Link to home
Start Free TrialLog in
Avatar of *** Hopeleonie ***
*** Hopeleonie ***Flag for Switzerland

asked on

BSOD: Need assistance to analyse dump file

Hi

Need assistance to analyse dump file

Thanks
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\euco\Downloads\AMini121109-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*c:\cache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090804-1435
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Fri Dec 11 13:48:52.379 2009 (GMT+1)
System Uptime: 0 days 0:10:46.250
Loading Kernel Symbols
...............................................................
................................................................

Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, e, 87fc0008}

GetUlongFromAddress: unable to read from 80565d50
*** WARNING: Unable to verify timestamp for NAVENG.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVENG.SYS
*** WARNING: Unable to verify timestamp for NAVEX15.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVEX15.SYS
*** WARNING: Unable to verify timestamp for HTTP.sys
*** ERROR: Module load completed but symbols could not be loaded for HTTP.sys
*** WARNING: Unable to verify timestamp for WpsHelper.sys
*** ERROR: Module load completed but symbols could not be loaded for WpsHelper.sys
*** WARNING: Unable to verify timestamp for EraserUtilRebootDrv.sys
*** ERROR: Module load completed but symbols could not be loaded for EraserUtilRebootDrv.sys
*** WARNING: Unable to verify timestamp for eeCtrl.sys
*** ERROR: Module load completed but symbols could not be loaded for eeCtrl.sys
*** WARNING: Unable to verify timestamp for SPBBCDrv.sys
*** ERROR: Module load completed but symbols could not be loaded for SPBBCDrv.sys
*** WARNING: Unable to verify timestamp for SYMTDI.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMTDI.SYS
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
*** WARNING: Unable to verify timestamp for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
*** WARNING: Unable to verify timestamp for RtkHDAud.sys
*** ERROR: Module load completed but symbols could not be loaded for RtkHDAud.sys
*** WARNING: Unable to verify timestamp for teefer2.sys
*** ERROR: Module load completed but symbols could not be loaded for teefer2.sys
*** WARNING: Unable to verify timestamp for wpsdrvnt.sys
*** ERROR: Module load completed but symbols could not be loaded for wpsdrvnt.sys
*** WARNING: Unable to verify timestamp for SRTSPX.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSPX.SYS
*** WARNING: Unable to verify timestamp for igxpmp32.sys
*** ERROR: Module load completed but symbols could not be loaded for igxpmp32.sys
*** WARNING: Unable to verify timestamp for WudfPf.sys
*** ERROR: Module load completed but symbols could not be loaded for WudfPf.sys
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for drmk.sys - 
*** WARNING: Unable to verify timestamp for l251x86.sys
*** ERROR: Module load completed but symbols could not be loaded for l251x86.sys
*** WARNING: Unable to verify timestamp for fdc.sys
*** ERROR: Module load completed but symbols could not be loaded for fdc.sys
*** WARNING: Unable to verify timestamp for SYMREDRV.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMREDRV.SYS
*** WARNING: Unable to verify timestamp for ASACPI.sys
*** ERROR: Module load completed but symbols could not be loaded for ASACPI.sys
*** WARNING: Unable to verify timestamp for igxprd32.dll
*** ERROR: Module load completed but symbols could not be loaded for igxprd32.dll
*** WARNING: Unable to verify timestamp for igxpgd32.dll
*** ERROR: Module load completed but symbols could not be loaded for igxpgd32.dll
*** WARNING: Unable to verify timestamp for igxpdv32.DLL
*** ERROR: Module load completed but symbols could not be loaded for igxpdv32.DLL
*** WARNING: Unable to verify timestamp for igxpdx32.DLL
*** ERROR: Module load completed but symbols could not be loaded for igxpdx32.DLL
*** WARNING: Unable to verify timestamp for ATMFD.DLL
*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
GetUlongFromAddress: unable to read from 80565d50
Probably caused by : ntkrpamp.exe ( nt!ExFreePoolWithTag+2a3 )

Followup: MachineOwner
---------

1: kd> !analyze -v; kv; r; lmnt; lmntsm; !locks; !vm; .bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 0000000e, Memory contents of the pool block
Arg4: 87fc0008, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 80565d50
GetUlongFromAddress: unable to read from 80565d50

POOL_ADDRESS:  87fc0008 

BUGCHECK_STR:  0xc2_7

CUSTOMER_CRASH_COUNT:  2

DEFAULT_BUCKET_ID:  DRIVER_FAULT

PROCESS_NAME:  System

LAST_CONTROL_TRANSFER:  from 8054b583 to 804f9f43

STACK_TEXT:  
ba4e3cdc 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
ba4e3d2c 805c106d 87fc0008 e56c6946 89e55ca0 nt!ExFreePoolWithTag+0x2a3
ba4e3d4c 805bb47c 00000000 87fc0038 00000001 nt!ObpFreeObject+0x18d
ba4e3d64 805bb8c6 87fc0038 00000001 80562f20 nt!ObpRemoveObjectRoutine+0xe8
ba4e3d7c 8053877d 00000000 00000000 89e31720 nt!ObpProcessRemoveObjectQueue+0x36
ba4e3dac 805cff72 00000000 00000000 00000000 nt!ExpWorkerThread+0xef
ba4e3ddc 805460ee 8053868e 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExFreePoolWithTag+2a3
8054b583 8b45f8          mov     eax,dword ptr [ebp-8]

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExFreePoolWithTag+2a3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a784394

FAILURE_BUCKET_ID:  0xc2_7_nt!ExFreePoolWithTag+2a3

BUCKET_ID:  0xc2_7_nt!ExFreePoolWithTag+2a3

Followup: MachineOwner
---------

ChildEBP RetAddr  Args to Child              
ba4e3cdc 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b (FPO: [5,0,0])
ba4e3d2c 805c106d 87fc0008 e56c6946 89e55ca0 nt!ExFreePoolWithTag+0x2a3 (FPO: [2,10,4])
ba4e3d4c 805bb47c 00000000 87fc0038 00000001 nt!ObpFreeObject+0x18d (FPO: [0,4,0])
ba4e3d64 805bb8c6 87fc0038 00000001 80562f20 nt!ObpRemoveObjectRoutine+0xe8 (FPO: [2,1,4])
ba4e3d7c 8053877d 00000000 00000000 89e31720 nt!ObpProcessRemoveObjectQueue+0x36 (FPO: [1,0,0])
ba4e3dac 805cff72 00000000 00000000 00000000 nt!ExpWorkerThread+0xef (FPO: [1,6,0])
ba4e3ddc 805460ee 8053868e 00000000 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
eax=ba33813c ebx=00000cd4 ecx=00000000 edx=89e55c43 esi=87fc0000 edi=00000000
eip=804f9f43 esp=ba4e3cc4 ebp=ba4e3cdc iopl=0         nv up ei ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286
nt!KeBugCheckEx+0x1b:
804f9f43 5d              pop     ebp
start    end        module name
804d7000 806e4000   nt       ntkrpamp.exe Tue Aug 04 16:20:04 2009 (4A784394)
806e4000 80704d00   hal      halmacpi.dll Sun Apr 13 20:31:27 2008 (4802517F)
a7529000 a753c180   NAVENG   NAVENG.SYS   Sat Aug 22 07:31:12 2009 (4A8F82A0)
a753d000 a767e800   NAVEX15  NAVEX15.SYS  Sat Aug 22 07:37:19 2009 (4A8F840F)
a797e000 a7981800   asyncmac asyncmac.sys Sun Apr 13 20:57:27 2008 (48025797)
a7a92000 a7ad2e00   HTTP     HTTP.sys     Tue Oct 20 18:20:15 2009 (4ADDE33F)
a7d53000 a7d75100   RDPWD    RDPWD.SYS    Sun Apr 13 20:38:40 2008 (48025330)
a7ff6000 a800a480   wdmaud   wdmaud.sys   Sun Apr 13 21:17:18 2008 (48025C3E)
a834b000 a8359d80   sysaudio sysaudio.sys Sun Apr 13 21:15:55 2008 (48025BEB)
a837b000 a83cc880   srv      srv.sys      Thu Dec 11 11:57:07 2008 (4940F203)
a846d000 a8499180   mrxdav   mrxdav.sys   Sun Apr 13 20:32:42 2008 (480251CA)
a853a000 a855d380   WpsHelper WpsHelper.sys Tue Mar 10 04:18:06 2009 (49B5DBEE)
a88fe000 a8901900   ndisuio  ndisuio.sys  Sun Apr 13 20:55:57 2008 (4802573D)
a8a5e000 a8a75900   dump_atapi dump_atapi.sys Sun Apr 13 20:40:29 2008 (4802539D)
a8a76000 a8a93000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Tue Aug 18 01:05:39 2009 (4A89E243)
a8a93000 a8af1000   eeCtrl   eeCtrl.sys   Tue Aug 18 01:05:39 2009 (4A89E243)
a8af1000 a8b60280   mrxsmb   mrxsmb.sys   Fri Oct 24 13:21:07 2008 (4901AFA3)
a8b61000 a8b8be80   rdbss    rdbss.sys    Sun Apr 13 21:28:38 2008 (48025EE6)
a8b8c000 a8bf5000   SPBBCDrv SPBBCDrv.sys Thu May 15 04:14:28 2008 (482B9C84)
a8bf5000 a8c16d00   afd      afd.sys      Thu Aug 14 12:04:35 2008 (48A40333)
a8c17000 a8c3ec00   netbt    netbt.sys    Sun Apr 13 21:20:59 2008 (48025D1B)
a8c3f000 a8c6c200   SYMTDI   SYMTDI.SYS   Tue Aug 19 22:17:48 2008 (48AB2A6C)
a8d0d000 a8d32500   ipnat    ipnat.sys    Sun Apr 13 20:57:10 2008 (48025786)
a8d5b000 a8db3480   tcpip    tcpip.sys    Fri Jun 20 13:51:09 2008 (485B99AD)
a8db4000 a8dc6600   ipsec    ipsec.sys    Sun Apr 13 21:19:42 2008 (48025CCE)
a8dfb000 a8e20000   SYMEVENT SYMEVENT.SYS Tue Jan 15 00:29:24 2008 (478BF054)
a8f62000 a8fac000   SRTSP    SRTSP.SYS    Thu Aug 14 06:51:36 2008 (48A3B9D8)
a8fc4000 a8fc6900   Dxapi    Dxapi.sys    Fri Aug 17 22:53:19 2001 (3B7D843F)
a9038000 a903a280   rasacd   rasacd.sys   Fri Aug 17 22:55:39 2001 (3B7D84CB)
a903c000 a905fa80   portcls  portcls.sys  Sun Apr 13 21:19:40 2008 (48025CCC)
a9060000 a94f3000   RtkHDAud RtkHDAud.sys Thu Nov 01 07:38:50 2007 (4729747A)
b95b3000 b9610f00   update   update.sys   Sun Apr 13 20:39:46 2008 (48025372)
b9611000 b9647000   teefer2  teefer2.sys  Thu Jul 10 12:57:41 2008 (4875EB25)
b9653000 b9655f80   mouhid   mouhid.sys   Fri Aug 17 22:47:57 2001 (3B7D82FD)
b965b000 b965d880   hidusb   hidusb.sys   Sun Apr 13 20:45:27 2008 (480254C7)
b966f000 b969ee80   rdpdr    rdpdr.sys    Sun Apr 13 20:32:50 2008 (480251D2)
b96af000 b96b9e00   Fips     Fips.SYS     Sun Apr 13 20:33:27 2008 (480251F7)
b96bf000 b96c7780   netbios  netbios.sys  Sun Apr 13 20:56:01 2008 (48025741)
b96ef000 b96f7700   wanarp   wanarp.sys   Sun Apr 13 20:57:20 2008 (48025790)
b96ff000 b970d000   wpsdrvnt wpsdrvnt.sys Fri Sep 05 00:08:24 2008 (48C05C58)
b972f000 b9738080   SRTSPX   SRTSPX.SYS   Thu Aug 14 06:53:49 2008 (48A3BA5D)
b973f000 b974fe00   psched   psched.sys   Sun Apr 13 20:56:36 2008 (48025764)
b9750000 b9766580   ndiswan  ndiswan.sys  Sun Apr 13 21:20:41 2008 (48025D09)
b9767000 b9789700   ks       ks.sys       Sun Apr 13 21:16:34 2008 (48025C12)
b978a000 b979d900   parport  parport.sys  Sun Apr 13 20:40:09 2008 (48025389)
b979e000 b97c1200   USBPORT  USBPORT.SYS  Sun Apr 13 20:45:34 2008 (480254CE)
b97c2000 b97ea000   HDAudBus HDAudBus.sys Thu May 26 17:46:29 2005 (4295EF55)
b97ea000 b97fdf00   VIDEOPRT VIDEOPRT.SYS Sun Apr 13 20:44:39 2008 (48025497)
b97fe000 b9d92960   igxpmp32 igxpmp32.sys Tue Oct 30 17:00:34 2007 (47275522)
b9daf000 b9db2c80   mssmbios mssmbios.sys Sun Apr 13 20:36:45 2008 (480252BD)
b9ddb000 b9df4b80   Mup      Mup.sys      Sun Apr 13 21:17:05 2008 (48025C31)
b9df5000 b9e21980   NDIS     NDIS.sys     Sun Apr 13 21:20:35 2008 (48025D03)
b9e22000 b9eae600   Ntfs     Ntfs.sys     Sun Apr 13 21:15:49 2008 (48025BE5)
b9eaf000 b9ec1f00   WudfPf   WudfPf.sys   Fri Sep 29 03:55:43 2006 (451C7D1F)
b9ec2000 b9ed8b00   KSecDD   KSecDD.sys   Wed Jun 24 13:18:40 2009 (4A420B90)
b9ed9000 b9eeaf00   sr       sr.sys       Sun Apr 13 20:36:50 2008 (480252C2)
b9eeb000 b9f0ab00   fltMgr   fltMgr.sys   Sun Apr 13 20:32:58 2008 (480251DA)
b9f0b000 b9f22900   atapi    atapi.sys    Sun Apr 13 20:40:29 2008 (4802539D)
b9f23000 b9f48700   dmio     dmio.sys     Sun Apr 13 20:44:45 2008 (4802549D)
b9f49000 b9f67880   ftdisk   ftdisk.sys   Fri Aug 17 22:52:41 2001 (3B7D8419)
b9f68000 b9f78a80   pci      pci.sys      Sun Apr 13 20:36:43 2008 (480252BB)
b9f79000 b9fa6d80   ACPI     ACPI.sys     Sun Apr 13 20:36:33 2008 (480252B1)
ba0a8000 ba0b1180   isapnp   isapnp.sys   Sun Apr 13 20:36:40 2008 (480252B8)
ba0b8000 ba0c2580   MountMgr MountMgr.sys Sun Apr 13 20:39:45 2008 (48025371)
ba0c8000 ba0d4c80   VolSnap  VolSnap.sys  Sun Apr 13 20:41:00 2008 (480253BC)
ba0d8000 ba0e0e00   disk     disk.sys     Sun Apr 13 20:40:46 2008 (480253AE)
ba0e8000 ba0f4180   CLASSPNP CLASSPNP.SYS Sun Apr 13 21:16:21 2008 (48025C05)
ba148000 ba154880   rasl2tp  rasl2tp.sys  Sun Apr 13 21:19:43 2008 (48025CCF)
ba158000 ba162200   raspppoe raspppoe.sys Sun Apr 13 20:57:31 2008 (4802579B)
ba168000 ba173d00   raspptp  raspptp.sys  Sun Apr 13 21:19:47 2008 (48025CD3)
ba178000 ba180900   msgpc    msgpc.sys    Sun Apr 13 20:56:32 2008 (48025760)
ba188000 ba191f00   termdd   termdd.sys   Sun Apr 13 20:38:36 2008 (4802532C)
ba198000 ba1a1e80   NDProxy  NDProxy.SYS  Sun Apr 13 20:57:28 2008 (48025798)
ba1d8000 ba1e6b00   drmk     drmk.sys     Sun Apr 13 20:45:12 2008 (480254B8)
ba208000 ba217900   Cdfs     Cdfs.SYS     Sun Apr 13 21:14:21 2008 (48025B8D)
ba238000 ba246880   usbhub   usbhub.sys   Sun Apr 13 20:45:36 2008 (480254D0)
ba278000 ba281000   HIDCLASS HIDCLASS.SYS Sun Apr 13 20:45:25 2008 (480254C5)
ba2b8000 ba2c0e00   intelppm intelppm.sys Sun Apr 13 20:31:31 2008 (48025183)
ba2c8000 ba2d5000   l251x86  l251x86.sys  Fri Oct 17 08:14:52 2008 (48F82D5C)
ba2d8000 ba2e4d00   i8042prt i8042prt.sys Sun Apr 13 21:17:59 2008 (48025C67)
ba2e8000 ba2f7c00   serial   serial.sys   Sun Apr 13 21:15:44 2008 (48025BE0)
ba2f8000 ba302480   imapi    imapi.sys    Sun Apr 13 20:40:57 2008 (480253B9)
ba308000 ba317600   cdrom    cdrom.sys    Sun Apr 13 20:40:45 2008 (480253AD)
ba318000 ba326100   redbook  redbook.sys  Sun Apr 13 20:40:27 2008 (4802539B)
ba328000 ba32e180   PCIIDEX  PCIIDEX.SYS  Sun Apr 13 20:40:29 2008 (4802539D)
ba330000 ba334d00   PartMgr  PartMgr.sys  Sun Apr 13 20:40:48 2008 (480253B0)
ba390000 ba395500   TDTCP    TDTCP.SYS    Sun Apr 13 20:38:35 2008 (4802532B)
ba3a8000 ba3ad080   usbuhci  usbuhci.sys  Sun Apr 13 20:45:34 2008 (480254CE)
ba3b0000 ba3b7600   usbehci  usbehci.sys  Sun Apr 13 20:45:34 2008 (480254CE)
ba3b8000 ba3b9000   fdc      fdc.sys      unavailable (00000000)
ba3c0000 ba3c6000   kbdclass kbdclass.sys Sun Apr 13 20:39:46 2008 (48025372)
ba3d0000 ba3d4a80   TDI      TDI.SYS      Sun Apr 13 21:00:04 2008 (48025834)
ba3d8000 ba3dc580   ptilink  ptilink.sys  Fri Aug 17 22:49:53 2001 (3B7D8371)
ba3e0000 ba3e4080   raspti   raspti.sys   Fri Aug 17 22:55:32 2001 (3B7D84C4)
ba3e8000 ba3eda00   mouclass mouclass.sys Sun Apr 13 20:39:47 2008 (48025373)
ba410000 ba415000   flpydisk flpydisk.sys Sun Apr 13 20:40:24 2008 (48025398)
ba440000 ba446180   HIDPARSE HIDPARSE.SYS Sun Apr 13 20:45:22 2008 (480254C2)
ba450000 ba455200   vga      vga.sys      Sun Apr 13 20:44:40 2008 (48025498)
ba458000 ba45ca80   Msfs     Msfs.SYS     Sun Apr 13 20:32:38 2008 (480251C6)
ba460000 ba467880   Npfs     Npfs.SYS     Sun Apr 13 20:32:38 2008 (480251C6)
ba478000 ba47d200   SYMREDRV SYMREDRV.SYS Tue Aug 19 22:18:20 2008 (48AB2A8C)
ba490000 ba494500   watchdog watchdog.sys Sun Apr 13 20:44:59 2008 (480254AB)
ba4b8000 ba4bb000   BOOTVID  BOOTVID.dll  Fri Aug 17 22:49:09 2001 (3B7D8345)
ba588000 ba58bd80   serenum  serenum.sys  Sun Apr 13 20:40:12 2008 (4802538C)
ba58c000 ba58e780   ndistapi ndistapi.sys Sun Apr 13 20:57:27 2008 (48025797)
ba5a8000 ba5a9b80   kdcom    kdcom.dll    Fri Aug 17 22:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100   WMILIB   WMILIB.SYS   Fri Aug 17 23:07:23 2001 (3B7D878B)
ba5ac000 ba5ad700   dmload   dmload.sys   Fri Aug 17 22:58:15 2001 (3B7D8567)
ba5ce000 ba5cf420   ASACPI   ASACPI.sys   Fri Aug 13 04:52:52 2004 (411C2D04)
ba5d4000 ba5d5100   swenum   swenum.sys   Sun Apr 13 20:39:52 2008 (48025378)
ba5e4000 ba5e5280   USBD     USBD.SYS     Fri Aug 17 23:02:58 2001 (3B7D8682)
ba5fc000 ba5fdf00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 22:49:37 2001 (3B7D8361)
ba5fe000 ba5ff080   Beep     Beep.SYS     Fri Aug 17 22:47:33 2001 (3B7D82E5)
ba600000 ba601080   mnmdd    mnmdd.SYS    Fri Aug 17 22:57:28 2001 (3B7D8538)
ba602000 ba603080   RDPCDD   RDPCDD.sys   Fri Aug 17 22:46:56 2001 (3B7D82C0)
ba616000 ba617100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
ba630000 ba631a80   ParVdm   ParVdm.SYS   Fri Aug 17 22:49:49 2001 (3B7D836D)
ba670000 ba670d00   pciide   pciide.sys   Fri Aug 17 22:51:49 2001 (3B7D83E5)
ba6ed000 ba6edc00   audstub  audstub.sys  Fri Aug 17 22:59:40 2001 (3B7D85BC)
ba7d4000 ba7d4b80   Null     Null.SYS     Fri Aug 17 22:47:39 2001 (3B7D82EB)
ba7e7000 ba7e7d00   dxgthk   dxgthk.sys   Fri Aug 17 22:53:12 2001 (3B7D8438)
bf000000 bf011600   dxg      dxg.sys      Sun Apr 13 20:38:27 2008 (48025323)
bf012000 bf024000   igxprd32 igxprd32.dll Tue Oct 30 17:00:33 2007 (47275521)
bf024000 bf04f000   igxpgd32 igxpgd32.dll Tue Oct 30 17:00:33 2007 (47275521)
bf04f000 bf1e6760   igxpdv32 igxpdv32.DLL Tue Oct 30 17:00:42 2007 (4727552A)
bf1e7000 bf47a000   igxpdx32 igxpdx32.DLL Tue Oct 30 17:00:37 2007 (47275525)
bf800000 bf9c3d00   win32k   win32k.sys   Fri Aug 14 15:21:11 2009 (4A8564C7)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Mon Apr 14 02:09:55 2008 (4802A0D3)

Unloaded modules:
a74fe000 a7529000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a771f000 a774a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8de7000 a8dfb000   NAVENG.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8e20000 a8f62000   NAVEX15.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7fa8000 a7fd3000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba774000 ba775000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7fd3000 a7ff6000   aec.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a82db000 a82e8000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a849a000 a84a8000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba64e000 ba650000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba448000 ba44d000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b9663000 b9666000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
start    end        module name
b9f79000 b9fa6d80   ACPI     ACPI.sys     Sun Apr 13 20:36:33 2008 (480252B1)
a8bf5000 a8c16d00   afd      afd.sys      Thu Aug 14 12:04:35 2008 (48A40333)
ba5ce000 ba5cf420   ASACPI   ASACPI.sys   Fri Aug 13 04:52:52 2004 (411C2D04)
a797e000 a7981800   asyncmac asyncmac.sys Sun Apr 13 20:57:27 2008 (48025797)
b9f0b000 b9f22900   atapi    atapi.sys    Sun Apr 13 20:40:29 2008 (4802539D)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Mon Apr 14 02:09:55 2008 (4802A0D3)
ba6ed000 ba6edc00   audstub  audstub.sys  Fri Aug 17 22:59:40 2001 (3B7D85BC)
ba5fe000 ba5ff080   Beep     Beep.SYS     Fri Aug 17 22:47:33 2001 (3B7D82E5)
ba4b8000 ba4bb000   BOOTVID  BOOTVID.dll  Fri Aug 17 22:49:09 2001 (3B7D8345)
ba208000 ba217900   Cdfs     Cdfs.SYS     Sun Apr 13 21:14:21 2008 (48025B8D)
ba308000 ba317600   cdrom    cdrom.sys    Sun Apr 13 20:40:45 2008 (480253AD)
ba0e8000 ba0f4180   CLASSPNP CLASSPNP.SYS Sun Apr 13 21:16:21 2008 (48025C05)
ba0d8000 ba0e0e00   disk     disk.sys     Sun Apr 13 20:40:46 2008 (480253AE)
b9f23000 b9f48700   dmio     dmio.sys     Sun Apr 13 20:44:45 2008 (4802549D)
ba5ac000 ba5ad700   dmload   dmload.sys   Fri Aug 17 22:58:15 2001 (3B7D8567)
ba1d8000 ba1e6b00   drmk     drmk.sys     Sun Apr 13 20:45:12 2008 (480254B8)
a8a5e000 a8a75900   dump_atapi dump_atapi.sys Sun Apr 13 20:40:29 2008 (4802539D)
ba616000 ba617100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
a8fc4000 a8fc6900   Dxapi    Dxapi.sys    Fri Aug 17 22:53:19 2001 (3B7D843F)
bf000000 bf011600   dxg      dxg.sys      Sun Apr 13 20:38:27 2008 (48025323)
ba7e7000 ba7e7d00   dxgthk   dxgthk.sys   Fri Aug 17 22:53:12 2001 (3B7D8438)
a8a93000 a8af1000   eeCtrl   eeCtrl.sys   Tue Aug 18 01:05:39 2009 (4A89E243)
a8a76000 a8a93000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Tue Aug 18 01:05:39 2009 (4A89E243)
ba3b8000 ba3b9000   fdc      fdc.sys      unavailable (00000000)
b96af000 b96b9e00   Fips     Fips.SYS     Sun Apr 13 20:33:27 2008 (480251F7)
ba410000 ba415000   flpydisk flpydisk.sys Sun Apr 13 20:40:24 2008 (48025398)
b9eeb000 b9f0ab00   fltMgr   fltMgr.sys   Sun Apr 13 20:32:58 2008 (480251DA)
ba5fc000 ba5fdf00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 22:49:37 2001 (3B7D8361)
b9f49000 b9f67880   ftdisk   ftdisk.sys   Fri Aug 17 22:52:41 2001 (3B7D8419)
806e4000 80704d00   hal      halmacpi.dll Sun Apr 13 20:31:27 2008 (4802517F)
b97c2000 b97ea000   HDAudBus HDAudBus.sys Thu May 26 17:46:29 2005 (4295EF55)
ba278000 ba281000   HIDCLASS HIDCLASS.SYS Sun Apr 13 20:45:25 2008 (480254C5)
ba440000 ba446180   HIDPARSE HIDPARSE.SYS Sun Apr 13 20:45:22 2008 (480254C2)
b965b000 b965d880   hidusb   hidusb.sys   Sun Apr 13 20:45:27 2008 (480254C7)
a7a92000 a7ad2e00   HTTP     HTTP.sys     Tue Oct 20 18:20:15 2009 (4ADDE33F)
ba2d8000 ba2e4d00   i8042prt i8042prt.sys Sun Apr 13 21:17:59 2008 (48025C67)
bf04f000 bf1e6760   igxpdv32 igxpdv32.DLL Tue Oct 30 17:00:42 2007 (4727552A)
bf1e7000 bf47a000   igxpdx32 igxpdx32.DLL Tue Oct 30 17:00:37 2007 (47275525)
bf024000 bf04f000   igxpgd32 igxpgd32.dll Tue Oct 30 17:00:33 2007 (47275521)
b97fe000 b9d92960   igxpmp32 igxpmp32.sys Tue Oct 30 17:00:34 2007 (47275522)
bf012000 bf024000   igxprd32 igxprd32.dll Tue Oct 30 17:00:33 2007 (47275521)
ba2f8000 ba302480   imapi    imapi.sys    Sun Apr 13 20:40:57 2008 (480253B9)
ba2b8000 ba2c0e00   intelppm intelppm.sys Sun Apr 13 20:31:31 2008 (48025183)
a8d0d000 a8d32500   ipnat    ipnat.sys    Sun Apr 13 20:57:10 2008 (48025786)
a8db4000 a8dc6600   ipsec    ipsec.sys    Sun Apr 13 21:19:42 2008 (48025CCE)
ba0a8000 ba0b1180   isapnp   isapnp.sys   Sun Apr 13 20:36:40 2008 (480252B8)
ba3c0000 ba3c6000   kbdclass kbdclass.sys Sun Apr 13 20:39:46 2008 (48025372)
ba5a8000 ba5a9b80   kdcom    kdcom.dll    Fri Aug 17 22:49:10 2001 (3B7D8346)
b9767000 b9789700   ks       ks.sys       Sun Apr 13 21:16:34 2008 (48025C12)
b9ec2000 b9ed8b00   KSecDD   KSecDD.sys   Wed Jun 24 13:18:40 2009 (4A420B90)
ba2c8000 ba2d5000   l251x86  l251x86.sys  Fri Oct 17 08:14:52 2008 (48F82D5C)
ba600000 ba601080   mnmdd    mnmdd.SYS    Fri Aug 17 22:57:28 2001 (3B7D8538)
ba3e8000 ba3eda00   mouclass mouclass.sys Sun Apr 13 20:39:47 2008 (48025373)
b9653000 b9655f80   mouhid   mouhid.sys   Fri Aug 17 22:47:57 2001 (3B7D82FD)
ba0b8000 ba0c2580   MountMgr MountMgr.sys Sun Apr 13 20:39:45 2008 (48025371)
a846d000 a8499180   mrxdav   mrxdav.sys   Sun Apr 13 20:32:42 2008 (480251CA)
a8af1000 a8b60280   mrxsmb   mrxsmb.sys   Fri Oct 24 13:21:07 2008 (4901AFA3)
ba458000 ba45ca80   Msfs     Msfs.SYS     Sun Apr 13 20:32:38 2008 (480251C6)
ba178000 ba180900   msgpc    msgpc.sys    Sun Apr 13 20:56:32 2008 (48025760)
b9daf000 b9db2c80   mssmbios mssmbios.sys Sun Apr 13 20:36:45 2008 (480252BD)
b9ddb000 b9df4b80   Mup      Mup.sys      Sun Apr 13 21:17:05 2008 (48025C31)
a7529000 a753c180   NAVENG   NAVENG.SYS   Sat Aug 22 07:31:12 2009 (4A8F82A0)
a753d000 a767e800   NAVEX15  NAVEX15.SYS  Sat Aug 22 07:37:19 2009 (4A8F840F)
b9df5000 b9e21980   NDIS     NDIS.sys     Sun Apr 13 21:20:35 2008 (48025D03)
ba58c000 ba58e780   ndistapi ndistapi.sys Sun Apr 13 20:57:27 2008 (48025797)
a88fe000 a8901900   ndisuio  ndisuio.sys  Sun Apr 13 20:55:57 2008 (4802573D)
b9750000 b9766580   ndiswan  ndiswan.sys  Sun Apr 13 21:20:41 2008 (48025D09)
ba198000 ba1a1e80   NDProxy  NDProxy.SYS  Sun Apr 13 20:57:28 2008 (48025798)
b96bf000 b96c7780   netbios  netbios.sys  Sun Apr 13 20:56:01 2008 (48025741)
a8c17000 a8c3ec00   netbt    netbt.sys    Sun Apr 13 21:20:59 2008 (48025D1B)
ba460000 ba467880   Npfs     Npfs.SYS     Sun Apr 13 20:32:38 2008 (480251C6)
804d7000 806e4000   nt       ntkrpamp.exe Tue Aug 04 16:20:04 2009 (4A784394)
b9e22000 b9eae600   Ntfs     Ntfs.sys     Sun Apr 13 21:15:49 2008 (48025BE5)
ba7d4000 ba7d4b80   Null     Null.SYS     Fri Aug 17 22:47:39 2001 (3B7D82EB)
b978a000 b979d900   parport  parport.sys  Sun Apr 13 20:40:09 2008 (48025389)
ba330000 ba334d00   PartMgr  PartMgr.sys  Sun Apr 13 20:40:48 2008 (480253B0)
ba630000 ba631a80   ParVdm   ParVdm.SYS   Fri Aug 17 22:49:49 2001 (3B7D836D)
b9f68000 b9f78a80   pci      pci.sys      Sun Apr 13 20:36:43 2008 (480252BB)
ba670000 ba670d00   pciide   pciide.sys   Fri Aug 17 22:51:49 2001 (3B7D83E5)
ba328000 ba32e180   PCIIDEX  PCIIDEX.SYS  Sun Apr 13 20:40:29 2008 (4802539D)
a903c000 a905fa80   portcls  portcls.sys  Sun Apr 13 21:19:40 2008 (48025CCC)
b973f000 b974fe00   psched   psched.sys   Sun Apr 13 20:56:36 2008 (48025764)
ba3d8000 ba3dc580   ptilink  ptilink.sys  Fri Aug 17 22:49:53 2001 (3B7D8371)
a9038000 a903a280   rasacd   rasacd.sys   Fri Aug 17 22:55:39 2001 (3B7D84CB)
ba148000 ba154880   rasl2tp  rasl2tp.sys  Sun Apr 13 21:19:43 2008 (48025CCF)
ba158000 ba162200   raspppoe raspppoe.sys Sun Apr 13 20:57:31 2008 (4802579B)
ba168000 ba173d00   raspptp  raspptp.sys  Sun Apr 13 21:19:47 2008 (48025CD3)
ba3e0000 ba3e4080   raspti   raspti.sys   Fri Aug 17 22:55:32 2001 (3B7D84C4)
a8b61000 a8b8be80   rdbss    rdbss.sys    Sun Apr 13 21:28:38 2008 (48025EE6)
ba602000 ba603080   RDPCDD   RDPCDD.sys   Fri Aug 17 22:46:56 2001 (3B7D82C0)
b966f000 b969ee80   rdpdr    rdpdr.sys    Sun Apr 13 20:32:50 2008 (480251D2)
a7d53000 a7d75100   RDPWD    RDPWD.SYS    Sun Apr 13 20:38:40 2008 (48025330)
ba318000 ba326100   redbook  redbook.sys  Sun Apr 13 20:40:27 2008 (4802539B)
a9060000 a94f3000   RtkHDAud RtkHDAud.sys Thu Nov 01 07:38:50 2007 (4729747A)
ba588000 ba58bd80   serenum  serenum.sys  Sun Apr 13 20:40:12 2008 (4802538C)
ba2e8000 ba2f7c00   serial   serial.sys   Sun Apr 13 21:15:44 2008 (48025BE0)
a8b8c000 a8bf5000   SPBBCDrv SPBBCDrv.sys Thu May 15 04:14:28 2008 (482B9C84)
b9ed9000 b9eeaf00   sr       sr.sys       Sun Apr 13 20:36:50 2008 (480252C2)
a8f62000 a8fac000   SRTSP    SRTSP.SYS    Thu Aug 14 06:51:36 2008 (48A3B9D8)
b972f000 b9738080   SRTSPX   SRTSPX.SYS   Thu Aug 14 06:53:49 2008 (48A3BA5D)
a837b000 a83cc880   srv      srv.sys      Thu Dec 11 11:57:07 2008 (4940F203)
ba5d4000 ba5d5100   swenum   swenum.sys   Sun Apr 13 20:39:52 2008 (48025378)
a8dfb000 a8e20000   SYMEVENT SYMEVENT.SYS Tue Jan 15 00:29:24 2008 (478BF054)
ba478000 ba47d200   SYMREDRV SYMREDRV.SYS Tue Aug 19 22:18:20 2008 (48AB2A8C)
a8c3f000 a8c6c200   SYMTDI   SYMTDI.SYS   Tue Aug 19 22:17:48 2008 (48AB2A6C)
a834b000 a8359d80   sysaudio sysaudio.sys Sun Apr 13 21:15:55 2008 (48025BEB)
a8d5b000 a8db3480   tcpip    tcpip.sys    Fri Jun 20 13:51:09 2008 (485B99AD)
ba3d0000 ba3d4a80   TDI      TDI.SYS      Sun Apr 13 21:00:04 2008 (48025834)
ba390000 ba395500   TDTCP    TDTCP.SYS    Sun Apr 13 20:38:35 2008 (4802532B)
b9611000 b9647000   teefer2  teefer2.sys  Thu Jul 10 12:57:41 2008 (4875EB25)
ba188000 ba191f00   termdd   termdd.sys   Sun Apr 13 20:38:36 2008 (4802532C)
b95b3000 b9610f00   update   update.sys   Sun Apr 13 20:39:46 2008 (48025372)
ba5e4000 ba5e5280   USBD     USBD.SYS     Fri Aug 17 23:02:58 2001 (3B7D8682)
ba3b0000 ba3b7600   usbehci  usbehci.sys  Sun Apr 13 20:45:34 2008 (480254CE)
ba238000 ba246880   usbhub   usbhub.sys   Sun Apr 13 20:45:36 2008 (480254D0)
b979e000 b97c1200   USBPORT  USBPORT.SYS  Sun Apr 13 20:45:34 2008 (480254CE)
ba3a8000 ba3ad080   usbuhci  usbuhci.sys  Sun Apr 13 20:45:34 2008 (480254CE)
ba450000 ba455200   vga      vga.sys      Sun Apr 13 20:44:40 2008 (48025498)
b97ea000 b97fdf00   VIDEOPRT VIDEOPRT.SYS Sun Apr 13 20:44:39 2008 (48025497)
ba0c8000 ba0d4c80   VolSnap  VolSnap.sys  Sun Apr 13 20:41:00 2008 (480253BC)
b96ef000 b96f7700   wanarp   wanarp.sys   Sun Apr 13 20:57:20 2008 (48025790)
ba490000 ba494500   watchdog watchdog.sys Sun Apr 13 20:44:59 2008 (480254AB)
a7ff6000 a800a480   wdmaud   wdmaud.sys   Sun Apr 13 21:17:18 2008 (48025C3E)
bf800000 bf9c3d00   win32k   win32k.sys   Fri Aug 14 15:21:11 2009 (4A8564C7)
ba5aa000 ba5ab100   WMILIB   WMILIB.SYS   Fri Aug 17 23:07:23 2001 (3B7D878B)
b96ff000 b970d000   wpsdrvnt wpsdrvnt.sys Fri Sep 05 00:08:24 2008 (48C05C58)
a853a000 a855d380   WpsHelper WpsHelper.sys Tue Mar 10 04:18:06 2009 (49B5DBEE)
b9eaf000 b9ec1f00   WudfPf   WudfPf.sys   Fri Sep 29 03:55:43 2006 (451C7D1F)

Unloaded modules:
a74fe000 a7529000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a771f000 a774a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8de7000 a8dfb000   NAVENG.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a8e20000 a8f62000   NAVEX15.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7fa8000 a7fd3000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba774000 ba775000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a7fd3000 a7ff6000   aec.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a82db000 a82e8000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
a849a000 a84a8000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba64e000 ba650000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba448000 ba44d000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b9663000 b9666000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
**** DUMP OF ALL RESOURCE OBJECTS ****
80565d70: Unable to get value of ExpSystemResourcesList

*** Virtual Memory Usage ***
GetUlongFromAddress: unable to read from 80562128
	Physical Memory:           0 (         0 Kb)
GetUlongFromAddress: unable to read from 80561c60

************ NO PAGING FILE *********************

80561b80: Unable to get paged pool info
GetUlongPtrFromAddress: unable to read from 80551990
GetUlongPtrFromAddress: unable to read from 80561f4c
GetPointerFromAddress: unable to read from 80561c24
GetPointerFromAddress: unable to read from 80555c48
GetUlongFromAddress: unable to read from 8055d7a0
GetPointerFromAddress: unable to read from 8055d714
GetUlongFromAddress: unable to read from 8055d4f4
GetUlongFromAddress: unable to read from 80551918
GetUlongFromAddress: unable to read from 80551928
GetUlongFromAddress: unable to read from 8056211c
GetUlongFromAddress: unable to read from 805620dc
GetUlongFromAddress: unable to read from 8055d350
GetUlongFromAddress: unable to read from 8055d1a0
GetUlongFromAddress: unable to read from 8055d19c
GetUlongFromAddress: unable to read from 8055d1a4
GetUlongFromAddress: unable to read from 8055d1a0
GetUlongFromAddress: unable to read from 8055d19c
GetUlongFromAddress: unable to read from 8055d3fc
GetUlongPtrFromAddress: unable to read from 80554280
GetUlongPtrFromAddress: unable to read from 80555cc0
GetUlongFromAddress: unable to read from 8055d3b8
GetUlongFromAddress: unable to read from 8055d3a0
	Error reading free nonpaged PTEs 8055d354
GetUlongFromAddress: unable to read from 8055d3b0
	Available Pages:           0 (         0 Kb)
	ResAvail Pages:            0 (         0 Kb)

	********** Running out of physical memory **********

	Locked IO Pages:           0 (         0 Kb)
	Free System PTEs:          0 (         0 Kb)

	********** Running out of system PTEs **************

GetUlongFromAddress: unable to read from 8055d338
GetUlongFromAddress: unable to read from 8055d550
	Free NP PTEs:              0 (         0 Kb)
	Free Special NP:           0 (         0 Kb)
	Modified Pages:            0 (         0 Kb)
	Modified PF Pages:         0 (         0 Kb)
80564d20: Unable to get pool descriptor
GetUlongFromAddress: unable to read from 805522b8
	NonPagedPool Usage:        0 (         0 Kb)
	NonPagedPool Max:          0 (         0 Kb)
GetUlongFromAddress: unable to read from 805522b4
	PagedPool Usage:           0 (         0 Kb)
	PagedPool Maximum:         0 (         0 Kb)
GetUlongFromAddress: unable to read from 80565d48
Unable to read _LIST_ENTRY @ 80561b58
	Session Commit:            0 (         0 Kb)
	Shared Commit:             0 (         0 Kb)
	Special Pool:              0 (         0 Kb)
	Shared Process:            0 (         0 Kb)
	PagedPool Commit:          0 (         0 Kb)
	Driver Commit:             0 (         0 Kb)
	Committed pages:      147296 (    589184 Kb)
	Commit limit:              0 (         0 Kb)

	********** Number of committed pages is near limit ********
GetUlongFromAddress: unable to read from 8055d418
GetUlongFromAddress: unable to read from 8055d41c

Unable to read/NULL value _LIST_ENTRY @ 805638b8

ProcessCommitUsage could not be calculated
Bugcheck code 000000C2
Arguments 00000007 00000cd4 0000000e 87fc0008

Open in new window

ASKER CERTIFIED SOLUTION
Avatar of cantoris
cantoris
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of John Griffith
John Griffith
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of *** Hopeleonie ***

ASKER

hi jcgriff2 & cantoris

thanx you both!
@ cantoris it should be from 3 computers (i have asked and let you know)
@ jcgriff2 we are searching you for consulting. but your email address (jcgriff2.EE.@Live.com) is not valide! can you send me an email to hopeleonie@besonet.ch ?
@ cantoris same pc!