Windows 2003 bugcheck,Citrix MPS3

I am experiencing an almost nightly bugcheck on one of my citrix servers. Please look at the following dump analysis.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_gdr.040410-1234
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Thu Mar 17 20:15:15.404 2005 (GMT-5)
System Uptime: 0 days 20:34:02.110
Loading Kernel Symbols
....................................................................................................
Loading unloaded module list
........
Loading User Symbols
.......................................................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {cae27c18, 2, 0, 80599089}

*** ERROR: Module load completed but symbols could not be loaded for WDICA.SYS
Probably caused by : WDICA.SYS ( WDICA+2e0ce )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: cae27c18, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80599089, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: srv

READ_ADDRESS: cae27c18 Nonpaged pool

CURRENT_IRQL: 2

FAULTING_IP:
nt!HvpGetCellMapped+11f
80599089 8b0f mov ecx,[edi]

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 805b2741 to 80599089

TRAP_FRAME: efe48f18 -- (.trap ffffffffefe48f18)
.trap ffffffffefe48f18
ErrCode = 00000000
eax=85cfa240 ebx=e160a008 ecx=00000000 edx=00000c18 esi=e1709260 edi=cae27c18
eip=80599089 esp=efe48f8c ebp=efe48fe4 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!HvpGetCellMapped+0x11f:
80599089 8b0f mov ecx,[edi] ds:0023:cae27c18=????????
.trap
Resetting default scope

STACK_TEXT:
efe48fe4 805b2741 e160a008 00b26c18 e2bf0e60 nt!HvpGetCellMapped+0x11f
efe49004 805b263e e160a008 cae1dca8 efe491d0 nt!CmpFindSubKeyByName+0x31
efe491d8 8058d8c8 00b1cc88 00000000 85b08290 nt!CmpParseKey+0x47f
efe49254 8058dbb9 00000ebc efe49294 00000040 nt!ObpLookupObjectName+0x117
efe492a8 805997ae 00000000 86198430 f550f200 nt!ObOpenObjectByName+0xe8
efe49394 804dfd24 efe49498 000f003f efe49438 nt!NtOpenKey+0x1bd
efe49394 804eb571 efe49498 000f003f efe49438 nt!KiSystemService+0xd0
efe49418 f551c0ce efe49498 000f003f efe49438 nt!ZwOpenKey+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
efe49460 f550e985 00000ebc 855e2460 000f003f WDICA+0x2e0ce
efe494ac f550eef8 00000ebc 00000000 efe4951c WDICA+0x20985
efe494dc f54ffc19 00000ebc efe4951c efe49538 WDICA+0x20ef8
efe49538 00000000 85f9e3c0 dbac452a ca4dbfa7 WDICA+0x11c19


FOLLOWUP_IP:
WDICA+2e0ce
f551c0ce 397dfc cmp [ebp-0x4],edi

SYMBOL_STACK_INDEX: 8

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: WDICA+2e0ce

MODULE_NAME: WDICA

IMAGE_NAME: WDICA.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 41549323

STACK_COMMAND: .trap ffffffffefe48f18 ; kb

FAILURE_BUCKET_ID: 0xA_WDICA+2e0ce

BUCKET_ID: 0xA_WDICA+2e0ce

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=85393818 edx=40000000 esi=ffdff120 edi=cae27c18
eip=80543ac9 esp=efe48ee4 ebp=efe48efc iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
80543ac9 5d pop ebp
ChildEBP RetAddr Args to Child
efe48efc 804e2f58 0000000a cae27c18 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
efe48efc 80599089 0000000a cae27c18 00000002 nt!KiTrap0E+0x224 (FPO: [0,0] TrapFrame @ efe48f18)
efe48fe4 805b2741 e160a008 00b26c18 e2bf0e60 nt!HvpGetCellMapped+0x11f (FPO: [Non-Fpo])
efe49004 805b263e e160a008 cae1dca8 efe491d0 nt!CmpFindSubKeyByName+0x31 (FPO: [Non-Fpo])
efe491d8 8058d8c8 00b1cc88 00000000 85b08290 nt!CmpParseKey+0x47f (FPO: [Non-Fpo])
efe49254 8058dbb9 00000ebc efe49294 00000040 nt!ObpLookupObjectName+0x117 (FPO: [Non-Fpo])
efe492a8 805997ae 00000000 86198430 f550f200 nt!ObOpenObjectByName+0xe8 (FPO: [Non-Fpo])
efe49394 804dfd24 efe49498 000f003f efe49438 nt!NtOpenKey+0x1bd (FPO: [Non-Fpo])
efe49394 804eb571 efe49498 000f003f efe49438 nt!KiSystemService+0xd0 (FPO: [0,0] TrapFrame @ efe493a8)
efe49418 f551c0ce efe49498 000f003f efe49438 nt!ZwOpenKey+0x11 (FPO: [3,0,0])
WARNING: Stack unwind information not available. Following frames may be wrong.
efe49460 f550e985 00000ebc 855e2460 000f003f WDICA+0x2e0ce
efe494ac f550eef8 00000ebc 00000000 efe4951c WDICA+0x20985
efe494dc f54ffc19 00000ebc efe4951c efe49538 WDICA+0x20ef8
efe49538 00000000 85f9e3c0 dbac452a ca4dbfa7 WDICA+0x11c19

 

continued.....

start end module name
00e50000 00f59000 wsxica wsxica.dll Fri Sep 24 17:33:49 2004 (415492BD)
00fa0000 00fc9000 ImaUserSal ImaUserSal.dll Fri Jan 23 20:12:32 2004 (4011C680)
00fd0000 00fef000 MfAppSal MfAppSal.dll Sat Jan 24 01:37:55 2004 (401212C3)
01000000 01006000 svchost svchost.exe Tue Mar 25 03:18:41 2003 (3E8010E1)
02560000 02570000 CTXRPC CTXRPC.dll Sat Jan 24 00:17:45 2004 (4011FFF9)
0ffd0000 0fffd000 rsaenh rsaenh.dll Tue Mar 25 04:46:22 2003 (3E80256E)
10000000 10008000 ctxrdpwsx ctxrdpwsx.dll Sat Jan 24 00:44:25 2004 (40120639)
3f250000 3f25a000 xpperfdata xpperfdata.dll Fri Jan 23 20:07:05 2004 (4011C539)
3f280000 3f28c000 ImaPolicyApi ImaPolicyApi.dll Fri Jan 23 20:21:10 2004 (4011C886)
3f340000 3f35a000 LmsSal LmsSal.dll Fri Jan 23 20:15:19 2004 (4011C727)
3f3a0000 3f3da000 ImaSystem ImaSystem.dll Fri Jan 23 20:08:21 2004 (4011C585)
3f460000 3f469000 ImaSal ImaSal.dll Fri Jan 23 20:09:30 2004 (4011C5CA)
3f520000 3f539000 ImaRaClient ImaRaClient.dll Sun Sep 19 01:20:00 2004 (414D1700)
3f560000 3f575000 ImaPsSal ImaPsSal.dll Fri Jan 23 20:11:40 2004 (4011C64C)
3f5c0000 3f5cf000 ImaLhc ImaLhc.dll Fri Jan 23 20:11:33 2004 (4011C645)
3f620000 3f62f000 ImaFc ImaFc.dll Fri Jan 23 20:07:37 2004 (4011C559)
3f670000 3f686000 ImaDirect ImaDirect.dll Fri Jan 23 20:09:55 2004 (4011C5E3)
3f690000 3f69d000 ImaCommon ImaCommon.dll Fri Jan 23 20:07:22 2004 (4011C54A)
3f720000 3f744000 ImaAdminSal ImaAdminSal.dll Fri Jan 23 20:13:02 2004 (4011C69E)
3f760000 3f768000 ImaAbstract ImaAbstract.dll Fri Jan 23 20:06:59 2004 (4011C533)
5ccf0000 5cd00000 SAMLIB SAMLIB.dll Tue Mar 25 04:45:58 2003 (3E802556)
675f0000 675ff000 scardhook scardhook.dll Fri Dec 03 18:01:53 2004 (41B0F061)
676a0000 676ce000 MfSrvSal MfSrvSal.dll Sat Jan 24 01:37:57 2004 (401212C5)
679a0000 679c0000 mfaphook mfaphook.dll Fri Dec 03 18:01:52 2004 (41B0F060)
67b90000 67b9d000 ImaMfRpc_Client ImaMfRpc_Client.dll Fri Sep 24 18:04:44 2004 (415499FC)
67cf0000 67cfe000 CUTILDLL CUTILDLL.dll Sat Jan 24 01:37:54 2004 (401212C2)
67f70000 67f7b000 ccticket ccticket.dll Sat Jan 31 21:24:19 2004 (401C6353)
67f80000 67f8a000 BRAPI BRAPI.dll Sat Jan 24 01:37:52 2004 (401212C0)
70ad0000 70bb6000 comctl32 comctl32.dll Tue Mar 25 04:43:33 2003 (3E8024C5)
70bc0000 70c50000 COMCTL32_70bc0000 COMCTL32.dll Tue Mar 25 04:43:33 2003 (3E8024C5)
712d0000 712fd000 adsldp adsldp.dll Tue Mar 25 04:43:44 2003 (3E8024D0)
71ae0000 71ae8000 wshtcpip wshtcpip.dll Tue Mar 25 04:43:27 2003 (3E8024BF)
71b20000 71b63000 mswsock mswsock.dll Tue Mar 25 04:43:27 2003 (3E8024BF)
71bb0000 71bb9000 WSOCK32 WSOCK32.dll Tue Mar 25 04:43:26 2003 (3E8024BE)
71bf0000 71bf8000 WS2HELP WS2HELP.dll Tue Mar 25 04:43:26 2003 (3E8024BE)
71c00000 71c18000 WS2_32 WS2_32.dll Tue Mar 25 04:43:26 2003 (3E8024BE)
71c40000 71c93000 NETAPI32 NETAPI32.dll Tue Mar 25 04:43:26 2003 (3E8024BE)
71ca0000 71cf6000 kerberos kerberos.dll Tue Mar 25 04:43:26 2003 (3E8024BE)
724c0000 724d7000 rdpwsx rdpwsx.dll Tue Mar 25 15:11:26 2003 (3E80B7EE)
72510000 72516000 ntlsapi ntlsapi.dll Tue Mar 25 04:43:21 2003 (3E8024B9)
73070000 73096000 WINSPOOL WINSPOOL.DRV Tue Mar 25 04:43:17 2003 (3E8024B5)
74010000 74015000 icmp icmp.Dll Tue Mar 25 04:43:10 2003 (3E8024AE)
74d90000 74d96000 ICAAPI ICAAPI.dll Tue Mar 25 04:43:04 2003 (3E8024A8)
74f60000 74f7d000 mstlsapi mstlsapi.dll Tue Mar 25 04:43:03 2003 (3E8024A7)
75130000 75170000 termsrv termsrv.dll Tue Mar 25 04:43:02 2003 (3E8024A6)
75970000 75a2a000 USERENV USERENV.dll Tue Mar 25 04:42:58 2003 (3E8024A2)
75da0000 75e5a000 SXS SXS.DLL Tue Mar 23 20:02:07 2004 (4060DE0F)
76190000 761a2000 MSASN1 MSASN1.dll Mon Mar 15 21:00:27 2004 (40565FBB)
761b0000 76248000 CRYPT32 CRYPT32.dll Tue Mar 25 04:42:56 2003 (3E8024A0)
76260000 76270000 WINSTA WINSTA.dll Tue Mar 25 04:42:55 2003 (3E80249F)
762b0000 762f7000 comdlg32 comdlg32.dll Tue Mar 25 04:42:55 2003 (3E80249F)
766e0000 766ec000 cryptdll cryptdll.dll Tue Mar 25 04:42:53 2003 (3E80249D)
766f0000 76706000 NTDSAPI NTDSAPI.DLL Tue Mar 25 04:42:53 2003 (3E80249D)
76a80000 76a98000 ATL ATL.DLL Tue Mar 25 04:42:52 2003 (3E80249C)
76aa0000 76acc000 WINMM WINMM.dll Tue Mar 25 04:42:52 2003 (3E80249C)
76b20000 76b2f000 REGAPI REGAPI.dll Tue Mar 25 04:42:52 2003 (3E80249C)
76b70000 76b7b000 PSAPI PSAPI.DLL Tue Mar 25 04:42:52 2003 (3E80249C)
76b80000 76bad000 credui credui.dll Tue Mar 25 04:42:51 2003 (3E80249B)
76c10000 76c38000 imagehlp imagehlp.dll Tue Mar 25 04:42:51 2003 (3E80249B)
76c40000 76c54000 AUTHZ AUTHZ.dll Tue Mar 25 04:42:51 2003 (3E80249B)
76c60000 76c80000 NTMARTA NTMARTA.DLL Tue Mar 25 04:42:51 2003 (3E80249B)
76c90000 76cb4000 msv1_0 msv1_0.dll Tue Mar 25 04:42:51 2003 (3E80249B)
76cf0000 76d07000 iphlpapi iphlpapi.dll Tue Mar 25 04:42:51 2003 (3E80249B)
76dc0000 76de6000 adsldpc adsldpc.dll Tue Mar 25 04:42:50 2003 (3E80249A)
76df0000 76e22000 ACTIVEDS ACTIVEDS.dll Tue Mar 25 04:42:50 2003 (3E80249A)
76e30000 76e3b000 rtutils rtutils.dll Tue Mar 25 04:42:50 2003 (3E80249A)
76e60000 76e8e000 TAPI32 TAPI32.dll Tue Mar 25 04:42:50 2003 (3E80249A)
76ed0000 76ef7000 DNSAPI DNSAPI.dll Tue Mar 25 04:42:50 2003 (3E80249A)
76f00000 76f08000 WTSAPI32 WTSAPI32.dll Tue Mar 25 04:42:49 2003 (3E802499)
76f10000 76f3f000 WLDAP32 WLDAP32.dll Tue Mar 25 04:42:49 2003 (3E802499)
76f50000 76f63000 Secur32 Secur32.dll Tue Mar 25 04:42:49 2003 (3E802499)
76f70000 76f77000 winrnr winrnr.dll Tue Mar 25 04:42:49 2003 (3E802499)
76f80000 76f85000 rasadhlp rasadhlp.dll Tue Mar 25 04:42:49 2003 (3E802499)
76f90000 7700e000 CLBCatQ CLBCatQ.DLL Mon Mar 15 22:08:57 2004 (40566FC9)
77010000 770d6000 COMRes COMRes.dll Tue Mar 25 04:42:49 2003 (3E802499)
770e0000 7715d000 OLEAUT32 OLEAUT32.dll Tue Mar 25 04:42:48 2003 (3E802498)
77160000 77285000 ole32 ole32.dll Mon Mar 15 22:08:56 2004 (40566FC8)
77290000 772d9000 SHLWAPI SHLWAPI.dll Wed Sep 29 15:40:43 2004 (415B0FBB)
77380000 77b5f000 SHELL32 SHELL32.dll Mon Aug 23 13:16:31 2004 (412A266F)
77b90000 77b98000 VERSION VERSION.dll Tue Mar 25 04:42:46 2003 (3E802496)
77ba0000 77bf4000 msvcrt msvcrt.dll Tue Mar 25 04:42:46 2003 (3E802496)
77c00000 77c44000 GDI32 GDI32.dll Tue Mar 25 04:42:46 2003 (3E802496)
77c50000 77cf5000 RPCRT4 RPCRT4.dll Mon Mar 15 22:08:57 2004 (40566FC9)
77d00000 77d8f000 USER32 USER32.dll Thu Dec 30 16:22:25 2004 (41D47191)
77da0000 77e30000 ADVAPI32 ADVAPI32.dll Tue Mar 25 04:42:45 2003 (3E802495)
77e40000 77f34000 kernel32 kernel32.dll Tue Mar 25 04:42:44 2003 (3E802494)
77f40000 77ffa000 ntdll ntdll.dll Tue Mar 25 04:42:44 2003 (3E802494)
804de000 80745000 nt ntkrnlmp.exe Wed May 26 20:32:57 2004 (40B53739)
80745000 8076d000 hal halmacpi.dll Tue Mar 25 02:07:28 2003 (3E800030)
bf800000 bf9c7000 win32k win32k.sys Tue Dec 28 18:26:09 2004 (41D1EB91)
bf9c7000 bfa1d680 ati2drad ati2drad.dll Tue Mar 25 04:43:37 2003 (3E8024C9)
bfa1e000 bfa7c680 vdtw30 vdtw30.dll Fri Sep 24 17:34:40 2004 (415492F0)
bff60000 bff7b000 RDPDD RDPDD.dll Tue Mar 25 15:12:05 2003 (3E80B815)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 04:46:23 2003 (3E80256F)
bffa0000 bffe8000 ATMFD ATMFD.DLL Tue Mar 25 04:46:23 2003 (3E80256F)
f5272000 f5274f00 pdcrypt1 pdcrypt1.sys Sat Jan 24 00:50:47 2004 (401207B7)
f54ee000 f5520580 WDICA WDICA.SYS Fri Sep 24 17:35:31 2004 (41549323)
f5521000 f5543000 RDPWD RDPWD.SYS Tue Mar 25 02:03:00 2003 (3E7FFF24)
f567f000 f5682100 icareduc icareduc.sys Sat Jan 24 00:45:58 2004 (40120696)
f59b3000 f59bd000 TDTCP TDTCP.SYS Tue Mar 25 02:02:52 2003 (3E7FFF1C)
f5e03000 f5e4c000 cdm cdm.sys Fri Dec 03 17:28:43 2004 (41B0E89B)
f5fec000 f5fee300 ctxsmcdrv ctxsmcdrv.sys Sat Jan 24 00:52:09 2004 (40120809)
f6004000 f6063000 srv srv.sys Tue Mar 25 03:49:51 2003 (3E80182F)
f61a3000 f61d2000 afd afd.sys unavailable (FFFFFFFE)
f629a000 f62d7000 TmXPFlt TmXPFlt.sys Fri Feb 18 06:04:33 2005 (4215CBC1)
f62d7000 f63c1f60 VsapiNT VsapiNT.sys Fri Feb 18 05:43:07 2005 (4215C6BB)
f652a000 f653d000 Fips Fips.SYS Tue Mar 25 03:54:59 2003 (3E801963)
f653d000 f65a8000 mrxsmb mrxsmb.sys Mon Oct 11 20:38:12 2004 (416B2774)
f65d0000 f65fb000 rdbss rdbss.sys Mon Oct 11 20:38:09 2004 (416B2771)
f65fb000 f6630000 netbt netbt.sys Fri Jul 18 13:16:03 2003 (3F182B53)
f6630000 f6692000 tcpip tcpip.sys Tue Mar 25 03:04:01 2003 (3E800D71)
f6692000 f66ae000 ipsec ipsec.sys Tue Mar 25 02:55:45 2003 (3E800B81)
f66ce000 f66e1000 usbhub usbhub.sys Tue Mar 25 02:10:46 2003 (3E8000F6)
f6701000 f6703600 pdrframe pdrframe.sys Sat Jan 24 00:50:26 2004 (401207A2)
f6749000 f6755000 tmpreflt tmpreflt.sys Fri Feb 18 06:04:32 2005 (4215CBC0)
f6804000 f6837000 update update.sys Tue Mar 25 03:59:59 2003 (3E801A8F)
f6837000 f6856d00 ks ks.sys Wed Dec 04 12:09:38 2002 (3DEE36D2)
f6857000 f688b000 rdpdr rdpdr.sys Tue Mar 25 02:09:30 2003 (3E8000AA)
f688b000 f68a0000 raspptp raspptp.sys Tue Mar 25 03:19:09 2003 (3E8010FD)
f68a0000 f68bb000 ndiswan ndiswan.sys Tue Mar 25 03:48:19 2003 (3E8017D3)
f68bb000 f68d2000 rasl2tp rasl2tp.sys Tue Mar 25 02:54:46 2003 (3E800B46)
f68d2000 f6900780 b57xp32 b57xp32.sys Sat Jun 19 19:30:28 2004 (40D4CC94)
f6901000 f6922e80 USBPORT USBPORT.SYS Tue Mar 25 02:10:43 2003 (3E8000F3)
f6923000 f6939000 i8042prt i8042prt.sys Tue Mar 25 04:01:43 2003 (3E801AF7)
f6939000 f698cd80 ati2mpad ati2mpad.sys Thu Jul 18 21:13:20 2002 (3D3767B0)
f698d000 f69a6000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 02:08:02 2003 (3E800052)
f69ba000 f69bde40 ASPI32 ASPI32.SYS Fri Sep 10 19:46:10 1999 (37D99842)
f69be000 f69c1a80 cdfdrv cdfdrv.sys Fri Sep 24 17:37:48 2004 (415493AC)
f723d000 f725f000 Mup Mup.sys Tue Mar 25 03:55:58 2003 (3E80199E)
f725f000 f72a0000 NDIS NDIS.sys Tue Mar 25 03:45:35 2003 (3E80172F)
f72a0000 f733d000 Ntfs Ntfs.sys Tue Mar 25 02:40:05 2003 (3E8007D5)
f733d000 f735e000 KSecDD KSecDD.sys Tue Mar 25 02:05:39 2003 (3E7FFFC3)
f735e000 f7374000 CLASSPNP CLASSPNP.SYS Tue Mar 25 02:38:14 2003 (3E800766)
f7374000 f739a000 SCSIPORT SCSIPORT.SYS Tue Mar 25 03:01:25 2003 (3E800CD5)
f739a000 f73bb000 volsnap volsnap.sys Tue Mar 25 02:05:47 2003 (3E7FFFCB)
f73bb000 f73e5000 dmio dmio.sys Tue Mar 25 02:08:14 2003 (3E80005E)
f73e5000 f740a000 ftdisk ftdisk.sys Tue Mar 25 02:05:26 2003 (3E7FFFB6)
f740a000 f741f000 pci pci.sys Tue Mar 25 02:16:40 2003 (3E800258)
f741f000 f7450000 ACPI ACPI.sys Tue Mar 25 02:16:21 2003 (3E800245)
f7450000 f7466000 sacdrv sacdrv.sys Tue Mar 25 02:03:54 2003 (3E7FFF5A)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 02:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 02:16:35 2003 (3E800253)
f74a7000 f74b6000 MountMgr MountMgr.sys Tue Mar 25 02:03:05 2003 (3E7FFF29)
f74b7000 f74c5000 PartMgr PartMgr.sys Tue Mar 25 03:04:02 2003 (3E800D72)
f74c7000 f74d6000 disk disk.sys Tue Mar 25 02:05:20 2003 (3E7FFFB0)
f74d7000 f74e3000 Dfs Dfs.sys Tue Mar 25 02:09:52 2003 (3E8000C0)
f74e7000 f74f0000 crcdisk crcdisk.sys Tue Mar 25 02:07:23 2003 (3E80002B)
f7507000 f7512000 ptilink ptilink.sys Tue Mar 25 02:03:51 2003 (3E7FFF57)
f7517000 f7520000 raspti raspti.sys Tue Mar 25 02:11:36 2003 (3E800128)
f7527000 f7536000 termdd termdd.sys Tue Mar 25 02:02:52 2003 (3E7FFF1C)
f7547000 f7555000 NDProxy NDProxy.SYS Tue Mar 25 02:11:30 2003 (3E800122)
f7567000 f7570000 ndisuio ndisuio.sys Tue Mar 25 02:09:47 2003 (3E8000BB)
f7577000 f7583000 vga vga.sys Tue Mar 25 02:08:03 2003 (3E800053)
f7587000 f7591000 Msfs Msfs.SYS Tue Mar 25 02:08:56 2003 (3E800088)
f7597000 f75a3000 Npfs Npfs.SYS Tue Mar 25 02:08:59 2003 (3E80008B)
f75a7000 f75b6000 msgpc msgpc.sys Tue Mar 25 02:10:12 2003 (3E8000D4)
f75b7000 f75c4000 wanarp wanarp.sys Tue Mar 25 02:11:22 2003 (3E80011A)
f75c7000 f75d4000 netbios netbios.sys Tue Mar 25 02:09:53 2003 (3E8000C1)
f75e7000 f75f0000 dump_diskdump dump_diskdump.sys Tue Mar 25 02:05:15 2003 (3E7FFFAB)
f75f7000 f7601000 Dxapi Dxapi.sys Tue Mar 25 02:06:01 2003 (3E7FFFD9)
f7687000 f7690000 watchdog watchdog.sys Tue Mar 25 02:09:01 2003 (3E80008D)
f7697000 f76a1000 kbdclass kbdclass.sys Tue Mar 25 02:03:10 2003 (3E7FFF2E)
f76a7000 f76b1000 mouclass mouclass.sys Tue Mar 25 02:03:09 2003 (3E7FFF2D)
f76b7000 f76c5000 p3 p3.sys Tue Mar 25 02:07:36 2003 (3E800038)
f76c7000 f76d2000 fdc fdc.sys unavailable (FFFFFFFE)
f76d7000 f76e0000 ndistapi ndistapi.sys Tue Mar 25 02:11:28 2003 (3E800120)
f76e7000 f76f5000 raspppoe raspppoe.sys Tue Mar 25 02:11:37 2003 (3E800129)
f76f7000 f7702000 TDI TDI.SYS Tue Mar 25 02:14:28 2003 (3E8001D4)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 02:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 02:07:58 2003 (3E80004E)
f7717000 f771e000 dmload dmload.sys unavailable (FFFFFFFE)
f771f000 f7725780 symmpi symmpi.sys Fri Oct 04 21:46:19 2002 (3D9E446B)
f77af000 f77b3200 usbohci usbohci.sys Tue Mar 25 02:10:41 2003 (3E8000F1)
f77b7000 f77bf000 audstub audstub.sys Tue Mar 25 02:09:12 2003 (3E800098)
f77cf000 f77d7000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f77d7000 f77de000 Null Null.SYS unavailable (FFFFFFFE)
f77df000 f77e6000 Beep Beep.SYS Tue Mar 25 02:03:04 2003 (3E7FFF28)
f77e7000 f77ef000 mnmdd mnmdd.SYS Tue Mar 25 02:07:53 2003 (3E800049)
f77ef000 f77f7000 RDPCDD RDPCDD.sys Tue Mar 25 02:03:05 2003 (3E7FFF29)
f77f7000 f77ff000 rasacd rasacd.sys Tue Mar 25 02:11:50 2003 (3E800136)
f77ff000 f7805780 dump_symmpi dump_symmpi.sys Fri Oct 04 21:46:19 2002 (3D9E446B)
f7807000 f780e000 dxgthk dxgthk.sys Tue Mar 25 02:05:52 2003 (3E7FFFD0)
f798d000 f798ea60 uphcleanhlp uphcleanhlp.sys Fri Mar 05 00:43:35 2004 (40481387)
f79bf000 f79c0300 kbstuff5 kbstuff5.sys Mon Jun 28 00:57:56 2004 (40DFA554)
f79c1000 f79c2580 USBD USBD.SYS Tue Mar 25 02:10:39 2003 (3E8000EF)
f7a9a000 f7a9b000 swenum swenum.sys Wed Dec 04 12:10:07 2002 (3DEE36EF)
f7ab7000 f7ab7840 idisw2km idisw2km.sys Mon Jun 28 00:58:38 2004 (40DFA57E)
f7ad3000 f7ad3f00 icacdd icacdd.sys Sat Jan 24 00:45:14 2004 (4012066A)

Unloaded modules:
f5627000 f562a000 pdrframe.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5623000 f5626000 pdcrypt1.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f604b000 f6063000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f75d7000 f75e5000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f65e7000 f65fb000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66ba000 f66ce000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77c7000 f77cf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7567000 f7571000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

you have a corrupt registry key. The information is in the dump.

Do you feel confident enough to play in the debugger?

first, open a cmd prompt

cd\program files\debugging tools for windows
kd -z c:\windows\memory.dmp (replace with whereever you have the dmp)


In the post below in the STACK_TEXT: area, there are 5 columns of 8 digit numbers. ex: efe49004 805b263e e160a008 cae1dca8 efe491d0 nt!CmpFindSubKeyByName+0x31

You want to DC columns 3 4 and 5, to try to find the name of the key.

At the KD> prompt, type dc e160a008 (and press enter) then repeat for each number, work your way down. At some point, one of them will be a registry string.

 

I just got back to this thread.

It appears that the issue we were having was due to an incompatibility between a Citrix service pack and our older Winterm thin clients. The thin client was only used around our late 2nd/Early 3rd shifts.

 

After further investigation I went back through the dump and the error appears to have referenced HKLM\Software\Citrix\MSLicensing. I was not able to locate any additional detail.

 

great. thanks for following up