Solved

Winxp crashes unexpectedly

Posted on 2008-10-23
19
776 Views
Last Modified: 2012-06-27
Windows xp machine seems to crash with out reason, sometimes the user bumps an open cd rom tray and it crashes ... below is a log of the recent events that have caused it to crash...below that are the system log messages that have been generated...I am at an end on this one..I hope you all can help...

Here is a log of what happened yesterday and today-

October 22
1:00 PM  started using machine
1:15- looking at email machine crashed, started back up on its own
2:18- everything  running real slow- error message appeared, Generic Host Process for Win 32
        services needs to close.  Had to manually restart.
2:33- Using Pro Show Producer- not responding, had to manually turn off machine
4:00- Generic Host Process for Win 32 error message, machine restarted on its own
4:07- tried to open Magix Audio Studio- would not open, had to restart machine
5:15- tried to turn machine off for the evening, would not turn off, still trying to shut down when
         I came back at 1:00 the next day, had to manually turn machine off.
October 23    
1:00- error message: system has recovered from a serious error
1:04- crashed, screen went black while playing back a show in Pro Show Producer, restarted
         on its own.
1:31-  crashed, screen went black, had to manually restart machine,  Error message- system has recovered
          from a serious error

SYSTEM LOG 1

Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            10/23/2008
Time:            1:32:49 PM
User:            N/A
Computer:      WINTEC
Description:
Error code 00000019, parameter1 00000020, parameter2 85144b88, parameter3 85144ba0, parameter4 1a030001.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 30 30 30 30 30 30 31    0000001
0020: 39 20 20 50 61 72 61 6d   9  Param
0028: 65 74 65 72 73 20 30 30   eters 00
0030: 30 30 30 30 32 30 2c 20   000020,
0038: 38 35 31 34 34 62 38 38   85144b88
0040: 2c 20 38 35 31 34 34 62   , 85144b
0048: 61 30 2c 20 31 61 30 33   a0, 1a03
0050: 30 30 30 31               0001  

SYSTEM LOG2

Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            10/22/2008
Time:            1:19:14 PM
User:            N/A
Computer:      WINTEC
Description:
Error code 00000019, parameter1 00000020, parameter2 862ea278, parameter3 862ea290, parameter4 1a030001.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 30 30 30 30 30 30 31    0000001
0020: 39 20 20 50 61 72 61 6d   9  Param
0028: 65 74 65 72 73 20 30 30   eters 00
0030: 30 30 30 30 32 30 2c 20   000020,
0038: 38 36 32 65 61 32 37 38   862ea278
0040: 2c 20 38 36 32 65 61 32   , 862ea2
0048: 39 30 2c 20 31 61 30 33   90, 1a03
0050: 30 30 30 31               0001  

I have searched this to no avail...No Norton or ZONEalarm installed just AVG 7.5 but this was happening before that was installed...Thanks to all...
0
Comment
Question by:ctohelpsu
  • 11
  • 8
19 Comments
 
LVL 27

Expert Comment

by:Jonvee
ID: 22790852
Some information>
0x00000019: BAD_POOL_HEADER
issue is a problem with Windows memory allocation. Device driver issues are probably the most common, but this can have diverse causes including bad sectors or other disk write issues, and problems with some routers.
0x00000019: BAD_POOL_HEADER:
http://aumha.org/a/stop.htm


There should be a dump of the state of your system at the time it crashed.
The dumps are normally located in c:\windows\minidump\    
or  %systemroot%\minidump\

It (or they) will contain information about the bugcheck that was generated.
Can you paste the latest dump(s) in the "Attach Code Snippet" box and i'll try and confirm the cause of the crash.

You may need to disable auto restart:
Right click My Computer > Properties > Advanced > Startup and Recovery Settings and uncheck Automatically Restart.
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22790952
It would be useful if you could post five or more minidumps if you can find that many.  When analysed that should give a more accurate answer.  To post them you may have to rename the dumps to .txt files.
0
 

Author Comment

by:ctohelpsu
ID: 22798598
I was able to get the dumps thanks for your help...I have 4 miniidumps....More if needed...I have also attached the txt files...
Opened log file 'c:\debuglog.txt'

0: kd> kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols 

Numeric expression missing from '> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols '

0: kd>  .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols 

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols 

WARNING: Whitespace at end of path element

0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q 

Loading Kernel Symbols

........................................................................................................................................

Loading User Symbols

Loading unloaded module list

.........

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************
 

BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: 85505f80, The pool entry we were looking for within the page.

Arg3: 85505f98, The next pool entry.

Arg4: 1a030001, (reserved)
 

Debugging Details:

------------------
 

Unable to load image USBNEOD.SYS, Win32 error 0n2

*** WARNING: Unable to verify timestamp for USBNEOD.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBNEOD.SYS
 

BUGCHECK_STR:  0x19_20
 

POOL_ADDRESS:  85505f80 
 

CUSTOMER_CRASH_COUNT:  1
 

DEFAULT_BUCKET_ID:  DRIVER_FAULT
 

PROCESS_NAME:  svchost.exe
 

IRP_ADDRESS:  8541bbc8
 

LAST_CONTROL_TRANSFER:  from 80550fc5 to 8053738a
 

STACK_TEXT:  

f3b9185c 80550fc5 00000019 00000020 85505f80 nt!KeBugCheckEx+0x1b

f3b918ac 804f2c1f 85505f88 00000000 8541bc08 nt!ExFreePoolWithTag+0x2c1

f3b91904 804f2db5 8541bc08 f3b91950 f3b91944 nt!IopCompleteRequest+0xf4

f3b91954 806ffef2 00000000 00000000 f3b9196c nt!KiDeliverApc+0xb3

f3b91954 806ffae4 00000000 00000000 f3b9196c hal!HalpApcInterrupt+0xc6

f3b919dc 804e5d2c 8541bc08 8541bbc8 00000000 hal!KeReleaseQueuedSpinLock+0x3c

f3b919fc 804f2dcf 8541bc08 8550b6f8 00000000 nt!KeInsertQueueApc+0x6d

f3b91a30 f77e76c5 8601e0e8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8

WARNING: Stack unwind information not available. Following frames may be wrong.

f3b91a44 f77e74b1 8601e030 8541bbc8 8541bc78 USBNEOD+0x6c5

f3b91a60 804e13d9 8601e030 8541bbc8 8541bc9c USBNEOD+0x4b1

f3b91a70 f7529c3a 0007c0d0 855029d8 8541bbc8 nt!IopfCallDriver+0x31

f3b91af4 f7518402 85502920 8541bbc8 8541bbc8 CLASSPNP!ClassDeviceControl+0x87e

f3b91b88 f752847f 85502920 8541bbc8 8541bca4 disk!DiskDeviceControl+0xdcc

f3b91ba4 804e13d9 85502920 8541bbc8 8541bbc8 CLASSPNP!ClassDeviceControlDispatch+0x48

f3b91bb4 f7751667 8541bca4 863ce710 00000000 nt!IopfCallDriver+0x31

f3b91be0 804e13d9 85582940 8541bbc8 8541bcc8 PartMgr!PmDeviceControl+0x8c

f3b91bf0 805b5cb9 854d39e8 851b7a40 f3b91c40 nt!IopfCallDriver+0x31

f3b91c00 805b5a5a 851b7a40 8541bbc8 8541bca4 nt!RawReadWriteDeviceControl+0x60

f3b91c40 804e13d9 851b7988 8541bbc8 806ff410 nt!RawDispatch+0x114

f3b91c50 8056f50b 8541bca4 8550b6f8 8541bbc8 nt!IopfCallDriver+0x31

f3b91c64 80580fc1 851b7988 8541bbc8 8550b6f8 nt!IopSynchronousServiceTail+0x60

f3b91d00 80586eee 00001e94 00000000 00000000 nt!IopXxxControlFile+0x5ef

f3b91d34 804dd99f 00001e94 00000000 00000000 nt!NtDeviceIoControlFile+0x2a

f3b91d34 7c90eb94 00001e94 00000000 00000000 nt!KiFastCallEntry+0xfc

0322fa9c 00000000 00000000 00000000 00000000 0x7c90eb94
 
 

STACK_COMMAND:  kb
 

FOLLOWUP_IP: 

USBNEOD+6c5

f77e76c5 ??              ???
 

SYMBOL_STACK_INDEX:  8
 

SYMBOL_NAME:  USBNEOD+6c5
 

FOLLOWUP_NAME:  MachineOwner
 

MODULE_NAME: USBNEOD
 

IMAGE_NAME:  USBNEOD.SYS
 

DEBUG_FLR_IMAGE_TIMESTAMP:  3e4b69fa
 

FAILURE_BUCKET_ID:  0x19_20_USBNEOD+6c5
 

BUCKET_ID:  0x19_20_USBNEOD+6c5
 

Followup: MachineOwner

---------
 

eax=ffdff13c ebx=85505f80 ecx=00000000 edx=00000051 esi=85505f80 edi=8550b6f8

eip=8053738a esp=f3b91844 ebp=f3b9185c iopl=0         nv up ei ng nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286

nt!KeBugCheckEx+0x1b:

8053738a 5d              pop     ebp

ChildEBP RetAddr  Args to Child              

f3b9185c 80550fc5 00000019 00000020 85505f80 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

f3b918ac 804f2c1f 85505f88 00000000 8541bc08 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

f3b91904 804f2db5 8541bc08 f3b91950 f3b91944 nt!IopCompleteRequest+0xf4 (FPO: [Non-Fpo])

f3b91954 806ffef2 00000000 00000000 f3b9196c nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo])

f3b91954 806ffae4 00000000 00000000 f3b9196c hal!HalpApcInterrupt+0xc6 (FPO: [0,2] TrapFrame @ f3b9196c)

f3b919dc 804e5d2c 8541bc08 8541bbc8 00000000 hal!KeReleaseQueuedSpinLock+0x3c (FPO: [0,0,0])

f3b919fc 804f2dcf 8541bc08 8550b6f8 00000000 nt!KeInsertQueueApc+0x6d (FPO: [Non-Fpo])

f3b91a30 f77e76c5 8601e0e8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8 (FPO: [Non-Fpo])

WARNING: Stack unwind information not available. Following frames may be wrong.

f3b91a44 f77e74b1 8601e030 8541bbc8 8541bc78 USBNEOD+0x6c5

f3b91a60 804e13d9 8601e030 8541bbc8 8541bc9c USBNEOD+0x4b1

f3b91a70 f7529c3a 0007c0d0 855029d8 8541bbc8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

f3b91af4 f7518402 85502920 8541bbc8 8541bbc8 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

f3b91b88 f752847f 85502920 8541bbc8 8541bca4 disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

f3b91ba4 804e13d9 85502920 8541bbc8 8541bbc8 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

f3b91bb4 f7751667 8541bca4 863ce710 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

f3b91be0 804e13d9 85582940 8541bbc8 8541bcc8 PartMgr!PmDeviceControl+0x8c (FPO: [Non-Fpo])

f3b91bf0 805b5cb9 854d39e8 851b7a40 f3b91c40 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

f3b91c00 805b5a5a 851b7a40 8541bbc8 8541bca4 nt!RawReadWriteDeviceControl+0x60 (FPO: [Non-Fpo])

f3b91c40 804e13d9 851b7988 8541bbc8 806ff410 nt!RawDispatch+0x114 (FPO: [Non-Fpo])

f3b91c50 8056f50b 8541bca4 8550b6f8 8541bbc8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

start    end        module name

804d7000 806fd000   nt       ntkrnlmp.exe Wed Feb 28 04:08:32 2007 (45E54690)

806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)

ba288000 ba2c8280   HTTP     HTTP.sys     Thu Mar 16 20:33:09 2006 (441A03C5)

ba4ab000 ba4d5180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)

ba5c1000 ba5d5400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)

ba5d6000 ba5f9000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)

baaa9000 baafa480   srv      srv.sys      Mon Aug 14 06:34:39 2006 (44E051BF)

bab0f000 bab11a40   OsaFsLoc OsaFsLoc.sys Wed Feb 23 06:27:48 2005 (421C68B4)

babdb000 babe9d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)

bac63000 bac8f400   mrxdav   mrxdav.sys   Wed Aug 04 02:00:49 2004 (41107B91)

bae34000 bae36d00   MaVc2K   MaVc2K.sys   Tue May 03 03:20:05 2005 (42772625)

baf88000 baf92000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)

bafec000 bafef280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)

bf800000 bf9c2180   win32k   win32k.sys   Thu Mar 08 08:47:34 2007 (45F013F6)

bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)

bf9d5000 bfe26d00   nv4_disp nv4_disp.dll Thu Jun 01 21:06:00 2006 (447F8EF8)

bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)

f39ba000 f39d1480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)

f39fa000 f3a68a00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)

f3a69000 f3a93a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)

f3a94000 f3ab5c80   afd      afd.sys      Fri Jun 20 06:44:37 2008 (485B8A15)

f3ab6000 f3ad6f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)

f3ad7000 f3afec00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)

f3aff000 f3b56f80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)

f3b57000 f3b69400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)

f3bc5000 f3be6700   portcls  portcls.sys  Tue Mar 16 14:58:17 2004 (40574E49)

f3be7000 f3cf9100   sthda    sthda.sys    Thu Jul 27 14:07:08 2006 (44C900CC)

f62ca000 f6322e80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)

f6323000 f6353100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)

f6354000 f6364e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)

f6365000 f637b680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)

f637c000 f639e680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)

f639f000 f63b2900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)

f63b3000 f63dae00   e100b325 e100b325.sys Thu Jan 12 18:27:46 2006 (43C6E5F2)

f63db000 f63eee00   Rtnicxp  Rtnicxp.sys  Sun Feb 26 16:46:21 2006 (440221AD)

f63ef000 f6411e80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)

f6412000 f6438000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)

f6438000 f644b780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)

f644c000 f680a7a0   nv4_mini nv4_mini.sys Thu Jun 01 21:11:09 2006 (447F902D)

f6936000 f6938580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)

f6942000 f6944700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)

f6946000 f6948880   pfc      pfc.sys      Fri Sep 19 19:47:22 2003 (3F6B958A)

f694a000 f694dc80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)

f6cab000 f6cba900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)

f71e0000 f71e3a00   kbdhid   kbdhid.sys   Wed Aug 04 01:58:33 2004 (41107B09)

f71e4000 f71e6f80   mouhid   mouhid.sys   Fri Aug 17 16:47:57 2001 (3B7D82FD)

f71f0000 f71f2580   hidusb   hidusb.sys   Fri Aug 17 17:02:16 2001 (3B7D8658)

f7228000 f7242580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)

f7243000 f726fa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)

f7270000 f72fc400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

f72fd000 f7313780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)

f7314000 f73d7400   dmboot   dmboot.sys   Wed Aug 04 02:07:13 2004 (41107D11)

f73d8000 f73e9f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)

f73ea000 f7409780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)

f740a000 f7421480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)

f7422000 f7447700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)

f7448000 f7466880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)

f7467000 f7477a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)

f7478000 f74a5d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)

f74c7000 f74cfc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)

f74d7000 f74e5e80   ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)

f74e7000 f74f4000   1394BUS  1394BUS.SYS  Wed Aug 04 02:10:03 2004 (41107DBB)

f74f7000 f7501500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)

f7507000 f7513c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)

f7517000 f751fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)

f7527000 f7533200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)

f7537000 f753fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)

f7547000 f7551880   sbp2port sbp2port.sys Wed Aug 04 01:59:54 2004 (41107B5A)

f7557000 f7566180   nic1394  nic1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f75a7000 f75afe40   SMBios   SMBios.sys   Thu Sep 11 18:20:22 2003 (3F60F526)

f75c7000 f75cfd00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)

f75d7000 f75e6d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)

f75e7000 f75f1380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)

f75f7000 f7603180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)

f7607000 f7615080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)

f7617000 f7623880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)

f7627000 f7631200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)

f7637000 f7642d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)

f7647000 f764f900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)

f7657000 f7660f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)

f7667000 f7670480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)

f7677000 f7685b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)

f7687000 f7691300   sfng32   sfng32.sys   Fri Dec 02 16:22:25 2005 (4390BB11)

f7697000 f76a5100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)

f76c7000 f76cf700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)

f76d7000 f76df700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)

f76e7000 f76f5d80   arp1394  arp1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f76f7000 f76ff880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)

f7707000 f770fd80   HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)

f7747000 f774d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)

f774f000 f7753900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)

f775f000 f7765000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f777f000 f7784a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f7797000 f779c000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)

f77a7000 f77ae000   osaio    osaio.sys    Fri Mar 04 01:49:08 2005 (422804E4)

f77af000 f77b5180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)

f77b7000 f77bc200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)

f77bf000 f77c3a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)

f77c7000 f77ce880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)

f77df000 f77e6b80   usbccgp  usbccgp.sys  Wed Aug 04 02:08:45 2004 (41107D6D)

f77e7000 f77eb3e0   USBNEOD  USBNEOD.SYS  Thu Feb 13 04:48:42 2003 (3E4B69FA)

f781f000 f7823500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)

f7887000 f788c000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f788f000 f7895800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f7897000 f789db00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)

f789f000 f78a4200   iviaspi  iviaspi.sys  Thu Sep 11 02:36:53 2003 (3F601805)

f78a7000 f78ac300   intelsmb intelsmb.sys Fri Dec 17 13:27:24 2004 (41C3250C)

f78af000 f78b6580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)

f78b7000 f78bb880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)

f78bf000 f78c3580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)

f78c7000 f78cb080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)

f78cf000 f78d5780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

f78d7000 f78da000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)

f78db000 f78dd480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)

f78df000 f78e2700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)

f7977000 f797ac80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)

f79ab000 f79ad900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)

f79b3000 f79b5280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)

f79c7000 f79c8b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)

f79c9000 f79ca100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

f79cb000 f79cc700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)

f7a09000 f7a0a800   NTIDrvr  NTIDrvr.sys  Tue Dec 21 15:33:14 2004 (41C8888A)

f7a0b000 f7a0c700   RootMdm  RootMdm.sys  Fri Aug 17 16:57:36 2001 (3B7D8540)

f7a0d000 f7a0e100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)

f7a17000 f7a18280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)

f7a19000 f7a1af00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)

f7a1b000 f7a1c080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)

f7a1f000 f7a20080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)

f7a21000 f7a22080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)

f7a23000 f7a24800   RaInfo   RaInfo.sys   Fri Jan 04 13:57:12 2008 (477E8188)

f7a43000 f7a44100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)

f7a7d000 f7a7ed00   SIODRV   SIODRV.SYS   Mon Nov 03 19:39:42 2003 (3FA6F54E)

f7a8f000 f7a8fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)

f7ac4000 f7ac4b80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

f7b70000 f7b70d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)

f7bbe000 f7bbec80   lmimirr  lmimirr.sys  Tue Apr 10 18:32:11 2007 (461C106B)

f7bc1000 f7bc1c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
 

Unloaded modules:

f7aec000 f7aed000   drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

baa09000 baa16000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba576000 ba599000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba771000 ba77f000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a49000 f7a4b000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79af000 f79b3000   kbdhid.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f76b7000 f76c4000   i8042prt.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f779f000 f77a4000   Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79ab000 f79ae000   Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

Closing open log file c:\debuglog.txt
 
 

2ND

Opened log file 'c:\debuglog1.txt'

0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols 

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols 

WARNING: Whitespace at end of path element

0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q 

Loading Kernel Symbols

............................................................................................................................................

Loading User Symbols

Loading unloaded module list

............

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************
 

BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: 8615cd78, The pool entry we were looking for within the page.

Arg3: 8615cd90, The next pool entry.

Arg4: 1a030001, (reserved)
 

Debugging Details:

------------------
 

Unable to load image USBNEOD.SYS, Win32 error 0n2

*** WARNING: Unable to verify timestamp for USBNEOD.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBNEOD.SYS
 

BUGCHECK_STR:  0x19_20
 

POOL_ADDRESS:  8615cd78 
 

CUSTOMER_CRASH_COUNT:  2
 

DEFAULT_BUCKET_ID:  DRIVER_FAULT
 

PROCESS_NAME:  svchost.exe
 

IRP_ADDRESS:  84d8a270
 

LAST_CONTROL_TRANSFER:  from 80550fc5 to 8053738a
 

STACK_TEXT:  

ba6d585c 80550fc5 00000019 00000020 8615cd78 nt!KeBugCheckEx+0x1b

ba6d58ac 804f2c1f 8615cd80 00000000 84d8a2b0 nt!ExFreePoolWithTag+0x2c1

ba6d5904 804f2db5 84d8a2b0 ba6d5950 ba6d5944 nt!IopCompleteRequest+0xf4

ba6d5954 806ffef2 00000000 00000000 ba6d596c nt!KiDeliverApc+0xb3

ba6d5954 806ffae4 00000000 00000000 ba6d596c hal!HalpApcInterrupt+0xc6

ba6d59dc 804e5d2c 84d8a2b0 84d8a270 00000000 hal!KeReleaseQueuedSpinLock+0x3c

ba6d59fc 804f2dcf 84d8a2b0 8605d6a0 00000000 nt!KeInsertQueueApc+0x6d

ba6d5a30 f77e76c5 8555b0e8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8

WARNING: Stack unwind information not available. Following frames may be wrong.

ba6d5a44 f77e74b1 8555b030 84d8a270 84d8a320 USBNEOD+0x6c5

ba6d5a60 804e13d9 8555b030 84d8a270 84d8a344 USBNEOD+0x4b1

ba6d5a70 f7529c3a 0007c0d0 85522b70 84d8a270 nt!IopfCallDriver+0x31

ba6d5af4 f7518402 85522ab8 84d8a270 84d8a270 CLASSPNP!ClassDeviceControl+0x87e

ba6d5b88 f752847f 85522ab8 84d8a270 84d8a34c disk!DiskDeviceControl+0xdcc

ba6d5ba4 804e13d9 85522ab8 84d8a270 84d8a270 CLASSPNP!ClassDeviceControlDispatch+0x48

ba6d5bb4 f7751667 84d8a34c 86380b90 00000000 nt!IopfCallDriver+0x31

ba6d5be0 804e13d9 8565d9c8 84d8a270 84d8a370 PartMgr!PmDeviceControl+0x8c

ba6d5bf0 805b5cb9 85483550 85440468 ba6d5c40 nt!IopfCallDriver+0x31

ba6d5c00 805b5a5a 85440468 84d8a270 84d8a34c nt!RawReadWriteDeviceControl+0x60

ba6d5c40 804e13d9 854403b0 84d8a270 806ff410 nt!RawDispatch+0x114

ba6d5c50 8056f50b 84d8a34c 8605d6a0 84d8a270 nt!IopfCallDriver+0x31

ba6d5c64 80580fc1 854403b0 84d8a270 8605d6a0 nt!IopSynchronousServiceTail+0x60

ba6d5d00 80586eee 00001914 00000000 00000000 nt!IopXxxControlFile+0x5ef

ba6d5d34 804dd99f 00001914 00000000 00000000 nt!NtDeviceIoControlFile+0x2a

ba6d5d34 7c90eb94 00001914 00000000 00000000 nt!KiFastCallEntry+0xfc

0839fa9c 00000000 00000000 00000000 00000000 0x7c90eb94
 
 

STACK_COMMAND:  kb
 

FOLLOWUP_IP: 

USBNEOD+6c5

f77e76c5 ??              ???
 

SYMBOL_STACK_INDEX:  8
 

SYMBOL_NAME:  USBNEOD+6c5
 

FOLLOWUP_NAME:  MachineOwner
 

MODULE_NAME: USBNEOD
 

IMAGE_NAME:  USBNEOD.SYS
 

DEBUG_FLR_IMAGE_TIMESTAMP:  3e4b69fa
 

FAILURE_BUCKET_ID:  0x19_20_USBNEOD+6c5
 

BUCKET_ID:  0x19_20_USBNEOD+6c5
 

Followup: MachineOwner

---------
 

eax=ffdff13c ebx=8615cd78 ecx=00000000 edx=00000051 esi=8615cd78 edi=8605d6a0

eip=8053738a esp=ba6d5844 ebp=ba6d585c iopl=0         nv up ei ng nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286

nt!KeBugCheckEx+0x1b:

8053738a 5d              pop     ebp

ChildEBP RetAddr  Args to Child              

ba6d585c 80550fc5 00000019 00000020 8615cd78 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

ba6d58ac 804f2c1f 8615cd80 00000000 84d8a2b0 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

ba6d5904 804f2db5 84d8a2b0 ba6d5950 ba6d5944 nt!IopCompleteRequest+0xf4 (FPO: [Non-Fpo])

ba6d5954 806ffef2 00000000 00000000 ba6d596c nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo])

ba6d5954 806ffae4 00000000 00000000 ba6d596c hal!HalpApcInterrupt+0xc6 (FPO: [0,2] TrapFrame @ ba6d596c)

ba6d59dc 804e5d2c 84d8a2b0 84d8a270 00000000 hal!KeReleaseQueuedSpinLock+0x3c (FPO: [0,0,0])

ba6d59fc 804f2dcf 84d8a2b0 8605d6a0 00000000 nt!KeInsertQueueApc+0x6d (FPO: [Non-Fpo])

ba6d5a30 f77e76c5 8555b0e8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8 (FPO: [Non-Fpo])

WARNING: Stack unwind information not available. Following frames may be wrong.

ba6d5a44 f77e74b1 8555b030 84d8a270 84d8a320 USBNEOD+0x6c5

ba6d5a60 804e13d9 8555b030 84d8a270 84d8a344 USBNEOD+0x4b1

ba6d5a70 f7529c3a 0007c0d0 85522b70 84d8a270 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

ba6d5af4 f7518402 85522ab8 84d8a270 84d8a270 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

ba6d5b88 f752847f 85522ab8 84d8a270 84d8a34c disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

ba6d5ba4 804e13d9 85522ab8 84d8a270 84d8a270 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

ba6d5bb4 f7751667 84d8a34c 86380b90 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

ba6d5be0 804e13d9 8565d9c8 84d8a270 84d8a370 PartMgr!PmDeviceControl+0x8c (FPO: [Non-Fpo])

ba6d5bf0 805b5cb9 85483550 85440468 ba6d5c40 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

ba6d5c00 805b5a5a 85440468 84d8a270 84d8a34c nt!RawReadWriteDeviceControl+0x60 (FPO: [Non-Fpo])

ba6d5c40 804e13d9 854403b0 84d8a270 806ff410 nt!RawDispatch+0x114 (FPO: [Non-Fpo])

ba6d5c50 8056f50b 84d8a34c 8605d6a0 84d8a270 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

start    end        module name

804d7000 806fd000   nt       ntkrnlmp.exe Wed Feb 28 04:08:32 2007 (45E54690)

806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)

b8eea000 b8fb2a60   avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)

b9053000 b907d180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)

ba198000 ba1d8280   HTTP     HTTP.sys     Thu Mar 16 20:33:09 2006 (441A03C5)

ba459000 ba46d400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)

ba6ee000 ba711000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)

baa09000 baa5a480   srv      srv.sys      Mon Aug 14 06:34:39 2006 (44E051BF)

bab23000 bab25a40   OsaFsLoc OsaFsLoc.sys Wed Feb 23 06:27:48 2005 (421C68B4)

bac63000 bac8f400   mrxdav   mrxdav.sys   Wed Aug 04 02:00:49 2004 (41107B91)

bac90000 bac9a000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)

bacb0000 bacbed80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)

bad78000 bad7ad00   MaVc2K   MaVc2K.sys   Tue May 03 03:20:05 2005 (42772625)

baeec000 baeef280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)

bf800000 bf9c2180   win32k   win32k.sys   Thu Mar 08 08:47:34 2007 (45F013F6)

bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)

bf9d5000 bfe26d00   nv4_disp nv4_disp.dll Thu Jun 01 21:06:00 2006 (447F8EF8)

bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)

f35bf000 f35d6480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)

f35d7000 f3645a00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)

f366e000 f3698a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)

f3699000 f36bac80   afd      afd.sys      Fri Jun 20 06:44:37 2008 (485B8A15)

f36bb000 f36e2c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)

f36e3000 f3703f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)

f3704000 f375bf80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)

f375c000 f376e400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)

f37a7000 f37a9900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)

f37ca000 f37eb700   portcls  portcls.sys  Tue Mar 16 14:58:17 2004 (40574E49)

f37ec000 f38fe100   sthda    sthda.sys    Thu Jul 27 14:07:08 2006 (44C900CC)

f5ecf000 f5f27e80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)

f5f28000 f5f58100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)

f5f59000 f5f69e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)

f5f6a000 f5f80680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)

f5f81000 f5fa3680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)

f5fa4000 f5fb7900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)

f5fb8000 f5fdfe00   e100b325 e100b325.sys Thu Jan 12 18:27:46 2006 (43C6E5F2)

f5fe0000 f5ff3e00   Rtnicxp  Rtnicxp.sys  Sun Feb 26 16:46:21 2006 (440221AD)

f5ff4000 f6016e80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)

f6017000 f603d000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)

f603d000 f6050780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)

f6051000 f640f7a0   nv4_mini nv4_mini.sys Thu Jun 01 21:11:09 2006 (447F902D)

f6445000 f6448c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)

f6d07000 f6d16900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)

f71ec000 f71ee580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)

f71f8000 f71fa700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)

f71fc000 f71fe880   pfc      pfc.sys      Fri Sep 19 19:47:22 2003 (3F6B958A)

f7200000 f7203c80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)

f7228000 f7242580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)

f7243000 f726fa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)

f7270000 f72fc400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

f72fd000 f7313780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)

f7314000 f73d7400   dmboot   dmboot.sys   Wed Aug 04 02:07:13 2004 (41107D11)

f73d8000 f73e9f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)

f73ea000 f7409780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)

f740a000 f7421480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)

f7422000 f7447700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)

f7448000 f7466880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)

f7467000 f7477a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)

f7478000 f74a5d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)

f74c7000 f74cfc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)

f74d7000 f74e5e80   ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)

f74e7000 f74f4000   1394BUS  1394BUS.SYS  Wed Aug 04 02:10:03 2004 (41107DBB)

f74f7000 f7501500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)

f7507000 f7513c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)

f7517000 f751fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)

f7527000 f7533200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)

f7537000 f753fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)

f7547000 f7551880   sbp2port sbp2port.sys Wed Aug 04 01:59:54 2004 (41107B5A)

f7557000 f7566180   nic1394  nic1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7587000 f758fe40   SMBios   SMBios.sys   Thu Sep 11 18:20:22 2003 (3F60F526)

f75a7000 f75afd00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)

f75b7000 f75c6d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)

f75c7000 f75d1380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)

f75d7000 f75e3180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)

f75e7000 f75f5080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)

f75f7000 f7603880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)

f7607000 f7611200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)

f7617000 f7622d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)

f7627000 f762f900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)

f7637000 f7640f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)

f7647000 f7650480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)

f7657000 f7665b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)

f7667000 f7671300   sfng32   sfng32.sys   Fri Dec 02 16:22:25 2005 (4390BB11)

f7677000 f7685100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)

f76a7000 f76af700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)

f76b7000 f76bf700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)

f76c7000 f76d5d80   arp1394  arp1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f76d7000 f76df880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)

f76e7000 f76efd80   HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)

f7747000 f774d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)

f774f000 f7753900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)

f775f000 f7763080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)

f777f000 f7785780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

f7787000 f778d000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f778f000 f7794a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f77a7000 f77ac000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)

f77b7000 f77bd180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)

f77bf000 f77c4200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)

f77c7000 f77cba80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)

f77cf000 f77d6880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)

f77d7000 f77de000   osaio    osaio.sys    Fri Mar 04 01:49:08 2005 (422804E4)

f77df000 f77e6b80   usbccgp  usbccgp.sys  Wed Aug 04 02:08:45 2004 (41107D6D)

f77e7000 f77eb3e0   USBNEOD  USBNEOD.SYS  Thu Feb 13 04:48:42 2003 (3E4B69FA)

f7817000 f781dc80   avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)

f781f000 f7823500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)

f7897000 f789c000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f789f000 f78a5800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f78a7000 f78adb00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)

f78af000 f78b4200   iviaspi  iviaspi.sys  Thu Sep 11 02:36:53 2003 (3F601805)

f78b7000 f78bc300   intelsmb intelsmb.sys Fri Dec 17 13:27:24 2004 (41C3250C)

f78bf000 f78c6580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)

f78c7000 f78cb880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)

f78cf000 f78d3580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)

f78d7000 f78da000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)

f78db000 f78dd480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)

f78df000 f78e2700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)

f798b000 f798d280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)

f79b3000 f79b5580   hidusb   hidusb.sys   Fri Aug 17 17:02:16 2001 (3B7D8658)

f79bb000 f79bdf80   mouhid   mouhid.sys   Fri Aug 17 16:47:57 2001 (3B7D82FD)

f79bf000 f79c2a00   kbdhid   kbdhid.sys   Wed Aug 04 01:58:33 2004 (41107B09)

f79c7000 f79c8b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)

f79c9000 f79ca100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

f79cb000 f79cc700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)

f79d5000 f79d6080   avg7rsw  avg7rsw.sys  Tue Jul 26 08:10:51 2005 (42E6284B)

f79ff000 f7a00800   RaInfo   RaInfo.sys   Fri Jan 04 13:57:12 2008 (477E8188)

f7a0b000 f7a0c800   NTIDrvr  NTIDrvr.sys  Tue Dec 21 15:33:14 2004 (41C8888A)

f7a0d000 f7a0e700   RootMdm  RootMdm.sys  Fri Aug 17 16:57:36 2001 (3B7D8540)

f7a0f000 f7a10100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)

f7a17000 f7a18280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)

f7a19000 f7a1af00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)

f7a1b000 f7a1c080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)

f7a1d000 f7a1e080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)

f7a1f000 f7a20080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)

f7a43000 f7a44100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)

f7a87000 f7a88d00   SIODRV   SIODRV.SYS   Mon Nov 03 19:39:42 2003 (3FA6F54E)

f7a8f000 f7a8fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)

f7afd000 f7afdb80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

f7b92000 f7b92d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)

f7bdf000 f7be0000   avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)

f7bf3000 f7bf3c80   lmimirr  lmimirr.sys  Tue Apr 10 18:32:11 2007 (461C106B)

f7bf5000 f7bf5c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
 

Unloaded modules:

b916e000 b9199000   kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b9239000 b9264000   kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba40b000 ba436000   kmixer.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7b40000 f7b41000   drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba5e6000 ba5f3000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba436000 ba459000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba761000 ba76f000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a13000 f7a15000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7987000 f798b000   kbdhid.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7697000 f76a4000   i8042prt.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f77af000 f77b4000   Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7983000 f7986000   Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

Closing open log file c:\debuglog1.txt
 

3RD
 

Opened log file 'c:\debuglog23.txt'

0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols

0: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q 

Loading Kernel Symbols

................................................................................................................................................

Loading User Symbols

Loading unloaded module list

................

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************
 

BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: 8516f320, The pool entry we were looking for within the page.

Arg3: 8516f338, The next pool entry.

Arg4: 1a030001, (reserved)
 

Debugging Details:

------------------
 

Unable to load image USBNEOD.SYS, Win32 error 0n2

*** WARNING: Unable to verify timestamp for USBNEOD.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBNEOD.SYS
 

BUGCHECK_STR:  0x19_20
 

POOL_ADDRESS:  8516f320 
 

CUSTOMER_CRASH_COUNT:  1
 

DEFAULT_BUCKET_ID:  DRIVER_FAULT
 

PROCESS_NAME:  svchost.exe
 

IRP_ADDRESS:  84db2e30
 

LAST_CONTROL_TRANSFER:  from 80550fc5 to 805373aa
 

STACK_TEXT:  

f6b8385c 80550fc5 00000019 00000020 8516f320 nt!KeBugCheckEx+0x1b

f6b838ac 804f2c1f 8516f328 00000000 84db2e70 nt!ExFreePoolWithTag+0x2c1

f6b83904 804f2db5 84db2e70 f6b83950 f6b83944 nt!IopCompleteRequest+0xf4

f6b83954 806ffef2 00000000 00000000 f6b8396c nt!KiDeliverApc+0xb3

f6b83954 806ffae4 00000000 00000000 f6b8396c hal!HalpApcInterrupt+0xc6

f6b839dc 804e5d2c 84db2e70 84db2e30 00000000 hal!KeReleaseQueuedSpinLock+0x3c

f6b839fc 804f2dcf 84db2e70 862a3708 00000000 nt!KeInsertQueueApc+0x6d

f6b83a30 f77c76c5 8615fd50 002d1400 00000000 nt!IopfCompleteRequest+0x1d8

WARNING: Stack unwind information not available. Following frames may be wrong.

f6b83a44 f77c74b1 8615fc98 84db2e30 84db2ee0 USBNEOD+0x6c5

f6b83a60 804e13d9 8615fc98 84db2e30 84db2f04 USBNEOD+0x4b1

f6b83a70 f7529c3a 0007c0d0 860be728 84db2e30 nt!IopfCallDriver+0x31

f6b83af4 f7518402 860be670 84db2e30 84db2e30 CLASSPNP!ClassDeviceControl+0x87e

f6b83b88 f752847f 860be670 84db2e30 84db2f0c disk!DiskDeviceControl+0xdcc

f6b83ba4 804e13d9 860be670 84db2e30 84db2e30 CLASSPNP!ClassDeviceControlDispatch+0x48

f6b83bb4 f7751667 84db2f0c 86368cb0 00000000 nt!IopfCallDriver+0x31

f6b83be0 804e13d9 86155780 84db2e30 84db2f30 PartMgr!PmDeviceControl+0x8c

f6b83bf0 805b5cc5 84d97dc0 850d4e68 f6b83c40 nt!IopfCallDriver+0x31

f6b83c00 805b5a66 850d4e68 84db2e30 84db2f0c nt!RawReadWriteDeviceControl+0x60

f6b83c40 804e13d9 850d4db0 84db2e30 806ff410 nt!RawDispatch+0x114

f6b83c50 8056f129 84db2f0c 862a3708 84db2e30 nt!IopfCallDriver+0x31

f6b83c64 80580fb9 850d4db0 84db2e30 862a3708 nt!IopSynchronousServiceTail+0x60

f6b83d00 80586ef0 00001e88 00000000 00000000 nt!IopXxxControlFile+0x5ef

f6b83d34 804dd99f 00001e88 00000000 00000000 nt!NtDeviceIoControlFile+0x2a

f6b83d34 7c90eb94 00001e88 00000000 00000000 nt!KiFastCallEntry+0xfc

021dfa9c 00000000 00000000 00000000 00000000 0x7c90eb94
 
 

STACK_COMMAND:  kb
 

FOLLOWUP_IP: 

USBNEOD+6c5

f77c76c5 ??              ???
 

SYMBOL_STACK_INDEX:  8
 

SYMBOL_NAME:  USBNEOD+6c5
 

FOLLOWUP_NAME:  MachineOwner
 

MODULE_NAME: USBNEOD
 

IMAGE_NAME:  USBNEOD.SYS
 

DEBUG_FLR_IMAGE_TIMESTAMP:  3e4b69fa
 

FAILURE_BUCKET_ID:  0x19_20_USBNEOD+6c5
 

BUCKET_ID:  0x19_20_USBNEOD+6c5
 

Followup: MachineOwner

---------
 

eax=ffdff13c ebx=8516f320 ecx=00000000 edx=00000051 esi=8516f320 edi=862a3708

eip=805373aa esp=f6b83844 ebp=f6b8385c iopl=0         nv up ei ng nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286

nt!KeBugCheckEx+0x1b:

805373aa 5d              pop     ebp

ChildEBP RetAddr  Args to Child              

f6b8385c 80550fc5 00000019 00000020 8516f320 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

f6b838ac 804f2c1f 8516f328 00000000 84db2e70 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

f6b83904 804f2db5 84db2e70 f6b83950 f6b83944 nt!IopCompleteRequest+0xf4 (FPO: [Non-Fpo])

f6b83954 806ffef2 00000000 00000000 f6b8396c nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo])

f6b83954 806ffae4 00000000 00000000 f6b8396c hal!HalpApcInterrupt+0xc6 (FPO: [0,2] TrapFrame @ f6b8396c)

f6b839dc 804e5d2c 84db2e70 84db2e30 00000000 hal!KeReleaseQueuedSpinLock+0x3c (FPO: [0,0,0])

f6b839fc 804f2dcf 84db2e70 862a3708 00000000 nt!KeInsertQueueApc+0x6d (FPO: [Non-Fpo])

f6b83a30 f77c76c5 8615fd50 002d1400 00000000 nt!IopfCompleteRequest+0x1d8 (FPO: [Non-Fpo])

WARNING: Stack unwind information not available. Following frames may be wrong.

f6b83a44 f77c74b1 8615fc98 84db2e30 84db2ee0 USBNEOD+0x6c5

f6b83a60 804e13d9 8615fc98 84db2e30 84db2f04 USBNEOD+0x4b1

f6b83a70 f7529c3a 0007c0d0 860be728 84db2e30 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

f6b83af4 f7518402 860be670 84db2e30 84db2e30 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

f6b83b88 f752847f 860be670 84db2e30 84db2f0c disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

f6b83ba4 804e13d9 860be670 84db2e30 84db2e30 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

f6b83bb4 f7751667 84db2f0c 86368cb0 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

f6b83be0 804e13d9 86155780 84db2e30 84db2f30 PartMgr!PmDeviceControl+0x8c (FPO: [Non-Fpo])

f6b83bf0 805b5cc5 84d97dc0 850d4e68 f6b83c40 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

f6b83c00 805b5a66 850d4e68 84db2e30 84db2f0c nt!RawReadWriteDeviceControl+0x60 (FPO: [Non-Fpo])

f6b83c40 804e13d9 850d4db0 84db2e30 806ff410 nt!RawDispatch+0x114 (FPO: [Non-Fpo])

f6b83c50 8056f129 84db2f0c 862a3708 84db2e30 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

start    end        module name

804d7000 806fd000   nt       ntkrnlmp.exe Thu Aug 14 05:58:09 2008 (48A401B1)

806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)

b8cc9000 b8cebc80   aec      aec.sys      Fri Oct 01 13:00:21 2004 (415D8D25)

ba112000 ba11f400   swmidi   swmidi.sys   Fri Aug 17 17:00:42 2001 (3B7D85FA)

ba40a000 ba416e80   DMusic   DMusic.sys   Wed Aug 04 02:07:37 2004 (41107D29)

ba786000 ba7b0180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)

ba874000 ba888400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)

ba8d5000 ba8d7a40   OsaFsLoc OsaFsLoc.sys Wed Feb 23 06:27:48 2005 (421C68B4)

ba979000 ba9ca500   srv      srv.sys      Thu Aug 28 06:04:15 2008 (48B6781F)

ba9d7000 ba9da800   asyncmac asyncmac.sys Wed Aug 04 02:05:02 2004 (41107C8E)

baa1b000 baa5b280   HTTP     HTTP.sys     Thu Mar 16 20:33:09 2006 (441A03C5)

baba4000 babb2d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)

babb4000 babbe000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)

bac8c000 bacb7d80   mrxdav   mrxdav.sys   Tue Dec 18 04:51:33 2007 (47679825)

bae54000 bae56d00   MaVc2K   MaVc2K.sys   Tue May 03 03:20:05 2005 (42772625)

baf1c000 baf1f280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)

bf800000 bf9c2b00   win32k   win32k.sys   Mon Sep 15 07:57:27 2008 (48CE4DA7)

bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)

bf9d5000 bff9be00   nv4_disp nv4_disp.dll Wed Sep 17 13:38:33 2008 (48D14099)

bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)

f3ac4000 f3adb480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)

f3adc000 f3aff000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)

f3aff000 f3bc7a60   avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)

f3bf0000 f3c5ea00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)

f3c5f000 f3c89a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)

f3c8a000 f3cabc80   afd      afd.sys      Thu Aug 14 05:51:42 2008 (48A4002E)

f3cac000 f3cccf00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)

f3ccd000 f3cf4c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)

f3cf5000 f3d4cf80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)

f3d4d000 f3d5f400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)

f3d90000 f3d92900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)

f3dbb000 f3ddc700   portcls  portcls.sys  Tue Mar 16 14:58:17 2004 (40574E49)

f3e3b000 f3f4d100   sthda    sthda.sys    Thu Jul 27 14:07:08 2006 (44C900CC)

f60cc000 f6124e80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)

f6125000 f6155100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)

f6156000 f6166e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)

f6167000 f617d680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)

f617e000 f61a0680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)

f61a1000 f61b4900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)

f61b5000 f61dce00   e100b325 e100b325.sys Thu Jan 12 18:27:46 2006 (43C6E5F2)

f61dd000 f61f0e00   Rtnicxp  Rtnicxp.sys  Sun Feb 26 16:46:21 2006 (440221AD)

f61f1000 f6213e80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)

f6214000 f623a000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)

f623a000 f624d780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)

f624e000 f6827360   nv4_mini nv4_mini.sys Wed Sep 17 13:44:45 2008 (48D1420D)

f6839000 f6845880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)

f6849000 f6857080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)

f6859000 f6865180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)

f6869000 f6873380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)

f6879000 f6888d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)

f6889000 f6895e00   i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)

f6899000 f68a1d00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)

f68b9000 f68c1e40   SMBios   SMBios.sys   Thu Sep 11 18:20:22 2003 (3F60F526)

f6b60000 f6b62580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)

f6b6c000 f6b6e700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)

f6b70000 f6b72880   pfc      pfc.sys      Fri Sep 19 19:47:22 2003 (3F6B958A)

f6b74000 f6b77c80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)

f6b84000 f6b87b00   USBSCAN  USBSCAN.SYS  Wed Aug 04 01:58:44 2004 (41107B14)

f71e0000 f71e3000   PDEXLOCK PDEXLOCK.sys Sun Nov 17 21:19:03 2002 (3DD84E17)

f7228000 f7242580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)

f7243000 f726fa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)

f7270000 f72fc400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

f72fd000 f7313780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)

f7314000 f73d7400   dmboot   dmboot.sys   Wed Aug 04 02:07:13 2004 (41107D11)

f73d8000 f73e9f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)

f73ea000 f7409780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)

f740a000 f7421480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)

f7422000 f7447700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)

f7448000 f7466880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)

f7467000 f7477a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)

f7478000 f74a5d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)

f74c7000 f74cfc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)

f74d7000 f74e5e80   ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)

f74e7000 f74f4000   1394BUS  1394BUS.SYS  Wed Aug 04 02:10:03 2004 (41107DBB)

f74f7000 f7501500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)

f7507000 f7513c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)

f7517000 f751fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)

f7527000 f7533200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)

f7537000 f753fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)

f7547000 f7551880   sbp2port sbp2port.sys Wed Aug 04 01:59:54 2004 (41107B5A)

f7557000 f7566180   nic1394  nic1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7567000 f7571200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)

f7577000 f7582d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)

f7587000 f758f900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)

f7597000 f75a0f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)

f75a7000 f75b0480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)

f75e7000 f75f5b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)

f75f7000 f7601300   sfng32   sfng32.sys   Fri Dec 02 16:22:25 2005 (4390BB11)

f7607000 f7615100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)

f7627000 f762f700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)

f7637000 f763f700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)

f7647000 f7655d80   arp1394  arp1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7657000 f765f880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)

f76c7000 f76d6900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)

f7747000 f774d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)

f774f000 f7753900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)

f778f000 f7794000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)

f779f000 f77a5180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)

f77a7000 f77ac200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)

f77af000 f77b3a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)

f77b7000 f77be880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)

f77bf000 f77c6000   osaio    osaio.sys    Fri Mar 04 01:49:08 2005 (422804E4)

f77c7000 f77cb3e0   USBNEOD  USBNEOD.SYS  Thu Feb 13 04:48:42 2003 (3E4B69FA)

f77cf000 f77d5500   usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)

f77e7000 f77edc80   avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)

f780f000 f7813500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)

f7867000 f786c000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f786f000 f7875800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f7877000 f787db00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)

f787f000 f7884a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f7887000 f788d000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f788f000 f7894200   iviaspi  iviaspi.sys  Thu Sep 11 02:36:53 2003 (3F601805)

f7897000 f789c300   intelsmb intelsmb.sys Fri Dec 17 13:27:24 2004 (41C3250C)

f789f000 f78a6580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)

f78a7000 f78ab880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)

f78af000 f78b3580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)

f78b7000 f78bb080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)

f78bf000 f78c5780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

f78d7000 f78da000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)

f78db000 f78dd480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)

f78df000 f78e2700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)

f7983000 f7986c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)

f79c3000 f79c5280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)

f79c7000 f79c8b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)

f79c9000 f79ca100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

f79cb000 f79cc700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)

f7a0b000 f7a0c800   NTIDrvr  NTIDrvr.sys  Tue Dec 21 15:33:14 2004 (41C8888A)

f7a0d000 f7a0e700   RootMdm  RootMdm.sys  Fri Aug 17 16:57:36 2001 (3B7D8540)

f7a0f000 f7a10100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)

f7a17000 f7a18d00   SIODRV   SIODRV.SYS   Mon Nov 03 19:39:42 2003 (3FA6F54E)

f7a25000 f7a26280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)

f7a2b000 f7a2cf00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)

f7a2d000 f7a2e080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)

f7a2f000 f7a30080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)

f7a31000 f7a32080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)

f7a45000 f7a46080   avg7rsw  avg7rsw.sys  Tue Jul 26 08:10:51 2005 (42E6284B)

f7a49000 f7a4a100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)

f7a53000 f7a54800   RaInfo   RaInfo.sys   Fri Jan 04 13:57:12 2008 (477E8188)

f7a8d000 f7a8e900   splitter splitter.sys Wed Jun 14 04:47:46 2006 (448FCD32)

f7a8f000 f7a8fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)

f7ade000 f7adeb80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

f7adf000 f7ae0000   avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)

f7bb4000 f7bb4d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)

f7bd9000 f7bd9c80   lmimirr  lmimirr.sys  Tue Apr 10 18:32:11 2007 (461C106B)

f7bda000 f7bdac00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
 

Unloaded modules:

b90a0000 b90ad000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

baacc000 baada000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b8cc9000 b8cec000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79cf000 f79d1000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba4b2000 ba4bf000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba776000 ba784000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b8cc9000 b8cec000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a3f000 f7a41000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7b4e000 f7b4f000   drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba929000 ba936000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba7b1000 ba7d4000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba939000 ba947000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a69000 f7a6b000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79bf000 f79c3000   kbdhid.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7797000 f779c000   Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79bb000 f79be000   Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

Closing open log file c:\debuglog23.txt
 
 

4th
 

Opened log file 'c:\debuglog23b.txt'

1: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols

1: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q 

Loading Kernel Symbols

...........................................................................................................................................

Loading User Symbols

Loading unloaded module list

................

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************
 

BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: 85144b88, The pool entry we were looking for within the page.

Arg3: 85144ba0, The next pool entry.

Arg4: 1a030001, (reserved)
 

Debugging Details:

------------------
 

Unable to load image USBNEOD.SYS, Win32 error 0n2

*** WARNING: Unable to verify timestamp for USBNEOD.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBNEOD.SYS
 

BUGCHECK_STR:  0x19_20
 

POOL_ADDRESS:  85144b88 
 

CUSTOMER_CRASH_COUNT:  2
 

DEFAULT_BUCKET_ID:  DRIVER_FAULT
 

PROCESS_NAME:  svchost.exe
 

IRP_ADDRESS:  853ed7a0
 

LAST_CONTROL_TRANSFER:  from 80550fc5 to 805373aa
 

STACK_TEXT:  

ba2ed85c 80550fc5 00000019 00000020 85144b88 nt!KeBugCheckEx+0x1b

ba2ed8ac 804f2c1f 85144b90 00000000 853ed7e0 nt!ExFreePoolWithTag+0x2c1

ba2ed904 804f2db5 853ed7e0 ba2ed950 ba2ed944 nt!IopCompleteRequest+0xf4

ba2ed954 806ffef2 00000000 00000000 ba2ed96c nt!KiDeliverApc+0xb3

ba2ed954 806ffae4 00000000 00000000 ba2ed96c hal!HalpApcInterrupt+0xc6

ba2ed9dc 804e5d2c 853ed7e0 853ed7a0 00000000 hal!KeReleaseQueuedSpinLock+0x3c

ba2ed9fc 804f2dcf 853ed7e0 860af9b8 00000000 nt!KeInsertQueueApc+0x6d

ba2eda30 f77cf6c5 860c25a0 002d1400 00000000 nt!IopfCompleteRequest+0x1d8

WARNING: Stack unwind information not available. Following frames may be wrong.

ba2eda44 f77cf4b1 860c24e8 853ed7a0 853ed850 USBNEOD+0x6c5

ba2eda60 804e13d9 860c24e8 853ed7a0 853ed874 USBNEOD+0x4b1

ba2eda70 f7529c3a 0007c0d0 8545ab70 853ed7a0 nt!IopfCallDriver+0x31

ba2edaf4 f7518402 8545aab8 853ed7a0 853ed7a0 CLASSPNP!ClassDeviceControl+0x87e

ba2edb88 f752847f 8545aab8 853ed7a0 853ed87c disk!DiskDeviceControl+0xdcc

ba2edba4 804e13d9 8545aab8 853ed7a0 853ed7a0 CLASSPNP!ClassDeviceControlDispatch+0x48

ba2edbb4 f7751667 853ed87c 86343a38 00000000 nt!IopfCallDriver+0x31

ba2edbe0 804e13d9 8532be08 853ed7a0 853ed8a0 PartMgr!PmDeviceControl+0x8c

ba2edbf0 805b5cc5 85260a58 84f8f770 ba2edc40 nt!IopfCallDriver+0x31

ba2edc00 805b5a66 84f8f770 853ed7a0 853ed87c nt!RawReadWriteDeviceControl+0x60

ba2edc40 804e13d9 84f8f6b8 853ed7a0 806ff410 nt!RawDispatch+0x114

ba2edc50 8056f129 853ed87c 860af9b8 853ed7a0 nt!IopfCallDriver+0x31

ba2edc64 80580fb9 84f8f6b8 853ed7a0 860af9b8 nt!IopSynchronousServiceTail+0x60

ba2edd00 80586ef0 00001d14 00000000 00000000 nt!IopXxxControlFile+0x5ef

ba2edd34 804dd99f 00001d14 00000000 00000000 nt!NtDeviceIoControlFile+0x2a

ba2edd34 7c90eb94 00001d14 00000000 00000000 nt!KiFastCallEntry+0xfc

0289fa9c 00000000 00000000 00000000 00000000 0x7c90eb94
 
 

STACK_COMMAND:  kb
 

FOLLOWUP_IP: 

USBNEOD+6c5

f77cf6c5 ??              ???
 

SYMBOL_STACK_INDEX:  8
 

SYMBOL_NAME:  USBNEOD+6c5
 

FOLLOWUP_NAME:  MachineOwner
 

MODULE_NAME: USBNEOD
 

IMAGE_NAME:  USBNEOD.SYS
 

DEBUG_FLR_IMAGE_TIMESTAMP:  3e4b69fa
 

FAILURE_BUCKET_ID:  0x19_20_USBNEOD+6c5
 

BUCKET_ID:  0x19_20_USBNEOD+6c5
 

Followup: MachineOwner

---------
 

eax=f775713c ebx=85144b88 ecx=00000000 edx=00000051 esi=85144b88 edi=860af9b8

eip=805373aa esp=ba2ed844 ebp=ba2ed85c iopl=0         nv up ei ng nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286

nt!KeBugCheckEx+0x1b:

805373aa 5d              pop     ebp

ChildEBP RetAddr  Args to Child              

ba2ed85c 80550fc5 00000019 00000020 85144b88 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

ba2ed8ac 804f2c1f 85144b90 00000000 853ed7e0 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

ba2ed904 804f2db5 853ed7e0 ba2ed950 ba2ed944 nt!IopCompleteRequest+0xf4 (FPO: [Non-Fpo])

ba2ed954 806ffef2 00000000 00000000 ba2ed96c nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo])

ba2ed954 806ffae4 00000000 00000000 ba2ed96c hal!HalpApcInterrupt+0xc6 (FPO: [0,2] TrapFrame @ ba2ed96c)

ba2ed9dc 804e5d2c 853ed7e0 853ed7a0 00000000 hal!KeReleaseQueuedSpinLock+0x3c (FPO: [0,0,0])

ba2ed9fc 804f2dcf 853ed7e0 860af9b8 00000000 nt!KeInsertQueueApc+0x6d (FPO: [Non-Fpo])

ba2eda30 f77cf6c5 860c25a0 002d1400 00000000 nt!IopfCompleteRequest+0x1d8 (FPO: [Non-Fpo])

WARNING: Stack unwind information not available. Following frames may be wrong.

ba2eda44 f77cf4b1 860c24e8 853ed7a0 853ed850 USBNEOD+0x6c5

ba2eda60 804e13d9 860c24e8 853ed7a0 853ed874 USBNEOD+0x4b1

ba2eda70 f7529c3a 0007c0d0 8545ab70 853ed7a0 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

ba2edaf4 f7518402 8545aab8 853ed7a0 853ed7a0 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

ba2edb88 f752847f 8545aab8 853ed7a0 853ed87c disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

ba2edba4 804e13d9 8545aab8 853ed7a0 853ed7a0 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

ba2edbb4 f7751667 853ed87c 86343a38 00000000 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

ba2edbe0 804e13d9 8532be08 853ed7a0 853ed8a0 PartMgr!PmDeviceControl+0x8c (FPO: [Non-Fpo])

ba2edbf0 805b5cc5 85260a58 84f8f770 ba2edc40 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

ba2edc00 805b5a66 84f8f770 853ed7a0 853ed87c nt!RawReadWriteDeviceControl+0x60 (FPO: [Non-Fpo])

ba2edc40 804e13d9 84f8f6b8 853ed7a0 806ff410 nt!RawDispatch+0x114 (FPO: [Non-Fpo])

ba2edc50 8056f129 853ed87c 860af9b8 853ed7a0 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

start    end        module name

804d7000 806fd000   nt       ntkrnlmp.exe Thu Aug 14 05:58:09 2008 (48A401B1)

806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)

ba452000 ba461900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)

ba70c000 ba75d500   srv      srv.sys      Thu Aug 28 06:04:15 2008 (48B6781F)

ba76e000 ba770a40   OsaFsLoc OsaFsLoc.sys Wed Feb 23 06:27:48 2005 (421C68B4)

ba7ae000 ba7ee280   HTTP     HTTP.sys     Thu Mar 16 20:33:09 2006 (441A03C5)

ba8ef000 ba8f9000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)

baa1f000 baa4ad80   mrxdav   mrxdav.sys   Tue Dec 18 04:51:33 2007 (47679825)

bac2d000 bac57180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)

bac7b000 bac8f400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)

badc8000 badd6d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)

bae60000 bae62d00   MaVc2K   MaVc2K.sys   Tue May 03 03:20:05 2005 (42772625)

baef0000 baef3280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)

bf800000 bf9c2b00   win32k   win32k.sys   Mon Sep 15 07:57:27 2008 (48CE4DA7)

bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)

bf9d5000 bff9be00   nv4_disp nv4_disp.dll Wed Sep 17 13:38:33 2008 (48D14099)

bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)

f3abc000 f3ad3480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)

f3ad4000 f3af7000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)

f3af7000 f3bbfa60   avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)

f3bc0000 f3c2ea00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)

f3c3b000 f3c3d900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)

f3c57000 f3c81a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)

f3c82000 f3ca3c80   afd      afd.sys      Thu Aug 14 05:51:42 2008 (48A4002E)

f3ca4000 f3cc4f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)

f3cc5000 f3cecc00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)

f3ced000 f3d44f80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)

f3d45000 f3d57400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)

f3e11000 f3e32700   portcls  portcls.sys  Tue Mar 16 14:58:17 2004 (40574E49)

f3e33000 f3f45100   sthda    sthda.sys    Thu Jul 27 14:07:08 2006 (44C900CC)

f60c4000 f611ce80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)

f611d000 f614d100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)

f614e000 f615ee00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)

f615f000 f6175680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)

f6176000 f6198680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)

f6199000 f61ac900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)

f61ad000 f61d4e00   e100b325 e100b325.sys Thu Jan 12 18:27:46 2006 (43C6E5F2)

f61d5000 f61e8e00   Rtnicxp  Rtnicxp.sys  Sun Feb 26 16:46:21 2006 (440221AD)

f61e9000 f620be80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)

f620c000 f6232000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)

f6232000 f6245780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)

f6246000 f681f360   nv4_mini nv4_mini.sys Wed Sep 17 13:44:45 2008 (48D1420D)

f6831000 f683cd00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)

f6841000 f684b200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)

f6851000 f685d880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)

f6861000 f686f080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)

f6871000 f687d180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)

f6881000 f688b380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)

f6891000 f68a0d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)

f68a1000 f68ade00   i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)

f68b1000 f68b9d00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)

f6b68000 f6b6a580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)

f6b74000 f6b76700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)

f6b78000 f6b7a880   pfc      pfc.sys      Fri Sep 19 19:47:22 2003 (3F6B958A)

f6b7c000 f6b7fc80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)

f6d07000 f6d0fe40   SMBios   SMBios.sys   Thu Sep 11 18:20:22 2003 (3F60F526)

f7228000 f7242580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)

f7243000 f726fa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)

f7270000 f72fc400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

f72fd000 f7313780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)

f7314000 f73d7400   dmboot   dmboot.sys   Wed Aug 04 02:07:13 2004 (41107D11)

f73d8000 f73e9f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)

f73ea000 f7409780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)

f740a000 f7421480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)

f7422000 f7447700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)

f7448000 f7466880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)

f7467000 f7477a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)

f7478000 f74a5d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)

f74c7000 f74cfc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)

f74d7000 f74e5e80   ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)

f74e7000 f74f4000   1394BUS  1394BUS.SYS  Wed Aug 04 02:10:03 2004 (41107DBB)

f74f7000 f7501500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)

f7507000 f7513c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)

f7517000 f751fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)

f7527000 f7533200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)

f7537000 f753fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)

f7547000 f7551880   sbp2port sbp2port.sys Wed Aug 04 01:59:54 2004 (41107B5A)

f7557000 f7566180   nic1394  nic1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7577000 f757f900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)

f7587000 f7590f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)

f7597000 f75a0480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)

f75d7000 f75e5b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)

f75e7000 f75f1300   sfng32   sfng32.sys   Fri Dec 02 16:22:25 2005 (4390BB11)

f75f7000 f7605100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)

f7617000 f761f700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)

f7627000 f762f700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)

f7637000 f7645d80   arp1394  arp1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7647000 f764f880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)

f7747000 f774d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)

f774f000 f7753900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)

f7797000 f779c000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)

f77a7000 f77ad180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)

f77af000 f77b4200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)

f77b7000 f77bba80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)

f77bf000 f77c6880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)

f77cf000 f77d33e0   USBNEOD  USBNEOD.SYS  Thu Feb 13 04:48:42 2003 (3E4B69FA)

f77d7000 f77ddc80   avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)

f77df000 f77e5500   usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)

f7857000 f785e000   osaio    osaio.sys    Fri Mar 04 01:49:08 2005 (422804E4)

f786f000 f7873500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)

f7877000 f787c000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f787f000 f7885800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f7887000 f788db00   fdc      fdc.sys      Wed Aug 04 01:59:25 2004 (41107B3D)

f788f000 f7894a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f7897000 f789d000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f789f000 f78a4200   iviaspi  iviaspi.sys  Thu Sep 11 02:36:53 2003 (3F601805)

f78a7000 f78ac300   intelsmb intelsmb.sys Fri Dec 17 13:27:24 2004 (41C3250C)

f78af000 f78b6580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)

f78b7000 f78bb880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)

f78bf000 f78c3580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)

f78c7000 f78cb080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)

f78cf000 f78d5780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

f78d7000 f78da000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)

f78db000 f78dd480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)

f78df000 f78e2700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)

f7967000 f796a000   PDEXLOCK PDEXLOCK.sys Sun Nov 17 21:19:03 2002 (3DD84E17)

f796b000 f796eb00   USBSCAN  USBSCAN.SYS  Wed Aug 04 01:58:44 2004 (41107B14)

f797f000 f7982c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)

f79c3000 f79c5280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)

f79c7000 f79c8b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)

f79c9000 f79ca100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

f79cb000 f79cc700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)

f79d3000 f79d4800   RaInfo   RaInfo.sys   Fri Jan 04 13:57:12 2008 (477E8188)

f79fd000 f79fe100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)

f7a1f000 f7a20800   NTIDrvr  NTIDrvr.sys  Tue Dec 21 15:33:14 2004 (41C8888A)

f7a21000 f7a22700   RootMdm  RootMdm.sys  Fri Aug 17 16:57:36 2001 (3B7D8540)

f7a23000 f7a24100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)

f7a35000 f7a36280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)

f7a37000 f7a38f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)

f7a39000 f7a3a080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)

f7a3d000 f7a3e080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)

f7a3f000 f7a40080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)

f7a41000 f7a42d00   SIODRV   SIODRV.SYS   Mon Nov 03 19:39:42 2003 (3FA6F54E)

f7a45000 f7a46080   avg7rsw  avg7rsw.sys  Tue Jul 26 08:10:51 2005 (42E6284B)

f7a8f000 f7a8fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)

f7b01000 f7b01c80   lmimirr  lmimirr.sys  Tue Apr 10 18:32:11 2007 (461C106B)

f7b02000 f7b02c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)

f7b24000 f7b24d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)

f7b50000 f7b50b80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

f7b51000 f7b52000   avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)
 

Unloaded modules:

b8efc000 b8f09000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b8f0c000 b8f1a000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b8e01000 b8e24000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a8d000 f7a8f000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba192000 ba19f000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b9410000 b941e000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a71000 f7a73000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b9145000 b9168000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7bc4000 f7bc5000   drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

baf58000 baf65000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

bac58000 bac7b000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

bada8000 badb6000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a57000 f7a59000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79bf000 f79c3000   kbdhid.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f779f000 f77a4000   Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79bb000 f79be000   Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

Closing open log file c:\debuglog23b.txt

Open in new window

debuglog.txt
debuglog1.txt
debuglog23.txt
debuglog23b.txt
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22798886
Thanks for the dumps, i have only a few minutes & have to logoff, but after quickly viewing your 1st Minidump, you appear to have a problem with this entry>
> FAILURE_BUCKET_ID: 0x19_20_USBNEOD+6c5 <

See if this following information makes sense, it could be your problem>
usbneod.sys information:
http://www.runscanner.net/filelibrary/USBNEOD.SYS.html

Will return later this evening to analyse your other dumps and see if we can see any consistency ...

0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22798903
If it's the problem then your Neodio USB Mass Storage Driver could be the issue.
0
 

Author Comment

by:ctohelpsu
ID: 22799637
OK if thats it how do I fix it?  Is it a matter of replaceing the file or run the scanner that the page refers me too?..Or is it something else...thanks again...
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22800824
All i can confirm at this time is that all five of your Minidumps have been studied and they are virtually identical ... the problem appears to be connected with the usbneod.sys file as stated above.
Still investigating ..
0
 

Author Comment

by:ctohelpsu
ID: 22801240
thanks...I updated the chipset drivers from driveragent...not sure if this will help but all the usb prts needed updating...
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22802004
Ok, good, that may well be the problem.  

> sometimes the user bumps an open cd rom tray and it crashes <
Although Minidump analysis indicated usbneod.sys file, it's worth bearing this 'vibratory' type crash in mind.  If you haven't done so you may wish to include a check for poorly seated RAM(s), mobo connector contacts, etc.  
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 

Author Comment

by:ctohelpsu
ID: 22844403
An update...
After updating the chipset drivers in this machine it has not crashed...I am holding my breath as it has been 3 days...if this continues to prove to be the solution I will let you know.  Thanks for pointing me in the direction the the USB driver...driveragent reported that these were in fact out of date...since the update...no crashes..I will keep my fingers crossed...thanks again I will post in a few days...
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22844800
That's great ..  thank you for the report.
0
 

Author Comment

by:ctohelpsu
ID: 22897850
The machine crashed one other time the user also staes that the machine has frozen up on him...He also staes that the monitor goes black but the machine did not "crash" rather that the screen just went black and he had to restartit...Snippet attached...
Opened log file 'c:\debuglog110608.txt'

1: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols

1: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q 

Loading Kernel Symbols

............................................................................................................................................

Loading User Symbols

Loading unloaded module list

........

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************
 

BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: 853b9c08, The pool entry we were looking for within the page.

Arg3: 853b9c20, The next pool entry.

Arg4: 1a030001, (reserved)
 

Debugging Details:

------------------
 

Unable to load image USBNEOD.SYS, Win32 error 0n2

*** WARNING: Unable to verify timestamp for USBNEOD.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBNEOD.SYS
 

BUGCHECK_STR:  0x19_20
 

POOL_ADDRESS:  853b9c08 
 

CUSTOMER_CRASH_COUNT:  1
 

DEFAULT_BUCKET_ID:  DRIVER_FAULT
 

PROCESS_NAME:  wmplayer.exe
 

IRP_ADDRESS:  85007cd8
 

LAST_CONTROL_TRANSFER:  from 80550fc5 to 805373aa
 

STACK_TEXT:  

b8d56778 80550fc5 00000019 00000020 853b9c08 nt!KeBugCheckEx+0x1b

b8d567c8 804f2c1f 853b9c10 00000000 85007d18 nt!ExFreePoolWithTag+0x2c1

b8d56820 804f2db5 85007d18 b8d5686c b8d56860 nt!IopCompleteRequest+0xf4

b8d56870 806ffef2 00000000 00000000 b8d56888 nt!KiDeliverApc+0xb3

b8d56870 806ffae4 00000000 00000000 b8d56888 hal!HalpApcInterrupt+0xc6

b8d568f8 804e5d2c 85007d18 85007cd8 00000000 hal!KeReleaseQueuedSpinLock+0x3c

b8d56918 804f2dcf 85007d18 8539a500 00000000 nt!KeInsertQueueApc+0x6d

b8d5694c f77d76c5 860ce3a8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8

WARNING: Stack unwind information not available. Following frames may be wrong.

b8d56960 f77d74b1 860ce2f0 85007cd8 85007d88 USBNEOD+0x6c5

b8d5697c 804e13d9 860ce2f0 85007cd8 85007dac USBNEOD+0x4b1

b8d5698c f7529c3a 0007c0d0 853ea528 85007cd8 nt!IopfCallDriver+0x31

b8d56a10 f7518402 853ea470 85007cd8 85007cd8 CLASSPNP!ClassDeviceControl+0x87e

b8d56aa4 f752847f 853ea470 85007cd8 85007db4 disk!DiskDeviceControl+0xdcc

b8d56ac0 804e13d9 853ea470 85007cd8 85007cd8 CLASSPNP!ClassDeviceControlDispatch+0x48

b8d56ad0 f7751667 85007dac 8635bcb0 85007cd8 nt!IopfCallDriver+0x31

b8d56afc 804e13d9 86061a50 85007cd8 85007dd0 PartMgr!PmDeviceControl+0x8c

b8d56b0c f7529c3a 0007c0d0 853880e8 85007cd8 nt!IopfCallDriver+0x31

b8d56b90 f7518402 85388030 85007cd8 85007cd8 CLASSPNP!ClassDeviceControl+0x87e

b8d56c24 f752847f 85388030 85007cd8 85217db0 disk!DiskDeviceControl+0xdcc

b8d56c40 804e13d9 85388030 85007cd8 806ff410 CLASSPNP!ClassDeviceControlDispatch+0x48

b8d56c50 8056f129 85007db4 8539a500 85007cd8 nt!IopfCallDriver+0x31

b8d56c64 80580fb9 85388030 85007cd8 8539a500 nt!IopSynchronousServiceTail+0x60

b8d56d00 80586ef0 00000a2c 00000000 00000000 nt!IopXxxControlFile+0x5ef

b8d56d34 804dd99f 00000a2c 00000000 00000000 nt!NtDeviceIoControlFile+0x2a

b8d56d34 7c90eb94 00000a2c 00000000 00000000 nt!KiFastCallEntry+0xfc

0556f8dc 00000000 00000000 00000000 00000000 0x7c90eb94
 
 

STACK_COMMAND:  kb
 

FOLLOWUP_IP: 

USBNEOD+6c5

f77d76c5 ??              ???
 

SYMBOL_STACK_INDEX:  8
 

SYMBOL_NAME:  USBNEOD+6c5
 

FOLLOWUP_NAME:  MachineOwner
 

MODULE_NAME: USBNEOD
 

IMAGE_NAME:  USBNEOD.SYS
 

DEBUG_FLR_IMAGE_TIMESTAMP:  3e4b69fa
 

FAILURE_BUCKET_ID:  0x19_20_USBNEOD+6c5
 

BUCKET_ID:  0x19_20_USBNEOD+6c5
 

Followup: MachineOwner

---------
 

eax=f775713c ebx=853b9c08 ecx=00000000 edx=00000051 esi=853b9c08 edi=8539a500

eip=805373aa esp=b8d56760 ebp=b8d56778 iopl=0         nv up ei ng nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286

nt!KeBugCheckEx+0x1b:

805373aa 5d              pop     ebp

ChildEBP RetAddr  Args to Child              

b8d56778 80550fc5 00000019 00000020 853b9c08 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

b8d567c8 804f2c1f 853b9c10 00000000 85007d18 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

b8d56820 804f2db5 85007d18 b8d5686c b8d56860 nt!IopCompleteRequest+0xf4 (FPO: [Non-Fpo])

b8d56870 806ffef2 00000000 00000000 b8d56888 nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo])

b8d56870 806ffae4 00000000 00000000 b8d56888 hal!HalpApcInterrupt+0xc6 (FPO: [0,2] TrapFrame @ b8d56888)

b8d568f8 804e5d2c 85007d18 85007cd8 00000000 hal!KeReleaseQueuedSpinLock+0x3c (FPO: [0,0,0])

b8d56918 804f2dcf 85007d18 8539a500 00000000 nt!KeInsertQueueApc+0x6d (FPO: [Non-Fpo])

b8d5694c f77d76c5 860ce3a8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8 (FPO: [Non-Fpo])

WARNING: Stack unwind information not available. Following frames may be wrong.

b8d56960 f77d74b1 860ce2f0 85007cd8 85007d88 USBNEOD+0x6c5

b8d5697c 804e13d9 860ce2f0 85007cd8 85007dac USBNEOD+0x4b1

b8d5698c f7529c3a 0007c0d0 853ea528 85007cd8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

b8d56a10 f7518402 853ea470 85007cd8 85007cd8 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

b8d56aa4 f752847f 853ea470 85007cd8 85007db4 disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

b8d56ac0 804e13d9 853ea470 85007cd8 85007cd8 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

b8d56ad0 f7751667 85007dac 8635bcb0 85007cd8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

b8d56afc 804e13d9 86061a50 85007cd8 85007dd0 PartMgr!PmDeviceControl+0x8c (FPO: [Non-Fpo])

b8d56b0c f7529c3a 0007c0d0 853880e8 85007cd8 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

b8d56b90 f7518402 85388030 85007cd8 85007cd8 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

b8d56c24 f752847f 85388030 85007cd8 85217db0 disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

b8d56c40 804e13d9 85388030 85007cd8 806ff410 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

start    end        module name

804d7000 806fd000   nt       ntkrnlmp.exe Thu Aug 14 05:58:09 2008 (48A401B1)

806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)

b8ecf000 b8ed2800   asyncmac asyncmac.sys Wed Aug 04 02:05:02 2004 (41107C8E)

ba7ae000 ba7d8180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)

ba89c000 ba8b0400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)

ba8e9000 ba8f8900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)

ba979000 ba9ca500   srv      srv.sys      Thu Aug 28 06:04:15 2008 (48B6781F)

ba9f7000 ba9f9a40   OsaFsLoc OsaFsLoc.sys Wed Feb 23 06:27:48 2005 (421C68B4)

baa43000 baa83280   HTTP     HTTP.sys     Thu Mar 16 20:33:09 2006 (441A03C5)

babd4000 babde000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)

bac04000 bac12d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)

bacb4000 bacdfd80   mrxdav   mrxdav.sys   Tue Dec 18 04:51:33 2007 (47679825)

bae58000 bae5ad00   MaVc2K   MaVc2K.sys   Tue May 03 03:20:05 2005 (42772625)

baf18000 baf1b280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)

bf800000 bf9c2b00   win32k   win32k.sys   Mon Sep 15 07:57:27 2008 (48CE4DA7)

bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)

bf9d5000 bff9be00   nv4_disp nv4_disp.dll Wed Sep 17 13:38:33 2008 (48D14099)

bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)

f3d09000 f3d20480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)

f3d21000 f3d44000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)

f3d44000 f3e0ca60   avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)

f3e0d000 f3e7ba00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)

f3ea0000 f3ea2900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)

f3f44000 f3f6ea00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)

f3f6f000 f3f90c80   afd      afd.sys      Thu Aug 14 05:51:42 2008 (48A4002E)

f3f91000 f3fb8c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)

f3fb9000 f3fd9f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)

f3fda000 f4031f80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)

f4032000 f4044400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)

f40fe000 f411f700   portcls  portcls.sys  Tue Mar 16 14:58:17 2004 (40574E49)

f4120000 f4232100   sthda    sthda.sys    Thu Jul 27 14:07:08 2006 (44C900CC)

f6357000 f635ab00   USBSCAN  USBSCAN.SYS  Wed Aug 04 01:58:44 2004 (41107B14)

f63b1000 f6409e80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)

f640a000 f643a100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)

f643b000 f644be00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)

f644c000 f6462680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)

f6463000 f6485680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)

f6486000 f6499900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)

f649a000 f64c1e00   e100b325 e100b325.sys Thu Jan 12 18:27:46 2006 (43C6E5F2)

f64c2000 f64d5e00   Rtnicxp  Rtnicxp.sys  Sun Feb 26 16:46:21 2006 (440221AD)

f64d6000 f64f8e80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)

f64f9000 f651f000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)

f651f000 f6532780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)

f6533000 f6b0c360   nv4_mini nv4_mini.sys Wed Sep 17 13:44:45 2008 (48D1420D)

f6bae000 f6bb6880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)

f6bc2000 f6bc5c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)

f6bde000 f6be0580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)

f71e4000 f71e6700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)

f71e8000 f71ea880   pfc      pfc.sys      Fri Sep 19 19:47:22 2003 (3F6B958A)

f71ec000 f71efc80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)

f71f0000 f71f3000   PDEXLOCK PDEXLOCK.sys Sun Nov 17 21:19:03 2002 (3DD84E17)

f7228000 f7242580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)

f7243000 f726fa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)

f7270000 f72fc400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

f72fd000 f7313780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)

f7314000 f73d7400   dmboot   dmboot.sys   Wed Aug 04 02:07:13 2004 (41107D11)

f73d8000 f73e9f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)

f73ea000 f7409780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)

f740a000 f7421480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)

f7422000 f7447700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)

f7448000 f7466880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)

f7467000 f7477a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)

f7478000 f74a5d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)

f74c7000 f74cfc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)

f74d7000 f74e5e80   ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)

f74e7000 f74f4000   1394BUS  1394BUS.SYS  Wed Aug 04 02:10:03 2004 (41107DBB)

f74f7000 f7501500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)

f7507000 f7513c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)

f7517000 f751fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)

f7527000 f7533200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)

f7537000 f753fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)

f7547000 f7551880   sbp2port sbp2port.sys Wed Aug 04 01:59:54 2004 (41107B5A)

f7557000 f7566180   nic1394  nic1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7567000 f7575d80   arp1394  arp1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f75d7000 f75dfe40   SMBios   SMBios.sys   Thu Sep 11 18:20:22 2003 (3F60F526)

f75f7000 f75ffd00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)

f7607000 f7613e00   i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)

f7617000 f7626d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)

f7627000 f7631380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)

f7637000 f7643180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)

f7647000 f7655080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)

f7657000 f7663880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)

f7667000 f7671200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)

f7677000 f7682d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)

f7687000 f768f900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)

f7697000 f76a0f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)

f76a7000 f76b0480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)

f76e7000 f76f5b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)

f76f7000 f7701300   sfng32   sfng32.sys   Fri Dec 02 16:22:25 2005 (4390BB11)

f7707000 f7715100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)

f7727000 f772f700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)

f7737000 f773f700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)

f7747000 f774d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)

f774f000 f7753900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)

f775f000 f7763080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)

f777f000 f7785780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

f779f000 f77a4000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)

f77af000 f77b5180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)

f77bf000 f77c4200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)

f77c7000 f77cba80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)

f77cf000 f77d6880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)

f77d7000 f77db3e0   USBNEOD  USBNEOD.SYS  Thu Feb 13 04:48:42 2003 (3E4B69FA)

f77df000 f77e6000   osaio    osaio.sys    Fri Mar 04 01:49:08 2005 (422804E4)

f77e7000 f77ed500   usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)

f7807000 f780dc80   avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)

f7827000 f782b500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)

f7887000 f788c000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f788f000 f7895800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f7897000 f7898000   fdc      fdc.sys      unavailable (00000000)

f789f000 f78a4a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f78a7000 f78ad000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f78af000 f78b4200   iviaspi  iviaspi.sys  Thu Sep 11 02:36:53 2003 (3F601805)

f78b7000 f78bc300   intelsmb intelsmb.sys Fri Dec 17 13:27:24 2004 (41C3250C)

f78bf000 f78c6580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)

f78c7000 f78cb880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)

f78cf000 f78d3580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)

f78d7000 f78da000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)

f78db000 f78dd480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)

f78df000 f78e2700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)

f79b7000 f79b9280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)

f79c7000 f79c8b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)

f79c9000 f79ca100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

f79cb000 f79cc700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)

f79e7000 f79e8d00   SIODRV   SIODRV.SYS   Mon Nov 03 19:39:42 2003 (3FA6F54E)

f7a0b000 f7a0c800   NTIDrvr  NTIDrvr.sys  Tue Dec 21 15:33:14 2004 (41C8888A)

f7a0d000 f7a0e700   RootMdm  RootMdm.sys  Fri Aug 17 16:57:36 2001 (3B7D8540)

f7a0f000 f7a10100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)

f7a25000 f7a26280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)

f7a29000 f7a2af00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)

f7a2b000 f7a2c080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)

f7a2d000 f7a2e080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)

f7a2f000 f7a30080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)

f7a4d000 f7a4e800   RaInfo   RaInfo.sys   Fri Jan 04 13:57:12 2008 (477E8188)

f7a4f000 f7a50080   avg7rsw  avg7rsw.sys  Tue Jul 26 08:10:51 2005 (42E6284B)

f7a59000 f7a5a100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)

f7a8f000 f7a8fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)

f7a97000 f7a97d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)

f7b9b000 f7b9bc80   lmimirr  lmimirr.sys  Tue Apr 10 18:32:11 2007 (461C106B)

f7b9c000 f7b9cc00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)

f7bc6000 f7bc6b80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

f7bc8000 f7bc9000   avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)
 

Unloaded modules:

f7bff000 f7c00000   drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba879000 ba89c000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

bab74000 bab81000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

bab84000 bab92000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a5b000 f7a5d000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79b3000 f79b7000   kbdhid.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f77a7000 f77ac000   Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79af000 f79b2000   Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

Closing open log file c:\debuglog110608.txt

Open in new window

0
 
LVL 27

Expert Comment

by:Jonvee
ID: 22898911
First part of your crash dump, names >
DRIVER_FAULT PROCESS_NAME: wmplayer.exe
This suggests that wmediaplayer.exe may be the cause.  Have you changed anything recently on your media player(if you have it)?

2nd part, names,  BAD_POOL_HEADER (19).
A Pool Header issue is one with a Windows memory allocation problem. Device driver issues are probably the most common, but this can have diverse causes including bad sectors or other disk write issues, and problems with some routers.  So quite a choice!
Then our old friend USBNEOD appears again.

So we have a number of names.  Maybe all of these problems stem from a Hard Disk failure.
 
Try running the command chkdsk /r
This will scan the disk for file structure errors and bad sectors and make any necessary repairs.
Details>  Repair Procedure:
http://www.schrockinnovations.com/chkdsk.php

Then any doubt about the results, test your HD using the appropriate Tool from here ..

"Hard Drive Diagnostics Tools and Utilities":
http://tacktech.com/display.cfm?ttid=287
0
 

Author Comment

by:ctohelpsu
ID: 23035139
As of 11/24/08 it appears we have the same errors...I am going to image the drive and use another HD to see if the physical drive is the problem...Any advice would be helpful but it appears to be the same set of errors...thanks again
Opened log file 'c:\debuglog1124.txt'

1: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols

1: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q

Loading Kernel Symbols

............................................................................................................................................

Loading User Symbols

Loading unloaded module list

................

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************
 

BAD_POOL_HEADER (19)

The pool is already corrupt at the time of the current request.

This may or may not be due to the caller.

The internal pool links must be walked to figure out a possible cause of

the problem, and then special pool applied to the suspect tags or the driver

verifier to a suspect driver.

Arguments:

Arg1: 00000020, a pool block header size is corrupt.

Arg2: 84dee730, The pool entry we were looking for within the page.

Arg3: 84dee748, The next pool entry.

Arg4: 1a030001, (reserved)
 

Debugging Details:

------------------
 

Unable to load image USBNEOD.SYS, Win32 error 0n2

*** WARNING: Unable to verify timestamp for USBNEOD.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBNEOD.SYS
 

BUGCHECK_STR:  0x19_20
 

POOL_ADDRESS:  84dee730 
 

CUSTOMER_CRASH_COUNT:  1
 

DEFAULT_BUCKET_ID:  DRIVER_FAULT
 

PROCESS_NAME:  wmplayer.exe
 

IRP_ADDRESS:  85305190
 

LAST_CONTROL_TRANSFER:  from 80550fc5 to 805373aa
 

STACK_TEXT:  

b7b8e778 80550fc5 00000019 00000020 84dee730 nt!KeBugCheckEx+0x1b

b7b8e7c8 804f2c1f 84dee738 00000000 853051d0 nt!ExFreePoolWithTag+0x2c1

b7b8e820 804f2db5 853051d0 b7b8e86c b7b8e860 nt!IopCompleteRequest+0xf4

b7b8e870 806ffef2 00000000 00000000 b7b8e888 nt!KiDeliverApc+0xb3

b7b8e870 806ffae4 00000000 00000000 b7b8e888 hal!HalpApcInterrupt+0xc6

b7b8e8f8 804e5d2c 853051d0 85305190 00000000 hal!KeReleaseQueuedSpinLock+0x3c

b7b8e918 804f2dcf 853051d0 853972e0 00000000 nt!KeInsertQueueApc+0x6d

b7b8e94c f77bf6c5 853840e8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8

WARNING: Stack unwind information not available. Following frames may be wrong.

b7b8e960 f77bf4b1 85384030 85305190 85305240 USBNEOD+0x6c5

b7b8e97c 804e13d9 85384030 85305190 85305264 USBNEOD+0x4b1

b7b8e98c f7529c3a 0007c0d0 85f07b70 85305190 nt!IopfCallDriver+0x31

b7b8ea10 f7518402 85f07ab8 85305190 85305190 CLASSPNP!ClassDeviceControl+0x87e

b7b8eaa4 f752847f 85f07ab8 85305190 8530526c disk!DiskDeviceControl+0xdcc

b7b8eac0 804e13d9 85f07ab8 85305190 85305190 CLASSPNP!ClassDeviceControlDispatch+0x48

b7b8ead0 f7751667 85305264 86342cb0 85305190 nt!IopfCallDriver+0x31

b7b8eafc 804e13d9 853c3200 85305190 85305288 PartMgr!PmDeviceControl+0x8c

b7b8eb0c f7529c3a 0007c0d0 860e69f8 85305190 nt!IopfCallDriver+0x31

b7b8eb90 f7518402 860e6940 85305190 85305190 CLASSPNP!ClassDeviceControl+0x87e

b7b8ec24 f752847f 860e6940 85305190 84c0c398 disk!DiskDeviceControl+0xdcc

b7b8ec40 804e13d9 860e6940 85305190 806ff410 CLASSPNP!ClassDeviceControlDispatch+0x48

b7b8ec50 8056f129 8530526c 853972e0 85305190 nt!IopfCallDriver+0x31

b7b8ec64 80580fb9 860e6940 85305190 853972e0 nt!IopSynchronousServiceTail+0x60

b7b8ed00 80586ef0 00000ab0 00000000 00000000 nt!IopXxxControlFile+0x5ef

b7b8ed34 804dd99f 00000ab0 00000000 00000000 nt!NtDeviceIoControlFile+0x2a

b7b8ed34 7c90eb94 00000ab0 00000000 00000000 nt!KiFastCallEntry+0xfc

0467f8dc 00000000 00000000 00000000 00000000 0x7c90eb94
 
 

STACK_COMMAND:  kb
 

FOLLOWUP_IP: 

USBNEOD+6c5

f77bf6c5 ??              ???
 

SYMBOL_STACK_INDEX:  8
 

SYMBOL_NAME:  USBNEOD+6c5
 

FOLLOWUP_NAME:  MachineOwner
 

MODULE_NAME: USBNEOD
 

IMAGE_NAME:  USBNEOD.SYS
 

DEBUG_FLR_IMAGE_TIMESTAMP:  3e4b69fa
 

FAILURE_BUCKET_ID:  0x19_20_USBNEOD+6c5
 

BUCKET_ID:  0x19_20_USBNEOD+6c5
 

Followup: MachineOwner

---------
 

eax=f775713c ebx=84dee730 ecx=00000000 edx=00000051 esi=84dee730 edi=853972e0

eip=805373aa esp=b7b8e760 ebp=b7b8e778 iopl=0         nv up ei ng nz na pe nc

cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286

nt!KeBugCheckEx+0x1b:

805373aa 5d              pop     ebp

ChildEBP RetAddr  Args to Child              

b7b8e778 80550fc5 00000019 00000020 84dee730 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])

b7b8e7c8 804f2c1f 84dee738 00000000 853051d0 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])

b7b8e820 804f2db5 853051d0 b7b8e86c b7b8e860 nt!IopCompleteRequest+0xf4 (FPO: [Non-Fpo])

b7b8e870 806ffef2 00000000 00000000 b7b8e888 nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo])

b7b8e870 806ffae4 00000000 00000000 b7b8e888 hal!HalpApcInterrupt+0xc6 (FPO: [0,2] TrapFrame @ b7b8e888)

b7b8e8f8 804e5d2c 853051d0 85305190 00000000 hal!KeReleaseQueuedSpinLock+0x3c (FPO: [0,0,0])

b7b8e918 804f2dcf 853051d0 853972e0 00000000 nt!KeInsertQueueApc+0x6d (FPO: [Non-Fpo])

b7b8e94c f77bf6c5 853840e8 002d1400 00000000 nt!IopfCompleteRequest+0x1d8 (FPO: [Non-Fpo])

WARNING: Stack unwind information not available. Following frames may be wrong.

b7b8e960 f77bf4b1 85384030 85305190 85305240 USBNEOD+0x6c5

b7b8e97c 804e13d9 85384030 85305190 85305264 USBNEOD+0x4b1

b7b8e98c f7529c3a 0007c0d0 85f07b70 85305190 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

b7b8ea10 f7518402 85f07ab8 85305190 85305190 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

b7b8eaa4 f752847f 85f07ab8 85305190 8530526c disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

b7b8eac0 804e13d9 85f07ab8 85305190 85305190 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

b7b8ead0 f7751667 85305264 86342cb0 85305190 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

b7b8eafc 804e13d9 853c3200 85305190 85305288 PartMgr!PmDeviceControl+0x8c (FPO: [Non-Fpo])

b7b8eb0c f7529c3a 0007c0d0 860e69f8 85305190 nt!IopfCallDriver+0x31 (FPO: [0,0,0])

b7b8eb90 f7518402 860e6940 85305190 85305190 CLASSPNP!ClassDeviceControl+0x87e (FPO: [Non-Fpo])

b7b8ec24 f752847f 860e6940 85305190 84c0c398 disk!DiskDeviceControl+0xdcc (FPO: [Non-Fpo])

b7b8ec40 804e13d9 860e6940 85305190 806ff410 CLASSPNP!ClassDeviceControlDispatch+0x48 (FPO: [Non-Fpo])

start    end        module name

804d7000 806fd000   nt       ntkrnlmp.exe Thu Aug 14 05:58:09 2008 (48A401B1)

806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)

b9e0a000 b9e0d800   asyncmac asyncmac.sys Wed Aug 04 02:05:02 2004 (41107C8E)

ba876000 ba8a0180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)

ba8c4000 ba8d8400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)

ba9c9000 baa1a500   srv      srv.sys      Thu Aug 28 06:04:15 2008 (48B6781F)

baa1f000 baa21a40   OsaFsLoc OsaFsLoc.sys Wed Feb 23 06:27:48 2005 (421C68B4)

baa53000 baa61d80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)

baa93000 baaa2900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)

bab0b000 bab4b280   HTTP     HTTP.sys     Thu Mar 16 20:33:09 2006 (441A03C5)

bacb4000 bacdfd80   mrxdav   mrxdav.sys   Tue Dec 18 04:51:33 2007 (47679825)

badbc000 badbed00   MaVc2K   MaVc2K.sys   Tue May 03 03:20:05 2005 (42772625)

baf14000 baf17280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)

bf800000 bf9c2b00   win32k   win32k.sys   Mon Sep 15 07:57:27 2008 (48CE4DA7)

bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)

bf9d5000 bff9be00   nv4_disp nv4_disp.dll Wed Sep 17 13:38:33 2008 (48D14099)

bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Wed Aug 04 03:56:56 2004 (411096C8)

f3d12000 f3d29480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)

f3d2a000 f3d4d000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)

f3d4d000 f3e15a60   avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)

f3eb6000 f3f24a00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)

f3f4d000 f3f77a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)

f3f78000 f3f99c80   afd      afd.sys      Thu Aug 14 05:51:42 2008 (48A4002E)

f3f9a000 f3fbaf00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)

f3fbb000 f3fe2c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)

f3fe3000 f403af80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)

f403b000 f404d400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)

f407a000 f407c900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)

f40a9000 f40ca700   portcls  portcls.sys  Tue Mar 16 14:58:17 2004 (40574E49)

f4129000 f423b100   sthda    sthda.sys    Thu Jul 27 14:07:08 2006 (44C900CC)

f635c000 f635fb00   USBSCAN  USBSCAN.SYS  Wed Aug 04 01:58:44 2004 (41107B14)

f6360000 f6363000   PDEXLOCK PDEXLOCK.sys Sun Nov 17 21:19:03 2002 (3DD84E17)

f6364000 f63bce80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)

f63bd000 f63ed100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)

f63ee000 f63fee00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)

f63ff000 f6415680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)

f6416000 f6438680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)

f6439000 f644c900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)

f644d000 f6474e00   e100b325 e100b325.sys Thu Jan 12 18:27:46 2006 (43C6E5F2)

f6475000 f6488e00   Rtnicxp  Rtnicxp.sys  Sun Feb 26 16:46:21 2006 (440221AD)

f6489000 f64abe80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)

f64ac000 f64d2000   HDAudBus HDAudBus.sys Thu Aug 12 20:45:52 2004 (411C0F40)

f64d2000 f64e5780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)

f64e6000 f6abf360   nv4_mini nv4_mini.sys Wed Sep 17 13:44:45 2008 (48D1420D)

f6ad1000 f6ad4c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)

f6aed000 f6aef580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)

f6b49000 f6b53000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 12:26:22 2008 (487B7E2E)

f71e0000 f71e2700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)

f71e4000 f71e6880   pfc      pfc.sys      Fri Sep 19 19:47:22 2003 (3F6B958A)

f71e8000 f71ebc80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)

f7228000 f7242580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)

f7243000 f726fa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)

f7270000 f72fc400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

f72fd000 f7313780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)

f7314000 f73d7400   dmboot   dmboot.sys   Wed Aug 04 02:07:13 2004 (41107D11)

f73d8000 f73e9f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)

f73ea000 f7409780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)

f740a000 f7421480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)

f7422000 f7447700   dmio     dmio.sys     Wed Aug 04 02:07:13 2004 (41107D11)

f7448000 f7466880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)

f7467000 f7477a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)

f7478000 f74a5d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)

f74c7000 f74cfc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)

f74d7000 f74e5e80   ohci1394 ohci1394.sys Wed Aug 04 02:10:05 2004 (41107DBD)

f74e7000 f74f4000   1394BUS  1394BUS.SYS  Wed Aug 04 02:10:03 2004 (41107DBB)

f74f7000 f7501500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)

f7507000 f7513c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)

f7517000 f751fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)

f7527000 f7533200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)

f7537000 f753fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)

f7547000 f7551880   sbp2port sbp2port.sys Wed Aug 04 01:59:54 2004 (41107B5A)

f7557000 f7566180   nic1394  nic1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7567000 f756f880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)

f75c7000 f75cfe40   SMBios   SMBios.sys   Thu Sep 11 18:20:22 2003 (3F60F526)

f75e7000 f75efd00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)

f75f7000 f7603e00   i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)

f7607000 f7616d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)

f7617000 f7621380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)

f7627000 f7633180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)

f7637000 f7645080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)

f7647000 f7653880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)

f7657000 f7661200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)

f7667000 f7672d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)

f7677000 f767f900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)

f7687000 f7690f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)

f7697000 f76a0480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)

f76d7000 f76e5b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)

f76e7000 f76f1300   sfng32   sfng32.sys   Fri Dec 02 16:22:25 2005 (4390BB11)

f76f7000 f7705100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)

f7717000 f771f700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)

f7727000 f772f700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)

f7737000 f7745d80   arp1394  arp1394.sys  Wed Aug 04 01:58:28 2004 (41107B04)

f7747000 f774d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)

f774f000 f7753900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)

f775f000 f7765780   RimSerial RimSerial.sys Tue Jan 09 11:52:20 2007 (45A3C844)

f778f000 f7794000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)

f779f000 f77a5180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)

f77a7000 f77ac200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)

f77af000 f77b3a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)

f77b7000 f77be880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)

f77bf000 f77c33e0   USBNEOD  USBNEOD.SYS  Thu Feb 13 04:48:42 2003 (3E4B69FA)

f77cf000 f77d5500   usbprint usbprint.sys Wed Aug 04 02:01:23 2004 (41107BB3)

f77ef000 f77f5c80   avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)

f780f000 f7813500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)

f786f000 f7876000   osaio    osaio.sys    Fri Mar 04 01:49:08 2005 (422804E4)

f787f000 f7884000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f7887000 f788d800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)

f788f000 f7890000   fdc      fdc.sys      unavailable (00000000)

f7897000 f789ca00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f789f000 f78a5000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)

f78a7000 f78ac200   iviaspi  iviaspi.sys  Thu Sep 11 02:36:53 2003 (3F601805)

f78af000 f78b4300   intelsmb intelsmb.sys Fri Dec 17 13:27:24 2004 (41C3250C)

f78b7000 f78be580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)

f78bf000 f78c3880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)

f78c7000 f78cb580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)

f78cf000 f78d3080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)

f78d7000 f78da000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)

f78db000 f78dd480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)

f78df000 f78e2700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)

f79b7000 f79b9280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)

f79c7000 f79c8b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)

f79c9000 f79ca100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

f79cb000 f79cc700   dmload   dmload.sys   Fri Aug 17 16:58:15 2001 (3B7D8567)

f79d5000 f79d6d00   SIODRV   SIODRV.SYS   Mon Nov 03 19:39:42 2003 (3FA6F54E)

f7a09000 f7a0a800   NTIDrvr  NTIDrvr.sys  Tue Dec 21 15:33:14 2004 (41C8888A)

f7a0b000 f7a0c700   RootMdm  RootMdm.sys  Fri Aug 17 16:57:36 2001 (3B7D8540)

f7a0d000 f7a0e100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)

f7a23000 f7a24280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)

f7a25000 f7a26f00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)

f7a27000 f7a28080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)

f7a29000 f7a2a080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)

f7a2b000 f7a2c080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)

f7a47000 f7a48080   avg7rsw  avg7rsw.sys  Tue Jul 26 08:10:51 2005 (42E6284B)

f7a55000 f7a56800   RaInfo   RaInfo.sys   Fri Jan 04 13:57:12 2008 (477E8188)

f7a5f000 f7a60100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)

f7a8f000 f7a8fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)

f7b80000 f7b80c80   lmimirr  lmimirr.sys  Tue Apr 10 18:32:11 2007 (461C106B)

f7b81000 f7b81c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)

f7b9e000 f7b9eb80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)

f7b9f000 f7ba0000   avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)

f7bad000 f7badd00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
 

Unloaded modules:

b8fe8000 b8ff6000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79fb000 f79fd000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b8fc8000 b8fd5000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b8db3000 b8dd6000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba112000 ba120000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79f9000 f79fb000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b9410000 b941d000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

b90f5000 b9118000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7bbc000 f7bbd000   drmkaud.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

bac1c000 bac29000   DMusic.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

ba8a1000 ba8c4000   aec.sys 

    Timestamp: unavailable (00000000)

    Checksum:  00000000

bace0000 bacee000   swmidi.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7a79000 f7a7b000   splitter.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79b3000 f79b7000   kbdhid.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f7797000 f779c000   Cdaudio.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

f79af000 f79b2000   Sfloppy.SYS

    Timestamp: unavailable (00000000)

    Checksum:  00000000

Closing open log file c:\debuglog1124.txt

Open in new window

0
 
LVL 27

Expert Comment

by:Jonvee
ID: 23038807
Did not receive advice of your comments until ~30 mins ago, which translates into "after midnight" in these parts!  There has been a Hotmail communication problem for > 24 hours, & it's continuing ...

Yes, it does indeed appear to be the same set of errors, and due it seems to a Neodio USB Mass Storage device.  

usbneod.sys information:
http://www.runscanner.net/filelibrary/USBNEOD.SYS.html

Will research it a little more in the morning ...
0
 

Author Comment

by:ctohelpsu
ID: 23041980
The other day I had stopped by the clients office to do some workon another machine when I suggested that we take an image of the machine that keeps crashing just in case...So I took the machine back to my office took out the drives and imaged the drives...when I put the disc's back in and pushed the power button ... nothing happened...the power supply was dead...This is very starnge seeing that the machine would just turn itself off...so hopefully this may be part of the problem...I replaced the 550w with a 600 w and we will see if this changes anything...the USB (driver) problem is or looks to be a difficult one to solve...but we will see...thanks again...
0
 
LVL 27

Accepted Solution

by:
Jonvee earned 500 total points
ID: 23043654
Ok, good, and if the machine still crashes we'll take a look at any new crash dumps.

Only vaguely related, but has this machine been updated with Microsoft KB817900 ?
If 'no', i can investigate further.

Also, had you considered updating XP SP2 to SP3 ?   ... i appreciate it may not be too wise, at least until we've resolved the problem.
0
 

Author Closing Comment

by:ctohelpsu
ID: 31539007
Thanks for all your great help...thanks also for your quick responeses...Although this is an ongoing problem your advice about the Hard drive may end up being our solution...We may Lock and Load onthis drive...
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 23472114
Glad to help.  Thank you.
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now