Asus G2S-B1 Mysterious BSOD

Hello everyone,

Seems that I am getting the mysterious driver bsod again. No changes have been made, it was RMA'd once before for this issue and the problem was apparently "dust"... Here is the dump file information. I can uploaded it if someone is better at this than I am, but I cannot find the driver making the issue, I have been looking at this for 3 hours already with no luck. Thank you for your help.

--Start Dump Info--

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini092208-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols* http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18063.x86fre.vistasp1_gdr.080425-1930
Kernel base = 0x8243a000 PsLoadedModuleList = 0x82551c70
Debug session time: Mon Sep 22 23:56:00.122 2008 (GMT-7)
System Uptime: 0 days 7:57:51.026
Loading Kernel Symbols
..............................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 110b, 8540004, 87d2d8a8}

Unable to load image inspect.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for inspect.sys
*** ERROR: Module load completed but symbols could not be loaded for inspect.sys
Unable to load image dne2000.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dne2000.sys
*** ERROR: Module load completed but symbols could not be loaded for dne2000.sys
GetPointerFromAddress: unable to read from 82571868
Unable to read MiSystemVaType memory at 82551420
*** WARNING: Unable to verify timestamp for mcupdate.dll
*** ERROR: Module load completed but symbols could not be loaded for mcupdate.dll
*** WARNING: Unable to verify timestamp for spmj.sys
*** ERROR: Module load completed but symbols could not be loaded for spmj.sys
*** WARNING: Unable to verify timestamp for iaNvStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaNvStor.sys
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for jraid.sys
*** ERROR: Module load completed but symbols could not be loaded for jraid.sys
*** WARNING: Unable to verify timestamp for PxHelp20.sys
*** ERROR: Module load completed but symbols could not be loaded for PxHelp20.sys
*** WARNING: Unable to verify timestamp for dump_iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for dump_iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for spldr.sys
*** WARNING: Unable to verify timestamp for speedfan.sys
*** ERROR: Module load completed but symbols could not be loaded for speedfan.sys
*** WARNING: Unable to verify timestamp for JGOGO.sys
*** ERROR: Module load completed but symbols could not be loaded for JGOGO.sys
*** WARNING: Unable to verify timestamp for giveio.sys
*** ERROR: Module load completed but symbols could not be loaded for giveio.sys
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
*** WARNING: Unable to verify timestamp for atl01v32.sys
*** ERROR: Module load completed but symbols could not be loaded for atl01v32.sys
*** WARNING: Unable to verify timestamp for NETw4v32.sys
*** ERROR: Module load completed but symbols could not be loaded for NETw4v32.sys
*** WARNING: Unable to verify timestamp for rimmptsk.sys
*** ERROR: Module load completed but symbols could not be loaded for rimmptsk.sys
*** WARNING: Unable to verify timestamp for rimsptsk.sys
*** ERROR: Module load completed but symbols could not be loaded for rimsptsk.sys
*** WARNING: Unable to verify timestamp for rixdptsk.sys
*** ERROR: Module load completed but symbols could not be loaded for rixdptsk.sys
*** WARNING: Unable to verify timestamp for kbfiltr.sys
*** ERROR: Module load completed but symbols could not be loaded for kbfiltr.sys
*** WARNING: Unable to verify timestamp for Apfiltr.sys
*** ERROR: Module load completed but symbols could not be loaded for Apfiltr.sys
*** WARNING: Unable to verify timestamp for itecir.sys
*** ERROR: Module load completed but symbols could not be loaded for itecir.sys
*** WARNING: Unable to verify timestamp for dvd43llh.sys
*** ERROR: Module load completed but symbols could not be loaded for dvd43llh.sys
*** WARNING: Unable to verify timestamp for an1w55rq.SYS
*** ERROR: Module load completed but symbols could not be loaded for an1w55rq.SYS
*** WARNING: Unable to verify timestamp for ATKACPI.sys
*** ERROR: Module load completed but symbols could not be loaded for ATKACPI.sys
*** WARNING: Unable to verify timestamp for lmimirr.sys
*** ERROR: Module load completed but symbols could not be loaded for lmimirr.sys
*** WARNING: Unable to verify timestamp for RTKVHDA.sys
*** ERROR: Module load completed but symbols could not be loaded for RTKVHDA.sys
*** WARNING: Unable to verify timestamp for drmk.sys
*** ERROR: Module load completed but symbols could not be loaded for drmk.sys
*** WARNING: Unable to verify timestamp for smserial.sys
*** ERROR: Module load completed but symbols could not be loaded for smserial.sys
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
*** WARNING: Unable to verify timestamp for snp2uvc.sys
*** ERROR: Module load completed but symbols could not be loaded for snp2uvc.sys
*** WARNING: Unable to verify timestamp for sncduvc.SYS
*** ERROR: Module load completed but symbols could not be loaded for sncduvc.SYS
*** WARNING: Unable to verify timestamp for LUsbFilt.Sys
*** ERROR: Module load completed but symbols could not be loaded for LUsbFilt.Sys
*** WARNING: Unable to verify timestamp for LHidFilt.Sys
*** ERROR: Module load completed but symbols could not be loaded for LHidFilt.Sys
*** WARNING: Unable to verify timestamp for LMouFilt.Sys
*** ERROR: Module load completed but symbols could not be loaded for LMouFilt.Sys
*** WARNING: Unable to verify timestamp for cmdhlp.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdhlp.sys
*** WARNING: Unable to verify timestamp for avgmfx86.sys
*** ERROR: Module load completed but symbols could not be loaded for avgmfx86.sys
*** WARNING: Unable to verify timestamp for avgldx86.sys
*** ERROR: Module load completed but symbols could not be loaded for avgldx86.sys
*** WARNING: Unable to verify timestamp for ATMFD.DLL
*** ERROR: Module load completed but symbols could not be loaded for ATMFD.DLL
*** WARNING: Unable to verify timestamp for spsys.sys
*** ERROR: Module load completed but symbols could not be loaded for spsys.sys
*** WARNING: Unable to verify timestamp for ASMMAP.sys
*** ERROR: Module load completed but symbols could not be loaded for ASMMAP.sys
*** WARNING: Unable to verify timestamp for CVPNDRVA.sys
*** ERROR: Module load completed but symbols could not be loaded for CVPNDRVA.sys
*** WARNING: Unable to verify timestamp for RaInfo.sys
*** ERROR: Module load completed but symbols could not be loaded for RaInfo.sys
*** WARNING: Unable to verify timestamp for LMIRfsDriver.sys
*** ERROR: Module load completed but symbols could not be loaded for LMIRfsDriver.sys
*** WARNING: Unable to verify timestamp for secdrv.SYS
*** ERROR: Module load completed but symbols could not be loaded for secdrv.SYS
*** WARNING: Unable to verify timestamp for RTCore32.sys
*** ERROR: Module load completed but symbols could not be loaded for RTCore32.sys
*** WARNING: Unable to verify timestamp for hiber_iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for hiber_iaStor.sys
Probably caused by : inspect.sys ( inspect+258d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 0000110b, (reserved)
Arg3: 08540004, Memory contents of the pool block
Arg4: 87d2d8a8, Address of the block of pool being deallocated

Debugging Details:
------------------

GetPointerFromAddress: unable to read from 82571868
Unable to read MiSystemVaType memory at 82551420

POOL_ADDRESS: GetPointerFromAddress: unable to read from 82571868
Unable to read MiSystemVaType memory at 82551420
87d2d8a8

BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8252800c to 82507163

STACK_TEXT:
8b9637d4 8252800c 000000c2 00000007 0000110b nt!KeBugCheckEx+0x1e
8b963848 832cb370 87d2d8a8 00000000 8b9639a8 nt!ExFreePoolWithTag+0x17f
8b963858 8fbab58d 87d2d8a8 00000000 00000000 ndis!NdisFreeMemory+0x16
WARNING: Stack unwind information not available. Following frames may be wrong.
8b9639a8 8339a4b1 8b963a44 8b9639d0 89017d0c inspect+0x258d
8b963a3c 8339a129 c0000001 85198d70 832fa918 ndis!ndisInitializeBinding+0x23b
8b963ac8 833a8f67 890170e8 00000000 00000000 ndis!ndisCheckAdapterBindings+0x170
8b963aec 833a91e1 00000000 9104e020 00000000 ndis!ndisIMInitializeDeviceInstance+0x93
8b963b0c 8fa9e329 8919cae0 88561e50 9104e020 ndis!NdisIMInitializeDeviceInstanceEx+0x100
8b963b58 8339a4b1 8b963bf4 8b963b80 88e187ac dne2000+0xa329
8b963bec 8339a129 00000000 85fb65a0 00000000 ndis!ndisInitializeBinding+0x23b
8b963c78 833afe89 88ed91d8 00000000 00000000 ndis!ndisCheckAdapterBindings+0x170
8b963d34 83398013 887de840 88ed91d8 8b963d7c ndis!ndisDevicePowerOn+0x515
8b963d44 8247241d 887de840 00000000 85192580 ndis!ndisWorkItemHandler+0xe
8b963d7c 8260fb18 887de840 db69512d 00000000 nt!ExpWorkerThread+0xfd
8b963dc0 82468a3e 82472320 00000001 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
inspect+258d
8fbab58d ?? ???

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: inspect+258d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: inspect

IMAGE_NAME: inspect.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4834413f

FAILURE_BUCKET_ID: 0xc2_7_inspect+258d

BUCKET_ID: 0xc2_7_inspect+258d

Followup: MachineOwner
---------
--End Dump Info--

 

Whats up with those errors ?
Can you upload the minidump ?

 

I believe the error is "The current thread attempted to free the pool, which was already freed."

Uninstall, then update the "COMODO Firewall Pro Firewall Driver" to the latest version.

 

Here is my dump file. I am running the latest Comodo but I am reinstalling as I type. I was forced into using Comodo as it was the only program that would work with my cisco VPN/Remote Desktop, seems ZoneAlarm wouldn't play :/

 

That driver is not playing nice. Try running a scan here, and look for a different version, probably the previous driver version for comodo.

Also, if you have ZoneAlarm, try uninstalling it for a while, and see if there are any BSODs. ZA has a good history of errors/BSODs in windows. It could be conflicting with comodo.

 

I had uninstalled zonealarm previously, but it could be both are conflicting, would reinstalling zl and comodo, then uninstalling in safe mode be the best bet?

 

If ZA is uninstalled, then its fine. It could be something to do with the comodo driver.
BTW, cleaning up the registry will be a good idea.

 

Here is my report. It looks like all the drivers checkout, according to the site. The checksum of the comodo driver matches.

URL: http://www.runscanner.net/report.aspx?report=2734fb51-0e35-4bd0-a7d7-e5080be768f3

 

Since you're using Vista, you can also run Driver Verifier to monitor the inspect.sys driver.

To open Driver Verifier, run CMD > Verifier.

http://msdn.microsoft.com/en-us/library/ms792865.aspx

 

While in safe mode I uninstalled Comodo and ran registry mechanic. I moved back to Zone Alarm and to my amazement, the VPN still works (or still gets to the same point as before with Comodo while at this new network I have to get permissions for, but that's a different story). I attempted to recreate the BSOD via hibernation, the action that caused the previous, but to no luck. Hopefully ZL works out and I don't have to bounce back to Comodo. Thank you for your help and I guess only time will tell.