Panda Shutdown BSOD

This is a BSOD me and Adryn have been getting randomly at shutdown on XP Pro SP1 with all the updates, with nForce2 chipsets, using an AGP graphics card (mine is a GeForce4 Ti, his is a Radeon i forget which model) using DDR ram with an Athlon XP processor.

We've not been able to work out why its happening, but I'll bet its got somthing to do with the AV file checknig service shutting down badly. The error is completley un-documented by MS or Panda.

** STOP : 0x86427532 (0x000001DB, 0x00000002, 0x00000003, 0x0000000B)

 

Woot! A screenshot! Sorta...LOL.

I sent the memory dump to MS for debugging.

It took about two months.

I just checked right now.

We were absolutely correct.

Posting the text of the results:

 

Fantastic! Now...

Platinum 7 update HotFix

- This fix solves various Windows XP compatibility problems and enhance the antivurus stability during shut down

W00t!

 

Its useless for me. I don't have nay of the versions listed.

But, this has yet to happen to me again since it did it some time back *knocks on wood*

 

Its got Ti and Pt listed... if youre up to date you should have the right version to install the patch.

 

The Ti is version 2.x

I have 3.x, aka Ti 2004.

 

Thats annoying! I woulda thought the hotfix would be intergrated into the newer version.. but apparently not

I'm all patched up now, so I'm happy

 

Well, Panda isn't being real specific about the update and what it does, so maybe it is integrated?

You seem to get the recurring stop error, me only once. Maybe I was just lucky

 

Reviving a somewhat dead thread, I learned how to debug memory dumps today (I'm a win2k tech now, no more personal space calls, all pro support )

I've bolded the important stuff. This is how MS found out it was Panda.


Microsoft (R) Windows Debugger Version 6.3.0011.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\Jeremy\Desktop\Mini030404-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp2.030422-1633
Kernel base = 0x804d4000 PsLoadedModuleList = 0x80543530
Debug session time: Thu Mar 04 10:20:12 2004
System Uptime: 0 days 0:09:10.390 <--New install, heh
Loading Kernel Symbols
..........................................................................................................................
Loading unloaded module list
........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 86427532, {1db, 2, 3, b}

Unable to load image pavdrv51.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for pavdrv51.sys
*** ERROR: Module load completed but symbols could not be loaded for pavdrv51.sys
Probably caused by : pavdrv51.sys ( pavdrv51+7fc0 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Unknown bugcheck code (86427532) <--This is why it isn't documented
Unknown bugcheck description
Arguments:
Arg1: 000001db
Arg2: 00000002
Arg3: 00000003
Arg4: 0000000b

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x86427532

LAST_CONTROL_TRANSFER: from f3e41fc0 to 804f4103

STACK_TEXT:
afaab964 f3e41fc0 86427532 000001db 00000002 nt!KeBugCheckEx+0x19
WARNING: Stack unwind information not available. Following frames may be wrong.
afaabba0 f3e4220b 860eb8b0 f3e45cf0 00000000 pavdrv51+0x7fc0
afaabc34 804ea221 86338030 861bf890 806ad190 pavdrv51+0x820b
afaabc44 8055d0fe 861bf900 861322f0 861bf890 nt!IopfCallDriver+0x31
afaabc58 8055de46 86338030 861bf890 861322f0 nt!IopSynchronousServiceTail+0x5e
afaabd00 80556cea 000000a0 00000000 00000000 nt!IopXxxControlFile+0x5c2
afaabd34 8052d571 000000a0 00000000 00000000 nt!NtDeviceIoControlFile+0x28
afaabd34 7ffe0304 000000a0 00000000 00000000 nt!KiSystemService+0xc4
00cdff70 00000000 00000000 00000000 00000000 SharedUserData!SystemCallStub+0x4


FOLLOWUP_IP:
pavdrv51+7fc0
f3e41fc0 ?? ???

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: pavdrv51+7fc0

MODULE_NAME: pavdrv51

IMAGE_NAME: pavdrv51.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3e8c072b

STACK_COMMAND: kb

BUCKET_ID: 0x86427532_pavdrv51+7fc0

Followup: MachineOwner
---------

 

I dumped Panda because it caused probs on my system as well... i prefer Mcaffee

 

I'm sorry. I wouldn't touch Mcaffee or Norton with a 10 foot pole.

I like Panda, and am sticking with it.

I was only showing a memory dump debug, thats quite old.

 

Hey Adrynalyne and Goldfish, did you guys actually get Panda to respond to your support questions?

If so, that's completely amazing! I've never heard back from them about anything.

 

I don't call support, so I haven't heard back, no

 

Hang on Adryn, haven't you done this all before here: http://www.majorgeeks.com/vb/showthread.php?p=325821

 

Yup, but I got learned gooder on how to read dump files

Anyway...sorry to bump this relic, but it happened to me again.

I noticed it happened on shutdown, naturally, but the thing of notice is that a program called appvxdwin would hang with the blue progress bar trying to end it.

Within a second of clicking end now, I saw this error.

Was that what you saw as well, Goldfish?

Did the update cure your problem?

 

Hmm, I've not got that one before. But then, I'm not running Panda on my rig anymore, only on the one in the study. The update fixed the previous shutdown error which would happen after all the processes had supposedly ended (no End Now boxes)... but as ive not had that error i dont know whether it was fixed!