Auto restart on a new Dell D630

Hi I have a user who's Dell D630 has been randomly rebooting when working remotley from Home. Only happens when he works from home connected via WiFi. I will post the minidump files below. If I read these correclty it looks like the Sygate personal firewall is the culprit.

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\nvanwill.ATCORP\Desktop\Mini121107-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*DownstreamStore*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_qfe.070227-2300
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Tue Dec 11 23:04:33.843 2007 (GMT-5)
System Uptime: 0 days 3:34:50.637
Loading Kernel Symbols
....................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
.................
Unable to load image wg5n.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for wg5n.sys
*** ERROR: Module load completed but symbols could not be loaded for wg5n.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {4277ecb7, 2, 0, f72ea7f1}



Probably caused by : wg5n.sys ( wg5n+12da )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 4277ecb7, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f72ea7f1, address which referenced memory

Debugging Details:
------------------




READ_ADDRESS: 4277ecb7

CURRENT_IRQL: 2

FAULTING_IP:
NDIS!NdisFreePacket+1c
f72ea7f1 817f1400100000 cmp dword ptr [edi+14h],1000h

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

PROCESS_NAME: Smc.exe

LAST_CONTROL_TRANSFER: from bade22da to f72ea7f1

STACK_TEXT:
bac1bc28 bade22da 86367508 80545d88 865d93c8 NDIS!NdisFreePacket+0x1c
WARNING: Stack unwind information not available. Following frames may be wrong.
bac1bc40 bade1d94 865d93c8 86367508 00000000 wg5n+0x12da
bac1bc64 804ef163 8690b908 86ec2470 86ec2470 wg5n+0xd94
bac1bc74 8058273b 86b28c60 86fe7900 00000001 nt!IopfCallDriver+0x31
bac1bc98 80534b99 86b28c60 bac1bcd4 805bb59f nt!IopCloseFile+0x26b
bac1bd58 805409ac 00000888 03e1fcbc 7c90eb94 nt!ExReleaseResourceLite+0x8d
bac1bd58 7c90eb94 00000888 03e1fcbc 7c90eb94 nt!KiFastCallEntry+0xfc
03e1fcbc 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
wg5n+12da
bade22da ?? ???

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: wg5n+12da

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: wg5n

IMAGE_NAME: wg5n.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 40c0eb9b

FAILURE_BUCKET_ID: 0xD1_wg5n+12da

BUCKET_ID: 0xD1_wg5n+12da

Followup: MachineOwner

 

The stated error wg5n.sys appears to belong to Sygate Technologies, Inc.. Does this computer have / had Sygate security programs? Possible a conflict during remote sessions / local WIFI software.

 

The Pc is running Sygate personal firewall. I long suspected it to be causing the problem. I am going to disable the service from running and see what happens.