Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows XP Service Pack 3 Crashes


  • Please log in to reply
1 reply to this topic

#1 miory

miory

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:41 AM

Posted 22 January 2009 - 05:09 PM

Here's the results of my crash dump analysis from WindDbg:

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
*** WARNING: Unable to verify timestamp for FdRedir.sys
*** ERROR: Module load completed but symbols could not be loaded for FdRedir.sys
*** WARNING: Unable to verify timestamp for SPBBCDrv.sys
*** ERROR: Module load completed but symbols could not be loaded for SPBBCDrv.sys

BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: csrss.exe

LAST_CONTROL_TRANSFER: from f7b79856 to f7b795a0

STACK_TEXT:
a9eea1e8 f7b79856 a9eea5ac e174da18 e7a499b0 Ntfs!BinarySearchIndex+0xe
a9eea210 f7b7b35e a9eea5ac e174da18 e4b79418 Ntfs!FindFirstIndexEntry+0x19e
a9eea338 f7b7b4f4 a9eea5ac e24cc960 e174da18 Ntfs!NtfsRestartIndexEnumeration+0x6c
a9eea55c f7b7a0e8 a9eea5ac 88b20008 8a2de100 Ntfs!NtfsQueryDirectory+0x54a
a9eea590 f7b7a053 a9eea5ac e174da18 8a2df860 Ntfs!NtfsCommonDirectoryControl+0xbc
a9eea708 804e13d9 8a2de020 88b20008 88b20008 Ntfs!NtfsFsdDirectoryControl+0xad
a9eea718 f746009e a9eea7bc 8a4118f8 88b2024c nt!IopfCallDriver+0x31
a9eea744 804e13d9 8a2df860 88b20008 8a33a030 fltMgr!FltpDispatch+0x152
a9eea754 f744a459 a9eea784 804e13d9 8a36a020 nt!IopfCallDriver+0x31
a9eea75c 804e13d9 8a36a020 88b20008 804e9430 sr!SrPassThrough+0x31
a9eea76c a9e32652 88b2024c 88b20270 a9eea7bc nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
a9eea784 a9e39d80 8a36a020 89e94e18 a9eea7bc SYMEVENT+0x7652
a9eea7a0 a9e327b9 a9eea7bc 804e9430 a9e32880 SYMEVENT+0xed80
a9eea7e0 804e13d9 89cbf3d0 88b20008 88b20008 SYMEVENT+0x77b9
a9eea7f0 f746009e 88b20008 8a4118f8 88bbf8d0 nt!IopfCallDriver+0x31
a9eea81c 804e13d9 89e94e18 88b20008 89e7af38 fltMgr!FltpDispatch+0x152
a9eea82c a93df47b a93df517 88f42a58 88b20008 nt!IopfCallDriver+0x31
a9eea864 8057fb3d 88f42a58 88b20008 88c186c8 FdRedir+0x47b
a9eea888 804dd99f 8000059c 00000000 00000000 nt!NtQueryDirectoryFile+0x5d
a9eea888 804e3de7 8000059c 00000000 00000000 nt!KiFastCallEntry+0xfc
a9eea92c a9615f4b 8000059c 00000000 00000000 nt!ZwQueryDirectoryFile+0x11
a9eea978 a9616451 a9eea99c a9eea9ac a9eea9a4 SPBBCDrv+0x2f4b
a9eea9c4 a9624247 e79db49c e5e8d1a8 00000000 SPBBCDrv+0x3451
a9eea9e0 a96225a4 e7b4e3b4 a9630fda a96311c3 SPBBCDrv+0x11247
a9eeaa04 a9631603 a9eeab34 00000005 0000000b SPBBCDrv+0xf5a4
a9eeaa34 a96312e8 a9eeab28 e7a38c08 00000000 SPBBCDrv+0x1e603
a9eeaa70 a9622335 00000002 a9eeab28 e7b4e250 SPBBCDrv+0x1e2e8
a9eeaad0 a962370a a9eeac00 00eeabd4 00000002 SPBBCDrv+0xf335
a9eeab50 804dc605 00000005 a9eeab84 e188e09c SPBBCDrv+0x1070a
a9eeab6c 00000000 00000000 a9eeab50 00000000 nt!ExReleaseResourceLite+0x8d


STACK_COMMAND: kb

FOLLOWUP_IP:
SYMEVENT+7652
a9e32652 ?? ???

SYMBOL_STACK_INDEX: b

SYMBOL_NAME: SYMEVENT+7652

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: SYMEVENT

IMAGE_NAME: SYMEVENT.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 450f3f43

FAILURE_BUCKET_ID: 0x7f_8_SYMEVENT+7652

BUCKET_ID: 0x7f_8_SYMEVENT+7652

Followup: MachineOwner
---------



Anyone know what I need to do from here?

TIA!

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,723 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:02:41 AM

Posted 22 January 2009 - 05:51 PM

You might take a look at http://service1.symantec.com/SUPPORT/ent-s...ew=0&seg=hm

If these problems began recently and you use Windows System Restore function, I would try that.

Looking at that link...I think I'd just use a different AV that doesn't have this problem or at least try uninstalling whatever version of the Symantec product I have...and then reinstalling same (and updating). I'm lazy and that looks like too much work for me just to have the potential for having the same occur again (this seems to be a documented, known problem).

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users