DATA DUMP Bugcheck - wpsdrvnt.sys

Hello All,

I'm running Win2K Advanced Server , 1gig RAM. About every three days my machine crashes displaying the dreaded blue screen. I ran the Bugcheck and this is what my debuglog.txt file looks like.

************* START **********************************

Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: Server, suite: Enterprise
Kernel base = 0x80400000 PsLoadedModuleList = 0x804805c0
Debug session time: Fri Dec 03 20:16:17 2004
System Uptime: 0 days 0:00:38.109
Loading Kernel Symbols
.................................................................................................
Loading unloaded module list
.....
Loading User Symbols
.................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {624, 2, 0, eb1c388f}

*** ERROR: Module load completed but symbols could not be loaded for
Probably caused by : wpsdrvnt.sys ( wpsdrvnt+388f )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000624, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: eb1c388f, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 00000624

CURRENT_IRQL: 2

FAULTING_IP:
wpsdrvnt+388f
eb1c388f a274631ceb mov [wpsdrvnt+0x6374 (eb1c6374)],al

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

LAST_CONTROL_TRANSFER: from 80463d94 to eb1c388f

TRAP_FRAME: eb18fc68 -- (.trap ffffffffeb18fc68)
.trap ffffffffeb18fc68
ErrCode = 00000000
eax=00000000 ebx=00000608 ecx=001c6370 edx=00000000 esi=0006f5f0 edi=00000000
eip=eb1c388f esp=eb18fcdc ebp=eb18fd3c iopl=0 nv up ei pl zr ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010256
wpsdrvnt+0x388f:
eb1c388f a274631ceb mov [wpsdrvnt+0x6374 (eb1c6374)],al ds:0023:eb1c6374=00
.trap
Resetting default scope

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
eb18fd3c 80463d94 0006fb84 001f03ff 00000000 wpsdrvnt+0x388f
eb18fd3c 77f880e8 0006fb84 001f03ff 00000000 nt!KiSystemService+0xc4
0006f5c8 7c596480 0006fb84 001f03ff 00000000 ntdll!NtCreateThread+0xb
0006fcb4 7c596911 00000000 000bbc80 000d6a18 KERNEL32!CreateProcessInternalW+0x1465
0006fce8 01008900 00000000 000d6a18 00000000 KERNEL32!CreateProcessW+0x28
0006fde8 0100877c 00486c18 000d6a18 0006fe40 services!ScLogonAndStartImage+0x38b
0006fe4c 010083bf 00000000 00000000 00000000 services!ScStartService+0x1cc
0006feb8 01008101 00000000 00000000 00000000 services!ScStartMarkedServices+0x8e
0006fef4 01003bef 00000000 00000000 00000000 services!ScStartServiceAndDependencies+0x20e
0006ff04 01001a1b 00000000 00cc00ca 0006ffc0 services!ScAutoStartServices+0xa
0006ff64 0100170a 00000001 00234148 010016cf services!SvcctrlMain+0x3b5
0006ff70 010016cf 00000001 00234148 002329a8 services!main+0x12
0006ffc0 7c59893d 00000000 00cc00ca 7ffdf000 services!mainCRTStartup+0xff
0006fff0 00000000 010015da 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d


FOLLOWUP_IP:
wpsdrvnt+388f
eb1c388f a274631ceb mov [wpsdrvnt+0x6374 (eb1c6374)],al

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: wpsdrvnt+388f

MODULE_NAME: wpsdrvnt

IMAGE_NAME: wpsdrvnt.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 417076f5

STACK_COMMAND: .trap ffffffffeb18fc68 ; kb

BUCKET_ID: 0xD1_wpsdrvnt+388f

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000000a ecx=00000000 edx=40000000 esi=eb1c388f edi=00000624
eip=80466b77 esp=eb18fc54 ebp=eb18fc68 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x20b:
80466b77 f7457000000200 test dword ptr [ebp+0x70],0x20000 ss:0010:eb18fcd8=00010256
ChildEBP RetAddr Args to Child
eb18fc68 eb1c388f 80064f01 85e9d4e0 eb18fca8 nt!KiTrap0E+0x20b (FPO: [0,0] TrapFrame @ eb18fc68)
WARNING: Stack unwind information not available. Following frames may be wrong.
eb18fd3c 80463d94 0006fb84 001f03ff 00000000 wpsdrvnt+0x388f
eb18fd3c 77f880e8 0006fb84 001f03ff 00000000 nt!KiSystemService+0xc4 (FPO: [0,0] TrapFrame @ eb18fd64)
0006f5c8 7c596480 0006fb84 001f03ff 00000000 ntdll!NtCreateThread+0xb (FPO: [8,0,0])
0006fcb4 7c596911 00000000 000bbc80 000d6a18 KERNEL32!CreateProcessInternalW+0x1465 (FPO: [Non-Fpo])
0006fce8 01008900 00000000 000d6a18 00000000 KERNEL32!CreateProcessW+0x28 (FPO: [Non-Fpo])
0006fde8 0100877c 00486c18 000d6a18 0006fe40 services!ScLogonAndStartImage+0x38b (FPO: [Non-Fpo])
0006fe4c 010083bf 00000000 00000000 00000000 services!ScStartService+0x1cc (FPO: [Non-Fpo])
0006feb8 01008101 00000000 00000000 00000000 services!ScStartMarkedServices+0x8e (FPO: [Non-Fpo])
0006fef4 01003bef 00000000 00000000 00000000 services!ScStartServiceAndDependencies+0x20e (FPO: [Non-Fpo])
0006ff04 01001a1b 00000000 00cc00ca 0006ffc0 services!ScAutoStartServices+0xa (FPO: [0,0,0])
0006ff64 0100170a 00000001 00234148 010016cf services!SvcctrlMain+0x3b5 (FPO: [EBP 0x0006ffc0] [2,19,4])
0006ff70 010016cf 00000001 00234148 002329a8 services!main+0x12 (FPO: [2,0,0])
0006ffc0 7c59893d 00000000 00cc00ca 7ffdf000 services!mainCRTStartup+0xff
0006fff0 00000000 010015da 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d (FPO: [Non-Fpo])
start end module name
01000000 01018000 services services.exe Tue Apr 15 21:19:44 2003 (3E9CD9E0)
65780000 6578d000 WINSTA WINSTA.DLL Thu Jun 19 19:44:22 2003 (3EF27506)
70a70000 70ad9000 SHLWAPI SHLWAPI.DLL Fri Aug 20 15:01:15 2004 (412674AB)
71710000 71794000 COMCTL32 COMCTL32.DLL Thu Aug 29 07:13:07 2002 (3D6E2BF3)
74fd0000 74fee000 msafd msafd.dll Thu Jun 19 19:44:06 2003 (3EF274F6)
75010000 75017000 wshtcpip wshtcpip.dll Thu Jun 19 19:44:22 2003 (3EF27506)
75020000 75028000 WS2HELP WS2HELP.DLL Tue Nov 30 01:31:09 1999 (3843995D)
75030000 75044000 WS2_32 WS2_32.DLL Thu Jun 19 19:44:22 2003 (3EF27506)
75050000 75058000 WSOCK32 WSOCK32.DLL Thu Jun 19 19:44:22 2003 (3EF27506)
75150000 7515f000 SAMLIB SAMLIB.dll Tue Mar 23 18:17:02 2004 (4060EF9E)
75170000 751bf000 NETAPI32 NETAPI32.DLL Thu Jun 10 09:58:10 2004 (40C89322)
751c0000 751c6000 NETRAP NETRAP.dll Tue Nov 30 01:31:07 1999 (3843995B)
76460000 764a1000 SCESRV SCESRV.DLL Tue Mar 23 18:17:01 2004 (4060EF9D)
76620000 76630000 MPR MPR.DLL Tue Mar 23 18:17:02 2004 (4060EF9E)
76670000 7667e000 cryptdll cryptdll.dll Thu Jun 19 19:43:44 2003 (3EF274E0)
76770000 7678b000 wkssvc wkssvc.dll Thu Oct 02 14:53:32 2003 (3F7C9E5C)
767a0000 767b8000 UMPNPMGR UMPNPMGR.DLL Tue Nov 30 23:37:35 1999 (3844D03F)
767e0000 767f6000 Srvsvc Srvsvc.dll Thu Jun 19 19:43:44 2003 (3EF274E0)
76880000 76886000 lmhsvc lmhsvc.dll Thu Jun 19 19:43:44 2003 (3EF274E0)
76890000 7689f000 eventlog eventlog.dll Tue Mar 23 18:17:01 2004 (4060EF9D)
768a0000 768b9000 dnsrslvr dnsrslvr.dll Tue Mar 23 18:17:01 2004 (4060EF9D)
768c0000 768c6000 dmserver dmserver.dll Thu Jun 19 19:43:44 2003 (3EF274E0)
770b0000 770b7000 CFGMGR32 CFGMGR32.DLL Tue Nov 30 23:37:31 1999 (3844D03B)
77320000 77337000 MPRAPI MPRAPI.DLL Tue Nov 30 23:37:29 1999 (3844D039)
77340000 77353000 IPHLPAPI IPHLPAPI.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
77360000 77379000 dhcpcsvc dhcpcsvc.dll Thu Jun 19 19:43:42 2003 (3EF274DE)
77380000 773a3000 ADSLDPC ADSLDPC.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
773b0000 773df000 ACTIVEDS ACTIVEDS.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
774c0000 774d1000 RASMAN RASMAN.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
774e0000 77513000 RASAPI32 RASAPI32.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
77520000 77525000 ICMP ICMP.DLL Tue Nov 30 23:37:29 1999 (3844D039)
77530000 77552000 TAPI32 TAPI32.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
77800000 7781e000 WINSPOOL WINSPOOL.DRV Thu Jun 19 19:43:41 2003 (3EF274DD)
77830000 7783e000 RTUTILS RTUTILS.DLL Tue Nov 30 23:37:27 1999 (3844D037)
77880000 7790e000 SETUPAPI SETUPAPI.DLL Thu Jun 19 19:43:41 2003 (3EF274DD)
77950000 7797a000 WLDAP32 WLDAP32.DLL Thu Jun 19 19:43:41 2003 (3EF274DD)
77980000 779a4000 DNSAPI DNSAPI.DLL Tue Mar 23 18:17:00 2004 (4060EF9C)
779b0000 77a4b000 OLEAUT32 OLEAUT32.DLL Thu Jun 19 19:43:41 2003 (3EF274DD)
77a50000 77b3f000 OLE32 OLE32.DLL Thu Mar 11 13:29:21 2004 (4050DA31)
77bf0000 77c01000 NTDSAPI NTDSAPI.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
77d30000 77da1000 RPCRT4 RPCRT4.DLL Thu Mar 11 13:29:21 2004 (4050DA31)
77e10000 77e75000 USER32 USER32.DLL Tue Mar 23 18:17:00 2004 (4060EF9C)
77f40000 77f7b000 GDI32 GDI32.DLL Mon Jun 21 18:35:10 2004 (40D78CCE)
77f80000 77ffd000 ntdll ntdll.dll Tue Mar 23 18:16:59 2004 (4060EF9B)
78000000 78045000 MSVCRT MSVCRT.dll Tue Mar 11 10:55:17 2003 (3E6E3115)
7c0f0000 7c151000 USERENV USERENV.DLL Tue Aug 05 15:14:10 2003 (3F302C32)
7c2d0000 7c332000 ADVAPI32 ADVAPI32.DLL Tue Mar 23 18:17:00 2004 (4060EF9C)
7c340000 7c34f000 Secur32 Secur32.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
7c570000 7c623000 KERNEL32 KERNEL32.DLL Mon Jun 21 18:35:10 2004 (40D78CCE)
80062000 80076100 hal halaacpi.dll Thu Mar 20 18:04:40 2003 (3E7A7338)
80400000 8059a640 nt ntoskrnl.exe Thu Jun 17 10:14:43 2004 (40D1D183)
a0000000 a018e860 win32k win32k.sys Mon Aug 09 20:51:25 2004 (4118463D)
bce21000 bce32000 NAVAPEL NAVAPEL.SYS Fri May 02 21:08:21 2003 (3EB340B5)
bcefa000 bcf35bc0 srv srv.sys Tue Apr 29 16:05:07 2003 (3EAF0523)
bd0c6000 bd0e34a0 afd afd.sys Wed Apr 30 01:45:29 2003 (3EAF8D29)
bd114000 bd116120 wg5n wg5n.sys Wed Oct 13 16:56:33 2004 (416DC0B1)
bd124000 bd126120 wg4n wg4n.sys Wed Oct 13 16:56:32 2004 (416DC0B0)
bd1f4000 bd1f6120 wg6n wg6n.sys Wed Oct 13 16:56:34 2004 (416DC0B2)
bd47d000 bd89ca80 nv4_disp nv4_disp.dll Mon Nov 17 11:20:59 2003 (3FB91F9B)
be854000 be856120 wg3n wg3n.sys Wed Oct 13 16:56:30 2004 (416DC0AE)
be87c000 be88f600 dump_nvatabus dump_nvatabus.sys Thu Jun 03 10:40:44 2004 (40BF629C)
be8b8000 be91e240 mrxsmb mrxsmb.sys Thu May 22 15:46:57 2003 (3ECD5361)
be931000 be95b9c0 rdbss rdbss.sys Thu May 22 15:47:05 2003 (3ECD5369)
be95c000 be983e00 netbt netbt.sys Wed Jul 16 12:44:26 2003 (3F15AB1A)
bea24000 bea75060 tcpip tcpip.sys Tue Apr 29 16:05:31 2003 (3EAF053B)
bfabe000 bfae83a0 update update.sys Tue Apr 15 21:22:01 2003 (3E9CDA69)
bfae9000 bfaffba0 ndiswan ndiswan.sys Tue Apr 29 16:05:01 2003 (3EAF051D)
bfb00000 bfc765e0 nv4_mini nv4_mini.sys Mon Nov 17 11:13:44 2003 (3FB91DE8)
bfc77000 bfcd8c00 ALCXSENS ALCXSENS.SYS Mon Feb 23 10:11:09 2004 (403A423D)
bfcd9000 bfcf8d00 KS KS.SYS Wed Dec 04 09:09:38 2002 (3DEE36D2)
bfcf9000 bfd1d1e0 portcls portcls.sys Tue Apr 15 21:11:22 2003 (3E9CD7EA)
bfd1e000 bfdb4700 ALCXWDM ALCXWDM.SYS Mon Jun 21 01:53:19 2004 (40D6A1FF)
bfdb5000 bfde3b00 NVSNPU NVSNPU.SYS Mon May 17 14:00:33 2004 (40A927F1)
bfde4000 bfe05b20 USBPORT USBPORT.SYS Mon Mar 10 07:47:39 2003 (3E6CB39B)
bfe6f000 bfe84640 Mup Mup.sys Wed Jan 15 11:54:01 2003 (3E25BC59)
bfe85000 bfea2000 Teefer Teefer.sys Fri Oct 15 18:17:00 2004 (4170768C)
bfea2000 bfecbaa0 NDIS NDIS.sys Tue Apr 29 16:05:01 2003 (3EAF051D)
bfecc000 bff49800 Ntfs Ntfs.sys Wed Jun 04 15:11:33 2003 (3EDE6E95)
bff4a000 bff5b7c0 KSecDD KSecDD.sys Sat Sep 20 17:32:19 2003 (3F6CF193)
bff5c000 bff6e1c0 Dfs Dfs.sys Tue Feb 11 18:19:06 2003 (3E49AF1A)
bff6f000 bff82600 nvatabus nvatabus.sys Thu Jun 03 10:40:44 2004 (40BF629C)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 10:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 11:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Mon Mar 31 14:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 11:44:22 2003 (3E25BA16)
eb000000 eb00e6a0 pci pci.sys Wed Jan 15 11:44:07 2003 (3E25BA07)
eb010000 eb01b680 isapnp isapnp.sys Wed Jan 15 11:43:47 2003 (3E25B9F3)
eb020000 eb028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 11:42:51 2003 (3E25B9BB)
eb050000 eb05de80 NVNRM NVNRM.SYS Mon May 17 14:00:41 2004 (40A927F9)
eb060000 eb06e180 Cdr4_2K Cdr4_2K.SYS Tue Sep 24 14:21:41 2002 (3D90D765)
eb070000 eb07c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 11:47:20 2003 (3E25BAC8)
eb080000 eb08f400 serial serial.sys Tue Apr 15 21:19:39 2003 (3E9CD9DB)
eb0a0000 eb0ab680 i8042prt i8042prt.sys Tue Apr 15 21:00:59 2003 (3E9CD57B)
eb0b0000 eb0bca80 rasl2tp rasl2tp.sys Tue Apr 29 16:05:06 2003 (3EAF0522)
eb0c0000 eb0cbc40 raspptp raspptp.sys Wed May 14 16:47:00 2003 (3EC2D574)
eb0d0000 eb0dea20 parallel parallel.sys Wed Jan 15 11:47:14 2003 (3E25BAC2)
eb0e0000 eb0e9be0 usbhub usbhub.sys Tue Mar 18 15:30:41 2003 (3E77AC21)
eb0f0000 eb0fc160 usbhub20 usbhub20.sys Wed Jan 15 11:45:59 2003 (3E25BA77)
eb100000 eb108280 NVENETFD NVENETFD.sys Mon May 17 14:00:46 2004 (40A927FE)
eb170000 eb179ce0 NDProxy NDProxy.SYS Thu Sep 30 16:25:35 1999 (37F3F16F)
eb1a0000 eb1a8fa0 Npfs Npfs.SYS Sat Oct 09 16:58:07 1999 (37FFD68F)
eb1b0000 eb1b8680 msgpc msgpc.sys Wed Jan 15 11:54:25 2003 (3E25BC71)
eb1c0000 eb1c9000 wpsdrvnt wpsdrvnt.sys Fri Oct 15 18:18:45 2004 (417076F5)
eb1d0000 eb1d81a0 netbios netbios.sys Tue Oct 12 12:34:19 1999 (38038D3B)
eb230000 eb238240 Fips Fips.SYS Tue May 09 08:28:29 2000 (39182E9D)
eb280000 eb285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 10:31:08 2003 (3E5BB66C)
eb288000 eb28f4c0 MountMgr MountMgr.sys Tue Feb 10 11:47:53 2004 (40293569)
eb290000 eb297720 disk disk.sys Wed Jan 15 11:43:05 2003 (3E25B9C9)
eb298000 eb29cbc0 PxHelp20 PxHelp20.sys Tue Oct 28 10:25:49 2003 (3F9EB4AD)
eb2a0000 eb2a5280 nv_agp nv_agp.sys Wed Oct 29 12:58:11 2003 (3FA029E3)
eb2b8000 eb2bd400 mouclass mouclass.sys Thu Feb 20 08:37:45 2003 (3E550459)
eb2c0000 eb2c7d00 wanarp wanarp.sys Fri Aug 16 05:25:01 2002 (3D5CEF1D)
eb2c8000 eb2cdec0 kbdclass kbdclass.sys Thu Feb 20 08:37:30 2003 (3E55044A)
eb300000 eb305460 usbprint usbprint.sys Wed Jan 15 11:44:07 2003 (3E25BA07)
eb308000 eb30ec40 cdrom cdrom.sys Wed Jan 15 11:43:04 2003 (3E25B9C8)
eb310000 eb314400 ptilink ptilink.sys Wed Jan 15 11:47:15 2003 (3E25BAC3)
eb318000 eb31d560 Cdralw2k Cdralw2k.SYS Tue Sep 24 14:20:49 2002 (3D90D731)
eb328000 eb32c0e0 raspti raspti.sys Fri Oct 08 13:45:10 1999 (37FE57D6)
eb330000 eb335fc0 openhci openhci.sys Fri Feb 28 16:28:59 2003 (3E5FFECB)
eb338000 eb33c080 epusbsto epusbsto.sys Tue Sep 04 01:42:21 2001 (3B9493ED)
eb348000 eb34cfc0 USBD USBD.SYS Wed Jan 22 09:05:33 2003 (3E2ECF5D)
eb358000 eb35cc00 usbehci usbehci.sys Mon May 05 13:50:04 2003 (3EB6CE7C)
eb3a8000 eb3aca60 flpydisk flpydisk.sys Wed Jan 15 11:42:52 2003 (3E25B9BC)
eb3c0000 eb3c6a20 EFS EFS.SYS Wed Jan 15 11:46:55 2003 (3E25BAAF)
eb3e0000 eb3e6580 fdc fdc.sys Wed Jan 15 11:42:51 2003 (3E25B9BB)
eb3f0000 eb3f5240 Msfs Msfs.SYS Tue Oct 26 16:21:32 1999 (3816377C)
eb400000 eb406100 parport parport.sys Wed Jan 15 11:47:13 2003 (3E25BAC1)
eb410000 eb412a20 BOOTVID BOOTVID.dll Wed Nov 03 17:24:33 1999 (3820E051)
eb414000 eb416d00 PartMgr PartMgr.sys Wed Jan 15 11:43:07 2003 (3E25B9CB)
eb490000 eb493280 nvnetbus nvnetbus.sys Mon May 17 14:00:52 2004 (40A92804)
eb4a0000 eb4a3640 serenum serenum.sys Wed Jan 15 11:47:01 2003 (3E25BAB5)
eb4ac000 eb4ae2e0 ndistapi ndistapi.sys Wed Jan 15 11:54:15 2003 (3E25BC67)
eb4bc000 eb4bfe60 TDI TDI.SYS Wed Jan 15 11:56:26 2003 (3E25BCEA)
eb4e8000 eb4eb580 vga vga.sys Sat Sep 25 11:37:40 1999 (37ED1674)
eb500000 eb501d20 Diskperf Diskperf.sys Wed Feb 12 13:34:38 2003 (3E4ABDEE)
eb502000 eb503b80 dmload dmload.sys Wed Jan 15 11:47:06 2003 (3E25BABA)
eb514000 eb515ca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 11:53:30 2003 (3E25BC3A)
eb51c000 eb51de40 rasacd rasacd.sys Sat Sep 25 11:41:23 1999 (37ED1753)
eb52a000 eb52b860 ParVdm ParVdm.SYS Mon Sep 27 20:28:16 1999 (37F035D0)
eb5c8000 eb5c8f80 WMILIB WMILIB.SYS Sat Sep 25 11:36:47 1999 (37ED163F)
eb5c9000 eb5c9b00 pciide pciide.sys Wed Jan 15 11:43:03 2003 (3E25B9C7)
eb5f5000 eb5f5a40 audstub audstub.sys Sat Sep 25 11:35:33 1999 (37ED15F5)
eb5ff000 eb600000 swenum swenum.sys Wed Dec 04 09:10:07 2002 (3DEE36EF)
eb610000 eb6109e0 Null Null.SYS Sat Sep 25 11:34:58 1999 (37ED15D2)
eb612000 eb612ee0 Beep Beep.SYS Wed Oct 20 15:18:59 1999 (380E3FD3)
eb615000 eb615f80 mnmdd mnmdd.SYS Sat Sep 25 11:37:40 1999 (37ED1674)
eb649000 eb649f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 11:36:47 1999 (37ED163F)

Unloaded modules:
bd888000 bd89d000 VGA.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
bd47d000 bd89d000 nv4_disp.dll
Timestamp: unavailable (00000000)
Checksum: 00000000
eb1e0000 eb1e9000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
eb3d8000 eb3dd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
eb4e0000 eb4e3000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

************** END ********************************

Any help would be greatly appreciated.

-Russzee

 

This is an interesting dump.

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.

This error is sometimes caused by corrupted or faulty memory, but frequently will just be because a driver has done a bad thing.

With a D1, we need to look at the STACK_TEXT to determine what driver was running code at the time of the fault.

Code:

eb18fd3c 80463d94 0006fb84 001f03ff 00000000 wpsdrvnt+0x388f
eb18fd3c 77f880e8 0006fb84 001f03ff 00000000 nt!KiSystemService+0xc4
0006f5c8 7c596480 0006fb84 001f03ff 00000000 ntdll!NtCreateThread+0xb
0006fcb4 7c596911 00000000 000bbc80 000d6a18 KERNEL32!CreateProcessInternalW+0x1465
0006fce8 01008900 00000000 000d6a18 00000000 KERNEL32!CreateProcessW+0x28
0006fde8 0100877c 00486c18 000d6a18 0006fe40 services!ScLogonAndStartImage+0x38b
0006fe4c 010083bf 00000000 00000000 00000000 services!ScStartService+0x1cc
0006feb8 01008101 00000000 00000000 00000000 services!ScStartMarkedServices+0x8e
0006fef4 01003bef 00000000 00000000 00000000 services!ScStartServiceAndDependencies+0x20e
0006ff04 01001a1b 00000000 00cc00ca 0006ffc0 services!ScAutoStartServices+0xa
0006ff64 0100170a 00000001 00234148 010016cf services!SvcctrlMain+0x3b5
0006ff70 010016cf 00000001 00234148 002329a8 services!main+0x12

In this one, we can see wpsdrvnt is at the top, and since stacks are read from the bottom up, we can piece together what happened here. The machine is crashing while trying to start a service. This could be because it is configured to auto restart on termination, or this machine could be booting up and starting everything set to auto.

Code:

Arguments:
Arg1: 00000624, memory referenced

From this, we can see that it is trying to write memory in location 0x00000624. This is going to crash every time. Since it got that location from an internally named global variable from wpsdrvnt, we can feel pretty good in saying that this driver is initializing, and something went wrong that was not error checked for, that probably should have been. Perhaps that location is configuration information from the registry, or device information that failed to populate. Its impossible for us to tell without the code for wpsdrvnt.sys.

Your only recourse is to identify the Sygate service you have running on this machine, and contact your vendor for further support. In the mean time if you need immediate relief, you should look for a product update from the vendor, or disable the service and related drivers so they do not load. It would also be worthwhile to review your event logs to determine what was happening that caused this service to start. Was it expected, that this service would be starting when it did, or did it exit/terminate/crash, and windows tried to restart it?

The driver is pretty current, so this may be a new problem, and not have an existing fix. The dump file you ran the tool against will be valuable to the vendor if they need to investigate why this happened.. I would be prepared to run through the gauntlet of thier hotfix process if this isnt a configuration issue. Good luck
wpsdrvnt.sys Fri Oct 15 18:18:45 2004

 

DATA Dump.. Another error

Thanks for your reply Joe. I completely uninstalled Sygate Personal Firewall from my machine. But , the blue screen showed up again after an hour. This time after running the debuglog.txt this is what i got :

Opened log file 'c:\debuglog.txt'
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINNT;C:\WINNT\system32;C:\WINNT\system32\drivers
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: Server, suite: Enterprise
Kernel base = 0x80400000 PsLoadedModuleList = 0x804805c0
Debug session time: Sat Dec 04 20:21:39 2004
System Uptime: 0 days 1:25:19.797
Loading Kernel Symbols
......................................................................................................
Loading unloaded module list
.............
Loading User Symbols
...............................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {2, c6ea, 3ffef, c000}

*** ERROR: Symbol file could not be found. Defaulted to export symbols for urlmon.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for SHDOCVW.dll -
Probably caused by : memory_corruption ( nt!MiUnlinkPageFromList+39 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 00000002, A list entry was corrupt
Arg2: 0000c6ea, entry in list being removed
Arg3: 0003ffef, highest physical page number
Arg4: 0000c000, reference count of entry being removed

Debugging Details:
------------------


DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x4E

LAST_CONTROL_TRANSFER: from 804402eb to 80446cf5

TRAP_FRAME: bbc7f4e4 -- (.trap ffffffffbbc7f4e4)
.trap ffffffffbbc7f4e4
ErrCode = 00000006
eax=7c5c4ba8 ebx=00000000 ecx=7c579705 edx=7503103c esi=7c5c4220 edi=7c5c5c30
eip=77f88e9d esp=0012976c ebp=0012979c iopl=0 nv up ei ng nz na pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00010283
ntdll!LdrpSnapThunk+0xcf:
001b:77f88e9d 890a mov [edx],ecx ds:0023:7503103c=????????
.trap
Resetting default scope

STACK_TEXT:
bbc7f3ec 804402eb e38da5c4 fffff000 0c6ea860 nt!MiUnlinkPageFromList+0x39
bbc7f408 8044061e 7503103c e38da5c4 84cfb420 nt!MiResolveTransitionFault+0x239
bbc7f438 8043f9f3 00000001 7503103c c01d40c4 nt!MiResolveProtoPteFault+0x114
bbc7f480 8044903f 00000001 7503103c c01d40c4 nt!MiDispatchFault+0xef
bbc7f4cc 80466a2f 00000001 7503103c 00000001 nt!MmAccessFault+0xc3b
bbc7f4cc 77f88e9d 00000001 7503103c 00000001 nt!KiTrap0E+0xc3
0012979c 77f8e0b9 7c570000 7503f8f2 7503f700 ntdll!LdrpSnapThunk+0xcf
00129838 77f8dd75 00132528 00163ca8 7503f654 ntdll!LdrpSnapIAT+0x1e2
0012988c 77f8e570 001351a8 00163c01 75050240 ntdll!LdrpWalkImportDescriptor+0x27d
001298b0 77f8ddb9 001351a8 00000000 75050000 ntdll!LdrpLoadImportModule+0x70
00129908 77f8da0e 001351a8 00163b01 00000000 ntdll!LdrpWalkImportDescriptor+0x96
00129ba4 77f88a29 001351a8 00129c24 00129c2c ntdll!LdrpLoadDll+0x1c5
00129bbc 7c59072e 001351a8 00129c24 00129c2c ntdll!LdrLoadDll+0x17
00129c50 7c5902b3 7ffdec00 00000000 00000000 KERNEL32!LoadLibraryExW+0x231
00129c60 7c59027f 6302b3b8 00000000 00000000 KERNEL32!LoadLibraryExA+0x1d
00129c80 6302b3cb 6302b3b8 00000000 0015d168 KERNEL32!LoadLibraryA+0xaa
00129e5c 63019dc7 00158848 00000000 00000000 WININET!LoadWinsock+0x31
00129e84 1a41efaa 00158848 00000000 00000000 WININET!InternetOpenA+0x75
WARNING: Stack unwind information not available. Following frames may be wrong.
1a45b77c 00000000 00000001 000007a8 00000000 urlmon!ObtainUserAgentString+0x2510
bbc7f798 8042e3f8 bbc7f8d4 bbc7f8cc 7ffde6cc nt!KiCallUserMode+0x4
bbc7f7fc a0020ef4 00000009 bbc7f8f0 0000009c nt!KeUserModeCallback+0xa6
bbc7fb14 a0002a3a a0366138 00000001 00000000 win32k!SfnINLPCREATESTRUCT+0x367
bbc7fb6c a000bdb5 a0366138 00000001 00000000 win32k!xxxSendMessageTimeout+0x2c7
bbc7fb8c a008d489 a0366138 00000001 00000000 win32k!xxxSendMessage+0x1a
bbc7fc74 a007863c 00000100 a0310ac8 bbc7fcd4 win32k!xxxCreateWindowEx+0xae7
bbc7fd28 80463d94 00000100 bbc7fce8 bbc7fcd4 win32k!NtUserCreateWindowEx+0x182
bbc7fd28 77e1497e 00000100 bbc7fce8 bbc7fcd4 nt!KiSystemService+0xc4
0012e6c8 77e2bbf4 00000100 7152da50 0012eba8 USER32!NtUserCreateWindowEx+0xb
0012e704 70a7d1b5 00000100 7152da50 0012eba8 USER32!CreateWindowExW+0x2e
0012eb64 7152899e 00000100 7152da50 0012eba8 SHLWAPI!CreateWindowExWrapW+0xa6
0012ede8 7152885b 00000000 0012fee8 0013a848 BROWSEUI!BrowserThreadProc+0x166
0012ee74 71528812 0013a848 0013a848 00000000 BROWSEUI!BrowserProtectedThreadProc+0xce
0012fef0 71761aeb 0013a848 00401350 70a7e678 BROWSEUI!SHOpenFolderWindow+0x1fc
0012ff10 00401ecd 00133021 00000001 00000000 SHDOCVW!Ordinal101+0x115
0012ff60 00401f7d 00000004 00000000 00133021 iexplore!WinMainT+0x2dc
0012ffc0 7c59893d 00000000 0006daf4 7ffdf000 iexplore!ModuleEntry+0x97
0012fff0 00000000 00401ee6 00000000 000000c8 KERNEL32!BaseProcessStart+0x3d


FOLLOWUP_IP:
nt!MiUnlinkPageFromList+39
80446cf5 e9cc000000 jmp nt!MiUnlinkPageFromList+0x10a (80446dc6)

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!MiUnlinkPageFromList+39

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 40d1d183

STACK_COMMAND: kb

IMAGE_NAME: memory_corruption

BUCKET_ID: 0x4E_nt!MiUnlinkPageFromList+39

Followup: MachineOwner
---------

eax=ffdff13c ebx=0000004e ecx=00000018 edx=00000000 esi=85ff65f0 edi=00000000
eip=80446cf5 esp=bbc7f3d0 ebp=bbc7f408 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!MiUnlinkPageFromList+0x39:
80446cf5 e9cc000000 jmp nt!MiUnlinkPageFromList+0x10a (80446dc6)
ChildEBP RetAddr Args to Child
bbc7f3ec 804402eb e38da5c4 fffff000 0c6ea860 nt!MiUnlinkPageFromList+0x39 (FPO: [0,0,3])
bbc7f408 8044061e 7503103c e38da5c4 84cfb420 nt!MiResolveTransitionFault+0x239 (FPO: [Non-Fpo])
bbc7f438 8043f9f3 00000001 7503103c c01d40c4 nt!MiResolveProtoPteFault+0x114 (FPO: [Non-Fpo])
bbc7f480 8044903f 00000001 7503103c c01d40c4 nt!MiDispatchFault+0xef (FPO: [Non-Fpo])
bbc7f4cc 80466a2f 00000001 7503103c 00000001 nt!MmAccessFault+0xc3b (FPO: [Non-Fpo])
bbc7f4cc 77f88e9d 00000001 7503103c 00000001 nt!KiTrap0E+0xc3 (FPO: [0,0] TrapFrame @ bbc7f4e4)
0012979c 77f8e0b9 7c570000 7503f8f2 7503f700 ntdll!LdrpSnapThunk+0xcf (FPO: [Non-Fpo])
00129838 77f8dd75 00132528 00163ca8 7503f654 ntdll!LdrpSnapIAT+0x1e2 (FPO: [Non-Fpo])
0012988c 77f8e570 001351a8 00163c01 75050240 ntdll!LdrpWalkImportDescriptor+0x27d (FPO: [Non-Fpo])
001298b0 77f8ddb9 001351a8 00000000 75050000 ntdll!LdrpLoadImportModule+0x70 (FPO: [Non-Fpo])
00129908 77f8da0e 001351a8 00163b01 00000000 ntdll!LdrpWalkImportDescriptor+0x96 (FPO: [Non-Fpo])
00129ba4 77f88a29 001351a8 00129c24 00129c2c ntdll!LdrpLoadDll+0x1c5 (FPO: [Non-Fpo])
00129bbc 7c59072e 001351a8 00129c24 00129c2c ntdll!LdrLoadDll+0x17 (FPO: [4,0,0])
00129c50 7c5902b3 7ffdec00 00000000 00000000 KERNEL32!LoadLibraryExW+0x231 (FPO: [Non-Fpo])
00129c60 7c59027f 6302b3b8 00000000 00000000 KERNEL32!LoadLibraryExA+0x1d (FPO: [3,0,0])
00129c80 6302b3cb 6302b3b8 00000000 0015d168 KERNEL32!LoadLibraryA+0xaa (FPO: [Non-Fpo])
00129e5c 63019dc7 00158848 00000000 00000000 WININET!LoadWinsock+0x31 (FPO: [EBP 0x0000008c] [0,109,4])
00129e84 1a41efaa 00158848 00000000 00000000 WININET!InternetOpenA+0x75 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
1a45b77c 00000000 00000001 000007a8 00000000 urlmon!ObtainUserAgentString+0x2510
bbc7f798 8042e3f8 bbc7f8d4 bbc7f8cc 7ffde6cc nt!KiCallUserMode+0x4 (FPO: [2,3,4])
start end module name
00400000 00419000 iexplore iexplore.exe Thu Aug 29 04:14:55 2002 (3D6E022F)
007a0000 00824000 comctl32 comctl32.dll Thu Aug 29 07:13:07 2002 (3D6E2BF3)
10000000 1000c000 AcroIEHelper AcroIEHelper.dll Mon Nov 03 14:17:31 2003 (3FA6D3FB)
1a400000 1a47a000 urlmon urlmon.dll Mon Oct 25 11:39:47 2004 (417D4873)
60000000 60045000 MSCTF MSCTF.dll Tue Feb 20 13:09:20 2001 (3A92DD00)
63000000 63096000 WININET WININET.dll Mon Aug 23 20:31:58 2004 (412AB6AE)
70440000 704cf000 mlang mlang.dll Thu Aug 29 07:13:06 2002 (3D6E2BF2)
70a70000 70ad9000 SHLWAPI SHLWAPI.dll Fri Aug 20 15:01:15 2004 (412674AB)
71500000 715fd000 BROWSEUI BROWSEUI.dll Sun Aug 22 19:34:03 2004 (4129579B)
71700000 71848000 SHDOCVW SHDOCVW.dll Thu Nov 11 23:20:52 2004 (41946454)
718c0000 71944000 shdoclc shdoclc.dll Thu Aug 29 07:13:07 2002 (3D6E2BF3)
71960000 71972000 browselc browselc.dll Thu Aug 29 07:13:07 2002 (3D6E2BF3)
75030000 75044000 WS2_32 WS2_32.DLL Thu Jun 19 19:44:22 2003 (3EF27506)
75050000 75058000 wsock32 wsock32.dll Thu Jun 19 19:44:22 2003 (3EF27506)
759b0000 759b6000 LZ32 LZ32.DLL Thu Jun 19 19:43:46 2003 (3EF274E2)
770c0000 770e3000 CSCDLL CSCDLL.DLL Thu Jun 19 19:43:42 2003 (3EF274DE)
77430000 77440000 MSASN1 MSASN1.DLL Tue Mar 23 18:17:00 2004 (4060EF9C)
775a0000 77630000 CLBCATQ CLBCATQ.DLL Thu Mar 11 13:29:21 2004 (4050DA31)
77820000 77827000 VERSION VERSION.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
77840000 7787e000 cscui cscui.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
779b0000 77a4b000 OLEAUT32 OLEAUT32.dll Thu Jun 19 19:43:41 2003 (3EF274DD)
77a50000 77b3f000 ole32 ole32.dll Thu Mar 11 13:29:21 2004 (4050DA31)
77d30000 77da1000 RPCRT4 RPCRT4.DLL Thu Mar 11 13:29:21 2004 (4050DA31)
77e10000 77e75000 USER32 USER32.dll Tue Mar 23 18:17:00 2004 (4060EF9C)
77f40000 77f7b000 GDI32 GDI32.DLL Mon Jun 21 18:35:10 2004 (40D78CCE)
77f80000 77ffd000 ntdll ntdll.dll Tue Mar 23 18:16:59 2004 (4060EF9B)
78000000 78045000 msvcrt msvcrt.dll Tue Mar 11 10:55:17 2003 (3E6E3115)
782f0000 78535000 SHELL32 SHELL32.dll Sat Sep 18 01:24:57 2004 (414BF0D9)
7c2d0000 7c332000 ADVAPI32 ADVAPI32.dll Tue Mar 23 18:17:00 2004 (4060EF9C)
7c570000 7c623000 KERNEL32 KERNEL32.dll Mon Jun 21 18:35:10 2004 (40D78CCE)
7c740000 7c7c7000 CRYPT32 CRYPT32.dll Tue Mar 23 18:17:00 2004 (4060EF9C)
80062000 80076100 hal halaacpi.dll Thu Mar 20 18:04:40 2003 (3E7A7338)
80400000 8059a640 nt ntoskrnl.exe Thu Jun 17 10:14:43 2004 (40D1D183)
a0000000 a018e860 win32k win32k.sys Mon Aug 09 20:51:25 2004 (4118463D)
bc703000 bc706ac0 GVCplDrv GVCplDrv.SYS Sun May 02 08:47:06 2004 (409517FA)
bc79b000 bc7ab760 NAVENG NAVENG.sys Thu Sep 30 18:59:17 2004 (415CB9F5)
bc84c000 bc8e4680 NAVEX15 NAVEX15.sys Thu Sep 30 19:11:15 2004 (415CBCC3)
bc90d000 bc94b000 NAVAP NAVAP.sys Fri May 02 21:08:14 2003 (3EB340AE)
bc973000 bc983a60 SYMEVENT SYMEVENT.SYS Tue May 13 22:45:43 2003 (3EC1D807)
bcaec000 bcb0e3c0 Fastfat Fastfat.SYS Wed Jan 15 11:48:39 2003 (3E25BB17)
bcbc7000 bcbd6a20 ipsec ipsec.sys Tue Apr 29 16:04:59 2003 (3EAF051B)
bcca4000 bccb2fe0 Cdfs Cdfs.SYS Tue Apr 15 20:58:53 2003 (3E9CD4FD)
bcd4c000 bcd4ef20 spud spud.sys Fri Nov 19 15:36:27 1999 (3835DEFB)
bce2c000 bce3df80 wdmaud wdmaud.sys Tue Apr 15 21:23:02 2003 (3E9CDAA6)
bcf06000 bcf17000 NAVAPEL NAVAPEL.SYS Fri May 02 21:08:21 2003 (3EB340B5)
bcf3f000 bcf7abc0 srv srv.sys Tue Apr 29 16:05:07 2003 (3EAF0523)
bcffb000 bd0068c0 sysaudio sysaudio.sys Tue Apr 15 21:21:44 2003 (3E9CDA58)
bd0e3000 bd1004a0 afd afd.sys Wed Apr 30 01:45:29 2003 (3EAF8D29)
bd1c1000 bd1c9240 Fips Fips.SYS Tue May 09 08:28:29 2000 (39182E9D)
bd4c2000 bd8e1a80 nv4_disp nv4_disp.dll Mon Nov 17 11:20:59 2003 (3FB91F9B)
be899000 be8ac600 dump_nvatabus dump_nvatabus.sys Thu Jun 03 10:40:44 2004 (40BF629C)
be8d5000 be93b240 mrxsmb mrxsmb.sys Thu May 22 15:46:57 2003 (3ECD5361)
be94e000 be9789c0 rdbss rdbss.sys Thu May 22 15:47:05 2003 (3ECD5369)
bea19000 bea40e00 netbt netbt.sys Wed Jul 16 12:44:26 2003 (3F15AB1A)
bea41000 bea92060 tcpip tcpip.sys Tue Apr 29 16:05:31 2003 (3EAF053B)
bfadb000 bfb053a0 update update.sys Tue Apr 15 21:22:01 2003 (3E9CDA69)
bfb06000 bfb1cba0 ndiswan ndiswan.sys Tue Apr 29 16:05:01 2003 (3EAF051D)
bfb1d000 bfc935e0 nv4_mini nv4_mini.sys Mon Nov 17 11:13:44 2003 (3FB91DE8)
bfcbc000 bfd1dc00 ALCXSENS ALCXSENS.SYS Mon Feb 23 10:11:09 2004 (403A423D)
bfd1e000 bfd3dd00 KS KS.SYS Wed Dec 04 09:09:38 2002 (3DEE36D2)
bfd3e000 bfd621e0 portcls portcls.sys Tue Apr 15 21:11:22 2003 (3E9CD7EA)
bfd63000 bfdf9700 ALCXWDM ALCXWDM.SYS Mon Jun 21 01:53:19 2004 (40D6A1FF)
bfdfa000 bfe28b00 NVSNPU NVSNPU.SYS Mon May 17 14:00:33 2004 (40A927F1)
bfe29000 bfe4ab20 USBPORT USBPORT.SYS Mon Mar 10 07:47:39 2003 (3E6CB39B)
bfe8c000 bfea1640 Mup Mup.sys Wed Jan 15 11:54:01 2003 (3E25BC59)
bfea2000 bfecbaa0 NDIS NDIS.sys Tue Apr 29 16:05:01 2003 (3EAF051D)
bfecc000 bff49800 Ntfs Ntfs.sys Wed Jun 04 15:11:33 2003 (3EDE6E95)
bff4a000 bff5b7c0 KSecDD KSecDD.sys Sat Sep 20 17:32:19 2003 (3F6CF193)
bff5c000 bff6e1c0 Dfs Dfs.sys Tue Feb 11 18:19:06 2003 (3E49AF1A)
bff6f000 bff82600 nvatabus nvatabus.sys Thu Jun 03 10:40:44 2004 (40BF629C)
bff83000 bff98180 atapi atapi.sys Tue Apr 01 10:08:25 2003 (3E89D599)
bff99000 bffba9c0 dmio dmio.sys Wed Jan 15 11:47:04 2003 (3E25BAB8)
bffbb000 bffd7220 ftdisk ftdisk.sys Mon Mar 31 14:21:58 2003 (3E88BF86)
bffd8000 bffffc20 ACPI ACPI.sys Wed Jan 15 11:44:22 2003 (3E25BA16)
eb000000 eb00e6a0 pci pci.sys Wed Jan 15 11:44:07 2003 (3E25BA07)
eb010000 eb01b680 isapnp isapnp.sys Wed Jan 15 11:43:47 2003 (3E25B9F3)
eb020000 eb028700 CLASSPNP CLASSPNP.SYS Wed Jan 15 11:42:51 2003 (3E25B9BB)
eb050000 eb05de80 NVNRM NVNRM.SYS Mon May 17 14:00:41 2004 (40A927F9)
eb060000 eb06e180 Cdr4_2K Cdr4_2K.SYS Tue Sep 24 14:21:41 2002 (3D90D765)
eb070000 eb07c4c0 VIDEOPRT VIDEOPRT.SYS Wed Jan 15 11:47:20 2003 (3E25BAC8)
eb080000 eb08f400 serial serial.sys Tue Apr 15 21:19:39 2003 (3E9CD9DB)
eb090000 eb09b680 i8042prt i8042prt.sys Tue Apr 15 21:00:59 2003 (3E9CD57B)
eb0a0000 eb0aca80 rasl2tp rasl2tp.sys Tue Apr 29 16:05:06 2003 (3EAF0522)
eb0b0000 eb0bbc40 raspptp raspptp.sys Wed May 14 16:47:00 2003 (3EC2D574)
eb0c0000 eb0cea20 parallel parallel.sys Wed Jan 15 11:47:14 2003 (3E25BAC2)
eb0d0000 eb0d9be0 usbhub usbhub.sys Tue Mar 18 15:30:41 2003 (3E77AC21)
eb0e0000 eb0ec160 usbhub20 usbhub20.sys Wed Jan 15 11:45:59 2003 (3E25BA77)
eb0f0000 eb0f8280 NVENETFD NVENETFD.sys Mon May 17 14:00:46 2004 (40A927FE)
eb110000 eb119ce0 NDProxy NDProxy.SYS Thu Sep 30 16:25:35 1999 (37F3F16F)
eb120000 eb128fa0 Npfs Npfs.SYS Sat Oct 09 16:58:07 1999 (37FFD68F)
eb130000 eb138680 msgpc msgpc.sys Wed Jan 15 11:54:25 2003 (3E25BC71)
eb140000 eb1481a0 netbios netbios.sys Tue Oct 12 12:34:19 1999 (38038D3B)
eb280000 eb285520 PCIIDEX PCIIDEX.SYS Tue Feb 25 10:31:08 2003 (3E5BB66C)
eb288000 eb28f4c0 MountMgr MountMgr.sys Tue Feb 10 11:47:53 2004 (40293569)
eb290000 eb297720 disk disk.sys Wed Jan 15 11:43:05 2003 (3E25B9C9)
eb298000 eb29cbc0 PxHelp20 PxHelp20.sys Tue Oct 28 10:25:49 2003 (3F9EB4AD)
eb2a0000 eb2a5280 nv_agp nv_agp.sys Wed Oct 29 12:58:11 2003 (3FA029E3)
eb2b8000 eb2bd400 mouclass mouclass.sys Thu Feb 20 08:37:45 2003 (3E550459)
eb2c8000 eb2cdec0 kbdclass kbdclass.sys Thu Feb 20 08:37:30 2003 (3E55044A)
eb2f0000 eb2f5460 usbprint usbprint.sys Wed Jan 15 11:44:07 2003 (3E25BA07)
eb300000 eb304080 epusbsto epusbsto.sys Tue Sep 04 01:42:21 2001 (3B9493ED)
eb308000 eb30ec40 cdrom cdrom.sys Wed Jan 15 11:43:04 2003 (3E25B9C8)
eb310000 eb314400 ptilink ptilink.sys Wed Jan 15 11:47:15 2003 (3E25BAC3)
eb318000 eb31d560 Cdralw2k Cdralw2k.SYS Tue Sep 24 14:20:49 2002 (3D90D731)
eb328000 eb32c0e0 raspti raspti.sys Fri Oct 08 13:45:10 1999 (37FE57D6)
eb330000 eb335fc0 openhci openhci.sys Fri Feb 28 16:28:59 2003 (3E5FFECB)
eb348000 eb34cfc0 USBD USBD.SYS Wed Jan 22 09:05:33 2003 (3E2ECF5D)
eb358000 eb35cc00 usbehci usbehci.sys Mon May 05 13:50:04 2003 (3EB6CE7C)
eb368000 eb36fd00 wanarp wanarp.sys Fri Aug 16 05:25:01 2002 (3D5CEF1D)
eb3a8000 eb3aca60 flpydisk flpydisk.sys Wed Jan 15 11:42:52 2003 (3E25B9BC)
eb3c0000 eb3c6a20 EFS EFS.SYS Wed Jan 15 11:46:55 2003 (3E25BAAF)
eb3e0000 eb3e6580 fdc fdc.sys Wed Jan 15 11:42:51 2003 (3E25B9BB)
eb3e8000 eb3ed240 Msfs Msfs.SYS Tue Oct 26 16:21:32 1999 (3816377C)
eb400000 eb406100 parport parport.sys Wed Jan 15 11:47:13 2003 (3E25BAC1)
eb410000 eb412a20 BOOTVID BOOTVID.dll Wed Nov 03 17:24:33 1999 (3820E051)
eb414000 eb416d00 PartMgr PartMgr.sys Wed Jan 15 11:43:07 2003 (3E25B9CB)
eb48c000 eb48f280 nvnetbus nvnetbus.sys Mon May 17 14:00:52 2004 (40A92804)
eb49c000 eb49f640 serenum serenum.sys Wed Jan 15 11:47:01 2003 (3E25BAB5)
eb4a8000 eb4aa2e0 ndistapi ndistapi.sys Wed Jan 15 11:54:15 2003 (3E25BC67)
eb4b8000 eb4bbe60 TDI TDI.SYS Wed Jan 15 11:56:26 2003 (3E25BCEA)
eb4e4000 eb4e7580 vga vga.sys Sat Sep 25 11:37:40 1999 (37ED1674)
eb500000 eb501d20 Diskperf Diskperf.sys Wed Feb 12 13:34:38 2003 (3E4ABDEE)
eb502000 eb503b80 dmload dmload.sys Wed Jan 15 11:47:06 2003 (3E25BABA)
eb514000 eb515ca0 Fs_Rec Fs_Rec.SYS Wed Jan 15 11:53:30 2003 (3E25BC3A)
eb51c000 eb51de40 rasacd rasacd.sys Sat Sep 25 11:41:23 1999 (37ED1753)
eb5a0000 eb5a1860 ParVdm ParVdm.SYS Mon Sep 27 20:28:16 1999 (37F035D0)
eb5c8000 eb5c8f80 WMILIB WMILIB.SYS Sat Sep 25 11:36:47 1999 (37ED163F)
eb5c9000 eb5c9b00 pciide pciide.sys Wed Jan 15 11:43:03 2003 (3E25B9C7)
eb5f1000 eb5f1a40 audstub audstub.sys Sat Sep 25 11:35:33 1999 (37ED15F5)
eb5fb000 eb5fc000 swenum swenum.sys Wed Dec 04 09:10:07 2002 (3DEE36EF)
eb60c000 eb60c9e0 Null Null.SYS Sat Sep 25 11:34:58 1999 (37ED15D2)
eb60e000 eb60eee0 Beep Beep.SYS Wed Oct 20 15:18:59 1999 (380E3FD3)
eb611000 eb611f80 mnmdd mnmdd.SYS Sat Sep 25 11:37:40 1999 (37ED1674)
eb640000 eb640f80 dump_WMILIB dump_WMILIB.SYS Sat Sep 25 11:36:47 1999 (37ED163F)

Closing open log file c:\debuglog.txt

Thanks
Russ

 

we need 3 more dumps. you can snip the drivers list at the bottom to save space. This last dump looks like memory corruption.. perhaps a fluke, perhaps not.