Dump File

By bobster
Jul 11, 2006
  1. Can someone assist me in telling my what this dump file is telling me? I have attached the log file if further information is needed.

    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Arg1: c0000005, The exception code that was not handled
    Arg2: 804ddd02, The address that the exception occurred at
    Arg3: 00000000, Parameter 0 of the exception
    Arg4: 1089087a, Parameter 1 of the exception

    Debugging Details:

    *** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

    804ddd02 8b80a4000000 mov eax,[eax+0xa4]



    READ_ADDRESS: 1089087a



    EXCEPTION_RECORD: f607b400 -- (.exr fffffffff607b400)
    .exr fffffffff607b400
    ExceptionAddress: 804ddd02 (nt!ObQueryNameString+0x0000004a)
    ExceptionCode: c0000005 (Access violation)
    ExceptionFlags: 00000000
    NumberParameters: 2
    Parameter[0]: 00000000
    Parameter[1]: 1089087a
    Attempt to read from address 1089087a
  2. pcaceit

    pcaceit TS Rookie Posts: 315

    Can you post the unanayzed dump
    and check system event log and post the error and activity details before and after the crash.?
  3. bobster

    bobster TS Rookie Topic Starter


    This is the only error before the system crashed.

    Event Type: Error
    Event Source: EventLog
    Event Category: None
    Event ID: 6008
    Date: 7/10/2006
    Time: 5:16:22 PM
    User: N/A
    Computer: Test1
    The previous system shutdown at 5:08:42 PM on 7/10/2006 was unexpected.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    0000: d6 07 07 00 01 00 0a 00 Ö.......
    0008: 11 00 08 00 2a 00 a0 00 ....*.*.
    0010: d6 07 07 00 01 00 0a 00 Ö.......
    0018: 15 00 08 00 2a 00 a0 00 ....*.*.

    There were no errors in the App logs.

    It wont let me upload the full dmp file.
  4. pcaceit

    pcaceit TS Rookie Posts: 315

    Driver SYMEVENT.SYS is this a norton symantec driver related to one of the Norton systemworks? or norton antivirus? Live update? Norton firewall?

    If it is would suggest uninstall norton products including Live update and reinstall.
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...