Norton Internet Security / Norton AntiVirus

[MPSAN]

I am running the latest NIS 2011 with 32 bit XP Pro SP3. Now, when we shut down we get a BSOD saying I have a Stop 0x0000007E, C0000005, B9DCB15B

It shows the issue as SYMDS.SYS B9DCB15B based at B9DC6000

Is there ANYTHING I can try to fix this? The biggest issue is that when this does crash it is so far into the shutdown process that there are NO logs created. When we start up again, it then checks the RAID 1 array for errors and that takes HOURS! As a test, can we disable all parts of NIS 2011 before shutting down? If so, how?

TIA

[Stu]

Does it still occur?

Did you change anything on your computer lately?

Please try a scan first. And see if it finds anything. If not we have to look for something more

[MPSAN]

---

Stu wrote:

Does it still occur?

Did you change anything on your computer lately?

Please try a scan first. And see if it finds anything. If not we have to look for something more

---

Thank you.

I have not changed anything...just added Firefox 5 but I have everything up to date. I even started using IE8. I can try a scan and see what happens. As I said, for some reason, when I do get the crash on shutdown, it wants to check my RAID 1 setup for errors on the next power on. It then takes 15 hours or more to complete! It is funny that the idle time scanner can come up during this Intel RAID 1 scan.That may be slowing down the RAID 1 scan. I thought Idle Time scan would not run when system was not idle. I wish there was a way to disable all of NIS 2011 while I am trying to trouble shoot this.

I could, as a last resort, remove NIS 2011, and then reinstall. I could save my id safe. However, I am not sure what happens as this is a 3 PC license. Would it know I uninstalled 1 of them and give it back?

[Stu]

A reinstall might be a interesting idea indeed. This way you could check if this is a Norton thing at all

[reese_anschultz]

Does this happen every time you shutdown? If you can get this to happen again (I'm sorry, I know you don't want a 15 hr disk check) I'd like to get a kernel dump from it. Before the crash occurs make sure that you've set the debugging information to kernel memory dumps from within the advanced system setttings' startup and recovery option. Take note of the dump file location because we'll want that latter. You also need to reboot after changing the setting before it'll take effect.

[MPSAN]

OK, I will set it. I hope I do get the dump as it happens late in the shutdown process and I do not even get any logs.

With regard to how often it happens, it happened twice in a row. System was off for several days. I did turn it off OK last night but before I did, I disabled antivirus autoprotect. Also, I just now got a 108MB update. Not sure what that was for. It was NOT the Firefox 5 update as I alreadyy have it.

Just tried a full system scan and got an error saying that norton system framework had an issue. I had posted this before on this forum. It saidthe problem was in ccsvhst vw=er 10.1.1.16

symhtml.dll. Drive lite on solid and finally got message that there was an error 8504.104.

[reese_anschultz]

Is there anything in the Norton Error Reporting section of Norton's Security History? If so please right-click one of the entries, Copy it to the clipboard and paste in a response here.

[MPSAN]

Reese, there is nothing about any error (just info messages) in the History.

[reese_anschultz]

---

MPSAN wrote:

Reese, there is nothing about any error (just info messages) in the History.

---

If there are ANY entries when you Show the Norton Error Reporting section of the Security History window I'd like one or two of those.

[MPSAN]

OK, I will look again.