Page fault in non paged area [DUMP DATA]

We have been getting this BSOD randomly around our office. Seems to be tied to Symantec's Real-time virus scan. Anyone seen this problem or have any idea how to fix it? My debug log is below.


Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini020507-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Mon Feb 5 08:13:32.611 2007 (GMT-6)
System Uptime: 2 days 21:57:45.250
Loading Kernel Symbols
......................................................................................................................................
Loading User Symbols
Loading unloaded module list
..........................
*** ERROR: Module load completed but symbols could not be loaded for EmbargoM.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {fe6b7000, 0, 804dadf8, 0}


Could not read faulting driver name
Probably caused by : EmbargoM.sys ( EmbargoM+2d6b )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fe6b7000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 804dadf8, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: fe6b7000

FAULTING_IP:
nt!memmove+33
804dadf8 f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: Rtvscan.exe

LAST_CONTROL_TRANSFER: from f9328d6b to 804dadf8

STACK_TEXT:
ef03473c f9328d6b fe3713c4 fe6b6fd0 00000054 nt!memmove+0x33
WARNING: Stack unwind information not available. Following frames may be wrong.
ef03475c f932a3f9 00000001 00000000 00000000 EmbargoM+0x2d6b
ef034858 f93279d4 804da3a4 804d95fa ff011418 EmbargoM+0x43f9
ef03486c f91e259b ef034888 00000005 ff0cc770 EmbargoM+0x19d4
ef0348a0 f91e2b22 fe315008 00000005 80550005 fltMgr!FltpDoInstanceSetupNotification+0x4b
ef034900 f91e2ead ff86a638 ff011418 00000005 fltMgr!FltpInitInstance+0x272
ef034970 f91e2fb8 ff86a638 ff011418 00000005 fltMgr!FltpCreateInstanceFromName+0x295
ef0349d8 f91e9fde ff86a638 ff011418 00000005 fltMgr!FltpEnumerateRegistryInstances+0xf4
ef034a28 f91e13ce ff011418 ff801d20 ff0c0728 fltMgr!FltpDoFilterNotificationForNewVolume+0xe4
ef034a5c 804e13d9 fe5f63c8 ff0c0718 ff0c0718 fltMgr!FltpCreate+0x1f0
ef034a6c 8057ccc7 813228b0 fee745cc ef034c04 nt!IopfCallDriver+0x31
ef034b4c 8056c063 813228c8 00000000 fee74528 nt!IopParseDevice+0xa58
ef034bc4 8056f2a8 00000000 ef034c04 00000040 nt!ObpLookupObjectName+0x53c
ef034c18 8057d2d3 00000000 00000000 01856801 nt!ObOpenObjectByName+0xea
ef034c94 8057d3a2 0453d644 c0100080 0453d5e4 nt!IopCreateFile+0x407
ef034cf0 8057d3e5 0453d644 c0100080 0453d5e4 nt!IoCreateFile+0x8e
ef034d30 804dd99f 0453d644 c0100080 0453d5e4 nt!NtCreateFile+0x30
ef034d30 7c90eb94 0453d644 c0100080 0453d5e4 nt!KiFastCallEntry+0xfc
0453d63c 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
EmbargoM+2d6b
f9328d6b 8b8ecc000000 mov ecx,dword ptr [esi+0CCh]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: EmbargoM+2d6b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: EmbargoM

IMAGE_NAME: EmbargoM.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45ac9c66

FAILURE_BUCKET_ID: 0x50_EmbargoM+2d6b

BUCKET_ID: 0x50_EmbargoM+2d6b

Followup: MachineOwner
---------

eax=fe6b7024 ebx=fe371060 ecx=00000009 edx=00000000 esi=fe6b7000 edi=fe3713f4
eip=804dadf8 esp=ef034734 ebp=ef03473c iopl=0 nv up ei pl nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010212
nt!memmove+0x33:
804dadf8 f3a5 rep movs dword ptr es:[edi],dword ptr [esi] es:0023:fe3713f4=00000000 ds:0023:fe6b7000=????????
ChildEBP RetAddr Args to Child
ef03473c f9328d6b fe3713c4 fe6b6fd0 00000054 nt!memmove+0x33
WARNING: Stack unwind information not available. Following frames may be wrong.
ef03475c f932a3f9 00000001 00000000 00000000 EmbargoM+0x2d6b
ef034858 f93279d4 804da3a4 804d95fa ff011418 EmbargoM+0x43f9
ef03486c f91e259b ef034888 00000005 ff0cc770 EmbargoM+0x19d4
ef0348a0 f91e2b22 fe315008 00000005 80550005 fltMgr!FltpDoInstanceSetupNotification+0x4b (FPO: [Non-Fpo])
ef034900 f91e2ead ff86a638 ff011418 00000005 fltMgr!FltpInitInstance+0x272 (FPO: [Non-Fpo])
ef034970 f91e2fb8 ff86a638 ff011418 00000005 fltMgr!FltpCreateInstanceFromName+0x295 (FPO: [Non-Fpo])
ef0349d8 f91e9fde ff86a638 ff011418 00000005 fltMgr!FltpEnumerateRegistryInstances+0xf4 (FPO: [Non-Fpo])
ef034a28 f91e13ce ff011418 ff801d20 ff0c0728 fltMgr!FltpDoFilterNotificationForNewVolume+0xe4 (FPO: [Non-Fpo])
ef034a5c 804e13d9 fe5f63c8 ff0c0718 ff0c0718 fltMgr!FltpCreate+0x1f0 (FPO: [Non-Fpo])
ef034a6c 8057ccc7 813228b0 fee745cc ef034c04 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
ef034b4c 8056c063 813228c8 00000000 fee74528 nt!IopParseDevice+0xa58 (FPO: [Non-Fpo])
ef034bc4 8056f2a8 00000000 ef034c04 00000040 nt!ObpLookupObjectName+0x53c (FPO: [Non-Fpo])
ef034c18 8057d2d3 00000000 00000000 01856801 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
ef034c94 8057d3a2 0453d644 c0100080 0453d5e4 nt!IopCreateFile+0x407 (FPO: [Non-Fpo])
ef034cf0 8057d3e5 0453d644 c0100080 0453d5e4 nt!IoCreateFile+0x8e (FPO: [Non-Fpo])
ef034d30 804dd99f 0453d644 c0100080 0453d5e4 nt!NtCreateFile+0x30 (FPO: [Non-Fpo])
ef034d30 7c90eb94 0453d644 c0100080 0453d5e4 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ef034d64)
0453d63c 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806fd000 nt ntkrnlmp.exe Tue Mar 01 18:57:27 2005 (42250F77)
806fd000 8071dd00 hal halmacpi.dll Wed Aug 04 00:59:09 2004 (41107B2D)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 19:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 01:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Tue Feb 10 13:10:06 2004 (40292C8E)
bf9e2000 bfa01000 ialmdnt5 ialmdnt5.dll Tue Feb 10 13:09:59 2004 (40292C87)
bfa01000 bfa1fe80 ialmdev5 ialmdev5.DLL Tue Feb 10 13:09:50 2004 (40292C7E)
bfa20000 bfadb000 ialmdd5 ialmdd5.DLL Tue Feb 10 13:16:28 2004 (40292E0C)
eec42000 eec6c180 kmixer kmixer.sys Wed Jun 14 03:47:45 2006 (448FCD31)
eec6d000 eec7ef20 naveng naveng.sys Mon Jan 22 19:05:17 2007 (45B55F4D)
eec7f000 eed4d740 navex15 navex15.sys Mon Jan 22 19:39:38 2007 (45B5675A)
ef31d000 ef35d280 HTTP HTTP.sys Thu Mar 16 19:33:09 2006 (441A03C5)
ef60c000 ef620400 wdmaud wdmaud.sys Wed Jun 14 04:00:44 2006 (448FD03C)
ef6b1000 ef6bfd80 sysaudio sysaudio.sys Wed Aug 04 01:15:54 2004 (41107F1A)
ef6c1000 ef6e3080 RDPWD RDPWD.SYS Thu Jun 09 18:52:39 2005 (42A8D647)
efc9d000 efcee480 srv srv.sys Mon Aug 14 05:34:39 2006 (44E051BF)
eff97000 effc3400 mrxdav mrxdav.sys Wed Aug 04 01:00:49 2004 (41107B91)
f00b4000 f00b7800 asyncmac asyncmac.sys Wed Aug 04 01:05:02 2004 (41107C8E)
f0550000 f0553900 ndisuio ndisuio.sys Tue Apr 19 18:54:03 2005 (42659A1B)
f0654000 f066b480 dump_atapi dump_atapi.sys Wed Aug 04 00:59:41 2004 (41107B4D)
f0734000 f0751000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Tue Nov 28 16:41:47 2006 (456CBB2B)
f0751000 f07b3000 eeCtrl eeCtrl.sys Tue Nov 28 16:41:47 2006 (456CBB2B)
f07b3000 f0821a00 mrxsmb mrxsmb.sys Fri May 05 04:41:42 2006 (445B1DD6)
f0822000 f084ca00 rdbss rdbss.sys Fri May 05 04:47:55 2006 (445B1F4B)
f084d000 f08af000 SPBBCDrv SPBBCDrv.sys Tue Apr 11 18:55:08 2006 (443C41DC)
f08af000 f08d0d00 afd afd.sys Wed Aug 04 01:14:13 2004 (41107EB5)
f08d1000 f08f8c00 netbt netbt.sys Wed Aug 04 01:14:36 2004 (41107ECC)
f08f9000 f0928700 symidsco symidsco.sys Tue Jan 10 20:55:48 2006 (43C473B4)
f0929000 f0952000 SYMFW SYMFW.SYS Mon Aug 07 17:52:33 2006 (44D7C431)
f0952000 f0972f00 ipnat ipnat.sys Mon Jan 31 15:28:01 2005 (41FEA2E1)
f0973000 f09ae000 SYMTDI SYMTDI.SYS Mon Aug 07 17:52:32 2006 (44D7C430)
f09ae000 f0a06080 tcpip tcpip.sys Thu Apr 20 07:18:33 2006 (44477C19)
f0a07000 f0a19400 ipsec ipsec.sys Wed Aug 04 01:14:27 2004 (41107EC3)
f0b43000 f0b57000 Savrtpel Savrtpel.sys Wed Sep 06 16:26:26 2006 (44FF3D02)
f0b57000 f0b79000 SYMEVENT SYMEVENT.SYS Tue Nov 07 21:38:37 2006 (4551513D)
f0b79000 f0bd1000 savrt savrt.sys Wed Sep 06 16:26:23 2006 (44FF3CFF)
f0cde000 f0ce0900 Dxapi Dxapi.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
f8d66000 f8d99200 update update.sys Wed Aug 04 00:58:32 2004 (41107B08)
f8dc2000 f8df2100 rdpdr rdpdr.sys Wed Aug 04 01:01:10 2004 (41107BA6)
f8df3000 f8e03e00 psched psched.sys Wed Aug 04 01:04:16 2004 (41107C60)
f8e04000 f8e1a680 ndiswan ndiswan.sys Wed Aug 04 01:14:30 2004 (41107EC6)
f8e1b000 f8e3e980 portcls portcls.sys Wed Aug 04 01:15:47 2004 (41107F13)
f8e3f000 f8eccd80 smwdm smwdm.sys Tue May 06 08:14:31 2003 (3EB7B537)
f8ecd000 f8eef680 ks ks.sys Wed Aug 04 01:15:20 2004 (41107EF8)
f8ef0000 f8f03900 parport parport.sys Wed Aug 04 00:59:04 2004 (41107B28)
f8f3f000 f8f6a400 e1000325 e1000325.sys Tue Mar 08 19:35:29 2005 (422E52E1)
f8f6b000 f8f8de80 USBPORT USBPORT.SYS Wed Aug 04 01:08:34 2004 (41107D62)
f8f8e000 f8fa1780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 01:07:04 2004 (41107D08)
f8fa2000 f90485c0 ialmnt5 ialmnt5.sys Tue Feb 10 13:17:05 2004 (40292E31)
f9055000 f9057f80 mouhid mouhid.sys Fri Aug 17 15:47:57 2001 (3B7D82FD)
f9059000 f905b580 hidusb hidusb.sys Fri Aug 17 16:02:16 2001 (3B7D8658)
f90d3000 f90ed580 Mup Mup.sys Wed Aug 04 01:15:20 2004 (41107EF8)
f90ee000 f911aa80 NDIS NDIS.sys Wed Aug 04 01:14:27 2004 (41107EC3)
f911b000 f91a7480 Ntfs Ntfs.sys Wed Aug 04 01:15:06 2004 (41107EEA)
f91a8000 f91be780 KSecDD KSecDD.sys Wed Aug 04 00:59:45 2004 (41107B51)
f91bf000 f91d0f00 sr sr.sys Wed Aug 04 01:06:22 2004 (41107CDE)
f91d1000 f91f0780 fltMgr fltMgr.sys Mon Aug 21 04:14:57 2006 (44E97991)
f91f1000 f9208800 SCSIPORT SCSIPORT.SYS Wed Aug 04 00:59:39 2004 (41107B4B)
f9209000 f9220480 atapi atapi.sys Wed Aug 04 00:59:41 2004 (41107B4D)
f9221000 f9246700 dmio dmio.sys Wed Aug 04 01:07:13 2004 (41107D11)
f9247000 f9265880 ftdisk ftdisk.sys Fri Aug 17 15:52:41 2001 (3B7D8419)
f9266000 f9276a80 pci pci.sys Wed Aug 04 01:07:45 2004 (41107D31)
f9277000 f92a4d80 ACPI ACPI.sys Wed Aug 04 01:07:35 2004 (41107D27)
f92c6000 f92cec00 isapnp isapnp.sys Fri Aug 17 15:58:01 2001 (3B7D8559)
f92d6000 f92e0500 MountMgr MountMgr.sys Wed Aug 04 00:58:29 2004 (41107B05)
f92e6000 f92f2c80 VolSnap VolSnap.sys Wed Aug 04 01:00:14 2004 (41107B6E)
f92f6000 f92fee00 disk disk.sys Wed Aug 04 00:59:53 2004 (41107B59)
f9306000 f9312200 CLASSPNP CLASSPNP.SYS Wed Aug 04 01:14:26 2004 (41107EC2)
f9326000 f932eb80 EmbargoM EmbargoM.sys Tue Jan 16 03:35:34 2007 (45AC9C66)
f9346000 f934e700 wanarp wanarp.sys Wed Aug 04 01:04:57 2004 (41107C89)
f9356000 f9360000 SYMREDRV SYMREDRV.SYS Mon Aug 07 17:52:34 2006 (44D7C432)
f9366000 f9371000 SYMNDIS SYMNDIS.SYS Mon Aug 07 17:52:33 2006 (44D7C431)
f9376000 f9382000 SYMIDS SYMIDS.SYS Mon Aug 07 17:52:34 2006 (44D7C432)
f9386000 f938e700 netbios netbios.sys Wed Aug 04 01:03:19 2004 (41107C27)
f93b6000 f93be880 Fips Fips.SYS Fri Aug 17 20:31:49 2001 (3B7DC585)
f93d6000 f93e5900 Cdfs Cdfs.SYS Wed Aug 04 01:14:09 2004 (41107EB1)
f9416000 f941ed00 intelppm intelppm.sys Wed Aug 04 00:59:19 2004 (41107B37)
f9426000 f9432e00 i8042prt i8042prt.sys Wed Aug 04 01:14:36 2004 (41107ECC)
f9436000 f9445d80 serial serial.sys Wed Aug 04 01:15:51 2004 (41107F17)
f9446000 f9452180 cdrom cdrom.sys Wed Aug 04 00:59:52 2004 (41107B58)
f9456000 f9464080 redbook redbook.sys Wed Aug 04 00:59:34 2004 (41107B46)
f9466000 f9474b80 drmk drmk.sys Wed Aug 04 01:07:54 2004 (41107D3A)
f9476000 f9482880 rasl2tp rasl2tp.sys Wed Aug 04 01:14:21 2004 (41107EBD)
f9486000 f9490200 raspppoe raspppoe.sys Wed Aug 04 01:05:06 2004 (41107C92)
f9496000 f94a1d00 raspptp raspptp.sys Wed Aug 04 01:14:26 2004 (41107EC2)
f94a6000 f94ae900 msgpc msgpc.sys Wed Aug 04 01:04:11 2004 (41107C5B)
f94b6000 f94bff00 termdd termdd.sys Wed Aug 04 00:58:52 2004 (41107B1C)
f94c6000 f94cf480 NDProxy NDProxy.SYS Fri Aug 17 15:55:30 2001 (3B7D84C2)
f94e6000 f94f4100 usbhub usbhub.sys Wed Aug 04 01:08:40 2004 (41107D68)
f9526000 f952ed80 HIDCLASS HIDCLASS.SYS Wed Aug 04 01:08:18 2004 (41107D52)
f9546000 f954c200 PCIIDEX PCIIDEX.SYS Wed Aug 04 00:59:40 2004 (41107B4C)
f954e000 f9552900 PartMgr PartMgr.sys Fri Aug 17 20:32:23 2001 (3B7DC5A7)
f9556000 f955d1c0 cercsr6 cercsr6.sys Wed Dec 08 17:31:10 2004 (41B78EBE)
f955e000 f9563000 Embargo Embargo.sys Tue Jan 16 03:36:46 2007 (45AC9CAE)
f95be000 f95c3000 usbuhci usbuhci.sys Wed Aug 04 01:08:34 2004 (41107D62)
f95c6000 f95cc800 usbehci usbehci.sys Wed Aug 04 01:08:34 2004 (41107D62)
f95ce000 f95cf000 fdc fdc.sys unavailable (00000000)
f95d6000 f95dc000 kbdclass kbdclass.sys Wed Aug 04 00:58:32 2004 (41107B08)
f95de000 f95e2880 TDI TDI.SYS Wed Aug 04 01:07:47 2004 (41107D33)
f95e6000 f95ea580 ptilink ptilink.sys Fri Aug 17 15:49:53 2001 (3B7D8371)
f95ee000 f95f2080 raspti raspti.sys Fri Aug 17 15:55:32 2001 (3B7D84C4)
f95f6000 f95fba00 mouclass mouclass.sys Wed Aug 04 00:58:32 2004 (41107B08)
f9606000 f960c180 HIDPARSE HIDPARSE.SYS Wed Aug 04 01:08:15 2004 (41107D4F)
f9616000 f961b200 vga vga.sys Wed Aug 04 01:07:06 2004 (41107D0A)
f961e000 f961f000 Msfs Msfs.SYS unavailable (00000000)
f9626000 f962d880 Npfs Npfs.SYS Wed Aug 04 01:00:38 2004 (41107B86)
f9636000 f963d000 SYMDNS SYMDNS.SYS Mon Aug 07 17:52:32 2006 (44D7C430)
f9656000 f965a500 watchdog watchdog.sys Wed Aug 04 01:07:32 2004 (41107D24)
f9696000 f969b500 TDTCP TDTCP.SYS Wed Aug 04 00:58:52 2004 (41107B1C)
f969e000 f96a5000 RaInfo RaInfo.sys Fri Jul 21 11:31:34 2006 (44C10166)
f96d6000 f96d9000 BOOTVID BOOTVID.dll Fri Aug 17 15:49:09 2001 (3B7D8345)
f9772000 f9774280 rasacd rasacd.sys Fri Aug 17 15:55:39 2001 (3B7D84CB)
f9776000 f9779240 OMCI OMCI.SYS Wed Aug 22 11:42:57 2001 (3B83E111)
f977a000 f977d6a0 ckldrv ckldrv.sys Thu Feb 03 14:53:11 2000 (3899EAB7)
f977e000 f9781c80 serenum serenum.sys Wed Aug 04 00:59:06 2004 (41107B2A)
f9782000 f9784580 ndistapi ndistapi.sys Fri Aug 17 15:55:29 2001 (3B7D84C1)
f979e000 f97a1c80 mssmbios mssmbios.sys Wed Aug 04 01:07:47 2004 (41107D33)
f97c6000 f97c7b80 kdcom kdcom.dll Fri Aug 17 15:49:10 2001 (3B7D8346)
f97c8000 f97c9100 WMILIB WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f97ca000 f97cb580 intelide intelide.sys Wed Aug 04 00:59:40 2004 (41107B4C)
f97cc000 f97cd000 dmload dmload.sys unavailable (00000000)
f97ce000 f97cf9a0 ghmon ghmon.sys Sun Nov 27 22:35:48 2005 (438A8924)
f97dc000 f97dd120 aeaudio aeaudio.sys Mon Apr 01 09:39:14 2002 (3CA87112)
f97de000 f97df100 swenum swenum.sys Wed Aug 04 00:58:41 2004 (41107B11)
f97e0000 f97e1280 USBD USBD.SYS Fri Aug 17 16:02:58 2001 (3B7D8682)
f97e2000 f97e3f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 15:49:37 2001 (3B7D8361)
f97e8000 f97e9080 Beep Beep.SYS Fri Aug 17 15:47:33 2001 (3B7D82E5)
f97ea000 f97eb080 mnmdd mnmdd.SYS Fri Aug 17 15:57:28 2001 (3B7D8538)
f97ec000 f97ed080 RDPCDD RDPCDD.sys Fri Aug 17 15:46:56 2001 (3B7D82C0)
f97ee000 f97ef100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f988c000 f988d000 ParVdm ParVdm.SYS unavailable (00000000)
f988e000 f988ed00 pciide pciide.sys Fri Aug 17 15:51:49 2001 (3B7D83E5)
f98ce000 f98ced00 dxgthk dxgthk.sys Fri Aug 17 15:53:12 2001 (3B7D8438)
f98fa000 f98fb000 Null Null.SYS unavailable (00000000)
f9999000 f9999c00 audstub audstub.sys Fri Aug 17 15:59:40 2001 (3B7D85BC)

Unloaded modules:
eec6d000 eec7f000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eec7f000 eed4e000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eec6d000 eec7f000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eec7f000 eed4e000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef824000 ef836000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef836000 ef905000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed13000 eed3e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed13000 eed3e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed13000 eed3e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed13000 eed3e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed13000 eed3e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed13000 eed3e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef5be000 ef5e9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f99b8000 f99b9000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef671000 ef67e000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef5e9000 ef60c000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef681000 ef68f000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9844000 f9846000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0a3a000 f0a4c000 naveng.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0a4c000 f0b1b000 navex15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f04e3000 f0514000 ghpcw2k.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f93a6000 f93b1000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f976e000 f9772000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f960e000 f9613000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f95fe000 f9603000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f90a2000 f90d3000 ghpcw2k.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Hi, jpeepz. Welcome to Windows BBS!

I'm sorry no one responded to your post before now. Perhaps the reason no one responded is your dump data appears to be very unique and no one had any suggestions.

While I don't claim to be an expert regarding BSOD dump analysis, according to this 4-page article, Network World: "How to solve Windows system crashes in minutes" (specifically the last paragraph of page 3 and all of page 4), it appears your BSOD problem might be caused by EmbargoM.sys.

I Googled EmbargoM.sys and came up with nothing (which is very unusual when Googling a filename).

That date is very recent. Did you install any new software or updates to existing software on or since January 16 that might include those files?

I Googled Embargo.sys and came up with a few results but they don't appear to be promising.

If you search your computer for EmbargoM.sys and Embargo.sys, do the paths to the files give you any information about who the vendor is? If you right-click on the filename and select "Properties ", does that lend any information about who the vendor is? If so, perhaps you can contact the vendor to see if they have information about your issue.

It is also possible you may have malware issues and we'll go down that road if necessary.

 

More minidumps to find out the culprit

In general 1 minidump is insufficient to find out the culprit. We need at lease 4 to 5 minidumps. If all the minidumps are crashed at Embargo.sys and we can confirm the culprit is Embargo.sys. If windows is crashed with various symptom and it is the symptom of hardware error.

Attach the debug logs of more minidumps here.

 

I have multiple dumps across several systems and they are all identical. Does this not also point to a problem with rtvscan.exe?

 

I suppose rtvscan.exe could be the cuplrit.

Rtvscan.exe is a known component of the Norton/Symantec Internet Security Suite.

EmbargoM.sys is an unknown file (unless you decide to share details about the file's properties with us as I suggested earlier) and is definitely a suspect (according to the Network World article I referenced).

If I had to bet, I'd lay my chips down for EmbargoM.sys as the culprit.

Perhaps if you upload EmbargoM.sys and Embargo.sys to Jotti's online malware scan, then you might get some information about whether they are associated with malware or not.

In any case, please let us know any details you discover that might be relevant. If you provide more details, then it is more likely someone can help you resolve your issue.

EDIT:

In case you'd rather pursue troubleshooting methods on your own, here's one link that might be helpful.

• AumHa: Troubleshooting Windows STOP Messages

Please keep in mind:
If other people have the same or similar problem and later discover this thread, then they are more likely to benefit from this thread if we provide as many possibly relevant details as we can.