Probably caused by : a347bus.sys ( a347bus+dfbc

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [c:\windows\minidump\Mini060908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: c:\windows\symbols
Executable search path is: c:\windows\i386
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Mon Jun 9 01:22:51.250 2008 (GMT+3)
System Uptime: 0 days 10:00:52.869
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
....................................................................................................................................
Loading User Symbols
Loading unloaded module list
...................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 66004f, e6e7f008}

Unable to load image a347bus.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for a347bus.sys
*** ERROR: Module load completed but symbols could not be loaded for a347bus.sys
GetUlongFromAddress: unable to read from 805637f0
Probably caused by : a347bus.sys ( a347bus+dfbc )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 0066004f, Memory contents of the pool block
Arg4: e6e7f008, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 805637f0

POOL_ADDRESS: e6e7f008

BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: services.exe

LAST_CONTROL_TRANSFER: from 80551fc5 to 80537672

STACK_TEXT:
b51dc8fc 80551fc5 000000c2 00000007 00000cd4 nt!MiRemoveUnusedSegments+0x3db
b51dc94c 8059afb6 e6e7f008 00000000 e3c43968 nt!KiProfileLock+0x1
b51dc9a0 8057771f e1035758 b51dcc30 e3c43968 nt!RtlpSetSecurityObject+0x45c
b51dcb78 80572e68 80000020 00000000 881700b8 nt!NtFlushInstructionCache+0xfc
b51dcbf0 80570402 00000028 b51dcc30 00000040 nt!IopQueryOperationAccess+0x8
b51dcc44 80572cfe 00000000 8a1d6040 0007e301 nt!CmpConstructName+0xb3
b51dcd18 f75bbfbc 0007e460 00020019 0007e3b8 nt!NtQueryInformationFile+0xbe
WARNING: Stack unwind information not available. Following frames may be wrong.
b51dcd50 804dd98f 0007e460 00020019 0007e3b8 a347bus+0xdfbc
b51dcd54 0007e460 00020019 0007e3b8 0007e3f8 nt!ZwSetSystemInformation+0x13
b51dcd64 7c90e4f4 badb0d00 0007e3a0 b51dcd98 0x7e460
b51dcd68 badb0d00 0007e3a0 b51dcd98 b51dcdcc 0x7c90e4f4
b51dcd6c 0007e3a0 b51dcd98 b51dcdcc 00000000 0xbadb0d00
b51dcd70 b51dcd98 b51dcdcc 00000000 00000000 0x7e3a0
b51dcd74 b51dcdcc 00000000 00000000 00000000 0xb51dcd98
b51dcd98 00000000 00000168 00000000 0007f2cc 0xb51dcdcc


STACK_COMMAND: kb

FOLLOWUP_IP:
a347bus+dfbc
f75bbfbc ?? ???

SYMBOL_STACK_INDEX: 7

SYMBOL_NAME: a347bus+dfbc

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: a347bus

IMAGE_NAME: a347bus.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4091f40d

FAILURE_BUCKET_ID: 0xc2_7_a347bus+dfbc

BUCKET_ID: 0xc2_7_a347bus+dfbc

Followup: MachineOwner
---------