Spontaneous reboot

[Dave Navarro]

I built a new computer with a Gigabyte Motherboard using the INTEL
chipset with a 2.4GHz P4 HT processor and two gigabytes of RAM. I have
a 120 GB Western Digital IDE boot drive and a 200 GB Western Digital IDE
data drive.

Whenever I do anything that is hard drive intensive (writes/reads lots
of temp files) my system will reboot. This typically happens when I run
programs like DVDLab (building a DVD) with a large project, TMPGenc with
a large file, Alcohol 120% (writing a DVD image to the hard drive).

When the system reboots it sends an error report to Microsoft and then
pops up a message telling me that the reboot was caused by a device
driver, but it doesn't tell me which device driver it is.

So, I turned off automatic reboot so that I could read the BSOD and it
still doesn't tell me which device driver is causing the problem.

I am running Windows XP SP2 with all updates (including driver updates)
installed.

The BSOD info is:

STOP 0x0000000A (0x0992F778,0x00000002,0x804F8675)

but it doesn't give me a filename or device name.

Any ideas on how I can figure out what the problem is and fix it?

--Dave

 

[Dave Navarro]

I am running Windows XP SP2 with all updates (including driver updates)
installed.

The BSOD info is:

STOP 0x0000000A (0x0992F778,0x00000002,0x804F8675)

but it doesn't give me a filename or device name.

Any ideas on how I can figure out what the problem is and fix it?

I did some research and ran the VIEWER program to turn on device driver
monitoring and it turns out that the problem is:

SAVRT.SYS

which is part of Norton AntiVirus. I contacted Symantec and verified
that I have the very latest redirector installed. Now they're blaming
the problem on Windows XP.

Anything I can do besides dumping Norton AntiVirus?

 

[Guest]

Dave from your initial description the first thing that came to mind was the
Sasser
worm....Have you checked to see if you are infected? Just a thought. Good
luck.

 

[Bad Bubba]

Dave from your initial description the first thing that came to mind was the
Sasser
worm....Have you checked to see if you are infected? Just a thought. Good
luck.

Yeah, no worm or virus.

--Dave

 

[Guest]

Try running this program and seeing if it finds it .. It is good for a worm
that does what you describe called Sasser
http://vil.nai.com/vil/stinger

One warning .. Once you remove it you will probably have tcp/ip problems
that come up from removing this worm. you will need this program to fix that.
http://cexx.org/lspfix.htm