Server crashing every few weeks

I was hoping someone could shine some light on this issue. We have two nearly identical servers that are crashing intermittantly every few weeks…

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {782, b5e4e040, c7680000, e5d5dad8}

*** WARNING: Unable to verify checksum for qsmserver.exe
*** ERROR: Module load completed but symbols could not be loaded for qsmserver.exe
*** WARNING: Unable to verify checksum for libsv.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for libsv.dll -
Probably caused by : memory_corruption ( nt!MmUnmapViewInSystemCache+45b )

Followup: MachineOwner

1: kd> !analyze -v;r;kv;lmtn
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)

Any other values for parameter 1 must be individually examined.

Arguments:
Arg1: 00000782, The subtype of the bugcheck.
Arg2: b5e4e040
Arg3: c7680000
Arg4: e5d5dad8

Debugging Details:

BIOS_DATE: 08/22/2005

BUGCHECK_P1: 782

BUGCHECK_P2: ffffffffb5e4e040

BUGCHECK_P3: ffffffffc7680000

BUGCHECK_P4: ffffffffe5d5dad8

BUGCHECK_STR: 0x1a_782

CPU_COUNT: 4

CPU_MHZ: 89d

CPU_VENDOR: AuthenticAMD

CPU_FAMILY: f

CPU_MODEL: 21

CPU_STEPPING: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: qsmserver.exe

CURRENT_IRQL: 0

ANALYSIS_VERSION: 10.0.10240.9 x86fre

LAST_CONTROL_TRANSFER: from 80859ad7 to 80827f7d

STACK_TEXT:
b5e4e018 80859ad7 0000001a 00000782 b5e4e040 nt!KeBugCheckEx+0x1b
b5e4e27c 808b89e6 c7680000 e5d5dad8 00000000 nt!MmUnmapViewInSystemCache+0x45b
b5e4e294 80814163 8a576298 88b22818 00000000 nt!CcUnmapVacb+0x2a
b5e4e2f8 8081451b 8a22e620 0d31f400 00000000 nt!CcGetVacbMiss+0x33d
b5e4e334 808b8138 8a22e620 0d31f400 00000000 nt!CcGetVirtualAddress+0xb7
b5e4e358 808b846f 88df2e28 b5e4e3e4 00000400 nt!CcMapDataCommon+0x4a
b5e4e3b4 bafb0f6e 88df2e28 b5e4e3e4 00000400 nt!CcMapData+0x55
b5e4e3d4 bafae4d1 88fc8c68 88e7ab48 0d31f400 Ntfs!NtfsMapStream+0x4b
b5e4e448 bafb0e31 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadMftRecord+0x86
b5e4e480 bafb0fed 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadFileRecord+0x7a
b5e4e4b8 bafa28de 88fc8c68 e69010a0 e69010a8 Ntfs!NtfsLookupInFileRecord+0x37
b5e4e568 bafa4811 88fc8c68 00000001 e69010a0 Ntfs!NtfsUpdateFcbInfoFromDisk+0x3e
b5e4e634 bafa210a 88fc8c68 88cf8560 88cf86a8 Ntfs!NtfsOpenFile+0x330
b5e4e858 bafb1f38 88fc8c68 88cf8560 b5e4e898 Ntfs!NtfsCommonCreate+0x1280
b5e4e95c 8081e185 88d4d460 88cf8560 88cf8560 Ntfs!NtfsFsdCreate+0x17d
b5e4e970 f724eb39 00000000 88cf8560 88cf86cc nt!IofCallDriver+0x45
b5e4e994 f725c608 b5e4e9b4 8849e0f8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
b5e4e9d0 8081e185 8849e0f8 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a
b5e4e9e4 f724eb39 00000000 88cf8560 88cf86f0 nt!IofCallDriver+0x45
b5e4ea08 f725c608 b5e4ea28 88f6e458 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
b5e4ea44 8081e185 88f6e458 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a
b5e4ea58 808fb411 b5e4ec04 88a544e8 00000000 nt!IofCallDriver+0x45
b5e4eb40 80939f4d 88a54500 00000000 8825f088 nt!IopParseDevice+0xa35
b5e4ebc4 80936066 00000000 b5e4ec04 00000040 nt!ObpLookupObjectName+0x5c1
b5e4ec18 808ed0b5 00000000 00000000 00000501 nt!ObOpenObjectByName+0xea
b5e4ec94 808ee36b 0012b204 00120080 0012b1a0 nt!IopCreateFile+0x447
b5e4ecf0 808f0faa 0012b204 00120080 0012b1a0 nt!IoCreateFile+0xa3
b5e4ed30 8088b658 0012b204 00120080 0012b1a0 nt!NtCreateFile+0x30
b5e4ed30 7c8283ac 0012b204 00120080 0012b1a0 nt!KiSystemServicePostCall
0012b15c 7c826ba9 77e64a1f 0012b204 00120080 ntdll!KiFastSystemCallRet
0012b160 77e64a1f 0012b204 00120080 0012b1a0 ntdll!NtCreateFile+0xc
0012b1fc 004742b6 00000000 00020000 00000003 kernel32!CreateFileW+0x377
WARNING: Stack unwind information not available. Following frames may be wrong.
0012b230 00474919 00c19770 0012b314 00000000 qsmserver+0x742b6
0012b348 0047a8eb 0073cee0 00c2e518 0012bd08 qsmserver+0x74919
0012b7a8 0047dda1 0073cee0 00c2e518 0012bd08 qsmserver+0x7a8eb
0012bf34 0047e062 0073cee0 00000000 00c2e518 qsmserver+0x7dda1
0012c6b4 0047e062 0073cee0 00000000 0146d160 qsmserver+0x7e062
0012ce34 0047e062 0073cee0 00000000 0144a6d0 qsmserver+0x7e062
0012d5b4 0047e062 0073cee0 00000000 0144bc40 qsmserver+0x7e062
0012dd34 0047e062 0073cee0 00000000 01428298 qsmserver+0x7e062
0012e4b4 0047e062 0073cee0 00000000 0144b380 qsmserver+0x7e062
0012ec34 0047e062 0073cee0 013e2af0 01427380 qsmserver+0x7e062
0012f3b4 00417a00 0073cee0 013e2af0 00c2d368 qsmserver+0x7e062
0012fd10 00407f49 01140038 00000010 100b5b60 qsmserver+0x17a00
0012fd48 100572b8 00b51830 01140038 00b51468 qsmserver+0x7f49
0012fd64 10018cea 0012fe50 00b514a0 0012fdb0 libsv!MsgWaitMultipleMessagesWithTimeout+0x6b8
0012fda8 10056e8b 0073a878 10057250 0012fe50 libsv!ListWalk+0x5a
0012fe8c 10057318 00000000 00000000 0012fea4 libsv!MsgWaitMultipleMessagesWithTimeout+0x28b
0012feac 0040712c 00000000 00000000 ffffffff libsv!MsgWaitMessageWithTimeout+0x28
0012ff60 004a97ab 00000002 00734f90 007334d8 qsmserver+0x712c
0012ffc0 77e6f32b 00000000 00000000 7ffd5000 qsmserver+0xa97ab
0012fff0 00000000 004a9668 00000000 78746341 kernel32!BaseProcessStart+0x23

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MmUnmapViewInSystemCache+45b
80859ad7 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MmUnmapViewInSystemCache+45b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 5507b8b7

IMAGE_VERSION: 5.2.3790.5583

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0x1a_782_nt!MmUnmapViewInSystemCache+45b

BUCKET_ID: 0x1a_782_nt!MmUnmapViewInSystemCache+45b

PRIMARY_PROBLEM_CLASS: 0x1a_782_nt!MmUnmapViewInSystemCache+45b

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x1a_782_nt!mmunmapviewinsystemcache+45b

FAILURE_ID_HASH: {aa40dcdd-e38d-da68-1e2d-11c31748395e}

Followup: MachineOwner

eax=f772f13c ebx=b5e4e040 ecx=00000002 edx=808ad6c0 esi=f772f120 edi=88dfc8c0
eip=80827f7d esp=b5e4e000 ebp=b5e4e018 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
80827f7d 5d pop ebp

ChildEBP RetAddr Args to Child

00 b5e4e018 80859ad7 0000001a 00000782 b5e4e040 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
01 b5e4e27c 808b89e6 c7680000 e5d5dad8 00000000 nt!MmUnmapViewInSystemCache+0x45b (FPO: [Non-Fpo])
02 b5e4e294 80814163 8a576298 88b22818 00000000 nt!CcUnmapVacb+0x2a (FPO: [Non-Fpo])
03 b5e4e2f8 8081451b 8a22e620 0d31f400 00000000 nt!CcGetVacbMiss+0x33d (FPO: [Non-Fpo])
04 b5e4e334 808b8138 8a22e620 0d31f400 00000000 nt!CcGetVirtualAddress+0xb7 (FPO: [Non-Fpo])
05 b5e4e358 808b846f 88df2e28 b5e4e3e4 00000400 nt!CcMapDataCommon+0x4a (FPO: [Non-Fpo])
06 b5e4e3b4 bafb0f6e 88df2e28 b5e4e3e4 00000400 nt!CcMapData+0x55 (FPO: [Non-Fpo])
07 b5e4e3d4 bafae4d1 88fc8c68 88e7ab48 0d31f400 Ntfs!NtfsMapStream+0x4b (FPO: [Non-Fpo])
08 b5e4e448 bafb0e31 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadMftRecord+0x86 (FPO: [Non-Fpo])
09 b5e4e480 bafb0fed 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadFileRecord+0x7a (FPO: [Non-Fpo])
0a b5e4e4b8 bafa28de 88fc8c68 e69010a0 e69010a8 Ntfs!NtfsLookupInFileRecord+0x37 (FPO: [Non-Fpo])
0b b5e4e568 bafa4811 88fc8c68 00000001 e69010a0 Ntfs!NtfsUpdateFcbInfoFromDisk+0x3e (FPO: [Non-Fpo])
0c b5e4e634 bafa210a 88fc8c68 88cf8560 88cf86a8 Ntfs!NtfsOpenFile+0x330 (FPO: [Non-Fpo])
0d b5e4e858 bafb1f38 88fc8c68 88cf8560 b5e4e898 Ntfs!NtfsCommonCreate+0x1280 (FPO: [Non-Fpo])
0e b5e4e95c 8081e185 88d4d460 88cf8560 88cf8560 Ntfs!NtfsFsdCreate+0x17d (FPO: [Non-Fpo])
0f b5e4e970 f724eb39 00000000 88cf8560 88cf86cc nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
10 b5e4e994 f725c608 b5e4e9b4 8849e0f8 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [Non-Fpo])
11 b5e4e9d0 8081e185 8849e0f8 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a (FPO: [Non-Fpo])
12 b5e4e9e4 f724eb39 00000000 88cf8560 88cf86f0 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
13 b5e4ea08 f725c608 b5e4ea28 88f6e458 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [Non-Fpo])
14 b5e4ea44 8081e185 88f6e458 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a (FPO: [Non-Fpo])
15 b5e4ea58 808fb411 b5e4ec04 88a544e8 00000000 nt!IofCallDriver+0x45 (FPO: [Non-Fpo])
16 b5e4eb40 80939f4d 88a54500 00000000 8825f088 nt!IopParseDevice+0xa35 (FPO: [Non-Fpo])
17 b5e4ebc4 80936066 00000000 b5e4ec04 00000040 nt!ObpLookupObjectName+0x5c1 (FPO: [Non-Fpo])
18 b5e4ec18 808ed0b5 00000000 00000000 00000501 nt!ObOpenObjectByName+0xea (FPO: [Non-Fpo])
19 b5e4ec94 808ee36b 0012b204 00120080 0012b1a0 nt!IopCreateFile+0x447 (FPO: [Non-Fpo])
1a b5e4ecf0 808f0faa 0012b204 00120080 0012b1a0 nt!IoCreateFile+0xa3 (FPO: [Non-Fpo])
1b b5e4ed30 8088b658 0012b204 00120080 0012b1a0 nt!NtCreateFile+0x30 (FPO: [Non-Fpo])
1c b5e4ed30 7c8283ac 0012b204 00120080 0012b1a0 nt!KiSystemServicePostCall (FPO: [0,0] TrapFrame @ b5e4ed64)
1d 0012b15c 7c826ba9 77e64a1f 0012b204 00120080 ntdll!KiFastSystemCallRet (FPO: [0,0,0])
1e 0012b160 77e64a1f 0012b204 00120080 0012b1a0 ntdll!NtCreateFile+0xc (FPO: [11,0,0])
1f 0012b1fc 004742b6 00000000 00020000 00000003 kernel32!CreateFileW+0x377 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
20 0012b230 00474919 00c19770 0012b314 00000000 qsmserver+0x742b6
21 0012b348 0047a8eb 0073cee0 00c2e518 0012bd08 qsmserver+0x74919
22 0012b7a8 0047dda1 0073cee0 00c2e518 0012bd08 qsmserver+0x7a8eb
23 0012bf34 0047e062 0073cee0 00000000 00c2e518 qsmserver+0x7dda1
24 0012c6b4 0047e062 0073cee0 00000000 0146d160 qsmserver+0x7e062
25 0012ce34 0047e062 0073cee0 00000000 0144a6d0 qsmserver+0x7e062
26 0012d5b4 0047e062 0073cee0 00000000 0144bc40 qsmserver+0x7e062
27 0012dd34 0047e062 0073cee0 00000000 01428298 qsmserver+0x7e062
28 0012e4b4 0047e062 0073cee0 00000000 0144b380 qsmserver+0x7e062
29 0012ec34 0047e062 0073cee0 013e2af0 01427380 qsmserver+0x7e062
2a 0012f3b4 00417a00 0073cee0 013e2af0 00c2d368 qsmserver+0x7e062
2b 0012fd10 00407f49 01140038 00000010 100b5b60 qsmserver+0x17a00
2c 0012fd48 100572b8 00b51830 01140038 00b51468 qsmserver+0x7f49
2d 0012fd64 10018cea 0012fe50 00b514a0 0012fdb0 libsv!MsgWaitMultipleMessagesWithTimeout+0x6b8
2e 0012fda8 10056e8b 0073a878 10057250 0012fe50 libsv!ListWalk+0x5a
2f 0012fe8c 10057318 00000000 00000000 0012fea4 libsv!MsgWaitMultipleMessagesWithTimeout+0x28b
30 0012feac 0040712c 00000000 00000000 ffffffff libsv!MsgWaitMessageWithTimeout+0x28
31 0012ff60 004a97ab 00000002 00734f90 007334d8 qsmserver+0x712c
32 0012ffc0 77e6f32b 00000000 00000000 7ffd5000 qsmserver+0xa97ab
33 0012fff0 00000000 004a9668 00000000 78746341 kernel32!BaseProcessStart+0x23 (FPO: [Non-Fpo])
start end module name
00320000 00325000 libsvos libsvos.dll Thu Feb 17 07:50:02 2011 (4D5D278A)
00330000 00348000 libsvdb libsvdb.dll Thu Feb 17 08:04:51 2011 (4D5D2B03)
00350000 0035c000 libsvchangelog libsvchangelog.dll Thu Feb 17 08:20:46 2011 (4D5D2EBE)
00400000 0052b000 qsmserver qsmserver.exe Thu Feb 17 08:45:57 2011 (4D5D34A5)
10000000 100bb000 libsv libsv.dll Thu Feb 17 08:02:48 2011 (4D5D2A88)
5f270000 5f2ca000 hnetcfg hnetcfg.dll Sat Feb 17 07:59:38 2007 (45D70A4A)
71ae0000 71ae8000 wshtcpip wshtcpip.dll Sat Feb 17 08:02:27 2007 (45D70AF3)
71b20000 71b61000 mswsock mswsock.dll Fri Jun 20 13:32:38 2008 (485BF7C6)
71bd0000 71be1000 MPR MPR.dll Sat Feb 17 08:00:36 2007 (45D70A84)
71bf0000 71bf8000 WS2HELP WS2HELP.dll Sat Feb 17 08:02:18 2007 (45D70AEA)
71c00000 71c17000 WS2_32 WS2_32.dll Sat Feb 17 08:02:17 2007 (45D70AE9)
71c40000 71c97000 NETAPI32 NETAPI32.dll Fri Jun 29 11:14:31 2012 (4FEDD467)
74de0000 74df2000 CLUSAPI CLUSAPI.dll Sat Feb 17 07:59:31 2007 (45D70A43)
76190000 761a2000 MSASN1 MSASN1.dll Fri Sep 04 16:28:01 2009 (4AA18661)
761b0000 76245000 CRYPT32 CRYPT32.dll Fri Jun 26 17:24:00 2015 (558DD100)
76b10000 76b15000 sfc sfc.dll Tue Mar 25 04:42:52 2003 (3E80249C)
76bb0000 76bdc000 WINTRUST WINTRUST.dll Wed Feb 29 10:56:21 2012 (4F4E58B5)
76be0000 76c0b000 sfc_os sfc_os.dll Sat Feb 17 08:01:25 2007 (45D70AB5)
76c10000 76c3a000 imagehlp imagehlp.dll Fri Oct 18 22:37:19 2013 (5261FE6F)
76ed0000 76efa000 DNSAPI DNSAPI.dll Thu Mar 03 01:06:05 2011 (4D6F3DDD)
76f10000 76f3e000 WLDAP32 WLDAP32.dll Sat Feb 17 08:01:57 2007 (45D70AD5)
76f50000 76f63000 Secur32 Secur32.dll Wed Feb 04 05:41:02 2009 (49897ECE)
76f70000 76f77000 winrnr winrnr.dll Sat Feb 17 08:01:43 2007 (45D70AC7)
76f80000 76f85000 rasadhlp rasadhlp.dll Sat Feb 17 08:01:01 2007 (45D70A9D)
77380000 77411000 USER32 USER32.dll Fri Mar 02 00:38:46 2007 (45E7C676)
77420000 77523000 comctl32 comctl32.dll Thu Jul 04 06:21:11 2013 (51D55AA7)
77670000 777aa000 ole32 ole32.dll Thu Jun 18 01:58:12 2015 (55826C04)
77ba0000 77bfa000 msvcrt msvcrt.dll Sat Feb 17 08:02:46 2007 (45D70B06)
77c00000 77c49000 GDI32 GDI32.dll Fri Jun 12 16:58:22 2015 (557B55FE)
77c50000 77cf1000 RPCRT4 RPCRT4.dll Sat Jun 27 20:48:20 2015 (558F5264)
77e40000 77f44000 kernel32 kernel32.dll Thu Feb 06 03:25:50 2014 (52F3551E)
7c340000 7c396000 MSVCR71 MSVCR71.dll Fri Feb 21 06:42:20 2003 (3E561EAC)
7c800000 7c8c3000 ntdll ntdll.dll Tue Mar 17 01:29:03 2015 (5507C9AF)
7c8d0000 7d0cf000 SHELL32 SHELL32.dll Wed Feb 18 20:03:49 2015 (54E54485)
7d0e0000 7d16c000 OLEAUT32 OLEAUT32.dll Fri Oct 17 20:09:35 2014 (5441BDCF)
7d180000 7d1d2000 SHLWAPI SHLWAPI.dll Tue Mar 25 22:45:00 2014 (53324D3C)
7d1e0000 7d27c000 ADVAPI32 ADVAPI32.dll Sat Jun 27 20:48:20 2015 (558F5264)
80800000 80a5d000 nt ntkrpamp.exe Tue Mar 17 00:16:39 2015 (5507B8B7)
80a5d000 80a89000 hal halmacpi.dll Fri Feb 16 23:48:26 2007 (45D6972A)
b6400000 b6415700 NAVENG NAVENG.SYS Tue Oct 13 19:36:08 2015 (561DA378)
b6416000 b65a4180 NAVEX15 NAVEX15.SYS Tue Oct 13 19:32:30 2015 (561DA29E)
b8432000 b8435800 prepdrv prepdrv.sys Tue May 20 22:08:16 2008 (48339220)
b8652000 b867d000 RDPWD RDPWD.SYS Tue May 01 07:45:40 2012 (4F9FDAF4)
b8af5000 b8b00000 TDTCP TDTCP.SYS Fri Feb 16 23:44:32 2007 (45D69640)
b957d000 b95b1000 mrxdav mrxdav.sys Thu Dec 18 18:49:50 2014 (5493762E)
b95b1000 b9615000 srv srv.sys Thu Feb 17 10:58:17 2011 (4D5D53A9)
b9665000 b96b5000 HTTP HTTP.sys Sat Feb 17 00:28:12 2007 (45D6A07C)
b9bdd000 b9bf2000 Cdfs Cdfs.SYS Sat Feb 17 00:27:08 2007 (45D6A03C)
b9bf2000 b9d16000 BHDrvx86 BHDrvx86.sys Fri Sep 25 18:58:51 2015 (5605DFBB)
b9d3e000 b9d5d000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Wed Jul 15 20:20:56 2015 (55A706F8)
b9d5d000 b9dbc000 eeCtrl eeCtrl.sys Wed Jul 15 20:20:56 2015 (55A706F8)
b9dbc000 b9dcd000 Fips Fips.SYS Sat Feb 17 00:26:33 2007 (45D6A019)
b9dcd000 b9e43000 mrxsmb mrxsmb.sys Wed Jul 06 09:34:54 2011 (4E14728E)
b9e43000 b9e73000 rdbss rdbss.sys Wed Feb 24 09:54:03 2010 (4B854B9B)
b9e73000 b9e9d000 afd afd.sys unavailable (FFFFFFFE)
b9e9d000 b9ece000 netbt netbt.sys Sat Feb 17 00:28:57 2007 (45D6A0A9)
b9f6e000 b9fcd200 SYMTDI SYMTDI.SYS Fri Feb 21 16:51:21 2014 (5307D869)
b9fce000 ba064000 tcpip tcpip.sys Mon Sep 15 15:46:50 2014 (5417503A)
ba064000 ba07d000 ipsec ipsec.sys Sat Feb 17 00:29:28 2007 (45D6A0C8)
ba291000 ba2bb000 SYMEVENT SYMEVENT.SYS Fri Jul 26 21:26:23 2013 (51F32FCF)
ba2bb000 ba2e8000 Ironx86 Ironx86.SYS Tue Dec 03 12:52:50 2013 (529E2882)
ba2e8000 ba38d000 SRTSP SRTSP.SYS Fri Mar 07 16:36:44 2014 (531A49FC)
ba3b5000 ba3d9000 ccSetx86 ccSetx86.sys unavailable (FFFFFFFE)
ba479000 ba48e000 usbhub usbhub.sys Sat Feb 17 00:13:05 2007 (45D69CF1)
ba48e000 ba498000 dump_diskdump dump_diskdump.sys Sat Feb 17 00:07:44 2007 (45D69BB0)
ba4de000 ba4eb000 netbios netbios.sys Fri Feb 16 23:58:29 2007 (45D69985)
ba4ee000 ba4fb000 wanarp wanarp.sys Fri Feb 16 23:59:17 2007 (45D699B5)
ba4fe000 ba50c000 msgpc msgpc.sys Fri Feb 16 23:58:37 2007 (45D6998D)
ba50e000 ba51b000 Npfs Npfs.SYS Fri Feb 16 23:50:36 2007 (45D697AC)
ba51e000 ba529000 Msfs Msfs.SYS unavailable (FFFFFFFE)
ba556000 ba5a0000 update update.sys Sat Feb 17 00:28:59 2007 (45D6A0AB)
ba5a0000 ba5d7000 rdpdr rdpdr.sys Fri Feb 16 23:51:00 2007 (45D697C4)
ba5d7000 ba5e9000 raspptp raspptp.sys Sat Feb 17 00:29:20 2007 (45D6A0C0)
ba611000 ba62a000 ndiswan ndiswan.sys Sat Feb 17 00:29:22 2007 (45D6A0C2)
ba62a000 ba63e000 rasl2tp rasl2tp.sys Sat Feb 17 00:29:02 2007 (45D6A0AE)
ba63e000 ba65ec80 q57xp32 q57xp32.sys Thu Jul 21 19:12:45 2005 (42E039FD)
ba65f000 ba686000 ks ks.sys Sat Feb 17 00:30:40 2007 (45D6A110)
ba686000 ba69a000 redbook redbook.sys Sat Feb 17 00:07:26 2007 (45D69B9E)
ba69a000 ba6af000 cdrom cdrom.sys Sat Feb 17 00:07:48 2007 (45D69BB4)
ba6af000 ba6c4000 serial serial.sys Sat Feb 17 00:06:46 2007 (45D69B76)
ba6c4000 ba6d7000 i8042prt i8042prt.sys Sat Feb 17 00:30:40 2007 (45D6A110)
ba6d7000 ba72ad80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002 (3D3767B0)
ba72b000 ba770000 cpqasm2 cpqasm2.sys Mon Nov 21 10:46:51 2005 (4381F9FB)
ba770000 ba79a000 USBPORT USBPORT.SYS Sat Jul 20 14:18:55 2013 (51EAE29F)
ba79a000 ba7b6000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 00:10:30 2007 (45D69C56)
ba952000 ba95b000 mssmbios mssmbios.sys Fri Feb 16 23:59:12 2007 (45D699B0)
ba962000 ba971000 termdd termdd.sys Fri Feb 16 23:44:32 2007 (45D69640)
ba972000 ba97b000 raspti raspti.sys Fri Feb 16 23:59:23 2007 (45D699BB)
ba982000 ba98d000 ptilink ptilink.sys Sat Feb 17 00:06:38 2007 (45D69B6E)
ba992000 ba99d000 TDI TDI.SYS Sat Feb 17 00:01:19 2007 (45D69A2F)
ba9a2000 ba9b1000 raspppoe raspppoe.sys Fri Feb 16 23:59:23 2007 (45D699BB)
ba9b2000 ba9bb000 ndistapi ndistapi.sys Fri Jul 08 09:08:19 2011 (4E170F53)
ba9c2000 ba9cfd00 CPQCISSE CPQCISSE.sys Fri May 20 12:15:54 2005 (428E1B4A)
ba9d2000 ba9dd000 fdc fdc.sys unavailable (FFFFFFFE)
ba9e2000 ba9ec000 serenum serenum.sys Sat Feb 17 00:06:44 2007 (45D69B74)
baf0c000 baf2b000 Mup Mup.sys Tue Apr 12 14:05:46 2011 (4DA4A28A)
baf2b000 baf6a000 NDIS NDIS.sys Sat Feb 17 00:28:49 2007 (45D6A0A1)
baf6a000 bb000000 Ntfs Ntfs.sys Tue Mar 02 22:49:54 2010 (4B8DEA72)
bf800000 bf9db000 win32k win32k.sys Wed Jun 24 23:24:10 2015 (558B826A)
bf9db000 bf9f2000 dxg dxg.sys Sat Feb 17 00:14:39 2007 (45D69D4F)
bf9f2000 bfa48680 ati2drad ati2drad.dll Sat Feb 17 07:59:26 2007 (45D70A3E)
f7223000 f724a000 KSecDD KSecDD.sys Sat Jun 27 09:51:35 2015 (558EB877)
f724a000 f7270000 fltmgr fltmgr.sys Sun Jan 06 18:43:05 2013 (50EA1A19)
f7270000 f7283000 CLASSPNP CLASSPNP.SYS Sat Feb 17 00:28:16 2007 (45D6A080)
f7283000 f72a2000 SCSIPORT SCSIPORT.SYS Sat Feb 17 00:28:41 2007 (45D6A099)
f72a2000 f72bf000 atapi atapi.sys Sat Feb 17 00:07:34 2007 (45D69BA6)
f72bf000 f72e9000 volsnap volsnap.sys Sat Feb 17 00:08:23 2007 (45D69BD7)
f72e9000 f7315000 dmio dmio.sys Sat Feb 17 00:10:44 2007 (45D69C64)
f7315000 f733c000 ftdisk ftdisk.sys Sat Feb 17 00:08:05 2007 (45D69BC5)
f733c000 f7352000 pci pci.sys Fri Feb 16 23:59:03 2007 (45D699A7)
f7352000 f7386000 ACPI ACPI.sys Fri Feb 16 23:58:47 2007 (45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 02:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Fri Feb 16 23:58:57 2007 (45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 00:07:32 2007 (45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 00:05:35 2007 (45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 00:29:25 2007 (45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 00:07:51 2007 (45D69BB7)
f74e7000 f74f3000 Dfs Dfs.sys Fri Feb 16 23:51:17 2007 (45D697D5)
f74f7000 f7501000 crcdisk crcdisk.sys Sat Feb 17 00:09:50 2007 (45D69C2E)
f7547000 f7552000 kbdclass kbdclass.sys Sat Feb 17 00:05:39 2007 (45D69B33)
f7577000 f7585000 HIDCLASS HIDCLASS.SYS Tue Mar 25 02:10:17 2003 (3E8000D9)
f75c7000 f75d3000 vga vga.sys Sat Feb 17 00:10:30 2007 (45D69C56)
f75d7000 f75e1000 Dxapi Dxapi.sys Tue Mar 25 02:06:01 2003 (3E7FFFD9)
f7607000 f7610000 hidusb hidusb.sys Tue Mar 25 02:10:17 2003 (3E8000D9)
f7637000 f7641000 mouclass mouclass.sys Tue Mar 25 02:03:09 2003 (3E7FFF2D)
f7657000 f7665000 NDProxy NDProxy.SYS Wed Nov 27 14:12:52 2013 (52965244)
f7677000 f7686000 SRTSPX SRTSPX.SYS Fri Jul 26 21:44:50 2013 (51F33422)
f7697000 f76a0000 watchdog watchdog.sys Sat Feb 17 00:11:45 2007 (45D69CA1)
f76b7000 f76c5000 processr processr.sys Fri Feb 16 23:48:28 2007 (45D6972C)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 02:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 02:07:58 2003 (3E80004E)
f7717000 f771e000 amdide amdide.sys Sat Feb 17 00:07:35 2007 (45D69BA7)
f771f000 f7726000 dmload dmload.sys unavailable (FFFFFFFE)
f7727000 f772b080 cpqcissm cpqcissm.sys Fri May 20 12:16:05 2005 (428E1B55)
f7757000 f775d380 HIDPARSE HIDPARSE.SYS Tue Jul 02 20:01:48 2013 (51D377FC)
f776f000 f7777000 mouhid mouhid.sys Tue Mar 25 02:03:12 2003 (3E7FFF30)
f7787000 f778f000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f778f000 f7796000 Null Null.SYS unavailable (FFFFFFFE)
f7797000 f779e000 Beep Beep.SYS Tue Mar 25 02:03:04 2003 (3E7FFF28)
f779f000 f77a7000 mnmdd mnmdd.SYS Tue Mar 25 02:07:53 2003 (3E800049)
f77a7000 f77af000 RDPCDD RDPCDD.sys Tue Mar 25 02:03:05 2003 (3E7FFF29)
f77af000 f77b7000 rasacd rasacd.sys Tue Mar 25 02:11:50 2003 (3E800136)
f77b7000 f77be000 sysmgmt sysmgmt.sys Mon Nov 21 10:46:50 2005 (4381F9FA)
f77cf000 f77d3080 dump_cpqcissm dump_cpqcissm.sys Fri May 20 12:16:05 2005 (428E1B55)
f77df000 f77e6000 dxgthk dxgthk.sys Tue Mar 25 02:05:52 2003 (3E7FFFD0)
f77e7000 f77eb500 usbohci usbohci.sys Sat Jul 20 14:18:55 2013 (51EAE29F)
f77ef000 f77f7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 02:16:25 2003 (3E800249)
f7807000 f780d500 cpqcidrv cpqcidrv.sys Fri Jun 24 19:11:13 2005 (42BCA121)
f780f000 f7817000 audstub audstub.sys Tue Mar 25 02:09:12 2003 (3E800098)
f7839000 f7897000 SYMDS SYMDS.SYS Tue Jul 30 18:27:08 2013 (51F84BCC)
f79bb000 f79bc280 swenum swenum.sys Sat Feb 17 00:05:56 2007 (45D69B44)
f79bd000 f79be680 USBD USBD.SYS Sat Jul 20 14:18:54 2013 (51EAE29E)
f7a5b000 f7a5bc80 smsmdm smsmdm.sys Mon Mar 17 23:47:11 2008 (47DF494F)
f7a5c000 f7a5c7c0 AlKernel AlKernel.sys Fri Aug 24 17:31:42 2001 (3B86D5CE)
f7af5000 f7bdf000 SYMEFA SYMEFA.SYS Thu Feb 27 17:31:17 2014 (530FCAC5)

Unloaded modules:
ba0bf000 ba0d5000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00016000
ba102000 ba291000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0018F000
ba4ce000 ba4dc000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
f774f000 f7757000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
f7647000 f7651000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000

0x1A crashes are related to internal memory manager structures not “looking
right”. In this case, the problem appears to be a corruption in the file
system cache someplace.

Without going in and characterizing the corruption better, I would start by
looking at any FS filters and looking for updates. You might also want to
try running Driver Verifier on any third party drivers in the system and see
if you get a Verifier related crash.

-scott
OSR
@OSRDrivers

wrote in message news:xxxxx@windbg…

I was hoping someone could shine some light on this issue. We have two
nearly identical servers that are crashing intermittantly every few weeks…

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {782, b5e4e040, c7680000, e5d5dad8}

*** WARNING: Unable to verify checksum for qsmserver.exe
*** ERROR: Module load completed but symbols could not be loaded for
qsmserver.exe
*** WARNING: Unable to verify checksum for libsv.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
libsv.dll -
Probably caused by : memory_corruption ( nt!MmUnmapViewInSystemCache+45b )

Followup: MachineOwner

1: kd> !analyze -v;r;kv;lmtn
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

MEMORY_MANAGEMENT (1a)

Any other values for parameter 1 must be individually examined.

Arguments:
Arg1: 00000782, The subtype of the bugcheck.
Arg2: b5e4e040
Arg3: c7680000
Arg4: e5d5dad8

Debugging Details:

BIOS_DATE: 08/22/2005

BUGCHECK_P1: 782

BUGCHECK_P2: ffffffffb5e4e040

BUGCHECK_P3: ffffffffc7680000

BUGCHECK_P4: ffffffffe5d5dad8

BUGCHECK_STR: 0x1a_782

CPU_COUNT: 4

CPU_MHZ: 89d

CPU_VENDOR: AuthenticAMD

CPU_FAMILY: f

CPU_MODEL: 21

CPU_STEPPING: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: qsmserver.exe

CURRENT_IRQL: 0

ANALYSIS_VERSION: 10.0.10240.9 x86fre

LAST_CONTROL_TRANSFER: from 80859ad7 to 80827f7d

STACK_TEXT:
b5e4e018 80859ad7 0000001a 00000782 b5e4e040 nt!KeBugCheckEx+0x1b
b5e4e27c 808b89e6 c7680000 e5d5dad8 00000000
nt!MmUnmapViewInSystemCache+0x45b
b5e4e294 80814163 8a576298 88b22818 00000000 nt!CcUnmapVacb+0x2a
b5e4e2f8 8081451b 8a22e620 0d31f400 00000000 nt!CcGetVacbMiss+0x33d
b5e4e334 808b8138 8a22e620 0d31f400 00000000 nt!CcGetVirtualAddress+0xb7
b5e4e358 808b846f 88df2e28 b5e4e3e4 00000400 nt!CcMapDataCommon+0x4a
b5e4e3b4 bafb0f6e 88df2e28 b5e4e3e4 00000400 nt!CcMapData+0x55
b5e4e3d4 bafae4d1 88fc8c68 88e7ab48 0d31f400 Ntfs!NtfsMapStream+0x4b
b5e4e448 bafb0e31 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadMftRecord+0x86
b5e4e480 bafb0fed 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadFileRecord+0x7a
b5e4e4b8 bafa28de 88fc8c68 e69010a0 e69010a8
Ntfs!NtfsLookupInFileRecord+0x37
b5e4e568 bafa4811 88fc8c68 00000001 e69010a0
Ntfs!NtfsUpdateFcbInfoFromDisk+0x3e
b5e4e634 bafa210a 88fc8c68 88cf8560 88cf86a8 Ntfs!NtfsOpenFile+0x330
b5e4e858 bafb1f38 88fc8c68 88cf8560 b5e4e898 Ntfs!NtfsCommonCreate+0x1280
b5e4e95c 8081e185 88d4d460 88cf8560 88cf8560 Ntfs!NtfsFsdCreate+0x17d
b5e4e970 f724eb39 00000000 88cf8560 88cf86cc nt!IofCallDriver+0x45
b5e4e994 f725c608 b5e4e9b4 8849e0f8 00000000
fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
b5e4e9d0 8081e185 8849e0f8 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a
b5e4e9e4 f724eb39 00000000 88cf8560 88cf86f0 nt!IofCallDriver+0x45
b5e4ea08 f725c608 b5e4ea28 88f6e458 00000000
fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
b5e4ea44 8081e185 88f6e458 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a
b5e4ea58 808fb411 b5e4ec04 88a544e8 00000000 nt!IofCallDriver+0x45
b5e4eb40 80939f4d 88a54500 00000000 8825f088 nt!IopParseDevice+0xa35
b5e4ebc4 80936066 00000000 b5e4ec04 00000040 nt!ObpLookupObjectName+0x5c1
b5e4ec18 808ed0b5 00000000 00000000 00000501 nt!ObOpenObjectByName+0xea
b5e4ec94 808ee36b 0012b204 00120080 0012b1a0 nt!IopCreateFile+0x447
b5e4ecf0 808f0faa 0012b204 00120080 0012b1a0 nt!IoCreateFile+0xa3
b5e4ed30 8088b658 0012b204 00120080 0012b1a0 nt!NtCreateFile+0x30
b5e4ed30 7c8283ac 0012b204 00120080 0012b1a0 nt!KiSystemServicePostCall
0012b15c 7c826ba9 77e64a1f 0012b204 00120080 ntdll!KiFastSystemCallRet
0012b160 77e64a1f 0012b204 00120080 0012b1a0 ntdll!NtCreateFile+0xc
0012b1fc 004742b6 00000000 00020000 00000003 kernel32!CreateFileW+0x377
WARNING: Stack unwind information not available. Following frames may be
wrong.
0012b230 00474919 00c19770 0012b314 00000000 qsmserver+0x742b6
0012b348 0047a8eb 0073cee0 00c2e518 0012bd08 qsmserver+0x74919
0012b7a8 0047dda1 0073cee0 00c2e518 0012bd08 qsmserver+0x7a8eb
0012bf34 0047e062 0073cee0 00000000 00c2e518 qsmserver+0x7dda1
0012c6b4 0047e062 0073cee0 00000000 0146d160 qsmserver+0x7e062
0012ce34 0047e062 0073cee0 00000000 0144a6d0 qsmserver+0x7e062
0012d5b4 0047e062 0073cee0 00000000 0144bc40 qsmserver+0x7e062
0012dd34 0047e062 0073cee0 00000000 01428298 qsmserver+0x7e062
0012e4b4 0047e062 0073cee0 00000000 0144b380 qsmserver+0x7e062
0012ec34 0047e062 0073cee0 013e2af0 01427380 qsmserver+0x7e062
0012f3b4 00417a00 0073cee0 013e2af0 00c2d368 qsmserver+0x7e062
0012fd10 00407f49 01140038 00000010 100b5b60 qsmserver+0x17a00
0012fd48 100572b8 00b51830 01140038 00b51468 qsmserver+0x7f49
0012fd64 10018cea 0012fe50 00b514a0 0012fdb0
libsv!MsgWaitMultipleMessagesWithTimeout+0x6b8
0012fda8 10056e8b 0073a878 10057250 0012fe50 libsv!ListWalk+0x5a
0012fe8c 10057318 00000000 00000000 0012fea4
libsv!MsgWaitMultipleMessagesWithTimeout+0x28b
0012feac 0040712c 00000000 00000000 ffffffff
libsv!MsgWaitMessageWithTimeout+0x28
0012ff60 004a97ab 00000002 00734f90 007334d8 qsmserver+0x712c
0012ffc0 77e6f32b 00000000 00000000 7ffd5000 qsmserver+0xa97ab
0012fff0 00000000 004a9668 00000000 78746341 kernel32!BaseProcessStart+0x23

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MmUnmapViewInSystemCache+45b
80859ad7 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MmUnmapViewInSystemCache+45b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 5507b8b7

IMAGE_VERSION: 5.2.3790.5583

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0x1a_782_nt!MmUnmapViewInSystemCache+45b

BUCKET_ID: 0x1a_782_nt!MmUnmapViewInSystemCache+45b

PRIMARY_PROBLEM_CLASS: 0x1a_782_nt!MmUnmapViewInSystemCache+45b

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x1a_782_nt!mmunmapviewinsystemcache+45b

FAILURE_ID_HASH: {aa40dcdd-e38d-da68-1e2d-11c31748395e}

Followup: MachineOwner

eax=f772f13c ebx=b5e4e040 ecx=00000002 edx=808ad6c0 esi=f772f120
edi=88dfc8c0
eip=80827f7d esp=b5e4e000 ebp=b5e4e018 iopl=0 nv up ei ng nz na pe
nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00000286
nt!KeBugCheckEx+0x1b:
80827f7d 5d pop ebp

ChildEBP RetAddr Args to Child

00 b5e4e018 80859ad7 0000001a 00000782 b5e4e040 nt!KeBugCheckEx+0x1b (FPO:
[Non-Fpo])
01 b5e4e27c 808b89e6 c7680000 e5d5dad8 00000000
nt!MmUnmapViewInSystemCache+0x45b (FPO: [Non-Fpo])
02 b5e4e294 80814163 8a576298 88b22818 00000000 nt!CcUnmapVacb+0x2a (FPO:
[Non-Fpo])
03 b5e4e2f8 8081451b 8a22e620 0d31f400 00000000 nt!CcGetVacbMiss+0x33d (FPO:
[Non-Fpo])
04 b5e4e334 808b8138 8a22e620 0d31f400 00000000 nt!CcGetVirtualAddress+0xb7
(FPO: [Non-Fpo])
05 b5e4e358 808b846f 88df2e28 b5e4e3e4 00000400 nt!CcMapDataCommon+0x4a
(FPO: [Non-Fpo])
06 b5e4e3b4 bafb0f6e 88df2e28 b5e4e3e4 00000400 nt!CcMapData+0x55 (FPO:
[Non-Fpo])
07 b5e4e3d4 bafae4d1 88fc8c68 88e7ab48 0d31f400 Ntfs!NtfsMapStream+0x4b
(FPO: [Non-Fpo])
08 b5e4e448 bafb0e31 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadMftRecord+0x86
(FPO: [Non-Fpo])
09 b5e4e480 bafb0fed 88fc8c68 88d4d540 e69010a8 Ntfs!NtfsReadFileRecord+0x7a
(FPO: [Non-Fpo])
0a b5e4e4b8 bafa28de 88fc8c68 e69010a0 e69010a8
Ntfs!NtfsLookupInFileRecord+0x37 (FPO: [Non-Fpo])
0b b5e4e568 bafa4811 88fc8c68 00000001 e69010a0
Ntfs!NtfsUpdateFcbInfoFromDisk+0x3e (FPO: [Non-Fpo])
0c b5e4e634 bafa210a 88fc8c68 88cf8560 88cf86a8 Ntfs!NtfsOpenFile+0x330
(FPO: [Non-Fpo])
0d b5e4e858 bafb1f38 88fc8c68 88cf8560 b5e4e898 Ntfs!NtfsCommonCreate+0x1280
(FPO: [Non-Fpo])
0e b5e4e95c 8081e185 88d4d460 88cf8560 88cf8560 Ntfs!NtfsFsdCreate+0x17d
(FPO: [Non-Fpo])
0f b5e4e970 f724eb39 00000000 88cf8560 88cf86cc nt!IofCallDriver+0x45 (FPO:
[Non-Fpo])
10 b5e4e994 f725c608 b5e4e9b4 8849e0f8 00000000
fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [Non-Fpo])
11 b5e4e9d0 8081e185 8849e0f8 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a
(FPO: [Non-Fpo])
12 b5e4e9e4 f724eb39 00000000 88cf8560 88cf86f0 nt!IofCallDriver+0x45 (FPO:
[Non-Fpo])
13 b5e4ea08 f725c608 b5e4ea28 88f6e458 00000000
fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b (FPO: [Non-Fpo])
14 b5e4ea44 8081e185 88f6e458 88cf8560 88cf8560 fltmgr!FltpCreate+0x26a
(FPO: [Non-Fpo])
15 b5e4ea58 808fb411 b5e4ec04 88a544e8 00000000 nt!IofCallDriver+0x45 (FPO:
[Non-Fpo])
16 b5e4eb40 80939f4d 88a54500 00000000 8825f088 nt!IopParseDevice+0xa35
(FPO: [Non-Fpo])
17 b5e4ebc4 80936066 00000000 b5e4ec04 00000040 nt!ObpLookupObjectName+0x5c1
(FPO: [Non-Fpo])
18 b5e4ec18 808ed0b5 00000000 00000000 00000501 nt!ObOpenObjectByName+0xea
(FPO: [Non-Fpo])
19 b5e4ec94 808ee36b 0012b204 00120080 0012b1a0 nt!IopCreateFile+0x447 (FPO:
[Non-Fpo])
1a b5e4ecf0 808f0faa 0012b204 00120080 0012b1a0 nt!IoCreateFile+0xa3 (FPO:
[Non-Fpo])
1b b5e4ed30 8088b658 0012b204 00120080 0012b1a0 nt!NtCreateFile+0x30 (FPO:
[Non-Fpo])
1c b5e4ed30 7c8283ac 0012b204 00120080 0012b1a0 nt!KiSystemServicePostCall
(FPO: [0,0] TrapFrame @ b5e4ed64)
1d 0012b15c 7c826ba9 77e64a1f 0012b204 00120080 ntdll!KiFastSystemCallRet
(FPO: [0,0,0])
1e 0012b160 77e64a1f 0012b204 00120080 0012b1a0 ntdll!NtCreateFile+0xc (FPO:
[11,0,0])
1f 0012b1fc 004742b6 00000000 00020000 00000003 kernel32!CreateFileW+0x377
(FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be
wrong.
20 0012b230 00474919 00c19770 0012b314 00000000 qsmserver+0x742b6
21 0012b348 0047a8eb 0073cee0 00c2e518 0012bd08 qsmserver+0x74919
22 0012b7a8 0047dda1 0073cee0 00c2e518 0012bd08 qsmserver+0x7a8eb
23 0012bf34 0047e062 0073cee0 00000000 00c2e518 qsmserver+0x7dda1
24 0012c6b4 0047e062 0073cee0 00000000 0146d160 qsmserver+0x7e062
25 0012ce34 0047e062 0073cee0 00000000 0144a6d0 qsmserver+0x7e062
26 0012d5b4 0047e062 0073cee0 00000000 0144bc40 qsmserver+0x7e062
27 0012dd34 0047e062 0073cee0 00000000 01428298 qsmserver+0x7e062
28 0012e4b4 0047e062 0073cee0 00000000 0144b380 qsmserver+0x7e062
29 0012ec34 0047e062 0073cee0 013e2af0 01427380 qsmserver+0x7e062
2a 0012f3b4 00417a00 0073cee0 013e2af0 00c2d368 qsmserver+0x7e062
2b 0012fd10 00407f49 01140038 00000010 100b5b60 qsmserver+0x17a00
2c 0012fd48 100572b8 00b51830 01140038 00b51468 qsmserver+0x7f49
2d 0012fd64 10018cea 0012fe50 00b514a0 0012fdb0
libsv!MsgWaitMultipleMessagesWithTimeout+0x6b8
2e 0012fda8 10056e8b 0073a878 10057250 0012fe50 libsv!ListWalk+0x5a
2f 0012fe8c 10057318 00000000 00000000 0012fea4
libsv!MsgWaitMultipleMessagesWithTimeout+0x28b
30 0012feac 0040712c 00000000 00000000 ffffffff
libsv!MsgWaitMessageWithTimeout+0x28
31 0012ff60 004a97ab 00000002 00734f90 007334d8 qsmserver+0x712c
32 0012ffc0 77e6f32b 00000000 00000000 7ffd5000 qsmserver+0xa97ab
33 0012fff0 00000000 004a9668 00000000 78746341
kernel32!BaseProcessStart+0x23 (FPO: [Non-Fpo])
start end module name
00320000 00325000 libsvos libsvos.dll Thu Feb 17 07:50:02 2011
(4D5D278A)
00330000 00348000 libsvdb libsvdb.dll Thu Feb 17 08:04:51 2011
(4D5D2B03)
00350000 0035c000 libsvchangelog libsvchangelog.dll Thu Feb 17 08:20:46
2011 (4D5D2EBE)
00400000 0052b000 qsmserver qsmserver.exe Thu Feb 17 08:45:57 2011
(4D5D34A5)
10000000 100bb000 libsv libsv.dll Thu Feb 17 08:02:48 2011
(4D5D2A88)
5f270000 5f2ca000 hnetcfg hnetcfg.dll Sat Feb 17 07:59:38 2007
(45D70A4A)
71ae0000 71ae8000 wshtcpip wshtcpip.dll Sat Feb 17 08:02:27 2007
(45D70AF3)
71b20000 71b61000 mswsock mswsock.dll Fri Jun 20 13:32:38 2008
(485BF7C6)
71bd0000 71be1000 MPR MPR.dll Sat Feb 17 08:00:36 2007
(45D70A84)
71bf0000 71bf8000 WS2HELP WS2HELP.dll Sat Feb 17 08:02:18 2007
(45D70AEA)
71c00000 71c17000 WS2_32 WS2_32.dll Sat Feb 17 08:02:17 2007
(45D70AE9)
71c40000 71c97000 NETAPI32 NETAPI32.dll Fri Jun 29 11:14:31 2012
(4FEDD467)
74de0000 74df2000 CLUSAPI CLUSAPI.dll Sat Feb 17 07:59:31 2007
(45D70A43)
76190000 761a2000 MSASN1 MSASN1.dll Fri Sep 04 16:28:01 2009
(4AA18661)
761b0000 76245000 CRYPT32 CRYPT32.dll Fri Jun 26 17:24:00 2015
(558DD100)
76b10000 76b15000 sfc sfc.dll Tue Mar 25 04:42:52 2003
(3E80249C)
76bb0000 76bdc000 WINTRUST WINTRUST.dll Wed Feb 29 10:56:21 2012
(4F4E58B5)
76be0000 76c0b000 sfc_os sfc_os.dll Sat Feb 17 08:01:25 2007
(45D70AB5)
76c10000 76c3a000 imagehlp imagehlp.dll Fri Oct 18 22:37:19 2013
(5261FE6F)
76ed0000 76efa000 DNSAPI DNSAPI.dll Thu Mar 03 01:06:05 2011
(4D6F3DDD)
76f10000 76f3e000 WLDAP32 WLDAP32.dll Sat Feb 17 08:01:57 2007
(45D70AD5)
76f50000 76f63000 Secur32 Secur32.dll Wed Feb 04 05:41:02 2009
(49897ECE)
76f70000 76f77000 winrnr winrnr.dll Sat Feb 17 08:01:43 2007
(45D70AC7)
76f80000 76f85000 rasadhlp rasadhlp.dll Sat Feb 17 08:01:01 2007
(45D70A9D)
77380000 77411000 USER32 USER32.dll Fri Mar 02 00:38:46 2007
(45E7C676)
77420000 77523000 comctl32 comctl32.dll Thu Jul 04 06:21:11 2013
(51D55AA7)
77670000 777aa000 ole32 ole32.dll Thu Jun 18 01:58:12 2015
(55826C04)
77ba0000 77bfa000 msvcrt msvcrt.dll Sat Feb 17 08:02:46 2007
(45D70B06)
77c00000 77c49000 GDI32 GDI32.dll Fri Jun 12 16:58:22 2015
(557B55FE)
77c50000 77cf1000 RPCRT4 RPCRT4.dll Sat Jun 27 20:48:20 2015
(558F5264)
77e40000 77f44000 kernel32 kernel32.dll Thu Feb 06 03:25:50 2014
(52F3551E)
7c340000 7c396000 MSVCR71 MSVCR71.dll Fri Feb 21 06:42:20 2003
(3E561EAC)
7c800000 7c8c3000 ntdll ntdll.dll Tue Mar 17 01:29:03 2015
(5507C9AF)
7c8d0000 7d0cf000 SHELL32 SHELL32.dll Wed Feb 18 20:03:49 2015
(54E54485)
7d0e0000 7d16c000 OLEAUT32 OLEAUT32.dll Fri Oct 17 20:09:35 2014
(5441BDCF)
7d180000 7d1d2000 SHLWAPI SHLWAPI.dll Tue Mar 25 22:45:00 2014
(53324D3C)
7d1e0000 7d27c000 ADVAPI32 ADVAPI32.dll Sat Jun 27 20:48:20 2015
(558F5264)
80800000 80a5d000 nt ntkrpamp.exe Tue Mar 17 00:16:39 2015
(5507B8B7)
80a5d000 80a89000 hal halmacpi.dll Fri Feb 16 23:48:26 2007
(45D6972A)
b6400000 b6415700 NAVENG NAVENG.SYS Tue Oct 13 19:36:08 2015
(561DA378)
b6416000 b65a4180 NAVEX15 NAVEX15.SYS Tue Oct 13 19:32:30 2015
(561DA29E)
b8432000 b8435800 prepdrv prepdrv.sys Tue May 20 22:08:16 2008
(48339220)
b8652000 b867d000 RDPWD RDPWD.SYS Tue May 01 07:45:40 2012
(4F9FDAF4)
b8af5000 b8b00000 TDTCP TDTCP.SYS Fri Feb 16 23:44:32 2007
(45D69640)
b957d000 b95b1000 mrxdav mrxdav.sys Thu Dec 18 18:49:50 2014
(5493762E)
b95b1000 b9615000 srv srv.sys Thu Feb 17 10:58:17 2011
(4D5D53A9)
b9665000 b96b5000 HTTP HTTP.sys Sat Feb 17 00:28:12 2007
(45D6A07C)
b9bdd000 b9bf2000 Cdfs Cdfs.SYS Sat Feb 17 00:27:08 2007
(45D6A03C)
b9bf2000 b9d16000 BHDrvx86 BHDrvx86.sys Fri Sep 25 18:58:51 2015
(5605DFBB)
b9d3e000 b9d5d000 EraserUtilRebootDrv EraserUtilRebootDrv.sys Wed Jul 15
20:20:56 2015 (55A706F8)
b9d5d000 b9dbc000 eeCtrl eeCtrl.sys Wed Jul 15 20:20:56 2015
(55A706F8)
b9dbc000 b9dcd000 Fips Fips.SYS Sat Feb 17 00:26:33 2007
(45D6A019)
b9dcd000 b9e43000 mrxsmb mrxsmb.sys Wed Jul 06 09:34:54 2011
(4E14728E)
b9e43000 b9e73000 rdbss rdbss.sys Wed Feb 24 09:54:03 2010
(4B854B9B)
b9e73000 b9e9d000 afd afd.sys unavailable (FFFFFFFE)
b9e9d000 b9ece000 netbt netbt.sys Sat Feb 17 00:28:57 2007
(45D6A0A9)
b9f6e000 b9fcd200 SYMTDI SYMTDI.SYS Fri Feb 21 16:51:21 2014
(5307D869)
b9fce000 ba064000 tcpip tcpip.sys Mon Sep 15 15:46:50 2014
(5417503A)
ba064000 ba07d000 ipsec ipsec.sys Sat Feb 17 00:29:28 2007
(45D6A0C8)
ba291000 ba2bb000 SYMEVENT SYMEVENT.SYS Fri Jul 26 21:26:23 2013
(51F32FCF)
ba2bb000 ba2e8000 Ironx86 Ironx86.SYS Tue Dec 03 12:52:50 2013
(529E2882)
ba2e8000 ba38d000 SRTSP SRTSP.SYS Fri Mar 07 16:36:44 2014
(531A49FC)
ba3b5000 ba3d9000 ccSetx86 ccSetx86.sys unavailable (FFFFFFFE)
ba479000 ba48e000 usbhub usbhub.sys Sat Feb 17 00:13:05 2007
(45D69CF1)
ba48e000 ba498000 dump_diskdump dump_diskdump.sys Sat Feb 17 00:07:44 2007
(45D69BB0)
ba4de000 ba4eb000 netbios netbios.sys Fri Feb 16 23:58:29 2007
(45D69985)
ba4ee000 ba4fb000 wanarp wanarp.sys Fri Feb 16 23:59:17 2007
(45D699B5)
ba4fe000 ba50c000 msgpc msgpc.sys Fri Feb 16 23:58:37 2007
(45D6998D)
ba50e000 ba51b000 Npfs Npfs.SYS Fri Feb 16 23:50:36 2007
(45D697AC)
ba51e000 ba529000 Msfs Msfs.SYS unavailable (FFFFFFFE)
ba556000 ba5a0000 update update.sys Sat Feb 17 00:28:59 2007
(45D6A0AB)
ba5a0000 ba5d7000 rdpdr rdpdr.sys Fri Feb 16 23:51:00 2007
(45D697C4)
ba5d7000 ba5e9000 raspptp raspptp.sys Sat Feb 17 00:29:20 2007
(45D6A0C0)
ba611000 ba62a000 ndiswan ndiswan.sys Sat Feb 17 00:29:22 2007
(45D6A0C2)
ba62a000 ba63e000 rasl2tp rasl2tp.sys Sat Feb 17 00:29:02 2007
(45D6A0AE)
ba63e000 ba65ec80 q57xp32 q57xp32.sys Thu Jul 21 19:12:45 2005
(42E039FD)
ba65f000 ba686000 ks ks.sys Sat Feb 17 00:30:40 2007
(45D6A110)
ba686000 ba69a000 redbook redbook.sys Sat Feb 17 00:07:26 2007
(45D69B9E)
ba69a000 ba6af000 cdrom cdrom.sys Sat Feb 17 00:07:48 2007
(45D69BB4)
ba6af000 ba6c4000 serial serial.sys Sat Feb 17 00:06:46 2007
(45D69B76)
ba6c4000 ba6d7000 i8042prt i8042prt.sys Sat Feb 17 00:30:40 2007
(45D6A110)
ba6d7000 ba72ad80 ati2mpad ati2mpad.sys Thu Jul 18 20:13:20 2002
(3D3767B0)
ba72b000 ba770000 cpqasm2 cpqasm2.sys Mon Nov 21 10:46:51 2005
(4381F9FB)
ba770000 ba79a000 USBPORT USBPORT.SYS Sat Jul 20 14:18:55 2013
(51EAE29F)
ba79a000 ba7b6000 VIDEOPRT VIDEOPRT.SYS Sat Feb 17 00:10:30 2007
(45D69C56)
ba952000 ba95b000 mssmbios mssmbios.sys Fri Feb 16 23:59:12 2007
(45D699B0)
ba962000 ba971000 termdd termdd.sys Fri Feb 16 23:44:32 2007
(45D69640)
ba972000 ba97b000 raspti raspti.sys Fri Feb 16 23:59:23 2007
(45D699BB)
ba982000 ba98d000 ptilink ptilink.sys Sat Feb 17 00:06:38 2007
(45D69B6E)
ba992000 ba99d000 TDI TDI.SYS Sat Feb 17 00:01:19 2007
(45D69A2F)
ba9a2000 ba9b1000 raspppoe raspppoe.sys Fri Feb 16 23:59:23 2007
(45D699BB)
ba9b2000 ba9bb000 ndistapi ndistapi.sys Fri Jul 08 09:08:19 2011
(4E170F53)
ba9c2000 ba9cfd00 CPQCISSE CPQCISSE.sys Fri May 20 12:15:54 2005
(428E1B4A)
ba9d2000 ba9dd000 fdc fdc.sys unavailable (FFFFFFFE)
ba9e2000 ba9ec000 serenum serenum.sys Sat Feb 17 00:06:44 2007
(45D69B74)
baf0c000 baf2b000 Mup Mup.sys Tue Apr 12 14:05:46 2011
(4DA4A28A)
baf2b000 baf6a000 NDIS NDIS.sys Sat Feb 17 00:28:49 2007
(45D6A0A1)
baf6a000 bb000000 Ntfs Ntfs.sys Tue Mar 02 22:49:54 2010
(4B8DEA72)
bf800000 bf9db000 win32k win32k.sys Wed Jun 24 23:24:10 2015
(558B826A)
bf9db000 bf9f2000 dxg dxg.sys Sat Feb 17 00:14:39 2007
(45D69D4F)
bf9f2000 bfa48680 ati2drad ati2drad.dll Sat Feb 17 07:59:26 2007
(45D70A3E)
f7223000 f724a000 KSecDD KSecDD.sys Sat Jun 27 09:51:35 2015
(558EB877)
f724a000 f7270000 fltmgr fltmgr.sys Sun Jan 06 18:43:05 2013
(50EA1A19)
f7270000 f7283000 CLASSPNP CLASSPNP.SYS Sat Feb 17 00:28:16 2007
(45D6A080)
f7283000 f72a2000 SCSIPORT SCSIPORT.SYS Sat Feb 17 00:28:41 2007
(45D6A099)
f72a2000 f72bf000 atapi atapi.sys Sat Feb 17 00:07:34 2007
(45D69BA6)
f72bf000 f72e9000 volsnap volsnap.sys Sat Feb 17 00:08:23 2007
(45D69BD7)
f72e9000 f7315000 dmio dmio.sys Sat Feb 17 00:10:44 2007
(45D69C64)
f7315000 f733c000 ftdisk ftdisk.sys Sat Feb 17 00:08:05 2007
(45D69BC5)
f733c000 f7352000 pci pci.sys Fri Feb 16 23:59:03 2007
(45D699A7)
f7352000 f7386000 ACPI ACPI.sys Fri Feb 16 23:58:47 2007
(45D69997)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 02:13:00 2003
(3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Fri Feb 16 23:58:57 2007
(45D699A1)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Sat Feb 17 00:07:32 2007
(45D69BA4)
f74b7000 f74c7000 MountMgr MountMgr.sys Sat Feb 17 00:05:35 2007
(45D69B2F)
f74c7000 f74d2000 PartMgr PartMgr.sys Sat Feb 17 00:29:25 2007
(45D6A0C5)
f74d7000 f74e7000 disk disk.sys Sat Feb 17 00:07:51 2007
(45D69BB7)
f74e7000 f74f3000 Dfs Dfs.sys Fri Feb 16 23:51:17 2007
(45D697D5)
f74f7000 f7501000 crcdisk crcdisk.sys Sat Feb 17 00:09:50 2007
(45D69C2E)
f7547000 f7552000 kbdclass kbdclass.sys Sat Feb 17 00:05:39 2007
(45D69B33)
f7577000 f7585000 HIDCLASS HIDCLASS.SYS Tue Mar 25 02:10:17 2003
(3E8000D9)
f75c7000 f75d3000 vga vga.sys Sat Feb 17 00:10:30 2007
(45D69C56)
f75d7000 f75e1000 Dxapi Dxapi.sys Tue Mar 25 02:06:01 2003
(3E7FFFD9)
f7607000 f7610000 hidusb hidusb.sys Tue Mar 25 02:10:17 2003
(3E8000D9)
f7637000 f7641000 mouclass mouclass.sys Tue Mar 25 02:03:09 2003
(3E7FFF2D)
f7657000 f7665000 NDProxy NDProxy.SYS Wed Nov 27 14:12:52 2013
(52965244)
f7677000 f7686000 SRTSPX SRTSPX.SYS Fri Jul 26 21:44:50 2013
(51F33422)
f7697000 f76a0000 watchdog watchdog.sys Sat Feb 17 00:11:45 2007
(45D69CA1)
f76b7000 f76c5000 processr processr.sys Fri Feb 16 23:48:28 2007
(45D6972C)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 02:08:00 2003
(3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 02:07:58 2003
(3E80004E)
f7717000 f771e000 amdide amdide.sys Sat Feb 17 00:07:35 2007
(45D69BA7)
f771f000 f7726000 dmload dmload.sys unavailable (FFFFFFFE)
f7727000 f772b080 cpqcissm cpqcissm.sys Fri May 20 12:16:05 2005
(428E1B55)
f7757000 f775d380 HIDPARSE HIDPARSE.SYS Tue Jul 02 20:01:48 2013
(51D377FC)
f776f000 f7777000 mouhid mouhid.sys Tue Mar 25 02:03:12 2003
(3E7FFF30)
f7787000 f778f000 Fs_Rec Fs_Rec.SYS unavailable (FFFFFFFE)
f778f000 f7796000 Null Null.SYS unavailable (FFFFFFFE)
f7797000 f779e000 Beep Beep.SYS Tue Mar 25 02:03:04 2003
(3E7FFF28)
f779f000 f77a7000 mnmdd mnmdd.SYS Tue Mar 25 02:07:53 2003
(3E800049)
f77a7000 f77af000 RDPCDD RDPCDD.sys Tue Mar 25 02:03:05 2003
(3E7FFF29)
f77af000 f77b7000 rasacd rasacd.sys Tue Mar 25 02:11:50 2003
(3E800136)
f77b7000 f77be000 sysmgmt sysmgmt.sys Mon Nov 21 10:46:50 2005
(4381F9FA)
f77cf000 f77d3080 dump_cpqcissm dump_cpqcissm.sys Fri May 20 12:16:05 2005
(428E1B55)
f77df000 f77e6000 dxgthk dxgthk.sys Tue Mar 25 02:05:52 2003
(3E7FFFD0)
f77e7000 f77eb500 usbohci usbohci.sys Sat Jul 20 14:18:55 2013
(51EAE29F)
f77ef000 f77f7000 OPRGHDLR OPRGHDLR.SYS Tue Mar 25 02:16:25 2003
(3E800249)
f7807000 f780d500 cpqcidrv cpqcidrv.sys Fri Jun 24 19:11:13 2005
(42BCA121)
f780f000 f7817000 audstub audstub.sys Tue Mar 25 02:09:12 2003
(3E800098)
f7839000 f7897000 SYMDS SYMDS.SYS Tue Jul 30 18:27:08 2013
(51F84BCC)
f79bb000 f79bc280 swenum swenum.sys Sat Feb 17 00:05:56 2007
(45D69B44)
f79bd000 f79be680 USBD USBD.SYS Sat Jul 20 14:18:54 2013
(51EAE29E)
f7a5b000 f7a5bc80 smsmdm smsmdm.sys Mon Mar 17 23:47:11 2008
(47DF494F)
f7a5c000 f7a5c7c0 AlKernel AlKernel.sys Fri Aug 24 17:31:42 2001
(3B86D5CE)
f7af5000 f7bdf000 SYMEFA SYMEFA.SYS Thu Feb 27 17:31:17 2014
(530FCAC5)

Unloaded modules:
ba0bf000 ba0d5000 NAVENG.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00016000
ba102000 ba291000 NAVEX15.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0018F000
ba4ce000 ba4dc000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
f774f000 f7757000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00008000
f7647000 f7651000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000A000

Thanks for the reply Scott. I will be looking into the filter drivers using the fltmc command.

I did a bit more research. According to the Microsoft documentation:

“The MEMORY_MANAGEMENT bug check has a value of 0x0000001A. This indicates that a severe memory management error occurred.”

It looks like the MEMORY_MANAGEMENT error parameter was 782. The Microsoft documentation doesn’t like an error for 782 but it says that 780 and 781 are “The PTEs mapping the argument system cache view have been corrupted.”

I wonder if this could be an out of memory error? This is for a machine that only has 2 GB of ram.

1: kd> !vm

*** Virtual Memory Usage ***
Physical Memory: 524153 ( 2096612 Kb)
Page File: ??\C:\pagefile.sys
Current: 2299904 Kb Free Space: 1542468 Kb
Minimum: 2299904 Kb Maximum: 4190208 Kb
Available Pages: 65109 ( 260436 Kb)
ResAvail Pages: 430497 ( 1721988 Kb)
Locked IO Pages: 284 ( 1136 Kb)
Free System PTEs: 183624 ( 734496 Kb)
Free NP PTEs: 32766 ( 131064 Kb)
Free Special NP: 0 ( 0 Kb)
Modified Pages: 190 ( 760 Kb)
Modified PF Pages: 190 ( 760 Kb)
Modified No Write Pages: 2 ( 8 Kb)
NonPagedPool 0 Used: 3368 ( 13472 Kb)
NonPagedPool 1 Used: 2938 ( 11752 Kb)
NonPagedPool 2 Used: 0 ( 0 Kb)
NonPagedPool 3 Used: 0 ( 0 Kb)
NonPagedPool Usage: 9553 ( 38212 Kb)
NonPagedPool Max: 65535 ( 262140 Kb)
PagedPool 0 Usage: 24368 ( 97472 Kb)
PagedPool 1 Usage: 6333 ( 25332 Kb)
PagedPool 2 Usage: 8535 ( 34140 Kb)
PagedPool 3 Usage: 0 ( 0 Kb)
PagedPool 4 Usage: 0 ( 0 Kb)
PagedPool Usage: 39236 ( 156944 Kb)
PagedPool Maximum: 90624 ( 362496 Kb)
Session Commit: 155 ( 620 Kb)
Shared Commit: 256378 ( 1025512 Kb)
Special Pool: 0 ( 0 Kb)
Shared Process: 9844 ( 39376 Kb)
Pages For MDLs: 16 ( 64 Kb)
Pages For AWE: 0 ( 0 Kb)
NonPagedPool Commit: 0 ( 0 Kb)
PagedPool Commit: 39247 ( 156988 Kb)
Driver Commit: 3118 ( 12472 Kb)
Boot Commit: 0 ( 0 Kb)
System PageTables: 0 ( 0 Kb)
VAD/PageTable Bitmaps: 0 ( 0 Kb)
ProcessLockedFilePages: 0 ( 0 Kb)
Pagefile Hash Pages: 0 ( 0 Kb)
Sum System Commit: 308758 ( 1235032 Kb)
Total Private: 215503 ( 862012 Kb)
Misc/Transient Commit: 3114 ( 12456 Kb)
Committed pages: 527375 ( 2109500 Kb)
Commit limit: 1060905 ( 4243620 Kb)

The output from !vm does not indicate an out of memory error.

More likely, this is a memory corruption of some sort.

Tony
OSR