Probably caused by : a347bus.sys ( a347bus+1c2b )

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [c:\windows\minidump\Mini060808-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: c:\windows\symbols
Executable search path is: c:\windows\i386
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Sun Jun 8 14:06:56.546 2008 (GMT+3)
System Uptime: 0 days 1:15:52.167
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 69006c, e44873e0}

Unable to load image a347bus.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for a347bus.sys
*** ERROR: Module load completed but symbols could not be loaded for a347bus.sys
GetUlongFromAddress: unable to read from 805637f0
Probably caused by : a347bus.sys ( a347bus+1c2b )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 0069006c, Memory contents of the pool block
Arg4: e44873e0, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 805637f0

POOL_ADDRESS: e44873e0

BUGCHECK_STR: 0xc2_7

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: csrss.exe

LAST_CONTROL_TRANSFER: from 80551fc5 to 80537672

STACK_TEXT:
b6cd7a68 80551fc5 000000c2 00000007 00000cd4 nt!MiRemoveUnusedSegments+0x3db
b6cd7ab8 8056ec09 e44873e0 00000000 e1035130 nt!KiProfileLock+0x1
b6cd7b14 8056d03b e1035148 00000000 88034448 nt!NtQueryInformationToken+0x89b
b6cd7b8c 80570402 00000000 b6cd7bcc 00000040 nt!NtQueryVolumeInformationFile+0x30
b6cd7be0 8057c24e 00000000 00000000 00000001 nt!CmpConstructName+0xb3
b6cd7c5c 8057c31d 00c8e194 00100001 00c8e138 nt!NtQuerySystemInformation+0xd88
b6cd7cb8 8057c4cb 00c8e194 00100001 00c8e138 nt!NtQuerySystemInformation+0xe59
b6cd7cf8 f75afc2b 00c8e194 00100001 00c8e138 nt!NtQuerySystemInformation+0x192
WARNING: Stack unwind information not available. Following frames may be wrong.
b6cd7d0c 00000000 00004021 b6cd7d64 00c8e12c a347bus+0x1c2b


STACK_COMMAND: kb

FOLLOWUP_IP:
a347bus+1c2b
f75afc2b ?? ???

SYMBOL_STACK_INDEX: 8

SYMBOL_NAME: a347bus+1c2b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: a347bus

IMAGE_NAME: a347bus.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4091f40d

FAILURE_BUCKET_ID: 0xc2_7_a347bus+1c2b

BUCKET_ID: 0xc2_7_a347bus+1c2b

Followup: MachineOwner
---------