1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Bsod Ipnat.sys (bad_pool_caller)

Discussion in 'Windows XP' started by Q56 Monster, 2007/11/21.

  1. 2007/11/21
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    I am experiencing the BSOD (BAD_POOL_CALLER). When I view the minidump it says IPNAT.SYS is the problem. Trying to free memory that is already free. I've already reinstalled windows 3x's and get the same problem.

    How do I fix this issue?
     
  2. 2007/11/21
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    I can post the dumps if you want to troubleshoot this. Anyone?
     

  3. to hide this advert.

  4. 2007/11/21
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    Hi and welcome to the BBS,

    If it always refers to ipnat.sys or other networking files, investigate your internet connection (assuming you are a home user). The motherboard for my computer has a NAT firewall available for installation, if I used a router, that might have another, security suites may install another and Window's firewall may need to be manually disabled when another firewall is installed. That's four possible firewalls when the recommended level is one.

    Matt
     
  5. 2007/11/22
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #4
  6. 2007/11/22
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0

    OK Arie, thanks for directing me to that debug tool. I was doing it the long way through command prompt.

    Any way here is the dump.

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini112107-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_qfe.070227-2300
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Wed Nov 21 06:23:05.500 2007 (GMT-5)
    System Uptime: 0 days 0:05:26.484
    Loading Kernel Symbols
    ........................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ...
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck C2, {7, cd4, 2080001, 8a522a10}

    *** ERROR: Module load completed but symbols could not be loaded for aswTdi.SYS
    *** ERROR: Module load completed but symbols could not be loaded for aswRdr.SYS


    Probably caused by : ipnat.sys ( ipnat!NatCleanupDirector+7d )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 00000007, Attempt to free pool which was already freed
    Arg2: 00000cd4, (reserved)
    Arg3: 02080001, Memory contents of the pool block
    Arg4: 8a522a10, Address of the block of pool being deallocated

    Debugging Details:
    ------------------




    OVERLAPPED_MODULE: Address regions for 'HTTP' and 'Parport.SYS' overlap

    POOL_ADDRESS: 8a522a10

    FREED_POOL_TAG: NatD

    BUGCHECK_STR: 0xc2_7_NatD

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

    PROCESS_NAME: IEXPLORE.EXE

    LAST_CONTROL_TRANSFER: from 8054a583 to 804f9f13

    STACK_TEXT:
    b4fe2738 8054a583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
    b4fe2788 b62686eb 8a522a10 00000000 b4fe2878 nt!ExFreePoolWithTag+0x2a3
    b4fe27a8 b62795fd 8a522a10 00000000 b4fe28f8 ipnat!NatCleanupDirector+0x7d
    b4fe283c b627a5b8 00000000 00000001 b4fe2878 ipnat!NatpDirectPacket+0x4bf
    b4fe28b4 b628c2b9 b4fe2968 00000000 b4fe28f8 ipnat!NatTranslatePacket+0x45e
    b4fe29f4 b6291da8 b62ca698 89191138 891910d0 tcpip!IPTransmit+0x16f2
    b4fe2a60 b6294da7 65021d37 b4fe2a00 892fc9b8 tcpip!TCPSend+0x5d8
    b4fe2a80 b6294e81 b4fe2a00 00000000 00000004 tcpip!TdiDisconnect+0x18c
    b4fe2acc b6293bf1 892fc9b8 00000000 892fca68 tcpip!TCPDisconnect+0xfd
    b4fe2ae8 804ef163 898368c0 892fc9b8 8a3e17d8 tcpip!TCPDispatchInternalDeviceControl+0x14d
    b4fe2af8 baacba3f 001b89af 00000000 8a3e17a8 nt!IopfCallDriver+0x31
    b4fe2b50 baac8368 8a3e17a8 892fc9b8 892fca70 aswTdi+0x3a3f
    b4fe2bc4 804ef163 8a3e16f0 892fc9b8 89834748 aswTdi+0x368
    b4fe2bd4 b57b8310 8a47cb10 804ef163 89834690 nt!IopfCallDriver+0x31
    b4fe2bdc 804ef163 89834690 892fc9b8 892fc9b8 aswRdr+0x310
    b4fe2bec b622bd05 89157b10 8a349cf0 806e4aa0 nt!IopfCallDriver+0x31
    b4fe2c18 b622a7ed 8a349cf0 00000000 00000000 afd!AfdBeginDisconnect+0x244
    b4fe2c54 b622a17e 8a3a2e58 8983e720 b4fe2ca4 afd!AfdCleanup+0x34b
    b4fe2c64 804ef163 898538c0 8a38d5c8 8a38d5c8 afd!AfdDispatch+0xbb
    b4fe2c74 8058273b 8a3a2e40 8a79de70 00000001 nt!IopfCallDriver+0x31
    b4fe2ca4 805bb59f 89139da0 898538c0 001f01ff nt!IopCloseFile+0x26b
    b4fe2cd4 805baef1 89139da0 013a2e40 8a79de70 nt!ObpDecrementHandleCount+0x11b
    b4fe2cfc 805baf8f e2e488e0 8a3a2e58 00000550 nt!ObpCloseHandleTableEntry+0x14d
    b4fe2d44 805bb0c7 00000550 00000001 00000000 nt!ObpCloseHandle+0x87
    b4fe2d58 805409ac 00000550 015af52c 7c90eb94 nt!NtClose+0x1d
    b4fe2d58 7c90eb94 00000550 015af52c 7c90eb94 nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    015af52c 00000000 00000000 00000000 00000000 0x7c90eb94


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    ipnat!NatCleanupDirector+7d
    b62686eb 5f pop edi

    SYMBOL_STACK_INDEX: 2

    SYMBOL_NAME: ipnat!NatCleanupDirector+7d

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: ipnat

    IMAGE_NAME: ipnat.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 415b3714

    FAILURE_BUCKET_ID: 0xc2_7_NatD_ipnat!NatCleanupDirector+7d

    BUCKET_ID: 0xc2_7_NatD_ipnat!NatCleanupDirector+7d

    Followup: MachineOwner
    ---------

    eax=bab4813c ebx=00000cd4 ecx=00000000 edx=00000002 esi=8a522a08 edi=8a522a24
    eip=804f9f13 esp=b4fe2720 ebp=b4fe2738 iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x1b:
    804f9f13 5d pop ebp
    ChildEBP RetAddr Args to Child
    b4fe2738 8054a583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
    b4fe2788 b62686eb 8a522a10 00000000 b4fe2878 nt!ExFreePoolWithTag+0x2a3 (FPO: [Non-Fpo])
    b4fe27a8 b62795fd 8a522a10 00000000 b4fe28f8 ipnat!NatCleanupDirector+0x7d (FPO: [Non-Fpo])
    b4fe283c b627a5b8 00000000 00000001 b4fe2878 ipnat!NatpDirectPacket+0x4bf (FPO: [Non-Fpo])
    b4fe28b4 b628c2b9 b4fe2968 00000000 b4fe28f8 ipnat!NatTranslatePacket+0x45e (FPO: [Non-Fpo])
    b4fe29f4 b6291da8 b62ca698 89191138 891910d0 tcpip!IPTransmit+0x16f2 (FPO: [Non-Fpo])
    b4fe2a60 b6294da7 65021d37 b4fe2a00 892fc9b8 tcpip!TCPSend+0x5d8 (FPO: [Non-Fpo])
    b4fe2a80 b6294e81 b4fe2a00 00000000 00000004 tcpip!TdiDisconnect+0x18c (FPO: [Non-Fpo])
    b4fe2acc b6293bf1 892fc9b8 00000000 892fca68 tcpip!TCPDisconnect+0xfd (FPO: [Non-Fpo])
    b4fe2ae8 804ef163 898368c0 892fc9b8 8a3e17d8 tcpip!TCPDispatchInternalDeviceControl+0x14d (FPO: [Non-Fpo])
    b4fe2af8 baacba3f 001b89af 00000000 8a3e17a8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    b4fe2b50 baac8368 8a3e17a8 892fc9b8 892fca70 aswTdi+0x3a3f (FPO: [Non-Fpo])
    b4fe2bc4 804ef163 8a3e16f0 892fc9b8 89834748 aswTdi+0x368 (FPO: [Non-Fpo])
    b4fe2bd4 b57b8310 8a47cb10 804ef163 89834690 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    b4fe2bdc 804ef163 89834690 892fc9b8 892fc9b8 aswRdr+0x310 (FPO: [2,0,2])
    b4fe2bec b622bd05 89157b10 8a349cf0 806e4aa0 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    b4fe2c18 b622a7ed 8a349cf0 00000000 00000000 afd!AfdBeginDisconnect+0x244 (FPO: [Non-Fpo])
    b4fe2c54 b622a17e 8a3a2e58 8983e720 b4fe2ca4 afd!AfdCleanup+0x34b (FPO: [Non-Fpo])
    b4fe2c64 804ef163 898538c0 8a38d5c8 8a38d5c8 afd!AfdDispatch+0xbb (FPO: [Non-Fpo])
    b4fe2c74 8058273b 8a3a2e40 8a79de70 00000001 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    start end module name
    804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 04:15:54 2007 (45E5484A)
    806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
    b548d000 b54b7180 kmixer kmixer.sys Wed Jun 14 04:47:45 2006 (448FCD31)
    b54b8000 b54dac80 aec aec.sys Fri Oct 01 13:00:21 2004 (415D8D25)
    b54db000 b54ef400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
    b56c8000 b56d5400 swmidi swmidi.sys Fri Aug 17 17:00:42 2001 (3B7D85FA)
    b5728000 b5736d80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
    b57b8000 b57bbb20 aswRdr aswRdr.SYS Thu Sep 06 06:03:00 2007 (46DFD054)
    b5900000 b5951480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
    b59a2000 b59e2280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
    b5a0b000 b5a37400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
    b5c90000 b5ca5680 aswMon2 aswMon2.SYS Thu Sep 06 06:05:07 2007 (46DFD0D3)
    b5d1e000 b5d333c0 DLAUDF_M DLAUDF_M.SYS Mon Nov 07 12:18:51 2005 (436F8C7B)
    b5d34000 b5d4b040 DLAUDFAM DLAUDFAM.SYS Mon Nov 07 12:19:06 2005 (436F8C8A)
    b5d74000 b5d89240 DLAIFS_M DLAIFS_M.SYS Mon Nov 07 12:18:45 2005 (436F8C75)
    b5daa000 b5dad280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
    b5e92000 b5e95920 DLAOPIOM DLAOPIOM.SYS Mon Nov 07 12:20:07 2005 (436F8CC7)
    b6142000 b615bb80 dump_nvatabus dump_nvatabus.sys Thu Sep 21 18:39:13 2006 (45131491)
    b6184000 b61f2a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
    b61f3000 b621da00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
    b621e000 b623fd00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
    b6240000 b6267c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    b6268000 b6288f00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
    b6289000 b62e0d80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
    b62e1000 b62f3400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    b632c000 b632e900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    b6374000 b6380e80 DMusic DMusic.sys Wed Aug 04 02:07:37 2004 (41107D29)
    b6404000 b6425700 portcls portcls.sys Tue Mar 16 14:58:17 2004 (40574E49)
    b6426000 b687a000 RtkHDAud RtkHDAud.sys Tue Sep 12 07:26:57 2006 (45069981)
    b694e000 b6950280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    b9b4d000 b9ba5e80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
    b9ba6000 b9bd6100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
    b9bd7000 b9be7e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
    b9c08000 b9c17900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
    b9c48000 b9c50880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
    b9c58000 b9c66d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    b9c68000 b9c70700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
    b9c78000 b9c80700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
    b9c88000 b9c9e680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
    b9c9f000 b9cf2000 NVSNPU NVSNPU.SYS Mon Aug 07 19:38:41 2006 (44D7CF01)
    b9cf2000 b9dffc00 NVNRM NVNRM.SYS Mon Aug 07 19:39:02 2006 (44D7CF16)
    b9e00000 b9e25000 HDAudBus HDAudBus.sys Fri Jan 07 20:07:15 2005 (41DF3243)
    b9e25000 b9e47680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    b9e48000 b9e6ae80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
    b9e6b000 b9e7e780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
    b9e7f000 ba5081e0 nv4_mini nv4_mini.sys Mon Sep 17 04:40:23 2007 (46EE3D77)
    ba58f000 ba5a9580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    ba5aa000 ba5d6a80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    ba5d7000 ba663400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
    ba664000 ba67a780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
    ba67b000 ba690440 DRVMCDB DRVMCDB.SYS Mon Sep 12 17:38:27 2005 (4325F553)
    ba691000 ba6a2f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
    ba6a3000 ba6c2780 fltMgr fltMgr.sys Mon Aug 21 05:14:57 2006 (44E97991)
    ba6c3000 ba6da800 SCSIPORT SCSIPORT.SYS Wed Aug 04 01:59:39 2004 (41107B4B)
    ba6db000 ba6f4b80 nvatabus nvatabus.sys Thu Sep 21 18:39:13 2006 (45131491)
    ba6f5000 ba70c480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    ba70d000 ba722c80 nvraid nvraid.sys Thu Sep 21 18:39:25 2006 (4513149D)
    ba723000 ba748700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
    ba749000 ba767880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    ba768000 ba778a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
    ba779000 ba7a6d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
    ba8a8000 ba8b0c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
    ba8b8000 ba8c6e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
    ba8c8000 ba8d5000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
    ba8d8000 ba8e2500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
    ba8e8000 ba8f4200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
    ba8f8000 ba904c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
    ba908000 ba910e00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
    ba938000 ba944180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
    ba948000 ba956080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
    ba958000 ba967180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    ba968000 ba971000 nvnetbus nvnetbus.sys Mon Aug 07 19:39:23 2006 (44D7CF2B)
    ba978000 ba984880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
    ba988000 ba992200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
    ba998000 ba9a3d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
    ba9a8000 ba9b0900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
    ba9b8000 ba9c1f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
    ba9c8000 ba9d4e00 NVENETFD NVENETFD.sys Mon Aug 07 19:39:21 2006 (44D7CF29)
    ba9d8000 ba9e1480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
    baa18000 baa26100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
    baa38000 baa46b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
    baab8000 baac15a0 DRVNDDM DRVNDDM.SYS Fri Aug 12 16:21:43 2005 (42FD04D7)
    baac8000 baad0360 aswTdi aswTdi.SYS Thu Sep 06 06:02:17 2007 (46DFD029)
    baad8000 baae4000 ATITool ATITool.sys Fri Nov 10 08:08:51 2006 (455479E3)
    baae8000 baaf0d00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
    baaf8000 bab07d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
    bab08000 bab14e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    bab18000 bab22380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
    bab28000 bab2e200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
    bab30000 bab34900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
    bab38000 bab3f1c0 cercsr6 cercsr6.sys Wed Dec 08 18:31:10 2004 (41B78EBE)
    bab40000 bab44de0 PxHelp20 PxHelp20.sys Wed Jan 26 20:32:51 2005 (41F844C3)
    bab60000 bab64080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    bab80000 bab85000 flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
    babc0000 babc5860 DLARTL_N DLARTL_N.SYS Fri Nov 18 15:02:09 2005 (437E3341)
    babc8000 babcd200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
    babd0000 babd4a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
    babd8000 babdf880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
    babe8000 babec940 Aavmker4 Aavmker4.SYS Thu Sep 06 06:00:50 2007 (46DFCFD2)
    babf8000 babfe500 usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)
    bac08000 bac0c500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
    bac18000 bac1e3e0 DLABOIOM DLABOIOM.SYS Mon Nov 07 12:19:20 2005 (436F8C98)
    bac80000 bac81000 fdc fdc.sys unavailable (00000000)
    bac88000 bac8da00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bac90000 bac96000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bac98000 bac9c280 usbohci usbohci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    baca0000 baca6800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    baca8000 bacac880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
    bacb0000 bacb4580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    bacb8000 bacbb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    bad78000 bad7bc80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
    bad80000 bad82580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
    bad9c000 bad9fc80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
    bada8000 bada9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    badaa000 badab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    badac000 badad700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
    badae000 badaf480 speedfan speedfan.sys Sun Sep 24 09:28:47 2006 (4516880F)
    badca000 badcb5e0 DLACDBHM DLACDBHM.SYS Fri Nov 18 15:02:49 2005 (437E3369)
    badcc000 badcd100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
    badce000 badcf280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    bade2000 bade3900 splitter splitter.sys Wed Jun 14 04:47:46 2006 (448FCD32)
    badf2000 badf3f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
    badf4000 badf5080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    badf6000 badf7080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    badf8000 badf9080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    bae00000 bae01100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    bae18000 bae198a0 DLAPoolM DLAPoolM.SYS Mon Nov 07 12:18:45 2005 (436F8C75)
    bae70000 bae70d00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    bae71000 bae71680 giveio giveio.sys Wed Apr 03 22:33:25 1996 (316334F5)
    baeae000 baeae980 DLADResN DLADResN.SYS Mon Nov 07 12:21:56 2005 (436F8D34)
    baecb000 baecbb80 drmkaud drmkaud.sys Wed Aug 04 02:07:56 2004 (41107D3C)
    baf34000 baf34b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
    baf46000 baf46d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    baf93000 baf93c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
    bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
    bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
    bf9d5000 bff58e00 nv4_disp nv4_disp.dll Mon Sep 17 04:36:42 2007 (46EE3C9A)

    Unloaded modules:
    b59cf000 b59e3000 Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    babb8000 babbd000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b6952000 b6955000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  7. 2007/11/23
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    I am only concentrating on the file ipnat.sys (it appears to be a predominant part of that dump).

    from
    http://support.microsoft.com/kb/875357/en-us

    The driver is running, but appears to be functioning incorrectly.

    As I said, check more dumps. I would see if it keeps relating to the internet connection and specifically, the firewall.

    If there does not seem to be another reason, you will need to describe the network setup/internet connection and investigate the firewall(s) [I only have limited networking knowledge.]

    Matt
     
  8. 2007/11/23
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    Last edited: 2007/11/23
  9. 2007/11/24
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    Here is another minidump that I got tonight (2 in a row) when trying start firefox (last dump was with IE).

    I tried matman's suggestions, but really couldn't find anything wrong...anyway here it is....Any and all help is appreciated!

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini112407-02.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_qfe.070227-2300
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Sat Nov 24 22:10:37.921 2007 (GMT-5)
    System Uptime: 0 days 0:05:12.906
    Loading Kernel Symbols
    ....................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ..........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck C2, {7, c3e, 2080001, 8a511090}



    Probably caused by : ipnat.sys ( ipnat!NatCleanupDirector+7d )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 00000007, Attempt to free pool which was already freed
    Arg2: 00000c3e, (reserved)
    Arg3: 02080001, Memory contents of the pool block
    Arg4: 8a511090, Address of the block of pool being deallocated

    Debugging Details:
    ------------------




    POOL_ADDRESS: 8a511090

    FREED_POOL_TAG: NatD

    BUGCHECK_STR: 0xc2_7_NatD

    CUSTOMER_CRASH_COUNT: 2

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    PROCESS_NAME: System

    LAST_CONTROL_TRANSFER: from 8054a583 to 804f9f13

    STACK_TEXT:
    bad1796c 8054a583 000000c2 00000007 00000c3e nt!KeBugCheckEx+0x1b
    bad179bc b62686eb 8a511090 00000000 bad17aac nt!ExFreePoolWithTag+0x2a3
    bad179dc b62795fd 8a511090 00000000 bad17b2c ipnat!NatCleanupDirector+0x7d
    bad17a70 b627a5b8 00000000 00000001 bad17aac ipnat!NatpDirectPacket+0x4bf
    bad17ae8 b632c2b9 bad17b9c 00000000 bad17b2c ipnat!NatTranslatePacket+0x45e
    bad17c28 b632d5f8 b636a698 00000000 8913a2e0 tcpip!IPTransmit+0x16f2
    bad17c74 b6331247 02116bb8 00000000 00000000 tcpip!SendACK+0x2d8
    bad17c94 b6329a08 00000002 00000002 bad17cc0 tcpip!ProcessPerCpuTCBDelayQ+0xc6
    bad17cc8 b632994f 00000002 b6329900 b63293d6 tcpip!ProcessTCBDelayQ+0xc4
    bad17cd4 b63293d6 b6368b00 00000000 b63384f4 tcpip!TCPRcvComplete+0x20
    bad17ce0 b63384f4 b636a184 b636a180 b63383ab tcpip!IPRcvComplete+0x21
    bad17d60 baca83e4 b636a180 8a5176c0 b636a190 tcpip!LoopXmitRtn+0x1e2
    bad17d7c 80537aff 8a5176c0 00000000 8a7b1640 TDI!CTEpEventHandler+0x32
    bad17dac 805cea08 b636a180 00000000 00000000 nt!ExpWorkerThread+0xef
    bad17ddc 8054546e 80537a10 00000001 00000000 nt!PspSystemThreadStartup+0x34
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    ipnat!NatCleanupDirector+7d
    b62686eb 5f pop edi

    SYMBOL_STACK_INDEX: 2

    SYMBOL_NAME: ipnat!NatCleanupDirector+7d

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: ipnat

    IMAGE_NAME: ipnat.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 415b3714

    FAILURE_BUCKET_ID: 0xc2_7_NatD_ipnat!NatCleanupDirector+7d

    BUCKET_ID: 0xc2_7_NatD_ipnat!NatCleanupDirector+7d

    Followup: MachineOwner
    ---------

    eax=ffdff13c ebx=00000c3e ecx=00000000 edx=00000002 esi=8a511088 edi=00000000
    eip=804f9f13 esp=bad17954 ebp=bad1796c iopl=0 nv up ei ng nz na pe nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
    nt!KeBugCheckEx+0x1b:
    804f9f13 5d pop ebp
    ChildEBP RetAddr Args to Child
    bad1796c 8054a583 000000c2 00000007 00000c3e nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
    bad179bc b62686eb 8a511090 00000000 bad17aac nt!ExFreePoolWithTag+0x2a3 (FPO: [Non-Fpo])
    bad179dc b62795fd 8a511090 00000000 bad17b2c ipnat!NatCleanupDirector+0x7d (FPO: [Non-Fpo])
    bad17a70 b627a5b8 00000000 00000001 bad17aac ipnat!NatpDirectPacket+0x4bf (FPO: [Non-Fpo])
    bad17ae8 b632c2b9 bad17b9c 00000000 bad17b2c ipnat!NatTranslatePacket+0x45e (FPO: [Non-Fpo])
    bad17c28 b632d5f8 b636a698 00000000 8913a2e0 tcpip!IPTransmit+0x16f2 (FPO: [Non-Fpo])
    bad17c74 b6331247 02116bb8 00000000 00000000 tcpip!SendACK+0x2d8 (FPO: [Non-Fpo])
    bad17c94 b6329a08 00000002 00000002 bad17cc0 tcpip!ProcessPerCpuTCBDelayQ+0xc6 (FPO: [Non-Fpo])
    bad17cc8 b632994f 00000002 b6329900 b63293d6 tcpip!ProcessTCBDelayQ+0xc4 (FPO: [Non-Fpo])
    bad17cd4 b63293d6 b6368b00 00000000 b63384f4 tcpip!TCPRcvComplete+0x20 (FPO: [0,0,0])
    bad17ce0 b63384f4 b636a184 b636a180 b63383ab tcpip!IPRcvComplete+0x21 (FPO: [0,0,0])
    bad17d60 baca83e4 b636a180 8a5176c0 b636a190 tcpip!LoopXmitRtn+0x1e2 (FPO: [Non-Fpo])
    bad17d7c 80537aff 8a5176c0 00000000 8a7b1640 TDI!CTEpEventHandler+0x32 (FPO: [Non-Fpo])
    bad17dac 805cea08 b636a180 00000000 00000000 nt!ExpWorkerThread+0xef (FPO: [Non-Fpo])
    bad17ddc 8054546e 80537a10 00000001 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo])
    00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
    start end module name
    804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 04:15:54 2007 (45E5484A)
    806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
    b4f10000 b4f3a180 kmixer kmixer.sys Wed Jun 14 04:47:45 2006 (448FCD31)
    b5157000 b515ab20 aswRdr aswRdr.SYS Thu Sep 06 06:03:00 2007 (46DFD054)
    b5463000 b54b4480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
    b54dd000 b551d280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
    b5546000 b5572400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
    b59fb000 b5a0f400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
    b5c68000 b5c7d680 aswMon2 aswMon2.SYS Thu Sep 06 06:05:07 2007 (46DFD0D3)
    b5d1e000 b5d333c0 DLAUDF_M DLAUDF_M.SYS Mon Nov 07 12:18:51 2005 (436F8C7B)
    b5d34000 b5d4b040 DLAUDFAM DLAUDFAM.SYS Mon Nov 07 12:19:06 2005 (436F8C8A)
    b5d4c000 b5d61240 DLAIFS_M DLAIFS_M.SYS Mon Nov 07 12:18:45 2005 (436F8C75)
    b5d9a000 b5d9d280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
    b5e42000 b5e50d80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
    b5e92000 b5e95920 DLAOPIOM DLAOPIOM.SYS Mon Nov 07 12:20:07 2005 (436F8CC7)
    b6142000 b615bb80 dump_nvatabus dump_nvatabus.sys Thu Sep 21 18:39:13 2006 (45131491)
    b6184000 b61f2a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
    b61f3000 b621da00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
    b621e000 b623fd00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
    b6240000 b6267c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    b6268000 b6288f00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
    b6329000 b6380d80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
    b6381000 b6393400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    b6400000 b6402900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    b6404000 b6425700 portcls portcls.sys Tue Mar 16 14:58:17 2004 (40574E49)
    b6426000 b687a000 RtkHDAud RtkHDAud.sys Tue Sep 12 07:26:57 2006 (45069981)
    b9acd000 b9acf280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    b9b25000 b9b7de80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
    b9ba6000 b9bd6100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
    b9bd7000 b9be7e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
    b9c88000 b9c9e680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
    b9c9f000 b9cf2000 NVSNPU NVSNPU.SYS Mon Aug 07 19:38:41 2006 (44D7CF01)
    b9cf2000 b9dffc00 NVNRM NVNRM.SYS Mon Aug 07 19:39:02 2006 (44D7CF16)
    b9e00000 b9e25000 HDAudBus HDAudBus.sys Fri Jan 07 20:07:15 2005 (41DF3243)
    b9e25000 b9e47680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    b9e48000 b9e6ae80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
    b9e6b000 b9e7e780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
    b9e7f000 ba5081e0 nv4_mini nv4_mini.sys Mon Sep 17 04:40:23 2007 (46EE3D77)
    ba58f000 ba5a9580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    ba5aa000 ba5d6a80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    ba5d7000 ba663400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
    ba664000 ba67a780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
    ba67b000 ba690440 DRVMCDB DRVMCDB.SYS Mon Sep 12 17:38:27 2005 (4325F553)
    ba691000 ba6a2f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
    ba6a3000 ba6a4000 fltMgr fltMgr.sys unavailable (00000000)
    ba6c3000 ba6da800 SCSIPORT SCSIPORT.SYS Wed Aug 04 01:59:39 2004 (41107B4B)
    ba6db000 ba6f4b80 nvatabus nvatabus.sys Thu Sep 21 18:39:13 2006 (45131491)
    ba6f5000 ba70c480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    ba70d000 ba722c80 nvraid nvraid.sys Thu Sep 21 18:39:25 2006 (4513149D)
    ba723000 ba748700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
    ba749000 ba767880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    ba768000 ba778a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
    ba779000 ba7a6d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
    ba8a8000 ba8b0c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
    ba8b8000 ba8c6e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
    ba8c8000 ba8d5000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
    ba8d8000 ba8e2500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
    ba8e8000 ba8f4200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
    ba8f8000 ba904c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
    ba908000 ba910e00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
    ba938000 ba944180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
    ba948000 ba956080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
    ba958000 ba967180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    ba968000 ba971000 nvnetbus nvnetbus.sys Mon Aug 07 19:39:23 2006 (44D7CF2B)
    ba978000 ba984880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
    ba988000 ba992200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
    ba998000 ba9a3d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
    ba9a8000 ba9b0900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
    ba9b8000 ba9c1f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
    ba9c8000 ba9d4e00 NVENETFD NVENETFD.sys Mon Aug 07 19:39:21 2006 (44D7CF29)
    ba9d8000 ba9e1480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
    baa08000 baa16100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
    baa28000 baa36b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
    baa38000 baa40360 aswTdi aswTdi.SYS Thu Sep 06 06:02:17 2007 (46DFD029)
    baa48000 baa50700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
    baa58000 baa66d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    baa68000 baa70700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
    baa78000 baa80880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
    baa98000 baaa7900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
    baab8000 baac15a0 DRVNDDM DRVNDDM.SYS Fri Aug 12 16:21:43 2005 (42FD04D7)
    baad8000 baae4000 ATITool ATITool.sys Fri Nov 10 08:08:51 2006 (455479E3)
    baae8000 baaf0d00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
    baaf8000 bab07d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
    bab08000 bab14e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    bab18000 bab22380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
    bab28000 bab2e200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
    bab30000 bab34900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
    bab38000 bab3f1c0 cercsr6 cercsr6.sys Wed Dec 08 18:31:10 2004 (41B78EBE)
    bab40000 bab44de0 PxHelp20 PxHelp20.sys Wed Jan 26 20:32:51 2005 (41F844C3)
    bab60000 bab64080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    bab80000 bab81000 flpydisk flpydisk.sys unavailable (00000000)
    bab90000 bab95860 DLARTL_N DLARTL_N.SYS Fri Nov 18 15:02:09 2005 (437E3341)
    bab98000 bab9d200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
    baba0000 baba4a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
    baba8000 babaf880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
    babb8000 babbc940 Aavmker4 Aavmker4.SYS Thu Sep 06 06:00:50 2007 (46DFCFD2)
    babc8000 babce780 USBSTOR USBSTOR.SYS Wed Aug 04 02:08:44 2004 (41107D6C)
    babd0000 babd4500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
    bac40000 bac463e0 DLABOIOM DLABOIOM.SYS Mon Nov 07 12:19:20 2005 (436F8C98)
    bac80000 bac81000 fdc fdc.sys unavailable (00000000)
    bac88000 bac8da00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bac90000 bac96000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bac98000 bac9c280 usbohci usbohci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    baca0000 baca6800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    baca8000 bacac880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
    bacb0000 bacb4580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    bacb8000 bacbb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    bad7c000 bad7fc80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
    bad88000 bad8a580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
    bada4000 bada7c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
    bada8000 bada9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    badaa000 badab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    badac000 badad000 dmload dmload.sys unavailable (00000000)
    badae000 badaf480 speedfan speedfan.sys Sun Sep 24 09:28:47 2006 (4516880F)
    badd4000 badd55e0 DLACDBHM DLACDBHM.SYS Fri Nov 18 15:02:49 2005 (437E3369)
    badd6000 badd7100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
    badd8000 badd9280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    baddc000 baddd000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
    badde000 baddf080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    bade0000 bade1080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    bade2000 bade3080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    bade4000 bade5100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    badee000 badef8a0 DLAPoolM DLAPoolM.SYS Mon Nov 07 12:18:45 2005 (436F8C75)
    bae70000 bae70d00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    bae71000 bae71680 giveio giveio.sys Wed Apr 03 22:33:25 1996 (316334F5)
    bae8f000 bae8fc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
    baf38000 baf38980 DLADResN DLADResN.SYS Mon Nov 07 12:21:56 2005 (436F8D34)
    baf87000 baf87d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    baf8d000 baf8e000 Null Null.SYS unavailable (00000000)
    bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
    bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
    bf9d5000 bff58e00 nv4_disp nv4_disp.dll Mon Sep 17 04:36:42 2007 (46EE3C9A)
    bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)

    Unloaded modules:
    b4f10000 b4f3b000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b590d000 b5938000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    baf36000 baf37000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5ae0000 b5aed000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5af0000 b5afe000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b59d8000 b59fb000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bae24000 bae26000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b550a000 b551e000 Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bab88000 bab8d000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9ad1000 b9ad4000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  10. 2007/11/25
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    Q56 Monster, I will try and help if I can.

    The file ipnat.sys keeps reappearing and more specifically, "NatCleanupDirector ".

    As I asked before, what is the setup of your internet connection, eg, Broadband, Cable, Wireless, Dialup? Does it have a router? Do you use anything to modify the connection like VNP (Very Private Networking) or ICS (Internet Connection Sharing)?

    MS says it is the firewall "driver ". There is no possibility of more than one firewall running?

    "CleanupDirector ", I might wonder that a program cannot be released from it's connection to the internet. Investigate possible viruses/trojans and spyware...by using up-to-date checking programs, using an online virus checker or occasionally running a second spyware checker. If you are running downloading programs, they may be holding a port open (one of my "maybes ").

    Depending on if any of these things apply, I would try running a different firewall. Try Zonealarm
    http://www.majorgeeks.com/ZoneAlarm_Free_d388.html
    It will disable Window's Firewall and inform you of what programs are trying to connect to the internet.

    You have not mentioned anything about your internet connection, so I am only guessing. These are the areas I would investigate.

    Hardware drivers, I don't think so, but look at updating or reinstalling drivers for hardware that connects to the internet. Is there software that is associated with those pieces of hardware?

    A Windows Update?

    Do you use a security suite? Look for updates and possibly, uninstalling it as a test.

    The dumps appear to identify the firewall as the cause. Start there and work backwards.

    Matt
     
  11. 2007/11/25
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    Thanks, Matmann. My Internet is a DSL PPoE with a router.

    I will go through your process above.

    One question though. Could a hard drive be interfering with the ipnat.sys, or firewall. I ask because after having multiple BSOD last night, I just disconnected my old IDE drive, and then no more BSOD. (of course it's too early to tell, but even windows starts in about 7 seconds V. 45+ with that drive connected)

    Do you think the HD and the BSOD could be related?
     
  12. 2007/11/25
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    Certainly it might seem like it. If the drive was partitioned on a different computer (your old computer?) it might be the cause.

    You can run Error Checking (chkdsk) on the drive (each partition), but I would consider backing-up the data and using Windows disk manager or the HDD manufacturer's setup utilities to remove the partitions and rebuild them.

    Another option might be to get an IDE drive USB external enclosure, but there may still be errors in the boot sector (MBR) of that HDD.

    That would be my course of action. I would not pussy-foot around very much trying to find out why the drive is not working correctly on your system. I would wipe it and "remake" it.

    Matt
    Edit: When I setup a HDD I prefer to remove (disconnect) any other HDDs in the system. I, personally, avoid partitioning a HDD as an extended partition of any other HDD. You might be offered the option of partitioning it as an extended partition using Windows disk manager.
     
    Last edited: 2007/11/25
  13. 2007/11/25
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0

    Yes, my IDE drive was partitioned in another computer, although I did reformat it, which I know is not that same as starting over and rebuilding it.

    Well, the BSOD blues continue. It seams the BAD_POOL_CALLER is gone (I hope), but a new one popped up today (IRQL_NOT_LESS_OR_EQUAL). Says my Avast antivirus program is the culprit. I got rid of avast and am running AVG now.


    I've been getting the bad_pool_caller since I built this computer 1 month ago. This is the first time I got the IRQL_NOT_LESS_OR_EQUAL error

    Here's the dump:

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini112507-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_qfe.070227-2300
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Sun Nov 25 15:30:50.546 2007 (GMT-5)
    System Uptime: 0 days 3:04:48.165
    Loading Kernel Symbols
    ....................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    .............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000000A, {c7a0027c, 2, 0, 8050eaa6}

    *** ERROR: Module load completed but symbols could not be loaded for aswMon2.SYS


    Probably caused by : aswMon2.SYS ( aswMon2+6a1e )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: c7a0027c, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: 8050eaa6, address which referenced memory

    Debugging Details:
    ------------------




    READ_ADDRESS: c7a0027c

    CURRENT_IRQL: 2

    FAULTING_IP:
    nt!MmPurgeSection+318
    8050eaa6 8b4e14 mov ecx,dword ptr [esi+14h]

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xA

    PROCESS_NAME: firefox.exe

    LAST_CONTROL_TRANSFER: from 804e5e28 to 8050eaa6

    STACK_TEXT:
    b535e510 804e5e28 8926b900 01000000 e1538050 nt!MmPurgeSection+0x318
    b535e53c 804e6152 8926b97c b535e5d0 00000000 nt!CcPurgeCacheSection+0x100
    b535e59c 804e63a9 8912fed0 b535e5d0 ffffffff nt!CcPurgeAndClearCacheSection+0x118
    b535e5dc ba5da7cc 00000000 005e7558 ba5eeee0 nt!CcSetFileSizes+0x249
    b535e604 ba606a25 893a57a8 e15e7558 e15e7548 Ntfs!NtfsSetBothCacheSizes+0x71
    b535e668 ba60fbce b535ea3c 893a57a8 00000002 Ntfs!NtfsDeleteAllocation+0x380
    b535e6d8 ba60fc76 b535ea3c e15e7480 b535e780 Ntfs!NtfsDeleteAllocationFromRecord+0x15a
    b535e804 ba60ee79 b535ea3c e15e7480 e37b4638 Ntfs!NtfsDeleteFile+0x245
    b535ea20 ba5fcb4d b535ea3c 8ad4ee28 8a710020 Ntfs!NtfsCommonCleanup+0x1212
    b535eb98 804ef163 8a710020 8ad4ee28 806e4428 Ntfs!NtfsFsdCleanup+0xcf
    b535eba8 80656128 8a74ba08 8a75fd68 8ad4ee28 nt!IopfCallDriver+0x31
    b535ebcc ba695bbf 8a74b950 8ad4ee00 b535ec10 nt!IovCallDriver+0xa0
    b535ebdc 804ef163 8a74b950 e12c0870 806e4428 sr!SrCleanup+0xb3
    b535ebec 80656128 8ad4efdc 00000000 8ad4ee28 nt!IopfCallDriver+0x31
    b535ec10 b5bcea1e 8942a020 897dd900 8ad4ee00 nt!IovCallDriver+0xa0
    WARNING: Stack unwind information not available. Following frames may be wrong.
    b535ec34 b5bc883c 8942a020 00d4ee28 804ef163 aswMon2+0x6a1e
    b535ec74 8058273b 893f94e8 8a7d6ca0 00000001 aswMon2+0x83c
    b535eca4 805bb59f 8956d020 8942a020 00010080 nt!IopCloseFile+0x26b
    b535ecd4 805baef1 8956d020 013f94e8 8a7d6ca0 nt!ObpDecrementHandleCount+0x11b
    b535ecfc 805baf8f e16317b0 893f9500 0000032c nt!ObpCloseHandleTableEntry+0x14d
    b535ed44 805bb0c7 0000032c 00000001 00000000 nt!ObpCloseHandle+0x87
    b535ed58 805409ac 0000032c 02edfe38 7c90eb94 nt!NtClose+0x1d
    b535ed58 7c90eb94 0000032c 02edfe38 7c90eb94 nt!KiFastCallEntry+0xfc
    02edfe38 00000000 00000000 00000000 00000000 0x7c90eb94


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    aswMon2+6a1e
    b5bcea1e eb22 jmp aswMon2+0x6a42 (b5bcea42)

    SYMBOL_STACK_INDEX: f

    SYMBOL_NAME: aswMon2+6a1e

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: aswMon2

    IMAGE_NAME: aswMon2.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 46dfd0d3

    FAILURE_BUCKET_ID: 0xA_aswMon2+6a1e

    BUCKET_ID: 0xA_aswMon2+6a1e

    Followup: MachineOwner
    ---------

    eax=000b50aa ebx=891499a8 ecx=00000000 edx=00016a0a esi=c7a00268 edi=891499d8
    eip=8050eaa6 esp=b535e4d8 ebp=b535e510 iopl=0 nv up ei pl nz na pe cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010207
    nt!MmPurgeSection+0x318:
    8050eaa6 8b4e14 mov ecx,dword ptr [esi+14h] ds:0023:c7a0027c=????????
    ChildEBP RetAddr Args to Child
    b535e510 804e5e28 8926b900 01000000 e1538050 nt!MmPurgeSection+0x318 (FPO: [Non-Fpo])
    b535e53c 804e6152 8926b97c b535e5d0 00000000 nt!CcPurgeCacheSection+0x100 (FPO: [Non-Fpo])
    b535e59c 804e63a9 8912fed0 b535e5d0 ffffffff nt!CcPurgeAndClearCacheSection+0x118 (FPO: [Non-Fpo])
    b535e5dc ba5da7cc 00000000 005e7558 ba5eeee0 nt!CcSetFileSizes+0x249 (FPO: [Non-Fpo])
    b535e604 ba606a25 893a57a8 e15e7558 e15e7548 Ntfs!NtfsSetBothCacheSizes+0x71 (FPO: [Non-Fpo])
    b535e668 ba60fbce b535ea3c 893a57a8 00000002 Ntfs!NtfsDeleteAllocation+0x380 (FPO: [Non-Fpo])
    b535e6d8 ba60fc76 b535ea3c e15e7480 b535e780 Ntfs!NtfsDeleteAllocationFromRecord+0x15a (FPO: [Non-Fpo])
    b535e804 ba60ee79 b535ea3c e15e7480 e37b4638 Ntfs!NtfsDeleteFile+0x245 (FPO: [Non-Fpo])
    b535ea20 ba5fcb4d b535ea3c 8ad4ee28 8a710020 Ntfs!NtfsCommonCleanup+0x1212 (FPO: [Non-Fpo])
    b535eb98 804ef163 8a710020 8ad4ee28 806e4428 Ntfs!NtfsFsdCleanup+0xcf (FPO: [Non-Fpo])
    b535eba8 80656128 8a74ba08 8a75fd68 8ad4ee28 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    b535ebcc ba695bbf 8a74b950 8ad4ee00 b535ec10 nt!IovCallDriver+0xa0 (FPO: [Non-Fpo])
    b535ebdc 804ef163 8a74b950 e12c0870 806e4428 sr!SrCleanup+0xb3 (FPO: [Non-Fpo])
    b535ebec 80656128 8ad4efdc 00000000 8ad4ee28 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
    b535ec10 b5bcea1e 8942a020 897dd900 8ad4ee00 nt!IovCallDriver+0xa0 (FPO: [Non-Fpo])
    WARNING: Stack unwind information not available. Following frames may be wrong.
    b535ec34 b5bc883c 8942a020 00d4ee28 804ef163 aswMon2+0x6a1e
    b535ec74 8058273b 893f94e8 8a7d6ca0 00000001 aswMon2+0x83c
    b535eca4 805bb59f 8956d020 8942a020 00010080 nt!IopCloseFile+0x26b (FPO: [Non-Fpo])
    b535ecd4 805baef1 8956d020 013f94e8 8a7d6ca0 nt!ObpDecrementHandleCount+0x11b (FPO: [Non-Fpo])
    b535ecfc 805baf8f e16317b0 893f9500 0000032c nt!ObpCloseHandleTableEntry+0x14d (FPO: [Non-Fpo])
    start end module name
    804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 04:15:54 2007 (45E5484A)
    806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
    b5153000 b5156b20 aswRdr aswRdr.SYS Thu Sep 06 06:03:00 2007 (46DFD054)
    b548b000 b54dc480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
    b5505000 b5545280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
    b5596000 b55c2400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
    b5933000 b5947400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
    b5bc8000 b5bdd680 aswMon2 aswMon2.SYS Thu Sep 06 06:05:07 2007 (46DFD0D3)
    b5d1e000 b5d333c0 DLAUDF_M DLAUDF_M.SYS Mon Nov 07 12:18:51 2005 (436F8C7B)
    b5d34000 b5d4b040 DLAUDFAM DLAUDFAM.SYS Mon Nov 07 12:19:06 2005 (436F8C8A)
    b5d4c000 b5d61240 DLAIFS_M DLAIFS_M.SYS Mon Nov 07 12:18:45 2005 (436F8C75)
    b5d82000 b5d85280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
    b5e7a000 b5e7d920 DLAOPIOM DLAOPIOM.SYS Mon Nov 07 12:20:07 2005 (436F8CC7)
    b6142000 b615bb80 dump_nvatabus dump_nvatabus.sys Thu Sep 21 18:39:13 2006 (45131491)
    b6184000 b61f2a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
    b61f3000 b621da00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
    b621e000 b623fd00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
    b6240000 b6267c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    b6268000 b6288f00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
    b6299000 b62a7d80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
    b6329000 b6380d80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
    b6381000 b6393400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    b63dc000 b63fd700 portcls portcls.sys Tue Mar 16 14:58:17 2004 (40574E49)
    b6406000 b6408900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    b6426000 b687a000 RtkHDAud RtkHDAud.sys Tue Sep 12 07:26:57 2006 (45069981)
    b9acd000 b9acf280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    b9b25000 b9b7de80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
    b9ba6000 b9bd6100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
    b9bd7000 b9be7e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
    b9c78000 b9c87900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
    b9c88000 b9c9e680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
    b9c9f000 b9cf2000 NVSNPU NVSNPU.SYS Mon Aug 07 19:38:41 2006 (44D7CF01)
    b9cf2000 b9dffc00 NVNRM NVNRM.SYS Mon Aug 07 19:39:02 2006 (44D7CF16)
    b9e00000 b9e25000 HDAudBus HDAudBus.sys Fri Jan 07 20:07:15 2005 (41DF3243)
    b9e25000 b9e47680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    b9e48000 b9e6ae80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
    b9e6b000 b9e7e780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
    b9e7f000 ba5081e0 nv4_mini nv4_mini.sys Mon Sep 17 04:40:23 2007 (46EE3D77)
    ba557000 ba55ac80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
    ba58f000 ba5a9580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    ba5aa000 ba5d6a80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    ba5d7000 ba663400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
    ba664000 ba67a780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
    ba67b000 ba690440 DRVMCDB DRVMCDB.SYS Mon Sep 12 17:38:27 2005 (4325F553)
    ba691000 ba6a2f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
    ba6a3000 ba6a4000 fltMgr fltMgr.sys unavailable (00000000)
    ba6c3000 ba6da800 SCSIPORT SCSIPORT.SYS Wed Aug 04 01:59:39 2004 (41107B4B)
    ba6db000 ba6f4b80 nvatabus nvatabus.sys Thu Sep 21 18:39:13 2006 (45131491)
    ba6f5000 ba70c480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    ba70d000 ba722c80 nvraid nvraid.sys Thu Sep 21 18:39:25 2006 (4513149D)
    ba723000 ba748700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
    ba749000 ba767880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    ba768000 ba778a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
    ba779000 ba7a6d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
    ba8a8000 ba8b0c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
    ba8b8000 ba8c6e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
    ba8c8000 ba8d5000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
    ba8d8000 ba8e2500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
    ba8e8000 ba8f4200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
    ba8f8000 ba904c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
    ba908000 ba910e00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
    ba948000 ba956b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
    ba958000 ba960360 aswTdi aswTdi.SYS Thu Sep 06 06:02:17 2007 (46DFD029)
    ba968000 ba970700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
    ba978000 ba986d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    ba988000 ba990700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
    ba998000 ba9a0880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
    ba9b8000 ba9c15a0 DRVNDDM DRVNDDM.SYS Fri Aug 12 16:21:43 2005 (42FD04D7)
    ba9f8000 baa04000 ATITool ATITool.sys Fri Nov 10 08:08:51 2006 (455479E3)
    baa08000 baa10d00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
    baa18000 baa27d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
    baa28000 baa34e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    baa38000 baa42380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
    baa48000 baa54180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
    baa58000 baa66080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
    baa68000 baa77180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    baa78000 baa81000 nvnetbus nvnetbus.sys Mon Aug 07 19:39:23 2006 (44D7CF2B)
    baa88000 baa94880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
    baa98000 baaa2200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
    baaa8000 baab3d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
    baab8000 baac0900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
    baac8000 baad1f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
    baad8000 baae4e00 NVENETFD NVENETFD.sys Mon Aug 07 19:39:21 2006 (44D7CF29)
    baae8000 baaf1480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
    bab18000 bab26100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
    bab28000 bab2e200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
    bab30000 bab34900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
    bab38000 bab3f1c0 cercsr6 cercsr6.sys Wed Dec 08 18:31:10 2004 (41B78EBE)
    bab40000 bab44de0 PxHelp20 PxHelp20.sys Wed Jan 26 20:32:51 2005 (41F844C3)
    bab60000 bab64280 usbohci usbohci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    bab80000 bab84580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    bab90000 bab94080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    baba0000 baba6800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    babc8000 babcc940 Aavmker4 Aavmker4.SYS Thu Sep 06 06:00:50 2007 (46DFCFD2)
    babe8000 babee500 usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)
    bac28000 bac29000 flpydisk flpydisk.sys unavailable (00000000)
    bac30000 bac35860 DLARTL_N DLARTL_N.SYS Fri Nov 18 15:02:09 2005 (437E3341)
    bac38000 bac3d200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
    bac48000 bac4ca80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
    bac58000 bac5f880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
    bac60000 bac66780 USBSTOR USBSTOR.SYS Wed Aug 04 02:08:44 2004 (41107D6C)
    bac78000 bac7c500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
    bac80000 bac863e0 DLABOIOM DLABOIOM.SYS Mon Nov 07 12:19:20 2005 (436F8C98)
    bac88000 bac89000 fdc fdc.sys unavailable (00000000)
    bac90000 bac94880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
    baca0000 baca5a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    baca8000 bacae000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bacb8000 bacbb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    bad64000 bad67c80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
    bad94000 bad96580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
    bada8000 bada9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    badaa000 badab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    badac000 badad000 dmload dmload.sys unavailable (00000000)
    badae000 badaf480 speedfan speedfan.sys Sun Sep 24 09:28:47 2006 (4516880F)
    badb4000 badb55e0 DLACDBHM DLACDBHM.SYS Fri Nov 18 15:02:49 2005 (437E3369)
    badbe000 badbf100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
    badc4000 badc5280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    badcc000 badcd000 Fs_Rec Fs_Rec.SYS unavailable (00000000)
    badd0000 badd1080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    badd4000 badd5080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    badd8000 badd9080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    bade0000 bade1100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    bae08000 bae098a0 DLAPoolM DLAPoolM.SYS Mon Nov 07 12:18:45 2005 (436F8C75)
    bae70000 bae70d00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    bae71000 bae71680 giveio giveio.sys Wed Apr 03 22:33:25 1996 (316334F5)
    baeef000 baeefc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
    baf4f000 baf50000 Null Null.SYS unavailable (00000000)
    baf7f000 baf7fd00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    bafcc000 bafcc980 DLADResN DLADResN.SYS Mon Nov 07 12:21:56 2005 (436F8D34)
    bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
    bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
    bf9d5000 bff58e00 nv4_disp nv4_disp.dll Mon Sep 17 04:36:42 2007 (46EE3C9A)
    bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)

    Unloaded modules:
    b4e70000 b4e9b000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b4e70000 b4e9b000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b4e70000 b4e9b000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    babe0000 babe7000 USBSTOR.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b58e5000 b5910000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bafd3000 bafd4000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b59d0000 b59dd000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5910000 b5933000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b59f0000 b59fe000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    badda000 baddc000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b555a000 b556e000 Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bac18000 bac1d000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9ad5000 b9ad8000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  14. 2007/11/25
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    A change in the error, one month old. I think the main consensus would be to investigate RAM.

    Gigabyte will have a compatible RAM list for the motherboard. The RAM manufacturer should have a listing of compatible RAM for that model of motherboard. The main thing to do though, will be to test the modules in different slots. Read the motherboard manual carefully about where it suggests the modules should be placed (sometimes I need to look at the configuration charts quite carefully). At least swap the modules if you are sure they are in the right location.

    I have an old Asus m/b which is very fussy about RAM. It will not use a lot brands. I moved the modules and started getting BSODs, it was not happy until I returned them to their original location (just a note, it was crashing on Firefox like that last dump). It is as solid as a rock when the modules are in the right location.

    Do a check of temperatures and voltages in the BIOS/Startup configuration (say a restart after some intensive activity), but keep the RAM as the main point to investigate.

    It may have some problem with the IDE controller or allocating resources, but you will need to check the basics first.

    Happy checking :)

    Matt
     
  15. 2007/11/29
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    Well, I seemed to have solved the BSOD issues by replacing my RAM. Thanks Mattman for focusing me towards testing the RAM. Eventhough memtest 86 and MS's mem tester showed no errors on many hours of testing, i replaced it anyway, and now NO MORE BSOD! Yea.
     
  16. 2007/11/29
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    Thanks for letting us know. I was only going by what the more experienced members usually recommend.
    :)
    Matt
     
  17. 2007/12/05
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    Well...I spoke too soon. After a few days of no BSOD (after I replaced my RAM), the BSOD's have returned. I'm now getting one a day. Every one of them I got when surfing the net, and almost all of them relate to bad_pool_caller and the ipnat.sys file.

    The minidump is below.

    But here is what I have done to try to troubleshoot the problem myself:

    1) Replaced RAM. I now have cruc**l ram pc6400 running at manuf. specs of 800Mhz, 4-4-4-12 2T timing @ 2.2V. I also let the mobo auto detect timings, still BSOD. I used to run 8500 ram @ 1066 Mhz 5-5-5-15 2T and got BSOD more frequently. I ran Memtest and windows memory tester on both sets of ram for many hours with 0 errors.
    2) Clean XP pro install (5 times!!!!, no kidding) I'm an expert at this now. Deleted the partition on C:, and reformatted (not quick format). Made sure to load latest mobo drivers first (nvidia), which establishes an internet connection, then do ALL critical windows updates before installing anything else. Then install latest vid card driver, antivirus (avast), mobo audio driver, and then all my apps.
    3) As stated in #2 above I installed the most recent drivers for everything, except the RAID drivers that came on floppy disk with the mobo. My system drive (C:\) is non-raid, but i do have a mirroring raid(1) for backup.
    4) Disconnected DVD drives, and old IDE HD. Still BSOD. Have not disconnected my RAID drive yet.
    5) Have most recent IE V7, and firefox V.2.xxxxxx11. Crashes on both of them, and I get the message "IE (or firfox) has experienced a problem and needs to close" ALL THE TIME! The only browser add-ons I have installed is the latest adobe flash player.
    6) I'm not overclocked on the CPU, RAM, or video card.
    7) On a hunch, disabled HPET function in BIOS (Has something to to with hardware timing instructions) still BSOD.
    8) Flashed to the latest BIOS for my motherboard.
    9) I can run cpu stress tests (prime95) overnight for 8 or more hours (non-overclocked) with no problem
    10) CPU temps idle are 27C-32C on my quad core. Load at avg. 55C. Vid card, and chipset temps are in normal (low) range for manufacturer.


    Other than disconnecting my remaining raid drive and video card, I don't know what to do next!

    Anyway, here's the dump. this is the first time this one has come up. Any thoughts would be appreciated.

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini120507-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
    Windows XP Kernel Version 2600 (Service Pack 2) MP (4 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.070227-2254
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
    Debug session time: Wed Dec 5 19:20:57.640 2007 (GMT-5)
    System Uptime: 0 days 0:01:10.250
    Loading Kernel Symbols
    ......................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    .........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 8054a10d, b57b983c, 0}



    Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+107 )

    Followup: Pool_corruption
    ---------

    2: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 8054a10d, The address that the exception occurred at
    Arg3: b57b983c, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------




    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

    FAULTING_IP:
    nt!ExDeferredFreePool+107
    8054a10d 893b mov dword ptr [ebx],edi

    TRAP_FRAME: b57b983c -- (.trap 0xffffffffb57b983c)
    .trap 0xffffffffb57b983c
    ErrCode = 00000002
    eax=e1338000 ebx=00000000 ecx=000001ff edx=e1338998 esi=89de2078 edi=00000000
    eip=8054a10d esp=b57b98b0 ebp=b57b98f0 iopl=0 nv up ei ng nz ac pe cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
    nt!ExDeferredFreePool+0x107:
    8054a10d 893b mov dword ptr [ebx],edi ds:0023:00000000=????????
    .trap
    Resetting default scope

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x8E

    PROCESS_NAME: wuauclt.exe

    LAST_CONTROL_TRANSFER: from 8054a75f to 8054a10d

    STACK_TEXT:
    b57b98f0 8054a75f 00000001 89ddd080 89aba260 nt!ExDeferredFreePool+0x107
    b57b9930 805be860 e2b63e48 00000000 b57b996c nt!ExFreePoolWithTag+0x47f
    b57b9940 805bec4f e2b63e48 b57b9901 00000000 nt!ObReleaseObjectSecurity+0x1a
    b57b996c 8062d014 e2c91bb0 89aba260 00000001 nt!ObCheckObjectAccess+0xd3
    b57b99b8 8062d892 e1bee350 00847128 00000000 nt!CmpDoOpen+0x256
    b57b9bb0 805bd99d 00847128 00000000 89aba260 nt!CmpParseKey+0x558
    b57b9c28 805ba448 00000028 b57b9c68 00000040 nt!ObpLookupObjectName+0x119
    b57b9c7c 80623649 00000000 89ddd040 805baf01 nt!ObOpenObjectByName+0xea
    b57b9d50 8054086c 0007f6a4 00020019 0007f60c nt!NtOpenKey+0x1af
    b57b9d50 7c90eb94 0007f6a4 00020019 0007f60c nt!KiFastCallEntry+0xfc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    0007f64c 00000000 00000000 00000000 00000000 0x7c90eb94


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!ExDeferredFreePool+107
    8054a10d 893b mov dword ptr [ebx],edi

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!ExDeferredFreePool+107

    FOLLOWUP_NAME: Pool_corruption

    IMAGE_NAME: Pool_Corruption

    DEBUG_FLR_IMAGE_TIMESTAMP: 0

    MODULE_NAME: Pool_Corruption

    FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107

    BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107

    Followup: Pool_corruption
    ---------

    eax=e1338000 ebx=00000000 ecx=000001ff edx=e1338998 esi=89de2078 edi=00000000
    eip=8054a10d esp=b57b98b0 ebp=b57b98f0 iopl=0 nv up ei ng nz ac pe cy
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
    nt!ExDeferredFreePool+0x107:
    8054a10d 893b mov dword ptr [ebx],edi ds:0023:00000000=????????
    ChildEBP RetAddr Args to Child
    b57b98f0 8054a75f 00000001 89ddd080 89aba260 nt!ExDeferredFreePool+0x107 (FPO: [Non-Fpo])
    b57b9930 805be860 e2b63e48 00000000 b57b996c nt!ExFreePoolWithTag+0x47f (FPO: [Non-Fpo])
    b57b9940 805bec4f e2b63e48 b57b9901 00000000 nt!ObReleaseObjectSecurity+0x1a (FPO: [Non-Fpo])
    b57b996c 8062d014 e2c91bb0 89aba260 00000001 nt!ObCheckObjectAccess+0xd3 (FPO: [Non-Fpo])
    b57b99b8 8062d892 e1bee350 00847128 00000000 nt!CmpDoOpen+0x256 (FPO: [Non-Fpo])
    b57b9bb0 805bd99d 00847128 00000000 89aba260 nt!CmpParseKey+0x558 (FPO: [Non-Fpo])
    b57b9c28 805ba448 00000028 b57b9c68 00000040 nt!ObpLookupObjectName+0x119 (FPO: [Non-Fpo])
    b57b9c7c 80623649 00000000 89ddd040 805baf01 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
    b57b9d50 8054086c 0007f6a4 00020019 0007f60c nt!NtOpenKey+0x1af (FPO: [Non-Fpo])
    b57b9d50 7c90eb94 0007f6a4 00020019 0007f60c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b57b9d64)
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    0007f64c 00000000 00000000 00000000 00000000 0x7c90eb94
    start end module name
    804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 03:38:53 2007 (45E53F9D)
    806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
    b530a000 b534a280 HTTP HTTP.sys Thu Mar 16 20:33:09 2006 (441A03C5)
    b5433000 b5436b20 aswRdr aswRdr.SYS Thu Sep 06 06:03:00 2007 (46DFD054)
    b55f3000 b5644480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
    b56bd000 b56e9400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
    b5a5a000 b5a6e400 wdmaud wdmaud.sys Wed Jun 14 05:00:44 2006 (448FD03C)
    b5cc7000 b5cdc680 aswMon2 aswMon2.SYS Thu Sep 06 06:05:07 2007 (46DFD0D3)
    b5d99000 b5d9c280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
    b5de5000 b5df3d80 sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
    b6135000 b614eb80 dump_nvatabus dump_nvatabus.sys Mon Aug 21 21:24:25 2006 (44EA5CC9)
    b6177000 b61e5a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
    b61e6000 b6210a00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
    b6211000 b6232d00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
    b6233000 b625ac00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    b625b000 b627bf00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
    b631c000 b6373d80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
    b6374000 b6386400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    b63cf000 b63f0700 portcls portcls.sys Tue Mar 16 14:58:17 2004 (40574E49)
    b63f1000 b6845000 RtkHDAud RtkHDAud.sys Tue Sep 12 07:26:57 2006 (45069981)
    b6855000 b6857900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
    b9af4000 b9af6280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
    b9b18000 b9b70e80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
    b9b99000 b9bc9100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
    b9bca000 b9bdae00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
    b9c5b000 b9c6a900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
    b9c7b000 b9c91680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
    b9c92000 b9ce5000 NVSNPU NVSNPU.SYS Mon Aug 07 19:38:41 2006 (44D7CF01)
    b9ce5000 b9df2c00 NVNRM NVNRM.SYS Mon Aug 07 19:39:02 2006 (44D7CF16)
    b9e14000 b9e39000 HDAudBus HDAudBus.sys Fri Jan 07 20:07:15 2005 (41DF3243)
    b9e39000 b9e5b680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    b9e5c000 b9e7ee80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
    b9e7f000 b9e92780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
    b9e93000 ba51c740 nv4_mini nv4_mini.sys Thu Oct 04 20:47:27 2007 (4705899F)
    ba5a3000 ba5bd580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
    ba5be000 ba5eaa80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
    ba5eb000 ba677400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
    ba678000 ba68e780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
    ba68f000 ba6a0f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
    ba6a1000 ba6c0780 fltMgr fltMgr.sys Mon Aug 21 05:14:57 2006 (44E97991)
    ba6c1000 ba6dab80 nvatabus nvatabus.sys Mon Aug 21 21:24:25 2006 (44EA5CC9)
    ba6db000 ba6f4b80 nvata nvata.sys Thu Sep 21 18:39:13 2006 (45131491)
    ba6f5000 ba70c480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
    ba70d000 ba722d00 nvraid nvraid.sys Mon Aug 21 21:24:33 2006 (44EA5CD1)
    ba723000 ba748700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
    ba749000 ba767880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
    ba768000 ba778a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
    ba779000 ba7a6d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
    ba8a8000 ba8b0c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
    ba8b8000 ba8c6e80 ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)
    ba8c8000 ba8d5000 1394BUS 1394BUS.SYS Wed Aug 04 02:10:03 2004 (41107DBB)
    ba8d8000 ba8e2500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
    ba8e8000 ba8f4200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
    ba8f8000 ba904c80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
    ba908000 ba910e00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
    ba938000 ba943d00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
    ba948000 ba950900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
    ba958000 ba961f00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
    ba968000 ba974e00 NVENETFD NVENETFD.sys Mon Aug 07 19:39:21 2006 (44D7CF29)
    ba978000 ba981480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
    ba9b8000 ba9c6100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
    ba9d8000 ba9e6b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
    ba9e8000 ba9f0360 aswTdi aswTdi.SYS Thu Sep 06 06:02:17 2007 (46DFD029)
    ba9f8000 baa00700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
    baa08000 baa10700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
    baa18000 baa26d80 arp1394 arp1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    baa28000 baa30880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
    baa78000 baa87180 nic1394 nic1394.sys Wed Aug 04 01:58:28 2004 (41107B04)
    baa88000 baa94000 ATITool ATITool.sys Fri Nov 10 08:08:51 2006 (455479E3)
    baa98000 baaa0d00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
    baaa8000 baab7d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
    baab8000 baac4e00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
    baac8000 baad2380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
    baad8000 baae4180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
    baae8000 baaf6080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
    baaf8000 bab01000 nvnetbus nvnetbus.sys Mon Aug 07 19:39:23 2006 (44D7CF2B)
    bab08000 bab14880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
    bab18000 bab22200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
    bab28000 bab2e200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
    bab30000 bab34900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
    bab70000 bab74940 Aavmker4 Aavmker4.SYS Thu Sep 06 06:00:50 2007 (46DFCFD2)
    bab78000 bab7e500 usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)
    bab88000 bab8c500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
    babd0000 babd7000 ALSysIO ALSysIO.sys Sun Apr 15 11:16:06 2007 (462241B6)
    bac48000 bac49000 fdc fdc.sys unavailable (00000000)
    bac50000 bac55a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bac58000 bac5e000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
    bac60000 bac64280 usbohci usbohci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    bac68000 bac6e800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
    bac70000 bac74880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
    bac78000 bac7c580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
    bac80000 bac84080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
    bac88000 bac8d000 flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
    bac98000 bac9d200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
    baca0000 baca4a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
    baca8000 bacaf880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
    bacb8000 bacbb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
    bad78000 bad7bc80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
    bad84000 bad86580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
    bada0000 bada3c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
    bada8000 bada9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
    badaa000 badab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    badac000 badad700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
    badae000 badaf480 speedfan speedfan.sys Sun Sep 24 09:28:47 2006 (4516880F)
    badb8000 badb9100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
    badbe000 badbf280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
    badc4000 badc5f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
    badc6000 badc7080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
    badc8000 badc9080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
    badca000 badcb080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
    badd2000 badd3100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
    bae70000 bae70d00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
    bae71000 bae71680 giveio giveio.sys Wed Apr 03 22:33:25 1996 (316334F5)
    baf2a000 baf2ac00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
    bafa4000 bafa4d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
    baff0000 baff0b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
    bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
    bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
    bf9d5000 bff58f80 nv4_disp nv4_disp.dll Thu Oct 04 20:44:01 2007 (470588D1)

    Unloaded modules:
    b596c000 b5997000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    baf15000 baf16000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5b27000 b5b34000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5c8f000 b5c9d000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5a37000 b5a5a000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bae44000 bae46000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b5681000 b5695000 Parport.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    bac90000 bac95000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    b9af8000 b9afb000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
     
  18. 2007/12/06
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    There's a way to get more info, but is tricky & can cause a lot of problems.

    As posted by JoeHobart
     
  19. 2007/12/06
    mattman

    mattman Inactive Alumni

    Joined:
    2002/06/10
    Messages:
    8,198
    Likes Received:
    63
    Maybe I am silly continuing to suggest the firewall/router, but that's what I would investigate.

    If you read the information about the router, you will probably find it has a reset. I would reset it. (Look for a small hole into which you can push a straightened paper-clip, but read the manual/instructions.)

    If the router has NAT, you can turn your software firewall off, that will take care of ipnat.sys.
    http://www.melbpc.org.au/pcupdate/2412/2412article4.htm
    Edit: look for similar information at your ISP's website.

    You may need to teach yourself about your router or ask in the Networking forum.
    http://www.dslreports.com/faq/security/3._NAT_Routers#4640

    Matt
     
    Last edited: 2007/12/06
  20. 2007/12/11
    Q56 Monster

    Q56 Monster Inactive Thread Starter

    Joined:
    2007/11/21
    Messages:
    18
    Likes Received:
    0
    I switched out my regular router for a VPN router I had at work. I reset it just to make sure. I've been away for some time, so I'll let you know what happens. Thank you for your continued help!
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.