Endpoint Protection

 View Only

  • 1.  SEP, Visual Studio 2008 and BSOD (Symevent.sys)

    Posted Sep 26, 2009 04:51 PM
      |   view attached

    Hi,

    I'm running XP SP3, SEP 11.0.4000.2295, and Visual Studio 2008. My system regularly crashes when simply starting VS 2008. The Winternals crash analyzer points to Symevent.sys. 

    Interestingly, I don't believe this was always the case (could there be a VS 2008 hotfix somewhere with which SEP interacts poorly).

    There appears to be one other discussion on the NAV forum, but no solution. The folks at Symantec appear to responsive on the forum -- quite refreshing, by the way. Since several users have reported this issue, I think it would be very valuable and appreciated if Symantec could look very closely at this issue. If it would help, I can switch to kernel dump and upload. Meanwhile, I've attached the advanced information from Winternals Crash AnalyzerRegards,

    Gordon
     
    Kudos!
    Accept Solution
    Solution?

    Attachment(s)

    txt
    analysis.txt   133 KB 1 version


  • 2.  RE: SEP, Visual Studio 2008 and BSOD (Symevent.sys)

    Posted Sep 28, 2009 10:38 AM

    Issue appeared to be size of message. I cut out most of the mini dump and it now appears correctly.



  • 3.  RE: SEP, Visual Studio 2008 and BSOD (Symevent.sys)

    Posted Sep 29, 2009 06:26 PM
    Gordon:
    Since the dump points to  SymEvent.sys   it might not be directly related to the actual problem.  Looks like you have older version of Sentinel.sys driver. Pls.check with the vendor of that file and upgrade to see if the issue goes away.

     
    ac462000 ac474a00   SENTINEL   (deferred)             
        Image path: SENTINEL.SYS
        Image name: SENTINEL.SYS
        Timestamp:        Thu Sep 26 01:47:32 2002 (3D929F74)
        CheckSum:         0001A1E2
        ImageSize:        00012A00
        Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0


  • 4.  RE: SEP, Visual Studio 2008 and BSOD (Symevent.sys)

    Posted Sep 30, 2009 06:46 PM
     Did this solved your issue?


  • 5.  RE: SEP, Visual Studio 2008 and BSOD (Symevent.sys)

    Posted Sep 30, 2009 11:17 PM
    Hi Suren,

    I have used the sysinternals tool ListDlls.exe and ProcessExplorer.exe to look for Sentinel.sys running on my system. At the moment, it appears it isn't runnin. So I am not sure whether it is an issue or not. What caused you to say btw that it was an old version -- timestamp, or do you have other information about the driver and its versions? It appears to be associated with the parallel port (?!) and security dongles. The only image of the file is in c:\windows\system32\drivers. I do not see the file anywhere else on the system.

    There appear to be other users who have experienced issues with SEP and VS 2008. Has sentinel.sys been a confirmed issue there?

    Regards,

    Gordon