DUMP DATA 0x00000019 (Server 2K3 SP1)

Hi All,
Ran into an issue on our server today where it rebooted at around 4:00PM. The server is running Windows Server 2003 SBS SP1 and is the production server in our company.

This is the first time it has rebooted with this error and the event log records:
Error code 00000019, parameter1 00000020, parameter2 e4cdd114, parameter3 e4cde10c, parameter4 ffff7400.

From looking around I couldn't find any specifics except perhaps faulty memory. The system has been rock solid for the last couple of months.

Below is the analyzed MEMORY.DMP:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Wed Jan 18 16:01:32.437 2006 (GMT+11)
System Uptime: 34 days 20:04:54.234
Loading Kernel Symbols
..............................................................................................................
Loading unloaded module list
.......
Loading User Symbols
......................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, e4cdd114, e4cde10c, ffff7400}

*** ERROR: Module load completed but symbols could not be loaded for VSApiNt.sys
*** ERROR: Module load completed but symbols could not be loaded for TmXPFlt.sys
*** WARNING: Unable to verify checksum for ntrtscan.exe
*** ERROR: Module load completed but symbols could not be loaded for ntrtscan.exe
Probably caused by : VSApiNt.sys ( VSApiNt+78b7e )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e4cdd114, The pool entry we were looking for within the page.
Arg3: e4cde10c, The next pool entry.
Arg4: ffff7400, (reserved)

Debugging Details:
------------------


BUGCHECK_STR: 0x19_20

POOL_ADDRESS: e4cdd114 Paged pool

DEFAULT_BUCKET_ID: DRIVER_FAULT

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 808927bb to 80827451

STACK_TEXT:
f3b6a3d4 808927bb 00000019 00000020 e4cdd114 nt!KeBugCheckEx+0x1b
f3b6a43c 80892b6f e4cdd11c 00000000 f3b6a458 nt!ExFreePoolWithTag+0x477
f3b6a44c b9e8fb7e e4cdd11c f3b6a46c b9ef63ff nt!ExFreePool+0xf
WARNING: Stack unwind information not available. Following frames may be wrong.
f3b6a458 b9ef63ff e4cdd138 e314ede8 e34eb01c VSApiNt+0x78b7e
f3b6a46c b9ef63d5 e34eb040 00000000 e314ac1c VSApiNt+0xdf3ff
f3b6a480 b9e98d98 e314ede8 e314ece8 e314ac1c VSApiNt+0xdf3d5
f3b6a494 b9e5cd8b e314ac1c e5981c1c e314ac1c VSApiNt+0x81d98
f3b6a4ac b9e5cdf9 00000007 e314ac1c f3b6a4d8 VSApiNt+0x45d8b
f3b6a4bc b9e9749e e314ac1c 00000000 e5985e00 VSApiNt+0x45df9
f3b6a4d8 b9e971b3 e5981c1c e314ac1c 00000001 VSApiNt+0x8049e
f3b6a62c b9e971fc e313401c f3b6a6b0 00000000 VSApiNt+0x801b3
f3b6a648 b9df48a5 e313401c f3b6a6b0 00000000 VSApiNt+0x801fc
f3b6a688 b9de3fec e313401c f3b6a6b0 00000000 TmXPFlt+0x1a8a5
f3b6aa38 b9ddf5bd e313401c b9e0f8f0 0131ed5c TmXPFlt+0x9fec
f3b6ab88 b9ddf6bf 00000400 0131e850 0131e850 TmXPFlt+0x55bd
f3b6aba4 b9dec15e 00000000 0131ed5c 0131e85c TmXPFlt+0x56bf
f3b6abc4 b9df0313 f3b6ac1c 84d23840 84d23840 TmXPFlt+0x1215e
f3b6ac04 b9ddd718 f3b6ac1c 84d23840 8649b4a8 TmXPFlt+0x16313
f3b6ac38 8081dce5 85d82f18 84d23840 85898c80 TmXPFlt+0x3718
f3b6ac4c 808f4797 84d238b0 85bdd4b8 84d23840 nt!IofCallDriver+0x45
f3b6ac60 808f5515 85d82f18 84d23840 85bdd4b8 nt!IopSynchronousServiceTail+0x10b
f3b6ad00 808ee0e4 000000c0 00000954 00000000 nt!IopXxxControlFile+0x5db
f3b6ad34 80888c6c 000000c0 00000954 00000000 nt!NtDeviceIoControlFile+0x2a
f3b6ad34 7c82ed54 000000c0 00000954 00000000 nt!KiFastCallEntry+0xfc
0131e768 7c8213e4 77e41788 000000c0 00000954 ntdll!KiFastSystemCallRet
0131e76c 77e41788 000000c0 00000954 00000000 ntdll!NtDeviceIoControlFile+0xc
0131e7d0 00437205 000000c0 a02844db 0131e850 kernel32!DeviceIoControl+0xd2
0131e818 004384c1 000000c0 a02844db 0131e850 ntrtscan+0x37205
0131e870 00415fb2 00000000 0131ed5c 00000000 ntrtscan+0x384c1
00000000 00000000 00000000 00000000 00000000 ntrtscan+0x15fb2


FOLLOWUP_IP:
VSApiNt+78b7e
b9e8fb7e 5d pop ebp

SYMBOL_STACK_INDEX: 3

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: VSApiNt+78b7e

MODULE_NAME: VSApiNt

IMAGE_NAME: VSApiNt.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4371e66c

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0x19_20_VSApiNt+78b7e

BUCKET_ID: 0x19_20_VSApiNt+78b7e

Followup: MachineOwner
---------

eax=ffdff13c ebx=e4cdd114 ecx=00000001 edx=00000033 esi=ffdff120 edi=000001ff
eip=80827451 esp=f3b6a3bc ebp=f3b6a3d4 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
80827451 5d pop ebp
ChildEBP RetAddr Args to Child
f3b6a3d4 808927bb 00000019 00000020 e4cdd114 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f3b6a43c 80892b6f e4cdd11c 00000000 f3b6a458 nt!ExFreePoolWithTag+0x477 (FPO: [Non-Fpo])
f3b6a44c b9e8fb7e e4cdd11c f3b6a46c b9ef63ff nt!ExFreePool+0xf (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f3b6a458 b9ef63ff e4cdd138 e314ede8 e34eb01c VSApiNt+0x78b7e
f3b6a46c b9ef63d5 e34eb040 00000000 e314ac1c VSApiNt+0xdf3ff
f3b6a480 b9e98d98 e314ede8 e314ece8 e314ac1c VSApiNt+0xdf3d5
f3b6a494 b9e5cd8b e314ac1c e5981c1c e314ac1c VSApiNt+0x81d98
f3b6a4ac b9e5cdf9 00000007 e314ac1c f3b6a4d8 VSApiNt+0x45d8b
f3b6a4bc b9e9749e e314ac1c 00000000 e5985e00 VSApiNt+0x45df9
f3b6a4d8 b9e971b3 e5981c1c e314ac1c 00000001 VSApiNt+0x8049e
f3b6a62c b9e971fc e313401c f3b6a6b0 00000000 VSApiNt+0x801b3
f3b6a648 b9df48a5 e313401c f3b6a6b0 00000000 VSApiNt+0x801fc
f3b6a688 b9de3fec e313401c f3b6a6b0 00000000 TmXPFlt+0x1a8a5
f3b6aa38 b9ddf5bd e313401c b9e0f8f0 0131ed5c TmXPFlt+0x9fec
f3b6ab88 b9ddf6bf 00000400 0131e850 0131e850 TmXPFlt+0x55bd
f3b6aba4 b9dec15e 00000000 0131ed5c 0131e85c TmXPFlt+0x56bf
f3b6abc4 b9df0313 f3b6ac1c 84d23840 84d23840 TmXPFlt+0x1215e
f3b6ac04 b9ddd718 f3b6ac1c 84d23840 8649b4a8 TmXPFlt+0x16313
f3b6ac38 8081dce5 85d82f18 84d23840 85898c80 TmXPFlt+0x3718
f3b6ac4c 808f4797 84d238b0 85bdd4b8 84d23840 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
start end module name
00400000 0048c000 ntrtscan ntrtscan.exe Thu Nov 03 02:17:08 2005 (4368D874)
6df00000 6df13000 TimeString TimeString.dll Thu Nov 03 01:53:07 2005 (4368D2D3)
6df20000 6df4b000 OfcDog OfcDog.dll Thu Nov 03 01:52:41 2005 (4368D2B9)
6e040000 6e065000 OfcPIPC OfcPIPC.dll Thu Nov 03 02:16:13 2005 (4368D83D)
6e120000 6e133000 OfcPlugInAPI OfcPlugInAPI.dll Thu Nov 03 01:52:49 2005 (4368D2C1)
6e1b0000 6e1dc000 OfcPlugInMain OfcPlugInMain.dll Thu Nov 03 02:27:44 2005 (4368DAF0)
6e2a0000 6e2b2000 OfcPlugInTray OfcPlugInTray.dll Thu Nov 03 02:27:47 2005 (4368DAF3)
71bb0000 71bb9000 WSOCK32 WSOCK32.dll Tue Mar 25 20:43:26 2003 (3E8024BE)
71bf0000 71bf8000 WS2HELP WS2HELP.dll Fri Mar 25 13:31:10 2005 (424377EE)
71c00000 71c17000 WS2_32 WS2_32.dll Fri Mar 25 13:31:09 2005 (424377ED)
71c40000 71c98000 NETAPI32 NETAPI32.dll Fri Mar 25 13:30:32 2005 (424377C8)
73070000 73097000 WINSPOOL WINSPOOL.DRV Fri Mar 25 13:30:41 2005 (424377D1)
76f50000 76f63000 Secur32 Secur32.dll Fri Mar 25 13:31:01 2005 (424377E5)
77380000 77412000 USER32 USER32.dll Fri Mar 25 13:30:46 2005 (424377D6)
77530000 775c7000 COMCTL32 COMCTL32.dll Fri Mar 25 13:29:43 2005 (42437797)
77b90000 77b98000 VERSION VERSION.dll Fri Mar 25 13:30:46 2005 (424377D6)
77ba0000 77bfa000 msvcrt msvcrt.dll Fri Mar 25 13:33:02 2005 (4243785E)
77c00000 77c48000 GDI32 GDI32.dll Thu Oct 06 12:03:12 2005 (434485E0)
77c50000 77cef000 RPCRT4 RPCRT4.dll Fri Mar 25 13:30:40 2005 (424377D0)
77e40000 77f42000 kernel32 kernel32.dll Fri Mar 25 13:30:42 2005 (424377D2)
77f50000 77fec000 ADVAPI32 ADVAPI32.dll Fri Mar 25 13:30:12 2005 (424377B4)
7c800000 7c8c0000 ntdll ntdll.dll Fri Mar 25 13:30:42 2005 (424377D2)
80800000 80a53000 nt ntkrpamp.exe Fri Mar 25 11:28:04 2005 (42435B14)
80a53000 80a7f000 hal halmacpi.dll Fri Mar 25 11:28:37 2005 (42435B35)
b9c1e000 b9dd9e60 tm_cfw tm_cfw.sys Wed Aug 24 17:56:12 2005 (430C281C)
b9dda000 b9e17000 TmXPFlt TmXPFlt.sys Wed Nov 09 23:34:28 2005 (4371ECD4)
b9e17000 b9f0f2c0 VSApiNt VSApiNt.sys Wed Nov 09 23:07:08 2005 (4371E66C)
bf800000 bf9d0000 win32k win32k.sys Thu Oct 06 10:37:08 2005 (434471B4)
bf9d0000 bf9e6000 dxg dxg.sys Fri Mar 25 11:27:25 2005 (42435AED)
bf9e6000 bfa3c680 ati2drad ati2drad.dll Fri Mar 25 13:30:34 2005 (424377CA)
bff60000 bff7e000 RDPDD RDPDD.dll Fri Mar 25 13:30:48 2005 (424377D8)
f5390000 f539d000 TmPreFlt TmPreFlt.sys Wed Nov 09 23:34:27 2005 (4371ECD3)
f54c8000 f54f5000 RDPWD RDPWD.SYS Thu Jun 16 01:33:14 2005 (42B04A3A)
f56ad000 f56b9000 USBSTOR USBSTOR.SYS Fri Mar 25 11:30:46 2005 (42435BB6)
f5c25000 f5c30000 TDTCP TDTCP.SYS Fri Mar 25 11:27:15 2005 (42435AE3)
f637d000 f63cd000 HTTP HTTP.sys Fri Mar 25 11:40:36 2005 (42435E04)
f641d000 f6432000 Cdfs Cdfs.SYS Fri Mar 25 11:40:55 2005 (42435E17)
f663a000 f6698000 srv srv.sys Wed May 04 12:44:01 2005 (427836F1)
f66c0000 f66f4000 mrxdav mrxdav.sys Fri Mar 25 11:30:11 2005 (42435B93)
f68e6000 f6915e60 exifs exifs.sys Fri Aug 26 10:29:05 2005 (430E6251)
f6a2e000 f6a58000 Fastfat Fastfat.SYS Fri Mar 25 11:40:20 2005 (42435DF4)
f6a80000 f6a91000 Fips Fips.SYS Fri Mar 25 11:40:33 2005 (42435E01)
f6a91000 f6b07000 mrxsmb mrxsmb.sys Fri Mar 25 11:41:13 2005 (42435E29)
f6b07000 f6b37000 rdbss rdbss.sys Fri Mar 25 11:40:49 2005 (42435E11)
f6b87000 f6bb1000 afd afd.sys unavailable (FFFFFFFE)
f6bb1000 f6be2000 netbt netbt.sys Fri Mar 25 11:40:31 2005 (42435DFF)
f6be2000 f6c43000 tcpip tcpip.sys Fri Mar 25 11:40:31 2005 (42435DFF)
f6ce3000 f6cfc000 ipsec ipsec.sys Fri Mar 25 11:40:49 2005 (42435E11)
f6d9b000 f6daf000 usbhub usbhub.sys Fri Mar 25 11:30:46 2005 (42435BB6)
f6daf000 f6def000 update update.sys Fri Mar 25 11:40:27 2005 (42435DFB)
f6e17000 f6e4e000 rdpdr rdpdr.sys Fri Mar 25 11:30:20 2005 (42435B9C)
f6eae000 f6eb8000 Dxapi Dxapi.sys Tue Mar 25 18:06:01 2003 (3E7FFFD9)
f6ebe000 f6ec75a0 dump_aac dump_aac.sys Thu Nov 25 07:02:22 2004 (41A4E8CE)
f6ece000 f6ed8000 dump_diskdump dump_diskdump.sys Fri Mar 25 11:28:56 2005 (42435B48)
f6eee000 f6f01000 raspptp raspptp.sys Fri Mar 25 11:40:43 2005 (42435E0B)
f6f01000 f6f1b000 ndiswan ndiswan.sys Fri Mar 25 11:40:46 2005 (42435E0E)
f6f1b000 f6f30000 rasl2tp rasl2tp.sys Fri Mar 25 11:40:29 2005 (42435DFD)
f6f30000 f6f58000 ks ks.sys Fri Mar 25 11:41:03 2005 (42435E1F)
f6f58000 f6f6c000 redbook redbook.sys Fri Mar 25 11:28:46 2005 (42435B3E)
f6f6c000 f6f81000 cdrom cdrom.sys Fri Mar 25 11:28:57 2005 (42435B49)
f6f81000 f6f99000 parport parport.sys Fri Mar 25 11:28:25 2005 (42435B29)
f6f99000 f6fae000 serial serial.sys Fri Mar 25 11:28:29 2005 (42435B2D)
f6fae000 f6fc1000 i8042prt i8042prt.sys Fri Mar 25 11:41:05 2005 (42435E21)
f6fc1000 f6fdc000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 11:29:53 2005 (42435B81)
f6fdc000 f702fd80 ati2mpad ati2mpad.sys Fri Jul 19 11:13:20 2002 (3D3767B0)
f7030000 f7059800 e1000325 e1000325.sys Wed Jun 23 07:18:44 2004 (40D8A234)
f705a000 f7084000 USBPORT USBPORT.SYS Fri Mar 25 11:30:43 2005 (42435BB3)
f7114000 f7133000 Mup Mup.sys Fri Mar 25 11:40:49 2005 (42435E11)
f7133000 f7169000 NDIS NDIS.sys Fri Mar 25 11:40:26 2005 (42435DFA)
f7169000 f71fe000 Ntfs Ntfs.sys Fri Mar 25 11:40:29 2005 (42435DFD)
f71fe000 f7225000 KSecDD KSecDD.sys Fri Mar 25 11:28:53 2005 (42435B45)
f7225000 f723a800 SymSnap SymSnap.sys Thu May 12 08:55:51 2005 (42828D77)
f723b000 f7260000 fltmgr fltmgr.sys Fri Mar 25 11:30:25 2005 (42435BA1)
f7260000 f7273000 CLASSPNP CLASSPNP.SYS Fri Mar 25 11:40:23 2005 (42435DF7)
f7273000 f7284000 symmpi symmpi.sys Tue Dec 14 08:03:14 2004 (41BE0392)
f7284000 f72a3000 SCSIPORT SCSIPORT.SYS Fri Mar 25 11:40:26 2005 (42435DFA)
f72a3000 f72bf000 atapi atapi.sys Fri Mar 25 11:28:49 2005 (42435B41)
f72bf000 f72e9000 volsnap volsnap.sys Fri Mar 25 11:29:10 2005 (42435B56)
f72e9000 f7315000 dmio dmio.sys Fri Mar 25 11:30:02 2005 (42435B8A)
f7315000 f733c000 ftdisk ftdisk.sys Fri Mar 25 11:29:00 2005 (42435B4C)
f733c000 f7352000 pci pci.sys Fri Mar 25 11:34:14 2005 (42435C86)
f7352000 f7386000 ACPI ACPI.sys Fri Mar 25 11:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 18:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 18:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 11:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 11:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 11:40:34 2005 (42435E02)
f74d7000 f74e05a0 aac aac.sys Thu Nov 25 07:02:22 2004 (41A4E8CE)
f74e7000 f74f7000 disk disk.sys Fri Mar 25 11:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Fri Mar 25 11:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Fri Mar 25 11:29:40 2005 (42435B74)
f7527000 f7535000 NDProxy NDProxy.SYS Fri Mar 25 11:34:13 2005 (42435C85)
f7537000 f7543000 vga vga.sys Fri Mar 25 11:29:54 2005 (42435B82)
f7547000 f7554000 Npfs Npfs.SYS Fri Mar 25 11:30:04 2005 (42435B8C)
f7557000 f7565000 msgpc msgpc.sys Fri Mar 25 11:33:31 2005 (42435C5B)
f7567000 f7572000 Msfs Msfs.SYS unavailable (FFFFFFFE)
f7577000 f7584000 netbios netbios.sys Fri Mar 25 11:33:21 2005 (42435C51)
f7587000 f7590a40 V2IMount V2IMount.SYS Tue May 24 10:33:37 2005 (42927661)
f75f7000 f7606000 intelppm intelppm.sys Fri Mar 25 11:28:40 2005 (42435B38)
f7607000 f7614000 wanarp wanarp.sys Fri Mar 25 11:34:07 2005 (42435C7F)
f7617000 f7623000 TAPE TAPE.SYS Fri Mar 25 11:29:01 2005 (42435B4D)
f7627000 f7630000 watchdog watchdog.sys Fri Mar 25 11:30:19 2005 (42435B9B)
f7637000 f7641000 kbdclass kbdclass.sys Tue Mar 25 18:03:10 2003 (3E7FFF2E)
f7647000 f7651000 mouclass mouclass.sys Tue Mar 25 18:03:09 2003 (3E7FFF2D)
f7657000 f7662000 fdc fdc.sys unavailable (FFFFFFFE)
f7667000 f7671000 serenum serenum.sys Fri Mar 25 11:28:27 2005 (42435B2B)
f7677000 f7680000 ndistapi ndistapi.sys Fri Mar 25 11:34:11 2005 (42435C83)
f7687000 f7696000 raspppoe raspppoe.sys Fri Mar 25 11:34:16 2005 (42435C88)
f7697000 f76a2000 TDI TDI.SYS Fri Mar 25 11:35:34 2005 (42435CD6)
f76a7000 f76b2000 ptilink ptilink.sys Fri Mar 25 11:28:25 2005 (42435B29)
f76b7000 f76c0000 raspti raspti.sys Fri Mar 25 11:34:16 2005 (42435C88)
f76c7000 f76d6000 termdd termdd.sys Fri Mar 25 11:27:15 2005 (42435AE3)
f76d7000 f76e0000 mssmbios mssmbios.sys Fri Mar 25 11:34:14 2005 (42435C86)
f76f7000 f7701000 flpydisk flpydisk.sys unavailable (FFFFFFFE)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 18:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 18:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 18:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys unavailable (FFFFFFFE)
f7737000 f773e000 parvdm parvdm.sys unavailable (FFFFFFFE)
f7797000 f779f000 hpdat hpdat.sys Wed Jul 06 17:41:14 2005 (42CB8B1A)
f779f000 f77a6000 GearAspiWDM GearAspiWDM.SYS Fri Jul 02 09:11:52 2004 (40E49A38)
f77a7000 f77ac180 usbuhci usbuhci.sys Fri Mar 25 11:30:45 2005 (42435BB5)
f77af000 f77b5a00 usbehci usbehci.sys Fri Mar 25 11:30:43 2005 (42435BB3)
f77b7000 f77bf000 audstub audstub.sys Tue Mar 25 18:09:12 2003 (3E800098)
f77cf000 f77d7000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f77d7000 f77de000 Null Null.SYS unavailable (FFFFFFFE)
f77df000 f77e6000 Beep Beep.SYS Tue Mar 25 18:03:04 2003 (3E7FFF28)
f77e7000 f77ef000 mnmdd mnmdd.SYS Tue Mar 25 18:07:53 2003 (3E800049)
f77ef000 f77f7000 RDPCDD RDPCDD.sys Tue Mar 25 18:03:05 2003 (3E7FFF29)
f77f7000 f77ff000 rasacd rasacd.sys Tue Mar 25 18:11:50 2003 (3E800136)
f785f000 f7866000 dxgthk dxgthk.sys Tue Mar 25 18:05:52 2003 (3E7FFFD0)
f799d000 f799e280 swenum swenum.sys Fri Mar 25 11:27:42 2005 (42435AFE)
f799f000 f79a0580 USBD USBD.SYS Tue Mar 25 18:10:39 2003 (3E8000EF)

Unloaded modules:
f35c3000 f35cf000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f75a7000 f75b3000 USBSTOR.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f4c86000 f4e42000 tm_cfw.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4ef7000 f4ff0000 VSApiNt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4eba000 f4ef7000 TmXPFlt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7597000 f75a5000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77c7000 f77cf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt



From what I can see this was an error with VSApiNt which is a component of Trend Micro? We have recently loaded version 3 of their CSM suite however that was a good few weeks back. Any help would be appreciated, thanks.

Regards,
Jason

 

Hi,

De-install PC-Cillian may resolve the blue screen.

 

We are running Client Server Security for SMB v3 which is used for the entire company it is not a stand-alone product however we could uninstall the server client and perhaps re-install. I am just wondering if it was Trend that caused it and if so should I inform Trend that this has ocurred.

Regards,
Jason

 

Hi,

From the stack trace you can see the footprint of VSApiNT and TmXPFlt, they belong to Trend Micro. Report the problem to Trend Micro and run memtest to make sure that the ram is healthy.

f3b6a458 b9ef63ff e4cdd138 e314ede8 e34eb01c VSApiNt+0x78b7e
f3b6a46c b9ef63d5 e34eb040 00000000 e314ac1c VSApiNt+0xdf3ff
f3b6a480 b9e98d98 e314ede8 e314ece8 e314ac1c VSApiNt+0xdf3d5
f3b6a494 b9e5cd8b e314ac1c e5981c1c e314ac1c VSApiNt+0x81d98
f3b6a4ac b9e5cdf9 00000007 e314ac1c f3b6a4d8 VSApiNt+0x45d8b
f3b6a4bc b9e9749e e314ac1c 00000000 e5985e00 VSApiNt+0x45df9
f3b6a4d8 b9e971b3 e5981c1c e314ac1c 00000001 VSApiNt+0x8049e
f3b6a62c b9e971fc e313401c f3b6a6b0 00000000 VSApiNt+0x801b3
f3b6a648 b9df48a5 e313401c f3b6a6b0 00000000 VSApiNt+0x801fc
f3b6a688 b9de3fec e313401c f3b6a6b0 00000000 TmXPFlt+0x1a8a5
f3b6aa38 b9ddf5bd e313401c b9e0f8f0 0131ed5c TmXPFlt+0x9fec
f3b6ab88 b9ddf6bf 00000400 0131e850 0131e850 TmXPFlt+0x55bd
f3b6aba4 b9dec15e 00000000 0131ed5c 0131e85c TmXPFlt+0x56bf
f3b6abc4 b9df0313 f3b6ac1c 84d23840 84d23840 TmXPFlt+0x1215e
f3b6ac04 b9ddd718 f3b6ac1c 84d23840 8649b4a8 TmXPFlt+0x16313
f3b6ac38 8081dce5 85d82f18 84d23840 85898c80 TmXPFlt+0x3718

 

Thanks cpc2004,
I'm going to go straight to Trend first as I strongly believe it's not going to be memory. I figured Trend had a part of it and will upload my debuglog to their ftp and link them to this thread as well so as to hopefully get this resolved sooner rather than later.

Regards,
Jason