Blue Screen of Death

[Whoever]

Since April I have been getting a "STOP" with various error messages:
"DRIVER_IRQL_NOT_LESS_OR_EQUAL"
"IRQL_NOT_LESS_OR_EQUAL"
etc., but always had the "not less or equal" in it.

Most time it pointed to symidsco.sys as the file that produced the error.
Contacting Norton - they said I have a non-updated device driver. I have
updated (more than once) every driver I could find.

I found the WindowsUpdate.log which appears to have an entry for everytime
this has happened. The last three entries which also coinsided with the
blue screen contained the following entries: (I have deleted the time as it
was all with the same second.)

DnldMgr *********** DnldMgr: New download job [UpdateId =
{07BB26DF-A783-4700-8DA9-C5EFC9509968}.100] ***********
876 380 DnldMgr * Update is not allowed to download due to regulation.
876 824 AU AU found 1 sessions to launch client into
876 824 AU Launched new AU client for directive 'Download Progress',
session id = 0x0
876 380 AU AU checked download status and it changed: Downloading is
paused
3176 c6c Misc =========== Logging initialized (build: 5.8.0.2469,
tz: -0700) ===========
3176 c6c Misc = Process: C:\WINDOWS\system32\wuauclt.exe
3176 c6c AUClnt Launched Client UI process
3176 c6c AUClnt AU client got new directive = 'Shutdown', serviceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0x00000000

wuauclt.exe has the date of 5/26/05.

Can anyone identify the serviceID in the line above?

This started just after I purchased a new HD and ghosted over everything
from my old drive, so all my drivers were the same - but since redownloaded
and installed. I am using WinXP SP2 with auto update turned on.

Thanks,

John H W

 

[Vanguard]

Since April I have been getting a "STOP" with various error messages:
"DRIVER_IRQL_NOT_LESS_OR_EQUAL"
"IRQL_NOT_LESS_OR_EQUAL"
etc., but always had the "not less or equal" in it.

Most time it pointed to symidsco.sys as the file that produced the
error. Contacting Norton - they said I have a non-updated device
driver. I have updated (more than once) every driver I could find.

Are you using a really old version of some Norton product? When
Symantec discontinues support for, say, their old version of their
anti-virus product, you might still be able to get the virus signature
updates for awhile but you won't get anymore *program* updates. To get
the newer driver means you need to buy the newer version of their
software.

So what happens when you completely uninstall all Norton products from
your computer? In case the uninstall is not thorough, Symantec has
their RNAV and RNIS utilities to wipe out remnants of their Norton
Anti-Virus and Norton Internet Security products. Even if you think
your old version (or new version) of Norton whatever is okay, is it
worth the stability of your system?

http://www.file.net/process/symidsco.sys.html

http://www.dynamiclink.nl/htmfiles/rframes/info_sys/info_s/185.htm
(don't know if this is the latest version or will work with whatever
Norton product that you have)

 

[Patrick Keenan]

Since April I have been getting a "STOP" with various error messages:
"DRIVER_IRQL_NOT_LESS_OR_EQUAL"
"IRQL_NOT_LESS_OR_EQUAL"
etc., but always had the "not less or equal" in it.

Most time it pointed to symidsco.sys as the file that produced the error.
Contacting Norton - they said I have a non-updated device driver. I have
updated (more than once) every driver I could find.

Apparently not entirely successfully.

You should completely remove the "older" Norton Firewall you're using -
remove *all* traces of it, files and registry entries. The device driver
listed is part of the Symantec firewall, as you probably already know.

Once you are sure there are no entries and that the system is stable and
does not blue-screen, re-install if you feel you need to. Don't try to
update it without reinstalling, because that is apparently not working.

If the problem goes away without the firewall installed and comes back with
the reinstall, consider the possibility of a basic incompatibility between
that firewall version and current XP updates. You may need to consider
getting a newer version.

Or, consider getting a router with NAT and firewall to reduce your need for
a PC-based firewall and get some system performance back.

HTH
-pk

I found the WindowsUpdate.log which appears to have an entry for everytime
this has happened. The last three entries which also coinsided with the
blue screen contained the following entries: (I have deleted the time as
it was all with the same second.)

DnldMgr *********** DnldMgr: New download job [UpdateId =
{07BB26DF-A783-4700-8DA9-C5EFC9509968}.100] ***********
876 380 DnldMgr * Update is not allowed to download due to regulation.
876 824 AU AU found 1 sessions to launch client into
876 824 AU Launched new AU client for directive 'Download Progress',
session id = 0x0
876 380 AU AU checked download status and it changed: Downloading is
paused
3176 c6c Misc =========== Logging initialized (build: 5.8.0.2469,
tz: -0700) ===========
3176 c6c Misc = Process: C:\WINDOWS\system32\wuauclt.exe
3176 c6c AUClnt Launched Client UI process
3176 c6c AUClnt AU client got new directive = 'Shutdown', serviceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0x00000000

wuauclt.exe has the date of 5/26/05.

Can anyone identify the serviceID in the line above?

This started just after I purchased a new HD and ghosted over everything
from my old drive, so all my drivers were the same - but since
redownloaded and installed. I am using WinXP SP2 with auto update turned
on.

Thanks,

John H W

 

[Whoever]

I am using 2006.
John H W

Are you using a really old version of some Norton product? When Symantec
discontinues support for, say, their old version of their anti-virus
product, you might still be able to get the virus signature updates for
awhile but you won't get anymore *program* updates. To get the newer
driver means you need to buy the newer version of their software.

So what happens when you completely uninstall all Norton products from
your computer? In case the uninstall is not thorough, Symantec has their
RNAV and RNIS utilities to wipe out remnants of their Norton Anti-Virus
and Norton Internet Security products. Even if you think your old version
(or new version) of Norton whatever is okay, is it worth the stability of
your system?

http://www.file.net/process/symidsco.sys.html

http://www.dynamiclink.nl/htmfiles/rframes/info_sys/info_s/185.htm
(don't know if this is the latest version or will work with whatever
Norton product that you have)

 

[Whoever]

I have a router with firewall. I have uninstalled the 2006 from the ghosted
version, then reinstalled.

John H W

Since April I have been getting a "STOP" with various error messages:
"DRIVER_IRQL_NOT_LESS_OR_EQUAL"
"IRQL_NOT_LESS_OR_EQUAL"
etc., but always had the "not less or equal" in it.

Most time it pointed to symidsco.sys as the file that produced the error.
Contacting Norton - they said I have a non-updated device driver. I have
updated (more than once) every driver I could find.

Apparently not entirely successfully.

You should completely remove the "older" Norton Firewall you're using -
remove *all* traces of it, files and registry entries. The device driver
listed is part of the Symantec firewall, as you probably already know.

Once you are sure there are no entries and that the system is stable and
does not blue-screen, re-install if you feel you need to. Don't try to
update it without reinstalling, because that is apparently not working.

If the problem goes away without the firewall installed and comes back
with the reinstall, consider the possibility of a basic incompatibility
between that firewall version and current XP updates. You may need to
consider getting a newer version.

Or, consider getting a router with NAT and firewall to reduce your need
for a PC-based firewall and get some system performance back.

HTH
-pk

I found the WindowsUpdate.log which appears to have an entry for
everytime this has happened. The last three entries which also coinsided
with the blue screen contained the following entries: (I have deleted
the time as it was all with the same second.)

DnldMgr *********** DnldMgr: New download job [UpdateId =
{07BB26DF-A783-4700-8DA9-C5EFC9509968}.100] ***********
876 380 DnldMgr * Update is not allowed to download due to regulation.
876 824 AU AU found 1 sessions to launch client into
876 824 AU Launched new AU client for directive 'Download Progress',
session id = 0x0
876 380 AU AU checked download status and it changed: Downloading is
paused
3176 c6c Misc =========== Logging initialized (build: 5.8.0.2469,
tz: -0700) ===========
3176 c6c Misc = Process: C:\WINDOWS\system32\wuauclt.exe
3176 c6c AUClnt Launched Client UI process
3176 c6c AUClnt AU client got new directive = 'Shutdown', serviceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0x00000000

wuauclt.exe has the date of 5/26/05.

Can anyone identify the serviceID in the line above?

This started just after I purchased a new HD and ghosted over everything
from my old drive, so all my drivers were the same - but since
redownloaded and installed. I am using WinXP SP2 with auto update turned
on.

Thanks,

John H W

 

[Vanguard]

I am using 2006.

Well, that's plenty new. If their program doesn't install the new
driver or their LiveUpdate doesn't show it as an available update,
you'll have to get it directly from Symantec. Last time I had to do
this, they place it on an FTP server and tell you how to connect and
where to get it from their FTP server. In my prior post, I mentioned a
link for a download of the .sys file but I don't know if it is newer or
older than the one you have and I'm always leery of getting such files
from 3rd parties. Best is to get it from Symantec. Otherwise, you're
stuck with leaving the system unstable with Norton stuff installed or
uninstall Symantec and test if you system becomes stable.

As regards the service ID, did you look in the registry for a key by
that class ID? Is there one under:

HKEY_CLASSES_ROOT\CLSID\7971F918-A847-4430-9279-4A52D1EFE18D\InprocServer32

That tells you the program that gets called. I don't have any Norton
products installed (got rid of them awhile ago) so I don't have a class
ID key for 7971F918-A847-4430-9279-4A52D1EFE18D to see what server
program it would define. I'm not sure why you care about what the
Automatic Update service is doing (which has to do with the Windows
Updates site). You won't be getting a new Symantec driver from WU (and
even if it offered one, I wouldn't bother getting drivers from WU and
instead go direct to the author of the driver).

The .sys file is from Symantec and that is from whom you need to get the
newer version. If their LiveUpdate won't get it, you'll have to call a
Symantec tech to get it. You could use their support web form to submit
your request for the newest version of the file rather than calling
them. They usually respond with 3 business days when submitting a
problem using their web form, and they'll probably provide a link to it
in their response.

 

[Patrick Keenan]

I have a router with firewall. I have uninstalled the 2006 from the
ghosted version, then reinstalled.

How far did you go with the uninstall? Some uninstallers leave a lot of
debris behind.

Also, did you test for stability without the Symantec product installed?
Was it stable then?

-pk

John H W

Since April I have been getting a "STOP" with various error messages:
"DRIVER_IRQL_NOT_LESS_OR_EQUAL"
"IRQL_NOT_LESS_OR_EQUAL"
etc., but always had the "not less or equal" in it.

Most time it pointed to symidsco.sys as the file that produced the
error. Contacting Norton - they said I have a non-updated device driver.
I have updated (more than once) every driver I could find.

Apparently not entirely successfully.

You should completely remove the "older" Norton Firewall you're using -
remove *all* traces of it, files and registry entries. The device
driver listed is part of the Symantec firewall, as you probably already
know.

Once you are sure there are no entries and that the system is stable and
does not blue-screen, re-install if you feel you need to. Don't try to
update it without reinstalling, because that is apparently not working.

If the problem goes away without the firewall installed and comes back
with the reinstall, consider the possibility of a basic incompatibility
between that firewall version and current XP updates. You may need to
consider getting a newer version.

Or, consider getting a router with NAT and firewall to reduce your need
for a PC-based firewall and get some system performance back.

HTH
-pk

I found the WindowsUpdate.log which appears to have an entry for
everytime this has happened. The last three entries which also
coinsided with the blue screen contained the following entries: (I have
deleted the time as it was all with the same second.)

DnldMgr *********** DnldMgr: New download job [UpdateId =
{07BB26DF-A783-4700-8DA9-C5EFC9509968}.100] ***********
876 380 DnldMgr * Update is not allowed to download due to
regulation.
876 824 AU AU found 1 sessions to launch client into
876 824 AU Launched new AU client for directive 'Download Progress',
session id = 0x0
876 380 AU AU checked download status and it changed: Downloading is
paused
3176 c6c Misc =========== Logging initialized (build: 5.8.0.2469,
tz: -0700) ===========
3176 c6c Misc = Process: C:\WINDOWS\system32\wuauclt.exe
3176 c6c AUClnt Launched Client UI process
3176 c6c AUClnt AU client got new directive = 'Shutdown', serviceId =
{7971F918-A847-4430-9279-4A52D1EFE18D}, return = 0x00000000

wuauclt.exe has the date of 5/26/05.

Can anyone identify the serviceID in the line above?

This started just after I purchased a new HD and ghosted over everything
from my old drive, so all my drivers were the same - but since
redownloaded and installed. I am using WinXP SP2 with auto update
turned on.

Thanks,

John H W