Link to home
Start Free TrialLog in
Avatar of icorps
icorps

asked on

BSOD Error Win32k.sys

I have a user with a Dell Latitude that is recently getting BSOD 1 or twice a day.  All the dumps show the same error and I suspect a faulty driver but I am having an issue figuring out which 1 it is.  Any help is much appreciated.  See the debugging info below:


Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [c:\Mini010410-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Inaccessible path: 'c:\windows\i386'
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\i386
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090804-1435
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Jan  4 12:45:53.718 2010 (GMT-5)
System Uptime: 0 days 6:31:08.410
Loading Kernel Symbols
...............................................................
................................................................
....
Loading User Symbols
Loading unloaded module list
...........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 4090801, e34cf8c8}

Probably caused by : win32k.sys ( win32k!HeavyFreePool+bb )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 04090801, Memory contents of the pool block
Arg4: e34cf8c8, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  e34cf8c8

FREED_POOL_TAG:  Gxlt

BUGCHECK_STR:  0xc2_7_Gxlt

CUSTOMER_CRASH_COUNT:  2

DEFAULT_BUCKET_ID:  DRIVER_FAULT

PROCESS_NAME:  iexplore.exe

LAST_CONTROL_TRANSFER:  from 8054b583 to 804f9f43

STACK_TEXT:  
90b255c4 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
90b25614 bf802a25 e34cf8c8 00000000 90b25728 nt!ExFreePoolWithTag+0x2a3
90b25624 bf8048a9 e34cf8c8 bf817cea 90b25754 win32k!HeavyFreePool+0xbb
90b2562c bf817cea 90b25754 0000004b 0000035b win32k!EXLATEOBJ::vAltUnlock+0x28
90b25728 bf817653 150117b1 00000000 00000000 win32k!GreDrawStream+0x551
90b25870 8054162c 150117b1 00000060 017d9db4 win32k!NtGdiDrawStream+0x9f
90b25870 7c90e514 150117b1 00000060 017d9db4 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
017d9d30 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND:  kb

FOLLOWUP_IP:
win32k!HeavyFreePool+bb
bf802a25 5d              pop     ebp

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  win32k!HeavyFreePool+bb

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a85564b

FAILURE_BUCKET_ID:  0xc2_7_Gxlt_win32k!HeavyFreePool+bb

BUCKET_ID:  0xc2_7_Gxlt_win32k!HeavyFreePool+bb

Followup: MachineOwner
---------

1: kd> lmvm win32k
start    end        module name
bf800000 bf9c6080   win32k   # (pdb symbols)          c:\symbols\win32k.pdb\068FCD760BF740EEBE34FBCFF1A513652\win32k.pdb
    Loaded symbol image file: win32k.sys
    Mapped memory image file: c:\symbols\win32k.sys\4A85564B1c6080\win32k.sys
    Image path: win32k.sys
    Image name: win32k.sys
    Timestamp:        Fri Aug 14 08:19:23 2009 (4A85564B)
    CheckSum:         001CA775
    ImageSize:        001C6080
    File version:     5.1.2600.5863
    Product version:  5.1.2600.5863
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0405.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Opera?ní systém Microsoft® Windows®
    InternalName:     win32k.sys
    OriginalFilename: win32k.sys
    ProductVersion:   5.1.2600.5863
    FileVersion:      5.1.2600.5863 (xpsp_sp3_qfe.090814-1323)
    FileDescription:  Multi-User Win32 Driver
    LegalCopyright:   © Microsoft Corporation. Vaechna práva vyhrazena.
1: kd> kv
ChildEBP RetAddr  Args to Child              
90b255c4 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b (FPO: [5,0,0])
90b25614 bf802a25 e34cf8c8 00000000 90b25728 nt!ExFreePoolWithTag+0x2a3 (FPO: [2,10,4])
90b25624 bf8048a9 e34cf8c8 bf817cea 90b25754 win32k!HeavyFreePool+0xbb (FPO: [1,0,0])
90b2562c bf817cea 90b25754 0000004b 0000035b win32k!EXLATEOBJ::vAltUnlock+0x28 (FPO: [0,0,0])
90b25728 bf817653 150117b1 00000000 00000000 win32k!GreDrawStream+0x551 (FPO: [3,60,4])
90b25870 8054162c 150117b1 00000060 017d9db4 win32k!NtGdiDrawStream+0x9f (FPO: [Non-Fpo])
90b25870 7c90e514 150117b1 00000060 017d9db4 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ 90b25884)
WARNING: Frame IP not in any known module. Following frames may be wrong.
017d9d30 00000000 00000000 00000000 00000000 0x7c90e514
1: kd> lm t n
start    end        module name
804d7000 806e4000   nt       ntkrpamp.exe Tue Aug 04 10:20:04 2009 (4A784394)
806e4000 80704d80   hal      halmacpi.dll Wed Apr 02 06:42:53 2008 (47F3632D)
8e813000 8e83d180   kmixer   kmixer.sys   Sun Apr 13 14:45:07 2008 (480254B3)
90d7e000 90da0100   RDPWD    RDPWD.SYS    Sun Apr 13 14:38:40 2008 (48025330)
91056000 91096e00   HTTP     HTTP.sys     Tue Oct 20 12:20:15 2009 (4ADDE33F)
9195f000 919b0880   srv      srv.sys      Thu Dec 11 05:57:07 2008 (4940F203)
91ac9000 91af5180   mrxdav   mrxdav.sys   Sun Apr 13 14:32:42 2008 (480251CA)
91b94000 91ba8480   wdmaud   wdmaud.sys   Sun Apr 13 15:17:18 2008 (48025C3E)
91d0d000 91d0fe80   s24trans s24trans.sys Mon Aug 04 14:32:25 2008 (48974B39)
91d21000 91d24900   ndisuio  ndisuio.sys  Sun Apr 13 14:55:57 2008 (4802573D)
93f02000 93fdc000   dump_iaStor dump_iaStor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
93fdc000 9404b280   mrxsmb   mrxsmb.sys   Fri Oct 24 07:21:07 2008 (4901AFA3)
9404c000 94076e80   rdbss    rdbss.sys    Sun Apr 13 15:28:38 2008 (48025EE6)
94077000 94098d00   afd      afd.sys      Thu Aug 14 06:04:35 2008 (48A40333)
94099000 940c0c00   netbt    netbt.sys    Sun Apr 13 15:20:59 2008 (48025D1B)
940c1000 940e6500   ipnat    ipnat.sys    Sun Apr 13 14:57:10 2008 (48025786)
940e7000 940feb00   scfdriver scfdriver.sys Mon Sep 07 07:15:34 2009 (4AA4EB56)
940ff000 94157480   tcpip    tcpip.sys    Fri Jun 20 07:51:09 2008 (485B99AD)
94158000 9416a600   ipsec    ipsec.sys    Sun Apr 13 15:19:42 2008 (48025CCE)
9418b000 941b0280   savonaccesscontrol savonaccesscontrol.sys Thu Jul 30 08:36:59 2009 (4A7193EB)
941b1000 941d1000   IntcHdmi IntcHdmi.sys Mon Sep 22 09:40:45 2008 (48D7A05D)
941d1000 941ec780   AESTAud  AESTAud.sys  Tue Dec 16 13:11:51 2008 (4947EF67)
941ed000 94210a80   portcls  portcls.sys  Sun Apr 13 15:19:40 2008 (48025CCC)
94211000 9437b940   sthda    sthda.sys    Mon Feb 23 12:12:21 2009 (49A2D8F5)
94566000 94568280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
9457e000 94580180   i2omgmt  i2omgmt.SYS  Sun Apr 13 14:41:22 2008 (480253D2)
945da000 945dab80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)
945ff000 94609e00   Fips     Fips.SYS     Sun Apr 13 14:33:27 2008 (480251F7)
9462f000 94637780   netbios  netbios.sys  Sun Apr 13 14:56:01 2008 (48025741)
9463f000 9464dd80   arp1394  arp1394.sys  Sun Apr 13 14:51:22 2008 (4802562A)
9464f000 94657700   wanarp   wanarp.sys   Sun Apr 13 14:57:20 2008 (48025790)
9465f000 94667080   ipfltdrv ipfltdrv.sys Fri Aug 17 16:55:07 2001 (3B7D84AB)
94ccd000 94cd1500   watchdog watchdog.sys Sun Apr 13 14:44:59 2008 (480254AB)
94ced000 94cf4e80   usbccgp  usbccgp.sys  Tue Apr 22 09:09:19 2008 (480DE37F)
94d05000 94d0c880   Npfs     Npfs.SYS     Sun Apr 13 14:32:38 2008 (480251C6)
94d0d000 94d11a80   Msfs     Msfs.SYS     Sun Apr 13 14:32:38 2008 (480251C6)
94d15000 94d1a200   vga      vga.sys      Sun Apr 13 14:44:40 2008 (48025498)
95146000 9514c180   HIDPARSE HIDPARSE.SYS Sun Apr 13 14:45:22 2008 (480254C2)
95156000 9515be00   savonaccessfilter savonaccessfilter.sys Thu Jul 30 08:36:33 2009 (4A7193D1)
951e0000 951eeb00   drmk     drmk.sys     Sun Apr 13 14:45:12 2008 (480254B8)
9590b000 95919880   usbhub   usbhub.sys   Sun Apr 13 14:45:36 2008 (480254D0)
99675000 99677f80   mouhid   mouhid.sys   Fri Aug 17 16:47:57 2001 (3B7D82FD)
99679000 9967c900   kbdhid   kbdhid.sys   Sun Apr 13 14:39:47 2008 (48025373)
99681000 99683880   hidusb   hidusb.sys   Sun Apr 13 14:45:27 2008 (480254C7)
9a56d000 9a576000   HIDCLASS HIDCLASS.SYS Sun Apr 13 14:45:25 2008 (480254C5)
9a58d000 9a599000   usbccid  usbccid.sys  Wed Jun 14 07:52:59 2006 (448FF89B)
9a899000 9a89c900   SMCLIB   SMCLIB.SYS   Fri Aug 17 16:50:56 2001 (3B7D83B0)
9c688000 9c693000   cvusbdrv cvusbdrv.sys Fri Jul 18 15:37:41 2008 (4880F105)
acd79000 acdd6f00   update   update.sys   Sun Apr 13 14:39:46 2008 (48025372)
acdd7000 ace06e80   rdpdr    rdpdr.sys    Sun Apr 13 14:32:50 2008 (480251D2)
ace07000 ace17e00   psched   psched.sys   Sun Apr 13 14:56:36 2008 (48025764)
ace90000 acea6580   ndiswan  ndiswan.sys  Sun Apr 13 15:20:41 2008 (48025D09)
acea7000 acec9700   ks       ks.sys       Sun Apr 13 15:16:34 2008 (48025C12)
aceca000 acf01880   srs_PremiumSound_i386 srs_PremiumSound_i386.sys Tue Mar 24 18:33:07 2009 (49C95FA3)
aed1d000 aed21080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
aed25000 aed29580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
aed2d000 aed31a80   TDI      TDI.SYS      Sun Apr 13 15:00:04 2008 (48025834)
aefb4000 aefbde80   NDProxy  NDProxy.SYS  Sun Apr 13 14:57:28 2008 (48025798)
aefd4000 aefddf00   termdd   termdd.sys   Sun Apr 13 14:38:36 2008 (4802532C)
aefe4000 aefec900   msgpc    msgpc.sys    Sun Apr 13 14:56:32 2008 (48025760)
aeff4000 aefffd00   raspptp  raspptp.sys  Sun Apr 13 15:19:47 2008 (48025CD3)
af004000 af00e200   raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
af014000 af020880   rasl2tp  rasl2tp.sys  Sun Apr 13 15:19:43 2008 (48025CCF)
b2afd000 b2b05e00   intelppm intelppm.sys Sun Apr 13 14:31:31 2008 (48025183)
b2da1000 b2da4c80   mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
b6757000 b6759780   ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
b6ed1000 b6edfd80   sysaudio sysaudio.sys Sun Apr 13 15:15:55 2008 (48025BEB)
b7840000 b78bb000   Wdf01000 Wdf01000.sys Thu Nov 02 04:54:18 2006 (4549B23A)
b78bb000 b78e8000   Apfiltr  Apfiltr.sys  Thu Jul 24 05:42:46 2008 (48884E96)
b78e8000 b78f9000   rimmptsk rimmptsk.sys Wed Nov 05 09:20:23 2008 (4911ABA7)
b78f9000 b790c580   sdbus    sdbus.sys    Sun Apr 13 14:36:44 2008 (480252BC)
b790d000 b7c84600   NETw5x32 NETw5x32.sys Thu Sep 25 10:21:58 2008 (48DB9E86)
b84c3000 b84eb000   HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
b84eb000 b850e280   USBPORT  USBPORT.SYS  Wed Mar 18 07:02:22 2009 (49C0D4BE)
b850f000 b854d000   e1y5132  e1y5132.sys  Fri Apr 04 16:39:04 2008 (47F691E8)
b854d000 b8560f00   VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
b8561000 b8b5dda0   igxpmp32 igxpmp32.sys Wed Jan 21 14:42:54 2009 (49777ABE)
b8bde000 b8beb000   WDFLDR   WDFLDR.SYS   Thu Nov 02 04:54:05 2006 (4549B22D)
b8bee000 b8bfad00   i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
b9cc3000 b9cc5900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
b9cfc000 b9cfe280   wmiacpi  wmiacpi.sys  Sun Apr 13 14:36:37 2008 (480252B5)
b9d2c000 b9d45b80   Mup      Mup.sys      Sun Apr 13 15:17:05 2008 (48025C31)
b9d46000 b9d72980   NDIS     NDIS.sys     Sun Apr 13 15:20:35 2008 (48025D03)
b9d73000 b9dff600   Ntfs     Ntfs.sys     Sun Apr 13 15:15:49 2008 (48025BE5)
b9e00000 b9e16b00   KSecDD   KSecDD.sys   Wed Jun 24 07:18:40 2009 (4A420B90)
b9e17000 b9e28f00   sr       sr.sys       Sun Apr 13 14:36:50 2008 (480252C2)
b9e29000 b9e48b00   fltMgr   fltMgr.sys   Sun Apr 13 14:32:58 2008 (480251DA)
b9e49000 b9f23000   iaStor   iaStor.sys   Thu Dec 04 15:34:07 2008 (49383EBF)
b9f23000 b9f48700   dmio     dmio.sys     Sun Apr 13 14:44:45 2008 (4802549D)
b9f49000 b9f67880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
b9f68000 b9f78a80   pci      pci.sys      Sun Apr 13 14:36:43 2008 (480252BB)
b9f79000 b9fa6d80   ACPI     ACPI.sys     Sun Apr 13 14:36:33 2008 (480252B1)
ba0a8000 ba0b1180   isapnp   isapnp.sys   Sun Apr 13 14:36:40 2008 (480252B8)
ba0b8000 ba0c2580   MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
ba0c8000 ba0d4c80   VolSnap  VolSnap.sys  Sun Apr 13 14:41:00 2008 (480253BC)
ba0d8000 ba0e0e00   disk     disk.sys     Sun Apr 13 14:40:46 2008 (480253AE)
ba0e8000 ba0f4180   CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
ba0f8000 ba100dc0   PxHelp20 PxHelp20.sys Wed Oct 17 14:24:26 2007 (4716535A)
ba108000 ba113000   PBADRV   PBADRV.sys   Mon Jan 07 13:52:14 2008 (478274DE)
ba118000 ba127100   ohci1394 ohci1394.sys Sun Apr 13 14:46:18 2008 (480254FA)
ba128000 ba135100   1394BUS  1394BUS.SYS  Fri Oct 03 07:12:00 2008 (48E5FE00)
ba198000 ba1a7180   nic1394  nic1394.sys  Sun Apr 13 14:51:22 2008 (4802562A)
ba328000 ba32cd00   PartMgr  PartMgr.sys  Sun Apr 13 14:40:48 2008 (480253B0)
ba368000 ba36d080   usbuhci  usbuhci.sys  Sun Apr 13 14:45:34 2008 (480254CE)
ba370000 ba377680   usbehci  usbehci.sys  Wed Mar 18 07:02:22 2009 (49C0D4BE)
ba3a8000 ba3ae500   usbprint usbprint.sys Sun Apr 13 14:47:37 2008 (48025549)
ba420000 ba425a00   mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
ba440000 ba446000   kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
ba498000 ba49d500   TDTCP    TDTCP.SYS    Sun Apr 13 14:38:35 2008 (4802532B)
ba4b8000 ba4bb000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
ba4bc000 ba4be800   compbatt compbatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba4c0000 ba4c3780   BATTC    BATTC.SYS    Sun Apr 13 14:36:32 2008 (480252B0)
ba4c4000 ba4c6d80   ACPIEC   ACPIEC.sys   Fri Aug 17 16:57:55 2001 (3B7D8553)
ba578000 ba57b680   CmBatt   CmBatt.sys   Sun Apr 13 14:36:36 2008 (480252B4)
ba5a8000 ba5a9b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)
ba5b2000 ba5b3100   swenum   swenum.sys   Sun Apr 13 14:39:52 2008 (48025378)
ba638000 ba639280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
ba65c000 ba65df00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
ba65e000 ba65f080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba660000 ba661080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
ba662000 ba663080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
ba670000 ba670d80   OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
ba754000 ba754c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
ba779000 ba779d00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
bf000000 bf011600   dxg      dxg.sys      Sun Apr 13 14:38:27 2008 (48025323)
bf012000 bf024000   igxprd32 igxprd32.dll Wed Jan 21 14:43:52 2009 (49777AF8)
bf024000 bf058000   igxpgd32 igxpgd32.dll Wed Jan 21 14:43:51 2009 (49777AF7)
bf058000 bf2e7da0   igxpdv32 igxpdv32.DLL Wed Jan 21 14:43:56 2009 (49777AFC)
bf2e8000 bf691000   igxpdx32 igxpdx32.DLL Wed Jan 21 14:44:06 2009 (49777B06)
bf800000 bf9c6080   win32k   win32k.sys   Fri Aug 14 08:19:23 2009 (4A85564B)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Sun Apr 13 20:09:55 2008 (4802A0D3)

Unloaded modules:
8e813000 8e83e000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f03e000 8f069000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f03e000 8f069000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f03e000 8f069000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9517e000 95185000   usbprint.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f03e000 8f069000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f1a9000 8f1d4000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
ba3e0000 ba3e7000   usbprint.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f454000 8f47f000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f51f000 8f54a000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8fd4a000 8fd75000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
91b46000 91b71000   kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
944b2000 944b3000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b6eb1000 b6ebe000   DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
91b71000 91b94000   aec.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b6ec1000 b6ecf000   swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
99831000 99833000   splitter.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9130f000 9131e000   AsfAlrt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
b6f11000 b6f21000   Serial.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9460f000 9461a000   imapi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9461f000 9462e000   redbook.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9456a000 9456e000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9514e000 95153000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9466f000 9467f000   cdrom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
94582000 94585000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
9515e000 95163000   Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
95166000 9516d000   Fdc.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Avatar of Jackie Man
Jackie Man
Flag of Hong Kong image

The hard disk has physical errors. Go to Safe mode and run chkdsk /r command.

If chkdsk /r command cannot fix your problem. It is better to get a new hard disk and clone the image of the old hard disk to the new hard disk.

Source: http://www.techsupportforum.com/microsoft-support/windows-xp-support/114987-blue-screen-win32k-sys.html
Cause could be any number of things but it most likely is not a failing hard disk (could be but not a common cause). Memory errors are the most common cause of undifferentiated BSODs referencing system files.

Run memtest 86+ to test memory. It and a number of other useful utilities are on the UBCD.  http://majorgeeks.com/Ultimate_Boot_CD_UBCD_d4981.html
Avatar of icorps
icorps

ASKER

Thanks for the quick response!  How did you come to that conclusuin?
Post the Error code on the BSOD.
Look at below link and apply the patch as needed.

Post the Error code on the BSOD.
Look at below link and apply the patch as needed.
http://support.microsoft.com/kb/816047 
The Driver Verifier operation is described quite clearly here>

"Troubleshooting drivers with XP's hidden Driver Verifier Manager":
http://articles.techrepublic.com.com/5100-10878_11-5714091.html
Sorry, somehow the 1st part of my last comment was omitted>>

Quoting "Aumha" >            "A kernel-mode process or driver incorrectly attempted to perform memory operations. Typically, a faulty driver or buggy software causes this"
Details:
"0x000000C2: BAD_POOL_CALLER":
http://aumha.org/a/stop.htm

Please note the links, for example>
How to Debug "Stop 0xC2" or "Stop 0x000000C2" Error Messages:
http://support.microsoft.com/?kbid=265879&sd=RMVP

So it does appear to be a driver ... see if the Driver Verifier helps, it's operation is described quite clearly here>
"Troubleshooting drivers with XP's hidden Driver Verifier Manager":
http://articles.techrepublic.com.com/5100-10878_11-5714091.html
You could take a look at Driver updates, and try the XP in-built Driver Verifier to isolate and troubleshoot a driver>
"Using Driver Verifier to identify issues with Windows drivers for advanced users":
http://support.microsoft.com/kb/244617/en-us

Some useful instructions for Drive Verifier.  Please note that they're written for Vista & Windows 7, but Instruction 2. is suitable for XP:
http://www.techsupportforum.com/2110308-post4.html

Another option may be this "free to try" link>
http://driveragent.com/index_b.php?q=driveragent
Also ensure you have a functioning System Restore (& set a Restore point) before running the Driver Verifier.
ASKER CERTIFIED SOLUTION
Avatar of icorps
icorps

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial