BugCheck, STOP: 0x000000C5 (0xE4495A7A, 0x00000002, 0x00000000, 0x8046D233)

Hi,

I'm a new member, been looking at the previous bug check postings and wanted to find more information about a recent server crash we had this past weekend. I really suspect it was a crash from an application but the application developers are pushing the blame on a HP preinstalled application.

Any comments are more than welcome.

The server in question is a HP Proliant DL360 G3 with Windows 2000 server.

Below is a listing of installed patches.

Hotfixes:
Windows Media Player:
Q828026
[FileList]: Installed on ??/??/?? by Unknown
SP0
[Q828026]: Installed on 8/20/2004 by Administrator
Windows 2000:
SP4
[Q327194]: Installed on 8/24/2004 by administrator
SP5
[KB823182]: Installed on 8/20/2004 by Administrator
[KB823559]: Installed on 8/20/2004 by Administrator
[KB824105]: Installed on 8/20/2004 by Administrator
[KB825119]: Installed on 8/20/2004 by Administrator
[KB826232]: Installed on 8/20/2004 by Administrator
[KB828035]: Installed on 8/20/2004 by Administrator
[KB828741]: Installed on 8/20/2004 by Administrator
[KB828749]: Installed on 8/20/2004 by Administrator
[KB835732]: Installed on 8/20/2004 by Administrator
[KB837001]: Installed on 8/20/2004 by Administrator
[KB839643]: Installed on 8/20/2004 by Administrator
[KB839645]: Installed on 8/20/2004 by Administrator
[KB840315]: Installed on 8/20/2004 by Administrator
[KB841872]: Installed on 8/20/2004 by Administrator
[KB841873]: Installed on 8/20/2004 by Administrator
[KB842526]: Installed on 8/20/2004 by Administrator
DataAccess:
KB870669
Q318202
Q328797
Q832483

********************************
********************************
DEBUGLOG
********************************
********************************

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\CRASH_DUMP_SAVES\SEDCMETO_021605\MEMORY\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS
Kernel base = 0x80400000 PsLoadedModuleList = 0x80484b40
Debug session time: Tue Feb 15 22:00:57.109 2005 (GMT-8)
System Uptime: 48 days 13:52:07.656
Loading Kernel Symbols
....................................................................................................
Loading unloaded module list
.....
Loading User Symbols
....................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {e4495a7a, 2, 0, 8046d233}

*** ERROR: Module load completed but symbols could not be loaded for VsapiNT.sys
*** ERROR: Module load completed but symbols could not be loaded for TMFilter.sys
*** WARNING: Unable to verify checksum for StUpdate.exe
*** ERROR: Module load completed but symbols could not be loaded for StUpdate.exe
Probably caused by : Pool_Corruption ( nt!ExFreePool+b )

Followup: Pool_corruption
---------

0: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: e4495a7a, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8046d233, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExFreePoolWithTag+363
8046d233 80780200 cmp byte ptr [eax+0x2],0x0

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

LAST_CONTROL_TRANSFER: from 8046ce4d to 8046d233

TRAP_FRAME: be1ef394 -- (.trap ffffffffbe1ef394)
.trap ffffffffbe1ef394
ErrCode = 00000000
eax=e4495a78 ebx=00000000 ecx=00001180 edx=00000000 esi=e4496bf8 edi=89098780
eip=8046d233 esp=be1ef408 ebp=be1ef428 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ExFreePoolWithTag+0x363:
8046d233 80780200 cmp byte ptr [eax+0x2],0x0 ds:0023:e4495a7a=??
.trap
Resetting default scope

STACK_TEXT:
be1ef428 8046ce4d 0000003c 00000000 bdab1654 nt!ExFreePoolWithTag+0x363
be1ef434 bdab1654 e4496c00 be1ef454 bdb11596 nt!ExFreePool+0xb
WARNING: Stack unwind information not available. Following frames may be wrong.
be1ef440 bdb11596 e4496c14 e3e831d8 e248ec74 VsapiNT+0x74654
be1ef454 bdb1156c e248ec98 00000000 e3e7f014 VsapiNT+0xd4596
be1ef468 bdaba2c7 e3e831d8 e3e830e0 e3e7f014 VsapiNT+0xd456c
be1ef47c bda802f3 e3e7f014 e222f814 e3e7f014 VsapiNT+0x7d2c7
be1ef494 bda80361 00000006 e3e7f014 be1ef4c0 VsapiNT+0x432f3
be1ef4a4 bdab8be8 e3e7f014 00000000 00000000 VsapiNT+0x43361
be1ef4c0 bdab89bb e222f814 e3e7f014 00000001 VsapiNT+0x7bbe8
be1ef618 bda28223 e218a014 be1ef680 00000000 VsapiNT+0x7b9bb
be1ef660 bda18ac1 e218a014 be1ef680 00000000 TMFilter+0x25223
be1efa04 bda1d16c e218a014 bda2f6c4 0012fd20 TMFilter+0x15ac1
be1efb50 bda1d0c4 0012fd20 be1efb6b 0012f958 TMFilter+0x1a16c
be1efb6c bda11560 00000000 0012fd20 0012f964 TMFilter+0x1a0c4
be1efb8c bda154f0 be1efbe4 871415e8 871415e8 TMFilter+0xe560
be1efbd0 bda24e93 be1efbe4 884ae3b0 871415e8 TMFilter+0x124f0
be1efc00 8041de73 884ae3b0 871415e8 871415e8 TMFilter+0x21e93
be1efc14 804b1168 87141658 00000000 871415e8 nt!IopfCallDriver+0x35
be1efc28 804b1fbc 884ae3b0 871415e8 87706f88 nt!IopSynchronousServiceTail+0x60
be1efd00 804a9c6c 000001bc 000001e8 00000000 nt!IopXxxControlFile+0x5d6
be1efd34 804668a9 000001bc 000001e8 00000000 nt!NtDeviceIoControlFile+0x28
be1efd34 77f82ca0 000001bc 000001e8 00000000 nt!KiSystemService+0xc9
0012f874 7c5784ab 000001bc 000001e8 00000000 ntdll!NtDeviceIoControlFile+0xb
0012f8d8 00403c65 000001bc a02844db 0012f958 KERNEL32!DeviceIoControl+0x93
000001bc 00000000 00000000 00000000 00000000 StUpdate+0x3c65


FOLLOWUP_IP:
nt!ExFreePool+b
8046ce4d c20400 ret 0x4

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExFreePool+b

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap ffffffffbe1ef394 ; kb

FAILURE_BUCKET_ID: 0xC5_2_nt!ExFreePool+b

BUCKET_ID: 0xC5_2_nt!ExFreePool+b

Followup: Pool_corruption
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=8046d233 edi=e4495a7a
eip=80469e24 esp=be1ef380 ebp=be1ef394 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x284:
80469e24 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:be1ef404=00010286
ChildEBP RetAddr Args to Child
be1ef394 8046d233 87297680 00000000 00000114 nt!KiTrap0E+0x284 (FPO: [0,0] TrapFrame @ be1ef394)
be1ef428 8046ce4d 0000003c 00000000 bdab1654 nt!ExFreePoolWithTag+0x363 (FPO: [Non-Fpo])
be1ef434 bdab1654 e4496c00 be1ef454 bdb11596 nt!ExFreePool+0xb (FPO: [1,0,0])
WARNING: Stack unwind information not available. Following frames may be wrong.
be1ef440 bdb11596 e4496c14 e3e831d8 e248ec74 VsapiNT+0x74654
be1ef454 bdb1156c e248ec98 00000000 e3e7f014 VsapiNT+0xd4596
be1ef468 bdaba2c7 e3e831d8 e3e830e0 e3e7f014 VsapiNT+0xd456c
be1ef47c bda802f3 e3e7f014 e222f814 e3e7f014 VsapiNT+0x7d2c7
be1ef494 bda80361 00000006 e3e7f014 be1ef4c0 VsapiNT+0x432f3
be1ef4a4 bdab8be8 e3e7f014 00000000 00000000 VsapiNT+0x43361
be1ef4c0 bdab89bb e222f814 e3e7f014 00000001 VsapiNT+0x7bbe8
be1ef618 bda28223 e218a014 be1ef680 00000000 VsapiNT+0x7b9bb
be1ef660 bda18ac1 e218a014 be1ef680 00000000 TMFilter+0x25223
be1efa04 bda1d16c e218a014 bda2f6c4 0012fd20 TMFilter+0x15ac1
be1efb50 bda1d0c4 0012fd20 be1efb6b 0012f958 TMFilter+0x1a16c
be1efb6c bda11560 00000000 0012fd20 0012f964 TMFilter+0x1a0c4
be1efb8c bda154f0 be1efbe4 871415e8 871415e8 TMFilter+0xe560
be1efbd0 bda24e93 be1efbe4 884ae3b0 871415e8 TMFilter+0x124f0
be1efc00 8041de73 884ae3b0 871415e8 871415e8 TMFilter+0x21e93
be1efc14 804b1168 87141658 00000000 871415e8 nt!IopfCallDriver+0x35 (FPO: [0,0,2])
be1efc28 804b1fbc 884ae3b0 871415e8 87706f88 nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])

 

start end module name
00230000 0024a000 GENKEY32 GENKEY32.dll Wed May 21 18:39:27 1997 (3383A3CF)
00400000 0040e000 StUpdate StUpdate.exe Tue Jan 13 08:16:11 2004 (400419CB)
10000000 10015000 tmeng tmeng.dll Thu Sep 25 23:09:21 2003 (3F73D811)
601e0000 601f6000 CheckEVC CheckEVC.dll Tue Jan 13 08:07:16 2004 (400417B4)
60640000 60646000 AgRpcCln AgRpcCln.dll Tue Jan 13 08:15:36 2004 (400419A8)
620e0000 620f5000 GetRemoteVer GetRemoteVer.dll Tue Jan 13 08:11:44 2004 (400418C0)
63150000 63174000 LogDb LogDb.dll Tue Jan 13 08:14:01 2004 (40041949)
63270000 63279000 LogMaster LogMaster.dll Tue Jan 13 08:14:35 2004 (4004196B)
65240000 65246000 SpTrace SpTrace.dll Tue Jan 13 08:07:14 2004 (400417B2)
65630000 65646000 StCommon StCommon.dll Tue Jan 13 08:11:51 2004 (400418C7)
70a70000 70ad4000 SHLWAPI SHLWAPI.DLL Wed Jul 07 18:48:37 2004 (40ECA7F5)
71710000 71794000 COMCTL32 COMCTL32.DLL Thu Aug 29 07:13:07 2002 (3D6E2BF3)
74fd0000 74fee000 msafd msafd.dll Thu Jun 19 19:44:06 2003 (3EF274F6)
74ff0000 75002000 mswsock mswsock.dll Thu Jun 19 19:44:08 2003 (3EF274F8)
75010000 75017000 wshtcpip wshtcpip.dll Thu Jun 19 19:44:22 2003 (3EF27506)
75020000 75028000 WS2HELP WS2HELP.DLL Tue Nov 30 01:31:09 1999 (3843995D)
75030000 75044000 WS2_32 WS2_32.DLL Thu Jun 19 19:44:22 2003 (3EF27506)
75050000 75058000 WSOCK32 WSOCK32.DLL Thu Jun 19 19:44:22 2003 (3EF27506)
75150000 7515f000 SAMLIB SAMLIB.dll Tue Mar 23 18:17:02 2004 (4060EF9E)
75170000 751bf000 NETAPI32 NETAPI32.dll Thu Jun 10 09:58:10 2004 (40C89322)
751c0000 751c6000 NETRAP NETRAP.dll Tue Nov 30 01:31:07 1999 (3843995B)
759b0000 759b6000 LZ32 LZ32.DLL Thu Jun 19 19:43:46 2003 (3EF274E2)
76620000 76630000 MPR MPR.dll Tue Mar 23 18:17:02 2004 (4060EF9E)
76f70000 77062000 MFC42u MFC42u.DLL Thu Dec 09 22:06:02 1999 (3850984A)
77320000 77337000 MPRAPI MPRAPI.DLL Tue Nov 30 23:37:29 1999 (3844D039)
77340000 77353000 iphlpapi iphlpapi.dll Thu Jun 19 19:43:42 2003 (3EF274DE)
77360000 77379000 DHCPCSVC DHCPCSVC.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
77380000 773a3000 ADSLDPC ADSLDPC.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
773b0000 773df000 ACTIVEDS ACTIVEDS.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
774c0000 774d1000 RASMAN RASMAN.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
774e0000 77513000 RASAPI32 RASAPI32.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
77520000 77525000 ICMP ICMP.DLL Tue Nov 30 23:37:29 1999 (3844D039)
77530000 77552000 TAPI32 TAPI32.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
777e0000 777e8000 winrnr winrnr.dll Tue Nov 30 23:37:27 1999 (3844D037)
77820000 77827000 VERSION VERSION.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
77830000 7783e000 RTUTILS RTUTILS.DLL Tue Nov 30 23:37:27 1999 (3844D037)
77880000 7790e000 SETUPAPI SETUPAPI.DLL Thu Jun 19 19:43:41 2003 (3EF274DD)
77950000 7797a000 WLDAP32 WLDAP32.DLL Thu Jun 19 19:43:41 2003 (3EF274DD)
77980000 779a4000 DNSAPI DNSAPI.DLL Tue Mar 23 18:17:00 2004 (4060EF9C)
779b0000 77a4b000 OLEAUT32 OLEAUT32.DLL Thu Jun 19 19:43:41 2003 (3EF274DD)
77a50000 77b3f000 OLE32 OLE32.DLL Thu Mar 11 13:29:21 2004 (4050DA31)
77bf0000 77c01000 NTDSAPI NTDSAPI.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
77d30000 77da1000 RPCRT4 RPCRT4.DLL Thu Mar 11 13:29:21 2004 (4050DA31)
77e10000 77e75000 USER32 USER32.dll Tue Mar 23 18:17:00 2004 (4060EF9C)
77f40000 77f7e000 GDI32 GDI32.DLL Tue Mar 23 18:17:00 2004 (4060EF9C)
77f80000 77ffd000 ntdll ntdll.dll Tue Mar 23 18:16:59 2004 (4060EF9B)
78000000 78045000 MSVCRT MSVCRT.dll Tue Mar 11 10:55:17 2003 (3E6E3115)
782c0000 782cc000 rnr20 rnr20.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
7c0f0000 7c151000 USERENV USERENV.DLL Tue Aug 05 15:14:10 2003 (3F302C32)
7c2d0000 7c332000 ADVAPI32 ADVAPI32.dll Tue Mar 23 18:17:00 2004 (4060EF9C)
7c340000 7c34f000 Secur32 Secur32.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
7c570000 7c628000 KERNEL32 KERNEL32.dll Tue Mar 23 18:17:00 2004 (4060EF9C)
80062000 80076460 hal halmacpi.dll Thu Mar 20 18:04:42 2003 (3E7A733A)
80400000 8059f040 nt ntkrnlmp.exe Wed Feb 25 15:55:14 2004 (403D35E2)
a0000000 a01a4000 win32k win32k.sys unavailable (FFFFFFFE)
a01a4000 a01a6b40 awvid5 awvid5.dll Thu Feb 07 12:41:40 2002 (3C62E684)
a01a7000 a01a8000 AWDDI5 AWDDI5.DLL unavailable (FFFFFFFE)
a01a8000 a01ff000 ati2drad ati2drad.DLL unavailable (FFFFFFFE)
bda03000 bda3c7c0 TMFilter TMFilter.sys Thu Jan 13 23:53:09 2005 (41E77A65)
bda3d000 bdb27f40 VsapiNT VsapiNT.sys Thu Jan 13 23:29:03 2005 (41E774BF)
be00a000 be01ff00 RDPWD RDPWD.SYS Wed Jan 21 11:50:25 2004 (400ED801)
be088000 be097a20 ipsec ipsec.sys Tue Apr 29 16:04:59 2003 (3EAF051B)
be340000 be3491a0 NMnt NMnt.sys Tue Apr 01 13:32:41 2003 (3E8A0579)
be728000 be74a3c0 Fastfat Fastfat.SYS Wed Jan 15 11:48:39 2003 (3E25BB17)
be9eb000 be9f9fe0 Cdfs Cdfs.SYS Tue Apr 15 20:58:53 2003 (3E9CD4FD)
bea1b000 bea23a60 termdd termdd.sys Fri Mar 21 13:43:08 2003 (3E7B876C)
becab000 becb3240 Fips Fips.SYS Tue May 09 08:28:29 2000 (39182E9D)
bed8b000 bedc6bc0 srv srv.sys Tue Apr 29 16:05:07 2003 (3EAF0523)
bef2f000 bef4c4a0 afd afd.sys Wed Apr 30 01:45:29 2003 (3EAF8D29)
bf0dd000 bf143240 mrxsmb mrxsmb.sys Thu May 22 15:46:57 2003 (3ECD5361)
bf156000 bf1809c0 rdbss rdbss.sys Thu May 22 15:47:05 2003 (3ECD5369)
bf181000 bf1a8e00 netbt netbt.sys Wed Jul 16 12:44:26 2003 (3F15AB1A)
bf1a9000 bf1fa060 tcpip tcpip.sys Tue Apr 29 16:05:31 2003 (3EAF053B)
bf3fb000 bf3fee20 dump_cpqcissm dump_cpqcissm.sys Mon Feb 02 12:01:16 2004 (401EAC8C)
bf403000 bf4066c0 dump_diskdump dump_diskdump.sys Tue Feb 25 11:18:04 2003 (3E5BC16C)
bfc2f000 bfc593a0 update update.sys Tue Apr 15 21:22:01 2003 (3E9CDA69)
bfc5a000 bfc75b40 ks ks.sys Tue Apr 15 21:02:11 2003 (3E9CD5C3)
bfc88000 bfcab060 rdpdr rdpdr.sys Fri Mar 21 13:43:14 2003 (3E7B8772)
bfcac000 bfcc2ba0 ndiswan ndiswan.sys Tue Apr 29 16:05:01 2003 (3EAF051D)
bfcc3000 bfceb200 e1000nt5 e1000nt5.sys Tue Jun 22 14:17:03 2004 (40D8A1CF)
bfcec000 bfd32000 cpqasm2 cpqasm2.sys Tue May 18 10:41:30 2004 (40AA4ACA)
bfd32000 bfd87600 ati2mpad ati2mpad.sys Tue Aug 19 18:20:11 2003 (3F42CCCB)
bfd94000 bfd96740 awlegacy awlegacy.sys Mon Sep 11 15:19:37 2000 (39BD5A79)
bfd9c000 bfd9f580 vga vga.sys Sat Sep 25 11:37:40 1999 (37ED1674)
bfe30000 bfe33e60 TDI TDI.SYS Wed Jan 15 11:56:26 2003 (3E25BCEA)
bfe3c000 bfe3e2e0 ndistapi ndistapi.sys Wed Jan 15 11:54:15 2003 (3E25BC67)
bfe60000 bfe75640 Mup Mup.sys Wed Jan 15 11:54:01 2003 (3E25BC59)
bfe76000 bfe9faa0 NDIS NDIS.sys Tue Apr 29 16:05:01 2003 (3EAF051D)
bfea0000 bff225a0 Ntfs Ntfs.sys Fri May 09 12:46:45 2003 (3EBC05A5)
bff23000 bff347c0 KSecDD KSecDD.sys Sat Sep 20 17:32:19 2003 (3F6CF193)
bff35000 bff471c0 Dfs Dfs.sys Tue Feb 11 18:19:06 2003 (3E49AF1A)
bff48000 bff5a0c0 SCSIPORT SCSIPORT.SYS Fri May 16 18:11:02 2003 (3EC58C26)
bff5b000 bff82140 LsiCsb6 LsiCsb6.sys Thu Jul 31 13:38:06 2003 (3F297E2E)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 10:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 11:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Mon Mar 31 14:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 11:44:22 2003 (3E25BA16)
f6400000 f640e6a0 pci pci.sys Wed Jan 15 11:44:07 2003 (3E25BA07)
f6410000 f641b680 isapnp isapnp.sys Wed Jan 15 11:43:47 2003 (3E25B9F3)
f6420000 f642faa0 adpu160m adpu160m.sys Mon Oct 18 15:34:33 1999 (380BA079)
f6430000 f643a4c0 symmpi symmpi.sys Wed May 26 09:26:28 2004 (40B4C534)
f6440000 f6448700 CLASSPNP CLASSPNP.SYS Wed Jan 15 11:42:51 2003 (3E25B9BB)
f6450000 f645c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 11:47:20 2003 (3E25BAC8)
f6460000 f646d580 CPQCISSE CPQCISSE.sys Thu Mar 11 13:50:26 2004 (4050DF22)
f6510000 f651b680 i8042prt i8042prt.sys Tue Apr 15 21:00:59 2003 (3E9CD57B)
f6520000 f652f400 serial serial.sys Tue Apr 15 21:19:39 2003 (3E9CD9DB)
f6530000 f653ca80 rasl2tp rasl2tp.sys Tue Apr 29 16:05:06 2003 (3EAF0522)
f6540000 f654bc40 raspptp raspptp.sys Wed May 14 16:47:00 2003 (3EC2D574)
f6560000 f6569be0 usbhub usbhub.sys Tue Mar 18 15:30:41 2003 (3E77AC21)
f6580000 f6589ce0 NDProxy NDProxy.SYS Thu Sep 30 16:25:35 1999 (37F3F16F)
f6590000 f6598fa0 Npfs Npfs.SYS Sat Oct 09 16:58:07 1999 (37FFD68F)
f65a0000 f65a8680 msgpc msgpc.sys Wed Jan 15 11:54:25 2003 (3E25BC71)
f65b0000 f65b81a0 netbios netbios.sys Tue Oct 12 12:34:19 1999 (38038D3B)
f6680000 f6685520 PCIIDEX PCIIDEX.SYS Tue Feb 25 10:31:08 2003 (3E5BB66C)
f6688000 f668f4c0 MountMgr MountMgr.sys Tue Feb 10 11:47:53 2004 (40293569)
f6690000 f6696320 symc8xx symc8xx.sys Fri Mar 30 09:01:54 2001 (3AC4BC02)
f6698000 f669d180 sym_hi sym_hi.sys Sat Sep 25 12:11:49 1999 (37ED1E75)
f66a0000 f66a7720 disk disk.sys Wed Jan 15 11:43:05 2003 (3E25B9C9)
f66b0000 f66b7b60 aw_host5 aw_host5.sys Mon Feb 11 11:06:39 2002 (3C68163F)
f66b8000 f66bea20 EFS EFS.SYS Wed Jan 15 11:46:55 2003 (3E25BAAF)
f66c0000 f66c48c0 TDTCP TDTCP.SYS Fri Mar 21 13:43:08 2003 (3E7B876C)
f66d8000 f66dd240 Msfs Msfs.SYS Tue Oct 26 16:21:32 1999 (3816377C)
f66e0000 f66e4a20 CpqCiDrv CpqCiDrv.sys Fri Jul 11 08:32:03 2003 (3F0ED873)
f66f0000 f66f5ec0 kbdclass kbdclass.sys Thu Feb 20 08:37:30 2003 (3E55044A)
f6700000 f6705400 mouclass mouclass.sys Thu Feb 20 08:37:45 2003 (3E550459)
f6708000 f670fd00 wanarp wanarp.sys Fri Aug 16 05:25:01 2002 (3D5CEF1D)
f6718000 f671f000 fdc fdc.sys unavailable (FFFFFFFE)
f6728000 f672ec40 cdrom cdrom.sys Wed Jan 15 11:43:04 2003 (3E25B9C8)
f6738000 f673dfc0 openhci openhci.sys Fri Feb 28 16:28:59 2003 (3E5FFECB)
f6750000 f6754fc0 USBD USBD.SYS Wed Jan 22 09:05:33 2003 (3E2ECF5D)
f6770000 f6774400 ptilink ptilink.sys Wed Jan 15 11:47:15 2003 (3E25BAC3)
f6780000 f67840e0 raspti raspti.sys Fri Oct 08 13:45:10 1999 (37FE57D6)
f6798000 f679d000 flpydisk flpydisk.sys unavailable (FFFFFFFE)
f6810000 f6812a20 BOOTVID BOOTVID.dll Wed Nov 03 17:24:33 1999 (3820E051)
f6814000 f6816d00 PartMgr PartMgr.sys Wed Jan 15 11:43:07 2003 (3E25B9CB)
f6818000 f681bfe0 symc810 symc810.sys Sat Sep 25 12:11:49 1999 (37ED1E75)
f681c000 f681fe20 cpqcissm cpqcissm.sys Mon Feb 02 12:01:16 2004 (401EAC8C)
f6820000 f6823360 cpqarry2 cpqarry2.sys Fri Oct 01 16:47:57 1999 (37F5482D)
f6824000 f6827780 Gernuwa Gernuwa.sys Tue Oct 09 13:14:34 2001 (3BC35AAA)
f68b8000 f68bb640 serenum serenum.sys Wed Jan 15 11:47:01 2003 (3E25BAB5)
f6900000 f6901d20 Diskperf Diskperf.sys Wed Feb 12 13:34:38 2003 (3E4ABDEE)
f6902000 f6904000 dmload dmload.sys unavailable (FFFFFFFE)
f6910000 f6912000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f6918000 f6919e40 rasacd rasacd.sys Sat Sep 25 11:41:23 1999 (37ED1753)
f69c8000 f69c8f80 WMILIB WMILIB.SYS Sat Sep 25 11:36:47 1999 (37ED163F)
f69c9000 f69c9b00 pciide pciide.sys Wed Jan 15 11:43:03 2003 (3E25B9C7)
f69d2000 f69d2b80 sysmgmt sysmgmt.sys Tue May 18 10:41:32 2004 (40AA4ACC)
f69f5000 f69f5a40 audstub audstub.sys Sat Sep 25 11:35:33 1999 (37ED15F5)
f69f6000 f69f67c0 AlKernel AlKernel.sys Fri Aug 24 15:31:42 2001 (3B86D5CE)
f69ff000 f69ffd80 swenum swenum.sys Sat Sep 25 11:36:31 1999 (37ED162F)
f6a19000 f6a1a000 Null Null.SYS unavailable (FFFFFFFE)
f6a1b000 f6a1bee0 Beep Beep.SYS Wed Oct 20 15:18:59 1999 (380E3FD3)
f6a1f000 f6a1ff80 mnmdd mnmdd.SYS Sat Sep 25 11:37:40 1999 (37ED1674)

Unloaded modules:
bee24000 bef07000 VsapiNT.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bedc7000 bedfc000 TMFilter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f65c0000 f65c9000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f66c8000 f66cd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
bfda4000 bfda7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

This dump is indicating pool corruption. You will need to enable "special pool" and get another crash dump. When it crashes with special pool enabled, you should see the bad driver right on the stack.

Using the registry to enable special pool <---recommended proceedure using *
http://support.microsoft.com/kb/188831/EN-US/

Turn this on, get a new dump.

Things to consider before you enable Driver Verifier Manager on production servers
http://support.microsoft.com/kb/251233/EN-US/

Note that this will increase the frequency of the crashes

 

ERmm sorry creationkrew can i know how do u generate such report..... i've been recieving almost same blue screen message

Stop : 0X000000C5(0XE19460000,0X00000002,0X00000001,0X8054B46E)

 

use the dump tool in my signature. Please start a new thread when you get your log file.

note that if you are getting a C5, we will most likely need to follows ben's advice above and enable special pool to get to root cause.

 

outcome

What was the outcome for this error. I am getting the same error on several HP DL360 servers.