Weird Crashes...any Ideas?

I get these weird crashes at night when im sleeping, and randomly throughout the day...it isn't consistent maybe once a day to once every few days. I snagged the error code, any ideas?


BCCode : 1000008e BCP1 : C0000005 BCP2 : 80550AE2 BCP3 : AC0DD45C
BCP4 : 00000000 OSVer : 5_1_2600 SP : 2_0 Product : 256_1

Windows XP SP2 all recent updates
2 gig corsair xms2 ram
sapphire x850 pe
asus p5gd2 deluxe
2x 300 gig maxtor diamond max 10 hdd
OZC Game Xstream 700 watt PSU
Audigy 2 zs platinum

 

http://forums.majorgeeks.com/showthread.php?t=35246

 

Going through it right now, thanks!

 

Now I am trying to figure out if this is a memory or a driver issue, both seem possible. Any ideas?
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini092407-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Mon Sep 24 03:28:20.312 2007 (GMT-4)
System Uptime: 0 days 2:25:25.002
Loading Kernel Symbols
.............................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 80550ae2, ac0dd45c, 0}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+107 )

Followup: Pool_corruption
---------

0: kd> !analyze -v
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 80550ae2, The address that the exception occurred at
Arg3: ac0dd45c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
nt!ExDeferredFreePool+107
80550ae2 893b mov dword ptr [ebx],edi

TRAP_FRAME: ac0dd45c -- (.trap 0xffffffffac0dd45c)
ErrCode = 00000002
eax=e405ba90 ebx=00000187 ecx=000001ff edx=e405ba90 esi=8a6f90a0 edi=00000000
eip=80550ae2 esp=ac0dd4d0 ebp=ac0dd510 iopl=0 nv up ei ng nz ac pe cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010297
nt!ExDeferredFreePool+0x107:
80550ae2 893b mov dword ptr [ebx],edi ds:0023:00000187=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: explorer.exe

LAST_CONTROL_TRANSFER: from 80550ac7 to 80550ae2

STACK_TEXT:
ac0dd510 80550ac7 00000001 00000000 e41a06f8 nt!ExDeferredFreePool+0x107
ac0dd550 bf802a9b e41a06f8 00000000 ac0dd56c nt!ExFreePoolWithTag+0x47f
ac0dd560 bf805a15 e41a06f8 ac0dd5c0 bf809d67 win32k!HeavyFreePool+0xbb
ac0dd56c bf809d67 e41a06f8 00000005 5a051183 win32k!FreeObject+0x25
ac0dd5c0 bf809e86 00000000 00000000 ac0dd5e4 win32k!SURFACE::bDeleteSurface+0x14b
ac0dd5d0 bf80fa0c 00000000 00000000 e41a06f8 win32k!SURFREF::bDeleteSurface+0x12
ac0dd5e4 bf80fae5 5a051183 00eef280 ac0dd604 win32k!bDeleteSurface+0x20
ac0dd5f8 804dd99f 5a051183 00eef294 7c90eb94 win32k!NtGdiDeleteObjectApp+0x74
ac0dd5f8 7c90eb94 5a051183 00eef294 7c90eb94 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00eef294 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExDeferredFreePool+107
80550ae2 893b mov dword ptr [ebx],edi

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

SYMBOL_NAME: nt!ExDeferredFreePool+107

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107

BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107

Followup: Pool_corruption
---------

0: kd> lmvm Pool_Corruption
start end module name

 

I'm thinking driver error, pity it didnt list the driver thiough...

Did you have any other memory dumps to check?

If its happening at night mostly, is it because you have standby, etc enabled for power saving?

 

I have no power management enabled currently, thats kind of why I am WTF mode. The only thing I usually have running are googletalk, aim ad hack, and peteres ultimate alarm clock(this is why the resets piss me off, use my comp as my alarm)

 

Ok this one is from the 21st...oddly enough this is the expiration date on the milk in the fridge...lol

Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini092107-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Fri Sep 21 21:33:18.390 2007 (GMT-4)
System Uptime: 2 days 7:22:06.093
Loading Kernel Symbols
...........................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 2060001, 88e4a700}

Unable to load image vsdatant.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+44d41 )

Followup: MachineOwner
---------

0: kd> !analyze -v
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 02060001, Memory contents of the pool block
Arg4: 88e4a700, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS: 88e4a700

FREED_POOL_TAG: TCPc

BUGCHECK_STR: 0xc2_7_TCPc

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from 80550fc5 to 8053738a

STACK_TEXT:
f78d2810 80550fc5 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
f78d2860 aea20417 88e4a700 00000000 f78d28a8 nt!ExFreePoolWithTag+0x2c1
f78d2870 aea1fca7 89998e00 89998e94 89998e94 tcpip!TCPClose+0x16
f78d28a8 ae9b1d41 899703b8 89998e00 ae9b164d tcpip!TCPDispatch+0x101
WARNING: Stack unwind information not available. Following frames may be wrong.
f78d2958 804d9e25 00000001 ffdffca8 ffdff120 vsdatant+0x44d41
f78d298c 804e5602 00000000 00000206 804dc791 nt!KiIpiSend+0x27
f78d2998 804dc791 8a6cdb02 804e20c3 88f34000 nt!ExfInterlockedInsertTailList+0x2
f78d29a0 804e20c3 88f34000 000000f5 804e56f0 nt!KiUnlockDispatcherDatabase+0x47
f78d29f0 ae94b4c8 f78d2a10 ae956402 897f26e0 nt!KeSetEvent+0x76
f78d2a18 ae957d81 899fff80 8998fd48 899ffed3 afd!ExFreeToNPagedLookasideList+0x29
89998e00 00000000 00000404 00000000 8a6cdd40 afd!AfdRestartBufferSend+0x3a


STACK_COMMAND: kb

FOLLOWUP_IP:
vsdatant+44d41
ae9b1d41 ?? ???

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: vsdatant+44d41

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: vsdatant

IMAGE_NAME: vsdatant.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45f0fed1

FAILURE_BUCKET_ID: 0xc2_7_TCPc_vsdatant+44d41

BUCKET_ID: 0xc2_7_TCPc_vsdatant+44d41

Followup: MachineOwner
---------

0: kd> lmvm vsdatant
start end module name
ae96d000 ae9cbce0 vsdatant T (no symbols)
Loaded symbol image file: vsdatant.sys
Image path: vsdatant.sys
Image name: vsdatant.sys
Timestamp: Fri Mar 09 01:29:37 2007 (45F0FED1)
CheckSum: 00063309
ImageSize: 0005ECE0
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0

 

That one was called by Zone Alarm. It too, was a driver.


Might be a place to start!

 

Sigh...sometimes I hate zonealarm...great firewall...but equally great pain in the a**