 2004 (41107D31)
f86d8000 f86e8a80 pci pci.sys Tue Aug 03 23:07:45 2004 (41107D31)
f86e9000 f8716d80 ACPI ACPI.sys Tue Aug 03 23:07:35 2004 (41107D27)
f8738000 f8740c00 isapnp isapnp.sys Fri Aug 17 13:58:01 2001 (3B7D8559)
f8748000 f8756e80 ohci1394 ohci1394.sys Tue Aug 03 23:10:05 2004 (41107DBD)
f8758000 f8765000 1394BUS 1394BUS.SYS Tue Aug 03 23:10:03 2004 (41107DBB)
f8768000 f8772500 MountMgr MountMgr.sys Tue Aug 03 22:58:29 2004 (41107B05)
f8778000 f8784c80 VolSnap VolSnap.sys Tue Aug 03 23:00:14 2004 (41107B6E)
f8788000 f8790e00 disk disk.sys Tue Aug 03 22:59:53 2004 (41107B59)
f8798000 f87a4200 CLASSPNP CLASSPNP.SYS Tue Aug 03 23:14:26 2004 (41107EC2)
f87c8000 f87d6b80 drmk drmk.sys Tue Aug 03 23:07:54 2004 (41107D3A)
f87d8000 f87e4e00 i8042prt i8042prt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
f87e8000 f87f5500 Apfiltr Apfiltr.sys Wed Jan 16 18:53:32 2002 (3C463CAC)
f87f8000 f8804880 rasl2tp rasl2tp.sys Tue Aug 03 23:14:21 2004 (41107EBD)
f8808000 f8812200 raspppoe raspppoe.sys Tue Aug 03 23:05:06 2004 (41107C92)
f8818000 f8823d00 raspptp raspptp.sys Tue Aug 03 23:14:26 2004 (41107EC2)
f8828000 f8830900 msgpc msgpc.sys Tue Aug 03 23:04:11 2004 (41107C5B)
f8858000 f8861f00 termdd termdd.sys Tue Aug 03 22:58:52 2004 (41107B1C)
f8878000 f8881480 NDProxy NDProxy.SYS Fri Aug 17 13:55:30 2001 (3B7D84C2)
f88c8000 f88d6100 usbhub usbhub.sys Tue Aug 03 23:08:40 2004 (41107D68)
f88d8000 f88e0700 netbios netbios.sys Tue Aug 03 23:03:19 2004 (41107C27)
f88f8000 f8900880 Fips Fips.SYS Fri Aug 17 18:31:49 2001 (3B7DC585)
f8908000 f8910700 wanarp wanarp.sys Tue Aug 03 23:04:57 2004 (41107C89)
f8918000 f8926d80 arp1394 arp1394.sys Tue Aug 03 22:58:28 2004 (41107B04)
f8968000 f8970d00 intelppm intelppm.sys Tue Aug 03 22:59:19 2004 (41107B37)
f8978000 f8987180 nic1394 nic1394.sys Tue Aug 03 22:58:28 2004 (41107B04)
f8988000 f8992380 imapi imapi.sys Tue Aug 03 23:00:12 2004 (41107B6C)
f8998000 f89a4180 cdrom cdrom.sys Tue Aug 03 22:59:52 2004 (41107B58)
f89a8000 f89b6080 redbook redbook.sys Tue Aug 03 22:59:34 2004 (41107B46)
f89b8000 f89be200 PCIIDEX PCIIDEX.SYS Tue Aug 03 22:59:40 2004 (41107B4C)
f89c0000 f89c4900 PartMgr PartMgr.sys Fri Aug 17 18:32:23 2001 (3B7DC5A7)
f89c8000 f89cc080 PxHelp20 PxHelp20.sys Fri Jan 03 14:10:17 2003 (3E160A49)
f89d0000 f89d6b00 sisagp sisagp.sys Wed May 22 01:11:07 2002 (3CEB529B)
f8a38000 f8a3cd00 BtnHnd BtnHnd.sys Wed Nov 06 18:00:09 2002 (3DC9C929)
f8a80000 f8a81000 fdc fdc.sys unavailable (00000000)
f8a88000 f8a8f000 GEARAspiWDM GEARAspiWDM.sys Mon Apr 05 15:37:14 2004 (4071DF9A)
f8a90000 f8a97580 Modem Modem.SYS Tue Aug 03 23:08:04 2004 (41107D44)
f8a98000 f8a9c280 usbohci usbohci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f8aa0000 f8aa6800 usbehci usbehci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f8aa8000 f8aae000 kbdclass kbdclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8ab0000 f8ab5a00 mouclass mouclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8ab8000 f8abc880 TDI TDI.SYS Tue Aug 03 23:07:47 2004 (41107D33)
f8ac8000 f8acc580 ptilink ptilink.sys Fri Aug 17 13:49:53 2001 (3B7D8371)
f8ad0000 f8ad4080 raspti raspti.sys Fri Aug 17 13:55:32 2001 (3B7D84C4)
f8ae0000 f8ae5000 flpydisk flpydisk.sys Tue Aug 03 22:59:24 2004 (41107B3C)
f8ae8000 f8aef9a0 SYMIDS SYMIDS.SYS Tue Apr 05 11:11:16 2005 (4252D4C4)
f8af0000 f8af6000 symlcbrd symlcbrd.sys Thu Sep 02 18:56:06 2004 (4137CF36)
f8b00000 f8b05200 vga vga.sys Tue Aug 03 23:07:06 2004 (41107D0A)
f8b08000 f8b0ca80 Msfs Msfs.SYS Tue Aug 03 23:00:37 2004 (41107B85)
f8b10000 f8b17880 Npfs Npfs.SYS Tue Aug 03 23:00:38 2004 (41107B86)
f8b38000 f8b3c500 watchdog watchdog.sys Tue Aug 03 23:07:32 2004 (41107D24)
f8b48000 f8b4b000 BOOTVID BOOTVID.dll Fri Aug 17 13:49:09 2001 (3B7D8345)
f8b4c000 f8b4e480 compbatt compbatt.sys Fri Aug 17 13:57:58 2001 (3B7D8556)
f8b50000 f8b53700 BATTC BATTC.SYS Fri Aug 17 13:57:52 2001 (3B7D8550)
f8b54000 f8b56d80 ACPIEC ACPIEC.sys Fri Aug 17 13:57:55 2001 (3B7D8553)
f8bdc000 f8bde900 Dxapi Dxapi.sys Fri Aug 17 13:53:19 2001 (3B7D843F)
f8be0000 f8be2280 rasacd rasacd.sys Fri Aug 17 13:55:39 2001 (3B7D84CB)
f8c0c000 f8c0f700 CmBatt CmBatt.sys Tue Aug 03 23:07:39 2004 (41107D2B)
f8c28000 f8c2a580 ndistapi ndistapi.sys Fri Aug 17 13:55:29 2001 (3B7D84C1)
f8c38000 f8c39b80 kdcom kdcom.dll Fri Aug 17 13:49:10 2001 (3B7D8346)
f8c3a000 f8c3b100 WMILIB WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f8c66000 f8c67480 FUJ02B1 FUJ02B1.sys Tue Jul 31 20:00:21 2001 (3B6770C5)
f8c74000 f8c75100 swenum swenum.sys Tue Aug 03 22:58:41 2004 (41107B11)
f8c92000 f8c93280 USBD USBD.SYS Fri Aug 17 14:02:58 2001 (3B7D8682)
f8c96000 f8c97f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 13:49:37 2001 (3B7D8361)
f8c98000 f8c99080 Beep Beep.SYS Fri Aug 17 13:47:33 2001 (3B7D82E5)
f8c9a000 f8c9b080 mnmdd mnmdd.SYS Fri Aug 17 13:57:28 2001 (3B7D8538)
f8c9c000 f8c9d080 RDPCDD RDPCDD.sys Fri Aug 17 13:46:56 2001 (3B7D82C0)
f8cc4000 f8cc5620 SYMDNS SYMDNS.SYS Tue Apr 05 11:10:54 2005 (4252D4AE)
f8cd2000 f8cd3100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f8d00000 f8d00d00 pciide pciide.sys Fri Aug 17 13:51:49 2001 (3B7D83E5)
f8d01000 f8d01d80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 13:57:55 2001 (3B7D8553)
f8dbb000 f8dbbc00 audstub audstub.sys Fri Aug 17 13:59:40 2001 (3B7D85BC)
f8e12000 f8e12d00 dxgthk dxgthk.sys Fri Aug 17 13:53:12 2001 (3B7D8438)
f8e57000 f8e57b80 Null Null.SYS Fri Aug 17 13:47:39 2001 (3B7D82EB)

Unloaded modules:
ee590000 ee5ba000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee722000 ee74c000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef451000 ef47b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8deb000 f8dec000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef954000 ef961000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef6bb000 ef6c9000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef4a3000 ef4c6000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8cfa000 f8cfc000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
efe1e000 efe2e000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
efac2000 efad6000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f88e8000 f88f1000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f8af8000 f8afd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f8bdc000 f8bdf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

BSOD And Shutdown During Norton Virus Scan(Dump Data)

Posted dump data in previous post.
Too long to add anything else.

Been getting black screen only sudden shutdowns until today.
After degrag, empty all temp files, scan with no compressed
which worked, I ran a full scan again and got BSOD.

Also updated to Adobe reader 7.0.8 and got black screen shut down
when it reached the Install shield(wizard).

Updated Spybot Search and Destroy to 1.4 and it ran until black screen
and sudden shutdown too.

Gary