My Computer running XP SP3 just blue screened when I opened the Services control panel. According to the dumpchk.exe program that comes with the "Debugging Tools for Windows" the probably cause was:
SYMEVENT.SYS ( SYMEVENT+14339 )
Here's the rest of the details:
kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 805aeae5, The address that the exception occurred at
Arg3: 964edb40, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced
memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
nt!MiGetNextNode+1b
805aeae5 8b480c mov ecx,dword ptr [eax+0Ch]
TRAP_FRAME: 964edb40 -- (.trap 0xffffffff964edb40)
ErrCode = 00000000
eax=ffffffff ebx=89114a38 ecx=88f4a628 edx=89114a64 esi=89114948 edi=88f4a628
eip=805aeae5 esp=964edbb4 ebp=964edbcc iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!MiGetNextNode+0x1b:
805aeae5 8b480c mov ecx,dword ptr [eax+0Ch] ds:0023:0000000b=??????
??
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: svchost.exe
LAST_CONTROL_TRANSFER: from 805a54da to 805aeae5
STACK_TEXT:
964edbb0 805a54da 89114948 88cf2020 7c97b178 nt!MiGetNextNode+0x1b
964edbcc 805c8913 89114948 7ff77000 88cf2020 nt!MmDeleteTeb+0x4e
964edc90 805c8be0 00000000 00000000 88cf2020 nt!PspExitThread+0x5b9
964edcb0 805c8f20 88cf2020 00000000 c0000001 nt!PspTerminateThreadByPointer+0x52
964edcd0 b5d64339 00000000 00000000 8a38f008 nt!NtTerminateThread+0x70
WARNING: Stack unwind information not available. Following frames may be wrong.
964edd54 8053d648 00000000 00000000 044fffb4 SYMEVENT+0x14339
964edd54 7ff77000 00000000 00000000 044fffb4 nt!KiFastCallEntry+0xf8
0000003b 00000000 00000000 00000000 00000000 0x7ff77000
STACK_COMMAND: kb
FOLLOWUP_IP:
SYMEVENT+14339
b5d64339 ?? ???
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: SYMEVENT+14339
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: SYMEVENT
IMAGE_NAME: SYMEVENT.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 489790a0
FAILURE_BUCKET_ID: 0x8E_SYMEVENT+14339
BUCKET_ID: 0x8E_SYMEVENT+14339
Followup: MachineOwner
---------