Windows 7 BSOD in tcpip.sys

dlogik · Mar 16, 2011

Hi,

I am writing a small app in C# which pings remote hosts. When I end a debugging session in Visual Studio I receive a BSOD, the dump file reports a problem in tcpip.sys. Can anyone can help with this.

Thanks

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS (cb)
Caused by a driver not cleaning up completely after an I/O.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff88001b3c795, The calling address in the driver that locked the pages or if the
	IO manager locked the pages this points to the dispatch routine of
	the top driver on the stack to which the IRP was sent.
Arg2: 0000000000000000, The caller of the calling address in the driver that locked the
	pages. If the IO manager locked the pages this points to the device
	object of the top driver on the stack to which the IRP was sent.
Arg3: fffffa80067a9f40, A pointer to the MDL containing the locked pages.
Arg4: 0000000000000011, The number of locked pages.

Debugging Details:
------------------


FAULTING_IP: 
tcpip!Ipv4SetEchoRequestCreate+345
fffff880`01b3c795 c644243401      mov     byte ptr [rsp+34h],1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xCB

PROCESS_NAME:  devenv.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800030e3eff to fffff80002e89640

STACK_TEXT:  
fffff880`0798fa38 fffff800`030e3eff : 00000000`000000cb fffff880`01b3c795 00000000`00000000 fffffa80`067a9f40 : nt!KeBugCheckEx
fffff880`0798fa40 fffff800`03141bd7 : fffffa80`06941850 fffffa80`038a8c60 fffffa80`00000000 fffffa80`00000001 : nt! ?? ::NNGAKEGL::`string'+0x1840c
fffff880`0798fa80 fffff800`02e93514 : 00000000`00000000 fffffa80`0756f8b0 fffffa80`06941820 fffffa80`0391d7f0 : nt!PspProcessDelete+0x177
fffff880`0798fae0 fffff800`03180484 : fffffa80`0756f8b0 00000000`00000000 fffffa80`041b9950 00000000`00000000 : nt!ObfDereferenceObject+0xd4
fffff880`0798fb40 fffff800`03180a34 : 00000000`00002038 fffffa80`0756f8b0 fffff8a0`169f1b70 00000000`00002038 : nt!ObpCloseHandleTableEntry+0xc4
fffff880`0798fbd0 fffff800`02e888d3 : fffffa80`041b9950 fffff880`0798fca0 00000000`fffdb000 fffffa80`06871720 : nt!ObpCloseHandle+0x94
fffff880`0798fc20 00000000`778a140a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`001edb48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778a140a


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
tcpip!Ipv4SetEchoRequestCreate+345
fffff880`01b3c795 c644243401      mov     byte ptr [rsp+34h],1

SYMBOL_NAME:  tcpip!Ipv4SetEchoRequestCreate+345

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tcpip

IMAGE_NAME:  tcpip.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79420

FAILURE_BUCKET_ID:  X64_0xCB_tcpip!Ipv4SetEchoRequestCreate+345

BUCKET_ID:  X64_0xCB_tcpip!Ipv4SetEchoRequestCreate+345

Followup: MachineOwner
---------

cybercore · Mar 17, 2011

Hello and Welcome.

DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS (cb)
Caused by a driver not cleaning up completely after an I/O
0xCB_tcpip!Ipv4SetEchoRequestCreate

You have a few networking drivers incompatible with Windows 7, some are as old as 2003.

Update drivers:

Broadcom NetDetect
BASFND.sys Thu Apr 24 19:17:12 2003

VMWare
VMNET.SYS Thu May 22 06:33:54 2008

Intel Matrix Storage
iaStor.sys Sun Sep 30 01:36:30 2007

Dell OpenManage Client Instrumentation
omci.sys Wed Sep 23 18:12:50 2009

Hardlock Device Aladdin Knowledge Systems
hardlock.sys Mon Feb 02 10:34:08 2009

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\031711-49140-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02e09000 PsLoadedModuleList = 0xfffff800`0304ee90
Debug session time: Wed Mar 16 20:20:36.736 2011 (UTC - 4:00)
System Uptime: 0 days 0:14:28.399
Loading Kernel Symbols
...............................................................
................................................................
...............................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck CB, {fffff88001b3c795, 0, fffffa80067a9f40, 11}

Probably caused by : tcpip.sys ( tcpip!Ipv4SetEchoRequestCreate+345 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS (cb)
Caused by a driver not cleaning up completely after an I/O.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff88001b3c795, The calling address in the driver that locked the pages or if the
	IO manager locked the pages this points to the dispatch routine of
	the top driver on the stack to which the IRP was sent.
Arg2: 0000000000000000, The caller of the calling address in the driver that locked the
	pages. If the IO manager locked the pages this points to the device
	object of the top driver on the stack to which the IRP was sent.
Arg3: fffffa80067a9f40, A pointer to the MDL containing the locked pages.
Arg4: 0000000000000011, The number of locked pages.

Debugging Details:
------------------


FAULTING_IP: 
tcpip!Ipv4SetEchoRequestCreate+345
fffff880`01b3c795 c644243401      mov     byte ptr [rsp+34h],1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xCB

PROCESS_NAME:  devenv.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800030e3eff to fffff80002e89640

STACK_TEXT:  
fffff880`0798fa38 fffff800`030e3eff : 00000000`000000cb fffff880`01b3c795 00000000`00000000 fffffa80`067a9f40 : nt!KeBugCheckEx
fffff880`0798fa40 fffff800`03141bd7 : fffffa80`06941850 fffffa80`038a8c60 fffffa80`00000000 fffffa80`00000001 : nt! ?? ::NNGAKEGL::`string'+0x1840c
fffff880`0798fa80 fffff800`02e93514 : 00000000`00000000 fffffa80`0756f8b0 fffffa80`06941820 fffffa80`0391d7f0 : nt!PspProcessDelete+0x177
fffff880`0798fae0 fffff800`03180484 : fffffa80`0756f8b0 00000000`00000000 fffffa80`041b9950 00000000`00000000 : nt!ObfDereferenceObject+0xd4
fffff880`0798fb40 fffff800`03180a34 : 00000000`00002038 fffffa80`0756f8b0 fffff8a0`169f1b70 00000000`00002038 : nt!ObpCloseHandleTableEntry+0xc4
fffff880`0798fbd0 fffff800`02e888d3 : fffffa80`041b9950 fffff880`0798fca0 00000000`fffdb000 fffffa80`06871720 : nt!ObpCloseHandle+0x94
fffff880`0798fc20 00000000`778a140a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`001edb48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778a140a


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
tcpip!Ipv4SetEchoRequestCreate+345
fffff880`01b3c795 c644243401      mov     byte ptr [rsp+34h],1

SYMBOL_NAME:  tcpip!Ipv4SetEchoRequestCreate+345

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tcpip

IMAGE_NAME:  tcpip.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79420

FAILURE_BUCKET_ID:  X64_0xCB_tcpip!Ipv4SetEchoRequestCreate+345

BUCKET_ID:  X64_0xCB_tcpip!Ipv4SetEchoRequestCreate+345

Followup: MachineOwner
---------

Drivers:

Code:

start             end                 module name
fffff880`03f06000 fffff880`03f44000   1394ohci 1394ohci.sys Sat Nov 20 05:44:56 2010 (4CE7A6A8)
fffff880`01000000 fffff880`01057000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`056f1000 fffff880`05771000   ADIHdAud ADIHdAud.sys Thu Apr 23 11:41:05 2009 (49F08C11)
fffff880`03f7a000 fffff880`03fbf000   adp9wono adp9wono.SYS Tue Jul 14 17:12:55 2009 (4A5CF4D7)
fffff880`0184b000 fffff880`018d4000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`03fcf000 fffff880`03fe5000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`03975000 fffff880`03986580   aksdf    aksdf.sys    Tue Aug 25 10:33:54 2009 (4A93F652)
fffff880`039bd000 fffff880`039dc900   aksfridge aksfridge.sys Thu Jan 08 02:59:54 2009 (4965B27A)
fffff880`01263000 fffff880`0126e000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`06aaa000 fffff880`06ab5000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff960`00900000 fffff960`00961000   ATMFD    ATMFD.DLL    Fri Jan 07 04:20:44 2011 (4D26DAEC)
fffff880`03ea0000 fffff880`03f06000   b57nd60a b57nd60a.sys Fri May 21 01:48:07 2010 (4BF61E97)
fffff880`039dd000 fffff880`039e4000   BASFND   BASFND.sys   Thu Apr 24 19:17:12 2003 (3EA87078)
fffff880`01a9d000 fffff880`01aa4000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`043c3000 fffff880`043d4000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02d68000 fffff880`02d86000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00710000 fffff960`00737000   cdd      cdd.dll      Sat Nov 20 07:55:34 2010 (4CE7C546)
fffff880`0197c000 fffff880`019a6000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00ccb000 fffff880`00d8b000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01a16000 fffff880`01a46000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c6d000 fffff880`00ccb000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0162a000 fffff880`0169c000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`03fbf000 fffff880`03fcf000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`0564b000 fffff880`05659000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`04322000 fffff880`043a5000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`043a5000 fffff880`043c3000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`04313000 fffff880`04322000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01a00000 fffff880`01a16000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`057ae000 fffff880`057d0000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`05686000 fffff880`05699000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`05663000 fffff880`05686000   dump_LSI_SAS dump_LSI_SAS.sys Thu Oct 01 11:04:35 2009 (4AC4C503)
fffff880`05659000 fffff880`05663000   dump_storport dump_storport.sys Sat Nov 20 05:33:56 2010 (4CE7A414)
fffff880`05632000 fffff880`0563e000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`100ca000 fffff880`101be000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`0f400000 fffff880`0f446000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`03987000 fffff880`039bd000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`013e5000 fffff880`013f9000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`0126e000 fffff880`012ba000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`016ad000 fffff880`016b7000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01db3000 fffff880`01ded000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01cb0000 fffff880`01cfa000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff880`03f6d000 fffff880`03f7a000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`033f3000 fffff800`0343c000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`03800000 fffff880`0384dc00   hardlock hardlock.sys Mon Feb 02 10:34:08 2009 (49871270)
fffff880`02c71000 fffff880`02c7d000   hcmon    hcmon.sys    Tue Oct 20 16:47:26 2009 (4ADE21DE)
fffff880`03e7c000 fffff880`03ea0000   HDAudBus HDAudBus.sys Sat Nov 20 05:43:42 2010 (4CE7A65E)
fffff880`057e4000 fffff880`057fd000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`05600000 fffff880`05608080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`057d6000 fffff880`057e4000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02c9f000 fffff880`02d68000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01daa000 fffff880`01db3000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`012be000 fffff880`013c2000   iaStor   iaStor.sys   Sun Sep 30 01:36:30 2007 (46FF35DE)
fffff880`04200000 fffff880`04216000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04743000 fffff880`04752000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`05609000 fffff880`05617000   kbdhid   kbdhid.sys   Sat Nov 20 05:33:25 2010 (4CE7A3F5)
fffff800`00bbe000 fffff800`00bc8000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`04763000 fffff880`047a6000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`015c9000 fffff880`015e4000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`01951000 fffff880`0197c000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`057d0000 fffff880`057d5200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`03e00000 fffff880`03e15000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`013c2000 fffff880`013e5000   lsi_sas  lsi_sas.sys  Thu Oct 01 11:04:35 2009 (4AC4C503)
fffff880`056a7000 fffff880`056ca000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c0a000 fffff880`00c59000   mcupdate mcupdate.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`05699000 fffff880`056a7000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`04752000 fffff880`04761000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0563e000 fffff880`0564b000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fa4000 fffff880`00fbe000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`02d86000 fffff880`02d9e000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`05a6b000 fffff880`05a93000   mrxdav   mrxdav.sys   Sat Nov 20 04:26:42 2010 (4CE79452)
fffff880`02d9e000 fffff880`02dcb000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`02c00000 fffff880`02c4d000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`02c4d000 fffff880`02c71000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`01800000 fffff880`0180b000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f14000 fffff880`00f1e000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`00d8b000 fffff880`00de9000   msrpc    msrpc.sys    Sat Nov 20 04:21:56 2010 (4CE79334)
fffff880`04308000 fffff880`04313000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01d98000 fffff880`01daa000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`016b7000 fffff880`017aa000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`03fe5000 fffff880`03ff1000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`046b3000 fffff880`046e2000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`04696000 fffff880`046ab000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`01400000 fffff880`0140f000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`017aa000 fffff880`017ef000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`018f1000 fffff880`01951000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`017ef000 fffff880`017fe000   nm3      nm3.sys      Wed Jun 09 20:05:51 2010 (4C102C5F)
fffff880`0180b000 fffff880`0181c000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`042fc000 fffff880`04308000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02e09000 fffff800`033f3000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`01426000 fffff880`015c9000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01a94000 fffff880`01a9d000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`100c8000 fffff880`100c9180   nvBridge nvBridge.kmd Fri Jan 07 20:57:22 2011 (4D27C482)
fffff880`0f46d000 fffff880`100c7d00   nvlddmkm nvlddmkm.sys Fri Jan 07 21:07:22 2011 (4D27C6DA)
fffff880`042f0000 fffff880`042fc000   omci     omci.sys     Wed Sep 23 18:12:50 2009 (4ABA9D62)
fffff880`01600000 fffff880`01626000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`03f44000 fffff880`03f61000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00f1e000 fffff880`00f33000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`01064000 fffff880`01097000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`0169c000 fffff880`016ad000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05aeb000 fffff880`05b91000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05771000 fffff880`057ae000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c59000 fffff880`00c6d000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`101be000 fffff880`101e2000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`046e2000 fffff880`046fd000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`046fd000 fffff880`0471e000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`0471e000 fffff880`04738000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`0429f000 fffff880`042f0000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`04738000 fffff880`04743000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`019db000 fffff880`019e4000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff960`00ad0000 fffff960`00b18000   RDPDD    RDPDD.dll    Sat Nov 20 06:05:00 2010 (4CE7AB5C)
fffff880`06b9c000 fffff880`06bca000   rdpdr    rdpdr.sys    Sat Nov 20 06:06:41 2010 (4CE7ABC1)
fffff880`019e4000 fffff880`019ed000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019ed000 fffff880`019f6000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`06a00000 fffff880`06a39000   RDPWD    RDPWD.SYS    Sat Nov 20 06:04:37 2010 (4CE7AB45)
fffff880`01d5e000 fffff880`01d98000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`101e2000 fffff880`101fa000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`011c9000 fffff880`011f8000   SCSIPORT SCSIPORT.SYS Sat Nov 20 05:34:01 2010 (4CE7A419)
fffff880`05b91000 fffff880`05b9c000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03f61000 fffff880`03f6d000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`00e14000 fffff880`00e31000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`0109a000 fffff880`011c0000   spil     spil.sys     Sun Oct 11 16:55:14 2009 (4AD24632)
fffff880`01d56000 fffff880`01d5e000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`06a39000 fffff880`06aaa000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`06ad2000 fffff880`06b6b000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`05a00000 fffff880`05a6b000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`05b9c000 fffff880`05bcd000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`01200000 fffff880`01263000   storport storport.sys Sat Nov 20 05:35:02 2010 (4CE7A456)
fffff880`04761000 fffff880`04762480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01aac000 fffff880`01cb0000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`05bcd000 fffff880`05bdf000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`0183e000 fffff880`0184b000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`06bca000 fffff880`06bd5000   tdtcp    tdtcp.sys    Mon Jul 13 20:16:32 2009 (4A5BCE60)
fffff880`0181c000 fffff880`0183e000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`0428b000 fffff880`0429f000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`00500000 fffff960`0050a000   TSDDD    TSDDD.dll    Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`06bd5000 fffff880`06be4000   tssecsrv tssecsrv.sys Sat Nov 20 06:04:09 2010 (4CE7AB29)
fffff880`043d4000 fffff880`043fa000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`047a6000 fffff880`047b8000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`047e4000 fffff880`047e5f00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`03e6b000 fffff880`03e7c000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0463c000 fffff880`04696000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`03e15000 fffff880`03e6b000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`047d5000 fffff880`047e4000   usbrpm   usbrpm.sys   Sat Nov 20 06:37:19 2010 (4CE7B2EF)
fffff880`05617000 fffff880`05632000   USBSTOR  USBSTOR.SYS  Sat Nov 20 05:44:05 2010 (4CE7A675)
fffff880`0f446000 fffff880`0f453000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`01057000 fffff880`01064000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01ded000 fffff880`01dfb000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`019a6000 fffff880`019cb000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00fbe000 fffff880`00ffa000   vmbus    vmbus.sys    Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`02c7d000 fffff880`02c91000   vmci     vmci.sys     Tue Oct 20 16:28:04 2009 (4ADE1D54)
fffff880`047f2000 fffff880`047fc000   VMNET    VMNET.SYS    Thu May 22 06:33:54 2008 (48354C12)
fffff880`047e6000 fffff880`047f2000   vmnetbridge vmnetbridge.sys Thu May 22 06:34:05 2008 (48354C1D)
fffff880`05bdf000 fffff880`05be9000   vmnetuserif vmnetuserif.sys Tue Oct 20 17:12:04 2009 (4ADE27A4)
fffff880`02c91000 fffff880`02c99000   VMparport VMparport.sys Tue Oct 20 16:26:28 2009 (4ADE1CF4)
fffff880`01cfa000 fffff880`01d0a000   vmstorfl vmstorfl.sys Sat Nov 20 04:57:30 2010 (4CE79B8A)
fffff880`0389d000 fffff880`03975000   vmx86    vmx86.sys    Tue Oct 20 18:18:40 2009 (4ADE3740)
fffff880`00f33000 fffff880`00f48000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00f48000 fffff880`00fa4000   volmgrx  volmgrx.sys  Sat Nov 20 04:20:43 2010 (4CE792EB)
fffff880`01d0a000 fffff880`01d56000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`04600000 fffff880`0463c000   vpchbus  vpchbus.sys  Wed Jul 22 18:20:23 2009 (4A6790A7)
fffff880`015e4000 fffff880`015f8000   vpcnfltr vpcnfltr.sys Wed Jul 22 18:20:17 2009 (4A6790A1)
fffff880`047b8000 fffff880`047d5000   vpcusb   vpcusb.sys   Wed Jul 22 18:20:23 2009 (4A6790A7)
fffff880`04235000 fffff880`0428ac00   vpcvmm   vpcvmm.sys   Wed Jul 22 18:20:22 2009 (4A6790A6)
fffff880`05be9000 fffff880`05bf5000   vstor2_mntapi10 vstor2-mntapi10.sys Fri Apr 17 23:09:22 2009 (49E94462)
fffff880`00e31000 fffff880`00e4c000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`019cb000 fffff880`019db000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e61000 fffff880`00f05000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f05000 fffff880`00f14000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`018df000 fffff880`018e8000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`00361000   win32k   win32k.sys   Wed Jan 05 01:55:38 2011 (4D2415EA)
fffff880`00e00000 fffff880`00e14000   winhv    winhv.sys    Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`011c0000 fffff880`011c9000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`018d4000 fffff880`018df000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 20:10:33 2009 (4A5BCCF9)
fffff880`056ca000 fffff880`056eb000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)
fffff880`06b6b000 fffff880`06b9c000   WUDFRd   WUDFRd.sys   Sat Nov 20 05:43:32 2010 (4CE7A654)

Unloaded modules:
fffff880`06a39000 fffff880`06aaa000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01a46000 fffff880`01a54000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01a54000 fffff880`01a5e000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`01a5e000 fffff880`01a81000   dump_LSI_SAS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00023000
fffff880`01a81000 fffff880`01a94000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000

dlogik · Mar 17, 2011

Thanks for your reply cybercore,

I will check and upgrade those drivers on my workstation pc.

However, I was able to reproduce the crash on a fresh installation of Windows 7 inside a virtual machine. I upgraded to Win7SP1 and installed Visual Studio 2010.

To identify which driver caused the error, I had to add the registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\TrackLockedPages (setting DWORD value to 1)

Attached is a minidump from the VM crash.

cybercore · Mar 18, 2011

0xCB_tcpip!Ipv4SetEchoRequestCreate

Update drivers:

Intel(R) PRO/1000 Adapter
E1G6032E.sys Wed May 28 19:14:51 2008

VMware - uninstall it if you can't update
vmci.sys Tue Sep 01 05:43:26 2009

Crash Dumps:

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [F:\a\Minidump\D M P\DMP\031811-24187-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`02800000 PsLoadedModuleList = 0xfffff800`02a45e90
Debug session time: Thu Mar 17 19:03:38.767 2011 (UTC - 4:00)
System Uptime: 0 days 14:31:57.255
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck CB, {fffff880018ff795, 0, fffffa801b3fb890, 12}

Probably caused by : tcpip.sys ( tcpip!Ipv4SetEchoRequestCreate+345 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS (cb)
Caused by a driver not cleaning up completely after an I/O.
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff880018ff795, The calling address in the driver that locked the pages or if the
	IO manager locked the pages this points to the dispatch routine of
	the top driver on the stack to which the IRP was sent.
Arg2: 0000000000000000, The caller of the calling address in the driver that locked the
	pages. If the IO manager locked the pages this points to the device
	object of the top driver on the stack to which the IRP was sent.
Arg3: fffffa801b3fb890, A pointer to the MDL containing the locked pages.
Arg4: 0000000000000012, The number of locked pages.

Debugging Details:
------------------


FAULTING_IP: 
tcpip!Ipv4SetEchoRequestCreate+345
fffff880`018ff795 c644243401      mov     byte ptr [rsp+34h],1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xCB

PROCESS_NAME:  devenv.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002adaeff to fffff80002880640

STACK_TEXT:  
fffff880`05372a38 fffff800`02adaeff : 00000000`000000cb fffff880`018ff795 00000000`00000000 fffffa80`1b3fb890 : nt!KeBugCheckEx
fffff880`05372a40 fffff800`02b38bd7 : fffffa80`195adb30 fffffa80`18d41c40 fffffa80`00000000 fffffa80`00000000 : nt! ?? ::NNGAKEGL::`string'+0x1840c
fffff880`05372a80 fffff800`0288a514 : 00000000`00000000 fffffa80`195cb540 fffffa80`195adb00 fffffa80`18e46080 : nt!PspProcessDelete+0x177
fffff880`05372ae0 fffff800`02b77484 : fffffa80`195cb540 00000000`00000000 fffffa80`1a379530 00000000`00000000 : nt!ObfDereferenceObject+0xd4
fffff880`05372b40 fffff800`02b77a34 : 00000000`00001498 fffffa80`195cb540 fffff8a0`0b27a010 00000000`00001498 : nt!ObpCloseHandleTableEntry+0xc4
fffff880`05372bd0 fffff800`0287f8d3 : fffffa80`1a379530 fffff880`05372ca0 00000000`fffdb000 fffffa80`1b8f4d60 : nt!ObpCloseHandle+0x94
fffff880`05372c20 00000000`777d140a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0018dec8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x777d140a


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
tcpip!Ipv4SetEchoRequestCreate+345
fffff880`018ff795 c644243401      mov     byte ptr [rsp+34h],1

SYMBOL_NAME:  tcpip!Ipv4SetEchoRequestCreate+345

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tcpip

IMAGE_NAME:  tcpip.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79420

FAILURE_BUCKET_ID:  X64_0xCB_tcpip!Ipv4SetEchoRequestCreate+345

BUCKET_ID:  X64_0xCB_tcpip!Ipv4SetEchoRequestCreate+345

Followup: MachineOwner
---------

Drivers:

Code:

start             end                 module name
fffff880`00f2a000 fffff880`00f81000   ACPI     ACPI.sys     Sat Nov 20 04:19:16 2010 (4CE79294)
fffff880`01400000 fffff880`01489000   afd      afd.sys      Sat Nov 20 04:23:27 2010 (4CE7938F)
fffff880`043a9000 fffff880`043bf000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`011f4000 fffff880`011ff000   amdxata  amdxata.sys  Fri Mar 19 12:18:18 2010 (4BA3A3CA)
fffff880`01141000 fffff880`0114a000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0114a000 fffff880`01174000   ataport  ataport.SYS  Sat Nov 20 04:19:15 2010 (4CE79293)
fffff880`00ff2000 fffff880`00ffe000   BATTC    BATTC.SYS    Mon Jul 13 19:31:01 2009 (4A5BC3B5)
fffff880`01851000 fffff880`01858000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`03fb3000 fffff880`03fc4000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02940000 fffff880`0295e000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00670000 fffff960`00697000   cdd      cdd.dll      Sat Nov 20 07:55:34 2010 (4CE7C546)
fffff880`017a9000 fffff880`017d3000   cdrom    cdrom.sys    Sat Nov 20 04:19:20 2010 (4CE79298)
fffff880`00cdc000 fffff880`00d9c000   CI       CI.dll       Sat Nov 20 08:12:36 2010 (4CE7C944)
fffff880`01bc6000 fffff880`01bf6000   CLASSPNP CLASSPNP.SYS Sat Nov 20 04:19:23 2010 (4CE7929B)
fffff880`00c7e000 fffff880`00cdc000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0437e000 fffff880`04382500   CmBatt   CmBatt.sys   Mon Jul 13 19:31:03 2009 (4A5BC3B7)
fffff880`014d2000 fffff880`01544000   cng      cng.sys      Sat Nov 20 05:08:45 2010 (4CE79E2D)
fffff880`00fe9000 fffff880`00ff2000   compbatt compbatt.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`04399000 fffff880`043a9000   CompositeBus CompositeBus.sys Sat Nov 20 05:33:17 2010 (4CE7A3ED)
fffff880`04111000 fffff880`0411f000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03f12000 fffff880`03f95000   csc      csc.sys      Sat Nov 20 04:27:12 2010 (4CE79470)
fffff880`03f95000 fffff880`03fb3000   dfsc     dfsc.sys     Sat Nov 20 04:26:31 2010 (4CE79447)
fffff880`03f03000 fffff880`03f12000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01bb0000 fffff880`01bc6000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`042eb000 fffff880`0430d000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`0411f000 fffff880`04129000   dump_diskdump dump_diskdump.sys Sat Nov 20 05:33:56 2010 (4CE7A414)
fffff880`04146000 fffff880`04159000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`04129000 fffff880`04146000   dump_LSI_SAS dump_LSI_SAS.sys Mon May 18 20:20:23 2009 (4A11FB47)
fffff880`04105000 fffff880`04111000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`03cc1000 fffff880`03db5000   dxgkrnl  dxgkrnl.sys  Sat Nov 20 04:50:50 2010 (4CE799FA)
fffff880`03db5000 fffff880`03dfb000   dxgmms1  dxgmms1.sys  Sat Nov 20 04:49:53 2010 (4CE799C1)
fffff880`0427f000 fffff880`042a2980   E1G6032E E1G6032E.sys Wed May 28 19:14:51 2008 (483DE76B)
fffff880`03e6d000 fffff880`03e7a000   fdc      fdc.sys      Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`0104c000 fffff880`01060000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`043ef000 fffff880`043fa000   flpydisk flpydisk.sys Mon Jul 13 20:00:54 2009 (4A5BCAB6)
fffff880`01000000 fffff880`0104c000   fltmgr   fltmgr.sys   Sat Nov 20 04:19:24 2010 (4CE7929C)
fffff880`01555000 fffff880`0155f000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`01b76000 fffff880`01bb0000   fvevol   fvevol.sys   Sat Nov 20 04:24:06 2010 (4CE793B6)
fffff880`01a73000 fffff880`01abd000   fwpkclnt fwpkclnt.sys Sat Nov 20 04:21:37 2010 (4CE79321)
fffff800`02dea000 fffff800`02e33000   hal      hal.dll      Sat Nov 20 08:00:25 2010 (4CE7C669)
fffff880`041c0000 fffff880`041d9000   HIDCLASS HIDCLASS.SYS Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`03c7a000 fffff880`03c82080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`041b2000 fffff880`041c0000   hidusb   hidusb.sys   Sat Nov 20 05:43:49 2010 (4CE7A665)
fffff880`02877000 fffff880`02940000   HTTP     HTTP.sys     Sat Nov 20 04:24:30 2010 (4CE793CE)
fffff880`01b6d000 fffff880`01b76000   hwpolicy hwpolicy.sys Sat Nov 20 04:18:54 2010 (4CE7927E)
fffff880`03e00000 fffff880`03e1e000   i8042prt i8042prt.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00d9c000 fffff880`00da4000   intelide intelide.sys Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`04383000 fffff880`04399000   intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`03e1e000 fffff880`03e2d000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff800`00bbc000 fffff800`00bc6000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0430d000 fffff880`04350000   ks       ks.sys       Sat Nov 20 05:33:23 2010 (4CE7A3F3)
fffff880`013cd000 fffff880`013e8000   ksecdd   ksecdd.sys   Sat Nov 20 04:21:15 2010 (4CE7930B)
fffff880`0177e000 fffff880`017a9000   ksecpkg  ksecpkg.sys  Sat Nov 20 05:10:34 2010 (4CE79E9A)
fffff880`04350000 fffff880`04355200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`04167000 fffff880`0417c000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`01174000 fffff880`01191000   lsi_sas  lsi_sas.sys  Mon May 18 20:20:23 2009 (4A11FB47)
fffff880`0406d000 fffff880`04090000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c1b000 fffff880`00c6a000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 08:03:51 2010 (4CE7C737)
fffff880`04159000 fffff880`04167000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`03e35000 fffff880`03e44000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`041d9000 fffff880`041e6000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00db4000 fffff880`00dce000   mountmgr mountmgr.sys Sat Nov 20 04:19:21 2010 (4CE79299)
fffff880`0295e000 fffff880`02976000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02976000 fffff880`029a3000   mrxsmb   mrxsmb.sys   Sat Nov 20 04:27:41 2010 (4CE7948D)
fffff880`029a3000 fffff880`029f0000   mrxsmb10 mrxsmb10.sys Sat Nov 20 04:26:53 2010 (4CE7945D)
fffff880`02800000 fffff880`02824000   mrxsmb20 mrxsmb20.sys Sat Nov 20 04:26:47 2010 (4CE79457)
fffff880`01568000 fffff880`01573000   Msfs     Msfs.SYS     unavailable (00000000)
fffff880`00f8a000 fffff880`00f94000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01060000 fffff880`010be000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`03ef8000 fffff880`03f03000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01b5b000 fffff880`01b6d000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`0162b000 fffff880`0171e000   ndis     ndis.sys     Sat Nov 20 04:23:30 2010 (4CE79392)
fffff880`043e3000 fffff880`043ef000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`04200000 fffff880`0422f000   ndiswan  ndiswan.sys  Sat Nov 20 05:52:32 2010 (4CE7A870)
fffff880`0409b000 fffff880`040b0000   NDProxy  NDProxy.SYS  Sat Nov 20 05:52:20 2010 (4CE7A864)
fffff880`015ed000 fffff880`015fc000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`01489000 fffff880`014ce000   netbt    netbt.sys    Sat Nov 20 04:23:18 2010 (4CE79386)
fffff880`0171e000 fffff880`0177e000   NETIO    NETIO.SYS    Sat Nov 20 04:23:13 2010 (4CE79381)
fffff880`01573000 fffff880`01584000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03eec000 fffff880`03ef8000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02800000 fffff800`02dea000   nt       ntkrnlmp.exe Sat Nov 20 04:30:02 2010 (4CE7951A)
fffff880`0122a000 fffff880`013cd000   Ntfs     Ntfs.sys     Sat Nov 20 04:20:57 2010 (4CE792F9)
fffff880`01848000 fffff880`01851000   Null     Null.SYS     unavailable (00000000)
fffff880`015c7000 fffff880`015ed000   pacer    pacer.sys    Sat Nov 20 05:52:18 2010 (4CE7A862)
fffff880`03e44000 fffff880`03e61000   parport  parport.sys  Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`00fd4000 fffff880`00fe9000   partmgr  partmgr.sys  Sat Nov 20 04:20:00 2010 (4CE792C0)
fffff880`00f94000 fffff880`00fc7000   pci      pci.sys      Sat Nov 20 04:19:11 2010 (4CE7928F)
fffff880`00da4000 fffff880`00db4000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01544000 fffff880`01555000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`02c86000 fffff880`02d2c000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`042ae000 fffff880`042eb000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c6a000 fffff880`00c7e000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`043bf000 fffff880`043e3000   rasl2tp  rasl2tp.sys  Sat Nov 20 05:52:34 2010 (4CE7A872)
fffff880`0422f000 fffff880`0424a000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0424a000 fffff880`0426b000   raspptp  raspptp.sys  Sat Nov 20 05:52:31 2010 (4CE7A86F)
fffff880`03c83000 fffff880`03c9d000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e9b000 fffff880`03eec000   rdbss    rdbss.sys    Sat Nov 20 04:27:51 2010 (4CE79497)
fffff880`0426b000 fffff880`04276000   rdpbus   rdpbus.sys   Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`01bf6000 fffff880`01bff000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`017f1000 fffff880`017fa000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0155f000 fffff880`01568000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01b21000 fffff880`01b5b000   rdyboost rdyboost.sys Sat Nov 20 04:43:10 2010 (4CE7982E)
fffff880`041e6000 fffff880`041fe000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02d2c000 fffff880`02d37000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`03e61000 fffff880`03e6d000   serenum  serenum.sys  Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`01200000 fffff880`0121d000   serial   serial.sys   Mon Jul 13 20:00:40 2009 (4A5BCAA8)
fffff880`01b19000 fffff880`01b21000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`036e6000 fffff880`03757000   spsys    spsys.sys    Mon May 11 13:20:58 2009 (4A085E7A)
fffff880`0364d000 fffff880`036e6000   srv      srv.sys      Sat Nov 20 04:28:05 2010 (4CE794A5)
fffff880`02d7a000 fffff880`02de5000   srv2     srv2.sys     Sat Nov 20 04:27:43 2010 (4CE7948F)
fffff880`02d37000 fffff880`02d68000   srvnet   srvnet.sys   Sat Nov 20 04:27:20 2010 (4CE79478)
fffff880`01191000 fffff880`011f4000   storport storport.sys Sat Nov 20 05:35:02 2010 (4CE7A456)
fffff880`04276000 fffff880`04277480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`0186f000 fffff880`01a73000   tcpip    tcpip.sys    Sat Nov 20 04:25:52 2010 (4CE79420)
fffff880`02d68000 fffff880`02d7a000   tcpipreg tcpipreg.sys Sat Nov 20 05:51:48 2010 (4CE7A844)
fffff880`015a6000 fffff880`015b3000   TDI      TDI.SYS      Sat Nov 20 04:22:06 2010 (4CE7933E)
fffff880`01584000 fffff880`015a6000   tdx      tdx.sys      Sat Nov 20 04:21:54 2010 (4CE79332)
fffff880`013e8000 fffff880`013fc000   termdd   termdd.sys   Sat Nov 20 06:03:40 2010 (4CE7AB0C)
fffff960`004a0000 fffff960`004aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`03fc4000 fffff880`03fea000   tunnel   tunnel.sys   Sat Nov 20 05:51:50 2010 (4CE7A846)
fffff880`040b0000 fffff880`04105000   udfs     udfs.sys     Sat Nov 20 04:26:11 2010 (4CE79433)
fffff880`04367000 fffff880`04379000   umbus    umbus.sys    Sat Nov 20 05:44:37 2010 (4CE7A695)
fffff880`0417e000 fffff880`0419b000   usbccgp  usbccgp.sys  Sat Nov 20 05:44:03 2010 (4CE7A673)
fffff880`0419b000 fffff880`0419cf00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04356000 fffff880`04367000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04013000 fffff880`0406d000   usbhub   usbhub.sys   Sat Nov 20 05:44:30 2010 (4CE7A68E)
fffff880`03c0d000 fffff880`03c63000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`03c00000 fffff880`03c0d000   usbuhci  usbuhci.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fc7000 fffff880`00fd4000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`017d3000 fffff880`017e1000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01600000 fffff880`01625000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`03ca4000 fffff880`03cc1000   vm3dmp   vm3dmp.sys   Fri Apr 30 04:12:11 2010 (4BDA90DB)
fffff880`042a3000 fffff880`042ae000   vmaudio  vmaudio.sys  Mon Aug 10 06:55:54 2009 (4A7FFCBA)
fffff880`010f1000 fffff880`0112d000   vmbus    vmbus.sys    Sat Nov 20 04:57:29 2010 (4CE79B89)
fffff880`03e7a000 fffff880`03e8f000   vmci     vmci.sys     Tue Sep 01 05:43:26 2009 (4A9CECBE)
fffff880`010be000 fffff880`010ec000   vmhgfs   vmhgfs.sys   Thu Nov 11 13:38:06 2010 (4CDC380E)
fffff880`02824000 fffff880`0282b000   vmmemctl vmmemctl.sys Thu Nov 11 13:50:54 2010 (4CDC3B0E)
fffff880`03e2d000 fffff880`03e35000   vmmouse  vmmouse.sys  Mon Nov 30 23:44:04 2009 (4B149F14)
fffff880`01858000 fffff880`01867000   vmrawdsk vmrawdsk.sys Thu Nov 11 13:51:28 2010 (4CDC3B30)
fffff880`01abd000 fffff880`01acd000   vmstorfl vmstorfl.sys unavailable (00000000)
fffff880`00e00000 fffff880`00e15000   volmgr   volmgr.sys   Sat Nov 20 04:19:28 2010 (4CE792A0)
fffff880`00e15000 fffff880`00e71000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`01acd000 fffff880`01b19000   volsnap  volsnap.sys  Sat Nov 20 04:20:08 2010 (4CE792C8)
fffff880`00dce000 fffff880`00de9000   wanarp   wanarp.sys   Sat Nov 20 05:52:36 2010 (4CE7A874)
fffff880`017e1000 fffff880`017f1000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e77000 fffff880`00f1b000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f1b000 fffff880`00f2a000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`015be000 fffff880`015c7000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00000000 fffff960`00311000   win32k   win32k.sys   Wed Jan 05 01:55:38 2011 (4D2415EA)
fffff880`0112d000 fffff880`01141000   winhv    winhv.sys    Sat Nov 20 04:20:02 2010 (4CE792C2)
fffff880`00f81000 fffff880`00f8a000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`015b3000 fffff880`015be000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 20:10:33 2009 (4A5BCCF9)
fffff880`01800000 fffff880`01821000   WudfPf   WudfPf.sys   Sat Nov 20 05:42:44 2010 (4CE7A624)

Unloaded modules:
fffff880`0419d000 fffff880`041b2000   tsusbflt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00015000
fffff880`0417c000 fffff880`0417e000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`04167000 fffff880`0417c000   tsusbflt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00015000
fffff880`01800000 fffff880`0180e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`0180e000 fffff880`01818000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`01818000 fffff880`01835000   dump_LSI_SAS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001D000
fffff880`01835000 fffff880`01848000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00013000
fffff880`04099000 fffff880`0409b000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`04084000 fffff880`04099000   tsusbflt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00015000
fffff880`04082000 fffff880`04084000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`0406d000 fffff880`04082000   tsusbflt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00015000
fffff880`0437c000 fffff880`0437e000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`04367000 fffff880`0437c000   tsusbflt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00015000
fffff880`03c78000 fffff880`03c7a000   USBD.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00002000
fffff880`03c63000 fffff880`03c78000   tsusbflt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00015000

Windows 7 BSOD in tcpip.sys

dlogik

New Member

Attachments

cybercore

New Member

dlogik

New Member

Attachments

cybercore

New Member

Similar threads