Windows 2000 Bugcheck again...

Can someone tell me what is causing my machine to reboot from bugcheck.
Probably caused by : Cdfs.SYS not sure what this is.

Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\Minidump\Mini011305-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Thu Jan 13 17:27:59 2005
System Uptime: not available
Loading Kernel Symbols
.............................................................................................
Loading unloaded module list
..........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, b8a, e3506000, e3506008}

unable to read from 80480184
unable to read from 80480188
unable to get MmPageSize - probably bad symbols
*** ERROR: Module load completed but symbols could not be loaded for Pavdrv50.sys
*** ERROR: Module load completed but symbols could not be loaded for PavProc.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for nv4_disp.dll -
*** ERROR: Module load completed but symbols could not be loaded for ALCXWDM.SYS
*** ERROR: Module load completed but symbols could not be loaded for nv4_mini.sys
*** ERROR: Module load completed but symbols could not be loaded for Cdr4_2K.SYS
*** ERROR: Module load completed but symbols could not be loaded for viaagp1.sys
*** WARNING: Unable to verify timestamp for fdc.sys
*** ERROR: Module load completed but symbols could not be loaded for fdc.sys
*** ERROR: Module load completed but symbols could not be loaded for Cdralw2k.SYS
*** ERROR: Module load completed but symbols could not be loaded for ShldDrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for viaide.sys
Probably caused by : Cdfs.SYS ( Cdfs!CdDeleteFcb+ac )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000b8a, (reserved)
Arg3: e3506000, Memory contents of the pool block
Arg4: e3506008, Address of the block of pool being deallocated

Debugging Details:
------------------

unable to read from 80480184
unable to read from 80480188
unable to get MmPageSize - probably bad symbols

POOL_ADDRESS: unable to read from 804807d8
unable to read from 80480188
unable to read from 80480068
unable to read from 80471de0
unable to read from 80480080
unable to read from 80480184
unable to read from 80471de4
unable to read from 80480244
unable to read from 80480778
e3506008

BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 80469a2f to 80469c3c

STACK_TEXT:
eb84bae4 80469a2f e3506008 00000000 eb60cc88 nt!ExFreePoolWithTag+0x18a
eb84baf0 eb60cc88 e3506008 e3506008 e347b228 nt!ExFreePool+0xb
eb84bb04 eb60ca97 81c91388 e3506008 81bf0610 Cdfs!CdDeleteFcb+0xac
eb84bb64 eb60345a 81c91388 e3506008 eb84bb94 Cdfs!CdTeardownStructures+0x152
eb84bb88 eb60338f 81c91388 81bf0600 e3506008 Cdfs!CdCommonClosePrivate+0x98
eb84bbc0 eb6004be e3506008 81c45b68 81bf0540 Cdfs!CdCommonClose+0xd5
eb84bc14 8041d1af 81bf0540 81c45b68 81c45ccc Cdfs!CdFsdDispatch+0xec
eb84bc28 eb663815 81c0bdc4 81c45cd4 81ba8d00 nt!IopfCallDriver+0x35
WARNING: Stack unwind information not available. Following frames may be wrong.
eb84bc84 eb6652dc 81c0bca0 81c45b68 00000000 Pavdrv50+0x3815
eb84bce0 8041d1af 81c0bca0 81c45b68 81c45b78 Pavdrv50+0x52dc
eb84bcf4 80427bd8 00000000 81ba8df4 80427ab8 nt!IopfCallDriver+0x35
eb84bd24 804d3ed6 82033c00 81ba8de0 820ab460 nt!IopDeleteFile+0x120
eb84bd40 8044d993 81ba8df8 80062ea0 00000000 nt!ObpRemoveObjectRoutine+0xd6
eb84bd64 80438134 00000000 81ba8d48 80062f10 nt!ObfDereferenceObject+0x149
eb84bd88 8043842b e27bd5a8 00000000 00000000 nt!MiSegmentDelete+0x12e
eb84bda8 80453a20 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0x97
eb84bddc 804681f2 80438394 00000000 00000000 nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
Cdfs!CdDeleteFcb+ac
eb60cc88 85ff test edi,edi

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: Cdfs!CdDeleteFcb+ac

MODULE_NAME: Cdfs

IMAGE_NAME: Cdfs.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 3e9cd4fd

STACK_COMMAND: kb

BUCKET_ID: 0xc2_7_Cdfs!CdDeleteFcb+ac

Followup: MachineOwner
---------

eax=ffdff13c ebx=000000c2 ecx=00000000 edx=81c97148 esi=e3506000 edi=80473ba0
eip=80469c3c esp=eb84bab0 ebp=eb84bae4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!ExFreePoolWithTag+0x18a:
80469c3c 8066017f and byte ptr [esi+0x1],0x7f ds:0023:e3506001=??
ChildEBP RetAddr Args to Child
eb84bae4 80469a2f e3506008 00000000 eb60cc88 nt!ExFreePoolWithTag+0x18a (FPO: [Non-Fpo])
eb84baf0 eb60cc88 e3506008 e3506008 e347b228 nt!ExFreePool+0xb (FPO: [1,0,0])
eb84bb04 eb60ca97 81c91388 e3506008 81bf0610 Cdfs!CdDeleteFcb+0xac (FPO: [2,0,3])
eb84bb64 eb60345a 81c91388 e3506008 eb84bb94 Cdfs!CdTeardownStructures+0x152 (FPO: [Non-Fpo])
eb84bb88 eb60338f 81c91388 81bf0600 e3506008 Cdfs!CdCommonClosePrivate+0x98 (FPO: [Non-Fpo])
eb84bbc0 eb6004be e3506008 81c45b68 81bf0540 Cdfs!CdCommonClose+0xd5 (FPO: [Non-Fpo])
eb84bc14 8041d1af 81bf0540 81c45b68 81c45ccc Cdfs!CdFsdDispatch+0xec (FPO: [Non-Fpo])
eb84bc28 eb663815 81c0bdc4 81c45cd4 81ba8d00 nt!IopfCallDriver+0x35 (FPO: [0,0,2])
WARNING: Stack unwind information not available. Following frames may be wrong.
eb84bc84 eb6652dc 81c0bca0 81c45b68 00000000 Pavdrv50+0x3815
eb84bce0 8041d1af 81c0bca0 81c45b68 81c45b78 Pavdrv50+0x52dc
eb84bcf4 80427bd8 00000000 81ba8df4 80427ab8 nt!IopfCallDriver+0x35 (FPO: [0,0,2])
eb84bd24 804d3ed6 82033c00 81ba8de0 820ab460 nt!IopDeleteFile+0x120 (FPO: [Non-Fpo])
eb84bd40 8044d993 81ba8df8 80062ea0 00000000 nt!ObpRemoveObjectRoutine+0xd6 (FPO: [Non-Fpo])
eb84bd64 80438134 00000000 81ba8d48 80062f10 nt!ObfDereferenceObject+0x149 (FPO: [Non-Fpo])
eb84bd88 8043842b e27bd5a8 00000000 00000000 nt!MiSegmentDelete+0x12e (FPO: [Non-Fpo])
eb84bda8 80453a20 00000000 00000000 00000000 nt!MiDereferenceSegmentThread+0x97 (FPO: [Non-Fpo])
eb84bddc 804681f2 80438394 00000000 00000000 nt!PspSystemThreadStartup+0x54 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80062000 80072520 hal halacpi.dll Thu Mar 20 20:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Wed Oct 20 22:55:33 2004 (41773335)
a0000000 a018ec40 win32k win32k.sys Fri Dec 24 11:23:30 2004 (41CC5092)
bc2b0000 bc2d4240 kmixer kmixer.sys Tue Apr 15 23:02:03 2003 (3E9CD5BB)
bd065000 bd078ac0 ipsec ipsec.sys Mon Apr 21 13:19:40 2003 (3EA4363C)
bd0f1000 bd1133c0 Fastfat Fastfat.SYS Wed Jan 15 13:48:39 2003 (3E25BB17)
bd31c000 bd343f00 PavProc PavProc.sys Thu Jan 08 01:54:16 2004 (3FFD0CA8)
bd344000 bd37fbc0 srv srv.sys Tue Apr 29 18:05:07 2003 (3EAF0523)
bd4bd000 bd4cef80 wdmaud wdmaud.sys Tue Apr 15 23:23:02 2003 (3E9CDAA6)
bd4f7000 bd5144a0 afd afd.sys Wed Apr 30 03:45:29 2003 (3EAF8D29)
bd515000 bd52b400 nwlnkipx nwlnkipx.sys Wed Jan 15 13:56:26 2003 (3E25BCEA)
bd52c000 bd544e00 nbf nbf.sys Sat Sep 25 14:16:47 1999 (37ED1F9F)
bd5e5000 bd5ed240 Fips Fips.SYS Tue May 09 10:28:29 2000 (39182E9D)
bd885000 bdc16180 nv4_disp nv4_disp.dll Thu Jul 15 14:13:32 2004 (40F6D75C)
be839000 be8448c0 sysaudio sysaudio.sys Tue Apr 15 23:21:44 2003 (3E9CDA58)
be859000 be867360 nwlnkspx nwlnkspx.sys Sat Sep 25 14:16:42 1999 (37ED1F9A)
be9d9000 be9ee180 dump_atapi dump_atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
be9ef000 bea52e40 mrxsmb mrxsmb.sys Sun Oct 31 23:24:54 2004 (4185C8A6)
bea8d000 beab6760 rdbss rdbss.sys Fri Oct 15 16:03:40 2004 (41703B2C)
beab7000 beadee00 netbt netbt.sys Wed Jul 16 14:44:26 2003 (3F15AB1A)
beadf000 beb30060 tcpip tcpip.sys Tue Apr 29 18:05:31 2003 (3EAF053B)
bfb51000 bfb7b3a0 update update.sys Tue Apr 15 23:22:01 2003 (3E9CDA69)
bfba4000 bfbbaba0 ndiswan ndiswan.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
bfbbb000 bfbdad00 KS KS.SYS Wed Dec 04 11:09:38 2002 (3DEE36D2)
bfbdb000 bfbff1e0 portcls portcls.sys Tue Apr 15 23:11:22 2003 (3E9CD7EA)
bfc00000 bfc39b40 ALCXWDM ALCXWDM.SYS Mon Nov 26 01:05:54 2001 (3C01E9D2)
bfc3a000 bfe92840 nv4_mini nv4_mini.sys Thu Jul 15 14:17:29 2004 (40F6D849)
bfeb3000 bfec8640 Mup Mup.sys Wed Jan 15 13:54:01 2003 (3E25BC59)
bfec9000 bfef2aa0 NDIS NDIS.sys Tue Apr 29 18:05:01 2003 (3EAF051D)
bfef3000 bff70800 Ntfs Ntfs.sys Wed Jun 04 17:11:33 2003 (3EDE6E95)
bff71000 bff827c0 KSecDD KSecDD.sys Sat Sep 20 19:32:19 2003 (3F6CF193)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 12:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 13:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Mon Mar 31 16:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 13:44:22 2003 (3E25BA16)
eb400000 eb40e6a0 pci pci.sys Wed Jan 15 13:44:07 2003 (3E25BA07)
eb410000 eb41b680 isapnp isapnp.sys Wed Jan 15 13:43:47 2003 (3E25B9F3)
eb420000 eb428700 CLASSPNP CLASSPNP.SYS Wed Jan 15 13:42:51 2003 (3E25B9BB)
eb450000 eb45c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 13:47:20 2003 (3E25BAC8)
eb460000 eb46b680 i8042prt i8042prt.sys Tue Apr 15 23:00:59 2003 (3E9CD57B)
eb470000 eb47f400 serial serial.sys Tue Apr 15 23:19:39 2003 (3E9CD9DB)
eb480000 eb48e180 Cdr4_2K Cdr4_2K.SYS Tue Sep 24 16:21:41 2002 (3D90D765)
eb490000 eb49f000 el90xbc5 el90xbc5.sys Tue Oct 19 12:09:18 1999 (380CA5BE)
eb4a0000 eb4aca80 rasl2tp rasl2tp.sys Tue Apr 29 18:05:06 2003 (3EAF0522)
eb4b0000 eb4bbc40 raspptp raspptp.sys Wed May 14 18:47:00 2003 (3EC2D574)
eb4c0000 eb4cea20 parallel parallel.sys Wed Jan 15 13:47:14 2003 (3E25BAC2)
eb4e0000 eb4e9be0 usbhub usbhub.sys Tue Mar 18 17:30:41 2003 (3E77AC21)
eb4f0000 eb4f9ce0 NDProxy NDProxy.SYS Thu Sep 30 18:25:35 1999 (37F3F16F)
eb500000 eb508fa0 Npfs Npfs.SYS Sat Oct 09 18:58:07 1999 (37FFD68F)
eb510000 eb518680 msgpc msgpc.sys Wed Jan 15 13:54:25 2003 (3E25BC71)
eb520000 eb5281a0 netbios netbios.sys Tue Oct 12 14:34:19 1999 (38038D3B)
eb600000 eb60efe0 Cdfs Cdfs.SYS Tue Apr 15 22:58:53 2003 (3E9CD4FD)
eb660000 eb66e900 Pavdrv50 Pavdrv50.sys Fri Oct 03 10:11:56 2003 (3F7D91BC)
eb670000 eb67fee0 nwlnknb nwlnknb.sys Wed Jan 15 13:56:27 2003 (3E25BCEB)
eb680000 eb685520 PCIIDEX PCIIDEX.SYS Tue Feb 25 12:31:08 2003 (3E5BB66C)
eb688000 eb68f4c0 MountMgr MountMgr.sys Tue Feb 10 13:47:53 2004 (40293569)
eb690000 eb697720 disk disk.sys Wed Jan 15 13:43:05 2003 (3E25B9C9)
eb698000 eb69d7e0 viaagp1 viaagp1.sys Tue Oct 17 02:09:36 2000 (39EBFB30)
eb6b0000 eb6b5400 mouclass mouclass.sys Thu Feb 20 10:37:45 2003 (3E550459)
eb6c0000 eb6c5ec0 kbdclass kbdclass.sys Thu Feb 20 10:37:30 2003 (3E55044A)
eb6d0000 eb6d1000 fdc fdc.sys unavailable (00000000)
eb6e8000 eb6ee100 parport parport.sys Wed Jan 15 13:47:13 2003 (3E25BAC1)
eb700000 eb706c40 cdrom cdrom.sys Wed Jan 15 13:43:04 2003 (3E25B9C8)
eb710000 eb715560 Cdralw2k Cdralw2k.SYS Tue Sep 24 16:20:49 2002 (3D90D731)
eb718000 eb71ff40 uhcd uhcd.sys Wed Jan 15 13:45:50 2003 (3E25BA6E)
eb730000 eb734fc0 USBD USBD.SYS Wed Jan 22 11:05:33 2003 (3E2ECF5D)
eb768000 eb76c400 ptilink ptilink.sys Wed Jan 15 13:47:15 2003 (3E25BAC3)
eb778000 eb77c0e0 raspti raspti.sys Fri Oct 08 15:45:10 1999 (37FE57D6)
eb790000 eb794a60 flpydisk flpydisk.sys Wed Jan 15 13:42:52 2003 (3E25B9BC)
eb7a0000 eb7a6a20 EFS EFS.SYS Wed Jan 15 13:46:55 2003 (3E25BAAF)
eb7c0000 eb7c5240 Msfs Msfs.SYS Tue Oct 26 18:21:32 1999 (3816377C)
eb7d8000 eb7dfd00 wanarp wanarp.sys Fri Aug 16 07:25:01 2002 (3D5CEF1D)
eb7f0000 eb7f60c0 ShldDrv ShldDrv.SYS Mon Aug 23 02:51:38 2004 (4129A20A)
eb810000 eb812a20 BOOTVID BOOTVID.dll Wed Nov 03 19:24:33 1999 (3820E051)
eb814000 eb816d00 PartMgr PartMgr.sys Wed Jan 15 13:43:07 2003 (3E25B9CB)
eb87c000 eb87f640 serenum serenum.sys Wed Jan 15 13:47:01 2003 (3E25BAB5)
eb890000 eb8922e0 ndistapi ndistapi.sys Wed Jan 15 13:54:15 2003 (3E25BC67)
eb8a0000 eb8a3e60 TDI TDI.SYS Wed Jan 15 13:56:26 2003 (3E25BCEA)
eb8b0000 eb8b2540 gameenum gameenum.sys Wed Jan 15 13:45:32 2003 (3E25BA5C)
eb8d0000 eb8d3580 vga vga.sys Sat Sep 25 13:37:40 1999 (37ED1674)
eb900000 eb901d20 Diskperf Diskperf.sys Wed Feb 12 15:34:38 2003 (3E4ABDEE)
eb902000 eb903b80 dmload dmload.sys Wed Jan 15 13:47:06 2003 (3E25BABA)
eb904000 eb9056a0 viaide viaide.sys Thu Oct 18 01:11:14 2001 (3BCE7282)
eb90e000 eb90fca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 13:53:30 2003 (3E25BC3A)
eb916000 eb917e40 rasacd rasacd.sys Sat Sep 25 13:41:23 1999 (37ED1753)
eb974000 eb975860 ParVdm ParVdm.SYS Mon Sep 27 22:28:16 1999 (37F035D0)
eb9c8000 eb9c8f80 WMILIB WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)
eb9c9000 eb9c9b00 pciide pciide.sys Wed Jan 15 13:43:03 2003 (3E25B9C7)
eb9e7000 eb9e7a40 audstub audstub.sys Sat Sep 25 13:35:33 1999 (37ED15F5)
eb9f1000 eb9f2000 swenum swenum.sys Wed Dec 04 11:10:07 2002 (3DEE36EF)
eb9fe000 eb9fe9e0 Null Null.SYS Sat Sep 25 13:34:58 1999 (37ED15D2)
eba00000 eba00ee0 Beep Beep.SYS Wed Oct 20 17:18:59 1999 (380E3FD3)
eba03000 eba03f80 mnmdd mnmdd.SYS Sat Sep 25 13:37:40 1999 (37ED1674)
eba30000 eba30f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 13:36:47 1999 (37ED163F)

Unloaded modules:
bceb0000 bced5000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bcd0b000 bcd20000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bd3d0000 bd3f5000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb5d0000 eb5dd000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb540000 eb54e000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bdc02000 bdc17000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bd885000 bdc17000 nv4_disp.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
eb530000 eb539000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb7b0000 eb7b5000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb8c8000 eb8cb000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

This is the same as your last crash http://www.windowsbbs.com/showthread.php?t=39839

Your panda anti virus driver is doing a double free, freeing memory thats already been freed. Contact the vendor for an update, or remove the software.

 

Joe, I think in this case having the same issue posted twice is our (forum staff's) fault. On the link, you wrote In the future, please start a new thread, having too many folks in a single thread makes it hard to keep track of whos gotten help. which is reasonable and a good idea. You then answered the question.

About 4 hours after you posted that, we did split ehansonsr's dump and your reply into a new thread. I'm guessing that this one is ehansonsr also doing as you suggested by posting a new thread.

No harm and hopefully problem solved at this point.