• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2173
  • Last Modified:

Computer crashing - Error caused by a device driver - Need help analyzing minidump files

A clients computer is crashing 2 or 3 times a week and the Online Crash Analysis blames a device driver, but unable to pinpoint which one.  I will post the log of 3 minidumps I took from his computer.  I just dont know what to look for, can someone help?
Thanks.
0
mattysyr
Asked:
mattysyr
  • 5
  • 4
  • 2
2 Solutions
 
Irwin SantosComputer Integration SpecialistCommented:
when you post back.. what is the make & model of the computer?

if you can provide that , it would be a matter of locating the latest drivers and installing them.
0
 
mattysyrAuthor Commented:
It is a Dell unit, don't know the model off hand, but there are tons of peripherals attached, might take a very long time to gather and reinstall all drivers...
0
 
mattysyrAuthor Commented:
Latest minidump:

Opened log file 'c:\debuglog.txt'
0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
......................................................................................................................................
Loading User Symbols
Loading unloaded module list
............................................
Unable to load image ShldDrv.SYS, Win32 error 2
*** WARNING: Unable to verify timestamp for ShldDrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for ShldDrv.SYS
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: f79f52c0, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8052aa1b, If non-zero, the instruction address which referenced the bad memory
      address.
Arg4: 00000003, (reserved)

Debugging Details:
------------------


Could not read faulting driver name
*** WARNING: Unable to verify timestamp for savrt.sys
*** ERROR: Module load completed but symbols could not be loaded for savrt.sys
*** WARNING: Unable to verify timestamp for navex15.sys
*** ERROR: Module load completed but symbols could not be loaded for navex15.sys

READ_ADDRESS:  f79f52c0

FAULTING_IP:
nt!RtlCopyUnicodeString+3b
8052aa1b f3a4             rep     movsb

MM_INTERNAL_CODE:  3

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x50

LAST_CONTROL_TRANSFER:  from f78b799b to 8052aa1b

STACK_TEXT:  
a89a081c f78b799b 8535c008 8516bc68 804efd76 nt!RtlCopyUnicodeString+0x3b
WARNING: Stack unwind information not available. Following frames may be wrong.
a89a08a4 f78b7be7 86544020 84b21008 86583420 ShldDrv+0x199b
a89a095c f740600c a89a097c 85455a28 00000000 ShldDrv+0x1be7
a89a0994 804eeeb1 85455a28 84b21008 84b21018 fltmgr!FltpDispatch+0x104
a89a09a4 8057a2d1 a89a0a48 a89a0ad4 80579dae nt!IopfCallDriver+0x31
a89a0a2c 8054060c 80000358 a89a0b34 a89a0b24 nt!NtSetInformationFile+0x523
a89a0a2c 80500231 80000358 a89a0b34 a89a0b24 nt!KiFastCallEntry+0xfc
a89a0ab8 aa694b37 80000358 a89a0b34 a89a0b24 nt!ZwSetInformationFile+0x11
a89a0b3c aa667155 e1368e38 00000000 00000000 savrt+0x42b37
a89a0dcc a8efea43 aa69ff20 e157d430 e272582d savrt+0x15155
a89a0df8 a8eff758 aa69ff20 e157d430 e272582d navex15+0x40a43
a89a0e7c a8eff9ee 00000002 e157d430 00000000 navex15+0x41758
a89a0f68 aa67233f aa69ff20 e157d430 e272582d navex15+0x419ee
a89a0f6c aa69ff20 e157d430 e272582d 84c8b010 savrt+0x2033f
a89a0f70 e157d430 e272582d 84c8b010 84c8b610 savrt+0x4df20
a89a0f74 e272582d 84c8b010 84c8b610 00000003 0xe157d430
a89a0f78 84c8b010 84c8b610 00000003 a89a0fc0 0xe272582d
a89a0f7c 84c8b610 00000003 a89a0fc0 86225598 0x84c8b010
a89a0f80 00000000 a89a0fc0 86225598 e259a4b0 0x84c8b610


STACK_COMMAND:  kb

FOLLOWUP_IP:
ShldDrv+199b
f78b799b ??               ???

SYMBOL_STACK_INDEX:  1

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  ShldDrv+199b

MODULE_NAME:  ShldDrv

IMAGE_NAME:  ShldDrv.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4312fd76

FAILURE_BUCKET_ID:  0x50_ShldDrv+199b

BUCKET_ID:  0x50_ShldDrv+199b

Followup: MachineOwner
---------

eax=00000001 ebx=00000001 ecx=00000001 edx=a89a0858 esi=f79f52c0 edi=8535c008
eip=8052aa1b esp=a89a0810 ebp=a89a081c iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!RtlCopyUnicodeString+0x3b:
8052aa1b f3a4             rep     movsb         ds:f79f52c0=?? es:8535c008=30
ChildEBP RetAddr  Args to Child              
a89a081c f78b799b 8535c008 8516bc68 804efd76 nt!RtlCopyUnicodeString+0x3b (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
a89a08a4 f78b7be7 86544020 84b21008 86583420 ShldDrv+0x199b
a89a095c f740600c a89a097c 85455a28 00000000 ShldDrv+0x1be7
a89a0994 804eeeb1 85455a28 84b21008 84b21018 fltmgr!FltpDispatch+0x104 (FPO: [Non-Fpo])
a89a09a4 8057a2d1 a89a0a48 a89a0ad4 80579dae nt!IopfCallDriver+0x31 (FPO: [0,0,0])
a89a0a2c 8054060c 80000358 a89a0b34 a89a0b24 nt!NtSetInformationFile+0x523 (FPO: [Non-Fpo])
a89a0a2c 80500231 80000358 a89a0b34 a89a0b24 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a89a0a48)
a89a0ab8 aa694b37 80000358 a89a0b34 a89a0b24 nt!ZwSetInformationFile+0x11 (FPO: [5,0,0])
a89a0b3c aa667155 e1368e38 00000000 00000000 savrt+0x42b37
a89a0dcc a8efea43 aa69ff20 e157d430 e272582d savrt+0x15155
a89a0df8 a8eff758 aa69ff20 e157d430 e272582d navex15+0x40a43
a89a0e7c a8eff9ee 00000002 e157d430 00000000 navex15+0x41758
a89a0f68 aa67233f aa69ff20 e157d430 e272582d navex15+0x419ee
a89a0f6c aa69ff20 e157d430 e272582d 84c8b010 savrt+0x2033f
a89a0f70 e157d430 e272582d 84c8b010 84c8b610 savrt+0x4df20
a89a0f74 e272582d 84c8b010 84c8b610 00000003 0xe157d430
a89a0f78 84c8b010 84c8b610 00000003 a89a0fc0 0xe272582d
a89a0f7c 84c8b610 00000003 a89a0fc0 86225598 0x84c8b010
a89a0f80 00000000 a89a0fc0 86225598 e259a4b0 0x84c8b610
start    end        module name
804d7000 806e2000   nt       ntkrpamp.exe Tue Mar 01 19:34:38 2005 (42250A1E)
806e2000 80702d00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
a825b000 a8284f00   kmixer   kmixer.sys   Wed Aug 04 02:07:46 2004 (41107D32)
a8aaa000 a8ac4000   EraserUtilDrv10614 EraserUtilDrv10614.sys Tue Apr 11 20:14:07 2006 (443C464F)
a8c0c000 a8c0ef60   SYMREDRV SYMREDRV.SYS Tue Apr 05 14:11:10 2005 (4252D4BE)
a8eac000 a8ebd980   naveng   naveng.sys   Thu Feb 23 18:37:13 2006 (43FE4729)
a8ebe000 a8f7fb40   navex15  navex15.sys  Thu Feb 23 18:57:28 2006 (43FE4BE8)
a8f80000 a8fc0100   HTTP     HTTP.sys     Fri Oct 08 19:48:20 2004 (41672744)
a9699000 a96ad400   wdmaud   wdmaud.sys   Wed Aug 04 02:15:03 2004 (41107EE7)
a97b6000 a97c4d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
a98fa000 a98fd800   asyncmac asyncmac.sys Wed Aug 04 02:05:02 2004 (41107C8E)
a9c4e000 a9c75f00   PavProc  PavProc.sys  Thu Jan 08 02:54:16 2004 (3FFD0CA8)
a9c9e000 a9cef300   srv      srv.sys      Mon May 09 20:17:49 2005 (427FFDAD)
a9e9c000 a9e9ee40   mdmxsdk  mdmxsdk.sys  Wed Mar 17 14:04:10 2004 (4058A12A)
a9ed0000 a9efc400   mrxdav   mrxdav.sys   Wed Aug 04 02:00:49 2004 (41107B91)
a9f25000 a9f48000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)
aa180000 aa183280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)
aa290000 aa2a7480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
aa2d0000 aa302a00   Dot4     Dot4.sys     Wed Aug 04 01:58:28 2004 (41107B04)
aa303000 aa355000   eeCtrl   eeCtrl.sys   Tue Apr 11 20:14:07 2006 (443C464F)
aa355000 aa3c3400   mrxsmb   mrxsmb.sys   Tue Jan 18 23:26:50 2005 (41EDE18A)
aa3c4000 aa3eea00   rdbss    rdbss.sys    Wed Oct 27 21:13:57 2004 (418047D5)
aa3ef000 aa410d00   afd      afd.sys      Wed Aug 04 02:14:13 2004 (41107EB5)
aa411000 aa438c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)
aa461000 aa481f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)
aa482000 aa4c1ce0   SYMTDI   SYMTDI.SYS   Tue Apr 05 14:10:52 2005 (4252D4AC)
aa4c2000 aa519d80   tcpip    tcpip.sys    Thu Jan 12 21:28:12 2006 (43C7103C)
aa51a000 aa52c400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)
aa621000 aa635000   Savrtpel Savrtpel.sys Fri Feb 04 23:03:26 2005 (4204458E)
aa635000 aa651ac0   SYMEVENT SYMEVENT.SYS Mon Mar 21 22:19:36 2005 (423F8EC8)
aa652000 aa6a7000   savrt    savrt.sys    Fri Feb 04 23:03:24 2005 (4204458C)
aa747000 aa76a980   portcls  portcls.sys  Wed Aug 04 02:15:47 2004 (41107F13)
aa773000 aa775900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
aa78b000 aa78e280   Dot4Prt  Dot4Prt.sys  Fri Aug 17 16:47:25 2001 (3B7D82DD)
aa793000 aa7bf280   sthda    sthda.sys    Tue Jun 14 18:41:44 2005 (42AF5D28)
bf000000 bf011580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)
bf012000 bf020000   ialmrnt5 ialmrnt5.dll Tue Jul 19 14:26:22 2005 (42DD45CE)
bf020000 bf041000   ialmdnt5 ialmdnt5.dll Tue Jul 19 14:26:16 2005 (42DD45C8)
bf041000 bf074c00   ialmdev5 ialmdev5.DLL Tue Jul 19 14:26:05 2005 (42DD45BD)
bf075000 bf157000   ialmdd5  ialmdd5.DLL  Tue Jul 19 14:33:35 2005 (42DD477F)
bf800000 bf9c1180   win32k   win32k.sys   Wed Oct 05 20:05:44 2005 (43446A58)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)
f6e87000 f6eba200   update   update.sys   Wed Aug 04 01:58:32 2004 (41107B08)
f6ee3000 f6f13100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)
f6f14000 f6f24e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)
f6f25000 f6f3b680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)
f6f3c000 f6f62000   e100b325 e100b325.sys Thu Oct 14 19:30:44 2004 (416F0C24)
f6f62000 f7008300   HSF_CNXT HSF_CNXT.sys Mon Nov 17 08:58:00 2003 (3FB8D3E8)
f7009000 f7107800   HSF_DP   HSF_DP.sys   Mon Nov 17 08:56:13 2003 (3FB8D37D)
f7108000 f712a680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)
f712b000 f715ed00   HSFHWBS2 HSFHWBS2.sys Mon Nov 17 08:59:18 2003 (3FB8D436)
f715f000 f7181e80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)
f7182000 f71a8000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
f71a8000 f71bb780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f71bc000 f72bc1e0   ialmnt5  ialmnt5.sys  Tue Jul 19 14:34:20 2005 (42DD47AC)
f7316000 f7330580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)
f7331000 f735da80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)
f735e000 f73ea480   Ntfs     Ntfs.sys     Wed Aug 04 02:15:06 2004 (41107EEA)
f73eb000 f7401780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)
f7402000 f7420780   fltmgr   fltmgr.sys   Wed Aug 04 02:01:17 2004 (41107BAD)
f7421000 f7438480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)
f7439000 f745e700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)
f745f000 f747d880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
f747e000 f748ea80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)
f748f000 f74bcd80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)
f75be000 f75c6c00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)
f75ce000 f75d8500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f75de000 f75eac80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)
f75ee000 f75f6e00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)
f75fe000 f760a200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f761e000 f7626d00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f762e000 f763a180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)
f763e000 f764c080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)
f764e000 f7658380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)
f765e000 f766a880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)
f766e000 f7678200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f767e000 f7689d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)
f768e000 f7696900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)
f769e000 f76a7f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)
f76ae000 f76b7480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)
f76de000 f76ecb80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)
f76ee000 f76fc100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)
f772e000 f7736d80   HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
f775e000 f77662e0   LHidUsb  LHidUsb.Sys  Fri Nov 07 20:44:41 2003 (3FAC4A89)
f776e000 f7776700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)
f777e000 f7786700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)
f77ae000 f77b6880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)
f77ce000 f77dd760   LMouFlt2 LMouFlt2.Sys Fri Nov 07 20:44:15 2003 (3FAC4A6F)
f77ee000 f77fd900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)
f783e000 f7844200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)
f7846000 f784a900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f784e000 f7852e20   PxHelp20 PxHelp20.sys Mon Apr 25 15:48:02 2005 (426D4972)
f787e000 f7883000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f7886000 f788c800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f789e000 f78a5580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)
f78ae000 f78b4b00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)
f78b6000 f78bc880   ShldDrv  ShldDrv.SYS  Mon Aug 29 08:20:06 2005 (4312FD76)
f78de000 f78e2880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)
f78e6000 f78ebd00   dot4usb  dot4usb.sys  Fri Aug 17 16:47:24 2001 (3B7D82DC)
f78ee000 f78f2580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
f78fe000 f7902080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
f7906000 f790b020   wanatw4  wanatw4.sys  Tue Jul 16 11:23:14 2002 (3D343A62)
f790e000 f7914000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7916000 f791ba00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7926000 f792c780   USBSTOR  USBSTOR.SYS  Wed Aug 04 02:08:44 2004 (41107D6C)
f7936000 f793b000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
f7946000 f794bf00   LHidFlt2 LHidFlt2.Sys Fri Nov 07 20:44:24 2003 (3FAC4A78)
f7966000 f796a500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f7976000 f797c180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
f7986000 f798b200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)
f798e000 f7992a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)
f799e000 f79a5880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)
f79ce000 f79d1000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
f7a5a000 f7a5c580   hidusb   hidusb.sys   Fri Aug 17 17:02:16 2001 (3B7D8658)
f7a6e000 f7a70280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
f7a72000 f7a74580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7a92000 f7a95a00   kbdhid   kbdhid.sys   Wed Aug 04 01:58:33 2004 (41107B09)
f7a96000 f7a99c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7ab2000 f7ab4f80   mouhid   mouhid.sys   Fri Aug 17 16:47:57 2001 (3B7D82FD)
f7ab6000 f7ab9f00   MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
f7abe000 f7abfb80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
f7ac0000 f7ac1100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)
f7ac2000 f7ac3700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)
f7ac8000 f7ac9100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)
f7ad0000 f7ad1280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
f7ad2000 f7ad4000   i2omgmt  i2omgmt.SYS  Wed Aug 04 02:00:50 2004 (41107B92)
f7ad8000 f7ad9f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
f7ada000 f7adb080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7adc000 f7add080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
f7ade000 f7adf080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7aea000 f7aeb100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b86000 f7b86d00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7c64000 f7c64c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7c8e000 f7c8ed00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
f7cea000 f7ceab80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

Unloaded modules:
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a825b000 a8285000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8368000 a8392000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8878000 a88a2000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8878000 a88a2000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8878000 a88a2000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a964c000 a9676000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7c81000 f7c82000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a9676000 a9699000   aec.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a99d6000 a99e3000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a9a46000 a9a54000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7b0e000 f7b10000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8eac000 a8ebe000   naveng.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8ebe000 a8f80000   navex15.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
aa54d000 aa55f000   naveng.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
aa55f000 aa621000   navex15.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f779e000 f77ae000   serial.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7a5e000 f7a62000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f773e000 f774b000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7956000 f795b000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f72cd000 f72d0000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Closing open log file c:\debuglog.txt
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
mattysyrAuthor Commented:
Next minidump:

Opened log file 'c:\debuglog1.txt'
1: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
1: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
....................................................................................................................................
Loading User Symbols
Loading unloaded module list
.......................
Unable to load image ShldDrv.SYS, Win32 error 2
*** WARNING: Unable to verify timestamp for ShldDrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for ShldDrv.SYS
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8052aa14, The address that the exception occurred at
Arg3: a836e254, Trap Frame
Arg4: 00000000

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for savrt.sys
*** ERROR: Module load completed but symbols could not be loaded for savrt.sys
*** WARNING: Unable to verify timestamp for navex15.sys
*** ERROR: Module load completed but symbols could not be loaded for navex15.sys

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!RtlCopyUnicodeString+34
8052aa14 f3a5             rep     movsd

TRAP_FRAME:  a836e254 -- (.trap ffffffffa836e254)
.trap ffffffffa836e254
ErrCode = 00000000
eax=00000008 ebx=00000008 ecx=00000002 edx=a836e310 esi=7266744e edi=85e45c00
eip=8052aa14 esp=a836e2c8 ebp=a836e2d4 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!RtlCopyUnicodeString+0x34:
8052aa14 f3a5            rep  movsd ds:7266744e=???????? es:85e45c00=86361008
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x8E

LAST_CONTROL_TRANSFER:  from f78cf99b to 8052aa14

STACK_TEXT:  
a836e2d4 f78cf99b 85e45c00 864fbfc0 804efd76 nt!RtlCopyUnicodeString+0x34
WARNING: Stack unwind information not available. Following frames may be wrong.
a836e35c f78cfbe7 865ce020 8535eb00 8658aa18 ShldDrv+0x199b
a836e41c 804eeeb1 850a3020 8535eb00 8535eb10 ShldDrv+0x1be7
a836e42c 8057a2d1 a836e4d0 a836e55c 80579dae nt!IopfCallDriver+0x31
a836e4b4 8054060c 800019dc a836e5bc a836e5ac nt!NtSetInformationFile+0x523
a836e4b4 80500231 800019dc a836e5bc a836e5ac nt!KiFastCallEntry+0xfc
a836e540 aa6f6b37 800019dc a836e5bc a836e5ac nt!ZwSetInformationFile+0x11
a836e5c4 aa6c9155 e291e360 00000000 00000000 savrt+0x42b37
a836e854 a8a2ea43 aa701f20 e388a088 e34aed75 savrt+0x15155
a836e880 a8a2f758 aa701f20 e388a088 e34aed75 navex15+0x40a43
a836e904 a8a2f9ee 00000002 e388a088 00000000 navex15+0x41758
a836e9f0 aa6d433f aa701f20 e388a088 e34aed75 navex15+0x419ee
a836e9f4 aa701f20 e388a088 e34aed75 854a9010 savrt+0x2033f
a836e9f8 e388a088 e34aed75 854a9010 854a9610 savrt+0x4df20
a836e9fc e34aed75 854a9010 854a9610 00000003 0xe388a088
a836ea00 854a9010 854a9610 00000003 a836ea48 0xe34aed75
a836ea04 854a9610 00000003 a836ea48 84bb3548 0x854a9010
a836ea08 00000000 a836ea48 84bb3548 e38052b8 0x854a9610


STACK_COMMAND:  kb

FOLLOWUP_IP:
ShldDrv+199b
f78cf99b ??               ???

SYMBOL_STACK_INDEX:  1

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  ShldDrv+199b

MODULE_NAME:  ShldDrv

IMAGE_NAME:  ShldDrv.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4312fd76

FAILURE_BUCKET_ID:  0x8E_ShldDrv+199b

BUCKET_ID:  0x8E_ShldDrv+199b

Followup: MachineOwner
---------

eax=00000008 ebx=00000008 ecx=00000002 edx=a836e310 esi=7266744e edi=85e45c00
eip=8052aa14 esp=a836e2c8 ebp=a836e2d4 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!RtlCopyUnicodeString+0x34:
8052aa14 f3a5            rep  movsd ds:7266744e=???????? es:85e45c00=86361008
ChildEBP RetAddr  Args to Child              
a836e2d4 f78cf99b 85e45c00 864fbfc0 804efd76 nt!RtlCopyUnicodeString+0x34 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
a836e35c f78cfbe7 865ce020 8535eb00 8658aa18 ShldDrv+0x199b
a836e41c 804eeeb1 850a3020 8535eb00 8535eb10 ShldDrv+0x1be7
a836e42c 8057a2d1 a836e4d0 a836e55c 80579dae nt!IopfCallDriver+0x31 (FPO: [0,0,0])
a836e4b4 8054060c 800019dc a836e5bc a836e5ac nt!NtSetInformationFile+0x523 (FPO: [Non-Fpo])
a836e4b4 80500231 800019dc a836e5bc a836e5ac nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a836e4d0)
a836e540 aa6f6b37 800019dc a836e5bc a836e5ac nt!ZwSetInformationFile+0x11 (FPO: [5,0,0])
a836e5c4 aa6c9155 e291e360 00000000 00000000 savrt+0x42b37
a836e854 a8a2ea43 aa701f20 e388a088 e34aed75 savrt+0x15155
a836e880 a8a2f758 aa701f20 e388a088 e34aed75 navex15+0x40a43
a836e904 a8a2f9ee 00000002 e388a088 00000000 navex15+0x41758
a836e9f0 aa6d433f aa701f20 e388a088 e34aed75 navex15+0x419ee
a836e9f4 aa701f20 e388a088 e34aed75 854a9010 savrt+0x2033f
a836e9f8 e388a088 e34aed75 854a9010 854a9610 savrt+0x4df20
a836e9fc e34aed75 854a9010 854a9610 00000003 0xe388a088
a836ea00 854a9010 854a9610 00000003 a836ea48 0xe34aed75
a836ea04 854a9610 00000003 a836ea48 84bb3548 0x854a9010
a836ea08 00000000 a836ea48 84bb3548 e38052b8 0x854a9610
start    end        module name
804d7000 806e2000   nt       ntkrpamp.exe Tue Mar 01 19:34:38 2005 (42250A1E)
806e2000 80702d00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
a851f000 a8548f00   kmixer   kmixer.sys   Wed Aug 04 02:07:46 2004 (41107D32)
a89dc000 a89ed980   naveng   naveng.sys   Thu Feb 23 18:37:13 2006 (43FE4729)
a89ee000 a8aafb40   navex15  navex15.sys  Thu Feb 23 18:57:28 2006 (43FE4BE8)
a8cee000 a8d2e100   HTTP     HTTP.sys     Fri Oct 08 19:48:20 2004 (41672744)
a8eb6000 a8eb8f60   SYMREDRV SYMREDRV.SYS Tue Apr 05 14:11:10 2005 (4252D4BE)
a959b000 a95c2f00   PavProc  PavProc.sys  Thu Jan 08 02:54:16 2004 (3FFD0CA8)
a977b000 a97cc300   srv      srv.sys      Mon May 09 20:17:49 2005 (427FFDAD)
a98e5000 a98e76c0   mdmxsdk  mdmxsdk.sys  Wed Apr 09 16:48:53 2003 (3E948735)
a9935000 a9961400   mrxdav   mrxdav.sys   Wed Aug 04 02:00:49 2004 (41107B91)
a9cf2000 a9d06400   wdmaud   wdmaud.sys   Wed Aug 04 02:15:03 2004 (41107EE7)
a9d07000 a9d2a000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)
a9e72000 a9e80d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
aa0b6000 aa0b9800   asyncmac asyncmac.sys Wed Aug 04 02:05:02 2004 (41107C8E)
aa1da000 aa1dd280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)
aa2f2000 aa309480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
aa332000 aa384000   eeCtrl   eeCtrl.sys   Tue Apr 11 20:14:07 2006 (443C464F)
aa384000 aa3f2400   mrxsmb   mrxsmb.sys   Tue Jan 18 23:26:50 2005 (41EDE18A)
aa3f3000 aa41da00   rdbss    rdbss.sys    Wed Oct 27 21:13:57 2004 (418047D5)
aa41e000 aa43fd00   afd      afd.sys      Wed Aug 04 02:14:13 2004 (41107EB5)
aa440000 aa467c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)
aa468000 aa4a7ce0   SYMTDI   SYMTDI.SYS   Tue Apr 05 14:10:52 2005 (4252D4AC)
aa4a8000 aa4c8f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)
aa4c9000 aa520d80   tcpip    tcpip.sys    Thu Jan 12 21:28:12 2006 (43C7103C)
aa521000 aa533400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)
aa650000 aa682a00   Dot4     Dot4.sys     Wed Aug 04 01:58:28 2004 (41107B04)
aa683000 aa697000   Savrtpel Savrtpel.sys Fri Feb 04 23:03:26 2005 (4204458E)
aa697000 aa6b3ac0   SYMEVENT SYMEVENT.SYS Mon Mar 21 22:19:36 2005 (423F8EC8)
aa6b4000 aa709000   savrt    savrt.sys    Fri Feb 04 23:03:24 2005 (4204458C)
aa749000 aa76a700   portcls  portcls.sys  Tue Mar 16 13:58:17 2004 (40574E49)
aa76b000 aa797280   sthda    sthda.sys    Tue Jun 14 18:41:44 2005 (42AF5D28)
aa7bc000 aa7be900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
bf000000 bf011580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)
bf012000 bf020000   ialmrnt5 ialmrnt5.dll Tue Jul 19 14:26:22 2005 (42DD45CE)
bf020000 bf041000   ialmdnt5 ialmdnt5.dll Tue Jul 19 14:26:16 2005 (42DD45C8)
bf041000 bf074c00   ialmdev5 ialmdev5.DLL Tue Jul 19 14:26:05 2005 (42DD45BD)
bf075000 bf157000   ialmdd5  ialmdd5.DLL  Tue Jul 19 14:33:35 2005 (42DD477F)
bf800000 bf9c1180   win32k   win32k.sys   Wed Oct 05 20:05:44 2005 (43446A58)
f6134000 f6167200   update   update.sys   Wed Aug 04 01:58:32 2004 (41107B08)
f6168000 f6198100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)
f6199000 f61a9e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)
f61aa000 f61c0680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)
f61c1000 f61e7000   e100b325 e100b325.sys Thu Oct 14 19:30:44 2004 (416F0C24)
f61e7000 f628d300   HSF_CNXT HSF_CNXT.sys Mon Nov 17 08:58:00 2003 (3FB8D3E8)
f628e000 f638c800   HSF_DP   HSF_DP.sys   Mon Nov 17 08:56:13 2003 (3FB8D37D)
f638d000 f63af680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)
f63b0000 f63e3d00   HSFHWBS2 HSFHWBS2.sys Mon Nov 17 08:59:18 2003 (3FB8D436)
f63e4000 f6406e80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)
f6407000 f642d000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
f642d000 f6440780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f6441000 f65411e0   ialmnt5  ialmnt5.sys  Tue Jul 19 14:34:20 2005 (42DD47AC)
f654a000 f654d280   Dot4Prt  Dot4Prt.sys  Fri Aug 17 16:47:25 2001 (3B7D82DD)
f654e000 f6550f80   mouhid   mouhid.sys   Fri Aug 17 16:47:57 2001 (3B7D82FD)
f6552000 f6555a00   kbdhid   kbdhid.sys   Wed Aug 04 01:58:33 2004 (41107B09)
f6556000 f6558580   hidusb   hidusb.sys   Fri Aug 17 17:02:16 2001 (3B7D8658)
f72d9000 f72db580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7316000 f7330580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)
f7331000 f735da80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)
f735e000 f73ea480   Ntfs     Ntfs.sys     Wed Aug 04 02:15:06 2004 (41107EEA)
f73eb000 f7401780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)
f7402000 f7420780   fltMgr   fltMgr.sys   Wed Aug 04 02:01:17 2004 (41107BAD)
f7421000 f7438480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)
f7439000 f745e700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)
f745f000 f747d880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
f747e000 f748ea80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)
f748f000 f74bcd80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)
f75be000 f75c6c00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)
f75ce000 f75d8500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f75de000 f75eac80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)
f75ee000 f75f6e00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)
f75fe000 f760a200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f767e000 f7686d00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f768e000 f769a180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)
f769e000 f76ac080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)
f76ae000 f76b8380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)
f76be000 f76ca880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)
f76ce000 f76d8200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f76de000 f76e9d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)
f76ee000 f76f6900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)
f76fe000 f7707f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)
f770e000 f7717480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)
f773e000 f774cb80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)
f774e000 f775c100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)
f777e000 f7786d80   HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
f778e000 f77962e0   LHidUsb  LHidUsb.Sys  Fri Nov 07 20:44:41 2003 (3FAC4A89)
f779e000 f77ad760   LMouFlt2 LMouFlt2.Sys Fri Nov 07 20:44:15 2003 (3FAC4A6F)
f77de000 f77e6700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)
f77ee000 f77f6700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)
f780e000 f7816880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)
f782e000 f783d900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)
f783e000 f7844200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)
f7846000 f784a900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f784e000 f7852e20   PxHelp20 PxHelp20.sys Mon Apr 25 15:48:02 2005 (426D4972)
f785e000 f7864000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f787e000 f7883a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7886000 f788b000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
f788e000 f7894180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
f7896000 f789bf00   LHidFlt2 LHidFlt2.Sys Fri Nov 07 20:44:24 2003 (3FAC4A78)
f789e000 f78a3d00   dot4usb  dot4usb.sys  Fri Aug 17 16:47:24 2001 (3B7D82DC)
f78a6000 f78ac780   USBSTOR  USBSTOR.SYS  Wed Aug 04 02:08:44 2004 (41107D6C)
f78b6000 f78bb200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)
f78be000 f78c2a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)
f78c6000 f78cd880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)
f78ce000 f78d4880   ShldDrv  ShldDrv.SYS  Mon Aug 29 08:20:06 2005 (4312FD76)
f78d6000 f78da500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f798e000 f7993000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f7996000 f799c800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f799e000 f79a5580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)
f79a6000 f79acb00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)
f79ae000 f79b2880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)
f79b6000 f79ba580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
f79be000 f79c2080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
f79c6000 f79cb020   wanatw4  wanatw4.sys  Tue Jul 16 11:23:14 2002 (3D343A62)
f79ce000 f79d1000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
f7a56000 f7a59c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7a6e000 f7a71f00   MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
f7a82000 f7a84280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
f7abe000 f7abfb80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
f7ac0000 f7ac1100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)
f7ac2000 f7ac3700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)
f7b0e000 f7b0f100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)
f7b12000 f7b13280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
f7b14000 f7b16000   i2omgmt  i2omgmt.SYS  Wed Aug 04 02:00:50 2004 (41107B92)
f7b16000 f7b17f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
f7b18000 f7b19080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7b1a000 f7b1b080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
f7b1c000 f7b1d080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7b1e000 f7b1f100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b86000 f7b86d00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7be1000 f7be1c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7bf8000 f7bf8d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
f7cca000 f7ccab80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

Unloaded modules:
a851f000 a8549000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a851f000 a8549000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a851f000 a8549000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a851f000 a8549000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a851f000 a8549000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a867c000 a86a6000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a889a000 a88c4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a88aa000 a88c4000   EraserUtilDr
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8ab0000 a8ada000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8ada000 a8aec000   naveng.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8aec000 a8bae000   navex15.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
aa554000 aa566000   naveng.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
aa566000 aa628000   navex15.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a9ca5000 a9ccf000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7cfa000 f7cfb000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a9e42000 a9e4f000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a9ccf000 a9cf2000   aec.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a9e62000 a9e70000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f7b46000 f7b48000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f77fe000 f780e000   serial.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f77ce000 f77db000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f78ae000 f78b3000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f6566000 f6569000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Closing open log file c:\debuglog1.txt
0
 
mattysyrAuthor Commented:
Next:

Opened log file 'c:\debuglog2.txt'
0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
........................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
Unable to load image ShldDrv.SYS, Win32 error 2
*** WARNING: Unable to verify timestamp for ShldDrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for ShldDrv.SYS
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8052aa14, The address that the exception occurred at
Arg3: a899838c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for savrt.sys
*** ERROR: Module load completed but symbols could not be loaded for savrt.sys

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!RtlCopyUnicodeString+34
8052aa14 f3a5             rep     movsd

TRAP_FRAME:  a899838c -- (.trap ffffffffa899838c)
.trap ffffffffa899838c
ErrCode = 00000000
eax=0000004c ebx=0000004c ecx=00000013 edx=a8998448 esi=002e0032 edi=8628e008
eip=8052aa14 esp=a8998400 ebp=a899840c iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!RtlCopyUnicodeString+0x34:
8052aa14 f3a5            rep  movsd ds:002e0032=???????? es:8628e008=848e6118
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0x8E

LAST_CONTROL_TRANSFER:  from f790f99b to 8052aa14

STACK_TEXT:  
a899840c f790f99b 8628e008 854a0710 804efd76 nt!RtlCopyUnicodeString+0x34
WARNING: Stack unwind information not available. Following frames may be wrong.
a8998494 f790fbe7 86587020 864269d0 865d7f38 ShldDrv+0x199b
a899854c f740600c a899856c 85e584d0 00000000 ShldDrv+0x1be7
a8998584 804eeeb1 85e584d0 864269d0 864269e0 fltMgr!FltpDispatch+0x104
a8998594 8057a2d1 a8998638 a89986c4 80579dae nt!IopfCallDriver+0x31
a899861c 8054060c 800010cc a8998724 a8998714 nt!NtSetInformationFile+0x523
a899861c 80500231 800010cc a8998724 a8998714 nt!KiFastCallEntry+0xfc
a89986a8 aa656b37 800010cc a8998724 a8998714 nt!ZwSetInformationFile+0x11
a899872c aa629ddd e44cf080 00000000 00000000 savrt+0x42b37
a8998830 aa63433f 00000001 e2b8ace0 e4531105 savrt+0x15ddd
a8998834 00000000 e2b8ace0 e4531105 85025010 savrt+0x2033f


STACK_COMMAND:  kb

FOLLOWUP_IP:
ShldDrv+199b
f790f99b ??               ???

SYMBOL_STACK_INDEX:  1

FOLLOWUP_NAME:  MachineOwner

SYMBOL_NAME:  ShldDrv+199b

MODULE_NAME:  ShldDrv

IMAGE_NAME:  ShldDrv.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4312fd76

FAILURE_BUCKET_ID:  0x8E_ShldDrv+199b

BUCKET_ID:  0x8E_ShldDrv+199b

Followup: MachineOwner
---------

eax=0000004c ebx=0000004c ecx=00000013 edx=a8998448 esi=002e0032 edi=8628e008
eip=8052aa14 esp=a8998400 ebp=a899840c iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!RtlCopyUnicodeString+0x34:
8052aa14 f3a5            rep  movsd ds:002e0032=???????? es:8628e008=848e6118
ChildEBP RetAddr  Args to Child              
a899840c f790f99b 8628e008 854a0710 804efd76 nt!RtlCopyUnicodeString+0x34 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
a8998494 f790fbe7 86587020 864269d0 865d7f38 ShldDrv+0x199b
a899854c f740600c a899856c 85e584d0 00000000 ShldDrv+0x1be7
a8998584 804eeeb1 85e584d0 864269d0 864269e0 fltMgr!FltpDispatch+0x104 (FPO: [Non-Fpo])
a8998594 8057a2d1 a8998638 a89986c4 80579dae nt!IopfCallDriver+0x31 (FPO: [0,0,0])
a899861c 8054060c 800010cc a8998724 a8998714 nt!NtSetInformationFile+0x523 (FPO: [Non-Fpo])
a899861c 80500231 800010cc a8998724 a8998714 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a8998638)
a89986a8 aa656b37 800010cc a8998724 a8998714 nt!ZwSetInformationFile+0x11 (FPO: [5,0,0])
a899872c aa629ddd e44cf080 00000000 00000000 savrt+0x42b37
a8998830 aa63433f 00000001 e2b8ace0 e4531105 savrt+0x15ddd
a8998834 00000000 e2b8ace0 e4531105 85025010 savrt+0x2033f
start    end        module name
804d7000 806e2000   nt       ntkrpamp.exe Tue Mar 01 19:34:38 2005 (42250A1E)
806e2000 80702d00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
a7cb4000 a7ccd000   EraserUtilDrv1061 EraserUtilDrv1061.sys Fri Mar 31 17:39:04 2006 (442DAF88)
a7ccd000 a7cde980   naveng   naveng.sys   Thu Feb 23 18:37:13 2006 (43FE4729)
a7cdf000 a7da0b40   navex15  navex15.sys  Thu Feb 23 18:57:28 2006 (43FE4BE8)
a871b000 a871e800   asyncmac asyncmac.sys Wed Aug 04 02:05:02 2004 (41107C8E)
a8ad1000 a8b11100   HTTP     HTTP.sys     Fri Oct 08 19:48:20 2004 (41672744)
a8d72000 a8d74f60   SYMREDRV SYMREDRV.SYS Tue Apr 05 14:11:10 2005 (4252D4BE)
a93c3000 a93eaf00   PavProc  PavProc.sys  Thu Jan 08 02:54:16 2004 (3FFD0CA8)
a9597000 a95996c0   mdmxsdk  mdmxsdk.sys  Wed Apr 09 16:48:53 2003 (3E948735)
a95a3000 a95f4300   srv      srv.sys      Mon May 09 20:17:49 2005 (427FFDAD)
a97d5000 a9801400   mrxdav   mrxdav.sys   Wed Aug 04 02:00:49 2004 (41107B91)
a9b92000 a9ba6400   wdmaud   wdmaud.sys   Wed Aug 04 02:15:03 2004 (41107EE7)
a9bcf000 a9bf2000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)
a9cca000 a9cd8d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
aa0ca000 aa0e28c0   tfsnudfa tfsnudfa.sys Mon Dec 06 21:05:15 2004 (41B50FDB)
aa0e3000 aa0fb160   tfsnudf  tfsnudf.sys  Mon Dec 06 21:04:33 2004 (41B50FB1)
aa0fc000 aa111200   tfsnifs  tfsnifs.sys  Mon Dec 06 21:04:27 2004 (41B50FAB)
aa11e000 aa121280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)
aa19a000 aa19db40   tfsnopio tfsnopio.sys Mon Dec 06 21:04:51 2004 (41B50FC3)
aa252000 aa269480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
aa292000 aa2e4000   eeCtrl   eeCtrl.sys   Fri Mar 31 17:39:04 2006 (442DAF88)
aa2e4000 aa352400   mrxsmb   mrxsmb.sys   Tue Jan 18 23:26:50 2005 (41EDE18A)
aa353000 aa37da00   rdbss    rdbss.sys    Wed Oct 27 21:13:57 2004 (418047D5)
aa37e000 aa39fd00   afd      afd.sys      Wed Aug 04 02:14:13 2004 (41107EB5)
aa3a0000 aa3c7c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)
aa3c8000 aa3e8f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)
aa411000 aa450ce0   SYMTDI   SYMTDI.SYS   Tue Apr 05 14:10:52 2005 (4252D4AC)
aa451000 aa4a8d80   tcpip    tcpip.sys    Thu Jan 12 21:28:12 2006 (43C7103C)
aa4a9000 aa4bb400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)
aa4dc000 aa50ea00   Dot4     Dot4.sys     Wed Aug 04 01:58:28 2004 (41107B04)
aa5e3000 aa5f7000   Savrtpel Savrtpel.sys Fri Feb 04 23:03:26 2005 (4204458E)
aa5f7000 aa613ac0   SYMEVENT SYMEVENT.SYS Mon Mar 21 22:19:36 2005 (423F8EC8)
aa614000 aa669000   savrt    savrt.sys    Fri Feb 04 23:03:24 2005 (4204458C)
aa6d9000 aa6e17e0   tfsncofs tfsncofs.sys Mon Dec 06 21:04:46 2004 (41B50FBE)
aa6e9000 aa6f2560   drvnddm  drvnddm.sys  Wed Nov 24 00:47:25 2004 (41A4206D)
aa749000 aa76a700   portcls  portcls.sys  Tue Mar 16 13:58:17 2004 (40574E49)
aa76b000 aa797280   sthda    sthda.sys    Tue Jun 14 18:41:44 2005 (42AF5D28)
aa7b0000 aa7b2900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
bf000000 bf011580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)
bf012000 bf020000   ialmrnt5 ialmrnt5.dll Tue Jul 19 14:26:22 2005 (42DD45CE)
bf020000 bf041000   ialmdnt5 ialmdnt5.dll Tue Jul 19 14:26:16 2005 (42DD45C8)
bf041000 bf074c00   ialmdev5 ialmdev5.DLL Tue Jul 19 14:26:05 2005 (42DD45BD)
bf075000 bf157000   ialmdd5  ialmdd5.DLL  Tue Jul 19 14:33:35 2005 (42DD477F)
bf157000 bf15ade0   WFXDNTHQ WFXDNTHQ.DLL Thu Sep 28 23:48:17 2000 (39D41101)
bf15b000 bf16ed20   WFXDNT40 WFXDNT40.DLL Thu Sep 28 23:47:57 2000 (39D410ED)
bf16f000 bf175b20   znpdfdrv znpdfdrv.dll Mon Mar 28 08:37:41 2005 (424808A5)
bf176000 bf18b000   Ofprint  Ofprint.dll  Tue May 08 17:26:10 2001 (3AF86472)
bf18b000 bf1a0000   blicent  blicent.dll  Sat Jun 17 12:35:27 2000 (394BA8CF)
bf800000 bf9c1180   win32k   win32k.sys   Wed Oct 05 20:05:44 2005 (43446A58)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)
f6a2d000 f6a60200   update   update.sys   Wed Aug 04 01:58:32 2004 (41107B08)
f6a61000 f6a91100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)
f6a92000 f6aa2e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)
f6aa3000 f6ab9680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)
f6aba000 f6ae0000   e100b325 e100b325.sys Thu Oct 14 19:30:44 2004 (416F0C24)
f6ae0000 f6b86300   HSF_CNXT HSF_CNXT.sys Mon Nov 17 08:58:00 2003 (3FB8D3E8)
f6b87000 f6c85800   HSF_DP   HSF_DP.sys   Mon Nov 17 08:56:13 2003 (3FB8D37D)
f6c86000 f6ca8680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)
f6ca9000 f6cdcd00   HSFHWBS2 HSFHWBS2.sys Mon Nov 17 08:59:18 2003 (3FB8D436)
f6cdd000 f6cffe80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)
f6d00000 f6d26000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)
f6d26000 f6d39780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f6d3a000 f6e3a1e0   ialmnt5  ialmnt5.sys  Tue Jul 19 14:34:20 2005 (42DD47AC)
f6e4b000 f6e4ef00   MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
f72ac000 f72afc80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f72cc000 f72ce580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7301000 f731b580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)
f731c000 f7348a80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)
f7349000 f73d5480   Ntfs     Ntfs.sys     Wed Aug 04 02:15:06 2004 (41107EEA)
f73d6000 f73ec780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)
f73ed000 f7401d60   drvmcdb  drvmcdb.sys  Wed Dec 01 12:32:07 2004 (41AE0017)
f7402000 f7420780   fltMgr   fltMgr.sys   Wed Aug 04 02:01:17 2004 (41107BAD)
f7421000 f7438480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)
f7439000 f745e700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)
f745f000 f747d880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
f747e000 f748ea80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)
f748f000 f74bcd80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)
f75be000 f75c6c00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)
f75ce000 f75d8500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f75de000 f75eac80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)
f75ee000 f75f6e00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)
f75fe000 f760a200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f769e000 f76a6d00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f76ae000 f76ba180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)
f76be000 f76cc080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)
f76ce000 f76d8380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)
f76de000 f76ea880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)
f76ee000 f76f8200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f76fe000 f7709d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)
f770e000 f7716900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)
f771e000 f7727f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)
f772e000 f7737480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)
f775e000 f776cb80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)
f776e000 f777c100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)
f779e000 f77a6d80   HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
f77ae000 f77b62e0   LHidUsb  LHidUsb.Sys  Fri Nov 07 20:44:41 2003 (3FAC4A89)
f77ce000 f77d6700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)
f77de000 f77e6700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)
f77fe000 f7806880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)
f781e000 f782d760   LMouFlt2 LMouFlt2.Sys Fri Nov 07 20:44:15 2003 (3FAC4A6F)
f782e000 f783d900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)
f783e000 f7844200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)
f7846000 f784a900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f784e000 f7852e20   PxHelp20 PxHelp20.sys Mon Apr 25 15:48:02 2005 (426D4972)
f785e000 f7863a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f787e000 f7883000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
f7886000 f788c180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
f7896000 f789bbc0   ssrtln   ssrtln.sys   Wed Jul 14 14:28:48 2004 (40F57B60)
f78a6000 f78abd00   dot4usb  dot4usb.sys  Fri Aug 17 16:47:24 2001 (3B7D82DC)
f78b6000 f78bb200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)
f78be000 f78c2a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)
f78c6000 f78cd880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)
f78d6000 f78dc780   USBSTOR  USBSTOR.SYS  Wed Aug 04 02:08:44 2004 (41107D6C)
f790e000 f7914880   ShldDrv  ShldDrv.SYS  Mon Aug 29 08:20:06 2005 (4312FD76)
f7926000 f792bf00   LHidFlt2 LHidFlt2.Sys Fri Nov 07 20:44:24 2003 (3FAC4A78)
f792e000 f7932500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f793e000 f79444e0   tfsnboio tfsnboio.sys Mon Dec 06 21:04:34 2004 (41B50FB2)
f797e000 f7983000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f7986000 f798c800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f798e000 f7995580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)
f7996000 f799cb00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)
f79a6000 f79aa880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)
f79ae000 f79b2580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
f79b6000 f79ba080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
f79be000 f79c3020   wanatw4  wanatw4.sys  Tue Jul 16 11:23:14 2002 (3D343A62)
f79c6000 f79cc000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f79ce000 f79d1000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
f7a66000 f7a68580   hidusb   hidusb.sys   Fri Aug 17 17:02:16 2001 (3B7D8658)
f7a76000 f7a78280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
f7a92000 f7a95a00   kbdhid   kbdhid.sys   Wed Aug 04 01:58:33 2004 (41107B09)
f7a9e000 f7aa0f80   mouhid   mouhid.sys   Fri Aug 17 16:47:57 2001 (3B7D82FD)
f7aa2000 f7aa5280   Dot4Prt  Dot4Prt.sys  Fri Aug 17 16:47:25 2001 (3B7D82DD)
f7abe000 f7abfb80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
f7ac0000 f7ac1100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)
f7ac2000 f7ac3700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)
f7b0e000 f7b0f5c0   sscdbhk5 sscdbhk5.sys Wed Jul 14 14:29:02 2004 (40F57B6E)
f7b10000 f7b11100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)
f7b14000 f7b15280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
f7b16000 f7b18000   i2omgmt  i2omgmt.SYS  Wed Aug 04 02:00:50 2004 (41107B92)
f7b18000 f7b19f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
f7b1a000 f7b1b080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7b1c000 f7b1d080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
f7b1e000 f7b1f080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7b24000 f7b25100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b2a000 f7b2b8a0   tfsnpool tfsnpool.sys Mon Dec 06 21:04:29 2004 (41B50FAD)
f7b86000 f7b86d00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7bcf000 f7bcfc00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7bd2000 f7bd2d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
f7bd7000 f7bd7b80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)
f7c49000 f7c49c00   guard    guard.sys    Fri Nov 19 04:45:52 2004 (419DC0D0)
f7cd8000 f7cd8880   tfsndres tfsndres.sys Mon Dec 06 21:05:20 2004 (41B50FE0)
f7cda000 f7cdafe0   tfsndrct tfsndrct.sys Mon Dec 06 21:04:50 2004 (41B50FC2)

Unloaded modules:
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7c8a000 a7cb4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a874e000 a8760000   naveng.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8760000 a8822000   navex15.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7d77000 a7da1000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7e41000 a7e6b000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Closing open log file c:\debuglog2.txt
0
 
Irwin SantosComputer Integration SpecialistCommented:
savrt.sys is file security driver, creating the problem.

Got Norton Antivirus?   Uninstall then Re-install
0
 
cpc2004Commented:
Your version of Norton AV has known software problem.
>>
aa5f7000 aa613ac0   SYMEVENT SYMEVENT.SYS Mon Mar 21 22:19:36 2005 (423F8EC8)
>>

Refer the following case and it has the same version of Norton.
http://www.windowsbbs.com/showthread.php?t=52364

Upgrade or de-install Norton AV
0
 
cpc2004Commented:
ShldDrv.SYS is Panda AntiVirus. Why do you activate both Norton AV and Panda AntiVirus at the same problem?
0
 
Irwin SantosComputer Integration SpecialistCommented:
@cpc2004..i missed that. good find...

Running multiple Anti-virus software will lead to conflict, performance hits, and crashing.
0
 
mattysyrAuthor Commented:
A friend of my clients added that recently, I had a feeling that may have been what was causing it.  I will try to get a new version of Norton and uninstall Panda.
0
 
Irwin SantosComputer Integration SpecialistCommented:
also..send a slap to your client's friend.. ;-)
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 5
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now