DUMP DATA - random crashes on Win 2k server

Hi,

the PC in question is our main AD controller. It reboots from time to time, unpredicatble. Sometimes twice a day, sometimes once a week.
It's a PIV - 512mb ram, running on Windows 2000 server.
I hope someone is able to decypher and get more out of this log then I do.

Thanks in advance,

Koen

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Wed Mar 23 21:46:31.443 2005 (GMT+1)
System Uptime: 0 days 11:19:15.393
Loading Kernel Symbols
..........................................................................................
Loading unloaded module list
.........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 1, 80447497}

Probably caused by : memory_corruption ( nt!MiRemovePageByColor+2d )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80447497, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 00000000

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiRemovePageByColor+2d
80447497 ff09 dec dword ptr [ecx]

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 8044743b to 80447497

TRAP_FRAME: f241b9a0 -- (.trap fffffffff241b9a0)
.trap fffffffff241b9a0
ErrCode = 00000002
eax=8e3bab80 ebx=00000000 ecx=00000000 edx=00000001 esi=0081ffd0 edi=0001ffd0
eip=80447497 esp=f241ba14 ebp=f241ba20 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!MiRemovePageByColor+0x2d:
80447497 ff09 dec dword ptr [ecx] ds:0023:00000000=????????
.trap
Resetting default scope

STACK_TEXT:
f241ba20 8044743b 0081ffd0 00000010 80062f10 nt!MiRemovePageByColor+0x2d
f241ba30 804482cf 00008000 ffffffff 00000000 nt!MiRemoveAnyPage+0x43
f241ba5c 805464b2 00000000 00000000 00000000 nt!MmZeroPageThread+0x9b
f241bda8 80453a20 80087000 00000000 00000000 nt!Phase1Initialization+0xc32
f241bddc 804681f2 80545880 80087000 00000000 nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!MiRemovePageByColor+2d
80447497 ff09 dec dword ptr [ecx]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!MiRemovePageByColor+2d

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 41773335

STACK_COMMAND: .trap fffffffff241b9a0 ; kb

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_W_nt!MiRemovePageByColor+2d

BUCKET_ID: 0xA_W_nt!MiRemovePageByColor+2d

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=80447497 edi=00000000
eip=80466d47 esp=f241b98c ebp=f241b9a0 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x20b:
80466d47 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:f241ba10=00010202
ChildEBP RetAddr Args to Child
f241b9a0 80447497 01001010 ffffffff f241b9bc nt!KiTrap0E+0x20b (FPO: [0,0] TrapFrame @ f241b9a0)
f241ba20 8044743b 0081ffd0 00000010 80062f10 nt!MiRemovePageByColor+0x2d (FPO: [Non-Fpo])
f241ba30 804482cf 00008000 ffffffff 00000000 nt!MiRemoveAnyPage+0x43 (FPO: [0,0,1])
f241ba5c 805464b2 00000000 00000000 00000000 nt!MmZeroPageThread+0x9b (FPO: [Non-Fpo])
f241bda8 80453a20 80087000 00000000 00000000 nt!Phase1Initialization+0xc32 (FPO: [Non-Fpo])
f241bddc 804681f2 80545880 80087000 00000000 nt!PspSystemThreadStartup+0x54 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80062000 80072520 hal halacpi.dll Fri Mar 21 03:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 05:55:33 2004 (41773335)
a0000000 a018f000 win32k win32k.sys unavailable (FFFFFFFE)
a018f000 a01b0000 atidrab atidrab.dll unavailable (FFFFFFFE)
a07e0000 a07ed000 RDPDD RDPDD.dll unavailable (FFFFFFFE)
be452000 be462960 NAVENG NAVENG.sys Thu Dec 30 22:46:10 2004 (41D47722)
be463000 be478f00 RDPWD RDPWD.SYS Wed Jan 21 20:50:25 2004 (400ED801)
be519000 be5b1a60 NAVEX15 NAVEX15.sys Thu Dec 30 22:45:19 2004 (41D476EF)
be5b2000 be5db000 NAVAP NAVAP.sys Sat Aug 18 04:12:37 2001 (3B7DCF15)
be8cb000 be8d74a0 SYMEVENT SYMEVENT.SYS Tue Jul 31 21:06:17 2001 (3B6701A9)
be947000 be949f20 spud spud.sys Sat Nov 20 00:36:27 1999 (3835DEFB)
be973000 be9953c0 Fastfat Fastfat.SYS Wed Jan 15 20:48:39 2003 (3E25BB17)
beb3e000 beb4cfe0 Cdfs Cdfs.SYS Wed Apr 16 05:58:53 2003 (3E9CD4FD)
bece6000 becf5a20 ipsec ipsec.sys Wed Apr 30 01:04:59 2003 (3EAF051B)
bed36000 bed3ea60 termdd termdd.sys Fri Mar 21 22:43:08 2003 (3E7B876C)
beec2000 beec4080 NAVAPEL NAVAPEL.SYS Sat Aug 18 04:13:15 2001 (3B7DCF3B)
bf09e000 bf0d9bc0 srv srv.sys Wed Apr 30 01:05:07 2003 (3EAF0523)
bf1b6000 bf1be240 Fips Fips.SYS Tue May 09 17:28:29 2000 (39182E9D)
bf276000 bf2934a0 afd afd.sys Wed Apr 30 10:45:29 2003 (3EAF8D29)
bfbd4000 bfbe9180 dump_atapi dump_atapi.sys Tue Apr 01 20:08:25 2003 (3E89D599)
bfc12000 bfc76ca0 mrxsmb mrxsmb.sys Thu Jan 20 08:25:21 2005 (41EF5CE1)
bfc89000 bfcb2900 rdbss rdbss.sys Fri Dec 03 04:37:11 2004 (41AFDF67)
bfcb3000 bfcdae00 netbt netbt.sys Wed Jul 16 21:44:26 2003 (3F15AB1A)
bfcdb000 bfd2c060 tcpip tcpip.sys Wed Apr 30 01:05:31 2003 (3EAF053B)
bfd2d000 bfd4a000 wrdrv wrdrv.sys Thu Jan 31 17:07:49 2002 (3C596BD5)
bfdb2000 bfddc3a0 update update.sys Wed Apr 16 06:22:01 2003 (3E9CDA69)
bfddd000 bfdf8b40 ks ks.sys Wed Apr 16 06:02:11 2003 (3E9CD5C3)
bfe0b000 bfe2e060 rdpdr rdpdr.sys Fri Mar 21 22:43:14 2003 (3E7B8772)
bfe2f000 bfe45ba0 ndiswan ndiswan.sys Wed Apr 30 01:05:01 2003 (3EAF051D)
bfe6e000 bfe7f6c0 atimpab atimpab.sys Thu Nov 11 00:34:06 1999 (382A00EE)
bfea0000 bfeb5640 Mup Mup.sys Wed Jan 15 20:54:01 2003 (3E25BC59)
bfeb6000 bfedfaa0 NDIS NDIS.sys Wed Apr 30 01:05:01 2003 (3EAF051D)
bfee0000 bff5d800 Ntfs Ntfs.sys Thu Jun 05 00:11:33 2003 (3EDE6E95)
bff5e000 bff6f7c0 KSecDD KSecDD.sys Sun Sep 21 02:32:19 2003 (3F6CF193)
bff70000 bff821c0 Dfs Dfs.sys Wed Feb 12 03:19:06 2003 (3E49AF1A)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 20:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 20:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 00:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 20:44:22 2003 (3E25BA16)
f2000000 f200e6a0 pci pci.sys Wed Jan 15 20:44:07 2003 (3E25BA07)
f2010000 f201b680 isapnp isapnp.sys Wed Jan 15 20:43:47 2003 (3E25B9F3)
f2020000 f2028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 20:42:51 2003 (3E25B9BB)
f2050000 f205c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 20:47:20 2003 (3E25BAC8)
f2060000 f206f400 serial serial.sys Wed Apr 16 06:19:39 2003 (3E9CD9DB)
f2070000 f207b680 i8042prt i8042prt.sys Wed Apr 16 06:00:59 2003 (3E9CD57B)
f2080000 f208ca80 rasl2tp rasl2tp.sys Wed Apr 30 01:05:06 2003 (3EAF0522)
f2090000 f209bc40 raspptp raspptp.sys Thu May 15 01:47:00 2003 (3EC2D574)
f20a0000 f20aea20 parallel parallel.sys Wed Jan 15 20:47:14 2003 (3E25BAC2)
f20d0000 f20d9be0 usbhub usbhub.sys Wed Mar 19 00:30:41 2003 (3E77AC21)
f20e0000 f20e9ce0 NDProxy NDProxy.SYS Fri Oct 01 01:25:35 1999 (37F3F16F)
f20f0000 f20f8fa0 Npfs Npfs.SYS Sun Oct 10 01:58:07 1999 (37FFD68F)
f2100000 f2108680 msgpc msgpc.sys Wed Jan 15 20:54:25 2003 (3E25BC71)
f2110000 f21181a0 netbios netbios.sys Tue Oct 12 21:34:19 1999 (38038D3B)
f2280000 f2285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 19:31:08 2003 (3E5BB66C)
f2288000 f228f4c0 MountMgr MountMgr.sys Tue Feb 10 20:47:53 2004 (40293569)
f2290000 f2297720 disk disk.sys Wed Jan 15 20:43:05 2003 (3E25B9C9)
f22a8000 f22ae580 fdc fdc.sys Wed Jan 15 20:42:51 2003 (3E25B9BB)
f22b8000 f22be100 parport parport.sys Wed Jan 15 20:47:13 2003 (3E25BAC1)
f22c8000 f22cc8c0 TDTCP TDTCP.SYS Fri Mar 21 22:43:08 2003 (3E7B876C)
f22d0000 f22d5ec0 kbdclass kbdclass.sys Thu Feb 20 17:37:30 2003 (3E55044A)
f22e0000 f22e5400 mouclass mouclass.sys Thu Feb 20 17:37:45 2003 (3E550459)
f22f0000 f22f5fc0 openhci openhci.sys Sat Mar 01 01:28:59 2003 (3E5FFECB)
f2308000 f230cfc0 USBD USBD.SYS Wed Jan 22 18:05:33 2003 (3E2ECF5D)
f2318000 f231ec40 cdrom cdrom.sys Wed Jan 15 20:43:04 2003 (3E25B9C8)
f2328000 f232e600 DLKFET DLKFET.sys Wed Apr 26 20:50:41 2000 (39073A81)
f2348000 f234c400 ptilink ptilink.sys Wed Jan 15 20:47:15 2003 (3E25BAC3)
f2358000 f235c0e0 raspti raspti.sys Fri Oct 08 22:45:10 1999 (37FE57D6)
f2370000 f2374a60 flpydisk flpydisk.sys Wed Jan 15 20:42:52 2003 (3E25B9BC)
f2380000 f2386a20 EFS EFS.SYS Wed Jan 15 20:46:55 2003 (3E25BAAF)
f23a8000 f23ad240 Msfs Msfs.SYS Wed Oct 27 01:21:32 1999 (3816377C)
f23c0000 f23c7d00 wanarp wanarp.sys Fri Aug 16 14:25:01 2002 (3D5CEF1D)
f2410000 f2412a20 BOOTVID BOOTVID.dll Thu Nov 04 02:24:33 1999 (3820E051)
f2414000 f2416d00 PartMgr PartMgr.sys Wed Jan 15 20:43:07 2003 (3E25B9CB)
f248c000 f248f640 serenum serenum.sys Wed Jan 15 20:47:01 2003 (3E25BAB5)
f249c000 f249e2e0 ndistapi ndistapi.sys Wed Jan 15 20:54:15 2003 (3E25BC67)
f24ac000 f24afe60 TDI TDI.SYS Wed Jan 15 20:56:26 2003 (3E25BCEA)
f24e8000 f24eb580 vga vga.sys Sat Sep 25 20:37:40 1999 (37ED1674)
f2500000 f2501d20 Diskperf Diskperf.sys Wed Feb 12 22:34:38 2003 (3E4ABDEE)
f2502000 f2503b80 dmload dmload.sys Wed Jan 15 20:47:06 2003 (3E25BABA)
f2510000 f2511ca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 20:53:30 2003 (3E25BC3A)
f2518000 f2519e40 rasacd rasacd.sys Sat Sep 25 20:41:23 1999 (37ED1753)
f258a000 f258b860 ParVdm ParVdm.SYS Tue Sep 28 05:28:16 1999 (37F035D0)
f259c000 f259da60 uphcleanhlp uphcleanhlp.sys Fri Mar 05 06:43:35 2004 (40481387)
f25c8000 f25c8f80 WMILIB WMILIB.SYS Sat Sep 25 20:36:47 1999 (37ED163F)
f25c9000 f25c9b00 pciide pciide.sys Wed Jan 15 20:43:03 2003 (3E25B9C7)
f25e3000 f25e3a40 audstub audstub.sys Sat Sep 25 20:35:33 1999 (37ED15F5)
f25ee000 f25eed80 swenum swenum.sys Sat Sep 25 20:36:31 1999 (37ED162F)
f25fd000 f25fd9e0 Null Null.SYS Sat Sep 25 20:34:58 1999 (37ED15D2)
f25ff000 f25ffee0 Beep Beep.SYS Thu Oct 21 00:18:59 1999 (380E3FD3)
f2602000 f2602f80 mnmdd mnmdd.SYS Sat Sep 25 20:37:40 1999 (37ED1674)
f2630000 f2630f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 20:36:47 1999 (37ED163F)

Unloaded modules:
bf0da000 bf0ff000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f21d0000 f21dc000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf14c000 bf15e000 wdmaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf127000 bf14c000 portcls.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f21a0000 f21ad000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f21e0000 f21ee000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2120000 f2129000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2398000 f239d000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f24e0000 f24e3000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

probable pool corruption. Got another dump?

 

Sure do... fresh from today's crash (at 2.20 am, yesterday it was 9 pm)

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Fri Mar 25 02:20:34.459 2005 (GMT+1)
System Uptime: 0 days 17:42:07.356
Loading Kernel Symbols
.........................................................................................
Loading unloaded module list
...........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {7d0fd4e8, 2, 1, 804474bb}

Probably caused by : memory_corruption ( nt!MiRemovePageByColor+51 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 7d0fd4e8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804474bb, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 7d0fd4e8

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiRemovePageByColor+51
804474bb 897cf308 mov [ebx+esi*8+0x8],edi

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 8044743b to 804474bb

TRAP_FRAME: f241b9a0 -- (.trap fffffffff241b9a0)
.trap fffffffff241b9a0
ErrCode = 00000002
eax=8e2e9a80 ebx=820bb000 ecx=80471658 edx=00000001 esi=9f60849c edi=0faa0000
eip=804474bb esp=f241ba14 ebp=f241ba20 iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010217
nt!MiRemovePageByColor+0x51:
804474bb 897cf308 mov [ebx+esi*8+0x8],edi ds:0023:7d0fd4e8=????????
.trap
Resetting default scope

STACK_TEXT:
f241ba20 8044743b 35202c34 00000030 80062f10 nt!MiRemovePageByColor+0x51
f241ba30 804482cf 00008000 ffffffff 00000000 nt!MiRemoveAnyPage+0x43
f241ba5c 805464b2 00000000 00000000 00000000 nt!MmZeroPageThread+0x9b
f241bda8 80453a20 80087000 00000000 00000000 nt!Phase1Initialization+0xc32
f241bddc 804681f2 80545880 80087000 00000000 nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!MiRemovePageByColor+51
804474bb 897cf308 mov [ebx+esi*8+0x8],edi

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!MiRemovePageByColor+51

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 41773335

STACK_COMMAND: .trap fffffffff241b9a0 ; kb

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_W_nt!MiRemovePageByColor+51

BUCKET_ID: 0xA_W_nt!MiRemovePageByColor+51

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=804474bb edi=7d0fd4e8
eip=80466d47 esp=f241b98c ebp=f241b9a0 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x20b:
80466d47 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:f241ba10=00010217
ChildEBP RetAddr Args to Child
f241b9a0 804474bb 80467e4b f241b9c0 820379c8 nt!KiTrap0E+0x20b (FPO: [0,0] TrapFrame @ f241b9a0)
f241ba20 8044743b 35202c34 00000030 80062f10 nt!MiRemovePageByColor+0x51 (FPO: [Non-Fpo])
f241ba30 804482cf 00008000 ffffffff 00000000 nt!MiRemoveAnyPage+0x43 (FPO: [0,0,1])
f241ba5c 805464b2 00000000 00000000 00000000 nt!MmZeroPageThread+0x9b (FPO: [Non-Fpo])
f241bda8 80453a20 80087000 00000000 00000000 nt!Phase1Initialization+0xc32 (FPO: [Non-Fpo])
f241bddc 804681f2 80545880 80087000 00000000 nt!PspSystemThreadStartup+0x54 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80062000 80072520 hal halacpi.dll Fri Mar 21 03:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 05:55:33 2004 (41773335)
a0000000 a018f000 win32k win32k.sys unavailable (FFFFFFFE)
a018f000 a01b0000 atidrab atidrab.dll unavailable (FFFFFFFE)
be010000 be020960 NAVENG NAVENG.sys Thu Dec 30 22:46:10 2004 (41D47722)
be021000 be0b9a60 NAVEX15 NAVEX15.sys Thu Dec 30 22:45:19 2004 (41D476EF)
be52b000 be540f00 RDPWD RDPWD.SYS Wed Jan 21 20:50:25 2004 (400ED801)
be5da000 be603000 NAVAP NAVAP.sys Sat Aug 18 04:12:37 2001 (3B7DCF15)
be753000 be75f4a0 SYMEVENT SYMEVENT.SYS Tue Jul 31 21:06:17 2001 (3B6701A9)
be897000 be899f20 spud spud.sys Sat Nov 20 00:36:27 1999 (3835DEFB)
be9eb000 bea0d3c0 Fastfat Fastfat.SYS Wed Jan 15 20:48:39 2003 (3E25BB17)
beb3e000 beb4cfe0 Cdfs Cdfs.SYS Wed Apr 16 05:58:53 2003 (3E9CD4FD)
bec2e000 bec3da20 ipsec ipsec.sys Wed Apr 30 01:04:59 2003 (3EAF051B)
bed2e000 bed36a60 termdd termdd.sys Fri Mar 21 22:43:08 2003 (3E7B876C)
bee26000 bee28080 NAVAPEL NAVAPEL.SYS Sat Aug 18 04:13:15 2001 (3B7DCF3B)
befa6000 befae240 Fips Fips.SYS Tue May 09 17:28:29 2000 (39182E9D)
bf04e000 bf089bc0 srv srv.sys Wed Apr 30 01:05:07 2003 (3EAF0523)
bf24e000 bf26b4a0 afd afd.sys Wed Apr 30 10:45:29 2003 (3EAF8D29)
bfbd4000 bfbe9180 dump_atapi dump_atapi.sys Tue Apr 01 20:08:25 2003 (3E89D599)
bfc12000 bfc76ca0 mrxsmb mrxsmb.sys Thu Jan 20 08:25:21 2005 (41EF5CE1)
bfc89000 bfcb2900 rdbss rdbss.sys Fri Dec 03 04:37:11 2004 (41AFDF67)
bfcb3000 bfcdae00 netbt netbt.sys Wed Jul 16 21:44:26 2003 (3F15AB1A)
bfcdb000 bfd2c060 tcpip tcpip.sys Wed Apr 30 01:05:31 2003 (3EAF053B)
bfd2d000 bfd4a000 wrdrv wrdrv.sys Thu Jan 31 17:07:49 2002 (3C596BD5)
bfdb2000 bfddc3a0 update update.sys Wed Apr 16 06:22:01 2003 (3E9CDA69)
bfddd000 bfdf8b40 ks ks.sys Wed Apr 16 06:02:11 2003 (3E9CD5C3)
bfe0b000 bfe2e060 rdpdr rdpdr.sys Fri Mar 21 22:43:14 2003 (3E7B8772)
bfe2f000 bfe45ba0 ndiswan ndiswan.sys Wed Apr 30 01:05:01 2003 (3EAF051D)
bfe6e000 bfe7f6c0 atimpab atimpab.sys Thu Nov 11 00:34:06 1999 (382A00EE)
bfea0000 bfeb5640 Mup Mup.sys Wed Jan 15 20:54:01 2003 (3E25BC59)
bfeb6000 bfedfaa0 NDIS NDIS.sys Wed Apr 30 01:05:01 2003 (3EAF051D)
bfee0000 bff5d800 Ntfs Ntfs.sys Thu Jun 05 00:11:33 2003 (3EDE6E95)
bff5e000 bff6f7c0 KSecDD KSecDD.sys Sun Sep 21 02:32:19 2003 (3F6CF193)
bff70000 bff821c0 Dfs Dfs.sys Wed Feb 12 03:19:06 2003 (3E49AF1A)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 20:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 20:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 00:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 20:44:22 2003 (3E25BA16)
f2000000 f200e6a0 pci pci.sys Wed Jan 15 20:44:07 2003 (3E25BA07)
f2010000 f201b680 isapnp isapnp.sys Wed Jan 15 20:43:47 2003 (3E25B9F3)
f2020000 f2028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 20:42:51 2003 (3E25B9BB)
f2050000 f205c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 20:47:20 2003 (3E25BAC8)
f2060000 f206f400 serial serial.sys Wed Apr 16 06:19:39 2003 (3E9CD9DB)
f2070000 f207b680 i8042prt i8042prt.sys Wed Apr 16 06:00:59 2003 (3E9CD57B)
f2080000 f208ca80 rasl2tp rasl2tp.sys Wed Apr 30 01:05:06 2003 (3EAF0522)
f2090000 f209bc40 raspptp raspptp.sys Thu May 15 01:47:00 2003 (3EC2D574)
f20a0000 f20aea20 parallel parallel.sys Wed Jan 15 20:47:14 2003 (3E25BAC2)
f20d0000 f20d9be0 usbhub usbhub.sys Wed Mar 19 00:30:41 2003 (3E77AC21)
f20f0000 f20f9ce0 NDProxy NDProxy.SYS Fri Oct 01 01:25:35 1999 (37F3F16F)
f2100000 f2108fa0 Npfs Npfs.SYS Sun Oct 10 01:58:07 1999 (37FFD68F)
f2110000 f2118680 msgpc msgpc.sys Wed Jan 15 20:54:25 2003 (3E25BC71)
f2120000 f21281a0 netbios netbios.sys Tue Oct 12 21:34:19 1999 (38038D3B)
f2280000 f2285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 19:31:08 2003 (3E5BB66C)
f2288000 f228f4c0 MountMgr MountMgr.sys Tue Feb 10 20:47:53 2004 (40293569)
f2290000 f2297720 disk disk.sys Wed Jan 15 20:43:05 2003 (3E25B9C9)
f22a8000 f22af000 fdc fdc.sys unavailable (FFFFFFFE)
f22b8000 f22be100 parport parport.sys Wed Jan 15 20:47:13 2003 (3E25BAC1)
f22d0000 f22d5ec0 kbdclass kbdclass.sys Thu Feb 20 17:37:30 2003 (3E55044A)
f22e0000 f22e5400 mouclass mouclass.sys Thu Feb 20 17:37:45 2003 (3E550459)
f22e8000 f22ec8c0 TDTCP TDTCP.SYS Fri Mar 21 22:43:08 2003 (3E7B876C)
f22f0000 f22f5fc0 openhci openhci.sys Sat Mar 01 01:28:59 2003 (3E5FFECB)
f2308000 f230cfc0 USBD USBD.SYS Wed Jan 22 18:05:33 2003 (3E2ECF5D)
f2318000 f231ec40 cdrom cdrom.sys Wed Jan 15 20:43:04 2003 (3E25B9C8)
f2328000 f232e600 DLKFET DLKFET.sys Wed Apr 26 20:50:41 2000 (39073A81)
f2348000 f234c400 ptilink ptilink.sys Wed Jan 15 20:47:15 2003 (3E25BAC3)
f2358000 f235c0e0 raspti raspti.sys Fri Oct 08 22:45:10 1999 (37FE57D6)
f2370000 f2375000 flpydisk flpydisk.sys unavailable (FFFFFFFE)
f2380000 f2386a20 EFS EFS.SYS Wed Jan 15 20:46:55 2003 (3E25BAAF)
f23a0000 f23a5240 Msfs Msfs.SYS Wed Oct 27 01:21:32 1999 (3816377C)
f23b8000 f23bfd00 wanarp wanarp.sys Fri Aug 16 14:25:01 2002 (3D5CEF1D)
f2410000 f2412a20 BOOTVID BOOTVID.dll Thu Nov 04 02:24:33 1999 (3820E051)
f2414000 f2416d00 PartMgr PartMgr.sys Wed Jan 15 20:43:07 2003 (3E25B9CB)
f248c000 f248f640 serenum serenum.sys Wed Jan 15 20:47:01 2003 (3E25BAB5)
f249c000 f249e2e0 ndistapi ndistapi.sys Wed Jan 15 20:54:15 2003 (3E25BC67)
f24ac000 f24afe60 TDI TDI.SYS Wed Jan 15 20:56:26 2003 (3E25BCEA)
f24e8000 f24eb580 vga vga.sys Sat Sep 25 20:37:40 1999 (37ED1674)
f2500000 f2501d20 Diskperf Diskperf.sys Wed Feb 12 22:34:38 2003 (3E4ABDEE)
f2502000 f2504000 dmload dmload.sys unavailable (FFFFFFFE)
f2510000 f2512000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f2512000 f2513a60 uphcleanhlp uphcleanhlp.sys Fri Mar 05 06:43:35 2004 (40481387)
f2518000 f2519e40 rasacd rasacd.sys Sat Sep 25 20:41:23 1999 (37ED1753)
f25a0000 f25a2000 ParVdm ParVdm.SYS unavailable (FFFFFFFE)
f25c8000 f25c8f80 WMILIB WMILIB.SYS Sat Sep 25 20:36:47 1999 (37ED163F)
f25c9000 f25c9b00 pciide pciide.sys Wed Jan 15 20:43:03 2003 (3E25B9C7)
f25e3000 f25e3a40 audstub audstub.sys Sat Sep 25 20:35:33 1999 (37ED15F5)
f25ee000 f25eed80 swenum swenum.sys Sat Sep 25 20:36:31 1999 (37ED162F)
f25fd000 f25fe000 Null Null.SYS unavailable (FFFFFFFE)
f25ff000 f25ffee0 Beep Beep.SYS Thu Oct 21 00:18:59 1999 (380E3FD3)
f2602000 f2602f80 mnmdd mnmdd.SYS Sat Sep 25 20:37:40 1999 (37ED1674)
f2630000 f2630f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 20:36:47 1999 (37ED163F)

Unloaded modules:
be541000 be5da000 NAVEX15.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be51a000 be52b000 NAVENG.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf102000 bf127000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf31c000 bf328000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf14c000 bf15e000 wdmaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf127000 bf14c000 portcls.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2170000 f217d000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bf30c000 bf31a000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2130000 f2139000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2390000 f2395000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f24e0000 f24e3000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


Pool as in printer pool???
We have Kyocera printers. And oh yeah... they ****.

A

 

Getting worse... server hang after 2 hours of operations.

Thanks in advance to anyone that can shed some light on this...
I removed the Kyocera printer drivers, those were the only new stuff installed on that server in ummmm months?

Thanks,

Koen

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: LanManNt, suite: TerminalServer SingleUserTS
Kernel base = 0x80400000 PsLoadedModuleList = 0x80480780
Debug session time: Sat Mar 26 09:08:45.055 2005 (GMT+2)
System Uptime: 0 days 12:53:03.224
Loading Kernel Symbols
.........................................................................................
Loading unloaded module list
.........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {8f, 810c9a, 10c9a, 0}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000008f, The free or zeroed page listhead is corrupt
Arg2: 00810c9a, new page
Arg3: 00010c9a, old page
Arg4: 00000000, 0

Debugging Details:
------------------


PFN_PAGE_SINGLE_BIT_ERROR: Bugcheck args 2 and 3 differ by a bit, its hardware error.

MEMORY_CORRUPTOR: ONE_BIT

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR: 0x4E

LAST_CONTROL_TRANSFER: from 805464b2 to 804482e2

STACK_TEXT:
f241ba5c 805464b2 00000000 00000000 00000000 nt!MmZeroPageThread+0xae
f241bda8 80453a20 80087000 00000000 00000000 nt!Phase1Initialization+0xc32
f241bddc 804681f2 80545880 80087000 00000000 nt!PspSystemThreadStartup+0x54
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_NAME: memory_corruption

MODULE_NAME: memory_corruption

IMAGE_NAME: memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: kb

FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT

Followup: memory_corruption
---------

eax=ffdff13c ebx=0000004e ecx=823bafa0 edx=0000001a esi=80062f10 edi=00010c9a
eip=804482e2 esp=f241ba24 ebp=f241ba5c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MmZeroPageThread+0xae:
804482e2 57 push edi
ChildEBP RetAddr Args to Child
f241ba5c 805464b2 00000000 00000000 00000000 nt!MmZeroPageThread+0xae (FPO: [Non-Fpo])
f241bda8 80453a20 80087000 00000000 00000000 nt!Phase1Initialization+0xc32 (FPO: [Non-Fpo])
f241bddc 804681f2 80545880 80087000 00000000 nt!PspSystemThreadStartup+0x54 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80062000 80072520 hal halacpi.dll Fri Mar 21 03:04:40 2003 (3E7A7338)
80400000 8059a800 nt ntoskrnl.exe Thu Oct 21 05:55:33 2004 (41773335)
a0000000 a018f000 win32k win32k.sys unavailable (FFFFFFFE)
a018f000 a01bd000 ati2drad ati2drad.dll unavailable (FFFFFFFE)
bdc43000 bdc53960 NAVENG NAVENG.sys Thu Dec 30 22:46:10 2004 (41D47722)
bdc54000 bdc69f00 RDPWD RDPWD.SYS Wed Jan 21 20:50:25 2004 (400ED801)
bdc6a000 bdd02a60 NAVEX15 NAVEX15.sys Thu Dec 30 22:45:19 2004 (41D476EF)
bdd03000 bdd2c000 NAVAP NAVAP.sys Sat Aug 18 04:12:37 2001 (3B7DCF15)
be000000 be002f20 spud spud.sys Sat Nov 20 00:36:27 1999 (3835DEFB)
be144000 be1663c0 Fastfat Fastfat.SYS Wed Jan 15 20:48:39 2003 (3E25BB17)
be1a7000 be1b34a0 SYMEVENT SYMEVENT.SYS Tue Jul 31 21:06:17 2001 (3B6701A9)
be2cf000 be2ddfe0 Cdfs Cdfs.SYS Wed Apr 16 05:58:53 2003 (3E9CD4FD)
be32f000 be337a60 termdd termdd.sys Fri Mar 21 22:43:08 2003 (3E7B876C)
be53f000 be54ea20 ipsec ipsec.sys Wed Apr 30 01:04:59 2003 (3EAF051B)
be687000 be689080 NAVAPEL NAVAPEL.SYS Sat Aug 18 04:13:15 2001 (3B7DCF3B)
be81f000 be85abc0 srv srv.sys Wed Apr 30 01:05:07 2003 (3EAF0523)
bea1f000 bea3c4a0 afd afd.sys Wed Apr 30 10:45:29 2003 (3EAF8D29)
beb5d000 beb65240 Fips Fips.SYS Tue May 09 17:28:29 2000 (39182E9D)
bf3a5000 bf3ba180 dump_atapi dump_atapi.sys Tue Apr 01 20:08:25 2003 (3E89D599)
bf3e3000 bf447ca0 mrxsmb mrxsmb.sys Thu Jan 20 08:25:21 2005 (41EF5CE1)
bf45a000 bf483900 rdbss rdbss.sys Fri Dec 03 04:37:11 2004 (41AFDF67)
bf484000 bf4abe00 netbt netbt.sys Wed Jul 16 21:44:26 2003 (3F15AB1A)
bf4ac000 bf4fd060 tcpip tcpip.sys Wed Apr 30 01:05:31 2003 (3EAF053B)
bf4fe000 bf51b000 wrdrv wrdrv.sys Thu Jan 31 17:07:49 2002 (3C596BD5)
bfd83000 bfdad3a0 update update.sys Wed Apr 16 06:22:01 2003 (3E9CDA69)
bfdae000 bfdc9b40 ks ks.sys Wed Apr 16 06:02:11 2003 (3E9CD5C3)
bfddc000 bfdff060 rdpdr rdpdr.sys Fri Mar 21 22:43:14 2003 (3E7B8772)
bfe00000 bfe16ba0 ndiswan ndiswan.sys Wed Apr 30 01:05:01 2003 (3EAF051D)
bfe3f000 bfe7f980 ati2mpad ati2mpad.sys Thu Oct 05 20:29:08 2000 (39DCC874)
bfea0000 bfeb5640 Mup Mup.sys Wed Jan 15 20:54:01 2003 (3E25BC59)
bfeb6000 bfedfaa0 NDIS NDIS.sys Wed Apr 30 01:05:01 2003 (3EAF051D)
bfee0000 bff5d800 Ntfs Ntfs.sys Thu Jun 05 00:11:33 2003 (3EDE6E95)
bff5e000 bff6f7c0 KSecDD KSecDD.sys Sun Sep 21 02:32:19 2003 (3F6CF193)
bff70000 bff821c0 Dfs Dfs.sys Wed Feb 12 03:19:06 2003 (3E49AF1A)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 20:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 20:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Tue Apr 01 00:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 20:44:22 2003 (3E25BA16)
f2000000 f200e6a0 pci pci.sys Wed Jan 15 20:44:07 2003 (3E25BA07)
f2010000 f201b680 isapnp isapnp.sys Wed Jan 15 20:43:47 2003 (3E25B9F3)
f2020000 f2028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 20:42:51 2003 (3E25B9BB)
f2050000 f205c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 20:47:20 2003 (3E25BAC8)
f2060000 f206f400 serial serial.sys Wed Apr 16 06:19:39 2003 (3E9CD9DB)
f2070000 f207b680 i8042prt i8042prt.sys Wed Apr 16 06:00:59 2003 (3E9CD57B)
f2080000 f208ca80 rasl2tp rasl2tp.sys Wed Apr 30 01:05:06 2003 (3EAF0522)
f2090000 f209bc40 raspptp raspptp.sys Thu May 15 01:47:00 2003 (3EC2D574)
f20a0000 f20aea20 parallel parallel.sys Wed Jan 15 20:47:14 2003 (3E25BAC2)
f20e0000 f20e9be0 usbhub usbhub.sys Wed Mar 19 00:30:41 2003 (3E77AC21)
f20f0000 f20f9ce0 NDProxy NDProxy.SYS Fri Oct 01 01:25:35 1999 (37F3F16F)
f2100000 f2108fa0 Npfs Npfs.SYS Sun Oct 10 01:58:07 1999 (37FFD68F)
f2110000 f2118680 msgpc msgpc.sys Wed Jan 15 20:54:25 2003 (3E25BC71)
f2120000 f21281a0 netbios netbios.sys Tue Oct 12 21:34:19 1999 (38038D3B)
f2280000 f2285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 19:31:08 2003 (3E5BB66C)
f2288000 f228f4c0 MountMgr MountMgr.sys Tue Feb 10 20:47:53 2004 (40293569)
f2290000 f2297720 disk disk.sys Wed Jan 15 20:43:05 2003 (3E25B9C9)
f22a8000 f22af000 fdc fdc.sys unavailable (FFFFFFFE)
f22b8000 f22be100 parport parport.sys Wed Jan 15 20:47:13 2003 (3E25BAC1)
f22d0000 f22d5ec0 kbdclass kbdclass.sys Thu Feb 20 17:37:30 2003 (3E55044A)
f22e0000 f22e5400 mouclass mouclass.sys Thu Feb 20 17:37:45 2003 (3E550459)
f22f0000 f22f5fc0 openhci openhci.sys Sat Mar 01 01:28:59 2003 (3E5FFECB)
f2308000 f230cfc0 USBD USBD.SYS Wed Jan 22 18:05:33 2003 (3E2ECF5D)
f2318000 f231ec40 cdrom cdrom.sys Wed Jan 15 20:43:04 2003 (3E25B9C8)
f2328000 f232e600 DLKFET DLKFET.sys Wed Apr 26 20:50:41 2000 (39073A81)
f2348000 f234c400 ptilink ptilink.sys Wed Jan 15 20:47:15 2003 (3E25BAC3)
f2358000 f235c0e0 raspti raspti.sys Fri Oct 08 22:45:10 1999 (37FE57D6)
f2370000 f2374a60 flpydisk flpydisk.sys Wed Jan 15 20:42:52 2003 (3E25B9BC)
f2380000 f2386a20 EFS EFS.SYS Wed Jan 15 20:46:55 2003 (3E25BAAF)
f23a0000 f23a5240 Msfs Msfs.SYS Wed Oct 27 01:21:32 1999 (3816377C)
f23b8000 f23bfd00 wanarp wanarp.sys Fri Aug 16 14:25:01 2002 (3D5CEF1D)
f23f0000 f23f48c0 TDTCP TDTCP.SYS Fri Mar 21 22:43:08 2003 (3E7B876C)
f2410000 f2412a20 BOOTVID BOOTVID.dll Thu Nov 04 02:24:33 1999 (3820E051)
f2414000 f2416d00 PartMgr PartMgr.sys Wed Jan 15 20:43:07 2003 (3E25B9CB)
f248c000 f248f640 serenum serenum.sys Wed Jan 15 20:47:01 2003 (3E25BAB5)
f249c000 f249e2e0 ndistapi ndistapi.sys Wed Jan 15 20:54:15 2003 (3E25BC67)
f24ac000 f24afe60 TDI TDI.SYS Wed Jan 15 20:56:26 2003 (3E25BCEA)
f24e8000 f24eb580 vga vga.sys Sat Sep 25 20:37:40 1999 (37ED1674)
f2500000 f2501d20 Diskperf Diskperf.sys Wed Feb 12 22:34:38 2003 (3E4ABDEE)
f2502000 f2503b80 dmload dmload.sys Wed Jan 15 20:47:06 2003 (3E25BABA)
f250e000 f250fca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 20:53:30 2003 (3E25BC3A)
f2516000 f2517e40 rasacd rasacd.sys Sat Sep 25 20:41:23 1999 (37ED1753)
f257c000 f257da60 uphcleanhlp uphcleanhlp.sys Fri Mar 05 06:43:35 2004 (40481387)
f2598000 f2599860 ParVdm ParVdm.SYS Tue Sep 28 05:28:16 1999 (37F035D0)
f25c8000 f25c8f80 WMILIB WMILIB.SYS Sat Sep 25 20:36:47 1999 (37ED163F)
f25c9000 f25c9b00 pciide pciide.sys Wed Jan 15 20:43:03 2003 (3E25B9C7)
f25e3000 f25e3a40 audstub audstub.sys Sat Sep 25 20:35:33 1999 (37ED15F5)
f25ee000 f25eed80 swenum swenum.sys Sat Sep 25 20:36:31 1999 (37ED162F)
f25fd000 f25fd9e0 Null Null.SYS Sat Sep 25 20:34:58 1999 (37ED15D2)
f25ff000 f25ffee0 Beep Beep.SYS Thu Oct 21 00:18:59 1999 (380E3FD3)
f2602000 f2602f80 mnmdd mnmdd.SYS Sat Sep 25 20:37:40 1999 (37ED1674)
f2630000 f2630f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 20:36:47 1999 (37ED163F)

Unloaded modules:
be8d3000 be8f8000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
beb0d000 beb19000 sysaudio.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be91d000 be92f000 wdmaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
be8f8000 be91d000 portcls.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
beaed000 beafa000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
beafd000 beb0b000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2130000 f2139000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2390000 f2395000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f24e0000 f24e3000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

PFN_PAGE_SINGLE_BIT_ERROR: Bugcheck args 2 and 3 differ by a bit, its hardware error.

Hard to argue with that. I beleive you've got a bad stick o ram in that machine. Can you do some stick swaps, or pull one at a time to eliminate it?