BSOD cmdagent

CIS 5.3.181415.1237
VIRUS SIG 7929

ACCOUNT: ADMIN

Windows XP PRO x64 SP3 - v5.2, Build 3790 (up to date)

BIOS : Award ASUS P5N-E SLI ACPI BIOS Revision 0901
BIOS Type : Award Phoenix - AwardBIOS v6.00PG

Motherboard : ASUS P5N-E SLI
Motherboard Chipsets :

  • North Bridge: nVIDIA nForce 650i SLI (C55)
  • South Bridge: nVIDIA nForce 430i (MCP51)
    CPU : Intel QuadCore 6600 CPU 2.40Ghz
    RAM : 4090MB RAM
    GFX : GeForce 8800 GTX
    GFX Driver : NVIDIA GeForce-ION Driver Release 266.58_desktop_winxp_64bit_english_whql.exe
    Motherboard : NVIDIA nForce 650i SLI 15.45_nforce_winxp64_international_whql
    Soundcard : built-in Realtek ALC883 [at] nVIDIA nForce 430i (MCP51) - High Definition Audio Controller PCI
    Soundcard Driver : Realtek High Definition Audio Codecs R2.54

Comodo Internet Security
Antivirus : Disabled
Defense : Perm. Disabled
Firewall : Custom
Sandbox: enabled


  •                                                                         *
    
  •                    Bugcheck Analysis                                    *
    
  •                                                                         *
    

Use !analyze -v to get detailed debugging information.

BugCheck C5, {fffff810011ce1f8, 2, 0, fffff800011a9e88}

*** WARNING: Unable to verify checksum for fltMgr.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+3ac )

Followup: Pool_corruption

2: kd> !analyze -v


  •                                                                         *
    
  •                    Bugcheck Analysis                                    *
    
  •                                                                         *
    

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn’t turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: fffff810011ce1f8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff800011a9e88, address which referenced memory

Debugging Details:

BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExDeferredFreePool+3ac
fffff800`011a9e88 488b02 mov rax,qword ptr [rdx]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: cmdagent.exe

TRAP_FRAME: fffffadf896fde70 – (.trap 0xfffffadf896fde70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000051000d00 rbx=0000000000000000 rcx=fffffadf998cbaff
rdx=fffff810011ce1f8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800011a9e88 rsp=fffffadf896fe000 rbp=fffff800011ce1c0
r8=fffffadf998cbaef r9=0000000000000000 r10=fffadf99e5dc20ff
r11=000000000000000d r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac pe nc
nt!ExDeferredFreePool+0x3ac:
fffff800011a9e88 488b02 mov rax,qword ptr [rdx] ds:ac00:fffff810011ce1f8=???
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff8000102e5b4 to fffff8000102e890

STACK_TEXT:
fffffadf896fdce8 fffff8000102e5b4 : 000000000000000a fffff810011ce1f8 0000000000000002 0000000000000000 : nt!KeBugCheckEx
fffffadf896fdcf0 fffff8000102d547 : 0000000000000000 0000000000000000 fffffadf9970b000 fffffadf9970b040 : nt!KiBugCheckDispatch+0x74
fffffadf896fde70 fffff800011a9e88 : fffffadf999f5380 fffff800010273d9 fffffadf896fe2d8 0000000000000000 : nt!KiPageFault+0x207
fffffadf896fe000 fffff800011aa03d : fffffadf98e42810 0000000000000502 fffffadf98e42800 fffff800011ce1c0 : nt!ExDeferredFreePool+0x3ac
fffffadf896fe070 fffff8000103c2ae : fffffadf98e42810 0000000000000000 fffffadf98e42810 0000000000000000 : nt!ExFreePoolWithTag+0x759
fffffadf896fe130 fffff800010c8468 : fffffadf99b76040 fffffadf98e42840 fffffadf9c95f270 0000000000000000 : nt!ObfDereferenceObject+0x83
fffffadf896fe160 fffffadf905c0b58 : fffffadf99968180 0000000000000008 fffffadf98e42840 fffffadf98e42990 : nt!IopCompleteUnloadOrDelete+0x3ad
fffffadf896fe200 fffffadf905c885d : 00000000c0000013 fffffadf99714ca0 00000000c0000013 fffffadf98e4dee0 : fltMgr!FltpCleanupDeviceObject+0x108
fffffadf896fe250 fffffadf905c8ee0 : fffffadf999f5380 fffffadf99b76490 fffffadf99b76040 fffffadf999f5380 : fltMgr!FltpFsControlMountVolume+0x3dd
fffffadf896fe310 fffffadf905c8710 : 0000000000000000 fffffadf99b76490 0000000000000000 fffffadf995c0ee0 : fltMgr!FltpFsControl+0x80
fffffadf896fe370 fffffadf905c8ee0 : fffffadf999f5380 0000000000000011 fffffadf99b76340 fffffadf99714c50 : fltMgr!FltpFsControlMountVolume+0x290
fffffadf896fe430 fffff8000107ad7c : fffffadf99b76340 fffffadf99714ca0 fffffadf99b76340 fffffadf999f5380 : fltMgr!FltpFsControl+0x80
fffffadf896fe490 fffff80001297c12 : fffffadf896fea80 fffffadf9c662800 fffffadf896fe7b0 fffffadf896fe604 : nt!IopCheckVpbMounted+0x437
fffffadf896fe580 fffff80001280144 : fffffadf9c662800 fffffadf9c6627b0 fffffadf896fe8b0 0000000000000001 : nt!IopParseDevice+0x741
fffffadf896fe730 fffff80001284867 : 0000000000000000 fffffadf896fe8a0 0000000000000040 0000000000000000 : nt!ObpLookupObjectName+0x931
fffffadf896fe840 fffff80001294a1d : 0000000000000000 000000000c3fefc0 00001720ebf90b71 0000000000000000 : nt!ObOpenObjectByName+0x180
fffffadf896fea30 fffff8000102e33d : fffffadf9970b040 fffffadf896fecf0 fffffadf9970b040 000000000604145c : nt!NtQueryAttributesFile+0x133
fffffadf896fec70 0000000077ef080a : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x3
000000000c3ff068 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x77ef080a

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExDeferredFreePool+3ac
fffff800`011a9e88 488b02 mov rax,qword ptr [rdx]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!ExDeferredFreePool+3ac

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+3ac

BUCKET_ID: X64_0xC5_2_nt!ExDeferredFreePool+3ac

Followup: Pool_corruption

[attachment deleted by admin]

We would very much appreciate it if you would edit your first post to create an issue report in line with the bug forum guidelines and format here. You can copy and paste the format from this topic.

To understand the reasons why we ask you to follow these guidelines please see below.

WHY WE ASK YOU TO FOLLOW THESE GUIDELINES
Bugs/issues can be impossible or very time consuming to fix if developers don’t have enough information to reproduce them. Since CIS is free, development time is limited. So if you want your issue fixed, please use the format below to describe it.

To avoid clutter, issues not described in the format below your post will not be moved to the ‘moderator verified’ issues topic. This means that the developers may not look at it.

Best wishes and many thanks in anticipation

Dennis

We really would very much appreciate it if you would edit your first post to create an issue report in line with the bug forum guidelines and format. You can copy and paste the format from this topic.

Thank you

Dennis

Unfortunately we do need this issue to be reported in the full right format, and with all the information we have asked for, if we are to forward it to verified issues.

For the moment I am going to move it to the Orphaned/Resolved child board. If you do edit your post to create a complete issue report in standard format, and PM an active mod, we will of course consider moving it to verified reports.

The devs only look at the Orphaned/Resolved board if they have time, so please do edit the post and PM an active mod if you want it fixed.

Dennis