BSOD on resume from sleep (V3.5.57173.439 X32)

Vista Home Premium 32 bit, SP 1 fully patched
Norton AV 2009

My wife let the computer go to sleep and upon resume it bluescreened with bugcheck c2. It has not done this before and Comodo has only been on her computer for about a week. Windbg points to inspect.sys as the probable cause

Windbg report:

Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRVc:\websymbolsSymbol information
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0x82652000 PsLoadedModuleList = 0x82769c70
Debug session time: Mon Feb 16 20:34:26.826 2009 (GMT-6)
System Uptime: 0 days 8:46:38.685
Loading Kernel Symbols



Loading User Symbols

Loading unloaded module list


  •                                                                         *
    
  •                    Bugcheck Analysis                                    *
    
  •                                                                         *
    

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 110b, 8530003, 89618350}

*** ERROR: Module load completed but symbols could not be loaded for inspect.sys
*** ERROR: Module load completed but symbols could not be loaded for VMNetSrv.sys
Probably caused by : inspect.sys ( inspect+2160 )

Followup: MachineOwner

1: kd> !analyze -v


  •                                                                         *
    
  •                    Bugcheck Analysis                                    *
    
  •                                                                         *
    

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 0000110b, (reserved)
Arg3: 08530003, Memory contents of the pool block
Arg4: 89618350, Address of the block of pool being deallocated

Debugging Details:

POOL_ADDRESS: 89618350 Nonpaged pool

FREED_POOL_TAG: aPmI

BUGCHECK_STR: 0xc2_7_aPmI

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8274000c to 8271f0e3

STACK_TEXT:
8b55785c 8274000c 000000c2 00000007 0000110b nt!KeBugCheckEx+0x1e
8b5578d4 8a6dd370 89618350 00000000 8b557924 nt!ExFreePoolWithTag+0x17f
8b5578e4 8e9d9160 89618350 00000000 00000000 ndis!NdisFreeMemory+0x16
WARNING: Stack unwind information not available. Following frames may be wrong.
8b557924 8a7ac4b1 8b5579c0 8b55794c 877561ac inspect+0x2160
8b5579b8 8a7ac129 c0000001 84b8ac70 8a70c918 ndis!ndisInitializeBinding+0x23b
8b557a44 8a7baf67 877030e8 00000000 00000000 ndis!ndisCheckAdapterBindings+0x170
8b557a68 8a7bb1e1 00000000 87db5800 00000000 ndis!ndisIMInitializeDeviceInstance+0x93
8b557a88 8f1c3a83 87704d88 870a8ed8 87db5800 ndis!NdisIMInitializeDeviceInstanceEx+0x100
8b557b4c 8f1c6cef 8762a89c 8b557be0 8a7ac4b1 VMNetSrv+0x2a83
00000000 00000000 00000000 00000000 00000000 VMNetSrv+0x5cef

STACK_COMMAND: kb

FOLLOWUP_IP:
inspect+2160
8e9d9160 8b4dfc mov ecx,dword ptr [ebp-4]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: inspect+2160

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: inspect

IMAGE_NAME: inspect.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 491b1a47

FAILURE_BUCKET_ID: 0xc2_7_aPmI_inspect+2160

BUCKET_ID: 0xc2_7_aPmI_inspect+2160

Followup: MachineOwner

[attachment deleted by admin]

[attachment deleted by admin]

This bug must have been fixed now as of build 477.