Dump File

[bobster]

Can someone assist me in telling my what this dump file is telling me? I have attached the log file if further information is needed.

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 804ddd02, The address that the exception occurred at
Arg3: 00000000, Parameter 0 of the exception
Arg4: 1089087a, Parameter 1 of the exception

Debugging Details:
------------------

*** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!ObQueryNameString+4a
804ddd02 8b80a4000000 mov eax,[eax+0xa4]

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 1089087a

READ_ADDRESS: 1089087a

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR: 0x1E

EXCEPTION_RECORD: f607b400 -- (.exr fffffffff607b400)
.exr fffffffff607b400
ExceptionAddress: 804ddd02 (nt!ObQueryNameString+0x0000004a)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 1089087a
Attempt to read from address 1089087a

 

[pcaceit]

Can you post the unanayzed dump
and check system event log and post the error and activity details before and after the crash.?

 

[bobster]

Re

This is the only error before the system crashed.

Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6008
Date: 7/10/2006
Time: 5:16:22 PM
User: N/A
Computer: Test1
Description:
The previous system shutdown at 5:08:42 PM on 7/10/2006 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d6 07 07 00 01 00 0a 00 Ö.......
0008: 11 00 08 00 2a 00 a0 00 ....*.*.
0010: d6 07 07 00 01 00 0a 00 Ö.......
0018: 15 00 08 00 2a 00 a0 00 ....*.*.

There were no errors in the App logs.

It wont let me upload the full dmp file.

 

[pcaceit]

Driver SYMEVENT.SYS is this a norton symantec driver related to one of the Norton systemworks? or norton antivirus? Live update? Norton firewall?

If it is would suggest uninstall norton products including Live update and reinstall.