BSOD on Windows XP Shutdown

Hi everyone,
My first post so here goes.

I have a customers computer which on shutdown of windows xp pro will come up with a BSOD. (99.9% of shutdowns).

with error code:

PAGE_FAULT-IN_NONPAGED_AREA
Stop 0x00000050 (0xff00fff8, 0x00000000, 0x80543e1d, 0x00000000)

with all the other usual writing, no file names or anything else.
Same memory address each time.

So far I have:
- Installed ALL latest windows updates,
- Installed adaware, spybot, cwshredder and run full system scans.
- Ran a online symantec virus scan.
- Ran a full system scan with AVG antivirus.
- Ran Norton System Works - Windows Tools
- Ran Microsoft Windows Memory Diagnostics program.
- Replaced memory
- Ran system with memory out of a fully working PC.
- Cleaned dust out of PC
- Disabled ALL Startup items.
- Ran Disk Cleanup
- Updated BIOS to latest available

The system is:
Gigabyte GA-K8VT890-9 Mainboard
2 x 200GB Seagate SATA HDD in RAID (Mirrored)
AMD Athlon 3200+ (939)
2 x 512 MB DDR Memory
GeForce 6600 PCI Express Graphic Card
Windows XP Professional SP2

any help much appreciated.
Kind Regards
Chris




What I have found so far with this problem.
When windows xp is started, if you work on the computer without opening up a web page or checking email and then shut the computer down, the BSOD doesnt come up. If you start the computer, browse the internet, shut down all your programs and then shutdown windows this BSOD mentioned above comes up.

I have installed latest network drivers, as the computer is connected to broadband via ethernet. and problem is still occuring.
have also run the windows xp winsock fix program as well, but still hasn't solved the problem.
I have also installed a new ethernet card, but continue to get same error.


I have sourced the dump files from the customer, if someone would be so kind as to see if they can find a solution.

Last 4 dump files
http://users.on.net/~cadmed/dumps/Mini050707-01.dmp
http://users.on.net/~cadmed/dumps/Mini050707-02.dmp
http://users.on.net/~cadmed/dumps/Mini050707-03.dmp
http://users.on.net/~cadmed/dumps/Mini050807-01.dmp

 

[SIZE= "4"]CONTENTS OF DUMP FILE - Mini050707-01.dmp[/SIZE]Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\dumps\Mini050707-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
Debug session time: Sun May 6 17:08:07.562 2007 (GMT+10)
System Uptime: 0 days 0:23:42.161
Loading Kernel Symbols
..........................................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {ff00fff8, 0, 80543e1d, 0}


Could not read faulting driver name
Probably caused by : ntkrnlpa.exe ( nt!ExFreePoolWithTag+237 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ff00fff8, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80543e1d, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: ff00fff8

FAULTING_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from 8062a277 to 80543e1d

STACK_TEXT:
eb712978 8062a277 ff00fffe 00000000 e44a32d8 nt!ExFreePoolWithTag+0x237
eb712994 8062a876 e44a32d8 d1703cdc e1029e24 nt!CmpCleanUpKcbValueCache+0x51
eb7129a8 80631530 e44ccdd0 e1813570 8063164c nt!CmpCleanUpKcbCacheWithLock+0x1a
eb7129b4 8063164c eb7129c8 8062a96c e459a680 nt!CmpGetDelayedCloseIndex+0x16
eb7129bc 8062a96c e459a680 eb7129d4 8062ad54 nt!CmpAddToDelayedClose+0xa
eb7129c8 8062ad54 e459a680 eb712ba0 80624771 nt!CmpDereferenceKeyControlBlockWithLock+0x38
eb7129d4 80624771 e459a680 86914944 e100f460 nt!CmpDereferenceKeyControlBlock+0x12
eb712ba0 805b390a 00602cd8 c0000034 869148a0 nt!CmpParseKey+0x6af
eb712c28 805afdeb 00000000 eb712c68 00000040 nt!ObpLookupObjectName+0x56a
eb712c7c 8061a3cb 00000000 86dbf708 00000001 nt!ObOpenObjectByName+0xeb
eb712d50 8053ca28 00fefa10 02000000 00fef754 nt!NtOpenKey+0x1af
eb712d50 7c90eb94 00fefa10 02000000 00fef754 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
00fef77c 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlpa.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e53f9c

SYMBOL_NAME: nt!ExFreePoolWithTag+237

FAILURE_BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

Followup: MachineOwner
---------

eax=ff00ff00 ebx=ff010002 ecx=8054ffa0 edx=00000519 esi=ff00fffe edi=00000000
eip=80543e1d esp=eb712944 ebp=eb712978 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!ExFreePoolWithTag+0x237:
80543e1d 668b4efa mov cx,word ptr [esi-6] ds:0023:ff00fff8=????
ChildEBP RetAddr Args to Child
eb712978 8062a277 ff00fffe 00000000 e44a32d8 nt!ExFreePoolWithTag+0x237 (FPO: [Non-Fpo])
eb712994 8062a876 e44a32d8 d1703cdc e1029e24 nt!CmpCleanUpKcbValueCache+0x51 (FPO: [Non-Fpo])
eb7129a8 80631530 e44ccdd0 e1813570 8063164c nt!CmpCleanUpKcbCacheWithLock+0x1a (FPO: [Non-Fpo])
eb7129b4 8063164c eb7129c8 8062a96c e459a680 nt!CmpGetDelayedCloseIndex+0x16 (FPO: [0,0,0])
eb7129bc 8062a96c e459a680 eb7129d4 8062ad54 nt!CmpAddToDelayedClose+0xa (FPO: [Non-Fpo])
eb7129c8 8062ad54 e459a680 eb712ba0 80624771 nt!CmpDereferenceKeyControlBlockWithLock+0x38 (FPO: [Non-Fpo])
eb7129d4 80624771 e459a680 86914944 e100f460 nt!CmpDereferenceKeyControlBlock+0x12 (FPO: [Non-Fpo])
eb712ba0 805b390a 00602cd8 c0000034 869148a0 nt!CmpParseKey+0x6af (FPO: [Non-Fpo])
eb712c28 805afdeb 00000000 eb712c68 00000040 nt!ObpLookupObjectName+0x56a (FPO: [Non-Fpo])
eb712c7c 8061a3cb 00000000 86dbf708 00000001 nt!ObOpenObjectByName+0xeb (FPO: [Non-Fpo])
eb712d50 8053ca28 00fefa10 02000000 00fef754 nt!NtOpenKey+0x1af (FPO: [Non-Fpo])
eb712d50 7c90eb94 00fefa10 02000000 00fef754 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ eb712d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
00fef77c 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806cd580 nt ntkrnlpa.exe Wed Feb 28 19:38:52 2007 (45E53F9C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 15:59:05 2004 (41107B29)
bf800000 bf9c2180 win32k win32k.sys Fri Mar 09 00:47:34 2007 (45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 16:00:51 2004 (41107B93)
bf9d5000 bfd63e00 nv4_disp nv4_disp.dll Fri Oct 01 07:18:39 2004 (415C782F)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 17:56:56 2004 (411096C8)
eb000000 eb012180 dump_viamraid dump_viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
eb013000 eb033f00 ipnat ipnat.sys Thu Sep 30 08:28:36 2004 (415B3714)
eb034000 eb05ea00 rdbss rdbss.sys Fri May 05 19:47:55 2006 (445B1F4B)
eb05f000 eb080d00 afd afd.sys Wed Aug 04 16:14:13 2004 (41107EB5)
eb081000 eb0a8c00 netbt netbt.sys Wed Aug 04 16:14:36 2004 (41107ECC)
eb0a9000 eb100d80 tcpip tcpip.sys Thu Apr 20 21:51:47 2006 (444775D3)
eb101000 eb113400 ipsec ipsec.sys Wed Aug 04 16:14:27 2004 (41107EC3)
eb134000 eb167200 update update.sys Wed Aug 04 15:58:32 2004 (41107B08)
eb189000 eb1ac000 Fastfat Fastfat.SYS Wed Aug 04 16:14:15 2004 (41107EB7)
eb1b7000 eb1cc580 irda irda.sys Wed Aug 04 16:00:50 2004 (41107B92)
eb1ed000 eb203560 P0620Vid P0620Vid.sys Thu Jul 29 15:14:21 2004 (410887AD)
eb20c000 eb20f280 ndisuio ndisuio.sys Wed Aug 04 16:03:10 2004 (41107C1E)
eb2c0000 eb32ea00 mrxsmb mrxsmb.sys Fri May 05 19:41:42 2006 (445B1DD6)
eb557000 eb597280 HTTP HTTP.sys Fri Mar 17 11:33:09 2006 (441A03C5)
eb598000 eb5c2180 kmixer kmixer.sys Wed Jun 14 18:47:45 2006 (448FCD31)
eb5c3000 eb5e5c80 aec aec.sys Sat Oct 02 03:00:21 2004 (415D8D25)
eb5e6000 eb5fa400 wdmaud wdmaud.sys Wed Jun 14 19:00:44 2006 (448FD03C)
eb763000 eb770400 swmidi swmidi.sys Sat Aug 18 07:00:42 2001 (3B7D85FA)
eb87b000 eb8cc480 srv srv.sys Mon Aug 14 20:34:39 2006 (44E051BF)
eb91d000 eb949400 mrxdav mrxdav.sys Wed Aug 04 16:00:49 2004 (41107B91)
ebbdf000 ebc9cf00 avg7core avg7core.sys Tue Apr 24 01:31:26 2007 (462CD14E)
ec1e5000 ec1f4900 Cdfs Cdfs.SYS Wed Aug 04 16:14:09 2004 (41107EB1)
eed5f000 eed61280 rasacd rasacd.sys Sat Aug 18 06:55:39 2001 (3B7D84CB)
eed99000 eed99b80 Null Null.SYS Sat Aug 18 06:47:39 2001 (3B7D82EB)
eedb3000 eedb9500 usbprint usbprint.sys Wed Aug 04 16:01:23 2004 (41107BB3)
eedbb000 eedc2b80 usbccgp usbccgp.sys Wed Aug 04 16:08:45 2004 (41107D6D)
eedc3000 eedc9c80 avg7rsxp avg7rsxp.sys Wed Jan 31 02:08:42 2007 (45BF5F7A)
eedd3000 eedda880 Npfs Npfs.SYS Wed Aug 04 16:00:38 2004 (41107B86)
eeddb000 eeddfa80 Msfs Msfs.SYS Wed Aug 04 16:00:37 2004 (41107B85)
eede3000 eede8200 vga vga.sys Wed Aug 04 16:07:06 2004 (41107D0A)
eedeb000 eedf1180 HIDPARSE HIDPARSE.SYS Wed Aug 04 16:08:15 2004 (41107D4F)
eef52000 eef5de00 STREAM STREAM.SYS Wed Aug 04 16:07:58 2004 (41107D3E)
eef72000 eef7ad80 HIDCLASS HIDCLASS.SYS Wed Aug 04 16:08:18 2004 (41107D52)
eef92000 eef9a700 wanarp wanarp.sys Wed Aug 04 16:04:57 2004 (41107C89)
eefa2000 eefaa880 Fips Fips.SYS Sat Aug 18 11:31:49 2001 (3B7DC585)
eefc2000 eefca700 netbios netbios.sys Wed Aug 04 16:03:19 2004 (41107C27)
ef289000 ef28e000 flpydisk flpydisk.sys Wed Aug 04 15:59:24 2004 (41107B3C)
ef4b2000 ef4c0100 usbhub usbhub.sys Wed Aug 04 16:08:40 2004 (41107D68)
ef4c2000 ef4cb480 NDProxy NDProxy.SYS Sat Aug 18 06:55:30 2001 (3B7D84C2)
ef522000 ef525f00 MODEMCSA MODEMCSA.sys Sat Aug 18 06:57:37 2001 (3B7D8541)
ef721000 ef724c80 mssmbios mssmbios.sys Wed Aug 04 16:07:47 2004 (41107D33)
ef798000 ef79c980 amddiag amddiag.sys Tue Sep 16 03:51:57 2003 (3F65FC3D)
ef7a0000 ef7a5a00 mouclass mouclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
ef7a8000 ef7ae000 kbdclass kbdclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
ef7b0000 ef7b4080 raspti raspti.sys Sat Aug 18 06:55:32 2001 (3B7D84C4)
ef7b8000 ef7bc580 ptilink ptilink.sys Sat Aug 18 06:49:53 2001 (3B7D8371)
ef800000 ef809f00 termdd termdd.sys Wed Aug 04 15:58:52 2004 (41107B1C)
ef8d9000 ef8da080 avg7rsw avg7rsw.sys Tue Jul 26 22:10:51 2005 (42E6284B)
ef8db000 ef8dc080 RDPCDD RDPCDD.sys Sat Aug 18 06:46:56 2001 (3B7D82C0)
ef8dd000 ef8de080 mnmdd mnmdd.SYS Sat Aug 18 06:57:28 2001 (3B7D8538)
ef8df000 ef8e0080 Beep Beep.SYS Sat Aug 18 06:47:33 2001 (3B7D82E5)
ef8e1000 ef8e2f00 Fs_Rec Fs_Rec.SYS Sat Aug 18 06:49:37 2001 (3B7D8361)
efaa5000 efaa6280 USBD USBD.SYS Sat Aug 18 07:02:58 2001 (3B7D8682)
efab3000 efab4100 swenum swenum.sys Wed Aug 04 15:58:41 2004 (41107B11)
efaf8000 efaf8f80 avgclean avgclean.sys Tue Aug 22 08:55:15 2006 (44EA39D3)
efd78000 efd79900 splitter splitter.sys Wed Jun 14 18:47:46 2006 (448FCD32)
f0013000 f0043100 rdpdr rdpdr.sys Wed Aug 04 16:01:10 2004 (41107BA6)
f3159000 f3167d80 sysaudio sysaudio.sys Wed Aug 04 16:15:54 2004 (41107F1A)
f42d0000 f42d93c0 ATNT40K ATNT40K.SYS Wed Feb 22 01:05:40 2006 (43FB1E34)
f61c2000 f61d2e00 psched psched.sys Wed Aug 04 16:04:16 2004 (41107C60)
f61d3000 f61e9680 ndiswan ndiswan.sys Wed Aug 04 16:14:30 2004 (41107EC6)
f61ea000 f61fd900 parport parport.sys Wed Aug 04 15:59:04 2004 (41107B28)
f61fe000 f6221980 portcls portcls.sys Wed Aug 04 16:15:47 2004 (41107F13)
f6222000 f6454940 ALCXWDM ALCXWDM.SYS Wed Dec 22 20:07:00 2004 (41C93934)
f6455000 f6477e80 USBPORT USBPORT.SYS Wed Aug 04 16:08:34 2004 (41107D62)
f6478000 f649a680 ks ks.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f649b000 f6661960 Intels51 Intels51.sys Sat Dec 11 06:30:38 2004 (41B9F95E)
f6662000 f669ce80 yk51x86 yk51x86.sys Tue Sep 20 01:33:14 2005 (432EDA3A)
f669d000 f66b0780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 16:07:04 2004 (41107D08)
f66b1000 f694ee20 nv4_mini nv4_mini.sys Fri Oct 01 07:22:48 2004 (415C7928)
f6953000 f6955900 Dxapi Dxapi.sys Sat Aug 18 06:53:19 2001 (3B7D843F)
f696f000 f6972a00 kbdhid kbdhid.sys Wed Aug 04 15:58:33 2004 (41107B09)
f72c3000 f72c6780 dump_scsiport dump_scsiport.sys Wed Aug 04 15:59:51 2004 (41107B57)
f72c7000 f72c9f80 mouhid mouhid.sys Sat Aug 18 06:47:57 2001 (3B7D82FD)
f730b000 f7325580 Mup Mup.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f7326000 f7352a80 NDIS NDIS.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f7353000 f73df480 Ntfs Ntfs.sys Wed Aug 04 16:15:06 2004 (41107EEA)
f73e0000 f73f6780 KSecDD KSecDD.sys Wed Aug 04 15:59:45 2004 (41107B51)
f73f7000 f740bf80 drvmcdb drvmcdb.sys Thu Dec 09 04:40:24 2004 (41B73C88)
f740c000 f741df00 sr sr.sys Wed Aug 04 16:06:22 2004 (41107CDE)
f741e000 f743d780 fltMgr fltMgr.sys Mon Aug 21 19:14:57 2006 (44E97991)
f743e000 f7455800 SCSIPORT SCSIPORT.SYS Wed Aug 04 15:59:39 2004 (41107B4B)
f7456000 f7468180 viamraid viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
f7469000 f747e780 nvatabus nvatabus.sys Wed Dec 08 11:15:51 2004 (41B647B7)
f747f000 f7496480 atapi atapi.sys Wed Aug 04 15:59:41 2004 (41107B4D)
f7497000 f74bc700 dmio dmio.sys Wed Aug 04 16:07:13 2004 (41107D11)
f74bd000 f74db880 ftdisk ftdisk.sys Sat Aug 18 06:52:41 2001 (3B7D8419)
f74dc000 f74eca80 pci pci.sys Wed Aug 04 16:07:45 2004 (41107D31)
f74ed000 f751ad80 ACPI ACPI.sys Wed Aug 04 16:07:35 2004 (41107D27)
f761c000 f7624c00 isapnp isapnp.sys Sat Aug 18 06:58:01 2001 (3B7D8559)
f762c000 f763ae80 ohci1394 ohci1394.sys Wed Aug 04 16:10:05 2004 (41107DBD)
f763c000 f7649000 1394BUS 1394BUS.SYS Wed Aug 04 16:10:03 2004 (41107DBB)
f764c000 f7656500 MountMgr MountMgr.sys Wed Aug 04 15:58:29 2004 (41107B05)
f765c000 f7668c80 VolSnap VolSnap.sys Wed Aug 04 16:00:14 2004 (41107B6E)
f766c000 f7674e00 disk disk.sys Wed Aug 04 15:59:53 2004 (41107B59)
f767c000 f7688200 CLASSPNP CLASSPNP.SYS Wed Aug 04 16:14:26 2004 (41107EC2)
f768c000 f7694b60 PxHelp20 PxHelp20.sys Thu Aug 10 03:27:31 2006 (44DA1B03)
f774c000 f775b000 AmdK8 AmdK8.sys Fri Jul 30 07:20:24 2004 (41096A18)
f775c000 f7766380 imapi imapi.sys Wed Aug 04 16:00:12 2004 (41107B6C)
f776c000 f7774c00 AFS2K AFS2K.SYS Fri Oct 08 11:16:03 2004 (4165EA53)
f777c000 f7788180 cdrom cdrom.sys Wed Aug 04 15:59:52 2004 (41107B58)
f778c000 f779a080 redbook redbook.sys Wed Aug 04 15:59:34 2004 (41107B46)
f779c000 f77aab80 drmk drmk.sys Wed Aug 04 16:07:54 2004 (41107D3A)
f77ac000 f77bbd80 serial serial.sys Wed Aug 04 16:15:51 2004 (41107F17)
f77dc000 f77e8880 rasl2tp rasl2tp.sys Wed Aug 04 16:14:21 2004 (41107EBD)
f77ec000 f77f6200 raspppoe raspppoe.sys Wed Aug 04 16:05:06 2004 (41107C92)
f77fc000 f7807d00 raspptp raspptp.sys Wed Aug 04 16:14:26 2004 (41107EC2)
f780c000 f7814900 msgpc msgpc.sys Wed Aug 04 16:04:11 2004 (41107C5B)
f786c000 f7878e80 DMusic DMusic.sys Wed Aug 04 16:07:37 2004 (41107D29)
f789c000 f78a2200 PCIIDEX PCIIDEX.SYS Wed Aug 04 15:59:40 2004 (41107B4C)
f78a4000 f78a8900 PartMgr PartMgr.sys Sat Aug 18 11:32:23 2001 (3B7DC5A7)
f78dc000 f78e0500 watchdog watchdog.sys Wed Aug 04 16:07:32 2004 (41107D24)
f792c000 f7930f80 point32 point32.sys Thu Jun 03 18:45:18 2004 (40BEE51E)
f7994000 f799b580 Modem Modem.SYS Wed Aug 04 16:08:04 2004 (41107D44)
f799c000 f79a1000 usbuhci usbuhci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f79a4000 f79aa800 usbehci usbehci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f79ac000 f79ad000 fdc fdc.sys unavailable (00000000)
f79b4000 f79b8c80 rasirda rasirda.sys Sat Aug 18 06:51:29 2001 (3B7D83D1)
f79bc000 f79c0880 TDI TDI.SYS Wed Aug 04 16:07:47 2004 (41107D33)
f7a2c000 f7a2f000 BOOTVID BOOTVID.dll Sat Aug 18 06:49:09 2001 (3B7D8345)
f7ab0000 f7ab3c80 serenum serenum.sys Wed Aug 04 15:59:06 2004 (41107B2A)
f7ab8000 f7aba580 ndistapi ndistapi.sys Sat Aug 18 06:55:29 2001 (3B7D84C1)
f7b10000 f7b13b00 usbscan usbscan.sys Wed Aug 04 15:58:44 2004 (41107B14)
f7b14000 f7b16580 hidusb hidusb.sys Sat Aug 18 07:02:16 2001 (3B7D8658)
f7b1c000 f7b1db80 kdcom kdcom.dll Sat Aug 18 06:49:10 2001 (3B7D8346)
f7b1e000 f7b1f100 WMILIB WMILIB.SYS Sat Aug 18 07:07:23 2001 (3B7D878B)
f7b20000 f7b21500 viaide viaide.sys Wed Aug 04 15:59:42 2004 (41107B4E)
f7b22000 f7b23700 dmload dmload.sys Sat Aug 18 06:58:15 2001 (3B7D8567)
f7b34000 f7b35a80 ParVdm ParVdm.SYS Sat Aug 18 06:49:49 2001 (3B7D836D)
f7be4000 f7be4d00 pciide pciide.sys Sat Aug 18 06:51:49 2001 (3B7D83E5)
f7c72000 f7c72b80 drmkaud drmkaud.sys Wed Aug 04 16:07:56 2004 (41107D3C)
f7cac000 f7cacd00 dxgthk dxgthk.sys Sat Aug 18 06:53:12 2001 (3B7D8438)
f7ce3000 f7ce3c00 audstub audstub.sys Sat Aug 18 06:59:40 2001 (3B7D85BC)

Unloaded modules:
f3f05000 f3f10000 ousbehci.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eefb2000 eefbb000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eed63000 eed67000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eefd2000 eefdf000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ef281000 ef286000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

[SIZE= "4"]CONTENTS OF DUMP FILE - Mini050707-02.dmp[/SIZE]
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\dumps\Mini050707-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
Debug session time: Mon May 7 10:08:30.218 2007 (GMT+10)
System Uptime: 0 days 1:52:29.830
Loading Kernel Symbols
....................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {ff00fff8, 0, 80543e1d, 0}


Could not read faulting driver name
Probably caused by : ntkrnlpa.exe ( nt!ExFreePoolWithTag+237 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ff00fff8, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80543e1d, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: ff00fff8

FAULTING_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: svchost.exe

LAST_CONTROL_TRANSFER: from 8062a277 to 80543e1d

STACK_TEXT:
f3701c58 8062a277 ff00fffe 00000000 e45792d8 nt!ExFreePoolWithTag+0x237
f3701c74 8062a876 e45792d8 00000519 e4579440 nt!CmpCleanUpKcbValueCache+0x51
f3701c88 8062a9ab e4579440 e7490008 e55849e0 nt!CmpCleanUpKcbCacheWithLock+0x1a
f3701c98 8062a9d3 e55849e0 f3701cc0 80627ecc nt!CmpCleanUpKCBCacheTable+0x2d
f3701ca4 80627ecc e55849e0 00000000 00000020 nt!CmpSearchForOpenSubKeys+0xb
f3701cc0 8061799a e7490008 00000020 e55849e0 nt!CmUnloadKey+0x32
f3701d58 8053ca28 007deb3c 007deb54 7c90eb94 nt!NtUnloadKey+0x18c
f3701d58 7c90eb94 007deb3c 007deb54 7c90eb94 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
007deb54 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlpa.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e53f9c

SYMBOL_NAME: nt!ExFreePoolWithTag+237

FAILURE_BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

Followup: MachineOwner
---------

eax=ff00ff00 ebx=ff010002 ecx=8054ffa0 edx=00000519 esi=ff00fffe edi=00000000
eip=80543e1d esp=f3701c24 ebp=f3701c58 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!ExFreePoolWithTag+0x237:
80543e1d 668b4efa mov cx,word ptr [esi-6] ds:0023:ff00fff8=????
ChildEBP RetAddr Args to Child
f3701c58 8062a277 ff00fffe 00000000 e45792d8 nt!ExFreePoolWithTag+0x237 (FPO: [Non-Fpo])
f3701c74 8062a876 e45792d8 00000519 e4579440 nt!CmpCleanUpKcbValueCache+0x51 (FPO: [Non-Fpo])
f3701c88 8062a9ab e4579440 e7490008 e55849e0 nt!CmpCleanUpKcbCacheWithLock+0x1a (FPO: [Non-Fpo])
f3701c98 8062a9d3 e55849e0 f3701cc0 80627ecc nt!CmpCleanUpKCBCacheTable+0x2d (FPO: [0,0,0])
f3701ca4 80627ecc e55849e0 00000000 00000020 nt!CmpSearchForOpenSubKeys+0xb (FPO: [Non-Fpo])
f3701cc0 8061799a e7490008 00000020 e55849e0 nt!CmUnloadKey+0x32 (FPO: [Non-Fpo])
f3701d58 8053ca28 007deb3c 007deb54 7c90eb94 nt!NtUnloadKey+0x18c (FPO: [Non-Fpo])
f3701d58 7c90eb94 007deb3c 007deb54 7c90eb94 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f3701d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
007deb54 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806cd580 nt ntkrnlpa.exe Wed Feb 28 19:38:52 2007 (45E53F9C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 15:59:05 2004 (41107B29)
bf800000 bf9c2180 win32k win32k.sys Fri Mar 09 00:47:34 2007 (45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 16:00:51 2004 (41107B93)
bf9d5000 bfd63e00 nv4_disp nv4_disp.dll Fri Oct 01 07:18:39 2004 (415C782F)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 17:56:56 2004 (411096C8)
eb019000 eb0d6f00 avg7core avg7core.sys Tue Apr 24 01:31:26 2007 (462CD14E)
ed0d7000 ed10a200 update update.sys Wed Aug 04 15:58:32 2004 (41107B08)
ed10b000 ed13b100 rdpdr rdpdr.sys Wed Aug 04 16:01:10 2004 (41107BA6)
ed154000 ed166180 dump_viamraid dump_viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
ed167000 ed18a000 Fastfat Fastfat.SYS Wed Aug 04 16:14:15 2004 (41107EB7)
ed18a000 ed1a0560 P0620Vid P0620Vid.sys Thu Jul 29 15:14:21 2004 (410887AD)
ed1a7000 ed1a8a80 ParVdm ParVdm.SYS Sat Aug 18 06:49:49 2001 (3B7D836D)
ed1b6000 ed1cb580 irda irda.sys Wed Aug 04 16:00:50 2004 (41107B92)
ed3c1000 ed3ed400 mrxdav mrxdav.sys Wed Aug 04 16:00:49 2004 (41107B91)
ed4fc000 ed510400 wdmaud wdmaud.sys Wed Jun 14 19:00:44 2006 (448FD03C)
ed739000 ed78a480 srv srv.sys Mon Aug 14 20:34:39 2006 (44E051BF)
edf19000 edf59280 HTTP HTTP.sys Fri Mar 17 11:33:09 2006 (441A03C5)
edf73000 edf93f00 ipnat ipnat.sys Thu Sep 30 08:28:36 2004 (415B3714)
edf94000 ee002a00 mrxsmb mrxsmb.sys Fri May 05 19:41:42 2006 (445B1DD6)
ee003000 ee02da00 rdbss rdbss.sys Fri May 05 19:47:55 2006 (445B1F4B)
ee06e000 ee08fd00 afd afd.sys Wed Aug 04 16:14:13 2004 (41107EB5)
ee090000 ee0b7c00 netbt netbt.sys Wed Aug 04 16:14:36 2004 (41107ECC)
ee0d6000 ee12dd80 tcpip tcpip.sys Thu Apr 20 21:51:47 2006 (444775D3)
ee144000 ee156400 ipsec ipsec.sys Wed Aug 04 16:14:27 2004 (41107EC3)
ee7af000 ee7be900 Cdfs Cdfs.SYS Wed Aug 04 16:14:09 2004 (41107EB1)
eec84000 eec92100 usbhub usbhub.sys Wed Aug 04 16:08:40 2004 (41107D68)
eecb4000 eecbd480 NDProxy NDProxy.SYS Sat Aug 18 06:55:30 2001 (3B7D84C2)
eece4000 eecedf00 termdd termdd.sys Wed Aug 04 15:58:52 2004 (41107B1C)
efa70000 efa73280 ndisuio ndisuio.sys Wed Aug 04 16:03:10 2004 (41107C1E)
efcfa000 efcfb080 RDPCDD RDPCDD.sys Sat Aug 18 06:46:56 2001 (3B7D82C0)
efcfe000 efcff080 mnmdd mnmdd.SYS Sat Aug 18 06:57:28 2001 (3B7D8538)
efd00000 efd01080 Beep Beep.SYS Sat Aug 18 06:47:33 2001 (3B7D82E5)
eff7e000 eff82980 amddiag amddiag.sys Tue Sep 16 03:51:57 2003 (3F65FC3D)
eff86000 eff8ba00 mouclass mouclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
eff8e000 eff94000 kbdclass kbdclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
eff96000 eff9a080 raspti raspti.sys Sat Aug 18 06:55:32 2001 (3B7D84C4)
eff9e000 effa2580 ptilink ptilink.sys Sat Aug 18 06:49:53 2001 (3B7D8371)
f0164000 f0172d80 sysaudio sysaudio.sys Wed Aug 04 16:15:54 2004 (41107F1A)
f038b000 f038ec80 mssmbios mssmbios.sys Wed Aug 04 16:07:47 2004 (41107D33)
f2358000 f235b780 dump_scsiport dump_scsiport.sys Wed Aug 04 15:59:51 2004 (41107B57)
f235c000 f235ef80 mouhid mouhid.sys Sat Aug 18 06:47:57 2001 (3B7D82FD)
f2360000 f2363a00 kbdhid kbdhid.sys Wed Aug 04 15:58:33 2004 (41107B09)
f2684000 f2688f80 point32 point32.sys Thu Jun 03 18:45:18 2004 (40BEE51E)
f2735000 f2738b00 usbscan usbscan.sys Wed Aug 04 15:58:44 2004 (41107B14)
f2759000 f275b580 hidusb hidusb.sys Sat Aug 18 07:02:16 2001 (3B7D8658)
f2a43000 f2a4bd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 16:08:18 2004 (41107D52)
f2a53000 f2a5ee00 STREAM STREAM.SYS Wed Aug 04 16:07:58 2004 (41107D3E)
f2af8000 f2afe500 usbprint usbprint.sys Wed Aug 04 16:01:23 2004 (41107BB3)
f2b08000 f2b0fb80 usbccgp usbccgp.sys Wed Aug 04 16:08:45 2004 (41107D6D)
f2b18000 f2b1ec80 avg7rsxp avg7rsxp.sys Wed Jan 31 02:08:42 2007 (45BF5F7A)
f2f0f000 f2f10080 avg7rsw avg7rsw.sys Tue Jul 26 22:10:51 2005 (42E6284B)
f4329000 f4331700 wanarp wanarp.sys Wed Aug 04 16:04:57 2004 (41107C89)
f4339000 f4341880 Fips Fips.SYS Sat Aug 18 11:31:49 2001 (3B7DC585)
f4f2e000 f4f30280 rasacd rasacd.sys Sat Aug 18 06:55:39 2001 (3B7D84CB)
f61e2000 f61ea700 netbios netbios.sys Wed Aug 04 16:03:19 2004 (41107C27)
f6202000 f6212e00 psched psched.sys Wed Aug 04 16:04:16 2004 (41107C60)
f6213000 f6229680 ndiswan ndiswan.sys Wed Aug 04 16:14:30 2004 (41107EC6)
f622a000 f623d900 parport parport.sys Wed Aug 04 15:59:04 2004 (41107B28)
f623e000 f6261980 portcls portcls.sys Wed Aug 04 16:15:47 2004 (41107F13)
f6262000 f6494940 ALCXWDM ALCXWDM.SYS Wed Dec 22 20:07:00 2004 (41C93934)
f6495000 f64b7e80 USBPORT USBPORT.SYS Wed Aug 04 16:08:34 2004 (41107D62)
f64b8000 f64da680 ks ks.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f64db000 f66a1960 Intels51 Intels51.sys Sat Dec 11 06:30:38 2004 (41B9F95E)
f66a2000 f66dce80 yk51x86 yk51x86.sys Tue Sep 20 01:33:14 2005 (432EDA3A)
f66dd000 f66f0780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 16:07:04 2004 (41107D08)
f66f1000 f698ee20 nv4_mini nv4_mini.sys Fri Oct 01 07:22:48 2004 (415C7928)
f69a7000 f69a9900 Dxapi Dxapi.sys Sat Aug 18 06:53:19 2001 (3B7D843F)
f72cb000 f72cd580 ndistapi ndistapi.sys Sat Aug 18 06:55:29 2001 (3B7D84C1)
f72d3000 f72d6c80 serenum serenum.sys Wed Aug 04 15:59:06 2004 (41107B2A)
f730b000 f7325580 Mup Mup.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f7326000 f7352a80 NDIS NDIS.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f7353000 f73df480 Ntfs Ntfs.sys Wed Aug 04 16:15:06 2004 (41107EEA)
f73e0000 f73f6780 KSecDD KSecDD.sys Wed Aug 04 15:59:45 2004 (41107B51)
f73f7000 f740bf80 drvmcdb drvmcdb.sys Thu Dec 09 04:40:24 2004 (41B73C88)
f740c000 f741df00 sr sr.sys Wed Aug 04 16:06:22 2004 (41107CDE)
f741e000 f743d780 fltMgr fltMgr.sys Mon Aug 21 19:14:57 2006 (44E97991)
f743e000 f7455800 SCSIPORT SCSIPORT.SYS Wed Aug 04 15:59:39 2004 (41107B4B)
f7456000 f7468180 viamraid viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
f7469000 f747e780 nvatabus nvatabus.sys Wed Dec 08 11:15:51 2004 (41B647B7)
f747f000 f7496480 atapi atapi.sys Wed Aug 04 15:59:41 2004 (41107B4D)
f7497000 f74bc700 dmio dmio.sys Wed Aug 04 16:07:13 2004 (41107D11)
f74bd000 f74db880 ftdisk ftdisk.sys Sat Aug 18 06:52:41 2001 (3B7D8419)
f74dc000 f74eca80 pci pci.sys Wed Aug 04 16:07:45 2004 (41107D31)
f74ed000 f751ad80 ACPI ACPI.sys Wed Aug 04 16:07:35 2004 (41107D27)
f761c000 f7624c00 isapnp isapnp.sys Sat Aug 18 06:58:01 2001 (3B7D8559)
f762c000 f763ae80 ohci1394 ohci1394.sys Wed Aug 04 16:10:05 2004 (41107DBD)
f763c000 f7649000 1394BUS 1394BUS.SYS Wed Aug 04 16:10:03 2004 (41107DBB)
f764c000 f7656500 MountMgr MountMgr.sys Wed Aug 04 15:58:29 2004 (41107B05)
f765c000 f7668c80 VolSnap VolSnap.sys Wed Aug 04 16:00:14 2004 (41107B6E)
f766c000 f7674e00 disk disk.sys Wed Aug 04 15:59:53 2004 (41107B59)
f767c000 f7688200 CLASSPNP CLASSPNP.SYS Wed Aug 04 16:14:26 2004 (41107EC2)
f768c000 f7694b60 PxHelp20 PxHelp20.sys Thu Aug 10 03:27:31 2006 (44DA1B03)
f76ec000 f76fb000 AmdK8 AmdK8.sys Fri Jul 30 07:20:24 2004 (41096A18)
f76fc000 f7706380 imapi imapi.sys Wed Aug 04 16:00:12 2004 (41107B6C)
f770c000 f7714c00 AFS2K AFS2K.SYS Fri Oct 08 11:16:03 2004 (4165EA53)
f771c000 f7728180 cdrom cdrom.sys Wed Aug 04 15:59:52 2004 (41107B58)
f772c000 f773a080 redbook redbook.sys Wed Aug 04 15:59:34 2004 (41107B46)
f773c000 f774ab80 drmk drmk.sys Wed Aug 04 16:07:54 2004 (41107D3A)
f774c000 f775bd80 serial serial.sys Wed Aug 04 16:15:51 2004 (41107F17)
f775c000 f7768880 rasl2tp rasl2tp.sys Wed Aug 04 16:14:21 2004 (41107EBD)
f778c000 f7796200 raspppoe raspppoe.sys Wed Aug 04 16:05:06 2004 (41107C92)
f779c000 f77a7d00 raspptp raspptp.sys Wed Aug 04 16:14:26 2004 (41107EC2)
f77ac000 f77b4900 msgpc msgpc.sys Wed Aug 04 16:04:11 2004 (41107C5B)
f786c000 f78753c0 ATNT40K ATNT40K.SYS Wed Feb 22 01:05:40 2006 (43FB1E34)
f789c000 f78a2200 PCIIDEX PCIIDEX.SYS Wed Aug 04 15:59:40 2004 (41107B4C)
f78a4000 f78a8900 PartMgr PartMgr.sys Sat Aug 18 11:32:23 2001 (3B7DC5A7)
f7974000 f7978500 watchdog watchdog.sys Wed Aug 04 16:07:32 2004 (41107D24)
f797c000 f7981000 flpydisk flpydisk.sys Wed Aug 04 15:59:24 2004 (41107B3C)
f7984000 f798b580 Modem Modem.SYS Wed Aug 04 16:08:04 2004 (41107D44)
f798c000 f7991000 usbuhci usbuhci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f7994000 f799a800 usbehci usbehci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f799c000 f799d000 fdc fdc.sys unavailable (00000000)
f79a4000 f79a8c80 rasirda rasirda.sys Sat Aug 18 06:51:29 2001 (3B7D83D1)
f79ac000 f79b0880 TDI TDI.SYS Wed Aug 04 16:07:47 2004 (41107D33)
f79d4000 f79da180 HIDPARSE HIDPARSE.SYS Wed Aug 04 16:08:15 2004 (41107D4F)
f79dc000 f79e1200 vga vga.sys Wed Aug 04 16:07:06 2004 (41107D0A)
f79ec000 f79f0a80 Msfs Msfs.SYS Wed Aug 04 16:00:37 2004 (41107B85)
f79f4000 f79fb880 Npfs Npfs.SYS Wed Aug 04 16:00:38 2004 (41107B86)
f7a2c000 f7a2f000 BOOTVID BOOTVID.dll Sat Aug 18 06:49:09 2001 (3B7D8345)
f7aac000 f7aaff00 MODEMCSA MODEMCSA.sys Sat Aug 18 06:57:37 2001 (3B7D8541)
f7b1c000 f7b1db80 kdcom kdcom.dll Sat Aug 18 06:49:10 2001 (3B7D8346)
f7b1e000 f7b1f100 WMILIB WMILIB.SYS Sat Aug 18 07:07:23 2001 (3B7D878B)
f7b20000 f7b21500 viaide viaide.sys Wed Aug 04 15:59:42 2004 (41107B4E)
f7b22000 f7b23700 dmload dmload.sys Sat Aug 18 06:58:15 2001 (3B7D8567)
f7b5c000 f7b5d100 swenum swenum.sys Wed Aug 04 15:58:41 2004 (41107B11)
f7b68000 f7b69280 USBD USBD.SYS Sat Aug 18 07:02:58 2001 (3B7D8682)
f7bbc000 f7bbdf00 Fs_Rec Fs_Rec.SYS Sat Aug 18 06:49:37 2001 (3B7D8361)
f7be4000 f7be4d00 pciide pciide.sys Sat Aug 18 06:51:49 2001 (3B7D83E5)
f7c04000 f7c04b80 Null Null.SYS Sat Aug 18 06:47:39 2001 (3B7D82EB)
f7c05000 f7c05f80 avgclean avgclean.sys Tue Aug 22 08:55:15 2006 (44EA39D3)
f7c1b000 f7c1bd00 dxgthk dxgthk.sys Sat Aug 18 06:53:12 2001 (3B7D8438)
f7c87000 f7c87c00 audstub audstub.sys Sat Aug 18 06:59:40 2001 (3B7D85BC)

Unloaded modules:
ed8bf000 ed8ea000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed8bf000 ed8ea000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed8bf000 ed8ea000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eddf9000 ede24000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7c37000 f7c38000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f31d2000 f31df000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2c42000 f2c50000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed4d9000 ed4fc000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b32000 f7b34000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3f2e000 f3f39000 ousbehci.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f61d2000 f61db000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3a24000 f3a28000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f777c000 f7789000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79cc000 f79d1000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

[SIZE= "4"]CONTENTS OF DUMP FILE - Mini050707-03.dmp[/SIZE]Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\dumps\Mini050707-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
Debug session time: Mon May 7 14:39:25.156 2007 (GMT+10)
System Uptime: 0 days 2:55:42.747
Loading Kernel Symbols
....................................................................................................................................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {ff00fff8, 0, 80543e1d, 0}


Could not read faulting driver name
Probably caused by : ntkrnlpa.exe ( nt!ExFreePoolWithTag+237 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ff00fff8, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80543e1d, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: ff00fff8

FAULTING_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 3

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from 8062a277 to 80543e1d

STACK_TEXT:
f1632c30 8062a277 ff00fffe 00000000 e4543a28 nt!ExFreePoolWithTag+0x237
f1632c4c 8062a876 e4543a28 e4518a28 e102d958 nt!CmpCleanUpKcbValueCache+0x51
f1632c60 80631530 e4543c20 e18b2b60 8063164c nt!CmpCleanUpKcbCacheWithLock+0x1a
f1632c6c 8063164c f1632c80 8062a96c e4518a28 nt!CmpGetDelayedCloseIndex+0x16
f1632c74 8062a96c e4518a28 f1632c8c 8062ad54 nt!CmpAddToDelayedClose+0xa
f1632c80 8062ad54 e4518a28 f1632ca4 8062be54 nt!CmpDereferenceKeyControlBlockWithLock+0x38
f1632c8c 8062be54 e4518a28 00000000 e1061788 nt!CmpDereferenceKeyControlBlock+0x12
f1632ca4 805af80f e10617a0 e1061788 00000000 nt!CmpDeleteKeyObject+0x92
f1632cc0 8052201d e10617a0 00000000 0000052e nt!ObpRemoveObjectRoutine+0xdf
f1632ce4 805b080f 867e4628 e45a93b8 86825c18 nt!ObfDereferenceObject+0x5f
f1632cfc 805b08a5 e45a93b8 e10617a0 0000052e nt!ObpCloseHandleTableEntry+0x155
f1632d44 805b09dd 0000052e 00000001 00000000 nt!ObpCloseHandle+0x87
f1632d58 8053ca28 0000052e 00f6f3c0 7c90eb94 nt!NtClose+0x1d
f1632d58 7c90eb94 0000052e 00f6f3c0 7c90eb94 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f6f3c0 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlpa.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e53f9c

SYMBOL_NAME: nt!ExFreePoolWithTag+237

FAILURE_BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

Followup: MachineOwner
---------

eax=ff00ff00 ebx=ff010002 ecx=8054ffa0 edx=00000519 esi=ff00fffe edi=00000000
eip=80543e1d esp=f1632bfc ebp=f1632c30 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!ExFreePoolWithTag+0x237:
80543e1d 668b4efa mov cx,word ptr [esi-6] ds:0023:ff00fff8=????
ChildEBP RetAddr Args to Child
f1632c30 8062a277 ff00fffe 00000000 e4543a28 nt!ExFreePoolWithTag+0x237 (FPO: [Non-Fpo])
f1632c4c 8062a876 e4543a28 e4518a28 e102d958 nt!CmpCleanUpKcbValueCache+0x51 (FPO: [Non-Fpo])
f1632c60 80631530 e4543c20 e18b2b60 8063164c nt!CmpCleanUpKcbCacheWithLock+0x1a (FPO: [Non-Fpo])
f1632c6c 8063164c f1632c80 8062a96c e4518a28 nt!CmpGetDelayedCloseIndex+0x16 (FPO: [0,0,0])
f1632c74 8062a96c e4518a28 f1632c8c 8062ad54 nt!CmpAddToDelayedClose+0xa (FPO: [Non-Fpo])
f1632c80 8062ad54 e4518a28 f1632ca4 8062be54 nt!CmpDereferenceKeyControlBlockWithLock+0x38 (FPO: [Non-Fpo])
f1632c8c 8062be54 e4518a28 00000000 e1061788 nt!CmpDereferenceKeyControlBlock+0x12 (FPO: [Non-Fpo])
f1632ca4 805af80f e10617a0 e1061788 00000000 nt!CmpDeleteKeyObject+0x92 (FPO: [Non-Fpo])
f1632cc0 8052201d e10617a0 00000000 0000052e nt!ObpRemoveObjectRoutine+0xdf (FPO: [Non-Fpo])
f1632ce4 805b080f 867e4628 e45a93b8 86825c18 nt!ObfDereferenceObject+0x5f (FPO: [Non-Fpo])
f1632cfc 805b08a5 e45a93b8 e10617a0 0000052e nt!ObpCloseHandleTableEntry+0x155 (FPO: [Non-Fpo])
f1632d44 805b09dd 0000052e 00000001 00000000 nt!ObpCloseHandle+0x87 (FPO: [Non-Fpo])
f1632d58 8053ca28 0000052e 00f6f3c0 7c90eb94 nt!NtClose+0x1d (FPO: [Non-Fpo])
f1632d58 7c90eb94 0000052e 00f6f3c0 7c90eb94 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f1632d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f6f3c0 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806cd580 nt ntkrnlpa.exe Wed Feb 28 19:38:52 2007 (45E53F9C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 15:59:05 2004 (41107B29)
b2f8e000 b2fce280 HTTP HTTP.sys Fri Mar 17 11:33:09 2006 (441A03C5)
b2fdf000 b2fee900 Cdfs Cdfs.SYS Wed Aug 04 16:14:09 2004 (41107EB1)
b3241000 b3255400 wdmaud wdmaud.sys Wed Jun 14 19:00:44 2006 (448FD03C)
b3b8e000 b3b9cd80 sysaudio sysaudio.sys Wed Aug 04 16:15:54 2004 (41107F1A)
b3cd6000 b3d27480 srv srv.sys Mon Aug 14 20:34:39 2006 (44E051BF)
b3d78000 b3da4400 mrxdav mrxdav.sys Wed Aug 04 16:00:49 2004 (41107B91)
b45f5000 b460a580 irda irda.sys Wed Aug 04 16:00:50 2004 (41107B92)
b548c000 b549e180 dump_viamraid dump_viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
b549f000 b54c2000 Fastfat Fastfat.SYS Wed Aug 04 16:14:15 2004 (41107EB7)
b54c2000 b54d8560 P0620Vid P0620Vid.sys Thu Jul 29 15:14:21 2004 (410887AD)
b54d9000 b5596f00 avg7core avg7core.sys Tue Apr 24 01:31:26 2007 (462CD14E)
b55a1000 b55aa3c0 ATNT40K ATNT40K.SYS Wed Feb 22 01:05:40 2006 (43FB1E34)
b5857000 b585a780 dump_scsiport dump_scsiport.sys Wed Aug 04 15:59:51 2004 (41107B57)
b585b000 b585df80 mouhid mouhid.sys Sat Aug 18 06:47:57 2001 (3B7D82FD)
b5919000 b591d500 watchdog watchdog.sys Wed Aug 04 16:07:32 2004 (41107D24)
b5c8b000 b5c8ea00 kbdhid kbdhid.sys Wed Aug 04 15:58:33 2004 (41107B09)
b5c93000 b5c96b00 usbscan usbscan.sys Wed Aug 04 15:58:44 2004 (41107B14)
b5e35000 b5e39f80 point32 point32.sys Thu Jun 03 18:45:18 2004 (40BEE51E)
b5e3d000 b5e43500 usbprint usbprint.sys Wed Aug 04 16:01:23 2004 (41107BB3)
b5eda000 b5edc580 hidusb hidusb.sys Sat Aug 18 07:02:16 2001 (3B7D8658)
b5f06000 b5f0ed80 HIDCLASS HIDCLASS.SYS Wed Aug 04 16:08:18 2004 (41107D52)
b5f16000 b5f21e00 STREAM STREAM.SYS Wed Aug 04 16:07:58 2004 (41107D3E)
b6060000 b6067b80 usbccgp usbccgp.sys Wed Aug 04 16:08:45 2004 (41107D6D)
b6068000 b606ec80 avg7rsxp avg7rsxp.sys Wed Jan 31 02:08:42 2007 (45BF5F7A)
b63b1000 b63b2080 avg7rsw avg7rsw.sys Tue Jul 26 22:10:51 2005 (42E6284B)
b9a11000 b9a31f00 ipnat ipnat.sys Thu Sep 30 08:28:36 2004 (415B3714)
b9a32000 b9aa0a00 mrxsmb mrxsmb.sys Fri May 05 19:41:42 2006 (445B1DD6)
b9aa1000 b9acba00 rdbss rdbss.sys Fri May 05 19:47:55 2006 (445B1F4B)
b9b87000 b9ba8d00 afd afd.sys Wed Aug 04 16:14:13 2004 (41107EB5)
b9ba9000 b9bd0c00 netbt netbt.sys Wed Aug 04 16:14:36 2004 (41107ECC)
b9bd1000 b9c28d80 tcpip tcpip.sys Thu Apr 20 21:51:47 2006 (444775D3)
b9c29000 b9c3b400 ipsec ipsec.sys Wed Aug 04 16:14:27 2004 (41107EC3)
bf800000 bf9c2180 win32k win32k.sys Fri Mar 09 00:47:34 2007 (45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 16:00:51 2004 (41107B93)
bf9d5000 bfd63e00 nv4_disp nv4_disp.dll Fri Oct 01 07:18:39 2004 (415C782F)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 17:56:56 2004 (411096C8)
ebf1a000 ebf1c280 rasacd rasacd.sys Sat Aug 18 06:55:39 2001 (3B7D84CB)
ebf1e000 ebf21280 ndisuio ndisuio.sys Wed Aug 04 16:03:10 2004 (41107C1E)
ec247000 ec24e880 Npfs Npfs.SYS Wed Aug 04 16:00:38 2004 (41107B86)
ec24f000 ec253a80 Msfs Msfs.SYS Wed Aug 04 16:00:37 2004 (41107B85)
ec257000 ec25c200 vga vga.sys Wed Aug 04 16:07:06 2004 (41107D0A)
ec25f000 ec265180 HIDPARSE HIDPARSE.SYS Wed Aug 04 16:08:15 2004 (41107D4F)
f32e3000 f32e8000 flpydisk flpydisk.sys Wed Aug 04 15:59:24 2004 (41107B3C)
f3f30000 f3f38700 wanarp wanarp.sys Wed Aug 04 16:04:57 2004 (41107C89)
f3f40000 f3f48880 Fips Fips.SYS Sat Aug 18 11:31:49 2001 (3B7DC585)
f3f60000 f3f68700 netbios netbios.sys Wed Aug 04 16:03:19 2004 (41107C27)
f616f000 f61a2200 update update.sys Wed Aug 04 15:58:32 2004 (41107B08)
f61a3000 f61d3100 rdpdr rdpdr.sys Wed Aug 04 16:01:10 2004 (41107BA6)
f61d4000 f61e4e00 psched psched.sys Wed Aug 04 16:04:16 2004 (41107C60)
f61e5000 f61fb680 ndiswan ndiswan.sys Wed Aug 04 16:14:30 2004 (41107EC6)
f61fc000 f620f900 parport parport.sys Wed Aug 04 15:59:04 2004 (41107B28)
f6210000 f6233980 portcls portcls.sys Wed Aug 04 16:15:47 2004 (41107F13)
f6234000 f6466940 ALCXWDM ALCXWDM.SYS Wed Dec 22 20:07:00 2004 (41C93934)
f6467000 f6489e80 USBPORT USBPORT.SYS Wed Aug 04 16:08:34 2004 (41107D62)
f648a000 f64ac680 ks ks.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f64ad000 f6673960 Intels51 Intels51.sys Sat Dec 11 06:30:38 2004 (41B9F95E)
f6674000 f66aee80 yk51x86 yk51x86.sys Tue Sep 20 01:33:14 2005 (432EDA3A)
f66af000 f66c2780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 16:07:04 2004 (41107D08)
f66c3000 f6960e20 nv4_mini nv4_mini.sys Fri Oct 01 07:22:48 2004 (415C7928)
f6961000 f696a480 NDProxy NDProxy.SYS Sat Aug 18 06:55:30 2001 (3B7D84C2)
f6b74000 f6b76580 ndistapi ndistapi.sys Sat Aug 18 06:55:29 2001 (3B7D84C1)
f6b7c000 f6b7fc80 serenum serenum.sys Wed Aug 04 15:59:06 2004 (41107B2A)
f730b000 f7325580 Mup Mup.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f7326000 f7352a80 NDIS NDIS.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f7353000 f73df480 Ntfs Ntfs.sys Wed Aug 04 16:15:06 2004 (41107EEA)
f73e0000 f73f6780 KSecDD KSecDD.sys Wed Aug 04 15:59:45 2004 (41107B51)
f73f7000 f740bf80 drvmcdb drvmcdb.sys Thu Dec 09 04:40:24 2004 (41B73C88)
f740c000 f741df00 sr sr.sys Wed Aug 04 16:06:22 2004 (41107CDE)
f741e000 f743d780 fltMgr fltMgr.sys Mon Aug 21 19:14:57 2006 (44E97991)
f743e000 f7455800 SCSIPORT SCSIPORT.SYS Wed Aug 04 15:59:39 2004 (41107B4B)
f7456000 f7468180 viamraid viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
f7469000 f747e780 nvatabus nvatabus.sys Wed Dec 08 11:15:51 2004 (41B647B7)
f747f000 f7496480 atapi atapi.sys Wed Aug 04 15:59:41 2004 (41107B4D)
f7497000 f74bc700 dmio dmio.sys Wed Aug 04 16:07:13 2004 (41107D11)
f74bd000 f74db880 ftdisk ftdisk.sys Sat Aug 18 06:52:41 2001 (3B7D8419)
f74dc000 f74eca80 pci pci.sys Wed Aug 04 16:07:45 2004 (41107D31)
f74ed000 f751ad80 ACPI ACPI.sys Wed Aug 04 16:07:35 2004 (41107D27)
f761c000 f7624c00 isapnp isapnp.sys Sat Aug 18 06:58:01 2001 (3B7D8559)
f762c000 f763ae80 ohci1394 ohci1394.sys Wed Aug 04 16:10:05 2004 (41107DBD)
f763c000 f7649000 1394BUS 1394BUS.SYS Wed Aug 04 16:10:03 2004 (41107DBB)
f764c000 f7656500 MountMgr MountMgr.sys Wed Aug 04 15:58:29 2004 (41107B05)
f765c000 f7668c80 VolSnap VolSnap.sys Wed Aug 04 16:00:14 2004 (41107B6E)
f766c000 f7674e00 disk disk.sys Wed Aug 04 15:59:53 2004 (41107B59)
f767c000 f7688200 CLASSPNP CLASSPNP.SYS Wed Aug 04 16:14:26 2004 (41107EC2)
f768c000 f7694b60 PxHelp20 PxHelp20.sys Thu Aug 10 03:27:31 2006 (44DA1B03)
f772c000 f773b000 AmdK8 AmdK8.sys Fri Jul 30 07:20:24 2004 (41096A18)
f773c000 f7746380 imapi imapi.sys Wed Aug 04 16:00:12 2004 (41107B6C)
f774c000 f7754c00 AFS2K AFS2K.SYS Fri Oct 08 11:16:03 2004 (4165EA53)
f775c000 f7768180 cdrom cdrom.sys Wed Aug 04 15:59:52 2004 (41107B58)
f776c000 f777a080 redbook redbook.sys Wed Aug 04 15:59:34 2004 (41107B46)
f777c000 f778ab80 drmk drmk.sys Wed Aug 04 16:07:54 2004 (41107D3A)
f778c000 f779bd80 serial serial.sys Wed Aug 04 16:15:51 2004 (41107F17)
f779c000 f77a8880 rasl2tp rasl2tp.sys Wed Aug 04 16:14:21 2004 (41107EBD)
f77ac000 f77b6200 raspppoe raspppoe.sys Wed Aug 04 16:05:06 2004 (41107C92)
f77bc000 f77c7d00 raspptp raspptp.sys Wed Aug 04 16:14:26 2004 (41107EC2)
f77cc000 f77d4900 msgpc msgpc.sys Wed Aug 04 16:04:11 2004 (41107C5B)
f77dc000 f77e5f00 termdd termdd.sys Wed Aug 04 15:58:52 2004 (41107B1C)
f787c000 f788a100 usbhub usbhub.sys Wed Aug 04 16:08:40 2004 (41107D68)
f789c000 f78a2200 PCIIDEX PCIIDEX.SYS Wed Aug 04 15:59:40 2004 (41107B4C)
f78a4000 f78a8900 PartMgr PartMgr.sys Sat Aug 18 11:32:23 2001 (3B7DC5A7)
f798c000 f7993580 Modem Modem.SYS Wed Aug 04 16:08:04 2004 (41107D44)
f7994000 f7999000 usbuhci usbuhci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f799c000 f79a2800 usbehci usbehci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f79a4000 f79a5000 fdc fdc.sys unavailable (00000000)
f79ac000 f79b0c80 rasirda rasirda.sys Sat Aug 18 06:51:29 2001 (3B7D83D1)
f79b4000 f79b8880 TDI TDI.SYS Wed Aug 04 16:07:47 2004 (41107D33)
f79bc000 f79c0580 ptilink ptilink.sys Sat Aug 18 06:49:53 2001 (3B7D8371)
f79c4000 f79c8080 raspti raspti.sys Sat Aug 18 06:55:32 2001 (3B7D84C4)
f79cc000 f79d2000 kbdclass kbdclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
f79d4000 f79d9a00 mouclass mouclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
f79dc000 f79e0980 amddiag amddiag.sys Tue Sep 16 03:51:57 2003 (3F65FC3D)
f7a2c000 f7a2f000 BOOTVID BOOTVID.dll Sat Aug 18 06:49:09 2001 (3B7D8345)
f7ab8000 f7abbc80 mssmbios mssmbios.sys Wed Aug 04 16:07:47 2004 (41107D33)
f7ac0000 f7ac2900 Dxapi Dxapi.sys Sat Aug 18 06:53:19 2001 (3B7D843F)
f7aec000 f7aeff00 MODEMCSA MODEMCSA.sys Sat Aug 18 06:57:37 2001 (3B7D8541)
f7b1c000 f7b1db80 kdcom kdcom.dll Sat Aug 18 06:49:10 2001 (3B7D8346)
f7b1e000 f7b1f100 WMILIB WMILIB.SYS Sat Aug 18 07:07:23 2001 (3B7D878B)
f7b20000 f7b21500 viaide viaide.sys Wed Aug 04 15:59:42 2004 (41107B4E)
f7b22000 f7b23700 dmload dmload.sys Sat Aug 18 06:58:15 2001 (3B7D8567)
f7b70000 f7b71100 swenum swenum.sys Wed Aug 04 15:58:41 2004 (41107B11)
f7b84000 f7b85280 USBD USBD.SYS Sat Aug 18 07:02:58 2001 (3B7D8682)
f7b96000 f7b97f00 Fs_Rec Fs_Rec.SYS Sat Aug 18 06:49:37 2001 (3B7D8361)
f7b98000 f7b99080 Beep Beep.SYS Sat Aug 18 06:47:33 2001 (3B7D82E5)
f7b9a000 f7b9b080 mnmdd mnmdd.SYS Sat Aug 18 06:57:28 2001 (3B7D8538)
f7b9c000 f7b9d080 RDPCDD RDPCDD.sys Sat Aug 18 06:46:56 2001 (3B7D82C0)
f7bba000 f7bbba80 ParVdm ParVdm.SYS Sat Aug 18 06:49:49 2001 (3B7D836D)
f7be4000 f7be4d00 pciide pciide.sys Sat Aug 18 06:51:49 2001 (3B7D83E5)
f7be8000 f7be8b80 Null Null.SYS Sat Aug 18 06:47:39 2001 (3B7D82EB)
f7be9000 f7be9c00 audstub audstub.sys Sat Aug 18 06:59:40 2001 (3B7D85BC)
f7bee000 f7beef80 avgclean avgclean.sys Tue Aug 22 08:55:15 2006 (44EA39D3)
f7c06000 f7c06d00 dxgthk dxgthk.sys Sat Aug 18 06:53:12 2001 (3B7D8438)

Unloaded modules:
b1727000 b1752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1727000 b1752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1727000 b1752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1727000 b1752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b1727000 b1752000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b31f3000 b321e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7cb1000 f7cb2000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f0ff2000 f0fff000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b3b6e000 b3b7c000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b321e000 b3241000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7bce000 f7bd0000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76fc000 f7707000 ousbehci.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3f50000 f3f59000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ebf1e000 ebf22000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3f70000 f3f7d000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ec267000 ec26c000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

[SIZE= "4"]CONTENTS OF DUMP FILE - Mini050807-01.dmp[/SIZE]
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\dumps\Mini050807-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805533a0
Debug session time: Tue May 8 10:30:00.281 2007 (GMT+10)
System Uptime: 0 days 1:32:52.871
Loading Kernel Symbols
.......................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {ff00fff8, 0, 80543e1d, 0}


Could not read faulting driver name
Probably caused by : ntkrnlpa.exe ( nt!ExFreePoolWithTag+237 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ff00fff8, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 80543e1d, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: ff00fff8

FAULTING_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: ctfmon.exe

LAST_CONTROL_TRANSFER: from 8062a277 to 80543e1d

STACK_TEXT:
ecdc3190 8062a277 ff00fffe 00000000 e42c0050 nt!ExFreePoolWithTag+0x237
ecdc31ac 8062a876 e42c0050 e4359b48 e102ceb4 nt!CmpCleanUpKcbValueCache+0x51
ecdc31c0 80631530 e414e3b0 e2336758 8063164c nt!CmpCleanUpKcbCacheWithLock+0x1a
ecdc31cc 8063164c ecdc31e0 8062a96c e4359b48 nt!CmpGetDelayedCloseIndex+0x16
ecdc31d4 8062a96c e4359b48 ecdc31ec 8062ad54 nt!CmpAddToDelayedClose+0xa
ecdc31e0 8062ad54 e4359b48 ecdc3204 8062be54 nt!CmpDereferenceKeyControlBlockWithLock+0x38
ecdc31ec 8062be54 e4359b48 00000000 e4551f28 nt!CmpDereferenceKeyControlBlock+0x12
ecdc3204 805af80f e4551f40 e4551f28 00000000 nt!CmpDeleteKeyObject+0x92
ecdc3220 8052201d e4551f40 00000000 000000bc nt!ObpRemoveObjectRoutine+0xdf
ecdc3244 805b080f 863e2a20 e41b1418 864a8430 nt!ObfDereferenceObject+0x5f
ecdc325c 805b08a5 e41b1418 e4551f40 000000bc nt!ObpCloseHandleTableEntry+0x155
ecdc32a4 805b09dd 000000bc 00000001 00000000 nt!ObpCloseHandle+0x87
ecdc32b8 8053ca28 000000bc 0007f998 7c90eb94 nt!NtClose+0x1d
ecdc32b8 7c90eb94 000000bc 0007f998 7c90eb94 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007f998 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePoolWithTag+237
80543e1d 668b4efa mov cx,word ptr [esi-6]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlpa.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e53f9c

SYMBOL_NAME: nt!ExFreePoolWithTag+237

FAILURE_BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

Followup: MachineOwner
---------

eax=ff00ff00 ebx=ff010002 ecx=8054ffa0 edx=00000519 esi=ff00fffe edi=00000000
eip=80543e1d esp=ecdc315c ebp=ecdc3190 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!ExFreePoolWithTag+0x237:
80543e1d 668b4efa mov cx,word ptr [esi-6] ds:0023:ff00fff8=????
ChildEBP RetAddr Args to Child
ecdc3190 8062a277 ff00fffe 00000000 e42c0050 nt!ExFreePoolWithTag+0x237 (FPO: [Non-Fpo])
ecdc31ac 8062a876 e42c0050 e4359b48 e102ceb4 nt!CmpCleanUpKcbValueCache+0x51 (FPO: [Non-Fpo])
ecdc31c0 80631530 e414e3b0 e2336758 8063164c nt!CmpCleanUpKcbCacheWithLock+0x1a (FPO: [Non-Fpo])
ecdc31cc 8063164c ecdc31e0 8062a96c e4359b48 nt!CmpGetDelayedCloseIndex+0x16 (FPO: [0,0,0])
ecdc31d4 8062a96c e4359b48 ecdc31ec 8062ad54 nt!CmpAddToDelayedClose+0xa (FPO: [Non-Fpo])
ecdc31e0 8062ad54 e4359b48 ecdc3204 8062be54 nt!CmpDereferenceKeyControlBlockWithLock+0x38 (FPO: [Non-Fpo])
ecdc31ec 8062be54 e4359b48 00000000 e4551f28 nt!CmpDereferenceKeyControlBlock+0x12 (FPO: [Non-Fpo])
ecdc3204 805af80f e4551f40 e4551f28 00000000 nt!CmpDeleteKeyObject+0x92 (FPO: [Non-Fpo])
ecdc3220 8052201d e4551f40 00000000 000000bc nt!ObpRemoveObjectRoutine+0xdf (FPO: [Non-Fpo])
ecdc3244 805b080f 863e2a20 e41b1418 864a8430 nt!ObfDereferenceObject+0x5f (FPO: [Non-Fpo])
ecdc325c 805b08a5 e41b1418 e4551f40 000000bc nt!ObpCloseHandleTableEntry+0x155 (FPO: [Non-Fpo])
ecdc32a4 805b09dd 000000bc 00000001 00000000 nt!ObpCloseHandle+0x87 (FPO: [Non-Fpo])
ecdc32b8 8053ca28 000000bc 0007f998 7c90eb94 nt!NtClose+0x1d (FPO: [Non-Fpo])
ecdc32b8 7c90eb94 000000bc 0007f998 7c90eb94 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ ecdc32c4)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007f998 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806cd580 nt ntkrnlpa.exe Wed Feb 28 19:38:52 2007 (45E53F9C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 15:59:05 2004 (41107B29)
bf800000 bf9c2180 win32k win32k.sys Fri Mar 09 00:47:34 2007 (45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 16:00:51 2004 (41107B93)
bf9d5000 bfd63e00 nv4_disp nv4_disp.dll Fri Oct 01 07:18:39 2004 (415C782F)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 17:56:56 2004 (411096C8)
eb56e000 eb598180 kmixer kmixer.sys Wed Jun 14 18:47:45 2006 (448FCD31)
ecbfb000 ecc3b280 HTTP HTTP.sys Fri Mar 17 11:33:09 2006 (441A03C5)
ecd80000 ecd83800 asyncmac asyncmac.sys Wed Aug 04 16:05:02 2004 (41107C8E)
ecfdc000 ecfeb900 Cdfs Cdfs.SYS Wed Aug 04 16:14:09 2004 (41107EB1)
ed164000 ed1b5480 srv srv.sys Mon Aug 14 20:34:39 2006 (44E051BF)
ed2a6000 ed2d2400 mrxdav mrxdav.sys Wed Aug 04 16:00:49 2004 (41107B91)
ed4b3000 ed4c7400 wdmaud wdmaud.sys Wed Jun 14 19:00:44 2006 (448FD03C)
ee5e0000 ee5f5580 irda irda.sys Wed Aug 04 16:00:50 2004 (41107B92)
ef517000 ef529180 dump_viamraid dump_viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
ef52a000 ef540560 P0620Vid P0620Vid.sys Thu Jul 29 15:14:21 2004 (410887AD)
ef541000 ef564000 Fastfat Fastfat.SYS Wed Aug 04 16:14:15 2004 (41107EB7)
ef564000 ef621f00 avg7core avg7core.sys Tue Apr 24 01:31:26 2007 (462CD14E)
ef622000 ef642f00 ipnat ipnat.sys Thu Sep 30 08:28:36 2004 (415B3714)
ef643000 ef6b1a00 mrxsmb mrxsmb.sys Fri May 05 19:41:42 2006 (445B1DD6)
ef6b2000 ef6dca00 rdbss rdbss.sys Fri May 05 19:47:55 2006 (445B1F4B)
ef6dd000 ef6fed00 afd afd.sys Wed Aug 04 16:14:13 2004 (41107EB5)
ef6ff000 ef726c00 netbt netbt.sys Wed Aug 04 16:14:36 2004 (41107ECC)
ef727000 ef77ed80 tcpip tcpip.sys Thu Apr 20 21:51:47 2006 (444775D3)
ef77f000 ef791400 ipsec ipsec.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f1cb2000 f1ce5200 update update.sys Wed Aug 04 15:58:32 2004 (41107B08)
f1ce6000 f1d16100 rdpdr rdpdr.sys Wed Aug 04 16:01:10 2004 (41107BA6)
f20a2000 f20a2f80 avgclean avgclean.sys Tue Aug 22 08:55:15 2006 (44EA39D3)
f20a3000 f20a3b80 Null Null.SYS Sat Aug 18 06:47:39 2001 (3B7D82EB)
f21c0000 f21c3f00 MODEMCSA MODEMCSA.sys Sat Aug 18 06:57:37 2001 (3B7D8541)
f364a000 f364e500 watchdog watchdog.sys Wed Aug 04 16:07:32 2004 (41107D24)
f3666000 f3669280 ndisuio ndisuio.sys Wed Aug 04 16:03:10 2004 (41107C1E)
f3c66000 f3c6af80 point32 point32.sys Thu Jun 03 18:45:18 2004 (40BEE51E)
f3c6e000 f3c74500 usbprint usbprint.sys Wed Aug 04 16:01:23 2004 (41107BB3)
f3c76000 f3c7db80 usbccgp usbccgp.sys Wed Aug 04 16:08:45 2004 (41107D6D)
f3c7e000 f3c84c80 avg7rsxp avg7rsxp.sys Wed Jan 31 02:08:42 2007 (45BF5F7A)
f3c8e000 f3c95880 Npfs Npfs.SYS Wed Aug 04 16:00:38 2004 (41107B86)
f3f8b000 f3f96e00 STREAM STREAM.SYS Wed Aug 04 16:07:58 2004 (41107D3E)
f3fab000 f3fb3d80 HIDCLASS HIDCLASS.SYS Wed Aug 04 16:08:18 2004 (41107D52)
f3fbb000 f3fc3700 wanarp wanarp.sys Wed Aug 04 16:04:57 2004 (41107C89)
f3fcb000 f3fd3880 Fips Fips.SYS Sat Aug 18 11:31:49 2001 (3B7DC585)
f3feb000 f3ff3700 netbios netbios.sys Wed Aug 04 16:03:19 2004 (41107C27)
f4635000 f4643100 usbhub usbhub.sys Wed Aug 04 16:08:40 2004 (41107D68)
f4645000 f464e480 NDProxy NDProxy.SYS Sat Aug 18 06:55:30 2001 (3B7D84C2)
f48d9000 f48dda80 Msfs Msfs.SYS Wed Aug 04 16:00:37 2004 (41107B85)
f48e1000 f48e6200 vga vga.sys Wed Aug 04 16:07:06 2004 (41107D0A)
f48e9000 f48ef180 HIDPARSE HIDPARSE.SYS Wed Aug 04 16:08:15 2004 (41107D4F)
f48f9000 f48fe000 flpydisk flpydisk.sys Wed Aug 04 15:59:24 2004 (41107B3C)
f4a20000 f4a29f00 termdd termdd.sys Wed Aug 04 15:58:52 2004 (41107B1C)
f4a70000 f4a7ed80 sysaudio sysaudio.sys Wed Aug 04 16:15:54 2004 (41107F1A)
f56dd000 f56e0c80 mssmbios mssmbios.sys Wed Aug 04 16:07:47 2004 (41107D33)
f56f5000 f56f7280 rasacd rasacd.sys Sat Aug 18 06:55:39 2001 (3B7D84CB)
f651d000 f65263c0 ATNT40K ATNT40K.SYS Wed Feb 22 01:05:40 2006 (43FB1E34)
f6902000 f6905780 dump_scsiport dump_scsiport.sys Wed Aug 04 15:59:51 2004 (41107B57)
f6906000 f6908f80 mouhid mouhid.sys Sat Aug 18 06:47:57 2001 (3B7D82FD)
f690e000 f6911a00 kbdhid kbdhid.sys Wed Aug 04 15:58:33 2004 (41107B09)
f6b36000 f6b46e00 psched psched.sys Wed Aug 04 16:04:16 2004 (41107C60)
f6b47000 f6b5d680 ndiswan ndiswan.sys Wed Aug 04 16:14:30 2004 (41107EC6)
f6b5e000 f6b71900 parport parport.sys Wed Aug 04 15:59:04 2004 (41107B28)
f6b72000 f6b95980 portcls portcls.sys Wed Aug 04 16:15:47 2004 (41107F13)
f6b96000 f6dc8940 ALCXWDM ALCXWDM.SYS Wed Dec 22 20:07:00 2004 (41C93934)
f6dc9000 f6debe80 USBPORT USBPORT.SYS Wed Aug 04 16:08:34 2004 (41107D62)
f6dec000 f6e0e680 ks ks.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f6e0f000 f6fd5960 Intels51 Intels51.sys Sat Dec 11 06:30:38 2004 (41B9F95E)
f6fd6000 f7010e80 yk51x86 yk51x86.sys Tue Sep 20 01:33:14 2005 (432EDA3A)
f7011000 f7024780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 16:07:04 2004 (41107D08)
f7025000 f72c2e20 nv4_mini nv4_mini.sys Fri Oct 01 07:22:48 2004 (415C7928)
f72cf000 f72d1900 Dxapi Dxapi.sys Sat Aug 18 06:53:19 2001 (3B7D843F)
f72e3000 f72e5580 ndistapi ndistapi.sys Sat Aug 18 06:55:29 2001 (3B7D84C1)
f730b000 f7325580 Mup Mup.sys Wed Aug 04 16:15:20 2004 (41107EF8)
f7326000 f7352a80 NDIS NDIS.sys Wed Aug 04 16:14:27 2004 (41107EC3)
f7353000 f73df480 Ntfs Ntfs.sys Wed Aug 04 16:15:06 2004 (41107EEA)
f73e0000 f73f6780 KSecDD KSecDD.sys Wed Aug 04 15:59:45 2004 (41107B51)
f73f7000 f740bf80 drvmcdb drvmcdb.sys Thu Dec 09 04:40:24 2004 (41B73C88)
f740c000 f741df00 sr sr.sys Wed Aug 04 16:06:22 2004 (41107CDE)
f741e000 f743d780 fltMgr fltMgr.sys Mon Aug 21 19:14:57 2006 (44E97991)
f743e000 f7455800 SCSIPORT SCSIPORT.SYS Wed Aug 04 15:59:39 2004 (41107B4B)
f7456000 f7468180 viamraid viamraid.sys Tue May 18 18:07:20 2004 (40A9C438)
f7469000 f747e780 nvatabus nvatabus.sys Wed Dec 08 11:15:51 2004 (41B647B7)
f747f000 f7496480 atapi atapi.sys Wed Aug 04 15:59:41 2004 (41107B4D)
f7497000 f74bc700 dmio dmio.sys Wed Aug 04 16:07:13 2004 (41107D11)
f74bd000 f74db880 ftdisk ftdisk.sys Sat Aug 18 06:52:41 2001 (3B7D8419)
f74dc000 f74eca80 pci pci.sys Wed Aug 04 16:07:45 2004 (41107D31)
f74ed000 f751ad80 ACPI ACPI.sys Wed Aug 04 16:07:35 2004 (41107D27)
f761c000 f7624c00 isapnp isapnp.sys Sat Aug 18 06:58:01 2001 (3B7D8559)
f762c000 f763ae80 ohci1394 ohci1394.sys Wed Aug 04 16:10:05 2004 (41107DBD)
f763c000 f7649000 1394BUS 1394BUS.SYS Wed Aug 04 16:10:03 2004 (41107DBB)
f764c000 f7656500 MountMgr MountMgr.sys Wed Aug 04 15:58:29 2004 (41107B05)
f765c000 f7668c80 VolSnap VolSnap.sys Wed Aug 04 16:00:14 2004 (41107B6E)
f766c000 f7674e00 disk disk.sys Wed Aug 04 15:59:53 2004 (41107B59)
f767c000 f7688200 CLASSPNP CLASSPNP.SYS Wed Aug 04 16:14:26 2004 (41107EC2)
f768c000 f7694b60 PxHelp20 PxHelp20.sys Thu Aug 10 03:27:31 2006 (44DA1B03)
f76bc000 f76ca080 redbook redbook.sys Wed Aug 04 15:59:34 2004 (41107B46)
f76cc000 f76dab80 drmk drmk.sys Wed Aug 04 16:07:54 2004 (41107D3A)
f76dc000 f76ebd80 serial serial.sys Wed Aug 04 16:15:51 2004 (41107F17)
f76ec000 f76f8880 rasl2tp rasl2tp.sys Wed Aug 04 16:14:21 2004 (41107EBD)
f76fc000 f7706200 raspppoe raspppoe.sys Wed Aug 04 16:05:06 2004 (41107C92)
f770c000 f7717d00 raspptp raspptp.sys Wed Aug 04 16:14:26 2004 (41107EC2)
f773c000 f7744900 msgpc msgpc.sys Wed Aug 04 16:04:11 2004 (41107C5B)
f785c000 f786b000 AmdK8 AmdK8.sys Fri Jul 30 07:20:24 2004 (41096A18)
f786c000 f7876380 imapi imapi.sys Wed Aug 04 16:00:12 2004 (41107B6C)
f787c000 f7884c00 AFS2K AFS2K.SYS Fri Oct 08 11:16:03 2004 (4165EA53)
f788c000 f7898180 cdrom cdrom.sys Wed Aug 04 15:59:52 2004 (41107B58)
f789c000 f78a2200 PCIIDEX PCIIDEX.SYS Wed Aug 04 15:59:40 2004 (41107B4C)
f78a4000 f78a8900 PartMgr PartMgr.sys Sat Aug 18 11:32:23 2001 (3B7DC5A7)
f78cc000 f78d0080 raspti raspti.sys Sat Aug 18 06:55:32 2001 (3B7D84C4)
f78d4000 f78da000 kbdclass kbdclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
f78dc000 f78e1a00 mouclass mouclass.sys Wed Aug 04 15:58:32 2004 (41107B08)
f78e4000 f78e8980 amddiag amddiag.sys Tue Sep 16 03:51:57 2003 (3F65FC3D)
f796c000 f7973580 Modem Modem.SYS Wed Aug 04 16:08:04 2004 (41107D44)
f7974000 f7979000 usbuhci usbuhci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f797c000 f7982800 usbehci usbehci.sys Wed Aug 04 16:08:34 2004 (41107D62)
f7984000 f7985000 fdc fdc.sys unavailable (00000000)
f798c000 f7990c80 rasirda rasirda.sys Sat Aug 18 06:51:29 2001 (3B7D83D1)
f7994000 f7998880 TDI TDI.SYS Wed Aug 04 16:07:47 2004 (41107D33)
f7a24000 f7a28580 ptilink ptilink.sys Sat Aug 18 06:49:53 2001 (3B7D8371)
f7a2c000 f7a2f000 BOOTVID BOOTVID.dll Sat Aug 18 06:49:09 2001 (3B7D8345)
f7ac8000 f7aca580 hidusb hidusb.sys Sat Aug 18 07:02:16 2001 (3B7D8658)
f7ae0000 f7ae3b00 usbscan usbscan.sys Wed Aug 04 15:58:44 2004 (41107B14)
f7b18000 f7b1bc80 serenum serenum.sys Wed Aug 04 15:59:06 2004 (41107B2A)
f7b1c000 f7b1db80 kdcom kdcom.dll Sat Aug 18 06:49:10 2001 (3B7D8346)
f7b1e000 f7b1f100 WMILIB WMILIB.SYS Sat Aug 18 07:07:23 2001 (3B7D878B)
f7b20000 f7b21500 viaide viaide.sys Wed Aug 04 15:59:42 2004 (41107B4E)
f7b22000 f7b23700 dmload dmload.sys Sat Aug 18 06:58:15 2001 (3B7D8567)
f7b50000 f7b51900 splitter splitter.sys Wed Jun 14 18:47:46 2006 (448FCD32)
f7b5a000 f7b5b100 swenum swenum.sys Wed Aug 04 15:58:41 2004 (41107B11)
f7b5c000 f7b5d280 USBD USBD.SYS Sat Aug 18 07:02:58 2001 (3B7D8682)
f7b6a000 f7b6bf00 Fs_Rec Fs_Rec.SYS Sat Aug 18 06:49:37 2001 (3B7D8361)
f7b6c000 f7b6d080 Beep Beep.SYS Sat Aug 18 06:47:33 2001 (3B7D82E5)
f7b6e000 f7b6f080 mnmdd mnmdd.SYS Sat Aug 18 06:57:28 2001 (3B7D8538)
f7b70000 f7b71080 RDPCDD RDPCDD.sys Sat Aug 18 06:46:56 2001 (3B7D82C0)
f7b74000 f7b75080 avg7rsw avg7rsw.sys Tue Jul 26 22:10:51 2005 (42E6284B)
f7bb2000 f7bb3a80 ParVdm ParVdm.SYS Sat Aug 18 06:49:49 2001 (3B7D836D)
f7be4000 f7be4d00 pciide pciide.sys Sat Aug 18 06:51:49 2001 (3B7D83E5)
f7c93000 f7c93d00 dxgthk dxgthk.sys Sat Aug 18 06:53:12 2001 (3B7D8438)
f7cef000 f7cefc00 audstub audstub.sys Sat Aug 18 06:59:40 2001 (3B7D85BC)

Unloaded modules:
f7b44000 f7b46000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ebfbd000 ebfe8000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ec088000 ec0b3000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed465000 ed490000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2101000 f2102000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4a60000 f4a6d000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f4a40000 f4a4e000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ed490000 ed4b3000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b82000 f7b84000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f776c000 f7777000 ousbehci.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3fdb000 f3fe4000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f2058000 f205c000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3ffb000 f4008000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f48f1000 f48f6000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Turned this setting on and still BSOD on shutdown!!!

 

I got the client to save the system log to a TEXT file.
SYSTEM LOG file is here: http://users.on.net/~cadmed/dumps/SYSLOG.TXT

 

done everything that everyone suggested and as yet haven't solved this blue screen. anyone else have any more suggestions?