Dump data [getting system dumps/reboots]

Hi,

My 2 year old Dell XPS 400 running WinXP just started getting system dumps/reboots.

I recently uninstalled Noron Internet Security and installed Avast and Armor Online.

I ran the debug and here's what I have -- I'd sure appreciate some help with this:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini082709-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 3.3311) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp.080212-0005
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Thu Aug 27 11:04:03.531 2009 (GMT-4)
System Uptime: 0 days 14:17:54.258
Loading Kernel Symbols
...............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
...........................
*** ERROR: Module load completed but symbols could not be loaded for SSIDRV.SYS
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {8, ba340d70, 0, 0}

*** ERROR: Module load completed but symbols could not be loaded for ssfs0bbc.sys
*** ERROR: Module load completed but symbols could not be loaded for mozy.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
*** ERROR: Module load completed but symbols could not be loaded for aswMon2.SYS
*** ERROR: Module load completed but symbols could not be loaded for OADriver.sys
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Probably caused by : SSIDRV.SYS ( SSIDRV+16b30 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: ba340d70
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------

*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************

BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from b9f50f5a to b9f50b30

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
92d7cffc b9f50f5a 8935e00c 8b6e6a68 8936d584 SSIDRV+0x16b30
92d7d048 ba0cad89 8b6f2ed0 00d3f400 8936d568 SSIDRV+0x16f5a
92d7d078 ba0caf97 8b6f2e18 00d3f400 92d70000 ssfs0bbc+0x2d89
92d7d094 804ef18f 8b6f2e18 8ad3f400 86cb0598 ssfs0bbc+0x2f97
92d7d0a4 b9dae876 00000000 8b6f8cc0 8ad3f400 nt!IopfCallDriver+0x31
92d7d0f0 804ef18f 8b74c0d8 00000001 8a6aeca8 sr!SrCreate+0x150
92d7d100 95ac2aad 00000000 8a6aeca8 87df4160 nt!IopfCallDriver+0x31
92d7d12c 95ac2c5d 8ac8db70 00d3f400 92d7d170 mozy+0x3aad
92d7d13c 804ef18f 8ac8db70 8ad3f400 8ad3f400 mozy+0x3c5d
92d7d14c b9dbee9b 00000000 8ad3f400 8ad3f5d8 nt!IopfCallDriver+0x31
92d7d170 b9dcb754 92d7d190 8a67b498 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7d1ac 804ef18f 8a67b498 8ad3f400 8ad3f620 fltmgr!FltpCreate+0x26a
92d7d1bc 957816f1 8ad3f5fc 8ad3f620 92d7d21c nt!IopfCallDriver+0x31
92d7d1e4 95788740 8a67b498 00000000 92d7d21c SYMEVENT!SYMEvent_AllocVMData+0x18f1
92d7d200 95781769 92d7d21c 804f0044 9578182a SYMEVENT!EventObjectCreate+0xa40
92d7d23c 804ef18f 89fc9c80 8ad3f400 8ad3f400 SYMEVENT!SYMEvent_AllocVMData+0x1969
92d7d24c b9dbee9b 00000000 8ad3f400 8ad3f620 nt!IopfCallDriver+0x31
92d7d270 b9dcb754 92d7d290 8a5e82a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7d2ac 804ef18f 8a5e82a8 8ad3f400 00000000 fltmgr!FltpCreate+0x26a
92d7d2bc 92efd89e 8ad3f410 8ad77600 86cb0598 nt!IopfCallDriver+0x31
92d7d2e0 92ef783c 8a647660 00d3f400 804ef18f aswMon2+0x689e
92d7d3dc 805bf444 8b6e6a68 00000000 86bee638 aswMon2+0x83c
92d7d454 805bb9d0 00000000 92d7d494 00000240 nt!ObpLookupObjectName+0x53c
92d7d4a8 80576033 00000000 00000000 00000000 nt!ObOpenObjectByName+0xea
92d7d524 805769aa 92d7db6c 00000003 92d7db20 nt!IopCreateFile+0x407
92d7d580 805790b4 92d7db6c 00000003 92d7db20 nt!IoCreateFile+0x8e
92d7d5c0 958b3212 92d7db6c 00000003 92d7db20 nt!NtCreateFile+0x30
92d7da3c 8054161c 92d7db6c 00000003 92d7db20 OADriver+0x28212
92d7da3c 80500021 92d7db6c 00000003 92d7db20 nt!KiFastCallEntry+0xfc
92d7dae0 95acba6a 92d7db6c 00000003 92d7db20 nt!ZwCreateFile+0x11
92d7db70 95ac056d 8ac8dc28 88dec48c 00000000 mozy+0xca6a
92d7dea4 95ac306d 8ace12d0 88dec48c 8ac8dc28 mozy+0x156d
92d7ded0 95ac22b7 95ac8508 00c8db70 8ace12d0 mozy+0x406d
92d7df00 95ac2a2d 873a5d98 88bf8008 00000000 mozy+0x32b7
92d7df34 95ac2bd2 8ac8db70 873a5d98 92d7df78 mozy+0x3a2d
92d7df44 804ef18f 8ac8db70 873a5d98 873a5d98 mozy+0x3bd2
92d7df54 b9dbee9b 8a67b498 873a5d98 8aa03c18 nt!IopfCallDriver+0x31
92d7df78 b9dbf06b 92d7df98 8a67b498 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7dfb0 804ef18f 8a67b498 873a5d98 804f0044 fltmgr!FltpDispatch+0x11f
92d7dfc0 95781602 873a5fb8 873a5fdc 92d7e010 nt!IopfCallDriver+0x31
92d7dfd8 95788750 8a67b498 00000000 92d7e010 SYMEVENT!SYMEvent_AllocVMData+0x1802
92d7dff4 95781769 92d7e010 804f0044 9578182a SYMEVENT!EventObjectCreate+0xa50
92d7e030 804ef18f 89fc9c80 873a5d98 873a5d98 SYMEVENT!SYMEvent_AllocVMData+0x1969
92d7e040 b9dbee9b 8a5e82a8 873a5d98 89fe3008 nt!IopfCallDriver+0x31
92d7e064 b9dbf06b 92d7e084 8a5e82a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7e09c 804ef18f 8a5e82a8 873a5d98 00000000 fltmgr!FltpDispatch+0x11f
92d7e0ac 92efd89e 8ace12d0 8ad77600 873a5d98 nt!IopfCallDriver+0x31
92d7e0d0 92ef783c 8a647660 003a5d98 804ef18f aswMon2+0x689e
92d7e174 958b3ed8 80000878 92d7eaa4 92d7eab4 aswMon2+0x83c
92d7e9f0 8054161c 80000878 92d7eaa4 92d7eab4 OADriver+0x28ed8
92d7e9f0 80500ebd 80000878 92d7eaa4 92d7eab4 nt!KiFastCallEntry+0xfc
92d7ea7c 8063bfee 80000878 92d7eaa4 92d7eab4 nt!ZwSetInformationFile+0x11
92d7eabc 8063b904 e1038001 00000001 00002000 nt!CmpDoFileSetSize+0x5e
92d7ead4 806399ec e1038008 00000001 00002000 nt!CmpFileSetSize+0x16
92d7eaf4 8063a6e9 e1038008 00000008 0029db1c nt!HvpGrowLog1+0x52
92d7eb10 8063b822 000014f0 00000000 00000060 nt!HvMarkDirty+0x19d
92d7eb34 80632bbc e1038008 0029db20 e4d96588 nt!HvMarkCellDirty+0xbc
92d7eb9c 80621f34 e598fa08 92d7ebf4 00000001 nt!CmSetValueKey+0x110
92d7ec30 958b1d6e 000002fc 92d7f5e4 00000000 nt!NtSetValueKey+0x228
92d7f4c4 95761a1b 000002fc 92d7f5e4 00000000 OADriver+0x26d6e
92d7f51c 8054161c 000002fc 92d7f5e4 00000000 aswSP+0x8a1b
92d7f51c 80501089 000002fc 92d7f5e4 00000000 nt!KiFastCallEntry+0xfc
92d7f5ac 95ac0ec7 000002fc 92d7f5e4 00000000 nt!ZwSetValueKey+0x11
92d7fc30 95acc846 00a1c6d4 00000066 00d1de84 mozy+0x1ec7
92d7fc5c 80580487 8a3c6838 00000001 00a1c6d4 mozy+0xd846
92d7fd00 80579274 00000340 00000000 00000000 nt!IopXxxControlFile+0x255
92d7fd34 8054161c 00000340 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
92d7fd34 7c90e4f4 00000340 00000000 00000000 nt!KiFastCallEntry+0xfc
00d1de44 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
SSIDRV+16b30
b9f50b30 55 push ebp

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: SSIDRV+16b30

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: SSIDRV

IMAGE_NAME: SSIDRV.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 49ee6d28

FAILURE_BUCKET_ID: 0x7f_8_SSIDRV+16b30

BUCKET_ID: 0x7f_8_SSIDRV+16b30

Followup: MachineOwner
---------

eax=86cb0598 ebx=00000003 ecx=00000000 edx=8ad3f400 esi=8ad3f5b4 edi=8b6f2ed0
eip=b9f50b30 esp=92d7d000 ebp=92d7d048 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
SSIDRV+0x16b30:
b9f50b30 55 push ebp
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
92d7cffc b9f50f5a 8935e00c 8b6e6a68 8936d584 SSIDRV+0x16b30
92d7d048 ba0cad89 8b6f2ed0 00d3f400 8936d568 SSIDRV+0x16f5a
92d7d078 ba0caf97 8b6f2e18 00d3f400 92d70000 ssfs0bbc+0x2d89
92d7d094 804ef18f 8b6f2e18 8ad3f400 86cb0598 ssfs0bbc+0x2f97
92d7d0a4 b9dae876 00000000 8b6f8cc0 8ad3f400 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d0f0 804ef18f 8b74c0d8 00000001 8a6aeca8 sr!SrCreate+0x150 (FPO: [2,14,0])
92d7d100 95ac2aad 00000000 8a6aeca8 87df4160 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d12c 95ac2c5d 8ac8db70 00d3f400 92d7d170 mozy+0x3aad
92d7d13c 804ef18f 8ac8db70 8ad3f400 8ad3f400 mozy+0x3c5d
92d7d14c b9dbee9b 00000000 8ad3f400 8ad3f5d8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d170 b9dcb754 92d7d190 8a67b498 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [3,4,4])
92d7d1ac 804ef18f 8a67b498 8ad3f400 8ad3f620 fltmgr!FltpCreate+0x26a (FPO: [2,7,0])
92d7d1bc 957816f1 8ad3f5fc 8ad3f620 92d7d21c nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d1e4 95788740 8a67b498 00000000 92d7d21c SYMEVENT!SYMEvent_AllocVMData+0x18f1
92d7d200 95781769 92d7d21c 804f0044 9578182a SYMEVENT!EventObjectCreate+0xa40
92d7d23c 804ef18f 89fc9c80 8ad3f400 8ad3f400 SYMEVENT!SYMEvent_AllocVMData+0x1969
92d7d24c b9dbee9b 00000000 8ad3f400 8ad3f620 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d270 b9dcb754 92d7d290 8a5e82a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [3,4,4])
92d7d2ac 804ef18f 8a5e82a8 8ad3f400 00000000 fltmgr!FltpCreate+0x26a (FPO: [2,7,0])
92d7d2bc 92efd89e 8ad3f410 8ad77600 86cb0598 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
start end module name
804d7000 806e4000 nt ntkrpamp.exe Mon Feb 11 16:35:19 2008 (47B0BF97)
806e4000 80704d00 hal halmacpi.dll Mon Feb 11 16:35:41 2008 (47B0BFAD)
91655000 9167f180 kmixer kmixer.sys Mon Feb 11 16:48:49 2008 (47B0C2C1)
92837000 9284b480 wdmaud wdmaud.sys Mon Feb 11 17:23:43 2008 (47B0CAEF)
92a50000 92a53b20 aswRdr aswRdr.SYS Mon Aug 17 12:04:27 2009 (4A897F8B)
92dec000 92e3dc00 srv srv.sys Mon Feb 11 17:21:23 2008 (47B0CA63)
92e4e000 92e506c0 mdmxsdk mdmxsdk.sys Wed Apr 09 16:48:53 2003 (3E948735)
92e66000 92ea6a80 HTTP HTTP.sys Mon Feb 11 16:44:28 2008 (47B0C1BC)
92ef7000 92f0c580 aswMon2 aswMon2.SYS Tue Aug 11 06:29:18 2009 (4A8147FE)
92f0d000 92f39180 mrxdav mrxdav.sys Mon Feb 11 16:37:21 2008 (47B0C011)
93102000 93105900 ndisuio ndisuio.sys Mon Feb 11 16:46:42 2008 (47B0C242)
9311a000 9312f3c0 DLAUDF_M DLAUDF_M.SYS Thu Sep 08 12:29:08 2005 (432066D4)
93130000 93147040 DLAUDFAM DLAUDFAM.SYS Thu Sep 08 12:29:23 2005 (432066E3)
93148000 9315d1c0 DLAIFS_M DLAIFS_M.SYS Thu Sep 08 12:29:02 2005 (432066CE)
9315e000 93181180 Fastfat Fastfat.SYS Mon Feb 11 17:20:42 2008 (47B0CA3A)
95684000 95758e80 dump_iastor dump_iastor.sys Fri Jun 17 10:33:38 2005 (42B2DF42)
95759000 9577a000 aswSP aswSP.SYS Tue Aug 11 06:28:30 2009 (4A8147CE)
9577a000 9579c000 SYMEVENT SYMEVENT.SYS Mon Jan 16 15:53:50 2006 (43CC07DE)
9579c000 957b9000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Wed Mar 28 19:51:40 2007 (460AFF8C)
957b9000 9581b000 eeCtrl eeCtrl.sys Wed Mar 28 19:51:40 2007 (460AFF8C)
9581b000 9588a780 mrxsmb mrxsmb.sys Mon Feb 11 17:23:14 2008 (47B0CAD2)
9588b000 958d0000 OADriver OADriver.sys Thu Jul 02 17:42:38 2009 (4A4D29CE)
958d0000 958fae80 rdbss rdbss.sys Mon Feb 11 17:34:53 2008 (47B0CD8D)
958fb000 9591cb80 afd afd.sys Mon Feb 11 23:49:04 2008 (47B12540)
9591d000 95944c00 netbt netbt.sys Mon Feb 11 23:50:59 2008 (47B125B3)
95945000 9599d380 tcpip tcpip.sys Mon Feb 11 23:50:01 2008 (47B12579)
9599e000 959b9000 RCFOX RCFOX.sys Fri Oct 15 13:46:09 2004 (41700CE1)
959b9000 959cb600 ipsec ipsec.sys Mon Feb 11 23:49:44 2008 (47B12568)
959de000 95a0f700 UDFReadr UDFReadr.SYS Fri Jun 24 02:21:20 2005 (42BBA660)
95a22000 95a44780 DVDVRRdr_xp DVDVRRdr_xp.SYS Fri Jun 24 02:24:57 2005 (42BBA739)
95a57000 95a9e280 cdudf_xp cdudf_xp.SYS Fri Jun 24 02:34:38 2005 (42BBA97E)
95abf000 95ad2000 mozy mozy.sys Thu Jun 18 15:13:49 2009 (4A3A91ED)
95b4a000 95b50500 usbprint usbprint.sys Mon Feb 11 17:03:57 2008 (47B0C64D)
95b62000 95b69d80 usbccgp usbccgp.sys Mon Feb 11 16:49:26 2008 (47B0C2E6)
95b6a000 95b70700 USBSTOR USBSTOR.SYS Mon Feb 11 16:49:26 2008 (47B0C2E6)
95f17000 95f19280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
9600a000 96019900 Cdfs Cdfs.SYS Mon Feb 11 17:20:35 2008 (47B0CA33)
9603a000 96044e00 Fips Fips.SYS Mon Feb 11 16:38:34 2008 (47B0C05A)
961a5000 961a9a80 Aavmker4 Aavmker4.SYS Mon Aug 17 12:03:20 2009 (4A897F48)
961b5000 961bc840 SCDEmu SCDEmu.SYS Sun Jan 20 02:07:58 2008 (4792F34E)
961cd000 961d5000 OAmon OAmon.sys Wed Jun 10 11:14:10 2009 (4A2FCDC2)
961d5000 961dc880 Npfs Npfs.SYS Mon Feb 11 16:37:17 2008 (47B0C00D)
96c1d000 96c25780 netbios netbios.sys Mon Feb 11 16:46:47 2008 (47B0C247)
96c2d000 96c3bd80 arp1394 arp1394.sys Mon Feb 11 16:42:03 2008 (47B0C12B)
96c3d000 96c45700 wanarp wanarp.sys Mon Feb 11 16:48:19 2008 (47B0C2A3)
96c4d000 96c572c0 aswTdi aswTdi.SYS Mon Aug 17 12:04:38 2009 (4A897F96)
96c6d000 96c75900 msgpc msgpc.sys Mon Feb 11 16:47:12 2008 (47B0C260)
96c7d000 96c86000 OAnet OAnet.sys Wed Apr 08 12:14:49 2009 (49DCCD79)
96cad000 96cb6000 HIDCLASS HIDCLASS.SYS Mon Feb 11 16:49:13 2008 (47B0C2D9)
96fb7000 96fb9740 awlegacy awlegacy.sys Mon Sep 11 18:19:37 2000 (39BD5A79)
96fc3000 96fc5780 ELhid ELhid.sys Tue Nov 08 17:51:16 2005 (43712BE4)
96fcb000 96fcd880 hidusb hidusb.sys Mon Feb 11 16:49:14 2008 (47B0C2DA)
982d2000 982d4180 i2omgmt i2omgmt.SYS Mon Feb 11 16:44:21 2008 (47B0C1B5)
98f26000 98f28900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
a4014000 a4037a80 portcls portcls.sys Mon Feb 11 17:26:18 2008 (47B0CB8A)
a4038000 a412f5e0 sthda sthda.sys Wed Nov 16 14:47:30 2005 (437B8CD2)
ad4fd000 ad50b880 usbhub usbhub.sys Mon Feb 11 16:49:25 2008 (47B0C2E5)
ad51d000 ad52bb00 drmk drmk.sys Mon Feb 11 16:48:53 2008 (47B0C2C5)
ad54d000 ad556e80 NDProxy NDProxy.SYS Mon Feb 11 16:48:28 2008 (47B0C2AC)
ad5f5000 ad5f6800 RaInfo RaInfo.sys Fri Jan 04 13:57:12 2008 (477E8188)
ad605000 ad6068a0 DLAPoolM DLAPoolM.SYS Thu Sep 08 12:29:03 2005 (432066CF)
ade1f000 ade22b00 usbscan usbscan.sys Mon Feb 11 17:01:28 2008 (47B0C5B8)
ade2f000 ade32900 kbdhid kbdhid.sys Mon Feb 11 16:42:16 2008 (47B0C138)
adf25000 adf26500 dsunidrv dsunidrv.sys Sun Feb 18 13:31:02 2007 (45D89B66)
adf46000 adf4a500 watchdog watchdog.sys Mon Feb 11 16:48:38 2008 (47B0C2B6)
adf4e000 adf53d00 mmc_2K mmc_2K.SYS Fri Jun 24 02:20:16 2005 (42BBA620)
adf56000 adf5aa80 Msfs Msfs.SYS Mon Feb 11 16:37:16 2008 (47B0C00C)
adf5e000 adf63200 vga vga.sys Mon Feb 11 16:48:12 2008 (47B0C29C)
adf66000 adf6b860 DLARTL_N DLARTL_N.SYS Thu Aug 25 15:16:15 2005 (430E18FF)
adf76000 adf7c180 HIDPARSE HIDPARSE.SYS Mon Feb 11 16:49:08 2008 (47B0C2D4)
b39ee000 b39f3000 flpydisk flpydisk.sys Mon Feb 11 16:43:00 2008 (47B0C164)
b76c2000 b76c7f00 dvd_2K dvd_2K.SYS Fri Jun 24 02:34:07 2005 (42BBA95F)
b79df000 b79e85a0 DRVNDDM DRVNDDM.SYS Fri Aug 12 16:21:43 2005 (42FD04D7)
b8645000 b8647f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
b872b000 b8783e80 update update.sys Mon Feb 11 16:42:13 2008 (47B0C135)
b8784000 b87b3e80 rdpdr rdpdr.sys Mon Feb 11 16:37:29 2008 (47B0C019)
b87b4000 b87ca580 ndiswan ndiswan.sys Mon Feb 11 23:50:43 2008 (47B125A3)
b87cb000 b87e69e0 dne2000 dne2000.sys Fri May 14 20:13:12 2004 (40A56098)
b87e7000 b8803c00 pwd_2k pwd_2k.SYS Fri Jun 24 02:08:34 2005 (42BBA362)
b8804000 b88aa300 HSF_CNXT HSF_CNXT.sys Mon Nov 17 08:58:00 2003 (3FB8D3E8)
b88ab000 b89a9800 HSF_DP HSF_DP.sys Mon Nov 17 08:56:13 2003 (3FB8D37D)
b89aa000 b89cc700 ks ks.sys Mon Feb 11 17:23:00 2008 (47B0CAC4)
b89cd000 b8a00d00 HSFHWBS2 HSFHWBS2.sys Mon Nov 17 08:59:18 2003 (3FB8D436)
b8a01000 b8b38520 nv4_mini nv4_mini.sys Mon Jul 28 18:48:36 2003 (3F25A844)
b8b39000 b8b5c200 USBPORT USBPORT.SYS Mon Feb 11 16:49:23 2008 (47B0C2E3)
b8b5d000 b8b88000 e1e5132 e1e5132.sys Thu Aug 25 17:05:23 2005 (430E3293)
b8b88000 b8bae000 HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
b8bae000 b8bc1f00 VIDEOPRT VIDEOPRT.SYS Mon Feb 11 16:48:12 2008 (47B0C29C)
b8bc2000 b8d07000 ati2mtag ati2mtag.sys Wed Aug 03 23:10:15 2005 (42F18717)
b8d97000 b8da0f00 termdd termdd.sys Mon Feb 11 16:44:21 2008 (47B0C1B5)
b9185000 b9188f00 MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
b9189000 b918cc80 mssmbios mssmbios.sys Mon Feb 11 16:42:25 2008 (47B0C141)
b955b000 b9569d80 sysaudio sysaudio.sys Mon Feb 11 17:22:20 2008 (47B0CA9C)
b9c5c000 b9c5e780 ndistapi ndistapi.sys Mon Feb 11 16:48:27 2008 (47B0C2AB)
b9c6c000 b9c6e500 GEARAspiWDM GEARAspiWDM.sys Tue Jan 29 12:00:57 2008 (479F5BC9)
b9cd5000 b9ceeb80 Mup Mup.sys Mon Feb 11 17:23:20 2008 (47B0CAD8)
b9cef000 b9d7b600 Ntfs Ntfs.sys Mon Feb 11 17:21:59 2008 (47B0CA87)
b9d7c000 b9d92880 KSecDD KSecDD.sys Mon Feb 11 16:36:35 2008 (47B0BFE3)
b9d93000 b9da8440 DRVMCDB DRVMCDB.SYS Mon Sep 12 17:38:27 2005 (4325F553)
b9da9000 b9dbaf00 sr sr.sys Mon Feb 11 16:39:46 2008 (47B0C0A2)
b9dbb000 b9ddab00 fltmgr fltmgr.sys Mon Feb 11 16:37:32 2008 (47B0C01C)
b9ddb000 b9eafe80 iastor iastor.sys Fri Jun 17 10:33:38 2005 (42B2DF42)
b9eb0000 b9ec7900 atapi atapi.sys Mon Feb 11 16:43:08 2008 (47B0C16C)
b9ec8000 b9eed700 dmio dmio.sys Mon Feb 11 16:48:19 2008 (47B0C2A3)
b9eee000 b9f0c880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
b9f0d000 b9f39980 NDIS NDIS.SYS Mon Feb 11 23:50:39 2008 (47B1259F)
b9f3a000 b9f68000 SSIDRV SSIDRV.SYS Tue Apr 21 21:04:40 2009 (49EE6D28)
b9f68000 b9f78a80 pci pci.sys Mon Feb 11 16:42:22 2008 (47B0C13E)
b9f79000 b9fa6d80 ACPI ACPI.sys Mon Feb 11 16:42:12 2008 (47B0C134)
ba0a8000 ba0b1180 isapnp isapnp.sys Mon Feb 11 16:42:19 2008 (47B0C13B)
ba0b8000 ba0c1000 SSHRMD SSHRMD.SYS Tue Apr 21 21:04:05 2009 (49EE6D05)
ba0c8000 ba0d3000 ssfs0bbc ssfs0bbc.sys Tue Apr 21 21:05:39 2009 (49EE6D63)
ba0d8000 ba0e2580 MountMgr MountMgr.sys Mon Feb 11 16:42:13 2008 (47B0C135)
ba0e8000 ba0f4c80 VolSnap VolSnap.sys Mon Feb 11 16:43:45 2008 (47B0C191)
ba0f8000 ba100e00 disk disk.sys Mon Feb 11 16:43:27 2008 (47B0C17F)
ba108000 ba114180 CLASSPNP CLASSPNP.SYS Mon Feb 11 17:22:48 2008 (47B0CAB8)
ba118000 ba120b80 PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)
ba128000 ba132b80 sbp2port sbp2port.sys Mon Feb 11 16:43:29 2008 (47B0C181)
ba138000 ba147100 ohci1394 ohci1394.sys Mon Feb 11 16:50:12 2008 (47B0C314)
ba148000 ba155080 1394BUS 1394BUS.SYS Mon Feb 11 16:50:11 2008 (47B0C313)
ba1c8000 ba1d2000 LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)
ba218000 ba220e00 intelppm intelppm.sys Mon Feb 11 16:35:46 2008 (47B0BFB2)
ba228000 ba237180 nic1394 nic1394.sys Mon Feb 11 16:42:03 2008 (47B0C12B)
ba238000 ba242480 imapi imapi.sys Mon Feb 11 16:43:42 2008 (47B0C18E)
ba248000 ba257600 cdrom cdrom.sys Mon Feb 11 16:43:25 2008 (47B0C17D)
ba258000 ba266100 redbook redbook.sys Mon Feb 11 16:43:02 2008 (47B0C166)
ba268000 ba274880 rasl2tp rasl2tp.sys Mon Feb 11 23:49:45 2008 (47B12569)
ba278000 ba282200 raspppoe raspppoe.sys Mon Feb 11 16:48:31 2008 (47B0C2AF)
ba288000 ba293d00 raspptp raspptp.sys Mon Feb 11 23:50:02 2008 (47B1257A)
ba328000 ba32ca80 TDI TDI.SYS Mon Feb 11 16:51:08 2008 (47B0C34C)
ba330000 ba336180 PCIIDEX PCIIDEX.SYS Mon Feb 11 16:43:07 2008 (47B0C16B)
ba338000 ba33cd00 PartMgr PartMgr.sys Mon Feb 11 16:43:29 2008 (47B0C181)
ba3d0000 ba3d5080 usbuhci usbuhci.sys Mon Feb 11 16:49:23 2008 (47B0C2E3)
ba3d8000 ba3df600 usbehci usbehci.sys Mon Feb 11 16:49:23 2008 (47B0C2E3)
ba3e0000 ba3e7580 Modem Modem.SYS Mon Feb 11 16:51:21 2008 (47B0C359)
ba3e8000 ba3e9000 fdc fdc.sys unavailable (00000000)
ba3f0000 ba3f4580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
ba3f8000 ba3fc080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
ba400000 ba405020 wanatw4 wanatw4.sys Tue Jul 16 11:23:14 2002 (3D343A62)
ba408000 ba40e780 RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)
ba410000 ba416000 kbdclass kbdclass.sys Mon Feb 11 16:42:15 2008 (47B0C137)
ba418000 ba41da00 mouclass mouclass.sys Mon Feb 11 16:42:15 2008 (47B0C137)
ba438000 ba440000 aswFsBlk aswFsBlk.sys Tue Aug 11 06:28:20 2009 (4A8147C4)
ba448000 ba44e3e0 DLABOIOM DLABOIOM.SYS Thu Sep 08 12:29:37 2005 (432066F1)
ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
ba4bc000 ba4be800 compbatt compbatt.sys Mon Feb 11 16:42:16 2008 (47B0C138)
ba4c0000 ba4c3780 BATTC BATTC.SYS Mon Feb 11 16:42:10 2008 (47B0C132)
ba4c4000 ba4c7780 Gernuwa Gernuwa.sys Tue Oct 09 16:14:34 2001 (3BC35AAA)
ba58c000 ba58f920 DLAOPIOM DLAOPIOM.SYS Thu Sep 08 12:30:23 2005 (4320671F)
ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
ba5ac000 ba5ad700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
ba5f8000 ba5f9f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
ba5fa000 ba5fb080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba5fc000 ba5fd080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
ba600000 ba601080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
ba602000 ba603900 ELmou ELmou.sys Tue Nov 08 17:51:18 2005 (43712BE6)
ba604000 ba605b80 ELmon ELmon.sys Tue Nov 08 17:51:37 2005 (43712BF9)
ba606000 ba607b00 ELkbd ELkbd.sys Tue Nov 08 17:51:20 2005 (43712BE8)
ba628000 ba629280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
ba63e000 ba63f5c0 DLACDBHM DLACDBHM.SYS Thu Aug 25 15:16:50 2005 (430E1922)
ba640000 ba641e80 ELacpi ELacpi.sys Tue Nov 08 17:51:39 2005 (43712BFB)
ba642000 ba643700 RootMdm RootMdm.sys Fri Aug 17 16:57:36 2001 (3B7D8540)
ba644000 ba645100 swenum swenum.sys Mon Feb 11 16:42:22 2008 (47B0C13E)
ba668000 ba669280 DSproct DSproct.sys Thu Oct 05 10:02:50 2006 (4525108A)
ba670000 ba670d00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
ba70f000 ba70f980 DLADResN DLADResN.SYS Thu Sep 08 12:32:10 2005 (4320678A)
ba71f000 ba71fa00 Cdralw2k Cdralw2k.SYS Fri Feb 02 16:00:38 2007 (45C3A676)
ba722000 ba722980 Cdr4_xp Cdr4_xp.SYS Fri Feb 02 14:08:11 2007 (45C38C1B)
ba723000 ba723b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
ba725000 ba725d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
ba780000 ba780c80 lmimirr lmimirr.sys Tue Apr 10 18:32:11 2007 (461C106B)
ba783000 ba783c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
bf000000 bf011600 dxg dxg.sys Mon Feb 11 16:48:50 2008 (47B0C2C2)
bf012000 bf049000 ati2dvag ati2dvag.dll Wed Aug 03 23:10:35 2005 (42F1872B)
bf049000 bf07d000 ati2cqag ati2cqag.dll Wed Aug 03 22:02:23 2005 (42F1772F)
bf07d000 bf0b2000 atikvmag atikvmag.dll Wed Aug 03 22:34:10 2005 (42F17EA2)
bf0b2000 bf2f3820 ati3duag ati3duag.dll Wed Aug 03 22:54:05 2005 (42F1834D)
bf2f4000 bf390380 ativvaxx ativvaxx.dll Wed Aug 03 22:47:06 2005 (42F181AA)
bf391000 bf749c40 nv4_disp nv4_disp.dll Mon Jul 28 18:53:44 2003 (3F25A978)
bf800000 bf9c2300 win32k win32k.sys Mon Feb 11 17:35:33 2008 (47B0CDB5)

Unloaded modules:
91655000 91680000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91655000 91680000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
adb16000 adb1c000 RimUsb.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91655000 91680000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
918e3000 9190e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
918e3000 9190e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91aee000 91b19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b16000 91b41000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b16000 91b41000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91cf6000 91d21000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91cf6000 91d21000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
927e9000 92814000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
95ecb000 95ecc000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
92814000 92837000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9299c000 929a9000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
92aec000 92afa000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba5e8000 ba5ea000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
961bd000 961c5000 wceusbsh.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9604a000 9605a000 serial.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
96fbb000 96fbf000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
96c9d000 96caa000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
adf6e000 adf73000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
982d6000 982d9000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba77e000 ba77f000 Cdralw2k.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba77d000 ba77e000 Cdr4_xp.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba779000 ba77a000 Cdralw2k.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba778000 ba779000 Cdr4_xp.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:debuglog.txt

 

I suggest you try my suggestion before Pete's because you apparently already uninstalled Norton Internet Security (and you might wish to continue using Spy Sweeper).

"SYMEVENT..." also appears several times in your dump log's stack listings.

SYMEVENT.SYS is typically a Symantec/Norton driver file. Symantec/Norton products are notorious for intertwining themselves deeply with the operating system. Uninstalling Symantec/Norton products often leaves parts of Symantec/Norton applications behind.

I'd bet the SYMEVENT.SYS is still active in memory and might be interfering with Spy Sweeper, Armor Online, Avast, etc.

You might do well to run the Norton Removal Tool to fully "get rid of Norton ". You might also do well to disconnect from the Internet and disable all your memory-resident utilities before running the tool (so they do not interfere with the tool).

You probably should reboot after running the tool.

The Norton Removal Tool has worked well for me each time I used it.

(Remember to re-enable your preferred memory-resident protection utilities before reconnecting to the Internet.)

 

Thank you both so much for the suggestions!

I went ahead and uninstalled webroot spysweeper last night to wake up to a rebooted PC.

I went ahead and ran the Symantec/Norton removal tool but it only found PCAnywhere, which I was instructed to uninstall manually (through add/remove software).

I ran the debug on the minidump that was created overnight -- perhaps there's something else that shows up?

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini082709-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 3.3311) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp.080212-0005
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Thu Aug 27 11:04:03.531 2009 (GMT-4)
System Uptime: 0 days 14:17:54.258
Loading Kernel Symbols
...............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
...........................
*** ERROR: Module load completed but symbols could not be loaded for SSIDRV.SYS
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {8, ba340d70, 0, 0}

*** WARNING: Unable to verify timestamp for ssfs0bbc.sys
*** ERROR: Module load completed but symbols could not be loaded for ssfs0bbc.sys
*** ERROR: Module load completed but symbols could not be loaded for mozy.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
*** ERROR: Module load completed but symbols could not be loaded for aswMon2.SYS
*** ERROR: Module load completed but symbols could not be loaded for OADriver.sys
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Probably caused by : SSIDRV.SYS ( SSIDRV+16b30 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: ba340d70
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------

*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************

BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from b9f50f5a to b9f50b30

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
92d7cffc b9f50f5a 8935e00c 8b6e6a68 8936d584 SSIDRV+0x16b30
92d7d048 ba0cad89 8b6f2ed0 00d3f400 8936d568 SSIDRV+0x16f5a
92d7d078 ba0caf97 8b6f2e18 00d3f400 92d70000 ssfs0bbc+0x2d89
92d7d094 804ef18f 8b6f2e18 8ad3f400 86cb0598 ssfs0bbc+0x2f97
92d7d0a4 b9dae876 00000000 8b6f8cc0 8ad3f400 nt!IopfCallDriver+0x31
92d7d0f0 804ef18f 8b74c0d8 00000001 8a6aeca8 sr!SrCreate+0x150
92d7d100 95ac2aad 00000000 8a6aeca8 87df4160 nt!IopfCallDriver+0x31
92d7d12c 95ac2c5d 8ac8db70 00d3f400 92d7d170 mozy+0x3aad
92d7d13c 804ef18f 8ac8db70 8ad3f400 8ad3f400 mozy+0x3c5d
92d7d14c b9dbee9b 00000000 8ad3f400 8ad3f5d8 nt!IopfCallDriver+0x31
92d7d170 b9dcb754 92d7d190 8a67b498 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7d1ac 804ef18f 8a67b498 8ad3f400 8ad3f620 fltmgr!FltpCreate+0x26a
92d7d1bc 957816f1 8ad3f5fc 8ad3f620 92d7d21c nt!IopfCallDriver+0x31
92d7d1e4 95788740 8a67b498 00000000 92d7d21c SYMEVENT!SYMEvent_AllocVMData+0x18f1
92d7d200 95781769 92d7d21c 804f0044 9578182a SYMEVENT!EventObjectCreate+0xa40
92d7d23c 804ef18f 89fc9c80 8ad3f400 8ad3f400 SYMEVENT!SYMEvent_AllocVMData+0x1969
92d7d24c b9dbee9b 00000000 8ad3f400 8ad3f620 nt!IopfCallDriver+0x31
92d7d270 b9dcb754 92d7d290 8a5e82a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7d2ac 804ef18f 8a5e82a8 8ad3f400 00000000 fltmgr!FltpCreate+0x26a
92d7d2bc 92efd89e 8ad3f410 8ad77600 86cb0598 nt!IopfCallDriver+0x31
92d7d2e0 92ef783c 8a647660 00d3f400 804ef18f aswMon2+0x689e
92d7d3dc 805bf444 8b6e6a68 00000000 86bee638 aswMon2+0x83c
92d7d454 805bb9d0 00000000 92d7d494 00000240 nt!ObpLookupObjectName+0x53c
92d7d4a8 80576033 00000000 00000000 00000000 nt!ObOpenObjectByName+0xea
92d7d524 805769aa 92d7db6c 00000003 92d7db20 nt!IopCreateFile+0x407
92d7d580 805790b4 92d7db6c 00000003 92d7db20 nt!IoCreateFile+0x8e
92d7d5c0 958b3212 92d7db6c 00000003 92d7db20 nt!NtCreateFile+0x30
92d7da3c 8054161c 92d7db6c 00000003 92d7db20 OADriver+0x28212
92d7da3c 80500021 92d7db6c 00000003 92d7db20 nt!KiFastCallEntry+0xfc
92d7dae0 95acba6a 92d7db6c 00000003 92d7db20 nt!ZwCreateFile+0x11
92d7db70 95ac056d 8ac8dc28 88dec48c 00000000 mozy+0xca6a
92d7dea4 95ac306d 8ace12d0 88dec48c 8ac8dc28 mozy+0x156d
92d7ded0 95ac22b7 95ac8508 00c8db70 8ace12d0 mozy+0x406d
92d7df00 95ac2a2d 873a5d98 88bf8008 00000000 mozy+0x32b7
92d7df34 95ac2bd2 8ac8db70 873a5d98 92d7df78 mozy+0x3a2d
92d7df44 804ef18f 8ac8db70 873a5d98 873a5d98 mozy+0x3bd2
92d7df54 b9dbee9b 8a67b498 873a5d98 8aa03c18 nt!IopfCallDriver+0x31
92d7df78 b9dbf06b 92d7df98 8a67b498 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7dfb0 804ef18f 8a67b498 873a5d98 804f0044 fltmgr!FltpDispatch+0x11f
92d7dfc0 95781602 873a5fb8 873a5fdc 92d7e010 nt!IopfCallDriver+0x31
92d7dfd8 95788750 8a67b498 00000000 92d7e010 SYMEVENT!SYMEvent_AllocVMData+0x1802
92d7dff4 95781769 92d7e010 804f0044 9578182a SYMEVENT!EventObjectCreate+0xa50
92d7e030 804ef18f 89fc9c80 873a5d98 873a5d98 SYMEVENT!SYMEvent_AllocVMData+0x1969
92d7e040 b9dbee9b 8a5e82a8 873a5d98 89fe3008 nt!IopfCallDriver+0x31
92d7e064 b9dbf06b 92d7e084 8a5e82a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
92d7e09c 804ef18f 8a5e82a8 873a5d98 00000000 fltmgr!FltpDispatch+0x11f
92d7e0ac 92efd89e 8ace12d0 8ad77600 873a5d98 nt!IopfCallDriver+0x31
92d7e0d0 92ef783c 8a647660 003a5d98 804ef18f aswMon2+0x689e
92d7e174 958b3ed8 80000878 92d7eaa4 92d7eab4 aswMon2+0x83c
92d7e9f0 8054161c 80000878 92d7eaa4 92d7eab4 OADriver+0x28ed8
92d7e9f0 80500ebd 80000878 92d7eaa4 92d7eab4 nt!KiFastCallEntry+0xfc
92d7ea7c 8063bfee 80000878 92d7eaa4 92d7eab4 nt!ZwSetInformationFile+0x11
92d7eabc 8063b904 e1038001 00000001 00002000 nt!CmpDoFileSetSize+0x5e
92d7ead4 806399ec e1038008 00000001 00002000 nt!CmpFileSetSize+0x16
92d7eaf4 8063a6e9 e1038008 00000008 0029db1c nt!HvpGrowLog1+0x52
92d7eb10 8063b822 000014f0 00000000 00000060 nt!HvMarkDirty+0x19d
92d7eb34 80632bbc e1038008 0029db20 e4d96588 nt!HvMarkCellDirty+0xbc
92d7eb9c 80621f34 e598fa08 92d7ebf4 00000001 nt!CmSetValueKey+0x110
92d7ec30 958b1d6e 000002fc 92d7f5e4 00000000 nt!NtSetValueKey+0x228
92d7f4c4 95761a1b 000002fc 92d7f5e4 00000000 OADriver+0x26d6e
92d7f51c 8054161c 000002fc 92d7f5e4 00000000 aswSP+0x8a1b
92d7f51c 80501089 000002fc 92d7f5e4 00000000 nt!KiFastCallEntry+0xfc
92d7f5ac 95ac0ec7 000002fc 92d7f5e4 00000000 nt!ZwSetValueKey+0x11
92d7fc30 95acc846 00a1c6d4 00000066 00d1de84 mozy+0x1ec7
92d7fc5c 80580487 8a3c6838 00000001 00a1c6d4 mozy+0xd846
92d7fd00 80579274 00000340 00000000 00000000 nt!IopXxxControlFile+0x255
92d7fd34 8054161c 00000340 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
92d7fd34 7c90e4f4 00000340 00000000 00000000 nt!KiFastCallEntry+0xfc
00d1de44 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
SSIDRV+16b30
b9f50b30 55 push ebp

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: SSIDRV+16b30

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: SSIDRV

IMAGE_NAME: SSIDRV.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 49ee6d28

FAILURE_BUCKET_ID: 0x7f_8_SSIDRV+16b30

BUCKET_ID: 0x7f_8_SSIDRV+16b30

Followup: MachineOwner
---------

eax=86cb0598 ebx=00000003 ecx=00000000 edx=8ad3f400 esi=8ad3f5b4 edi=8b6f2ed0
eip=b9f50b30 esp=92d7d000 ebp=92d7d048 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
SSIDRV+0x16b30:
b9f50b30 55 push ebp
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
92d7cffc b9f50f5a 8935e00c 8b6e6a68 8936d584 SSIDRV+0x16b30
92d7d048 ba0cad89 8b6f2ed0 00d3f400 8936d568 SSIDRV+0x16f5a
92d7d078 ba0caf97 8b6f2e18 00d3f400 92d70000 ssfs0bbc+0x2d89
92d7d094 804ef18f 8b6f2e18 8ad3f400 86cb0598 ssfs0bbc+0x2f97
92d7d0a4 b9dae876 00000000 8b6f8cc0 8ad3f400 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d0f0 804ef18f 8b74c0d8 00000001 8a6aeca8 sr!SrCreate+0x150 (FPO: [2,14,0])
92d7d100 95ac2aad 00000000 8a6aeca8 87df4160 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d12c 95ac2c5d 8ac8db70 00d3f400 92d7d170 mozy+0x3aad
92d7d13c 804ef18f 8ac8db70 8ad3f400 8ad3f400 mozy+0x3c5d
92d7d14c b9dbee9b 00000000 8ad3f400 8ad3f5d8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d170 b9dcb754 92d7d190 8a67b498 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [3,4,4])
92d7d1ac 804ef18f 8a67b498 8ad3f400 8ad3f620 fltmgr!FltpCreate+0x26a (FPO: [2,7,0])
92d7d1bc 957816f1 8ad3f5fc 8ad3f620 92d7d21c nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d1e4 95788740 8a67b498 00000000 92d7d21c SYMEVENT!SYMEvent_AllocVMData+0x18f1
92d7d200 95781769 92d7d21c 804f0044 9578182a SYMEVENT!EventObjectCreate+0xa40
92d7d23c 804ef18f 89fc9c80 8ad3f400 8ad3f400 SYMEVENT!SYMEvent_AllocVMData+0x1969
92d7d24c b9dbee9b 00000000 8ad3f400 8ad3f620 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
92d7d270 b9dcb754 92d7d290 8a5e82a8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [3,4,4])
92d7d2ac 804ef18f 8a5e82a8 8ad3f400 00000000 fltmgr!FltpCreate+0x26a (FPO: [2,7,0])
92d7d2bc 92efd89e 8ad3f410 8ad77600 86cb0598 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
start end module name
804d7000 806e4000 nt ntkrpamp.exe Mon Feb 11 16:35:19 2008 (47B0BF97)
806e4000 80704d00 hal halmacpi.dll Mon Feb 11 16:35:41 2008 (47B0BFAD)
91655000 9167f180 kmixer kmixer.sys Mon Feb 11 16:48:49 2008 (47B0C2C1)
92837000 9284b480 wdmaud wdmaud.sys Mon Feb 11 17:23:43 2008 (47B0CAEF)
92a50000 92a53b20 aswRdr aswRdr.SYS Mon Aug 17 12:04:27 2009 (4A897F8B)
92dec000 92e3dc00 srv srv.sys Mon Feb 11 17:21:23 2008 (47B0CA63)
92e4e000 92e506c0 mdmxsdk mdmxsdk.sys Wed Apr 09 16:48:53 2003 (3E948735)
92e66000 92ea6a80 HTTP HTTP.sys Mon Feb 11 16:44:28 2008 (47B0C1BC)
92ef7000 92f0c580 aswMon2 aswMon2.SYS Tue Aug 11 06:29:18 2009 (4A8147FE)
92f0d000 92f39180 mrxdav mrxdav.sys Mon Feb 11 16:37:21 2008 (47B0C011)
93102000 93105900 ndisuio ndisuio.sys Mon Feb 11 16:46:42 2008 (47B0C242)
9311a000 9312f3c0 DLAUDF_M DLAUDF_M.SYS Thu Sep 08 12:29:08 2005 (432066D4)
93130000 93147040 DLAUDFAM DLAUDFAM.SYS Thu Sep 08 12:29:23 2005 (432066E3)
93148000 9315d1c0 DLAIFS_M DLAIFS_M.SYS Thu Sep 08 12:29:02 2005 (432066CE)
9315e000 93181180 Fastfat Fastfat.SYS Mon Feb 11 17:20:42 2008 (47B0CA3A)
95684000 95758e80 dump_iastor dump_iastor.sys Fri Jun 17 10:33:38 2005 (42B2DF42)
95759000 9577a000 aswSP aswSP.SYS Tue Aug 11 06:28:30 2009 (4A8147CE)
9577a000 9579c000 SYMEVENT SYMEVENT.SYS Mon Jan 16 15:53:50 2006 (43CC07DE)
9579c000 957b9000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Wed Mar 28 19:51:40 2007 (460AFF8C)
957b9000 9581b000 eeCtrl eeCtrl.sys Wed Mar 28 19:51:40 2007 (460AFF8C)
9581b000 9588a780 mrxsmb mrxsmb.sys Mon Feb 11 17:23:14 2008 (47B0CAD2)
9588b000 958d0000 OADriver OADriver.sys Thu Jul 02 17:42:38 2009 (4A4D29CE)
958d0000 958fae80 rdbss rdbss.sys Mon Feb 11 17:34:53 2008 (47B0CD8D)
958fb000 9591cb80 afd afd.sys Mon Feb 11 23:49:04 2008 (47B12540)
9591d000 95944c00 netbt netbt.sys Mon Feb 11 23:50:59 2008 (47B125B3)
95945000 9599d380 tcpip tcpip.sys Mon Feb 11 23:50:01 2008 (47B12579)
9599e000 959b9000 RCFOX RCFOX.sys Fri Oct 15 13:46:09 2004 (41700CE1)
959b9000 959cb600 ipsec ipsec.sys Mon Feb 11 23:49:44 2008 (47B12568)
959de000 95a0f700 UDFReadr UDFReadr.SYS Fri Jun 24 02:21:20 2005 (42BBA660)
95a22000 95a44780 DVDVRRdr_xp DVDVRRdr_xp.SYS Fri Jun 24 02:24:57 2005 (42BBA739)
95a57000 95a9e280 cdudf_xp cdudf_xp.SYS Fri Jun 24 02:34:38 2005 (42BBA97E)
95abf000 95ad2000 mozy mozy.sys Thu Jun 18 15:13:49 2009 (4A3A91ED)
95b4a000 95b50500 usbprint usbprint.sys Mon Feb 11 17:03:57 2008 (47B0C64D)
95b62000 95b69d80 usbccgp usbccgp.sys Mon Feb 11 16:49:26 2008 (47B0C2E6)
95b6a000 95b70700 USBSTOR USBSTOR.SYS Mon Feb 11 16:49:26 2008 (47B0C2E6)
95f17000 95f19280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
9600a000 96019900 Cdfs Cdfs.SYS Mon Feb 11 17:20:35 2008 (47B0CA33)
9603a000 96044e00 Fips Fips.SYS Mon Feb 11 16:38:34 2008 (47B0C05A)
961a5000 961a9a80 Aavmker4 Aavmker4.SYS Mon Aug 17 12:03:20 2009 (4A897F48)
961b5000 961bc840 SCDEmu SCDEmu.SYS Sun Jan 20 02:07:58 2008 (4792F34E)
961cd000 961d5000 OAmon OAmon.sys Wed Jun 10 11:14:10 2009 (4A2FCDC2)
961d5000 961dc880 Npfs Npfs.SYS Mon Feb 11 16:37:17 2008 (47B0C00D)
96c1d000 96c25780 netbios netbios.sys Mon Feb 11 16:46:47 2008 (47B0C247)
96c2d000 96c3bd80 arp1394 arp1394.sys Mon Feb 11 16:42:03 2008 (47B0C12B)
96c3d000 96c45700 wanarp wanarp.sys Mon Feb 11 16:48:19 2008 (47B0C2A3)
96c4d000 96c572c0 aswTdi aswTdi.SYS Mon Aug 17 12:04:38 2009 (4A897F96)
96c6d000 96c75900 msgpc msgpc.sys Mon Feb 11 16:47:12 2008 (47B0C260)
96c7d000 96c86000 OAnet OAnet.sys Wed Apr 08 12:14:49 2009 (49DCCD79)
96cad000 96cb6000 HIDCLASS HIDCLASS.SYS Mon Feb 11 16:49:13 2008 (47B0C2D9)
96fb7000 96fb9740 awlegacy awlegacy.sys Mon Sep 11 18:19:37 2000 (39BD5A79)
96fc3000 96fc5780 ELhid ELhid.sys Tue Nov 08 17:51:16 2005 (43712BE4)
96fcb000 96fcd880 hidusb hidusb.sys Mon Feb 11 16:49:14 2008 (47B0C2DA)
982d2000 982d4180 i2omgmt i2omgmt.SYS Mon Feb 11 16:44:21 2008 (47B0C1B5)
98f26000 98f28900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
a4014000 a4037a80 portcls portcls.sys Mon Feb 11 17:26:18 2008 (47B0CB8A)
a4038000 a412f5e0 sthda sthda.sys Wed Nov 16 14:47:30 2005 (437B8CD2)
ad4fd000 ad50b880 usbhub usbhub.sys Mon Feb 11 16:49:25 2008 (47B0C2E5)
ad51d000 ad52bb00 drmk drmk.sys Mon Feb 11 16:48:53 2008 (47B0C2C5)
ad54d000 ad556e80 NDProxy NDProxy.SYS Mon Feb 11 16:48:28 2008 (47B0C2AC)
ad5f5000 ad5f6800 RaInfo RaInfo.sys Fri Jan 04 13:57:12 2008 (477E8188)
ad605000 ad6068a0 DLAPoolM DLAPoolM.SYS Thu Sep 08 12:29:03 2005 (432066CF)
ade1f000 ade22b00 usbscan usbscan.sys Mon Feb 11 17:01:28 2008 (47B0C5B8)
ade2f000 ade32900 kbdhid kbdhid.sys Mon Feb 11 16:42:16 2008 (47B0C138)
adf25000 adf26500 dsunidrv dsunidrv.sys Sun Feb 18 13:31:02 2007 (45D89B66)
adf46000 adf4a500 watchdog watchdog.sys Mon Feb 11 16:48:38 2008 (47B0C2B6)
adf4e000 adf53d00 mmc_2K mmc_2K.SYS Fri Jun 24 02:20:16 2005 (42BBA620)
adf56000 adf5aa80 Msfs Msfs.SYS Mon Feb 11 16:37:16 2008 (47B0C00C)
adf5e000 adf63200 vga vga.sys Mon Feb 11 16:48:12 2008 (47B0C29C)
adf66000 adf6b860 DLARTL_N DLARTL_N.SYS Thu Aug 25 15:16:15 2005 (430E18FF)
adf76000 adf7c180 HIDPARSE HIDPARSE.SYS Mon Feb 11 16:49:08 2008 (47B0C2D4)
b39ee000 b39f3000 flpydisk flpydisk.sys Mon Feb 11 16:43:00 2008 (47B0C164)
b76c2000 b76c7f00 dvd_2K dvd_2K.SYS Fri Jun 24 02:34:07 2005 (42BBA95F)
b79df000 b79e85a0 DRVNDDM DRVNDDM.SYS Fri Aug 12 16:21:43 2005 (42FD04D7)
b8645000 b8647f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
b872b000 b8783e80 update update.sys Mon Feb 11 16:42:13 2008 (47B0C135)
b8784000 b87b3e80 rdpdr rdpdr.sys Mon Feb 11 16:37:29 2008 (47B0C019)
b87b4000 b87ca580 ndiswan ndiswan.sys Mon Feb 11 23:50:43 2008 (47B125A3)
b87cb000 b87e69e0 dne2000 dne2000.sys Fri May 14 20:13:12 2004 (40A56098)
b87e7000 b8803c00 pwd_2k pwd_2k.SYS Fri Jun 24 02:08:34 2005 (42BBA362)
b8804000 b88aa300 HSF_CNXT HSF_CNXT.sys Mon Nov 17 08:58:00 2003 (3FB8D3E8)
b88ab000 b89a9800 HSF_DP HSF_DP.sys Mon Nov 17 08:56:13 2003 (3FB8D37D)
b89aa000 b89cc700 ks ks.sys Mon Feb 11 17:23:00 2008 (47B0CAC4)
b89cd000 b8a00d00 HSFHWBS2 HSFHWBS2.sys Mon Nov 17 08:59:18 2003 (3FB8D436)
b8a01000 b8b38520 nv4_mini nv4_mini.sys Mon Jul 28 18:48:36 2003 (3F25A844)
b8b39000 b8b5c200 USBPORT USBPORT.SYS Mon Feb 11 16:49:23 2008 (47B0C2E3)
b8b5d000 b8b88000 e1e5132 e1e5132.sys Thu Aug 25 17:05:23 2005 (430E3293)
b8b88000 b8bae000 HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
b8bae000 b8bc1f00 VIDEOPRT VIDEOPRT.SYS Mon Feb 11 16:48:12 2008 (47B0C29C)
b8bc2000 b8d07000 ati2mtag ati2mtag.sys Wed Aug 03 23:10:15 2005 (42F18717)
b8d97000 b8da0f00 termdd termdd.sys Mon Feb 11 16:44:21 2008 (47B0C1B5)
b9185000 b9188f00 MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
b9189000 b918cc80 mssmbios mssmbios.sys Mon Feb 11 16:42:25 2008 (47B0C141)
b955b000 b9569d80 sysaudio sysaudio.sys Mon Feb 11 17:22:20 2008 (47B0CA9C)
b9c5c000 b9c5e780 ndistapi ndistapi.sys Mon Feb 11 16:48:27 2008 (47B0C2AB)
b9c6c000 b9c6e500 GEARAspiWDM GEARAspiWDM.sys Tue Jan 29 12:00:57 2008 (479F5BC9)
b9cd5000 b9ceeb80 Mup Mup.sys Mon Feb 11 17:23:20 2008 (47B0CAD8)
b9cef000 b9d7b600 Ntfs Ntfs.sys Mon Feb 11 17:21:59 2008 (47B0CA87)
b9d7c000 b9d92880 KSecDD KSecDD.sys Mon Feb 11 16:36:35 2008 (47B0BFE3)
b9d93000 b9da8440 DRVMCDB DRVMCDB.SYS Mon Sep 12 17:38:27 2005 (4325F553)
b9da9000 b9dbaf00 sr sr.sys Mon Feb 11 16:39:46 2008 (47B0C0A2)
b9dbb000 b9ddab00 fltmgr fltmgr.sys Mon Feb 11 16:37:32 2008 (47B0C01C)
b9ddb000 b9eafe80 iastor iastor.sys Fri Jun 17 10:33:38 2005 (42B2DF42)
b9eb0000 b9ec7900 atapi atapi.sys Mon Feb 11 16:43:08 2008 (47B0C16C)
b9ec8000 b9eed700 dmio dmio.sys Mon Feb 11 16:48:19 2008 (47B0C2A3)
b9eee000 b9f0c880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
b9f0d000 b9f39980 NDIS NDIS.SYS Mon Feb 11 23:50:39 2008 (47B1259F)
b9f3a000 b9f68000 SSIDRV SSIDRV.SYS Tue Apr 21 21:04:40 2009 (49EE6D28)
b9f68000 b9f78a80 pci pci.sys Mon Feb 11 16:42:22 2008 (47B0C13E)
b9f79000 b9fa6d80 ACPI ACPI.sys Mon Feb 11 16:42:12 2008 (47B0C134)
ba0a8000 ba0b1180 isapnp isapnp.sys Mon Feb 11 16:42:19 2008 (47B0C13B)
ba0b8000 ba0c1000 SSHRMD SSHRMD.SYS Tue Apr 21 21:04:05 2009 (49EE6D05)
ba0c8000 ba0d3000 ssfs0bbc ssfs0bbc.sys Tue Apr 21 21:05:39 2009 (49EE6D63)
ba0d8000 ba0e2580 MountMgr MountMgr.sys Mon Feb 11 16:42:13 2008 (47B0C135)
ba0e8000 ba0f4c80 VolSnap VolSnap.sys Mon Feb 11 16:43:45 2008 (47B0C191)
ba0f8000 ba100e00 disk disk.sys Mon Feb 11 16:43:27 2008 (47B0C17F)
ba108000 ba114180 CLASSPNP CLASSPNP.SYS Mon Feb 11 17:22:48 2008 (47B0CAB8)
ba118000 ba120b80 PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)
ba128000 ba132b80 sbp2port sbp2port.sys Mon Feb 11 16:43:29 2008 (47B0C181)
ba138000 ba147100 ohci1394 ohci1394.sys Mon Feb 11 16:50:12 2008 (47B0C314)
ba148000 ba155080 1394BUS 1394BUS.SYS Mon Feb 11 16:50:11 2008 (47B0C313)
ba1c8000 ba1d2000 LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)
ba218000 ba220e00 intelppm intelppm.sys Mon Feb 11 16:35:46 2008 (47B0BFB2)
ba228000 ba237180 nic1394 nic1394.sys Mon Feb 11 16:42:03 2008 (47B0C12B)
ba238000 ba242480 imapi imapi.sys Mon Feb 11 16:43:42 2008 (47B0C18E)
ba248000 ba257600 cdrom cdrom.sys Mon Feb 11 16:43:25 2008 (47B0C17D)
ba258000 ba266100 redbook redbook.sys Mon Feb 11 16:43:02 2008 (47B0C166)
ba268000 ba274880 rasl2tp rasl2tp.sys Mon Feb 11 23:49:45 2008 (47B12569)
ba278000 ba282200 raspppoe raspppoe.sys Mon Feb 11 16:48:31 2008 (47B0C2AF)
ba288000 ba293d00 raspptp raspptp.sys Mon Feb 11 23:50:02 2008 (47B1257A)
ba328000 ba32ca80 TDI TDI.SYS Mon Feb 11 16:51:08 2008 (47B0C34C)
ba330000 ba336180 PCIIDEX PCIIDEX.SYS Mon Feb 11 16:43:07 2008 (47B0C16B)
ba338000 ba33cd00 PartMgr PartMgr.sys Mon Feb 11 16:43:29 2008 (47B0C181)
ba3d0000 ba3d5080 usbuhci usbuhci.sys Mon Feb 11 16:49:23 2008 (47B0C2E3)
ba3d8000 ba3df600 usbehci usbehci.sys Mon Feb 11 16:49:23 2008 (47B0C2E3)
ba3e0000 ba3e7580 Modem Modem.SYS Mon Feb 11 16:51:21 2008 (47B0C359)
ba3e8000 ba3e9000 fdc fdc.sys unavailable (00000000)
ba3f0000 ba3f4580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
ba3f8000 ba3fc080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
ba400000 ba405020 wanatw4 wanatw4.sys Tue Jul 16 11:23:14 2002 (3D343A62)
ba408000 ba40e780 RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)
ba410000 ba416000 kbdclass kbdclass.sys Mon Feb 11 16:42:15 2008 (47B0C137)
ba418000 ba41da00 mouclass mouclass.sys Mon Feb 11 16:42:15 2008 (47B0C137)
ba438000 ba440000 aswFsBlk aswFsBlk.sys Tue Aug 11 06:28:20 2009 (4A8147C4)
ba448000 ba44e3e0 DLABOIOM DLABOIOM.SYS Thu Sep 08 12:29:37 2005 (432066F1)
ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
ba4bc000 ba4be800 compbatt compbatt.sys Mon Feb 11 16:42:16 2008 (47B0C138)
ba4c0000 ba4c3780 BATTC BATTC.SYS Mon Feb 11 16:42:10 2008 (47B0C132)
ba4c4000 ba4c7780 Gernuwa Gernuwa.sys Tue Oct 09 16:14:34 2001 (3BC35AAA)
ba58c000 ba58f920 DLAOPIOM DLAOPIOM.SYS Thu Sep 08 12:30:23 2005 (4320671F)
ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
ba5ac000 ba5ad700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
ba5f8000 ba5f9f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
ba5fa000 ba5fb080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba5fc000 ba5fd080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
ba600000 ba601080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
ba602000 ba603900 ELmou ELmou.sys Tue Nov 08 17:51:18 2005 (43712BE6)
ba604000 ba605b80 ELmon ELmon.sys Tue Nov 08 17:51:37 2005 (43712BF9)
ba606000 ba607b00 ELkbd ELkbd.sys Tue Nov 08 17:51:20 2005 (43712BE8)
ba628000 ba629280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
ba63e000 ba63f5c0 DLACDBHM DLACDBHM.SYS Thu Aug 25 15:16:50 2005 (430E1922)
ba640000 ba641e80 ELacpi ELacpi.sys Tue Nov 08 17:51:39 2005 (43712BFB)
ba642000 ba643700 RootMdm RootMdm.sys Fri Aug 17 16:57:36 2001 (3B7D8540)
ba644000 ba645100 swenum swenum.sys Mon Feb 11 16:42:22 2008 (47B0C13E)
ba668000 ba669280 DSproct DSproct.sys Thu Oct 05 10:02:50 2006 (4525108A)
ba670000 ba670d00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
ba70f000 ba70f980 DLADResN DLADResN.SYS Thu Sep 08 12:32:10 2005 (4320678A)
ba71f000 ba71fa00 Cdralw2k Cdralw2k.SYS Fri Feb 02 16:00:38 2007 (45C3A676)
ba722000 ba722980 Cdr4_xp Cdr4_xp.SYS Fri Feb 02 14:08:11 2007 (45C38C1B)
ba723000 ba723b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
ba725000 ba725d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
ba780000 ba780c80 lmimirr lmimirr.sys Tue Apr 10 18:32:11 2007 (461C106B)
ba783000 ba783c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
bf000000 bf011600 dxg dxg.sys Mon Feb 11 16:48:50 2008 (47B0C2C2)
bf012000 bf049000 ati2dvag ati2dvag.dll Wed Aug 03 23:10:35 2005 (42F1872B)
bf049000 bf07d000 ati2cqag ati2cqag.dll Wed Aug 03 22:02:23 2005 (42F1772F)
bf07d000 bf0b2000 atikvmag atikvmag.dll Wed Aug 03 22:34:10 2005 (42F17EA2)
bf0b2000 bf2f3820 ati3duag ati3duag.dll Wed Aug 03 22:54:05 2005 (42F1834D)
bf2f4000 bf390380 ativvaxx ativvaxx.dll Wed Aug 03 22:47:06 2005 (42F181AA)
bf391000 bf749c40 nv4_disp nv4_disp.dll Mon Jul 28 18:53:44 2003 (3F25A978)
bf800000 bf9c2300 win32k win32k.sys Mon Feb 11 17:35:33 2008 (47B0CDB5)

Unloaded modules:
91655000 91680000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91655000 91680000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
adb16000 adb1c000 RimUsb.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91655000 91680000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
918e3000 9190e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
918e3000 9190e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91aee000 91b19000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b16000 91b41000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b16000 91b41000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91cf6000 91d21000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91cf6000 91d21000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
927e9000 92814000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
95ecb000 95ecc000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
92814000 92837000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9299c000 929a9000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
92aec000 92afa000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba5e8000 ba5ea000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
961bd000 961c5000 wceusbsh.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9604a000 9605a000 serial.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
96fbb000 96fbf000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
96c9d000 96caa000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
adf6e000 adf73000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
982d6000 982d9000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba77e000 ba77f000 Cdralw2k.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba77d000 ba77e000 Cdr4_xp.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba779000 ba77a000 Cdralw2k.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba778000 ba779000 Cdr4_xp.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:debuglog.txt

 

Thanks very much for your help!

I uninstalled webroot spysweeper last night and woke up this morning to an automatically rebooted PC.

I ram the Symantec/Norton removal tool and all it found was PcAnywhere, which it told me to uninstall manually (through add/remove software).

I went ahead and uninstalled Avast and Armor Online.

I'm really hoping it's as simple as one of those program (or an interaction between them) having caused this problem, and not a hardware failure.

I'm dreading the thought of trying to close and replace this HD (any tips would be appreciated).

I'll post an update.

 

At the moment, I have no antivirus, spyware or firewall protection active. Ugh!

ssidrv.sys is in c:\windows\system32\drivers

symevent.sys is all over (in different sizes and modification dates): c:\i386, c:\program files\symantec; c:\windows\system32\drivers)

aswmon2.sys and ssfs0bbc.sys are not found on my system -- gone with's uninstallation of Avast and Spysweeper.

aswsp.sys is also not found.

Yes, I do use mozy for online backup.

I know it's lame, but I'm scared of running a disk diag for fear of crashing the whole system. Is this rational?

Thanks so much guys!

 

Okay, I reinstalled Avast and turned on WinXP firewall -- thank you.

I can't get SeaTools to run -- looks for drives but can't fine.

 

Seatools DOS ran -- short and long test performed, no errors found (whew!).

Kernel dump set to save (restart upon error already unchecked).

I suppose I'll keep it like this and see if it happens again.

Thanks again!