Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\011711-35225-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82617000 PsLoadedModuleList = 0x8275f810
Debug session time: Mon Jan 17 00:04:22.875 2011 (UTC - 5:00)
System Uptime: 0 days 3:22:35.810
Loading Kernel Symbols
...............................................................
................................................................
............
Loading User Symbols
Loading unloaded module list
.............
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00001097, (reserved)
Arg3: 0a1e0612, Memory contents of the pool block
Arg4: ae43ab28, Address of the block of pool being deallocated
Debugging Details:
------------------
GetPointerFromAddress: unable to read from 8277f718
Unable to read MiSystemVaType memory at 8275f160
*** ERROR: Module load completed but symbols could not be loaded for intelide.sys
*** WARNING: Unable to verify timestamp for amdxata.sys
*** ERROR: Module load completed but symbols could not be loaded for amdxata.sys
*** WARNING: Unable to verify timestamp for spldr.sys
*** ERROR: Module load completed but symbols could not be loaded for spldr.sys
*** WARNING: Unable to verify timestamp for intelppm.sys
*** ERROR: Module load completed but symbols could not be loaded for intelppm.sys
*** WARNING: Unable to verify timestamp for Rt86win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt86win7.sys
*** WARNING: Unable to verify timestamp for secdrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for secdrv.SYS
*** WARNING: Unable to verify timestamp for peauth.sys
*** ERROR: Module load completed but symbols could not be loaded for peauth.sys
*** WARNING: Unable to verify timestamp for drmk.sys
*** ERROR: Module load completed but symbols could not be loaded for drmk.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
*** WARNING: Unable to verify timestamp for TSDDD.dll
*** ERROR: Module load completed but symbols could not be loaded for TSDDD.dll
*** WARNING: Unable to verify timestamp for cdd.dll
*** ERROR: Module load completed but symbols could not be loaded for cdd.dll
*** WARNING: Unable to verify timestamp for irsir.sys
*** ERROR: Module load completed but symbols could not be loaded for irsir.sys
*** WARNING: Unable to verify timestamp for irenum.sys
*** ERROR: Module load completed but symbols could not be loaded for irenum.sys
*** WARNING: Unable to verify timestamp for irda.sys
*** ERROR: Module load completed but symbols could not be loaded for irda.sys
*** WARNING: Unable to verify timestamp for atikmpag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmpag.sys
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
GetPointerFromAddress: unable to read from 8277f718
Unable to read MiSystemVaType memory at 8275f160
POOL_ADDRESS: GetPointerFromAddress: unable to read from 8277f718
Unable to read MiSystemVaType memory at 8275f160
ae43ab28
BUGCHECK_STR: 0xc2_7
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 1
LAST_CONTROL_TRANSFER: from 8b4c019e to 827361b6
STACK_TEXT:
8d503b30 8b4c019e ae43ab28 00000000 ad809678 nt!ExFreePoolWithTag+0x1b1
8d503b44 8b42b066 00000000 8d503b64 0614c122 Ntfs!NtfsFullDeleteLcb+0xe0
8d503b94 8b4a71be 858b6b30 85bcf0d8 ad809370 Ntfs!NtfsTeardownFromLcb+0x141
8d503be4 8b423bec 858b6b30 00000008 01809678 Ntfs!NtfsTeardownStructures+0x154
8d503c0c 8b4a355b 858b6b30 ad809460 ad809678 Ntfs!NtfsDecrementCloseCounts+0xaf
8d503c6c 8b4c24c3 858b6b30 ad809460 ad809370 Ntfs!NtfsCommonClose+0x4f2
8d503d00 82684f2b 00000000 00000000 84d90d48 Ntfs!NtfsFspClose+0x118
8d503d50 8282566d 00000000 a695bb6c 00000000 nt!ExpWorkerThread+0x10d
8d503d90 826d70d9 82684e1e 00000000 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExFreePoolWithTag+1b1
827361b6 cc int 3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExFreePoolWithTag+1b1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc007
FAILURE_BUCKET_ID: 0xc2_7_nt!ExFreePoolWithTag+1b1
BUCKET_ID: 0xc2_7_nt!ExFreePoolWithTag+1b1
Followup: MachineOwner
---------