[Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Tom\AppData\Local\Temp\Temp1_Windows_NT6_BSOD_jcgriff20-ZIP.zip\Mini031310-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18160.amd64fre.vistasp2_gdr.091208-0542
Machine Name:
Kernel base = 0xfffff800`02060000 PsLoadedModuleList = 0xfffff800`02224dd0
Debug session time: Sat Mar 13 14:30:11.137 2010 (GMT-7)
System Uptime: 0 days 7:13:11.859
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
[COLOR=blue]BugCheck 3B[/COLOR], {c0000005, fffff800021953a0, fffffa600d00e2d0, 0}
[COLOR=red]Probably caused by : Pool_Corruption[/COLOR] ( nt!ExDeferredFreePool+d0 )
[COLOR=blue]Followup: Pool_corruption
[/COLOR]---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800021953a0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffa600d00e2d0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExDeferredFreePool+d0
fffff800`021953a0 4d8b08 mov r9,qword ptr [r8]
CONTEXT: fffffa600d00e2d0 -- (.cxr 0xfffffa600d00e2d0)
rax=fffff900c244e2a0 rbx=0000000000000000 rcx=0000000000000030
rdx=fffff90000000e40 rsi=fffff90000000c78 rdi=fffff800021f2160
rip=fffff800021953a0 rsp=fffffa600d00eb30 rbp=0000000000000000
r8=ff7ff900c2eda350 r9=ff7ff900c2eda350 r10=0000000000000001
r11=0000000000000000 r12=000000000000000f r13=0000000000000001
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt!ExDeferredFreePool+0xd0:
fffff800`021953a0 4d8b08 mov r9,qword ptr [r8] ds:002b:ff7ff900`c2eda350=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: EXCEL.EXE
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff800021942b2 to fffff800021953a0
STACK_TEXT:
fffffa60`0d00eb30 fffff800`021942b2 : fffff900`c2b2c550 fffff900`c01c4c00 00000000`00000000 00000000`00000001 : nt!ExDeferredFreePool+0xd0
fffffa60`0d00eba0 fffff960`001ad547 : 00000000`0104007c 00000000`00000004 fffffa60`00000010 fffff960`34316847 : nt!ExFreePoolWithTag+0x5e2
fffffa60`0d00ec50 fffff960`00173da4 : fffffa60`0d00ecd0 00000000`0104007c 00000000`00000004 00000000`00000000 : win32k!FreeObject+0x57
fffffa60`0d00ec80 fffff960`0010886b : 00000000`00000000 00000000`0104007c 00000000`0104007c fffff960`001225b2 : win32k!RGNOBJ::vDeleteRGNOBJ+0x24
fffffa60`0d00ecb0 fffff960`0012279d : fffff900`c0b07e70 00000000`00000000 00000000`00002485 00000000`00000000 : win32k!GreCombineRgn+0x447
fffffa60`0d00edb0 fffff960`00122686 : fffff900`c0b07e70 00000000`00000001 00000000`0104007c fffff900`c0b07c80 : win32k!InternalInvalidate2+0x4a5
fffffa60`0d00ee20 fffff960`00122686 : fffff900`c0b07c80 00000000`00000001 00000000`0104007c fffff900`c0a51800 : win32k!InternalInvalidate2+0x38e
fffffa60`0d00ee90 fffff960`00122686 : fffff900`c0a51800 00000000`00000001 00000000`0104007c fffff900`c0a50770 : win32k!InternalInvalidate2+0x38e
fffffa60`0d00ef00 fffff960`001232b0 : fffff900`c0a50770 00000000`00000001 00000000`0104007c 00000000`00000485 : win32k!InternalInvalidate2+0x38e
fffffa60`0d00ef70 fffff960`00181e52 : fffff900`c061c6a0 fffff900`c061c6a0 00000000`00000004 00000000`00000004 : win32k!xxxInternalInvalidate+0x168
fffffa60`0d00eff0 fffff960`001806c5 : fffff900`c0148a60 00000000`00000000 fffffa60`00000001 fffff800`00000000 : win32k!zzzBltValidBits+0x962
fffffa60`0d00f0d0 fffff960`001c91ed : 00000000`00000001 00000000`1eae0807 00000000`00000001 00000000`00000010 : win32k!xxxEndDeferWindowPosEx+0x1c5
fffffa60`0d00f190 fffff800`020b9ef3 : fffffa80`07517230 00000000`7efdd000 00000000`7efdd000 00000000`00000016 : win32k!NtUserEndDeferWindowPosEx+0x6d
fffffa60`0d00f1e0 00000000`755f3d09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`001fcb68 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x755f3d09
FOLLOWUP_IP:
nt!ExDeferredFreePool+d0
fffff800`021953a0 4d8b08 mov r9,qword ptr [r8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExDeferredFreePool+d0
FOLLOWUP_NAME: Pool_corruption
IMAGE_NAME: Pool_Corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: Pool_Corruption
STACK_COMMAND: .cxr 0xfffffa600d00e2d0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExDeferredFreePool+d0
BUCKET_ID: X64_0x3B_nt!ExDeferredFreePool+d0
Followup: Pool_corruption
---------
3: kd> Lmntsm
start end module name
fffffa60`043f0000 fffffa60`043fff00 1394BUS 1394BUS.SYS Fri Jan 18 22:34:04 2008 (479199DC)
fffffa60`008eb000 fffffa60`00941000 acpi acpi.sys Fri Apr 10 22:03:26 2009 (49E0249E)
fffffa60`05806000 fffffa60`05871000 afd afd.sys Fri Apr 10 22:44:21 2009 (49E02E35)
fffffa60`0bbec000 fffffa60`0bbf7000 asyncmac asyncmac.sys Fri Jan 18 22:37:27 2008 (47919AA7)
fffff960`00840000 fffff960`008a1000 ATMFD ATMFD.DLL Mon Jun 15 06:05:59 2009 (4A364737)
fffffa60`03d5a000 fffffa60`03d5dd00 BdaSup BdaSup.SYS Fri Jan 18 22:34:06 2008 (479199DE)
fffffa60`05e09000 fffffa60`05eb3000 BHDrvx64 BHDrvx64.sys Mon Feb 08 21:43:14 2010 (4B70F5F2)
fffffa60`0a4cc000 fffffa60`0a4ea000 bowser bowser.sys Fri Jan 18 21:54:51 2008 (479190AB)
fffffa60`05b3c000 fffffa60`05bd8000 ccHPx64 ccHPx64.sys Fri Aug 21 16:01:40 2009 (4A8F2754)
fffff960`00650000 fffff960`00661000 cdd cdd.dll Thu Sep 24 18:26:38 2009 (4ABC1C4E)
fffffa60`0bbd0000 fffffa60`0bbec000 cdfs cdfs.sys Fri Jan 18 21:53:45 2008 (47919069)
fffffa60`03ddf000 fffffa60`03dfb000 cdrom cdrom.sys Fri Apr 10 22:34:39 2009 (49E02BEF)
fffffa60`006ba000 fffffa60`0076c000 CI CI.dll Sat Apr 11 00:08:09 2009 (49E041D9)
fffffa60`0298a000 fffffa60`0299b000 circlass circlass.sys Fri Jan 18 22:34:00 2008 (479199D8)
fffffa60`00fcc000 fffffa60`00ff8000 CLASSPNP CLASSPNP.SYS Fri Apr 10 22:34:15 2009 (49E02BD7)
fffffa60`0065d000 fffffa60`006ba000 CLFS CLFS.SYS Fri Apr 10 21:54:21 2009 (49E0227D)
fffffa60`05eb3000 fffffa60`05ec1000 crashdmp crashdmp.sys Fri Apr 10 22:34:31 2009 (49E02BE7)
fffffa60`013f3000 fffffa60`013fd000 crcdisk crcdisk.sys Fri Jan 18 22:30:12 2008 (479198F4)
fffffa60`05b1f000 fffffa60`05b3c000 dfsc dfsc.sys Fri Apr 10 21:54:44 2009 (49E02294)
fffffa60`013df000 fffffa60`013f3000 disk disk.sys Fri Apr 10 22:34:38 2009 (49E02BEE)
fffffa60`00d77000 fffffa60`00d9a000 drmk drmk.sys Fri Jan 18 23:20:04 2008 (4791A4A4)
fffffa60`05ec1000 fffffa60`05fdd000 dump_iaStor dump_iaStor.sys Thu Dec 04 12:47:09 2008 (493841CD)
fffffa60`059b6000 fffffa60`059c2000 Dxapi Dxapi.sys Fri Jan 18 22:08:00 2008 (479193C0)
fffffa60`0380d000 fffffa60`038f0000 dxgkrnl dxgkrnl.sys Thu Sep 24 18:27:15 2009 (4ABC1C73)
fffffa60`011ab000 fffffa60`011d7000 ecache ecache.sys Fri Apr 10 22:36:18 2009 (49E02C52)
fffffa60`05a84000 fffffa60`05afa000 eeCtrl64 eeCtrl64.sys Mon Aug 17 16:05:31 2009 (4A89E23B)
fffffa60`0bbad000 fffffa60`0bbcd000 ENG64 ENG64.SYS Wed Jan 06 14:14:39 2010 (4B450B4F)
fffffa60`05afa000 fffffa60`05b1f000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Mon Aug 17 16:05:31 2009 (4A89E23B)
fffffa60`0ba00000 fffffa60`0bbad000 EX64 EX64.SYS Wed Jan 06 14:23:25 2010 (4B450D5D)
fffffa60`00b6b000 fffffa60`00b7f000 fileinfo fileinfo.sys Fri Jan 18 22:05:23 2008 (47919323)
fffffa60`00b24000 fffffa60`00b6b000 fltmgr fltmgr.sys Fri Apr 10 21:54:38 2009 (49E0228E)
fffffa60`056a4000 fffffa60`056ae000 Fs_Rec Fs_Rec.SYS Fri Jan 18 21:53:41 2008 (47919065)
fffffa60`0117f000 fffffa60`011ab000 fwpkclnt fwpkclnt.sys Fri Apr 10 22:42:44 2009 (49E02DD4)
fffff800`0201a000 fffff800`02060000 hal hal.dll Sat Apr 11 00:04:56 2009 (49E04118)
fffffa60`03c07000 fffffa60`03cf4000 HDAudBus HDAudBus.sys Fri Apr 10 22:39:38 2009 (49E02D1A)
fffffa60`05fe6000 fffffa60`05ff8000 HIDCLASS HIDCLASS.SYS Fri Apr 10 22:39:32 2009 (49E02D14)
fffffa60`059ab000 fffffa60`059b6000 hidir hidir.sys Fri Jan 18 22:33:53 2008 (479199D1)
fffffa60`056c2000 fffffa60`056c9b80 HIDPARSE HIDPARSE.SYS Fri Jan 18 22:33:51 2008 (479199CF)
fffffa60`05fdd000 fffffa60`05fe6000 hidusb hidusb.sys Fri Apr 10 22:39:32 2009 (49E02D14)
fffffa60`0a400000 fffffa60`0a4a3000 HTTP HTTP.sys Sat Feb 20 13:30:05 2010 (4B80545D)
fffffa60`00a08000 fffffa60`00b24000 iastor iastor.sys Thu Dec 04 12:47:09 2008 (493841CD)
fffffa60`05a0d000 fffffa60`05a84000 IDSvia64 IDSvia64.sys Tue Oct 27 14:32:54 2009 (4AE76706)
fffffa60`0293e000 fffffa60`02951000 intelppm intelppm.sys Fri Jan 18 21:52:45 2008 (4791902D)
fffffa60`058fd000 fffffa60`05924000 Ironx64 Ironx64.SYS Wed Nov 25 15:04:17 2009 (4B0DB7F1)
fffffa60`0297c000 fffffa60`0298a000 kbdclass kbdclass.sys Fri Jan 18 22:28:05 2008 (47919875)
fffffa60`05a00000 fffffa60`05a0b000 kbdhid kbdhid.sys Fri Apr 10 22:33:40 2009 (49E02BB4)
fffffa60`00604000 fffffa60`0060e000 kdcom kdcom.dll Sat Apr 11 00:07:57 2009 (49E041CD)
fffffa60`03d26000 fffffa60`03d5a000 ks ks.sys Fri Apr 10 22:33:51 2009 (49E02BBF)
fffffa60`00c0c000 fffffa60`00c93000 ksecdd ksecdd.sys Mon Jun 15 06:15:18 2009 (4A364966)
fffffa60`043d8000 fffffa60`043dd180 ksthunk ksthunk.sys Fri Jan 18 22:28:14 2008 (4791987E)
fffffa60`056ca000 fffffa60`056de000 lltdio lltdio.sys Fri Jan 18 22:35:48 2008 (47919A44)
fffffa60`02800000 fffffa60`02822000 luafv luafv.sys Fri Jan 18 21:59:06 2008 (479191AA)
fffffa60`0060e000 fffffa60`00649000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 00:05:41 2009 (49E04145)
fffffa60`059da000 fffffa60`059ed000 monitor monitor.sys Fri Jan 18 22:32:34 2008 (47919982)
fffffa60`03800000 fffffa60`0380c000 mouclass mouclass.sys Fri Jan 18 22:28:05 2008 (47919875)
fffffa60`05bf4000 fffffa60`05bff000 mouhid mouhid.sys Fri Jan 18 22:28:10 2008 (4791987A)
fffffa60`009ad000 fffffa60`009c0000 mountmgr mountmgr.sys Fri Jan 18 22:28:01 2008 (47919871)
fffffa60`0a4ea000 fffffa60`0a504000 mpsdrv mpsdrv.sys Fri Jan 18 22:35:28 2008 (47919A30)
fffffa60`0a504000 fffffa60`0a52b000 mrxdav mrxdav.sys Fri Apr 10 21:55:42 2009 (49E022CE)
fffffa60`0a52b000 fffffa60`0a554000 mrxsmb mrxsmb.sys Fri Dec 04 08:20:18 2009 (4B1936C2)
fffffa60`0a554000 fffffa60`0a59d000 mrxsmb10 mrxsmb10.sys Fri Dec 04 08:20:25 2009 (4B1936C9)
fffffa60`0a59d000 fffffa60`0a5bc000 mrxsmb20 mrxsmb20.sys Fri Apr 10 21:55:26 2009 (49E022BE)
fffffa60`05725000 fffffa60`05730000 Msfs Msfs.SYS Fri Jan 18 21:53:55 2008 (47919073)
fffffa60`0094a000 fffffa60`00954000 msisadrv msisadrv.sys Fri Jan 18 22:02:50 2008 (4791928A)
fffffa60`0399d000 fffffa60`039d6000 msiscsi msiscsi.sys Fri Apr 10 22:36:09 2009 (49E02C49)
fffffa60`00c93000 fffffa60`00ce3000 msrpc msrpc.sys Fri Apr 10 22:32:13 2009 (49E02B5D)
fffffa60`0299b000 fffffa60`029a6000 mssmbios mssmbios.sys Fri Jan 18 22:02:54 2008 (4791928E)
fffffa60`013cd000 fffffa60`013df000 mup mup.sys Fri Apr 10 21:54:47 2009 (49E02297)
fffffa60`00e09000 fffffa60`00fcc000 ndis ndis.sys Fri Apr 10 22:43:15 2009 (49E02DF3)
fffffa60`039e3000 fffffa60`039ef000 ndistapi ndistapi.sys Fri Jan 18 22:37:22 2008 (47919AA2)
fffffa60`037b0000 fffffa60`037e1000 ndiswan ndiswan.sys Fri Apr 10 22:43:39 2009 (49E02E0B)
fffffa60`011e5000 fffffa60`011f9000 NDProxy NDProxy.SYS Fri Jan 18 22:37:26 2008 (47919AA6)
fffffa60`058d3000 fffffa60`058e2000 netbios netbios.sys Fri Jan 18 22:36:35 2008 (47919A73)
fffffa60`05871000 fffffa60`058b5000 netbt netbt.sys Fri Apr 10 22:42:31 2009 (49E02DC7)
fffffa60`00ce3000 fffffa60`00d3c000 NETIO NETIO.SYS Fri Apr 10 22:43:34 2009 (49E02E06)
fffffa60`05730000 fffffa60`05741000 Npfs Npfs.SYS Fri Apr 10 21:54:22 2009 (49E0227E)
fffffa60`05985000 fffffa60`05991000 nsiproxy nsiproxy.sys Fri Jan 18 22:36:45 2008 (47919A7D)
fffff800`02060000 fffff800`02578000 nt ntkrnlmp.exe Tue Dec 08 09:18:34 2009 (4B1E8A6A)
fffffa60`01201000 fffffa60`01381000 Ntfs Ntfs.sys Fri Apr 10 21:55:38 2009 (49E022CA)
fffffa60`056ae000 fffffa60`056b7000 Null Null.SYS Thu Nov 02 02:37:15 2006 (4549BC4B)
fffffa60`0372e000 fffffa60`0372f180 nvBridge nvBridge.kmd Mon Jan 11 20:58:35 2010 (4B4C017B)
fffffa60`02a07000 fffffa60`0372d700 nvlddmkm nvlddmkm.sys Mon Jan 11 21:26:35 2010 (4B4C080B)
fffffa60`043de000 fffffa60`043efb00 ohci1394 ohci1394.sys Fri Apr 10 22:39:49 2009 (49E02D25)
fffffa60`058b5000 fffffa60`058d3000 pacer pacer.sys Fri Apr 10 22:42:56 2009 (49E02DE0)
fffffa60`00984000 fffffa60`00999000 partmgr partmgr.sys Fri Apr 10 22:34:51 2009 (49E02BFB)
fffffa60`00954000 fffffa60`00984000 pci pci.sys Fri Apr 10 22:03:33 2009 (49E024A5)
fffffa60`0a6a3000 fffffa60`0a759000 peauth peauth.sys Mon Oct 23 04:57:00 2006 (453CAE0C)
fffffa60`00d3c000 fffffa60`00d77000 portcls portcls.sys Fri Apr 10 22:39:36 2009 (49E02D18)
fffffa60`00649000 fffffa60`0065d000 PSHED PSHED.dll Sat Apr 11 00:08:17 2009 (49E041E1)
fffffa60`00bed000 fffffa60`00bf8380 PxHlpa64 PxHlpa64.sys Fri Feb 02 13:24:22 2007 (45C3AC06)
fffffa60`05741000 fffffa60`0574a000 rasacd rasacd.sys Fri Jan 18 22:37:30 2008 (47919AAA)
fffffa60`0378d000 fffffa60`037b0000 rasl2tp rasl2tp.sys Fri Apr 10 22:43:37 2009 (49E02E09)
fffffa60`039ef000 fffffa60`039ff000 raspppoe raspppoe.sys Fri Apr 10 22:43:33 2009 (49E02E05)
fffffa60`037e1000 fffffa60`037ff000 raspptp raspptp.sys Fri Apr 10 22:43:38 2009 (49E02E0A)
fffffa60`02951000 fffffa60`02969000 rassstp rassstp.sys Fri Apr 10 22:43:46 2009 (49E02E12)
fffffa60`05938000 fffffa60`05985000 rdbss rdbss.sys Fri Apr 10 21:55:21 2009 (49E022B9)
fffffa60`05713000 fffffa60`0571c000 RDPCDD RDPCDD.sys Fri Jan 18 22:42:04 2008 (47919BBC)
fffffa60`0571c000 fffffa60`05725000 rdpencdd rdpencdd.sys Fri Jan 18 22:42:03 2008 (47919BBB)
fffffa60`028bc000 fffffa60`028d4000 rspndr rspndr.sys Fri Jan 18 22:35:48 2008 (47919A44)
fffffa60`0540f000 fffffa60`055ef400 RTKVHD64 RTKVHD64.sys Tue Aug 04 02:50:52 2009 (4A78047C)
fffffa60`03963000 fffffa60`0399d000 Rtlh64 Rtlh64.sys Tue Sep 01 20:09:35 2009 (4A9DE1EF)
fffffa60`0a759000 fffffa60`0a764000 secdrv secdrv.SYS Wed Sep 13 06:18:38 2006 (4508052E)
fffffa60`057dd000 fffffa60`057f8000 smb smb.sys Fri Apr 10 22:42:19 2009 (49E02DBB)
fffffa60`013c5000 fffffa60`013cd000 spldr spldr.sys Mon Jan 12 13:51:29 2009 (496BBB61)
fffffa60`02822000 fffffa60`028bc000 spsys spsys.sys Tue Mar 10 10:16:43 2009 (49B6A07B)
fffffa60`0b803000 fffffa60`0b889000 SRTSP64 SRTSP64.SYS Tue Dec 01 21:55:48 2009 (4B160164)
fffffa60`05924000 fffffa60`05938000 SRTSPX64 SRTSPX64.SYS Tue Dec 01 21:58:24 2009 (4B160200)
fffffa60`0a60e000 fffffa60`0a6a3000 srv srv.sys Fri Dec 11 04:04:08 2009 (4B223538)
fffffa60`0a5bc000 fffffa60`0a5ee000 srv2 srv2.sys Mon Sep 14 02:45:22 2009 (4AAE10B2)
fffffa60`0a4a3000 fffffa60`0a4cc000 srvnet srvnet.sys Fri Dec 11 04:03:47 2009 (4B223523)
fffffa60`03730000 fffffa60`0378d000 storport storport.sys Fri Apr 10 22:34:45 2009 (49E02BF5)
fffffa60`03e00000 fffffa60`03e01480 swenum swenum.sys Thu Nov 02 02:37:33 2006 (4549BC5D)
fffffa60`00b7f000 fffffa60`00bed000 SYMDS64 SYMDS64.SYS Mon Aug 17 16:35:30 2009 (4A89E942)
fffffa60`009c0000 fffffa60`009fb000 SYMEFA64 SYMEFA64.SYS Mon Nov 23 17:35:40 2009 (4B0B386C)
fffffa60`00d9a000 fffffa60`00dd0000 SYMEVENT64x86 SYMEVENT64x86.SYS Thu Aug 13 15:28:21 2009 (4A849385)
fffffa60`05767000 fffffa60`057dd000 SYMTDIV SYMTDIV.SYS Thu Nov 19 18:21:24 2009 (4B05FD24)
fffffa60`05605000 fffffa60`056a4000 t3 t3.sys Tue May 05 19:25:42 2009 (4A00F526)
fffffa60`01009000 fffffa60`0117f000 tcpip tcpip.sys Tue Dec 08 09:56:33 2009 (4B1E9351)
fffffa60`0a764000 fffffa60`0a774000 tcpipreg tcpipreg.sys Tue Dec 08 09:55:32 2009 (4B1E9314)
fffffa60`039d6000 fffffa60`039e3000 TDI TDI.SYS Fri Apr 10 22:44:14 2009 (49E02E2E)
fffffa60`0574a000 fffffa60`05767000 tdx tdx.sys Fri Apr 10 22:43:00 2009 (49E02DE4)
fffffa60`02969000 fffffa60`0297c000 termdd termdd.sys Fri Apr 10 22:48:13 2009 (49E02F1D)
fffff960`00430000 fffff960`0043a000 TSDDD TSDDD.dll unavailable (00000000)
fffffa60`02935000 fffffa60`0293e000 tunmp tunmp.sys Fri Jan 18 22:36:30 2008 (47919A6E)
fffffa60`02929000 fffffa60`02935000 tunnel tunnel.sys Fri Jan 18 22:36:44 2008 (47919A7C)
fffffa60`029a6000 fffffa60`029b6000 umbus umbus.sys Fri Jan 18 22:34:16 2008 (479199E8)
fffffa60`05bd8000 fffffa60`05bf4000 usbccgp usbccgp.sys Fri Jan 18 22:34:04 2008 (479199DC)
fffffa60`05991000 fffffa60`059ab000 usbcir usbcir.sys Fri Jan 18 22:34:01 2008 (479199D9)
fffffa60`05ff8000 fffffa60`05ff9e00 USBD USBD.SYS Fri Jan 18 22:33:53 2008 (479199D1)
fffffa60`03952000 fffffa60`03963000 usbehci usbehci.sys Fri Apr 10 22:39:36 2009 (49E02D18)
fffffa60`029b6000 fffffa60`029fe000 usbhub usbhub.sys Fri Apr 10 22:39:52 2009 (49E02D28)
fffffa60`0390c000 fffffa60`03952000 USBPORT USBPORT.SYS Fri Apr 10 22:39:39 2009 (49E02D1B)
fffffa60`059c2000 fffffa60`059da000 USBSTOR USBSTOR.SYS Fri Apr 10 22:39:38 2009 (49E02D1A)
fffffa60`03900000 fffffa60`0390c000 usbuhci usbuhci.sys Fri Jan 18 22:33:56 2008 (479199D4)
fffffa60`056e0000 fffffa60`056ee000 vga vga.sys Fri Jan 18 22:32:21 2008 (47919975)
fffffa60`056ee000 fffffa60`05713000 VIDEOPRT VIDEOPRT.SYS Fri Jan 18 22:32:25 2008 (47919979)
fffffa60`00999000 fffffa60`009ad000 volmgr volmgr.sys Fri Apr 10 22:34:49 2009 (49E02BF9)
fffffa60`0076c000 fffffa60`007d2000 volmgrx volmgrx.sys Fri Apr 10 22:35:14 2009 (49E02C12)
fffffa60`01381000 fffffa60`013c5000 volsnap volsnap.sys Fri Apr 10 22:35:33 2009 (49E02C25)
fffffa60`058e2000 fffffa60`058fd000 wanarp wanarp.sys Fri Apr 10 22:43:38 2009 (49E02E0A)
fffffa60`038f0000 fffffa60`03900000 watchdog watchdog.sys Fri Apr 10 22:09:16 2009 (49E025FC)
fffffa60`00803000 fffffa60`008dd000 Wdf01000 Wdf01000.sys Fri Jan 18 22:33:27 2008 (479199B7)
fffffa60`008dd000 fffffa60`008eb000 WDFLDR WDFLDR.SYS Fri Jan 18 22:32:33 2008 (47919981)
fffff960`000f0000 fffff960`003a4000 win32k win32k.sys Fri Aug 14 06:42:57 2009 (4A8569E1)
fffffa60`00941000 fffffa60`0094a000 WMILIB WMILIB.SYS Fri Jan 18 22:33:45 2008 (479199C9)
fffffa60`0a794000 fffffa60`0a7aa000 WUDFPf WUDFPf.sys Fri Jan 18 22:33:22 2008 (479199B2)
fffffa60`0a774000 fffffa60`0a794000 WUDFRd WUDFRd.sys Fri Jan 18 22:33:43 2008 (479199C7)
fffffa60`03cf4000 fffffa60`03d25f80 xcbdax64 xcbdax64.sys Fri Sep 07 11:43:23 2007 (46E19BCB)
fffffa60`03d5e000 fffffa60`03ddf000 xcfex64 xcfex64.sys Fri Sep 07 11:42:27 2007 (46E19B93)
fffffa60`03e03000 fffffa60`04377000 xchalx64 xchalx64.sys Fri Sep 07 11:41:01 2007 (46E19B3D)
fffffa60`04377000 fffffa60`043d8000 xcmemx64 xcmemx64.sys Fri Sep 07 11:39:35 2007 (46E19AE7)
Unloaded modules:
fffffa60`0b8de000 fffffa60`0b8ed000 RNDISMPX.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b8d4000 fffffa60`0b8de000 usb8023x.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b8c5000 fffffa60`0b8d4000 RNDISMPX.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b8bb000 fffffa60`0b8c5000 usb8023x.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b8ac000 fffffa60`0b8bb000 RNDISMPX.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b8a2000 fffffa60`0b8ac000 usb8023x.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0bbad000 fffffa60`0bbcd000 ENG64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0ba00000 fffffa60`0bbad000 EX64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b893000 fffffa60`0b8a2000 RNDISMPX.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0b889000 fffffa60`0b893000 usb8023x.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0bbb0000 fffffa60`0bbd0000 ENG64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0ba03000 fffffa60`0bbb0000 EX64.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`011d7000 fffffa60`011e5000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`0280d000 fffffa60`02929000 dump_iaStor.
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`056ca000 fffffa60`056e0000 i8042prt.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
fffffa60`056b7000 fffffa60`056c2000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
3: kd> Stack
*** WARNING: Unable to verify timestamp for TSDDD.dll
*** ERROR: Module load completed but symbols could not be loaded for TSDDD.dll
*** WARNING: Unable to verify timestamp for cdd.dll
*** ERROR: Module load completed but symbols could not be loaded for cdd.dll
*** WARNING: Unable to verify timestamp for ATMFD.DLL
*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
*** WARNING: Unable to verify timestamp for SYMEFA64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEFA64.SYS
*** WARNING: Unable to verify timestamp for iastor.sys
*** ERROR: Module load completed but symbols could not be loaded for iastor.sys
*** WARNING: Unable to verify timestamp for SYMDS64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMDS64.SYS
*** WARNING: Unable to verify timestamp for PxHlpa64.sys
*** ERROR: Module load completed but symbols could not be loaded for PxHlpa64.sys
*** WARNING: Unable to verify timestamp for drmk.sys
*** ERROR: Module load completed but symbols could not be loaded for drmk.sys
*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
*** WARNING: Unable to verify timestamp for spldr.sys
*** ERROR: Module load completed but symbols could not be loaded for spldr.sys
*** WARNING: Unable to verify timestamp for spsys.sys
*** ERROR: Module load completed but symbols could not be loaded for spsys.sys
*** WARNING: Unable to verify timestamp for intelppm.sys
*** ERROR: Module load completed but symbols could not be loaded for intelppm.sys
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
*** WARNING: Unable to verify timestamp for nvBridge.kmd
*** ERROR: Module load completed but symbols could not be loaded for nvBridge.kmd
*** WARNING: Unable to verify timestamp for dxgkrnl.sys
*** ERROR: Module load completed but symbols could not be loaded for dxgkrnl.sys
*** WARNING: Unable to verify timestamp for Rtlh64.sys
*** ERROR: Module load completed but symbols could not be loaded for Rtlh64.sys
*** WARNING: Unable to verify timestamp for xcbdax64.sys
*** ERROR: Module load completed but symbols could not be loaded for xcbdax64.sys
*** WARNING: Unable to verify timestamp for xcfex64.sys
*** ERROR: Module load completed but symbols could not be loaded for xcfex64.sys
*** WARNING: Unable to verify timestamp for xchalx64.sys
*** ERROR: Module load completed but symbols could not be loaded for xchalx64.sys
*** WARNING: Unable to verify timestamp for xcmemx64.sys
*** ERROR: Module load completed but symbols could not be loaded for xcmemx64.sys
*** WARNING: Unable to verify timestamp for RTKVHD64.sys
*** ERROR: Module load completed but symbols could not be loaded for RTKVHD64.sys
*** WARNING: Unable to verify timestamp for t3.sys
*** ERROR: Module load completed but symbols could not be loaded for t3.sys
*** WARNING: Unable to verify timestamp for SYMTDIV.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMTDIV.SYS
*** WARNING: Unable to verify timestamp for Ironx64.SYS
*** ERROR: Module load completed but symbols could not be loaded for Ironx64.SYS
*** WARNING: Unable to verify timestamp for SRTSPX64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSPX64.SYS
*** WARNING: Unable to verify timestamp for IDSvia64.sys
*** ERROR: Module load completed but symbols could not be loaded for IDSvia64.sys
*** WARNING: Unable to verify timestamp for eeCtrl64.sys
*** ERROR: Module load completed but symbols could not be loaded for eeCtrl64.sys
*** WARNING: Unable to verify timestamp for EraserUtilRebootDrv.sys
*** ERROR: Module load completed but symbols could not be loaded for EraserUtilRebootDrv.sys
*** WARNING: Unable to verify timestamp for ccHPx64.sys
*** ERROR: Module load completed but symbols could not be loaded for ccHPx64.sys
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
*** WARNING: Unable to verify timestamp for dump_iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for dump_iaStor.sys
*** WARNING: Unable to verify timestamp for srvnet.sys
*** ERROR: Module load completed but symbols could not be loaded for srvnet.sys
*** WARNING: Unable to verify timestamp for mrxsmb.sys
*** ERROR: Module load completed but symbols could not be loaded for mrxsmb.sys
*** WARNING: Unable to verify timestamp for mrxsmb10.sys
*** ERROR: Module load completed but symbols could not be loaded for mrxsmb10.sys
*** WARNING: Unable to verify timestamp for srv2.sys
*** ERROR: Module load completed but symbols could not be loaded for srv2.sys
*** WARNING: Unable to verify timestamp for srv.sys
*** ERROR: Module load completed but symbols could not be loaded for srv.sys
*** ERROR: Symbol file could not be found. Defaulted to export symbols for peauth.sys -
*** WARNING: Unable to verify timestamp for secdrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for secdrv.SYS
*** WARNING: Unable to verify timestamp for SRTSP64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP64.SYS
*** WARNING: Unable to verify timestamp for EX64.SYS
*** ERROR: Module load completed but symbols could not be loaded for EX64.SYS
*** WARNING: Unable to verify timestamp for ENG64.SYS
*** ERROR: Module load completed but symbols could not be loaded for ENG64.SYS
*** ERROR: Module load completed but symbols could not be loaded for cdfs.sys
Couldn't resolve error at 'tack'
3: kd> k
Child-SP RetAddr Call Site
fffffa60`0d00d918 fffff800`020ba1ee nt!KeBugCheckEx
fffffa60`0d00d920 fffff800`020b9bbc nt!KiBugCheckDispatch+0x6e
fffffa60`0d00da60 fffff800`020e5dcd nt!KiSystemServiceHandler+0x7c
fffffa60`0d00daa0 fffff800`020e608f nt!RtlpExecuteHandlerForException+0xd
fffffa60`0d00dad0 fffff800`020f3706 nt!RtlDispatchException+0x22f
fffffa60`0d00e1c0 fffff800`020ba2a9 nt!KiDispatchException+0xc2
fffffa60`0d00e7c0 fffff800`020b8e8d nt!KiExceptionDispatch+0xa9
fffffa60`0d00e9a0 fffff800`021953a0 nt!KiGeneralProtectionFault+0xcd
fffffa60`0d00eb30 fffff800`021942b2 nt!ExDeferredFreePool+0xd0
fffffa60`0d00eba0 fffff960`001ad547 nt!ExFreePoolWithTag+0x5e2
fffffa60`0d00ec50 fffff960`00173da4 win32k!FreeObject+0x57
fffffa60`0d00ec80 fffff960`0010886b win32k!RGNOBJ::vDeleteRGNOBJ+0x24
fffffa60`0d00ecb0 fffff960`0012279d win32k!GreCombineRgn+0x447
fffffa60`0d00edb0 fffff960`00122686 win32k!InternalInvalidate2+0x4a5
fffffa60`0d00ee20 fffff960`00122686 win32k!InternalInvalidate2+0x38e
fffffa60`0d00ee90 fffff960`00122686 win32k!InternalInvalidate2+0x38e
fffffa60`0d00ef00 fffff960`001232b0 win32k!InternalInvalidate2+0x38e
fffffa60`0d00ef70 fffff960`00181e52 win32k!xxxInternalInvalidate+0x168
fffffa60`0d00eff0 fffff960`001806c5 win32k!zzzBltValidBits+0x962
fffffa60`0d00f0d0 fffff960`001c91ed win32k!xxxEndDeferWindowPosEx+0x1c5
3: kd> MTV
Couldn't resolve error at 'TV'
3: kd> vertarget
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18160.amd64fre.vistasp2_gdr.091208-0542
Machine Name:
Kernel base = 0xfffff800`02060000 PsLoadedModuleList = 0xfffff800`02224dd0
Debug session time: Sat Mar 13 14:30:11.137 2010 (GMT-7)
System Uptime: 0 days 7:13:11.859
/CODE]
Hi I asked another BSOD expert to come in on this sense ther are 30 BSOD files to go through, he will be ricic46 so if you get something from him go ahead and follow his instructions as he is the very best....