Event ID 6004 on XP Pro

Hello,

I'm receiving errors in our XP Pro SP3 System event logs when ever a user browses a network share. The error is:

Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6004
Date: 11/15/2010
Time: 2:32:43 PM
User: N/A
Computer: COMPUTER1
Description:
A driver packet received from the I/O subsystem was invalid. The data is the packet.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 00 e0 00 0e 00 00 00 ..à.....
0008: a2 e6 b6 df fb 84 cb 01 ¢æ¶ßû„Ë.
0010: 40 00 00 00 00 00 00 00 @.......
0018: 00 00 00 00 04 00 4e 00 ......N.
0020: 00 00 00 00 cb 0b 00 80 ....Ë..€
0028: 00 00 00 00 10 00 00 c0 .......À
0030: 00 00 00 00 00 00 00 00 ........
0038: 00 00 00 00 00 00 00 00 ........
0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
0048: 6d 00 62 00 00 00 5c 00 m.b...\.
0050: 44 00 65 00 76 00 69 00 D.e.v.i.
0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
0070: 69 00 72 00 65 00 63 00 i.r.e.c.
0078: 74 00 6f 00 72 00 00 00 t.o.r...
0080: 44 00 44 00 49 00 00 00 D.D.I...
0088: 4e 00 65 00 74 00 42 00 N.e.t.B.
0090: 54 00 5f 00 54 00 63 00 T._.T.c.
0098: 70 00 69 00 70 00 5f 00 p.i.p._.
00a0: 7b 00 38 00 44 00 44 00 {.8.D.D.
00a8: 39 00 39 00 36 00 46 00 9.9.6.F.
00b0: 36 00 2d 00 31 00 43 00 6.-.1.C.
00b8: 39 00 42 00 2d 00 34 00 9.B.-.4.
00c0: 35 00 33 00 32 00 2d 00 5.3.2.-.
00c8: 39 00 39 00 41 00 32 00 9.9.A.2.
00d0: 2d 00 37 00 43 00 32 00 -.7.C.2.
00d8: 46 00 32 00 42 00 00 00 F.2.B...

Any help here would be great. We just updated to 4.0.417.0 but was happening on the prior release as well.

Thanks,
Aaron

 

are you able to test the latest build 4.2.67 ?

 

It seems that it could be a bug in network redirector (mrxsmb.sys) that is affecting other AV software as well. See http://www.eventid.net/display.asp?eventid=6004&eventno=1596&source=EventLog&phase=1

 

I've since updated to the latest 4.2 version and this is no longer happening. Not sure how I missed so many updates but I think we're good now.

Thanks for the direction and advice.

Aaron