icorps
asked on
BSOD Error Win32k.sys
I have a user with a Dell Latitude that is recently getting BSOD 1 or twice a day. All the dumps show the same error and I suspect a faulty driver but I am having an issue figuring out which 1 it is. Any help is much appreciated. See the debugging info below:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [c:\Mini010410-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Inaccessible path: 'c:\windows\i386'
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\i386
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090804-1 435
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Jan 4 12:45:53.718 2010 (GMT-5)
System Uptime: 0 days 6:31:08.410
Loading Kernel Symbols
.......................... .......... .......... .......... .......
.......................... .......... .......... .......... ........
....
Loading User Symbols
Loading unloaded module list
.......................... .
************************** ********** ********** ********** ********** ********** ***
* *
* Bugcheck Analysis *
* *
************************** ********** ********** ********** ********** ********** ***
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, cd4, 4090801, e34cf8c8}
Probably caused by : win32k.sys ( win32k!HeavyFreePool+bb )
Followup: MachineOwner
---------
1: kd> !analyze -v
************************** ********** ********** ********** ********** ********** ***
* *
* Bugcheck Analysis *
* *
************************** ********** ********** ********** ********** ********** ***
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 04090801, Memory contents of the pool block
Arg4: e34cf8c8, Address of the block of pool being deallocated
Debugging Details:
------------------
POOL_ADDRESS: e34cf8c8
FREED_POOL_TAG: Gxlt
BUGCHECK_STR: 0xc2_7_Gxlt
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: iexplore.exe
LAST_CONTROL_TRANSFER: from 8054b583 to 804f9f43
STACK_TEXT:
90b255c4 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
90b25614 bf802a25 e34cf8c8 00000000 90b25728 nt!ExFreePoolWithTag+0x2a3
90b25624 bf8048a9 e34cf8c8 bf817cea 90b25754 win32k!HeavyFreePool+0xbb
90b2562c bf817cea 90b25754 0000004b 0000035b win32k!EXLATEOBJ::vAltUnlo ck+0x28
90b25728 bf817653 150117b1 00000000 00000000 win32k!GreDrawStream+0x551
90b25870 8054162c 150117b1 00000060 017d9db4 win32k!NtGdiDrawStream+0x9 f
90b25870 7c90e514 150117b1 00000060 017d9db4 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
017d9d30 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!HeavyFreePool+bb
bf802a25 5d pop ebp
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: win32k!HeavyFreePool+bb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a85564b
FAILURE_BUCKET_ID: 0xc2_7_Gxlt_win32k!HeavyFr eePool+bb
BUCKET_ID: 0xc2_7_Gxlt_win32k!HeavyFr eePool+bb
Followup: MachineOwner
---------
1: kd> lmvm win32k
start end module name
bf800000 bf9c6080 win32k # (pdb symbols) c:\symbols\win32k.pdb\068F CD760BF740 EEBE34FBCF F1A513652\ win32k.pdb
Loaded symbol image file: win32k.sys
Mapped memory image file: c:\symbols\win32k.sys\4A85 564B1c6080 \win32k.sy s
Image path: win32k.sys
Image name: win32k.sys
Timestamp: Fri Aug 14 08:19:23 2009 (4A85564B)
CheckSum: 001CA775
ImageSize: 001C6080
File version: 5.1.2600.5863
Product version: 5.1.2600.5863
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0405.04b0
CompanyName: Microsoft Corporation
ProductName: Opera?ní systém Microsoft® Windows®
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 5.1.2600.5863
FileVersion: 5.1.2600.5863 (xpsp_sp3_qfe.090814-1323)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. Vaechna práva vyhrazena.
1: kd> kv
ChildEBP RetAddr Args to Child
90b255c4 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b (FPO: [5,0,0])
90b25614 bf802a25 e34cf8c8 00000000 90b25728 nt!ExFreePoolWithTag+0x2a3 (FPO: [2,10,4])
90b25624 bf8048a9 e34cf8c8 bf817cea 90b25754 win32k!HeavyFreePool+0xbb (FPO: [1,0,0])
90b2562c bf817cea 90b25754 0000004b 0000035b win32k!EXLATEOBJ::vAltUnlo ck+0x28 (FPO: [0,0,0])
90b25728 bf817653 150117b1 00000000 00000000 win32k!GreDrawStream+0x551 (FPO: [3,60,4])
90b25870 8054162c 150117b1 00000060 017d9db4 win32k!NtGdiDrawStream+0x9 f (FPO: [Non-Fpo])
90b25870 7c90e514 150117b1 00000060 017d9db4 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ 90b25884)
WARNING: Frame IP not in any known module. Following frames may be wrong.
017d9d30 00000000 00000000 00000000 00000000 0x7c90e514
1: kd> lm t n
start end module name
804d7000 806e4000 nt ntkrpamp.exe Tue Aug 04 10:20:04 2009 (4A784394)
806e4000 80704d80 hal halmacpi.dll Wed Apr 02 06:42:53 2008 (47F3632D)
8e813000 8e83d180 kmixer kmixer.sys Sun Apr 13 14:45:07 2008 (480254B3)
90d7e000 90da0100 RDPWD RDPWD.SYS Sun Apr 13 14:38:40 2008 (48025330)
91056000 91096e00 HTTP HTTP.sys Tue Oct 20 12:20:15 2009 (4ADDE33F)
9195f000 919b0880 srv srv.sys Thu Dec 11 05:57:07 2008 (4940F203)
91ac9000 91af5180 mrxdav mrxdav.sys Sun Apr 13 14:32:42 2008 (480251CA)
91b94000 91ba8480 wdmaud wdmaud.sys Sun Apr 13 15:17:18 2008 (48025C3E)
91d0d000 91d0fe80 s24trans s24trans.sys Mon Aug 04 14:32:25 2008 (48974B39)
91d21000 91d24900 ndisuio ndisuio.sys Sun Apr 13 14:55:57 2008 (4802573D)
93f02000 93fdc000 dump_iaStor dump_iaStor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
93fdc000 9404b280 mrxsmb mrxsmb.sys Fri Oct 24 07:21:07 2008 (4901AFA3)
9404c000 94076e80 rdbss rdbss.sys Sun Apr 13 15:28:38 2008 (48025EE6)
94077000 94098d00 afd afd.sys Thu Aug 14 06:04:35 2008 (48A40333)
94099000 940c0c00 netbt netbt.sys Sun Apr 13 15:20:59 2008 (48025D1B)
940c1000 940e6500 ipnat ipnat.sys Sun Apr 13 14:57:10 2008 (48025786)
940e7000 940feb00 scfdriver scfdriver.sys Mon Sep 07 07:15:34 2009 (4AA4EB56)
940ff000 94157480 tcpip tcpip.sys Fri Jun 20 07:51:09 2008 (485B99AD)
94158000 9416a600 ipsec ipsec.sys Sun Apr 13 15:19:42 2008 (48025CCE)
9418b000 941b0280 savonaccesscontrol savonaccesscontrol.sys Thu Jul 30 08:36:59 2009 (4A7193EB)
941b1000 941d1000 IntcHdmi IntcHdmi.sys Mon Sep 22 09:40:45 2008 (48D7A05D)
941d1000 941ec780 AESTAud AESTAud.sys Tue Dec 16 13:11:51 2008 (4947EF67)
941ed000 94210a80 portcls portcls.sys Sun Apr 13 15:19:40 2008 (48025CCC)
94211000 9437b940 sthda sthda.sys Mon Feb 23 12:12:21 2009 (49A2D8F5)
94566000 94568280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
9457e000 94580180 i2omgmt i2omgmt.SYS Sun Apr 13 14:41:22 2008 (480253D2)
945da000 945dab80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
945ff000 94609e00 Fips Fips.SYS Sun Apr 13 14:33:27 2008 (480251F7)
9462f000 94637780 netbios netbios.sys Sun Apr 13 14:56:01 2008 (48025741)
9463f000 9464dd80 arp1394 arp1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
9464f000 94657700 wanarp wanarp.sys Sun Apr 13 14:57:20 2008 (48025790)
9465f000 94667080 ipfltdrv ipfltdrv.sys Fri Aug 17 16:55:07 2001 (3B7D84AB)
94ccd000 94cd1500 watchdog watchdog.sys Sun Apr 13 14:44:59 2008 (480254AB)
94ced000 94cf4e80 usbccgp usbccgp.sys Tue Apr 22 09:09:19 2008 (480DE37F)
94d05000 94d0c880 Npfs Npfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
94d0d000 94d11a80 Msfs Msfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
94d15000 94d1a200 vga vga.sys Sun Apr 13 14:44:40 2008 (48025498)
95146000 9514c180 HIDPARSE HIDPARSE.SYS Sun Apr 13 14:45:22 2008 (480254C2)
95156000 9515be00 savonaccessfilter savonaccessfilter.sys Thu Jul 30 08:36:33 2009 (4A7193D1)
951e0000 951eeb00 drmk drmk.sys Sun Apr 13 14:45:12 2008 (480254B8)
9590b000 95919880 usbhub usbhub.sys Sun Apr 13 14:45:36 2008 (480254D0)
99675000 99677f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
99679000 9967c900 kbdhid kbdhid.sys Sun Apr 13 14:39:47 2008 (48025373)
99681000 99683880 hidusb hidusb.sys Sun Apr 13 14:45:27 2008 (480254C7)
9a56d000 9a576000 HIDCLASS HIDCLASS.SYS Sun Apr 13 14:45:25 2008 (480254C5)
9a58d000 9a599000 usbccid usbccid.sys Wed Jun 14 07:52:59 2006 (448FF89B)
9a899000 9a89c900 SMCLIB SMCLIB.SYS Fri Aug 17 16:50:56 2001 (3B7D83B0)
9c688000 9c693000 cvusbdrv cvusbdrv.sys Fri Jul 18 15:37:41 2008 (4880F105)
acd79000 acdd6f00 update update.sys Sun Apr 13 14:39:46 2008 (48025372)
acdd7000 ace06e80 rdpdr rdpdr.sys Sun Apr 13 14:32:50 2008 (480251D2)
ace07000 ace17e00 psched psched.sys Sun Apr 13 14:56:36 2008 (48025764)
ace90000 acea6580 ndiswan ndiswan.sys Sun Apr 13 15:20:41 2008 (48025D09)
acea7000 acec9700 ks ks.sys Sun Apr 13 15:16:34 2008 (48025C12)
aceca000 acf01880 srs_PremiumSound_i386 srs_PremiumSound_i386.sys Tue Mar 24 18:33:07 2009 (49C95FA3)
aed1d000 aed21080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
aed25000 aed29580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
aed2d000 aed31a80 TDI TDI.SYS Sun Apr 13 15:00:04 2008 (48025834)
aefb4000 aefbde80 NDProxy NDProxy.SYS Sun Apr 13 14:57:28 2008 (48025798)
aefd4000 aefddf00 termdd termdd.sys Sun Apr 13 14:38:36 2008 (4802532C)
aefe4000 aefec900 msgpc msgpc.sys Sun Apr 13 14:56:32 2008 (48025760)
aeff4000 aefffd00 raspptp raspptp.sys Sun Apr 13 15:19:47 2008 (48025CD3)
af004000 af00e200 raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
af014000 af020880 rasl2tp rasl2tp.sys Sun Apr 13 15:19:43 2008 (48025CCF)
b2afd000 b2b05e00 intelppm intelppm.sys Sun Apr 13 14:31:31 2008 (48025183)
b2da1000 b2da4c80 mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
b6757000 b6759780 ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
b6ed1000 b6edfd80 sysaudio sysaudio.sys Sun Apr 13 15:15:55 2008 (48025BEB)
b7840000 b78bb000 Wdf01000 Wdf01000.sys Thu Nov 02 04:54:18 2006 (4549B23A)
b78bb000 b78e8000 Apfiltr Apfiltr.sys Thu Jul 24 05:42:46 2008 (48884E96)
b78e8000 b78f9000 rimmptsk rimmptsk.sys Wed Nov 05 09:20:23 2008 (4911ABA7)
b78f9000 b790c580 sdbus sdbus.sys Sun Apr 13 14:36:44 2008 (480252BC)
b790d000 b7c84600 NETw5x32 NETw5x32.sys Thu Sep 25 10:21:58 2008 (48DB9E86)
b84c3000 b84eb000 HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
b84eb000 b850e280 USBPORT USBPORT.SYS Wed Mar 18 07:02:22 2009 (49C0D4BE)
b850f000 b854d000 e1y5132 e1y5132.sys Fri Apr 04 16:39:04 2008 (47F691E8)
b854d000 b8560f00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
b8561000 b8b5dda0 igxpmp32 igxpmp32.sys Wed Jan 21 14:42:54 2009 (49777ABE)
b8bde000 b8beb000 WDFLDR WDFLDR.SYS Thu Nov 02 04:54:05 2006 (4549B22D)
b8bee000 b8bfad00 i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
b9cc3000 b9cc5900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
b9cfc000 b9cfe280 wmiacpi wmiacpi.sys Sun Apr 13 14:36:37 2008 (480252B5)
b9d2c000 b9d45b80 Mup Mup.sys Sun Apr 13 15:17:05 2008 (48025C31)
b9d46000 b9d72980 NDIS NDIS.sys Sun Apr 13 15:20:35 2008 (48025D03)
b9d73000 b9dff600 Ntfs Ntfs.sys Sun Apr 13 15:15:49 2008 (48025BE5)
b9e00000 b9e16b00 KSecDD KSecDD.sys Wed Jun 24 07:18:40 2009 (4A420B90)
b9e17000 b9e28f00 sr sr.sys Sun Apr 13 14:36:50 2008 (480252C2)
b9e29000 b9e48b00 fltMgr fltMgr.sys Sun Apr 13 14:32:58 2008 (480251DA)
b9e49000 b9f23000 iaStor iaStor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
b9f23000 b9f48700 dmio dmio.sys Sun Apr 13 14:44:45 2008 (4802549D)
b9f49000 b9f67880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
b9f68000 b9f78a80 pci pci.sys Sun Apr 13 14:36:43 2008 (480252BB)
b9f79000 b9fa6d80 ACPI ACPI.sys Sun Apr 13 14:36:33 2008 (480252B1)
ba0a8000 ba0b1180 isapnp isapnp.sys Sun Apr 13 14:36:40 2008 (480252B8)
ba0b8000 ba0c2580 MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
ba0c8000 ba0d4c80 VolSnap VolSnap.sys Sun Apr 13 14:41:00 2008 (480253BC)
ba0d8000 ba0e0e00 disk disk.sys Sun Apr 13 14:40:46 2008 (480253AE)
ba0e8000 ba0f4180 CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
ba0f8000 ba100dc0 PxHelp20 PxHelp20.sys Wed Oct 17 14:24:26 2007 (4716535A)
ba108000 ba113000 PBADRV PBADRV.sys Mon Jan 07 13:52:14 2008 (478274DE)
ba118000 ba127100 ohci1394 ohci1394.sys Sun Apr 13 14:46:18 2008 (480254FA)
ba128000 ba135100 1394BUS 1394BUS.SYS Fri Oct 03 07:12:00 2008 (48E5FE00)
ba198000 ba1a7180 nic1394 nic1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
ba328000 ba32cd00 PartMgr PartMgr.sys Sun Apr 13 14:40:48 2008 (480253B0)
ba368000 ba36d080 usbuhci usbuhci.sys Sun Apr 13 14:45:34 2008 (480254CE)
ba370000 ba377680 usbehci usbehci.sys Wed Mar 18 07:02:22 2009 (49C0D4BE)
ba3a8000 ba3ae500 usbprint usbprint.sys Sun Apr 13 14:47:37 2008 (48025549)
ba420000 ba425a00 mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
ba440000 ba446000 kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
ba498000 ba49d500 TDTCP TDTCP.SYS Sun Apr 13 14:38:35 2008 (4802532B)
ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
ba4bc000 ba4be800 compbatt compbatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba4c0000 ba4c3780 BATTC BATTC.SYS Sun Apr 13 14:36:32 2008 (480252B0)
ba4c4000 ba4c6d80 ACPIEC ACPIEC.sys Fri Aug 17 16:57:55 2001 (3B7D8553)
ba578000 ba57b680 CmBatt CmBatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
ba5b2000 ba5b3100 swenum swenum.sys Sun Apr 13 14:39:52 2008 (48025378)
ba638000 ba639280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
ba65c000 ba65df00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
ba65e000 ba65f080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba660000 ba661080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
ba662000 ba663080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
ba670000 ba670d80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
ba754000 ba754c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
ba779000 ba779d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
bf000000 bf011600 dxg dxg.sys Sun Apr 13 14:38:27 2008 (48025323)
bf012000 bf024000 igxprd32 igxprd32.dll Wed Jan 21 14:43:52 2009 (49777AF8)
bf024000 bf058000 igxpgd32 igxpgd32.dll Wed Jan 21 14:43:51 2009 (49777AF7)
bf058000 bf2e7da0 igxpdv32 igxpdv32.DLL Wed Jan 21 14:43:56 2009 (49777AFC)
bf2e8000 bf691000 igxpdx32 igxpdx32.DLL Wed Jan 21 14:44:06 2009 (49777B06)
bf800000 bf9c6080 win32k win32k.sys Fri Aug 14 08:19:23 2009 (4A85564B)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Sun Apr 13 20:09:55 2008 (4802A0D3)
Unloaded modules:
8e813000 8e83e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9517e000 95185000 usbprint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f1a9000 8f1d4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba3e0000 ba3e7000 usbprint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f454000 8f47f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f51f000 8f54a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8fd4a000 8fd75000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b46000 91b71000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
944b2000 944b3000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6eb1000 b6ebe000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b71000 91b94000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6ec1000 b6ecf000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
99831000 99833000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9130f000 9131e000 AsfAlrt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6f11000 b6f21000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9460f000 9461a000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9461f000 9462e000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9456a000 9456e000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9514e000 95153000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9466f000 9467f000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
94582000 94585000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9515e000 95163000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
95166000 9516d000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [c:\Mini010410-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
WARNING: Inaccessible path: 'c:\windows\i386'
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\i386
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090804-1
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Jan 4 12:45:53.718 2010 (GMT-5)
System Uptime: 0 days 6:31:08.410
Loading Kernel Symbols
..........................
..........................
....
Loading User Symbols
Loading unloaded module list
..........................
**************************
* *
* Bugcheck Analysis *
* *
**************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, cd4, 4090801, e34cf8c8}
Probably caused by : win32k.sys ( win32k!HeavyFreePool+bb )
Followup: MachineOwner
---------
1: kd> !analyze -v
**************************
* *
* Bugcheck Analysis *
* *
**************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 04090801, Memory contents of the pool block
Arg4: e34cf8c8, Address of the block of pool being deallocated
Debugging Details:
------------------
POOL_ADDRESS: e34cf8c8
FREED_POOL_TAG: Gxlt
BUGCHECK_STR: 0xc2_7_Gxlt
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: iexplore.exe
LAST_CONTROL_TRANSFER: from 8054b583 to 804f9f43
STACK_TEXT:
90b255c4 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
90b25614 bf802a25 e34cf8c8 00000000 90b25728 nt!ExFreePoolWithTag+0x2a3
90b25624 bf8048a9 e34cf8c8 bf817cea 90b25754 win32k!HeavyFreePool+0xbb
90b2562c bf817cea 90b25754 0000004b 0000035b win32k!EXLATEOBJ::vAltUnlo
90b25728 bf817653 150117b1 00000000 00000000 win32k!GreDrawStream+0x551
90b25870 8054162c 150117b1 00000060 017d9db4 win32k!NtGdiDrawStream+0x9
90b25870 7c90e514 150117b1 00000060 017d9db4 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
017d9d30 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!HeavyFreePool+bb
bf802a25 5d pop ebp
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: win32k!HeavyFreePool+bb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP:
FAILURE_BUCKET_ID: 0xc2_7_Gxlt_win32k!HeavyFr
BUCKET_ID: 0xc2_7_Gxlt_win32k!HeavyFr
Followup: MachineOwner
---------
1: kd> lmvm win32k
start end module name
bf800000 bf9c6080 win32k # (pdb symbols) c:\symbols\win32k.pdb\068F
Loaded symbol image file: win32k.sys
Mapped memory image file: c:\symbols\win32k.sys\4A85
Image path: win32k.sys
Image name: win32k.sys
Timestamp: Fri Aug 14 08:19:23 2009 (4A85564B)
CheckSum: 001CA775
ImageSize: 001C6080
File version: 5.1.2600.5863
Product version: 5.1.2600.5863
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0405.04b0
CompanyName: Microsoft Corporation
ProductName: Opera?ní systém Microsoft® Windows®
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 5.1.2600.5863
FileVersion: 5.1.2600.5863 (xpsp_sp3_qfe.090814-1323)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. Vaechna práva vyhrazena.
1: kd> kv
ChildEBP RetAddr Args to Child
90b255c4 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b (FPO: [5,0,0])
90b25614 bf802a25 e34cf8c8 00000000 90b25728 nt!ExFreePoolWithTag+0x2a3
90b25624 bf8048a9 e34cf8c8 bf817cea 90b25754 win32k!HeavyFreePool+0xbb (FPO: [1,0,0])
90b2562c bf817cea 90b25754 0000004b 0000035b win32k!EXLATEOBJ::vAltUnlo
90b25728 bf817653 150117b1 00000000 00000000 win32k!GreDrawStream+0x551
90b25870 8054162c 150117b1 00000060 017d9db4 win32k!NtGdiDrawStream+0x9
90b25870 7c90e514 150117b1 00000060 017d9db4 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ 90b25884)
WARNING: Frame IP not in any known module. Following frames may be wrong.
017d9d30 00000000 00000000 00000000 00000000 0x7c90e514
1: kd> lm t n
start end module name
804d7000 806e4000 nt ntkrpamp.exe Tue Aug 04 10:20:04 2009 (4A784394)
806e4000 80704d80 hal halmacpi.dll Wed Apr 02 06:42:53 2008 (47F3632D)
8e813000 8e83d180 kmixer kmixer.sys Sun Apr 13 14:45:07 2008 (480254B3)
90d7e000 90da0100 RDPWD RDPWD.SYS Sun Apr 13 14:38:40 2008 (48025330)
91056000 91096e00 HTTP HTTP.sys Tue Oct 20 12:20:15 2009 (4ADDE33F)
9195f000 919b0880 srv srv.sys Thu Dec 11 05:57:07 2008 (4940F203)
91ac9000 91af5180 mrxdav mrxdav.sys Sun Apr 13 14:32:42 2008 (480251CA)
91b94000 91ba8480 wdmaud wdmaud.sys Sun Apr 13 15:17:18 2008 (48025C3E)
91d0d000 91d0fe80 s24trans s24trans.sys Mon Aug 04 14:32:25 2008 (48974B39)
91d21000 91d24900 ndisuio ndisuio.sys Sun Apr 13 14:55:57 2008 (4802573D)
93f02000 93fdc000 dump_iaStor dump_iaStor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
93fdc000 9404b280 mrxsmb mrxsmb.sys Fri Oct 24 07:21:07 2008 (4901AFA3)
9404c000 94076e80 rdbss rdbss.sys Sun Apr 13 15:28:38 2008 (48025EE6)
94077000 94098d00 afd afd.sys Thu Aug 14 06:04:35 2008 (48A40333)
94099000 940c0c00 netbt netbt.sys Sun Apr 13 15:20:59 2008 (48025D1B)
940c1000 940e6500 ipnat ipnat.sys Sun Apr 13 14:57:10 2008 (48025786)
940e7000 940feb00 scfdriver scfdriver.sys Mon Sep 07 07:15:34 2009 (4AA4EB56)
940ff000 94157480 tcpip tcpip.sys Fri Jun 20 07:51:09 2008 (485B99AD)
94158000 9416a600 ipsec ipsec.sys Sun Apr 13 15:19:42 2008 (48025CCE)
9418b000 941b0280 savonaccesscontrol savonaccesscontrol.sys Thu Jul 30 08:36:59 2009 (4A7193EB)
941b1000 941d1000 IntcHdmi IntcHdmi.sys Mon Sep 22 09:40:45 2008 (48D7A05D)
941d1000 941ec780 AESTAud AESTAud.sys Tue Dec 16 13:11:51 2008 (4947EF67)
941ed000 94210a80 portcls portcls.sys Sun Apr 13 15:19:40 2008 (48025CCC)
94211000 9437b940 sthda sthda.sys Mon Feb 23 12:12:21 2009 (49A2D8F5)
94566000 94568280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
9457e000 94580180 i2omgmt i2omgmt.SYS Sun Apr 13 14:41:22 2008 (480253D2)
945da000 945dab80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
945ff000 94609e00 Fips Fips.SYS Sun Apr 13 14:33:27 2008 (480251F7)
9462f000 94637780 netbios netbios.sys Sun Apr 13 14:56:01 2008 (48025741)
9463f000 9464dd80 arp1394 arp1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
9464f000 94657700 wanarp wanarp.sys Sun Apr 13 14:57:20 2008 (48025790)
9465f000 94667080 ipfltdrv ipfltdrv.sys Fri Aug 17 16:55:07 2001 (3B7D84AB)
94ccd000 94cd1500 watchdog watchdog.sys Sun Apr 13 14:44:59 2008 (480254AB)
94ced000 94cf4e80 usbccgp usbccgp.sys Tue Apr 22 09:09:19 2008 (480DE37F)
94d05000 94d0c880 Npfs Npfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
94d0d000 94d11a80 Msfs Msfs.SYS Sun Apr 13 14:32:38 2008 (480251C6)
94d15000 94d1a200 vga vga.sys Sun Apr 13 14:44:40 2008 (48025498)
95146000 9514c180 HIDPARSE HIDPARSE.SYS Sun Apr 13 14:45:22 2008 (480254C2)
95156000 9515be00 savonaccessfilter savonaccessfilter.sys Thu Jul 30 08:36:33 2009 (4A7193D1)
951e0000 951eeb00 drmk drmk.sys Sun Apr 13 14:45:12 2008 (480254B8)
9590b000 95919880 usbhub usbhub.sys Sun Apr 13 14:45:36 2008 (480254D0)
99675000 99677f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
99679000 9967c900 kbdhid kbdhid.sys Sun Apr 13 14:39:47 2008 (48025373)
99681000 99683880 hidusb hidusb.sys Sun Apr 13 14:45:27 2008 (480254C7)
9a56d000 9a576000 HIDCLASS HIDCLASS.SYS Sun Apr 13 14:45:25 2008 (480254C5)
9a58d000 9a599000 usbccid usbccid.sys Wed Jun 14 07:52:59 2006 (448FF89B)
9a899000 9a89c900 SMCLIB SMCLIB.SYS Fri Aug 17 16:50:56 2001 (3B7D83B0)
9c688000 9c693000 cvusbdrv cvusbdrv.sys Fri Jul 18 15:37:41 2008 (4880F105)
acd79000 acdd6f00 update update.sys Sun Apr 13 14:39:46 2008 (48025372)
acdd7000 ace06e80 rdpdr rdpdr.sys Sun Apr 13 14:32:50 2008 (480251D2)
ace07000 ace17e00 psched psched.sys Sun Apr 13 14:56:36 2008 (48025764)
ace90000 acea6580 ndiswan ndiswan.sys Sun Apr 13 15:20:41 2008 (48025D09)
acea7000 acec9700 ks ks.sys Sun Apr 13 15:16:34 2008 (48025C12)
aceca000 acf01880 srs_PremiumSound_i386 srs_PremiumSound_i386.sys Tue Mar 24 18:33:07 2009 (49C95FA3)
aed1d000 aed21080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
aed25000 aed29580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
aed2d000 aed31a80 TDI TDI.SYS Sun Apr 13 15:00:04 2008 (48025834)
aefb4000 aefbde80 NDProxy NDProxy.SYS Sun Apr 13 14:57:28 2008 (48025798)
aefd4000 aefddf00 termdd termdd.sys Sun Apr 13 14:38:36 2008 (4802532C)
aefe4000 aefec900 msgpc msgpc.sys Sun Apr 13 14:56:32 2008 (48025760)
aeff4000 aefffd00 raspptp raspptp.sys Sun Apr 13 15:19:47 2008 (48025CD3)
af004000 af00e200 raspppoe raspppoe.sys Sun Apr 13 14:57:31 2008 (4802579B)
af014000 af020880 rasl2tp rasl2tp.sys Sun Apr 13 15:19:43 2008 (48025CCF)
b2afd000 b2b05e00 intelppm intelppm.sys Sun Apr 13 14:31:31 2008 (48025183)
b2da1000 b2da4c80 mssmbios mssmbios.sys Sun Apr 13 14:36:45 2008 (480252BD)
b6757000 b6759780 ndistapi ndistapi.sys Sun Apr 13 14:57:27 2008 (48025797)
b6ed1000 b6edfd80 sysaudio sysaudio.sys Sun Apr 13 15:15:55 2008 (48025BEB)
b7840000 b78bb000 Wdf01000 Wdf01000.sys Thu Nov 02 04:54:18 2006 (4549B23A)
b78bb000 b78e8000 Apfiltr Apfiltr.sys Thu Jul 24 05:42:46 2008 (48884E96)
b78e8000 b78f9000 rimmptsk rimmptsk.sys Wed Nov 05 09:20:23 2008 (4911ABA7)
b78f9000 b790c580 sdbus sdbus.sys Sun Apr 13 14:36:44 2008 (480252BC)
b790d000 b7c84600 NETw5x32 NETw5x32.sys Thu Sep 25 10:21:58 2008 (48DB9E86)
b84c3000 b84eb000 HDAudBus HDAudBus.sys Thu May 26 11:46:29 2005 (4295EF55)
b84eb000 b850e280 USBPORT USBPORT.SYS Wed Mar 18 07:02:22 2009 (49C0D4BE)
b850f000 b854d000 e1y5132 e1y5132.sys Fri Apr 04 16:39:04 2008 (47F691E8)
b854d000 b8560f00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 14:44:39 2008 (48025497)
b8561000 b8b5dda0 igxpmp32 igxpmp32.sys Wed Jan 21 14:42:54 2009 (49777ABE)
b8bde000 b8beb000 WDFLDR WDFLDR.SYS Thu Nov 02 04:54:05 2006 (4549B22D)
b8bee000 b8bfad00 i8042prt i8042prt.sys Sun Apr 13 15:17:59 2008 (48025C67)
b9cc3000 b9cc5900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
b9cfc000 b9cfe280 wmiacpi wmiacpi.sys Sun Apr 13 14:36:37 2008 (480252B5)
b9d2c000 b9d45b80 Mup Mup.sys Sun Apr 13 15:17:05 2008 (48025C31)
b9d46000 b9d72980 NDIS NDIS.sys Sun Apr 13 15:20:35 2008 (48025D03)
b9d73000 b9dff600 Ntfs Ntfs.sys Sun Apr 13 15:15:49 2008 (48025BE5)
b9e00000 b9e16b00 KSecDD KSecDD.sys Wed Jun 24 07:18:40 2009 (4A420B90)
b9e17000 b9e28f00 sr sr.sys Sun Apr 13 14:36:50 2008 (480252C2)
b9e29000 b9e48b00 fltMgr fltMgr.sys Sun Apr 13 14:32:58 2008 (480251DA)
b9e49000 b9f23000 iaStor iaStor.sys Thu Dec 04 15:34:07 2008 (49383EBF)
b9f23000 b9f48700 dmio dmio.sys Sun Apr 13 14:44:45 2008 (4802549D)
b9f49000 b9f67880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
b9f68000 b9f78a80 pci pci.sys Sun Apr 13 14:36:43 2008 (480252BB)
b9f79000 b9fa6d80 ACPI ACPI.sys Sun Apr 13 14:36:33 2008 (480252B1)
ba0a8000 ba0b1180 isapnp isapnp.sys Sun Apr 13 14:36:40 2008 (480252B8)
ba0b8000 ba0c2580 MountMgr MountMgr.sys Sun Apr 13 14:39:45 2008 (48025371)
ba0c8000 ba0d4c80 VolSnap VolSnap.sys Sun Apr 13 14:41:00 2008 (480253BC)
ba0d8000 ba0e0e00 disk disk.sys Sun Apr 13 14:40:46 2008 (480253AE)
ba0e8000 ba0f4180 CLASSPNP CLASSPNP.SYS Sun Apr 13 15:16:21 2008 (48025C05)
ba0f8000 ba100dc0 PxHelp20 PxHelp20.sys Wed Oct 17 14:24:26 2007 (4716535A)
ba108000 ba113000 PBADRV PBADRV.sys Mon Jan 07 13:52:14 2008 (478274DE)
ba118000 ba127100 ohci1394 ohci1394.sys Sun Apr 13 14:46:18 2008 (480254FA)
ba128000 ba135100 1394BUS 1394BUS.SYS Fri Oct 03 07:12:00 2008 (48E5FE00)
ba198000 ba1a7180 nic1394 nic1394.sys Sun Apr 13 14:51:22 2008 (4802562A)
ba328000 ba32cd00 PartMgr PartMgr.sys Sun Apr 13 14:40:48 2008 (480253B0)
ba368000 ba36d080 usbuhci usbuhci.sys Sun Apr 13 14:45:34 2008 (480254CE)
ba370000 ba377680 usbehci usbehci.sys Wed Mar 18 07:02:22 2009 (49C0D4BE)
ba3a8000 ba3ae500 usbprint usbprint.sys Sun Apr 13 14:47:37 2008 (48025549)
ba420000 ba425a00 mouclass mouclass.sys Sun Apr 13 14:39:47 2008 (48025373)
ba440000 ba446000 kbdclass kbdclass.sys Sun Apr 13 14:39:46 2008 (48025372)
ba498000 ba49d500 TDTCP TDTCP.SYS Sun Apr 13 14:38:35 2008 (4802532B)
ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
ba4bc000 ba4be800 compbatt compbatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba4c0000 ba4c3780 BATTC BATTC.SYS Sun Apr 13 14:36:32 2008 (480252B0)
ba4c4000 ba4c6d80 ACPIEC ACPIEC.sys Fri Aug 17 16:57:55 2001 (3B7D8553)
ba578000 ba57b680 CmBatt CmBatt.sys Sun Apr 13 14:36:36 2008 (480252B4)
ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
ba5b2000 ba5b3100 swenum swenum.sys Sun Apr 13 14:39:52 2008 (48025378)
ba638000 ba639280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
ba65c000 ba65df00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
ba65e000 ba65f080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
ba660000 ba661080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
ba662000 ba663080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
ba670000 ba670d80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
ba754000 ba754c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
ba779000 ba779d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
bf000000 bf011600 dxg dxg.sys Sun Apr 13 14:38:27 2008 (48025323)
bf012000 bf024000 igxprd32 igxprd32.dll Wed Jan 21 14:43:52 2009 (49777AF8)
bf024000 bf058000 igxpgd32 igxpgd32.dll Wed Jan 21 14:43:51 2009 (49777AF7)
bf058000 bf2e7da0 igxpdv32 igxpdv32.DLL Wed Jan 21 14:43:56 2009 (49777AFC)
bf2e8000 bf691000 igxpdx32 igxpdx32.DLL Wed Jan 21 14:44:06 2009 (49777B06)
bf800000 bf9c6080 win32k win32k.sys Fri Aug 14 08:19:23 2009 (4A85564B)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Sun Apr 13 20:09:55 2008 (4802A0D3)
Unloaded modules:
8e813000 8e83e000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9517e000 95185000 usbprint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f03e000 8f069000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f1a9000 8f1d4000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba3e0000 ba3e7000 usbprint.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f454000 8f47f000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8f51f000 8f54a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
8fd4a000 8fd75000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b46000 91b71000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
944b2000 944b3000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6eb1000 b6ebe000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
91b71000 91b94000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6ec1000 b6ecf000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
99831000 99833000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9130f000 9131e000 AsfAlrt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b6f11000 b6f21000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9460f000 9461a000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9461f000 9462e000 redbook.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9456a000 9456e000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
9514e000 95153000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9466f000 9467f000 cdrom.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
94582000 94585000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
9515e000 95163000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
95166000 9516d000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Cause could be any number of things but it most likely is not a failing hard disk (could be but not a common cause). Memory errors are the most common cause of undifferentiated BSODs referencing system files.
Run memtest 86+ to test memory. It and a number of other useful utilities are on the UBCD. http://majorgeeks.com/Ultimate_Boot_CD_UBCD_d4981.html
Run memtest 86+ to test memory. It and a number of other useful utilities are on the UBCD. http://majorgeeks.com/Ultimate_Boot_CD_UBCD_d4981.html
ASKER
Thanks for the quick response! How did you come to that conclusuin?
Post the Error code on the BSOD.
Look at below link and apply the patch as needed.
Look at below link and apply the patch as needed.
Post the Error code on the BSOD.
Look at below link and apply the patch as needed.
http://support.microsoft.com/kb/816047
The Driver Verifier operation is described quite clearly here>
"Troubleshooting drivers with XP's hidden Driver Verifier Manager":
http://articles.techrepublic.com.com/5100-10878_11-5714091.html
"Troubleshooting drivers with XP's hidden Driver Verifier Manager":
http://articles.techrepublic.com.com/5100-10878_11-5714091.html
Sorry, somehow the 1st part of my last comment was omitted>>
Quoting "Aumha" > "A kernel-mode process or driver incorrectly attempted to perform memory operations. Typically, a faulty driver or buggy software causes this"
Details:
"0x000000C2: BAD_POOL_CALLER":
http://aumha.org/a/stop.htm
Please note the links, for example>
How to Debug "Stop 0xC2" or "Stop 0x000000C2" Error Messages:
http://support.microsoft.com/?kbid=265879&sd=RMVP
So it does appear to be a driver ... see if the Driver Verifier helps, it's operation is described quite clearly here>
"Troubleshooting drivers with XP's hidden Driver Verifier Manager":
http://articles.techrepublic.com.com/5100-10878_11-5714091.html
Quoting "Aumha" > "A kernel-mode process or driver incorrectly attempted to perform memory operations. Typically, a faulty driver or buggy software causes this"
Details:
"0x000000C2: BAD_POOL_CALLER":
http://aumha.org/a/stop.htm
Please note the links, for example>
How to Debug "Stop 0xC2" or "Stop 0x000000C2" Error Messages:
http://support.microsoft.com/?kbid=265879&sd=RMVP
So it does appear to be a driver ... see if the Driver Verifier helps, it's operation is described quite clearly here>
"Troubleshooting drivers with XP's hidden Driver Verifier Manager":
http://articles.techrepublic.com.com/5100-10878_11-5714091.html
You could take a look at Driver updates, and try the XP in-built Driver Verifier to isolate and troubleshoot a driver>
"Using Driver Verifier to identify issues with Windows drivers for advanced users":
http://support.microsoft.com/kb/244617/en-us
Some useful instructions for Drive Verifier. Please note that they're written for Vista & Windows 7, but Instruction 2. is suitable for XP:
http://www.techsupportforum.com/2110308-post4.html
Another option may be this "free to try" link>
http://driveragent.com/index_b.php?q=driveragent
"Using Driver Verifier to identify issues with Windows drivers for advanced users":
http://support.microsoft.com/kb/244617/en-us
Some useful instructions for Drive Verifier. Please note that they're written for Vista & Windows 7, but Instruction 2. is suitable for XP:
http://www.techsupportforum.com/2110308-post4.html
Another option may be this "free to try" link>
http://driveragent.com/index_b.php?q=driveragent
Also ensure you have a functioning System Restore (& set a Restore point) before running the Driver Verifier.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If chkdsk /r command cannot fix your problem. It is better to get a new hard disk and clone the image of the old hard disk to the new hard disk.
Source: http://www.techsupportforum.com/microsoft-support/windows-xp-support/114987-blue-screen-win32k-sys.html