Bug Check - Reboot

[Guest]

My windows xp pro. pc rebooted due to a bug check. The dump file is as
follows:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini052104-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt
Built by: 2600.xpclient.010817-1148
Kernel base = 0x804d0000 PsLoadedModuleList = 0x80545b28
Debug session time: Fri May 21 19:24:53.277 2004 (GMT-4)
System Uptime: 0 days 0:23:46.496
Loading Kernel Symbols
.........................................................................................................................
Loading unloaded module list
...........................................
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {1, 2, 1, 80537345}

Probably caused by : Pool_Corruption ( nt!ExFreePool+b )

Followup: Pool_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000001, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80537345, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: Mtlstrm

BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExFreePoolWithTag+4a8
80537345 8902 mov [edx],eax

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 80537149 to 80537345

TRAP_FRAME: f64f2c14 -- (.trap fffffffff64f2c14)
..trap fffffffff64f2c14
ErrCode = 00000002
eax=00000002 ebx=ffafabd8 ecx=000001ff edx=00000001 esi=ffafa9b0 edi=80548f80
eip=80537345 esp=f64f2c88 ebp=f64f2cb4 iopl=0 nv up ei ng nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!ExFreePoolWithTag+0x4a8:
80537345 8902 mov [edx],eax ds:0023:00000001=????????
..trap
Resetting default scope

STACK_TEXT:
f64f2cb4 80537149 00000001 00000000 f93f6b23 nt!ExFreePoolWithTag+0x4a8
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator delete+0xf
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!ExFreePool+b
80537149 c20400 ret 0x4

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExFreePool+b

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap fffffffff64f2c14 ; kb

FAILURE_BUCKET_ID: 0xC5_2_nt!ExFreePool+b

BUCKET_ID: 0xC5_2_nt!ExFreePool+b

Followup: Pool_corruption
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=80537345 edi=00000001
eip=804fc1bb esp=f64f2be0 ebp=f64f2bf8 iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
804fc1bb 5d pop ebp
ChildEBP RetAddr Args to Child
f64f2bf8 804d7c50 0000000a 00000001 00000002 nt!KeBugCheckEx+0x19 (FPO:
[Non-Fpo])
f64f2bf8 80537345 0000000a 00000001 00000002 nt!KiTrap0E+0x2ad (FPO: [0,0]
TrapFrame @ f64f2c14)
f64f2cb4 80537149 00000001 00000000 f93f6b23 nt!ExFreePoolWithTag+0x4a8
(FPO: [Non-Fpo])
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb (FPO: [1,0,0])
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator delete+0xf
(FPO: [1,0,0])
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d (FPO: [Non-Fpo])
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c (FPO: [Non-Fpo])
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a (FPO: [Non-Fpo])
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112 (FPO: [Non-Fpo])
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65 (FPO: [1,0,3])
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc (FPO: [1,0,0])
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c (FPO: [0,0,3])
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc (FPO: [1,0,0])
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000 nt!PspSystemThreadStartup+0x34
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d0000 806b3f00 nt ntoskrnl.exe Fri Aug 17 23:39:59 2001 (3B7DE38F)
806b4000 806c7280 hal halacpi.dll Fri Aug 17 16:48:11 2001 (3B7D830B)
bad44000 bad5d600 Mup Mup.sys Fri Aug 17 23:21:29 2001 (3B7DDF39)
bad5e000 bae06be0 vmodem vmodem.sys Tue Jul 09 14:05:19 2002 (3D2B25DF)
bae07000 bae88da0 vpctcom vpctcom.sys Tue Jul 09 14:04:26 2002 (3D2B25AA)
bae89000 baeb0700 NDIS NDIS.sys Fri Aug 17 21:31:13 2001 (3B7DC561)
baeb1000 baf33400 Ntfs Ntfs.sys Fri Aug 17 21:33:04 2001 (3B7DC5D0)
baf34000 baf47780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001 (3B7D8379)
baf48000 baf59300 sr sr.sys Fri Aug 17 17:00:38 2001 (3B7D85F6)
baf5a000 baf6f280 atapi atapi.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
baf70000 baf93b80 dmio dmio.sys Fri Aug 17 16:58:27 2001 (3B7D8573)
baf94000 bafb2880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
bafb3000 bafdec00 ACPI ACPI.sys Fri Aug 17 16:57:52 2001 (3B7D8550)
bf800000 bf9b7580 win32k win32k.sys Fri Aug 17 23:52:56 2001 (3B7DE698)
bff10000 bff5d080 trid3d trid3d.dll Fri Aug 17 17:56:04 2001 (3B7D92F4)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 17:55:56 2001 (3B7D92EC)
bffa0000 bffe2980 ATMFD ATMFD.DLL Fri Aug 17 17:55:56 2001 (3B7D92EC)
f58b2000 f58d8e00 kmixer kmixer.sys Fri Aug 17 17:00:45 2001 (3B7D85FD)
f5a06000 f5a96dc0 NavEx15 NavEx15.Sys Fri Feb 06 15:30:49 2004 (4023F979)
f5beb000 f5c048a0 Slnthal Slnthal.sys Mon Nov 26 12:02:08 2001 (3C027590)
f5c05000 f5df8b20 Mtlstrm Mtlstrm.sys Mon Nov 26 12:08:20 2001 (3C027704)
f686b000 f68bc000 SAVRT SAVRT.SYS Sat Nov 01 06:26:37 2003 (3FA3986D)
f68bc000 f68be640 SYMREDRV SYMREDRV.SYS Fri Aug 15 21:05:41 2003 (3F3D8365)
f690c000 f691ec20 SYMEVENT SYMEVENT.SYS Wed Aug 06 21:32:39 2003 (3F31AC37)
f6b27000 f6b77a80 srv srv.sys Fri Aug 17 21:32:06 2001 (3B7DC596)
f6e1b000 f6e2e700 wdmaud wdmaud.sys Fri Aug 17 23:42:48 2001 (3B7DE438)
f6e2f000 f6e52580 Fastfat Fastfat.SYS Fri Aug 17 23:39:54 2001 (3B7DE38A)
f6e7b000 f6ea5280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001 (3B7D838C)
f6ed6000 f6ede6e0 NPDRIVER NPDRIVER.SYS Wed Aug 14 02:39:06 2002 (3D59FB0A)
f6f36000 f6f45400 NAVENG NAVENG.Sys Fri Feb 06 15:34:45 2004 (4023FA65)
f703e000 f704c080 sysaudio sysaudio.sys Fri Aug 17 23:47:26 2001 (3B7DE54E)
f728e000 f72b9300 SYMTDI SYMTDI.SYS Fri Aug 15 21:05:29 2003 (3F3D8359)
f72e2000 f7301e80 afd afd.sys Fri Aug 17 21:30:36 2001 (3B7DC53C)
f735e000 f7360f80 ndisuio ndisuio.sys Fri Aug 17 16:53:53 2001 (3B7D8461)
f8042000 f8057280 dump_atapi dump_atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
f8058000 f80bb880 mrxsmb mrxsmb.sys Fri Aug 17 23:31:45 2001 (3B7DE1A1)
f80e4000 f810c000 rdbss rdbss.sys Fri Aug 17 23:44:30 2001 (3B7DE49E)
f81ac000 f81d0b00 netbt netbt.sys Fri Aug 17 21:32:18 2001 (3B7DC5A2)
f81d1000 f8220e00 tcpip tcpip.sys Fri Aug 17 21:31:44 2001 (3B7DC580)
f92a9000 f92ca780 update update.sys Fri Aug 17 23:53:56 2001 (3B7DE6D4)
f92cb000 f92f7580 rdpdr rdpdr.sys Fri Aug 17 16:50:45 2001 (3B7D83A5)
f92f8000 f9308180 psched psched.sys Fri Aug 17 16:54:25 2001 (3B7D8481)
f93bd000 f93c0900 watchdog watchdog.sys Fri Aug 17 16:59:35 2001 (3B7D85B7)
f93d1000 f93e6900 ndiswan ndiswan.sys Fri Aug 17 21:30:58 2001 (3B7DC552)
f93e7000 f93fc000 Mtlmnt5 Mtlmnt5.sys Thu Nov 29 08:45:36 2001 (3C063C00)
f93fc000 f9417300 slntamr slntamr.sys Tue Jan 29 05:28:24 2002 (3C567948)
f9418000 f9438f80 portcls portcls.sys Fri Aug 17 23:31:59 2001 (3B7DE1AF)
f9439000 f9457180 USBPORT USBPORT.SYS Fri Aug 17 17:03:07 2001 (3B7D868B)
f9458000 f9478c00 ks ks.sys Fri Aug 17 23:24:52 2001 (3B7DE004)
f9479000 f948b980 parport parport.sys Fri Aug 17 16:50:05 2001 (3B7D837D)
f94a9000 f94df480 trid3dm trid3dm.sys Thu May 17 17:15:16 2001 (3B043F64)
f94f0000 f94f2280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f9500000 f9502600 gameenum gameenum.sys Fri Aug 17 17:02:29 2001 (3B7D8665)
f9528000 f9537400 pci pci.sys Fri Aug 17 16:58:04 2001 (3B7D855C)
f9538000 f9540c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f9548000 f9551280 MountMgr MountMgr.sys Fri Aug 17 16:47:36 2001 (3B7D82E8)
f9558000 f9564000 VolSnap VolSnap.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f9568000 f9570380 disk disk.sys Fri Aug 17 16:52:31 2001 (3B7D840F)
f9578000 f9582f80 CLASSPNP CLASSPNP.SYS Fri Aug 17 21:32:31 2001 (3B7DC5AF)
f9588000 f9597940 vvoice vvoice.sys Tue Jul 09 14:05:43 2002 (3D2B25F7)
f95b8000 f95c0200 wanarp wanarp.sys Fri Aug 17 16:55:23 2001 (3B7D84BB)
f95c8000 f95d0880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f95d8000 f95e7300 Cdfs Cdfs.SYS Fri Aug 17 23:33:34 2001 (3B7DE20E)
f9658000 f9660800 p3 p3.sys Fri Aug 17 16:48:34 2001 (3B7D8322)
f9668000 f9677e00 VIDEOPRT VIDEOPRT.SYS Fri Aug 17 16:57:42 2001 (3B7D8546)
f9678000 f9684700 i8042prt i8042prt.sys Fri Aug 17 23:44:51 2001 (3B7DE4B3)
f9688000 f9697400 serial serial.sys Fri Aug 17 23:27:19 2001 (3B7DE097)
f9698000 f96a1980 Imapi Imapi.SYS Fri Aug 17 16:53:17 2001 (3B7D843D)
f96a8000 f96b3980 cdrom cdrom.sys Fri Aug 17 16:52:25 2001 (3B7D8409)
f96b8000 f96c5a00 redbook redbook.sys Fri Aug 17 16:51:37 2001 (3B7D83D9)
f96c8000 f96d0980 ac97via ac97via.sys Thu Jul 19 18:29:58 2001 (3B575F66)
f96d8000 f96e6000 drmk drmk.sys Fri Aug 17 17:01:08 2001 (3B7D8614)
f96e8000 f96f3e00 rasl2tp rasl2tp.sys Fri Aug 17 21:30:47 2001 (3B7DC547)
f96f8000 f9701800 raspppoe raspppoe.sys Fri Aug 17 16:55:33 2001 (3B7D84C5)
f9708000 f9713580 raspptp raspptp.sys Fri Aug 17 21:30:51 2001 (3B7DC54B)
f9718000 f9720400 msgpc msgpc.sys Fri Aug 17 16:54:19 2001 (3B7D847B)
f9728000 f9731380 termdd termdd.sys Fri Aug 17 16:46:42 2001 (3B7D82B2)
f9738000 f9741480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f9768000 f9774600 usbhub usbhub.sys Fri Aug 17 17:03:11 2001 (3B7D868F)
f9778000 f9785b00 ipsec ipsec.sys Fri Aug 17 21:30:42 2001 (3B7DC542)
f9788000 f9790180 netbios netbios.sys Fri Aug 17 16:54:00 2001 (3B7D8468)
f9798000 f97a8000 SAVRTPEL SAVRTPEL.SYS Sat Nov 01 06:26:40 2003 (3FA39870)
f97a8000 f97adc80 PCIIDEX PCIIDEX.SYS Fri Aug 17 16:51:46 2001 (3B7D83E2)
f97b0000 f97b4900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f97b8000 f97beb00 viaagp viaagp.sys Fri Aug 17 16:58:00 2001 (3B7D8558)
f9808000 f980d600 mouclass mouclass.sys Fri Aug 17 16:47:50 2001 (3B7D82F6)
f9810000 f9815b80 kbdclass kbdclass.sys Fri Aug 17 16:47:47 2001 (3B7D82F3)
f9818000 f9819000 fdc fdc.sys unavailable (00000000)
f9820000 f9824a00 usbuhci usbuhci.sys Fri Aug 17 17:03:04 2001 (3B7D8688)
f9828000 f982f080 Modem Modem.SYS Fri Aug 17 16:57:35 2001 (3B7D853F)
f9830000 f9834580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f9838000 f983c080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f9840000 f9845020 wanatw4 wanatw4.sys Tue Jul 16 11:23:14 2002 (3D343A62)
f9848000 f984cd00 flpydisk flpydisk.sys Fri Aug 17 16:51:21 2001 (3B7D83C9)
f9858000 f985cc80 vga vga.sys Fri Aug 17 16:57:51 2001 (3B7D854F)
f9860000 f9864680 Msfs Msfs.SYS Fri Aug 17 16:50:02 2001 (3B7D837A)
f9868000 f986f380 Npfs Npfs.SYS Fri Aug 17 16:50:03 2001 (3B7D837B)
f9938000 f993b000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f99c8000 f99cba80 serenum serenum.sys Fri Aug 17 16:50:13 2001 (3B7D8385)
f99d0000 f99d35c0 SlWdmSup SlWdmSup.sys Sun Jul 04 08:24:10 1999 (377F526A)
f99e8000 f99ea580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f99f4000 f99f7f80 TDI TDI.SYS Fri Aug 17 16:57:25 2001 (3B7D8535)
f9a0c000 f9a0ff00 MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001 (3B7D8541)
f9a28000 f9a29b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f9a2a000 f9a2b100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f9a2c000 f9a2d100 viaide viaide.sys Fri Aug 17 16:51:54 2001 (3B7D83EA)
f9a2e000 f9a2f700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
f9a3e000 f9a3f280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f9a40000 f9a41f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f9a42000 f9a43080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f9a44000 f9a45080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f9a46000 f9a47080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f9a4a000 f9a4b100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001
(3B7D878B)
f9a72000 f9a73a80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001 (3B7D836D)
f9a96000 f9a97d40 ASCTRM ASCTRM.SYS Mon Feb 05 12:50:30 2001 (3A7EE7E6)
f9bc7000 f9bc7c00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)
f9bd0000 f9bd0f00 swenum swenum.sys Fri Aug 17 16:48:47 2001 (3B7D832F)
f9bee000 f9beeb80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f9c32000 f9c32d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
f9c6e000 f9c6e7a0 symlcbrd symlcbrd.sys Wed Oct 16 02:50:27 2002 (3DAD0C33)

Unloaded modules:
f58d9000 f5a06000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5a97000 f5abe000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5abe000 f5beb000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6089000 f6099000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5e99000 f5f2a000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5c05000 f5df9000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5beb000 f5c05000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9920000 f9925000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9910000 f9915000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5abe000 f5beb000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f98f8000 f98fd000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5dd2000 f5df9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5bde000 f5dd2000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5bc4000 f5bde000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f98e0000 f98e5000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5a97000 f5bc4000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f98d8000 f98dd000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f98d0000 f98d5000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9850000 f9855000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5ff2000 f6019000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f97f0000 f97f5000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f97d8000 f97dd000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6200000 f63f4000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f61e6000 f6200000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6c88000 f6c98000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f67da000 f686b000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f60b9000 f61e6000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f63f4000 f641b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9880000 f9885000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f97e8000 f97ed000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6533000 f655a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9928000 f992d000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9918000 f991d000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9908000 f990d000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6dd8000 f6dff000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9c04000 f9c05000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6dff000 f6e1b000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f701e000 f702b000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f702e000 f703c000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9a76000 f9a78000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9850000 f9855000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f94f4000 f94f7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

Does anyone know to run the driver verification. There seems to be a
currupt driver in the system pool. Am I on the right track?

 

[Li'l Roberto]

unsigned driver verification tool
http://support.microsoft.com/?kbid=308514

rgds
Li'l Roberto

My windows xp pro. pc rebooted due to a bug check. The dump file is
as
follows:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini052104-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt
Built by: 2600.xpclient.010817-1148
Kernel base = 0x804d0000 PsLoadedModuleList = 0x80545b28
Debug session time: Fri May 21 19:24:53.277 2004 (GMT-4)
System Uptime: 0 days 0:23:46.496
Loading Kernel Symbols
.......................................................................................................................
Loading unloaded module list
..........................................
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {1, 2, 1, 80537345}

Probably caused by : Pool_Corruption ( nt!ExFreePool+b )

Followup: Pool_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid)
address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't
turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000001, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80537345, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: Mtlstrm

BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExFreePoolWithTag+4a8
80537345 8902 mov [edx],eax

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 80537149 to 80537345

TRAP_FRAME: f64f2c14 -- (.trap fffffffff64f2c14)
.trap fffffffff64f2c14
ErrCode = 00000002
eax=00000002 ebx=ffafabd8 ecx=000001ff edx=00000001 esi=ffafa9b0
edi=80548f80
eip=80537345 esp=f64f2c88 ebp=f64f2cb4 iopl=0 nv up ei ng nz
ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010297
nt!ExFreePoolWithTag+0x4a8:
80537345 8902 mov [edx],eax
ds:0023:00000001=????????
.trap
Resetting default scope

STACK_TEXT:
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!ExFreePool+b
80537149 c20400 ret 0x4

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExFreePool+b

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap fffffffff64f2c14 ; kb

FAILURE_BUCKET_ID: 0xC5_2_nt!ExFreePool+b

BUCKET_ID: 0xC5_2_nt!ExFreePool+b

Followup: Pool_corruption
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=80537345
edi=00000001
eip=804fc1bb esp=f64f2be0 ebp=f64f2bf8 iopl=0 nv up ei ng nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KeBugCheckEx+0x19:
804fc1bb 5d pop ebp
ChildEBP RetAddr Args to Child
f64f2bf8 804d7c50 0000000a 00000001 00000002 nt!KeBugCheckEx+0x19
(FPO:
[Non-Fpo])
f64f2bf8 80537345 0000000a 00000001 00000002 nt!KiTrap0E+0x2ad (FPO:
[0,0]
TrapFrame @ f64f2c14)
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
(FPO: [Non-Fpo])
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb (FPO:
[1,0,0])
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
(FPO: [1,0,0])
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d (FPO: [Non-Fpo])
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c (FPO: [Non-Fpo])
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a (FPO: [Non-Fpo])
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112 (FPO: [Non-Fpo])
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65 (FPO: [1,0,3])
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc (FPO: [1,0,0])
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c (FPO: [0,0,3])
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc (FPO: [1,0,0])
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d0000 806b3f00 nt ntoskrnl.exe Fri Aug 17 23:39:59 2001
(3B7DE38F)
806b4000 806c7280 hal halacpi.dll Fri Aug 17 16:48:11 2001
(3B7D830B)
bad44000 bad5d600 Mup Mup.sys Fri Aug 17 23:21:29 2001
(3B7DDF39)
bad5e000 bae06be0 vmodem vmodem.sys Tue Jul 09 14:05:19 2002
(3D2B25DF)
bae07000 bae88da0 vpctcom vpctcom.sys Tue Jul 09 14:04:26 2002
(3D2B25AA)
bae89000 baeb0700 NDIS NDIS.sys Fri Aug 17 21:31:13 2001
(3B7DC561)
baeb1000 baf33400 Ntfs Ntfs.sys Fri Aug 17 21:33:04 2001
(3B7DC5D0)
baf34000 baf47780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001
(3B7D8379)
baf48000 baf59300 sr sr.sys Fri Aug 17 17:00:38 2001
(3B7D85F6)
baf5a000 baf6f280 atapi atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
baf70000 baf93b80 dmio dmio.sys Fri Aug 17 16:58:27 2001
(3B7D8573)
baf94000 bafb2880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001
(3B7D8419)
bafb3000 bafdec00 ACPI ACPI.sys Fri Aug 17 16:57:52 2001
(3B7D8550)
bf800000 bf9b7580 win32k win32k.sys Fri Aug 17 23:52:56 2001
(3B7DE698)
bff10000 bff5d080 trid3d trid3d.dll Fri Aug 17 17:56:04 2001
(3B7D92F4)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 17:55:56 2001
(3B7D92EC)
bffa0000 bffe2980 ATMFD ATMFD.DLL Fri Aug 17 17:55:56 2001
(3B7D92EC)
f58b2000 f58d8e00 kmixer kmixer.sys Fri Aug 17 17:00:45 2001
(3B7D85FD)
f5a06000 f5a96dc0 NavEx15 NavEx15.Sys Fri Feb 06 15:30:49 2004
(4023F979)
f5beb000 f5c048a0 Slnthal Slnthal.sys Mon Nov 26 12:02:08 2001
(3C027590)
f5c05000 f5df8b20 Mtlstrm Mtlstrm.sys Mon Nov 26 12:08:20 2001
(3C027704)
f686b000 f68bc000 SAVRT SAVRT.SYS Sat Nov 01 06:26:37 2003
(3FA3986D)
f68bc000 f68be640 SYMREDRV SYMREDRV.SYS Fri Aug 15 21:05:41 2003
(3F3D8365)
f690c000 f691ec20 SYMEVENT SYMEVENT.SYS Wed Aug 06 21:32:39 2003
(3F31AC37)
f6b27000 f6b77a80 srv srv.sys Fri Aug 17 21:32:06 2001
(3B7DC596)
f6e1b000 f6e2e700 wdmaud wdmaud.sys Fri Aug 17 23:42:48 2001
(3B7DE438)
f6e2f000 f6e52580 Fastfat Fastfat.SYS Fri Aug 17 23:39:54 2001
(3B7DE38A)
f6e7b000 f6ea5280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001
(3B7D838C)
f6ed6000 f6ede6e0 NPDRIVER NPDRIVER.SYS Wed Aug 14 02:39:06 2002
(3D59FB0A)
f6f36000 f6f45400 NAVENG NAVENG.Sys Fri Feb 06 15:34:45 2004
(4023FA65)
f703e000 f704c080 sysaudio sysaudio.sys Fri Aug 17 23:47:26 2001
(3B7DE54E)
f728e000 f72b9300 SYMTDI SYMTDI.SYS Fri Aug 15 21:05:29 2003
(3F3D8359)
f72e2000 f7301e80 afd afd.sys Fri Aug 17 21:30:36 2001
(3B7DC53C)
f735e000 f7360f80 ndisuio ndisuio.sys Fri Aug 17 16:53:53 2001
(3B7D8461)
f8042000 f8057280 dump_atapi dump_atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
f8058000 f80bb880 mrxsmb mrxsmb.sys Fri Aug 17 23:31:45 2001
(3B7DE1A1)
f80e4000 f810c000 rdbss rdbss.sys Fri Aug 17 23:44:30 2001
(3B7DE49E)
f81ac000 f81d0b00 netbt netbt.sys Fri Aug 17 21:32:18 2001
(3B7DC5A2)
f81d1000 f8220e00 tcpip tcpip.sys Fri Aug 17 21:31:44 2001
(3B7DC580)
f92a9000 f92ca780 update update.sys Fri Aug 17 23:53:56 2001
(3B7DE6D4)
f92cb000 f92f7580 rdpdr rdpdr.sys Fri Aug 17 16:50:45 2001
(3B7D83A5)
f92f8000 f9308180 psched psched.sys Fri Aug 17 16:54:25 2001
(3B7D8481)
f93bd000 f93c0900 watchdog watchdog.sys Fri Aug 17 16:59:35 2001
(3B7D85B7)
f93d1000 f93e6900 ndiswan ndiswan.sys Fri Aug 17 21:30:58 2001
(3B7DC552)
f93e7000 f93fc000 Mtlmnt5 Mtlmnt5.sys Thu Nov 29 08:45:36 2001
(3C063C00)
f93fc000 f9417300 slntamr slntamr.sys Tue Jan 29 05:28:24 2002
(3C567948)
f9418000 f9438f80 portcls portcls.sys Fri Aug 17 23:31:59 2001
(3B7DE1AF)
f9439000 f9457180 USBPORT USBPORT.SYS Fri Aug 17 17:03:07 2001
(3B7D868B)
f9458000 f9478c00 ks ks.sys Fri Aug 17 23:24:52 2001
(3B7DE004)
f9479000 f948b980 parport parport.sys Fri Aug 17 16:50:05 2001
(3B7D837D)
f94a9000 f94df480 trid3dm trid3dm.sys Thu May 17 17:15:16 2001
(3B043F64)
f94f0000 f94f2280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001
(3B7D84CB)
f9500000 f9502600 gameenum gameenum.sys Fri Aug 17 17:02:29 2001
(3B7D8665)
f9528000 f9537400 pci pci.sys Fri Aug 17 16:58:04 2001
(3B7D855C)
f9538000 f9540c00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001
(3B7D8559)
f9548000 f9551280 MountMgr MountMgr.sys Fri Aug 17 16:47:36 2001
(3B7D82E8)
f9558000 f9564000 VolSnap VolSnap.sys Fri Aug 17 16:53:19 2001
(3B7D843F)
f9568000 f9570380 disk disk.sys Fri Aug 17 16:52:31 2001
(3B7D840F)
f9578000 f9582f80 CLASSPNP CLASSPNP.SYS Fri Aug 17 21:32:31 2001
(3B7DC5AF)
f9588000 f9597940 vvoice vvoice.sys Tue Jul 09 14:05:43 2002
(3D2B25F7)
f95b8000 f95c0200 wanarp wanarp.sys Fri Aug 17 16:55:23 2001
(3B7D84BB)
f95c8000 f95d0880 Fips Fips.SYS Fri Aug 17 21:31:49 2001
(3B7DC585)
f95d8000 f95e7300 Cdfs Cdfs.SYS Fri Aug 17 23:33:34 2001
(3B7DE20E)
f9658000 f9660800 p3 p3.sys Fri Aug 17 16:48:34 2001
(3B7D8322)
f9668000 f9677e00 VIDEOPRT VIDEOPRT.SYS Fri Aug 17 16:57:42 2001
(3B7D8546)
f9678000 f9684700 i8042prt i8042prt.sys Fri Aug 17 23:44:51 2001
(3B7DE4B3)
f9688000 f9697400 serial serial.sys Fri Aug 17 23:27:19 2001
(3B7DE097)
f9698000 f96a1980 Imapi Imapi.SYS Fri Aug 17 16:53:17 2001
(3B7D843D)
f96a8000 f96b3980 cdrom cdrom.sys Fri Aug 17 16:52:25 2001
(3B7D8409)
f96b8000 f96c5a00 redbook redbook.sys Fri Aug 17 16:51:37 2001
(3B7D83D9)
f96c8000 f96d0980 ac97via ac97via.sys Thu Jul 19 18:29:58 2001
(3B575F66)
f96d8000 f96e6000 drmk drmk.sys Fri Aug 17 17:01:08 2001
(3B7D8614)
f96e8000 f96f3e00 rasl2tp rasl2tp.sys Fri Aug 17 21:30:47 2001
(3B7DC547)
f96f8000 f9701800 raspppoe raspppoe.sys Fri Aug 17 16:55:33 2001
(3B7D84C5)
f9708000 f9713580 raspptp raspptp.sys Fri Aug 17 21:30:51 2001
(3B7DC54B)
f9718000 f9720400 msgpc msgpc.sys Fri Aug 17 16:54:19 2001
(3B7D847B)
f9728000 f9731380 termdd termdd.sys Fri Aug 17 16:46:42 2001
(3B7D82B2)
f9738000 f9741480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001
(3B7D84C2)
f9768000 f9774600 usbhub usbhub.sys Fri Aug 17 17:03:11 2001
(3B7D868F)
f9778000 f9785b00 ipsec ipsec.sys Fri Aug 17 21:30:42 2001
(3B7DC542)
f9788000 f9790180 netbios netbios.sys Fri Aug 17 16:54:00 2001
(3B7D8468)
f9798000 f97a8000 SAVRTPEL SAVRTPEL.SYS Sat Nov 01 06:26:40 2003
(3FA39870)
f97a8000 f97adc80 PCIIDEX PCIIDEX.SYS Fri Aug 17 16:51:46 2001
(3B7D83E2)
f97b0000 f97b4900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001
(3B7DC5A7)
f97b8000 f97beb00 viaagp viaagp.sys Fri Aug 17 16:58:00 2001
(3B7D8558)
f9808000 f980d600 mouclass mouclass.sys Fri Aug 17 16:47:50 2001
(3B7D82F6)
f9810000 f9815b80 kbdclass kbdclass.sys Fri Aug 17 16:47:47 2001
(3B7D82F3)
f9818000 f9819000 fdc fdc.sys unavailable (00000000)
f9820000 f9824a00 usbuhci usbuhci.sys Fri Aug 17 17:03:04 2001
(3B7D8688)
f9828000 f982f080 Modem Modem.SYS Fri Aug 17 16:57:35 2001
(3B7D853F)
f9830000 f9834580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001
(3B7D8371)
f9838000 f983c080 raspti raspti.sys Fri Aug 17 16:55:32 2001
(3B7D84C4)
f9840000 f9845020 wanatw4 wanatw4.sys Tue Jul 16 11:23:14 2002
(3D343A62)
f9848000 f984cd00 flpydisk flpydisk.sys Fri Aug 17 16:51:21 2001
(3B7D83C9)
f9858000 f985cc80 vga vga.sys Fri Aug 17 16:57:51 2001
(3B7D854F)
f9860000 f9864680 Msfs Msfs.SYS Fri Aug 17 16:50:02 2001
(3B7D837A)
f9868000 f986f380 Npfs Npfs.SYS Fri Aug 17 16:50:03 2001
(3B7D837B)
f9938000 f993b000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001
(3B7D8345)
f99c8000 f99cba80 serenum serenum.sys Fri Aug 17 16:50:13 2001
(3B7D8385)
f99d0000 f99d35c0 SlWdmSup SlWdmSup.sys Sun Jul 04 08:24:10 1999
(377F526A)
f99e8000 f99ea580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001
(3B7D84C1)
f99f4000 f99f7f80 TDI TDI.SYS Fri Aug 17 16:57:25 2001
(3B7D8535)
f9a0c000 f9a0ff00 MODEMCSA MODEMCSA.sys Fri Aug 17 16:57:37 2001
(3B7D8541)
f9a28000 f9a29b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001
(3B7D8346)
f9a2a000 f9a2b100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001
(3B7D878B)
f9a2c000 f9a2d100 viaide viaide.sys Fri Aug 17 16:51:54 2001
(3B7D83EA)
f9a2e000 f9a2f700 dmload dmload.sys Fri Aug 17 16:58:15 2001
(3B7D8567)
f9a3e000 f9a3f280 USBD USBD.SYS Fri Aug 17 17:02:58 2001
(3B7D8682)
f9a40000 f9a41f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001
(3B7D8361)
f9a42000 f9a43080 Beep Beep.SYS Fri Aug 17 16:47:33 2001
(3B7D82E5)
f9a44000 f9a45080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001
(3B7D8538)
f9a46000 f9a47080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001
(3B7D82C0)
f9a4a000 f9a4b100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23
2001
(3B7D878B)
f9a72000 f9a73a80 ParVdm ParVdm.SYS Fri Aug 17 16:49:49 2001
(3B7D836D)
f9a96000 f9a97d40 ASCTRM ASCTRM.SYS Mon Feb 05 12:50:30 2001
(3A7EE7E6)
f9bc7000 f9bc7c00 audstub audstub.sys Fri Aug 17 16:59:40 2001
(3B7D85BC)
f9bd0000 f9bd0f00 swenum swenum.sys Fri Aug 17 16:48:47 2001
(3B7D832F)
f9bee000 f9beeb80 Null Null.SYS Fri Aug 17 16:47:39 2001
(3B7D82EB)
f9c32000 f9c32d00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001
(3B7D8438)
f9c6e000 f9c6e7a0 symlcbrd symlcbrd.sys Wed Oct 16 02:50:27 2002
(3DAD0C33)

Unloaded modules:
f58d9000 f5a06000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5a97000 f5abe000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5abe000 f5beb000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6089000 f6099000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5e99000 f5f2a000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5c05000 f5df9000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5beb000 f5c05000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9920000 f9925000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9910000 f9915000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5abe000 f5beb000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f98f8000 f98fd000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5dd2000 f5df9000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5bde000 f5dd2000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f5bc4000 f5bde000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f98e0000 f98e5000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5a97000 f5bc4000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f98d8000 f98dd000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f98d0000 f98d5000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9850000 f9855000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f5ff2000 f6019000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f97f0000 f97f5000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f97d8000 f97dd000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6200000 f63f4000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f61e6000 f6200000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6c88000 f6c98000 NAVENG.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f67da000 f686b000 NavEx15.Sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f60b9000 f61e6000 v90drv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f63f4000 f641b000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9880000 f9885000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f97e8000 f97ed000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6533000 f655a000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9928000 f992d000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9918000 f991d000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f9908000 f990d000 ATWPKT2.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6dd8000 f6dff000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9c04000 f9c05000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6dff000 f6e1b000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f701e000 f702b000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f702e000 f703c000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9a76000 f9a78000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f9850000 f9855000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f94f4000 f94f7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

Does anyone know to run the driver verification. There seems to be a
currupt driver in the system pool. Am I on the right track?

 

[Guest]

Thanks Li'l R. Do you know where I can get information on the use of gflags.
--
Cheers.....

unsigned driver verification tool
http://support.microsoft.com/?kbid=308514

rgds
Li'l Roberto

My windows xp pro. pc rebooted due to a bug check. The dump file is
as
follows:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini052104-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt
Built by: 2600.xpclient.010817-1148
Kernel base = 0x804d0000 PsLoadedModuleList = 0x80545b28
Debug session time: Fri May 21 19:24:53.277 2004 (GMT-4)
System Uptime: 0 days 0:23:46.496
Loading Kernel Symbols
.......................................................................................................................
Loading unloaded module list
..........................................
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {1, 2, 1, 80537345}

Probably caused by : Pool_Corruption ( nt!ExFreePool+b )

Followup: Pool_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid)
address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't
turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000001, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80537345, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: Mtlstrm

BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExFreePoolWithTag+4a8
80537345 8902 mov [edx],eax

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 80537149 to 80537345

TRAP_FRAME: f64f2c14 -- (.trap fffffffff64f2c14)
.trap fffffffff64f2c14
ErrCode = 00000002
eax=00000002 ebx=ffafabd8 ecx=000001ff edx=00000001 esi=ffafa9b0
edi=80548f80
eip=80537345 esp=f64f2c88 ebp=f64f2cb4 iopl=0 nv up ei ng nz
ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010297
nt!ExFreePoolWithTag+0x4a8:
80537345 8902 mov [edx],eax
ds:0023:00000001=????????
.trap
Resetting default scope

STACK_TEXT:
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!ExFreePool+b
80537149 c20400 ret 0x4

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExFreePool+b

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap fffffffff64f2c14 ; kb

FAILURE_BUCKET_ID: 0xC5_2_nt!ExFreePool+b

BUCKET_ID: 0xC5_2_nt!ExFreePool+b

Followup: Pool_corruption
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=80537345
edi=00000001
eip=804fc1bb esp=f64f2be0 ebp=f64f2bf8 iopl=0 nv up ei ng nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KeBugCheckEx+0x19:
804fc1bb 5d pop ebp
ChildEBP RetAddr Args to Child
f64f2bf8 804d7c50 0000000a 00000001 00000002 nt!KeBugCheckEx+0x19
(FPO:
[Non-Fpo])
f64f2bf8 80537345 0000000a 00000001 00000002 nt!KiTrap0E+0x2ad (FPO:
[0,0]
TrapFrame @ f64f2c14)
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
(FPO: [Non-Fpo])
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb (FPO:
[1,0,0])
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
(FPO: [1,0,0])
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d (FPO: [Non-Fpo])
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c (FPO: [Non-Fpo])
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a (FPO: [Non-Fpo])
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112 (FPO: [Non-Fpo])
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65 (FPO: [1,0,3])
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc (FPO: [1,0,0])
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c (FPO: [0,0,3])
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc (FPO: [1,0,0])
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d0000 806b3f00 nt ntoskrnl.exe Fri Aug 17 23:39:59 2001
(3B7DE38F)
806b4000 806c7280 hal halacpi.dll Fri Aug 17 16:48:11 2001
(3B7D830B)
bad44000 bad5d600 Mup Mup.sys Fri Aug 17 23:21:29 2001
(3B7DDF39)
bad5e000 bae06be0 vmodem vmodem.sys Tue Jul 09 14:05:19 2002
(3D2B25DF)
bae07000 bae88da0 vpctcom vpctcom.sys Tue Jul 09 14:04:26 2002
(3D2B25AA)
bae89000 baeb0700 NDIS NDIS.sys Fri Aug 17 21:31:13 2001
(3B7DC561)
baeb1000 baf33400 Ntfs Ntfs.sys Fri Aug 17 21:33:04 2001
(3B7DC5D0)
baf34000 baf47780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001
(3B7D8379)
baf48000 baf59300 sr sr.sys Fri Aug 17 17:00:38 2001
(3B7D85F6)
baf5a000 baf6f280 atapi atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
baf70000 baf93b80 dmio dmio.sys Fri Aug 17 16:58:27 2001
(3B7D8573)
baf94000 bafb2880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001
(3B7D8419)
bafb3000 bafdec00 ACPI ACPI.sys Fri Aug 17 16:57:52 2001
(3B7D8550)
bf800000 bf9b7580 win32k win32k.sys Fri Aug 17 23:52:56 2001
(3B7DE698)
bff10000 bff5d080 trid3d trid3d.dll Fri Aug 17 17:56:04 2001
(3B7D92F4)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 17:55:56 2001
(3B7D92EC)
bffa0000 bffe2980 ATMFD ATMFD.DLL Fri Aug 17 17:55:56 2001
(3B7D92EC)
f58b2000 f58d8e00 kmixer kmixer.sys Fri Aug 17 17:00:45 2001
(3B7D85FD)
f5a06000 f5a96dc0 NavEx15 NavEx15.Sys Fri Feb 06 15:30:49 2004
(4023F979)
f5beb000 f5c048a0 Slnthal Slnthal.sys Mon Nov 26 12:02:08 2001
(3C027590)
f5c05000 f5df8b20 Mtlstrm Mtlstrm.sys Mon Nov 26 12:08:20 2001
(3C027704)
f686b000 f68bc000 SAVRT SAVRT.SYS Sat Nov 01 06:26:37 2003
(3FA3986D)
f68bc000 f68be640 SYMREDRV SYMREDRV.SYS Fri Aug 15 21:05:41 2003
(3F3D8365)
f690c000 f691ec20 SYMEVENT SYMEVENT.SYS Wed Aug 06 21:32:39 2003
(3F31AC37)
f6b27000 f6b77a80 srv srv.sys Fri Aug 17 21:32:06 2001
(3B7DC596)
f6e1b000 f6e2e700 wdmaud wdmaud.sys Fri Aug 17 23:42:48 2001
(3B7DE438)
f6e2f000 f6e52580 Fastfat Fastfat.SYS Fri Aug 17 23:39:54 2001
(3B7DE38A)
f6e7b000 f6ea5280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001
(3B7D838C)
f6ed6000 f6ede6e0 NPDRIVER NPDRIVER.SYS Wed Aug 14 02:39:06 2002
(3D59FB0A)
f6f36000 f6f45400 NAVENG NAVENG.Sys Fri Feb 06 15:34:45 2004
(4023FA65)
f703e000 f704c080 sysaudio sysaudio.sys Fri Aug 17 23:47:26 2001
(3B7DE54E)
f728e000 f72b9300 SYMTDI SYMTDI.SYS Fri Aug 15 21:05:29 2003
(3F3D8359)
f72e2000 f7301e80 afd afd.sys Fri Aug 17 21:30:36 2001
(3B7DC53C)
f735e000 f7360f80 ndisuio ndisuio.sys Fri Aug 17 16:53:53 2001
(3B7D8461)
f8042000 f8057280 dump_atapi dump_atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
f8058000 f80bb880 mrxsmb mrxsmb.sys Fri Aug 17 23:31:45 2001
(3B7DE1A1)
f80e4000 f810c000 rdbss rdbss.sys Fri Aug 17 23:44:30 2001
(3B7DE49E)
f81ac000 f81d0b00 netbt netbt.sys Fri Aug 17 21:32:18 2001
(3B7DC5A2)
f81d1000 f8220e00 tcpip tcpip.sys Fri Aug 17 21:31:44 2001
(3B7DC580)
f92a9000 f92ca780 update update.sys Fri Aug 17 23:53:56 2001
(3B7DE6D4)
f92cb000 f92f7580 rdpdr rdpdr.sys Fri Aug 17 16:50:45 2001
(3B7D83A5)
f92f8000 f9308180 psched psched.sys Fri Aug 17 16:54:25 2001
(3B7D8481)
f93bd000 f93c0900 watchdog watchdog.sys Fri Aug 17 16:59:35 2001
(3B7D85B7)
f93d1000 f93e6900 ndiswan ndiswan.sys Fri Aug 17 21:30:58 2001
(3B7DC552)
f93e7000 f93fc000 Mtlmnt5 Mtlmnt5.sys Thu Nov 29 08:45:36 2001
(3C063C00)

 

[Li'l Roberto]

Try here
http://www.microsoft.com/technet/pr...Ref/b6af1963-3b75-42f2-860f-aff9354aefde.mspx

rgds
Li'l Roberto

Thanks Li'l R. Do you know where I can get information on the use of
gflags.
--
Cheers.....

unsigned driver verification tool
http://support.microsoft.com/?kbid=308514

rgds
Li'l Roberto

My windows xp pro. pc rebooted due to a bug check. The dump file
is
as
follows:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini052104-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt
Built by: 2600.xpclient.010817-1148
Kernel base = 0x804d0000 PsLoadedModuleList = 0x80545b28
Debug session time: Fri May 21 19:24:53.277 2004 (GMT-4)
System Uptime: 0 days 0:23:46.496
Loading Kernel Symbols
.......................................................................................................................
Loading unloaded module list
..........................................
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {1, 2, 1, 80537345}

Probably caused by : Pool_Corruption ( nt!ExFreePool+b )

Followup: Pool_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid)
address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the
driver
verifier against any new (or suspect) drivers, and if that doesn't
turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000001, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80537345, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: Mtlstrm

BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExFreePoolWithTag+4a8
80537345 8902 mov [edx],eax

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 80537149 to 80537345

TRAP_FRAME: f64f2c14 -- (.trap fffffffff64f2c14)
.trap fffffffff64f2c14
ErrCode = 00000002
eax=00000002 ebx=ffafabd8 ecx=000001ff edx=00000001 esi=ffafa9b0
edi=80548f80
eip=80537345 esp=f64f2c88 ebp=f64f2cb4 iopl=0 nv up ei ng
nz
ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010297
nt!ExFreePoolWithTag+0x4a8:
80537345 8902 mov [edx],eax
ds:0023:00000001=????????
.trap
Resetting default scope

STACK_TEXT:
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000
nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!ExFreePool+b
80537149 c20400 ret 0x4

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExFreePool+b

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap fffffffff64f2c14 ; kb

FAILURE_BUCKET_ID: 0xC5_2_nt!ExFreePool+b

BUCKET_ID: 0xC5_2_nt!ExFreePool+b

Followup: Pool_corruption
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=80537345
edi=00000001
eip=804fc1bb esp=f64f2be0 ebp=f64f2bf8 iopl=0 nv up ei ng
nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KeBugCheckEx+0x19:
804fc1bb 5d pop ebp
ChildEBP RetAddr Args to Child
f64f2bf8 804d7c50 0000000a 00000001 00000002 nt!KeBugCheckEx+0x19
(FPO:
[Non-Fpo])
f64f2bf8 80537345 0000000a 00000001 00000002 nt!KiTrap0E+0x2ad
(FPO:
[0,0]
TrapFrame @ f64f2c14)
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
(FPO: [Non-Fpo])
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb
(FPO:
[1,0,0])
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
(FPO: [1,0,0])
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d (FPO: [Non-Fpo])
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c (FPO: [Non-Fpo])
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a (FPO: [Non-Fpo])
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112 (FPO: [Non-Fpo])
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65 (FPO: [1,0,3])
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc (FPO: [1,0,0])
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c (FPO: [0,0,3])
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc (FPO: [1,0,0])
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000
nt!KiThreadStartup+0x16
start end module name
804d0000 806b3f00 nt ntoskrnl.exe Fri Aug 17 23:39:59 2001
(3B7DE38F)
806b4000 806c7280 hal halacpi.dll Fri Aug 17 16:48:11 2001
(3B7D830B)
bad44000 bad5d600 Mup Mup.sys Fri Aug 17 23:21:29 2001
(3B7DDF39)
bad5e000 bae06be0 vmodem vmodem.sys Tue Jul 09 14:05:19 2002
(3D2B25DF)
bae07000 bae88da0 vpctcom vpctcom.sys Tue Jul 09 14:04:26 2002
(3D2B25AA)
bae89000 baeb0700 NDIS NDIS.sys Fri Aug 17 21:31:13 2001
(3B7DC561)
baeb1000 baf33400 Ntfs Ntfs.sys Fri Aug 17 21:33:04 2001
(3B7DC5D0)
baf34000 baf47780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001
(3B7D8379)
baf48000 baf59300 sr sr.sys Fri Aug 17 17:00:38 2001
(3B7D85F6)
baf5a000 baf6f280 atapi atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
baf70000 baf93b80 dmio dmio.sys Fri Aug 17 16:58:27 2001
(3B7D8573)
baf94000 bafb2880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001
(3B7D8419)
bafb3000 bafdec00 ACPI ACPI.sys Fri Aug 17 16:57:52 2001
(3B7D8550)
bf800000 bf9b7580 win32k win32k.sys Fri Aug 17 23:52:56 2001
(3B7DE698)
bff10000 bff5d080 trid3d trid3d.dll Fri Aug 17 17:56:04 2001
(3B7D92F4)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 17:55:56 2001
(3B7D92EC)
bffa0000 bffe2980 ATMFD ATMFD.DLL Fri Aug 17 17:55:56 2001
(3B7D92EC)
f58b2000 f58d8e00 kmixer kmixer.sys Fri Aug 17 17:00:45 2001
(3B7D85FD)
f5a06000 f5a96dc0 NavEx15 NavEx15.Sys Fri Feb 06 15:30:49 2004
(4023F979)
f5beb000 f5c048a0 Slnthal Slnthal.sys Mon Nov 26 12:02:08 2001
(3C027590)
f5c05000 f5df8b20 Mtlstrm Mtlstrm.sys Mon Nov 26 12:08:20 2001
(3C027704)
f686b000 f68bc000 SAVRT SAVRT.SYS Sat Nov 01 06:26:37 2003
(3FA3986D)
f68bc000 f68be640 SYMREDRV SYMREDRV.SYS Fri Aug 15 21:05:41 2003
(3F3D8365)
f690c000 f691ec20 SYMEVENT SYMEVENT.SYS Wed Aug 06 21:32:39 2003
(3F31AC37)
f6b27000 f6b77a80 srv srv.sys Fri Aug 17 21:32:06 2001
(3B7DC596)
f6e1b000 f6e2e700 wdmaud wdmaud.sys Fri Aug 17 23:42:48 2001
(3B7DE438)
f6e2f000 f6e52580 Fastfat Fastfat.SYS Fri Aug 17 23:39:54 2001
(3B7DE38A)
f6e7b000 f6ea5280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001
(3B7D838C)
f6ed6000 f6ede6e0 NPDRIVER NPDRIVER.SYS Wed Aug 14 02:39:06 2002
(3D59FB0A)
f6f36000 f6f45400 NAVENG NAVENG.Sys Fri Feb 06 15:34:45 2004
(4023FA65)
f703e000 f704c080 sysaudio sysaudio.sys Fri Aug 17 23:47:26 2001
(3B7DE54E)
f728e000 f72b9300 SYMTDI SYMTDI.SYS Fri Aug 15 21:05:29 2003
(3F3D8359)
f72e2000 f7301e80 afd afd.sys Fri Aug 17 21:30:36 2001
(3B7DC53C)
f735e000 f7360f80 ndisuio ndisuio.sys Fri Aug 17 16:53:53 2001
(3B7D8461)
f8042000 f8057280 dump_atapi dump_atapi.sys Fri Aug 17 16:51:49
2001
(3B7D83E5)
f8058000 f80bb880 mrxsmb mrxsmb.sys Fri Aug 17 23:31:45 2001
(3B7DE1A1)
f80e4000 f810c000 rdbss rdbss.sys Fri Aug 17 23:44:30 2001
(3B7DE49E)
f81ac000 f81d0b00 netbt netbt.sys Fri Aug 17 21:32:18 2001
(3B7DC5A2)
f81d1000 f8220e00 tcpip tcpip.sys Fri Aug 17 21:31:44 2001
(3B7DC580)
f92a9000 f92ca780 update update.sys Fri Aug 17 23:53:56 2001
(3B7DE6D4)
f92cb000 f92f7580 rdpdr rdpdr.sys Fri Aug 17 16:50:45 2001
(3B7D83A5)
f92f8000 f9308180 psched psched.sys Fri Aug 17 16:54:25 2001
(3B7D8481)
f93bd000 f93c0900 watchdog watchdog.sys Fri Aug 17 16:59:35 2001
(3B7D85B7)
f93d1000 f93e6900 ndiswan ndiswan.sys Fri Aug 17 21:30:58 2001
(3B7DC552)
f93e7000 f93fc000 Mtlmnt5 Mtlmnt5.sys Thu Nov 29 08:45:36 2001
(3C063C00)

 

[Joshua Smith [MSFT]]

Hi ANSA

Did you want the unsigned driver tool or Driver Verifier?
http://www.microsoft.com/whdc/DevTools/tools/Verifier.mspx

To determine what driver is causing the problem I need you to enable driver
verifier.
Steps:
1) Windows Key + R
2) Type in 'verifier' and hit enter
3) Make sure 'Create Standard Setting' is selected and hit next
4) Click on 'Select all drivers installed on this computer' and hit Finish
5) Reboot

There is a possibility that your computer will crash on reboot. If this
occurs hit F8 when rebooting just before the windows logo screen and select
the safe mode boot option. Follow the same steps above but on step 4 choose
'Select driver names from a list'; hit next; check the box next to any
driver where the provider is not Microsoft; hit Finish; reboot.

This will slow the performance of you computer a little while enabled but
will hopefully catch the driver causing corruption. Next time you crash
the blue screen will hopefully say something like
"DRIVER_VERIFIER_DETECTED_VIOLATION". If this occurs please send the
corresponding minidump (by default it is at c:\windows\Minidump ) my way if
you want. If you have any questions or I didn't explain something well
enough don't hesitate to e-mail me (remove "online") back. Good Luck,


Joshua Smith
OpenGL Test Lab
Microsoft
-----

Get Secure! www.microsoft.com/security

This posting is provided "AS IS" with no warranties, and confers no rights

Thanks Li'l R. Do you know where I can get information on the use of
gflags.
--
Cheers.....

unsigned driver verification tool
http://support.microsoft.com/?kbid=308514

rgds
Li'l Roberto

My windows xp pro. pc rebooted due to a bug check. The dump file is
as
follows:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.4.0007.2
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini052104-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is:
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 UP Free x86 compatible
Product: WinNt
Built by: 2600.xpclient.010817-1148
Kernel base = 0x804d0000 PsLoadedModuleList = 0x80545b28
Debug session time: Fri May 21 19:24:53.277 2004 (GMT-4)
System Uptime: 0 days 0:23:46.496
Loading Kernel Symbols
.......................................................................................................................
Loading unloaded module list
..........................................
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {1, 2, 1, 80537345}

Probably caused by : Pool_Corruption ( nt!ExFreePool+b )

Followup: Pool_corruption
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid)
address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't
turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000001, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80537345, address which referenced memory

Debugging Details:
------------------


OVERLAPPED_MODULE: Mtlstrm

BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExFreePoolWithTag+4a8
80537345 8902 mov [edx],eax

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 80537149 to 80537345

TRAP_FRAME: f64f2c14 -- (.trap fffffffff64f2c14)
.trap fffffffff64f2c14
ErrCode = 00000002
eax=00000002 ebx=ffafabd8 ecx=000001ff edx=00000001 esi=ffafa9b0
edi=80548f80
eip=80537345 esp=f64f2c88 ebp=f64f2cb4 iopl=0 nv up ei ng nz
ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010297
nt!ExFreePoolWithTag+0x4a8:
80537345 8902 mov [edx],eax
ds:0023:00000001=????????
.trap
Resetting default scope

STACK_TEXT:
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


FOLLOWUP_IP:
nt!ExFreePool+b
80537149 c20400 ret 0x4

SYMBOL_STACK_INDEX: 1

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExFreePool+b

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: .trap fffffffff64f2c14 ; kb

FAILURE_BUCKET_ID: 0xC5_2_nt!ExFreePool+b

BUCKET_ID: 0xC5_2_nt!ExFreePool+b

Followup: Pool_corruption
---------

eax=ffdff13c ebx=0000000a ecx=00000001 edx=40000000 esi=80537345
edi=00000001
eip=804fc1bb esp=f64f2be0 ebp=f64f2bf8 iopl=0 nv up ei ng nz
na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KeBugCheckEx+0x19:
804fc1bb 5d pop ebp
ChildEBP RetAddr Args to Child
f64f2bf8 804d7c50 0000000a 00000001 00000002 nt!KeBugCheckEx+0x19
(FPO:
[Non-Fpo])
f64f2bf8 80537345 0000000a 00000001 00000002 nt!KiTrap0E+0x2ad (FPO:
[0,0]
TrapFrame @ f64f2c14)
f64f2cb4 80537149 00000001 00000000 f93f6b23
nt!ExFreePoolWithTag+0x4a8
(FPO: [Non-Fpo])
f64f2cc0 f93f6b23 ffafa9b8 f93ed213 ffafa9b8 nt!ExFreePool+0xb (FPO:
[1,0,0])
f64f2cc8 f93ed213 ffafa9b8 00000001 ffa0c680 Mtlmnt5!operator
delete+0xf
(FPO: [1,0,0])
f64f2cec f93eac66 ffafa9b8 f64f2d14 00000003
Mtlmnt5!clModem:rocess_sUD_Command+0x6d (FPO: [Non-Fpo])
f64f2d08 f93ea866 ffa0c7cc 00000000 00000000
Mtlmnt5!clModem:rocessCommandLine+0x37c (FPO: [Non-Fpo])
f64f2d28 f93ea76f ffa0c7c4 00000008 ffa0c680
Mtlmnt5!clModem::AnalizeCommandLine+0x6a (FPO: [Non-Fpo])
f64f2d78 f93ea643 00000000 00000000 ffa0cc10
Mtlmnt5!clModem::CommandModeSupport+0x112 (FPO: [Non-Fpo])
f64f2d8c f93e7e7c 00000000 f93f5c2f 00000000
Mtlmnt5!clModem:ataNotification+0x65 (FPO: [1,0,3])
f64f2d94 f93f5c2f 00000000 00000000 ff398020
Mtlmnt5!ComxNT::ComxNTDataNotification+0xc (FPO: [1,0,0])
f64f2da8 f93f50ce 80559026 ffa0cf90 00000000
Mtlmnt5!Uart:ataNotificationThread+0x2c (FPO: [0,0,3])
f64f2dac 80559026 ffa0cf90 00000000 00000000
Mtlmnt5!Uart:ataNotificationThreadLINK+0xc (FPO: [1,0,0])
f64f2ddc 8050f513 f93f50c2 ffa0cf90 00000000
nt!PspSystemThreadStartup+0x34
(FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d0000 806b3f00 nt ntoskrnl.exe Fri Aug 17 23:39:59 2001
(3B7DE38F)
806b4000 806c7280 hal halacpi.dll Fri Aug 17 16:48:11 2001
(3B7D830B)
bad44000 bad5d600 Mup Mup.sys Fri Aug 17 23:21:29 2001
(3B7DDF39)
bad5e000 bae06be0 vmodem vmodem.sys Tue Jul 09 14:05:19 2002
(3D2B25DF)
bae07000 bae88da0 vpctcom vpctcom.sys Tue Jul 09 14:04:26 2002
(3D2B25AA)
bae89000 baeb0700 NDIS NDIS.sys Fri Aug 17 21:31:13 2001
(3B7DC561)
baeb1000 baf33400 Ntfs Ntfs.sys Fri Aug 17 21:33:04 2001
(3B7DC5D0)
baf34000 baf47780 KSecDD KSecDD.sys Fri Aug 17 16:50:01 2001
(3B7D8379)
baf48000 baf59300 sr sr.sys Fri Aug 17 17:00:38 2001
(3B7D85F6)
baf5a000 baf6f280 atapi atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
baf70000 baf93b80 dmio dmio.sys Fri Aug 17 16:58:27 2001
(3B7D8573)
baf94000 bafb2880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001
(3B7D8419)
bafb3000 bafdec00 ACPI ACPI.sys Fri Aug 17 16:57:52 2001
(3B7D8550)
bf800000 bf9b7580 win32k win32k.sys Fri Aug 17 23:52:56 2001
(3B7DE698)
bff10000 bff5d080 trid3d trid3d.dll Fri Aug 17 17:56:04 2001
(3B7D92F4)
bff80000 bff90a80 dxg dxg.sys Fri Aug 17 17:55:56 2001
(3B7D92EC)
bffa0000 bffe2980 ATMFD ATMFD.DLL Fri Aug 17 17:55:56 2001
(3B7D92EC)
f58b2000 f58d8e00 kmixer kmixer.sys Fri Aug 17 17:00:45 2001
(3B7D85FD)
f5a06000 f5a96dc0 NavEx15 NavEx15.Sys Fri Feb 06 15:30:49 2004
(4023F979)
f5beb000 f5c048a0 Slnthal Slnthal.sys Mon Nov 26 12:02:08 2001
(3C027590)
f5c05000 f5df8b20 Mtlstrm Mtlstrm.sys Mon Nov 26 12:08:20 2001
(3C027704)
f686b000 f68bc000 SAVRT SAVRT.SYS Sat Nov 01 06:26:37 2003
(3FA3986D)
f68bc000 f68be640 SYMREDRV SYMREDRV.SYS Fri Aug 15 21:05:41 2003
(3F3D8365)
f690c000 f691ec20 SYMEVENT SYMEVENT.SYS Wed Aug 06 21:32:39 2003
(3F31AC37)
f6b27000 f6b77a80 srv srv.sys Fri Aug 17 21:32:06 2001
(3B7DC596)
f6e1b000 f6e2e700 wdmaud wdmaud.sys Fri Aug 17 23:42:48 2001
(3B7DE438)
f6e2f000 f6e52580 Fastfat Fastfat.SYS Fri Aug 17 23:39:54 2001
(3B7DE38A)
f6e7b000 f6ea5280 mrxdav mrxdav.sys Fri Aug 17 16:50:20 2001
(3B7D838C)
f6ed6000 f6ede6e0 NPDRIVER NPDRIVER.SYS Wed Aug 14 02:39:06 2002
(3D59FB0A)
f6f36000 f6f45400 NAVENG NAVENG.Sys Fri Feb 06 15:34:45 2004
(4023FA65)
f703e000 f704c080 sysaudio sysaudio.sys Fri Aug 17 23:47:26 2001
(3B7DE54E)
f728e000 f72b9300 SYMTDI SYMTDI.SYS Fri Aug 15 21:05:29 2003
(3F3D8359)
f72e2000 f7301e80 afd afd.sys Fri Aug 17 21:30:36 2001
(3B7DC53C)
f735e000 f7360f80 ndisuio ndisuio.sys Fri Aug 17 16:53:53 2001
(3B7D8461)
f8042000 f8057280 dump_atapi dump_atapi.sys Fri Aug 17 16:51:49 2001
(3B7D83E5)
f8058000 f80bb880 mrxsmb mrxsmb.sys Fri Aug 17 23:31:45 2001
(3B7DE1A1)
f80e4000 f810c000 rdbss rdbss.sys Fri Aug 17 23:44:30 2001
(3B7DE49E)
f81ac000 f81d0b00 netbt netbt.sys Fri Aug 17 21:32:18 2001
(3B7DC5A2)
f81d1000 f8220e00 tcpip tcpip.sys Fri Aug 17 21:31:44 2001
(3B7DC580)
f92a9000 f92ca780 update update.sys Fri Aug 17 23:53:56 2001
(3B7DE6D4)
f92cb000 f92f7580 rdpdr rdpdr.sys Fri Aug 17 16:50:45 2001
(3B7D83A5)
f92f8000 f9308180 psched psched.sys Fri Aug 17 16:54:25 2001
(3B7D8481)
f93bd000 f93c0900 watchdog watchdog.sys Fri Aug 17 16:59:35 2001
(3B7D85B7)
f93d1000 f93e6900 ndiswan ndiswan.sys Fri Aug 17 21:30:58 2001
(3B7DC552)
f93e7000 f93fc000 Mtlmnt5 Mtlmnt5.sys Thu Nov 29 08:45:36 2001
(3C063C00)