Help - Search - Members
Full Version: Wks6 causing XP machine to reboot bugcheck
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
SherryB
Workstation 6.0.3.837 running on XP Pro SP2 (latest updates except for SP3)
When I first power up the computer, it makes it to the login screen, then reboots, I get this:
Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 6/5/2008
Time: 3:23:42 PM
User: N/A
Computer: XXXXXX
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x1000008e (0xc0000005, 0x8051d645, 0xefa79e28, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini060508-01.dmp.

Then it sets the time with the network, then I get this:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 6/5/2008
Time: 3:24:17 PM
User: N/A
Computer: XXXXXX
Description:
Error code 1000008e, parameter1 c0000005, parameter2 8051d645, parameter3 efa79e28, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 38 30 35 31 64 36 34 35 8051d645
0040: 2c 20 65 66 61 37 39 65 , efa79e
0048: 32 38 2c 20 30 30 30 30 28, 0000
0050: 30 30 30 30 0000

Then the computer will start up, but this will happen:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 6/5/2008
Time: 3:25:20 PM
User: N/A
Computer: XXXXXX
Description:
The Kaspersky Anti-Virus 6.0 service terminated unexpectedly. It has done this 1 time(s).

Then in 5 more minutes, again:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 6/5/2008
Time: 3:30:45 PM
User: N/A
Computer: XXXXXX
Description:
The Kaspersky Anti-Virus 6.0 service terminated unexpectedly. It has done this 2 time(s).

Then Workstation starts up and runs fine until next time an update occurs or the computer is powered off.
It has been doing this for about a week. No viruses have been detected on the computer, and it has been fully scanned last night.
Vern Buis
QUOTE(SherryB @ 6.06.2008 00:23) *
Workstation 6.0.3.837 running on XP Pro SP2 (latest updates except for SP3)
When I first power up the computer, it makes it to the login screen, then reboots, I get this:
Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 6/5/2008
Time: 3:23:42 PM
User: N/A
Computer: XXXXXX
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x1000008e (0xc0000005, 0x8051d645, 0xefa79e28, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini060508-01.dmp.

Then it sets the time with the network, then I get this:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 6/5/2008
Time: 3:24:17 PM
User: N/A
Computer: XXXXXX
Description:
Error code 1000008e, parameter1 c0000005, parameter2 8051d645, parameter3 efa79e28, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 38 30 35 31 64 36 34 35 8051d645
0040: 2c 20 65 66 61 37 39 65 , efa79e
0048: 32 38 2c 20 30 30 30 30 28, 0000
0050: 30 30 30 30 0000

Then the computer will start up, but this will happen:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 6/5/2008
Time: 3:25:20 PM
User: N/A
Computer: XXXXXX
Description:
The Kaspersky Anti-Virus 6.0 service terminated unexpectedly. It has done this 1 time(s).

Then in 5 more minutes, again:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 6/5/2008
Time: 3:30:45 PM
User: N/A
Computer: XXXXXX
Description:
The Kaspersky Anti-Virus 6.0 service terminated unexpectedly. It has done this 2 time(s).

Then Workstation starts up and runs fine until next time an update occurs or the computer is powered off.
It has been doing this for about a week. No viruses have been detected on the computer, and it has been fully scanned last night.


Just so you know you aren't alone, we too have been experiencing severe problems since the 5/28 update. We are running Vista SP1; our symptoms are a blue screen of death ( BSOD ) immediately upon bootup (at the point where Kaspersky loads). I eventually traced the problem to c:\windows\system32\drivers\klif.sys. I found that renaming this file so that it can't load and turning off updates allows our workstations to boot and operate.

I've filed two "tickets" with Kaspersky, but have not had a single response from them in more than a week--very frustrating. We have now overwritten the above file (and a few other related file) with pre-5/28 versions and disabled updates so that our workstations can run Kaspersky, albeit without the latest sig files (better than nothing). If Kaspersky doesn't fix this--or at very least respond, or--better yet--post a prominent announcement on their site letting their customers know the status of efforts to fix this problem, we may move to another A/V product.

By the way, from reading other posts it appears that this problem affects all versions of Kaspersky. Most of the discussion, in fact, is on the "Home Users" forum.
Jer-Cedar
Hi ... Did either of you find a solution for this issue? We've experienced many BSoD's on various machines. Problem first started around the 2nd of July. Minidumps point to klim5.sys as cause of crash. Was hoping the faulty module & fix released last week would fix, but my machine BSos'ed 3x yesterday. Any ideas??? Thanks.
greenwai
QUOTE(Jer-Cedar @ 27.08.2008 00:31) *
Hi ... Did either of you find a solution for this issue? We've experienced many BSoD's on various machines. Problem first started around the 2nd of July. Minidumps point to klim5.sys as cause of crash. Was hoping the faulty module & fix released last week would fix, but my machine BSos'ed 3x yesterday. Any ideas??? Thanks.



Please see my finding here.
http://forum.kaspersky.com/index.php?showtopic=82352

jlsaoz
QUOTE(greenwai @ 27.08.2008 01:16) *


Hello:

I also experienced an Event Category (102) Blue Screen, a couple of days ago here at my home office. I run 3 computers, each with Kaspersky 7.0 installed. I cannot find any explicit mention of this in the home user forums, so even though I am not tech knowledgeable, I am posting this in the thread where I find discussion.... small and medium business.

I was not able to decipher the suggestion of reinstalling the product without an NDIS filter. Way over my head. Is there good evidence that these Event Category 102 blue screens are kaspersky related? My system log shows other problems over the last month, but none have led to a blue screen. Just this once, a couple of days ago with Category 102.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.