MRxDAV.sys crashing system

Hello,

We have a computer here that has crashed 4 times over the last 24 hours. Each dump file indicates that MRxDAV.sys is the problem. The computer is run SP2 and should have the latest security patches. Any help would be greatly appreciated.

Thanks.

-Ben

Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
Debug session time: Tue Jan 18 07:43:44 2005
System Uptime: 0 days 0:21:51.205
Loading Kernel Symbols
...................................................................................................................
Loading unloaded module list
........................
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ff48b000, 0, f4788ee5, 0}

Probably caused by : mrxdav.sys ( mrxdav!MRxDAVFsdDispatch+9f )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ff48b000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: f4788ee5, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


READ_ADDRESS: ff48b000 Nonpaged pool

FAULTING_IP:
mrxdav!MRxDAVFsdDispatch+9f
f4788ee5 66833a5c cmp word ptr [edx],0x5c

MM_INTERNAL_CODE: 0

IMAGE_NAME: mrxdav.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107b91

MODULE_NAME: mrxdav

FAULTING_MODULE: f477e000 mrxdav

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from 804e3d77 to f4788ee5

TRAP_FRAME: f96916ec -- (.trap fffffffff96916ec)
.trap fffffffff96916ec
ErrCode = 00000000
eax=00000002 ebx=ffbba560 ecx=00000c10 edx=ff48b000 esi=00000001 edi=ff48a3d0
eip=f4788ee5 esp=f9691760 ebp=f96917c4 iopl=0 nv up ei ng nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010296
mrxdav!MRxDAVFsdDispatch+0x9f:
f4788ee5 66833a5c cmp word ptr [edx],0x5c ds:0023:ff48b000=????
.trap
Resetting default scope

STACK_TEXT:
f96917c4 804e3d77 81213358 81212008 ff48a398 mrxdav!MRxDAVFsdDispatch+0x9f
f96917d4 f9082714 e2677c90 f9691808 f9082632 nt!IopfCallDriver+0x31
f96917e0 f9082632 ff48a398 00000000 f9080308 Mup!MupiIssueQueryRequest+0x18
f9691808 f9082471 81206ad8 811fe880 c00000be Mup!MupiResolvePrefix+0x11b
f969184c f9081b19 81206ad8 811fe880 f96918e4 Mup!CreateRedirectedFile+0x35d
f96918a8 804e3d77 812f2628 81206ad8 81206ad8 Mup!MupCreate+0x1cb
f96918b8 80570f9c 812f2610 ffb0bbac f9691a60 nt!IopfCallDriver+0x31
f9691998 8056386c 812f2628 00000000 ffb0bb08 nt!IopParseDevice+0xa58
f9691a20 80567c63 00000000 f9691a60 00000040 nt!ObpLookupObjectName+0x56a
f9691a74 80571477 00000000 00000000 00000100 nt!ObOpenObjectByName+0xeb
f9691af0 80571546 f9691d44 00100000 f9691c70 nt!IopCreateFile+0x407
f9691b4c 8057167c f9691d44 00100000 f9691c70 nt!IoCreateFile+0x8e
f9691b8c 804df06b f9691d44 00100000 f9691c70 nt!NtCreateFile+0x30
f9691b8c 804dcfb9 f9691d44 00100000 f9691c70 nt!KiFastCallEntry+0xf8
f9691c30 f9082ab2 f9691d44 00100000 f9691c70 nt!ZwCreateFile+0x11
f9691c98 f907c93b f9691cd4 00000000 00000000 Mup!DfsCreateConnection+0x95
f9691d58 f907d014 812e24e0 812e24e8 812e24f0 Mup!_PktGetReferral+0x162
f9691d74 804e47fe 812e24e0 00000000 8134a530 Mup!PktWorkInSystemContext+0x4c
f9691dac 8057dfed 812e24e0 00000000 00000000 nt!ExpWorkerThread+0x100
f9691ddc 804fa477 804e4729 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
mrxdav!MRxDAVFsdDispatch+9f
f4788ee5 66833a5c cmp word ptr [edx],0x5c

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: mrxdav!MRxDAVFsdDispatch+9f

STACK_COMMAND: .trap fffffffff96916ec ; kb

BUCKET_ID: 0x50_mrxdav!MRxDAVFsdDispatch+9f

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000000 ecx=00000000 edx=804e2a00 esi=c03fd22c edi=806ed03c
eip=805339ae esp=f9691670 ebp=f9691688 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
805339ae 5d pop ebp
ChildEBP RetAddr Args to Child
f9691688 805246fb 00000050 ff48b000 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f96916d4 804e1ff1 00000000 ff48b000 00000000 nt!MmAccessFault+0x6f5 (FPO: [Non-Fpo])
f96916d4 f4788ee5 00000000 ff48b000 00000000 nt!KiTrap0E+0xcc (FPO: [0,0] TrapFrame @ f96916ec)
f96917c4 804e3d77 81213358 81212008 ff48a398 mrxdav!MRxDAVFsdDispatch+0x9f (FPO: [Non-Fpo])
f96917d4 f9082714 e2677c90 f9691808 f9082632 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f96917e0 f9082632 ff48a398 00000000 f9080308 Mup!MupiIssueQueryRequest+0x18 (FPO: [Non-Fpo])
f9691808 f9082471 81206ad8 811fe880 c00000be Mup!MupiResolvePrefix+0x11b (FPO: [Non-Fpo])
f969184c f9081b19 81206ad8 811fe880 f96918e4 Mup!CreateRedirectedFile+0x35d (FPO: [Non-Fpo])
f96918a8 804e3d77 812f2628 81206ad8 81206ad8 Mup!MupCreate+0x1cb (FPO: [Non-Fpo])
f96918b8 80570f9c 812f2610 ffb0bbac f9691a60 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f9691998 8056386c 812f2628 00000000 ffb0bb08 nt!IopParseDevice+0xa58 (FPO: [Non-Fpo])
f9691a20 80567c63 00000000 f9691a60 00000040 nt!ObpLookupObjectName+0x56a (FPO: [Non-Fpo])
f9691a74 80571477 00000000 00000000 00000100 nt!ObOpenObjectByName+0xeb (FPO: [Non-Fpo])
f9691af0 80571546 f9691d44 00100000 f9691c70 nt!IopCreateFile+0x407 (FPO: [Non-Fpo])
f9691b4c 8057167c f9691d44 00100000 f9691c70 nt!IoCreateFile+0x8e (FPO: [Non-Fpo])
f9691b8c 804df06b f9691d44 00100000 f9691c70 nt!NtCreateFile+0x30 (FPO: [Non-Fpo])
f9691b8c 804dcfb9 f9691d44 00100000 f9691c70 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f9691bc0)
f9691c30 f9082ab2 f9691d44 00100000 f9691c70 nt!ZwCreateFile+0x11 (FPO: [11,0,0])
f9691c98 f907c93b f9691cd4 00000000 00000000 Mup!DfsCreateConnection+0x95 (FPO: [Non-Fpo])
f9691d58 f907d014 812e24e0 812e24e8 812e24f0 Mup!_PktGetReferral+0x162 (FPO: [Non-Fpo])
start end module name
804d7000 806eb780 nt ntoskrnl.exe Tue Aug 03 23:19:48 2004 (41108004)
806ec000 806ffd80 hal halacpi.dll Tue Aug 03 22:59:04 2004 (41107B28)
bf800000 bf9c0380 win32k win32k.sys Tue Aug 03 23:17:30 2004 (41107F7A)
bf9c1000 bf9d2580 dxg dxg.sys Tue Aug 03 23:00:51 2004 (41107B93)
bf9d3000 bfa7e940 i81xdnt5 i81xdnt5.dll Wed Aug 04 00:56:07 2004 (41109697)
bfa7f000 bfa87700 mnmdd_bfa7f000 mnmdd.dll Wed Aug 04 00:56:35 2004 (411096B3)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 00:56:56 2004 (411096C8)
f39fb000 f3a24f00 kmixer kmixer.sys Tue Aug 03 23:07:46 2004 (41107D32)
f3ed5000 f3f15380 HTTP HTTP.sys Tue Aug 03 23:00:09 2004 (41107B69)
f3fb6000 f3fd8000 RDPWD RDPWD.SYS Tue Aug 03 22:59:01 2004 (41107B25)
f4195000 f41a9400 wdmaud wdmaud.sys Tue Aug 03 23:15:03 2004 (41107EE7)
f4242000 f4250d80 sysaudio sysaudio.sys Tue Aug 03 23:15:54 2004 (41107F1A)
f433a000 f434a760 NAVENG NAVENG.sys Thu Sep 30 18:59:17 2004 (415CB9F5)
f434b000 f43e3680 NAVEX15 NAVEX15.sys Thu Sep 30 19:11:15 2004 (415CBCC3)
f43e4000 f4422000 NAVAP NAVAP.sys Fri May 02 21:08:14 2003 (3EB340AE)
f4422000 f4432a60 SYMEVENT SYMEVENT.SYS Tue May 13 22:45:43 2003 (3EC1D807)
f454b000 f45683e0 srvloc srvloc.sys Fri Feb 14 06:04:40 2003 (3E4CF778)
f4631000 f4642000 NAVAPEL NAVAPEL.SYS Fri May 02 21:08:21 2003 (3EB340B5)
f4642000 f4694180 srv srv.sys Tue Aug 03 23:14:44 2004 (41107ED4)
f470d000 f477d9c0 nwfs nwfs.sys Wed Jul 02 16:23:50 2003 (3F036986)
f477e000 f47aa400 mrxdav mrxdav.sys Tue Aug 03 23:00:49 2004 (41107B91)
f48c3000 f48c6c00 nwdhcp nwdhcp.sys Mon May 12 14:55:09 2003 (3EC0183D)
f4b0b000 f4b0e280 ndisuio ndisuio.sys Tue Aug 03 23:03:10 2004 (41107C1E)
f4b13000 f4b2a480 dump_atapi dump_atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
f4b2b000 f4b4bf00 ipnat ipnat.sys Wed Sep 29 15:28:36 2004 (415B3714)
f4b4c000 f4bb9680 mrxsmb mrxsmb.sys Wed Oct 27 18:14:16 2004 (418047E8)
f4be2000 f4c0ca00 rdbss rdbss.sys Wed Oct 27 18:13:57 2004 (418047D5)
f4c0d000 f4c2ed00 afd afd.sys Tue Aug 03 23:14:13 2004 (41107EB5)
f4c2f000 f4c56c00 netbt netbt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
f4c57000 f4caea80 tcpip tcpip.sys Tue Aug 03 23:14:39 2004 (41107ECF)
f4caf000 f4cc1400 ipsec ipsec.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f4d1f000 f4d21900 Dxapi Dxapi.sys Fri Aug 17 13:53:19 2001 (3B7D843F)
f4d9b000 f4da3700 wanarp wanarp.sys Tue Aug 03 23:04:57 2004 (41107C89)
f8e83000 f8eb6200 update update.sys Tue Aug 03 22:58:32 2004 (41107B08)
f8eb7000 f8ee7100 rdpdr rdpdr.sys Tue Aug 03 23:01:10 2004 (41107BA6)
f8ee8000 f8ef8e00 psched psched.sys Tue Aug 03 23:04:16 2004 (41107C60)
f8ef9000 f8f0f680 ndiswan ndiswan.sys Tue Aug 03 23:14:30 2004 (41107EC6)
f8f10000 f8f33980 portcls portcls.sys Tue Aug 03 23:15:47 2004 (41107F13)
f8f34000 f8f4b800 ac97intc ac97intc.sys Thu Jul 19 15:43:40 2001 (3B57629C)
f8f4c000 f8f6ee80 USBPORT USBPORT.SYS Tue Aug 03 23:08:34 2004 (41107D62)
f8f6f000 f8f91680 ks ks.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f8fc2000 f8fd5900 parport parport.sys Tue Aug 03 22:59:04 2004 (41107B28)
f8fd6000 f8fe6400 el90xbc5 el90xbc5.sys Mon Jul 16 16:40:19 2001 (3B537B63)
f8fe7000 f8ffa780 VIDEOPRT VIDEOPRT.SYS Tue Aug 03 23:07:04 2004 (41107D08)
f8ffb000 f90224c0 i81xnt5 i81xnt5.sys Mon Mar 29 14:27:48 2004 (4068A2E4)
f907c000 f9096580 Mup Mup.sys Tue Aug 03 23:15:20 2004 (41107EF8)
f9097000 f90c3a80 NDIS NDIS.sys Tue Aug 03 23:14:27 2004 (41107EC3)
f90c4000 f9150480 Ntfs Ntfs.sys Tue Aug 03 23:15:06 2004 (41107EEA)
f9151000 f9167780 KSecDD KSecDD.sys Tue Aug 03 22:59:45 2004 (41107B51)
f9168000 f9186780 fltmgr fltmgr.sys Tue Aug 03 23:01:17 2004 (41107BAD)
f9187000 f919e480 atapi atapi.sys Tue Aug 03 22:59:41 2004 (41107B4D)
f919f000 f91c4700 dmio dmio.sys Tue Aug 03 23:07:13 2004 (41107D11)
f91c5000 f91e3880 ftdisk ftdisk.sys Fri Aug 17 13:52:41 2001 (3B7D8419)
f91e4000 f9201480 pcmcia pcmcia.sys Tue Aug 03 23:07:45 2004 (41107D31)
f9202000 f9212a80 pci pci.sys Tue Aug 03 23:07:45 2004 (41107D31)
f9213000 f9240d80 ACPI ACPI.sys Tue Aug 03 23:07:35 2004 (41107D27)
f9262000 f926ac00 isapnp isapnp.sys Fri Aug 17 13:58:01 2001 (3B7D8559)
f9272000 f927c500 MountMgr MountMgr.sys Tue Aug 03 22:58:29 2004 (41107B05)
f9282000 f928ec80 VolSnap VolSnap.sys Tue Aug 03 23:00:14 2004 (41107B6E)
f9292000 f929ae00 disk disk.sys Tue Aug 03 22:59:53 2004 (41107B59)
f92a2000 f92ae200 CLASSPNP CLASSPNP.SYS Tue Aug 03 23:14:26 2004 (41107EC2)
f92b2000 f92ba620 nicm nicm.sys Mon Mar 24 13:01:20 2003 (3E7F7220)
f92c2000 f92cc580 agp440 agp440.sys Tue Aug 03 23:07:40 2004 (41107D2C)
f92f2000 f9300100 usbhub usbhub.sys Tue Aug 03 23:08:40 2004 (41107D68)
f9322000 f932a700 netbios netbios.sys Tue Aug 03 23:03:19 2004 (41107C27)
f9352000 f935a880 Fips Fips.SYS Fri Aug 17 18:31:49 2001 (3B7DC585)
f9382000 f9391900 Cdfs Cdfs.SYS Tue Aug 03 23:14:09 2004 (41107EB1)
f93a2000 f93ac600 p3 p3.sys Tue Aug 03 22:59:18 2004 (41107B36)
f93b2000 f93bee00 i8042prt i8042prt.sys Tue Aug 03 23:14:36 2004 (41107ECC)
f93c2000 f93d1d80 serial serial.sys Tue Aug 03 23:15:51 2004 (41107F17)
f93d2000 f93de180 cdrom cdrom.sys Tue Aug 03 22:59:52 2004 (41107B58)
f93e2000 f93f0080 redbook redbook.sys Tue Aug 03 22:59:34 2004 (41107B46)
f93f2000 f9400b80 drmk drmk.sys Tue Aug 03 23:07:54 2004 (41107D3A)
f9402000 f940e880 rasl2tp rasl2tp.sys Tue Aug 03 23:14:21 2004 (41107EBD)
f9412000 f941c200 raspppoe raspppoe.sys Tue Aug 03 23:05:06 2004 (41107C92)
f9422000 f942dd00 raspptp raspptp.sys Tue Aug 03 23:14:26 2004 (41107EC2)
f9432000 f943a900 msgpc msgpc.sys Tue Aug 03 23:04:11 2004 (41107C5B)
f9482000 f948bf00 termdd termdd.sys Tue Aug 03 22:58:52 2004 (41107B1C)
f94a2000 f94ab480 NDProxy NDProxy.SYS Fri Aug 17 13:55:30 2001 (3B7D84C2)
f94e2000 f94e8200 PCIIDEX PCIIDEX.SYS Tue Aug 03 22:59:40 2004 (41107B4C)
f94ea000 f94ee900 PartMgr PartMgr.sys Fri Aug 17 18:32:23 2001 (3B7DC5A7)
f9532000 f9538a60 resmgr resmgr.sys Tue Mar 12 09:27:11 2002 (3C8E3A6F)
f9542000 f9549000 fdc fdc.sys unavailable (FFFFFFFE)
f954a000 f9550000 kbdclass kbdclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f9552000 f9557a00 mouclass mouclass.sys Tue Aug 03 22:58:32 2004 (41107B08)
f955a000 f955f000 usbuhci usbuhci.sys Tue Aug 03 23:08:34 2004 (41107D62)
f9562000 f9566880 TDI TDI.SYS Tue Aug 03 23:07:47 2004 (41107D33)
f9572000 f9576580 ptilink ptilink.sys Fri Aug 17 13:49:53 2001 (3B7D8371)
f9582000 f9586080 raspti raspti.sys Fri Aug 17 13:55:32 2001 (3B7D84C4)
f95e2000 f95e7000 flpydisk flpydisk.sys Tue Aug 03 22:59:24 2004 (41107B3C)
f95f2000 f95f7200 vga vga.sys Tue Aug 03 23:07:06 2004 (41107D0A)
f95fa000 f95fea80 Msfs Msfs.SYS Tue Aug 03 23:00:37 2004 (41107B85)
f9602000 f9609880 Npfs Npfs.SYS Tue Aug 03 23:00:38 2004 (41107B86)
f961a000 f961e500 watchdog watchdog.sys Tue Aug 03 23:07:32 2004 (41107D24)
f962a000 f962f500 TDTCP TDTCP.SYS Tue Aug 03 22:58:52 2004 (41107B1C)
f9672000 f9675000 BOOTVID BOOTVID.dll Fri Aug 17 13:49:09 2001 (3B7D8345)
f9676000 f96795e0 nwfilter nwfilter.sys Wed Apr 02 16:43:11 2003 (3E8B839F)
f96fe000 f9700280 rasacd rasacd.sys Fri Aug 17 13:55:39 2001 (3B7D84CB)
f9702000 f9705c80 serenum serenum.sys Tue Aug 03 22:59:06 2004 (41107B2A)
f970a000 f970c580 ndistapi ndistapi.sys Fri Aug 17 13:55:29 2001 (3B7D84C1)
f9732000 f9735c80 mssmbios mssmbios.sys Tue Aug 03 23:07:47 2004 (41107D33)
f9762000 f9763b80 kdcom kdcom.dll Fri Aug 17 13:49:10 2001 (3B7D8346)
f9764000 f9765100 WMILIB WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f9766000 f9767580 intelide intelide.sys Tue Aug 03 22:59:40 2004 (41107B4C)
f9768000 f9769700 dmload dmload.sys Fri Aug 17 13:58:15 2001 (3B7D8567)
f9776000 f9777100 swenum swenum.sys Tue Aug 03 22:58:41 2004 (41107B11)
f9792000 f9793280 USBD USBD.SYS Fri Aug 17 14:02:58 2001 (3B7D8682)
f97a2000 f97a3f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 13:49:37 2001 (3B7D8361)
f97a4000 f97a5080 Beep Beep.SYS Fri Aug 17 13:47:33 2001 (3B7D82E5)
f97a6000 f97a7080 mnmdd mnmdd.SYS Fri Aug 17 13:57:28 2001 (3B7D8538)
f97a8000 f97a9080 RDPCDD RDPCDD.sys Fri Aug 17 13:46:56 2001 (3B7D82C0)
f97aa000 f97ab100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 14:07:23 2001 (3B7D878B)
f97fc000 f97fda80 ParVdm ParVdm.SYS Fri Aug 17 13:49:49 2001 (3B7D836D)
f988b000 f988bb80 Null Null.SYS Fri Aug 17 13:47:39 2001 (3B7D82EB)
f98a6000 f98a6c00 audstub audstub.sys Fri Aug 17 13:59:40 2001 (3B7D85BC)
f9916000 f9916d00 dxgthk dxgthk.sys Fri Aug 17 13:53:12 2001 (3B7D8438)

Unloaded modules:
f40a8000 f40d2000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f99b5000 f99b6000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4172000 f4195000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4aab000 f4ab8000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9332000 f9340000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f97fa000 f97fc000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9037000 f903b000 wADV01nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f903b000 f903e000 wADV02NT.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f903f000 f9042000 wADV05NT.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9043000 f9046000 wSiINTxx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f95ba000 f95bf000 wVchNTxx.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f95b2000 f95ba000 wATV01nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f95aa000 f95af000 wATV02NT.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f94d2000 f94db000 wATV04nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f95a2000 f95a8000 wCh7xxNT.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f959a000 f95a0000 wATV06nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9047000 f904a000 wADV07nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f975e000 f9761000 wADV08nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f975a000 f975d000 wADV09nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9592000 f9599000 wATV10nt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9342000 f934d000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9332000 f933b000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f95ea000 f95ef000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f96fa000 f96fd000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Hello Ben,

This is what turned up in a google search:

http://groups-beta.google.com/group..._doneTitle=Back+to+Search&&d#14533534fe3f84e8

I don't have this file on my system, so I don't think it's XP's.

Regards - Charles

 

Try disabling the WebClient Service in services.msc and see if you keep getting whammied.

Web Distributed Authoring and Versioning (WebDAV) aka mrxdav.sys

 

Interesting... Charles information looks very similar to our situation. The computer does indeed have Novell Client 4.9 on it ( with no service packs). In talking to the user, it turns out that the every time the computer crashed (we are up to 10 occurrences) the user was modifying an excel document that lived on the Novell server. I disabled the WebClient service, but the system still crashed. I had the user move the document locally, and the computer hasn't crashed since. It seems to be a short-term fix for now, but I will continue to dig to see I can find any other solution.

If anyone else has any ideas, send them my way.

Thanks for your help.

-Ben