Hello everybody... I started receiving BSOD on our 'Windows Server 2008 R2 SP1'... started debugging tools and got the kd log file results but i need assistance to understand it.. Opened log file 'c:\debuglog.txt' 0: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols 0: kd> .reload;!analyze -v;r;!thread;lmnt;.logclose;q Loading Kernel Symbols ............................................................... ................................................................ ....... Loading User Symbols Loading unloaded module list ...... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: 0000000000000000, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, value 0 = read operation, 1 = write operation Arg4: fffff8800172cf92, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001705100 0000000000000000 CURRENT_IRQL: 2 FAULTING_IP: tcpip! ?? ::FNODOBFM::`string'+5f94 fffff880`0172cf92 488b01 mov rax,qword ptr [rcx] DEFAULT_BUCKET_ID: DRIVER_FAULT_SERVER_MINIDUMP BUGCHECK_STR: 0xD1 PROCESS_NAME: w3wp.exe TRAP_FRAME: fffff800013a0270 -- (.trap 0xfffff800013a0270) .trap 0xfffff800013a0270 NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffffa8004b443a0 rbx=0000000000000000 rcx=0000000000000000 rdx=fffffa8004b443a1 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8800172cf92 rsp=fffff800013a0400 rbp=0000000000000000 r8=fffffa8004b443a0 r9=00000000000000d0 r10=fffff80001649b80 r11=fffffa8003959340 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na pe nc tcpip! ?? ::FNODOBFM::`string'+0x5f94: fffff880`0172cf92 488b01 mov rax,qword ptr [rcx] ds:b026:00000000`00000000=???????????????? .trap Resetting default scope LAST_CONTROL_TRANSFER: from fffff800014d52a9 to fffff800014d5d00 STACK_TEXT: fffff800`013a0128 fffff800`014d52a9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx fffff800`013a0130 fffff800`014d3f20 : ffff0080`00b9fe1c 00000000`00000000 fffffa80`030e65f0 fffffa80`03a903d0 : nt!KiBugCheckDispatch+0x69 fffff800`013a0270 fffff880`0172cf92 : fffffa80`03a903d0 fffff880`016ee236 00000000`206c644d 00000000`00000001 : nt!KiPageFault+0x260 fffff800`013a0400 fffff880`01156336 : fffffa80`03a903d0 00000000`02dcec68 00000000`00000000 fffff800`016011de : tcpip! ?? ::FNODOBFM::`string'+0x5f94 fffff800`013a0450 fffff880`01155a92 : 00000000`00000000 00000000`00000000 00000000`00000002 00000000`00001000 : NETIO!NetioDereferenceNetBufferList+0x86 fffff800`013a0480 fffff880`016e2986 : 00000000`00000000 00000000`00000000 fffff800`013a0500 fffffa80`054f7690 : NETIO!NetioDereferenceNetBufferListChain+0x332 fffff800`013a0550 fffff880`016b6834 : fffffa80`054f7690 fffffa80`05ff34c0 fffffa80`0310c160 fffffa80`030da150 : tcpip!IppCompleteAndFreePacketList+0xc6 fffff800`013a0580 fffff880`016becc0 : 00000000`00000000 fffffa80`0310c160 fffffa80`030da150 fffff880`018069a0 : tcpip!IppCleanupMfe+0x44 fffff800`013a05b0 fffff880`0172423c : 00000000`00000001 fffff880`0180aee0 fffff800`013a0658 fffffa80`0310c160 : tcpip!IppDereferenceMfe+0x20 fffff800`013a05e0 fffff880`01723c2a : fffff800`013a0848 00000000`00000001 fffffa80`0310c178 fffff800`013a0848 : tcpip!IppMfeSetTimeOut+0x10c fffff800`013a0700 fffff880`017242ba : 00000000`00000000 fffff800`013a0848 00000000`00000001 00000000`00000000 : tcpip!IppCompartmentSetTimeout+0x9a fffff800`013a0770 fffff800`014e1652 : fffff800`00000010 fffff800`013a0830 fffff800`00000001 00000000`00000000 : tcpip!IppTimeout+0x5a fffff800`013a07a0 fffff800`014e14f6 : fffff880`018228e0 00000000`015d48da 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x66 fffff800`013a0810 fffff800`014e13de : 00000340`c26310a4 fffff800`013a0e88 00000000`015d48da fffff800`0164cdc8 : nt!KiProcessExpiredTimerList+0xc6 fffff800`013a0e60 fffff800`014e11c7 : fffffa80`03fbf0c2 fffffa80`015d48da 00000000`00000000 00000000`000000da : nt!KiTimerExpiration+0x1be fffff800`013a0f00 fffff800`014d8765 : 00000000`00000000 fffffa80`058bf060 00000000`00000000 fffff880`01003a00 : nt!KiRetireDpcList+0x277 fffff800`013a0fb0 fffff800`014d857c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KyRetireDpcList+0x5 fffff880`04235be0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue STACK_COMMAND: kb FOLLOWUP_IP: NETIO!NetioDereferenceNetBufferList+86 fffff880`01156336 4885ff test rdi,rdi SYMBOL_STACK_INDEX: 4 SYMBOL_NAME: NETIO!NetioDereferenceNetBufferList+86 FOLLOWUP_NAME: MachineOwner MODULE_NAME: NETIO IMAGE_NAME: NETIO.SYS DEBUG_FLR_IMAGE_TIMESTAMP: 4ce79381 FAILURE_BUCKET_ID: X64_0xD1_NETIO!NetioDereferenceNetBufferList+86 BUCKET_ID: X64_0xD1_NETIO!NetioDereferenceNetBufferList+86 Followup: MachineOwner --------- rax=fffff800013a0230 rbx=fffffa8003a903d0 rcx=000000000000000a rdx=0000000000000000 rsi=00000000fffffd57 rdi=fffffa8003a90500 rip=fffff800014d5d00 rsp=fffff800013a0128 rbp=fffff800013a02f0 r8=0000000000000002 r9=0000000000000000 r10=fffff8800172cf92 r11=0000000000000000 r12=fffffa8003a903d0 r13=fffffa8003fddba0 r14=0000000000000000 r15=0000000000000001 iopl=0 nv up ei ng nz na po nc cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00000286 nt!KeBugCheckEx: fffff800`014d5d00 48894c2408 mov qword ptr [rsp+8],rcx ss:fffff800`013a0130=000000000000000a GetPointerFromAddress: unable to read from fffff80001705000 THREAD fffffa80058bf060 Cid 04f0.0fec Teb: 00000000fff89000 Win32Thread: 0000000000000000 RUNNING on processor 0 Not impersonating GetUlongFromAddress: unable to read from fffff80001644ba4 Owning Process fffffa8005eef200 Image: w3wp.exe Attached Process N/A Image: N/A fffff78000000000: Unable to get shared data Wait Start TickCount 22890712 Context Switch Count 2871 ReadMemory error: Cannot get nt!KeMaximumIncrement value. UserTime 00:00:00.000 KernelTime 00:00:00.000 Win32 Start Address 0x0000000073979735 Stack Init fffff88004235db0 Current fffff88004235900 Base fffff88004236000 Limit fffff88004230000 Call 0 Priority 11 BasePriority 10 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5 Child-SP RetAddr : Args to Child : Call Site fffff800`013a0128 fffff800`014d52a9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx fffff800`013a0130 fffff800`014d3f20 : ffff0080`00b9fe1c 00000000`00000000 fffffa80`030e65f0 fffffa80`03a903d0 : nt!KiBugCheckDispatch+0x69 fffff800`013a0270 fffff880`0172cf92 : fffffa80`03a903d0 fffff880`016ee236 00000000`206c644d 00000000`00000001 : nt!KiPageFault+0x260 (TrapFrame @ fffff800`013a0270) fffff800`013a0400 fffff880`01156336 : fffffa80`03a903d0 00000000`02dcec68 00000000`00000000 fffff800`016011de : tcpip! ?? ::FNODOBFM::`string'+0x5f94 fffff800`013a0450 fffff880`01155a92 : 00000000`00000000 00000000`00000000 00000000`00000002 00000000`00001000 : NETIO!NetioDereferenceNetBufferList+0x86 fffff800`013a0480 fffff880`016e2986 : 00000000`00000000 00000000`00000000 fffff800`013a0500 fffffa80`054f7690 : NETIO!NetioDereferenceNetBufferListChain+0x332 fffff800`013a0550 fffff880`016b6834 : fffffa80`054f7690 fffffa80`05ff34c0 fffffa80`0310c160 fffffa80`030da150 : tcpip!IppCompleteAndFreePacketList+0xc6 fffff800`013a0580 fffff880`016becc0 : 00000000`00000000 fffffa80`0310c160 fffffa80`030da150 fffff880`018069a0 : tcpip!IppCleanupMfe+0x44 fffff800`013a05b0 fffff880`0172423c : 00000000`00000001 fffff880`0180aee0 fffff800`013a0658 fffffa80`0310c160 : tcpip!IppDereferenceMfe+0x20 fffff800`013a05e0 fffff880`01723c2a : fffff800`013a0848 00000000`00000001 fffffa80`0310c178 fffff800`013a0848 : tcpip!IppMfeSetTimeOut+0x10c fffff800`013a0700 fffff880`017242ba : 00000000`00000000 fffff800`013a0848 00000000`00000001 00000000`00000000 : tcpip!IppCompartmentSetTimeout+0x9a fffff800`013a0770 fffff800`014e1652 : fffff800`00000010 fffff800`013a0830 fffff800`00000001 00000000`00000000 : tcpip!IppTimeout+0x5a fffff800`013a07a0 fffff800`014e14f6 : fffff880`018228e0 00000000`015d48da 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x66 fffff800`013a0810 fffff800`014e13de : 00000340`c26310a4 fffff800`013a0e88 00000000`015d48da fffff800`0164cdc8 : nt!KiProcessExpiredTimerList+0xc6 fffff800`013a0e60 fffff800`014e11c7 : fffffa80`03fbf0c2 fffffa80`015d48da 00000000`00000000 00000000`000000da : nt!KiTimerExpiration+0x1be fffff800`013a0f00 fffff800`014d8765 : 00000000`00000000 fffffa80`058bf060 00000000`00000000 fffff880`01003a00 : nt!KiRetireDpcList+0x277 fffff800`013a0fb0 fffff800`014d857c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KyRetireDpcList+0x5 (TrapFrame @ fffff800`013a0e70) fffff880`04235be0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue start end module name fffff800`013ab000 fffff800`013b5000 kdcom kdcom.dll Sat Feb 05 18:52:49 2011 (4D4D8061) fffff800`0140d000 fffff800`01456000 hal hal.dll Sat Nov 20 15:00:25 2010 (4CE7C669) fffff800`01456000 fffff800`01a3f000 nt ntkrnlmp.exe Sat Apr 09 07:15:23 2011 (4D9FDD5B) fffff880`00c00000 fffff880`00ca4000 Wdf01000 Wdf01000.sys Tue Jul 14 02:22:07 2009 (4A5BC19F) fffff880`00cb2000 fffff880`00d01000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 15:03:51 2010 (4CE7C737) fffff880`00d01000 fffff880`00d15000 PSHED PSHED.dll Tue Jul 14 04:32:23 2009 (4A5BE027) fffff880`00d15000 fffff880`00d73000 CLFS CLFS.SYS Tue Jul 14 02:19:57 2009 (4A5BC11D) fffff880`00d73000 fffff880`00d83000 PCIIDEX PCIIDEX.SYS Tue Jul 14 02:19:48 2009 (4A5BC114) fffff880`00d83000 fffff880`00d9d000 mountmgr mountmgr.sys Sat Nov 20 11:19:21 2010 (4CE79299) fffff880`00d9d000 fffff880`00dd9000 vmbus vmbus.sys Sat Nov 20 11:57:29 2010 (4CE79B89) fffff880`00dd9000 fffff880`00ded000 winhv winhv.sys Sat Nov 20 11:20:02 2010 (4CE792C2) fffff880`00e00000 fffff880`00e15000 volmgr volmgr.sys Sat Nov 20 11:19:28 2010 (4CE792A0) fffff880`00e15000 fffff880`00e71000 volmgrx volmgrx.sys Sat Nov 20 11:20:43 2010 (4CE792EB) fffff880`00e71000 fffff880`00e79000 intelide intelide.sys Tue Jul 14 02:19:48 2009 (4A5BC114) fffff880`00e79000 fffff880`00e82000 atapi atapi.sys Tue Jul 14 02:19:47 2009 (4A5BC113) fffff880`00e88000 fffff880`00f48000 CI CI.dll Sat Nov 20 15:12:36 2010 (4CE7C944) fffff880`00f63000 fffff880`00fba000 ACPI ACPI.sys Sat Nov 20 11:19:16 2010 (4CE79294) fffff880`00fba000 fffff880`00fed000 pci pci.sys Sat Nov 20 11:19:11 2010 (4CE7928F) fffff880`00fed000 fffff880`00ff9000 BATTC BATTC.SYS Tue Jul 14 02:31:01 2009 (4A5BC3B5) fffff880`01002000 fffff880`010f5000 NDIS NDIS.SYS Sat Nov 20 11:23:30 2010 (4CE79392) fffff880`010f5000 fffff880`01153000 msrpc msrpc.sys Sat Nov 20 11:21:56 2010 (4CE79334) fffff880`01153000 fffff880`011b3000 NETIO NETIO.SYS Sat Nov 20 11:23:13 2010 (4CE79381) fffff880`011b3000 fffff880`011c2000 WDFLDR WDFLDR.SYS Tue Jul 14 02:19:54 2009 (4A5BC11A) fffff880`011c2000 fffff880`011cb000 WMILIB WMILIB.SYS Tue Jul 14 02:19:51 2009 (4A5BC117) fffff880`011cb000 fffff880`011d5000 msisadrv msisadrv.sys Tue Jul 14 02:19:26 2009 (4A5BC0FE) fffff880`011d5000 fffff880`011e2000 vdrvroot vdrvroot.sys Tue Jul 14 03:01:31 2009 (4A5BCADB) fffff880`011e2000 fffff880`011f7000 partmgr partmgr.sys Sat Nov 20 11:20:00 2010 (4CE792C0) fffff880`011f7000 fffff880`01200000 compbatt compbatt.sys Tue Jul 14 02:31:02 2009 (4A5BC3B6) fffff880`01200000 fffff880`01211000 Npfs Npfs.SYS Tue Jul 14 02:19:48 2009 (4A5BC114) fffff880`01211000 fffff880`01233000 tdx tdx.sys Sat Nov 20 11:21:54 2010 (4CE79332) fffff880`01233000 fffff880`01244000 blbdrive blbdrive.sys Tue Jul 14 02:35:59 2009 (4A5BC4DF) fffff880`0125a000 fffff880`01284000 ataport ataport.SYS Sat Nov 20 11:19:15 2010 (4CE79293) fffff880`01284000 fffff880`012a3000 lsi_scsi lsi_scsi.sys Fri Apr 17 01:13:50 2009 (49E7AD9E) fffff880`012a3000 fffff880`01306000 storport storport.sys Fri Mar 11 06:30:23 2011 (4D79A55F) fffff880`01306000 fffff880`01311000 amdxata amdxata.sys Fri Mar 19 18:18:18 2010 (4BA3A3CA) fffff880`01311000 fffff880`0135d000 fltmgr fltmgr.sys Sat Nov 20 11:19:24 2010 (4CE7929C) fffff880`0135d000 fffff880`013cf000 cng cng.sys Sat Nov 20 12:08:45 2010 (4CE79E2D) fffff880`013cf000 fffff880`013fa000 ksecpkg ksecpkg.sys Sat Nov 20 12:10:34 2010 (4CE79E9A) fffff880`01400000 fffff880`0141b000 ksecdd ksecdd.sys Sat Nov 20 11:21:15 2010 (4CE7930B) fffff880`0141b000 fffff880`0142c000 pcw pcw.sys Tue Jul 14 02:19:27 2009 (4A5BC0FF) fffff880`0142c000 fffff880`01436000 Fs_Rec Fs_Rec.sys Tue Jul 14 02:19:45 2009 (4A5BC111) fffff880`01436000 fffff880`0143f000 rdprefmp rdprefmp.sys Tue Jul 14 03:16:35 2009 (4A5BCE63) fffff880`0143f000 fffff880`0144a000 Msfs Msfs.SYS Tue Jul 14 02:19:47 2009 (4A5BC113) fffff880`0144a000 fffff880`01457000 TDI TDI.SYS Sat Nov 20 11:22:06 2010 (4CE7933E) fffff880`01457000 fffff880`015fa000 Ntfs Ntfs.sys Fri Mar 11 05:39:39 2011 (4D79997B) fffff880`01600000 fffff880`0162a000 cdrom cdrom.sys Sat Nov 20 11:19:20 2010 (4CE79298) fffff880`0162a000 fffff880`01633000 Null Null.SYS Tue Jul 14 02:19:37 2009 (4A5BC109) fffff880`01633000 fffff880`01656000 ehdrv ehdrv.sys Mon Nov 16 09:51:48 2009 (4B010494) fffff880`01656000 fffff880`01664000 vga vga.sys Tue Jul 14 02:38:47 2009 (4A5BC587) fffff880`01664000 fffff880`01689000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 02:38:51 2009 (4A5BC58B) fffff880`01689000 fffff880`01692000 rdpencdd rdpencdd.sys Tue Jul 14 03:16:34 2009 (4A5BCE62) fffff880`01695000 fffff880`01899000 tcpip tcpip.sys Sat Nov 20 11:25:52 2010 (4CE79420) fffff880`01899000 fffff880`018e3000 fwpkclnt fwpkclnt.sys Sat Nov 20 11:21:37 2010 (4CE79321) fffff880`018e3000 fffff880`018f3000 vmstorfl vmstorfl.sys Sat Nov 20 11:57:30 2010 (4CE79B8A) fffff880`018f3000 fffff880`0193f000 volsnap volsnap.sys Sat Nov 20 11:20:08 2010 (4CE792C8) fffff880`0193f000 fffff880`01947000 spldr spldr.sys Mon May 11 19:56:27 2009 (4A0858BB) fffff880`01947000 fffff880`01959000 mup mup.sys Tue Jul 14 02:23:45 2009 (4A5BC201) fffff880`01959000 fffff880`01962000 hwpolicy hwpolicy.sys Sat Nov 20 11:18:54 2010 (4CE7927E) fffff880`01962000 fffff880`01978000 disk disk.sys Tue Jul 14 02:19:57 2009 (4A5BC11D) fffff880`01978000 fffff880`019a8000 CLASSPNP CLASSPNP.SYS Sat Nov 20 11:19:23 2010 (4CE7929B) fffff880`019a8000 fffff880`019c0000 mpsdrv mpsdrv.sys Tue Jul 14 03:08:25 2009 (4A5BCC79) fffff880`019df000 fffff880`019ef000 watchdog watchdog.sys Tue Jul 14 02:37:35 2009 (4A5BC53F) fffff880`019ef000 fffff880`019f8000 RDPCDD RDPCDD.sys Tue Jul 14 03:16:34 2009 (4A5BCE62) fffff880`02204000 fffff880`0228d000 afd afd.sys Sat Nov 20 11:23:27 2010 (4CE7938F) fffff880`0228d000 fffff880`022d2000 netbt netbt.sys Sat Nov 20 11:23:18 2010 (4CE79386) fffff880`022d2000 fffff880`022db000 wfplwf wfplwf.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6) fffff880`022db000 fffff880`02301000 pacer pacer.sys Sat Nov 20 12:52:18 2010 (4CE7A862) fffff880`02301000 fffff880`02310000 netbios netbios.sys Tue Jul 14 03:09:26 2009 (4A5BCCB6) fffff880`02310000 fffff880`0232d000 serial serial.sys Tue Jul 14 03:00:40 2009 (4A5BCAA8) fffff880`0232d000 fffff880`02348000 wanarp wanarp.sys Sat Nov 20 12:52:36 2010 (4CE7A874) fffff880`02348000 fffff880`0235c000 termdd termdd.sys Sat Nov 20 13:03:40 2010 (4CE7AB0C) fffff880`0235c000 fffff880`023ad000 rdbss rdbss.sys Sat Nov 20 11:27:51 2010 (4CE79497) fffff880`023ad000 fffff880`023b9000 nsiproxy nsiproxy.sys Tue Jul 14 02:21:02 2009 (4A5BC15E) fffff880`023b9000 fffff880`023c4000 mssmbios mssmbios.sys Tue Jul 14 02:31:10 2009 (4A5BC3BE) fffff880`023c4000 fffff880`023d3000 discache discache.sys Tue Jul 14 02:37:18 2009 (4A5BC52E) fffff880`023d3000 fffff880`023f1000 dfsc dfsc.sys Sat Nov 20 11:26:31 2010 (4CE79447) fffff880`02a00000 fffff880`02a2f000 ndiswan ndiswan.sys Sat Nov 20 12:52:32 2010 (4CE7A870) fffff880`02a2f000 fffff880`02a4a000 raspppoe raspppoe.sys Tue Jul 14 03:10:17 2009 (4A5BCCE9) fffff880`02a4a000 fffff880`02a6b000 raspptp raspptp.sys Sat Nov 20 12:52:31 2010 (4CE7A86F) fffff880`02a6b000 fffff880`02a85000 rassstp rassstp.sys Tue Jul 14 03:10:25 2009 (4A5BCCF1) fffff880`02a85000 fffff880`02a90000 rdpbus rdpbus.sys Tue Jul 14 03:17:46 2009 (4A5BCEAA) fffff880`02a90000 fffff880`02a91480 swenum swenum.sys Tue Jul 14 03:00:18 2009 (4A5BCA92) fffff880`02a94000 fffff880`02aba000 tunnel tunnel.sys Sat Nov 20 12:51:50 2010 (4CE7A846) fffff880`02aba000 fffff880`02ad0000 intelppm intelppm.sys Tue Jul 14 02:19:25 2009 (4A5BC0FD) fffff880`02ad0000 fffff880`02aee000 i8042prt i8042prt.sys Tue Jul 14 02:19:57 2009 (4A5BC11D) fffff880`02aee000 fffff880`02afd000 kbdclass kbdclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116) fffff880`02afd000 fffff880`02b05000 vmmouse vmmouse.sys Mon Sep 29 10:09:25 2008 (48E07F25) fffff880`02b05000 fffff880`02b14000 mouclass mouclass.sys Tue Jul 14 02:19:50 2009 (4A5BC116) fffff880`02b14000 fffff880`02b31000 parport parport.sys Tue Jul 14 03:00:40 2009 (4A5BCAA8) fffff880`02b31000 fffff880`02b3d000 serenum serenum.sys Tue Jul 14 03:00:33 2009 (4A5BCAA1) fffff880`02b3d000 fffff880`02b4a000 fdc fdc.sys Tue Jul 14 03:00:54 2009 (4A5BCAB6) fffff880`02b4a000 fffff880`02b58000 vgapnp vgapnp.sys Tue Jul 14 02:38:47 2009 (4A5BC587) fffff880`02b58000 fffff880`02b7b980 E1G6032E E1G6032E.sys Thu May 29 02:14:51 2008 (483DE76B) fffff880`02b7c000 fffff880`02b80500 CmBatt CmBatt.sys Tue Jul 14 02:31:03 2009 (4A5BC3B7) fffff880`02b81000 fffff880`02b91000 CompositeBus CompositeBus.sys Sat Nov 20 12:33:17 2010 (4CE7A3ED) fffff880`02b91000 fffff880`02ba7000 AgileVpn AgileVpn.sys Tue Jul 14 03:10:24 2009 (4A5BCCF0) fffff880`02ba7000 fffff880`02bcb000 rasl2tp rasl2tp.sys Sat Nov 20 12:52:34 2010 (4CE7A872) fffff880`02bcb000 fffff880`02bd7000 ndistapi ndistapi.sys Tue Jul 14 03:10:00 2009 (4A5BCCD8) fffff880`02bd7000 fffff880`02bf5000 bowser bowser.sys Wed Feb 23 06:55:04 2011 (4D649328) fffff880`02c00000 fffff880`02c15000 lltdio lltdio.sys Tue Jul 14 03:08:50 2009 (4A5BCC92) fffff880`02c15000 fffff880`02c2d000 rspndr rspndr.sys Tue Jul 14 03:08:50 2009 (4A5BCC92) fffff880`02c3f000 fffff880`02c82000 ks ks.sys Sat Nov 20 12:33:23 2010 (4CE7A3F3) fffff880`02c82000 fffff880`02c94000 umbus umbus.sys Sat Nov 20 12:44:37 2010 (4CE7A695) fffff880`02c94000 fffff880`02c9f000 flpydisk flpydisk.sys Tue Jul 14 03:00:54 2009 (4A5BCAB6) fffff880`02c9f000 fffff880`02cb4000 NDProxy NDProxy.SYS Sat Nov 20 12:52:20 2010 (4CE7A864) fffff880`02cb4000 fffff880`02cc2000 crashdmp crashdmp.sys Tue Jul 14 03:01:01 2009 (4A5BCABD) fffff880`02cc2000 fffff880`02ccc000 dump_diskdump dump_diskdump.sys Sat Nov 20 12:33:56 2010 (4CE7A414) fffff880`02ccc000 fffff880`02ceb000 dump_LSI_SCSI dump_LSI_SCSI.sys Fri Apr 17 01:13:50 2009 (49E7AD9E) fffff880`02ceb000 fffff880`02cf7000 Dxapi Dxapi.sys Tue Jul 14 02:38:28 2009 (4A5BC574) fffff880`02cf7000 fffff880`02d05000 monitor monitor.sys Tue Jul 14 02:38:52 2009 (4A5BC58C) fffff880`02d05000 fffff880`02d28000 luafv luafv.sys Tue Jul 14 02:26:13 2009 (4A5BC295) fffff880`02d28000 fffff880`02dfa000 eamon eamon.sys Mon Nov 16 09:51:14 2009 (4B010472) fffff880`03636000 fffff880`03663000 mrxsmb mrxsmb.sys Wed Feb 23 06:56:22 2011 (4D649376) fffff880`03663000 fffff880`036b0000 mrxsmb10 mrxsmb10.sys Wed Feb 23 06:55:12 2011 (4D649330) fffff880`036b0000 fffff880`036d4000 mrxsmb20 mrxsmb20.sys Wed Feb 23 06:55:12 2011 (4D649330) fffff880`036d4000 fffff880`0379d000 HTTP HTTP.sys Sat Nov 20 11:24:30 2010 (4CE793CE) fffff880`0379d000 fffff880`037a5000 vmmemctl vmmemctl.sys Thu Oct 28 22:18:12 2010 (4CC9DA84) fffff880`037a5000 fffff880`037c5000 epfwwfpr epfwwfpr.sys Mon Nov 16 09:46:31 2009 (4B010357) fffff880`03e15000 fffff880`03ebb000 peauth peauth.sys Tue Jul 14 04:01:19 2009 (4A5BD8DF) fffff880`03ebb000 fffff880`03ec6000 secdrv secdrv.SYS Wed Sep 13 16:18:38 2006 (4508052E) fffff880`03ec6000 fffff880`03ef7000 srvnet srvnet.sys Wed Feb 23 06:55:44 2011 (4D649350) fffff880`03ef7000 fffff880`03f09000 tcpipreg tcpipreg.sys Sat Nov 20 12:51:48 2010 (4CE7A844) fffff880`03f09000 fffff880`03f73000 srv2 srv2.sys Wed Feb 23 06:56:00 2011 (4D649360) fffff880`0443e000 fffff880`044d6000 srv srv.sys Wed Feb 23 06:56:21 2011 (4D649375) fffff880`044d6000 fffff880`04504000 rdpdr rdpdr.sys Sat Nov 20 13:06:41 2010 (4CE7ABC1) fffff880`04504000 fffff880`0450f000 tdtcp tdtcp.sys Tue Jul 14 03:16:32 2009 (4A5BCE60) fffff880`0450f000 fffff880`0451e000 tssecsrv tssecsrv.sys Sat Nov 20 13:04:09 2010 (4CE7AB29) fffff880`0451e000 fffff880`04557000 RDPWD RDPWD.SYS Sat Nov 20 13:04:37 2010 (4CE7AB45) fffff880`04557000 fffff880`04575000 ipfltdrv ipfltdrv.sys Sat Nov 20 12:52:19 2010 (4CE7A863) fffff880`04575000 fffff880`045e6000 spsys spsys.sys Mon May 11 20:20:58 2009 (4A085E7A) fffff880`045e6000 fffff880`045f1000 asyncmac asyncmac.sys Tue Jul 14 03:10:13 2009 (4A5BCCE5) fffff960`00090000 fffff960`003a2000 win32k win32k.sys Thu Mar 03 05:51:40 2011 (4D6F104C) fffff960`00500000 fffff960`0051e000 dxg dxg.sys Tue Jul 14 02:38:28 2009 (4A5BC574) fffff960`00740000 fffff960`0074a000 TSDDD TSDDD.dll Tue Jul 14 03:16:34 2009 (4A5BCE62) fffff960`00830000 fffff960`00839000 framebuf framebuf.dll unavailable (00000000) Unloaded modules: fffff880`04575000 fffff880`045e6000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00071000 fffff880`04575000 fffff880`045e6000 spsys.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 00071000 fffff880`019a8000 fffff880`019b6000 crashdmp.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000E000 fffff880`019b6000 fffff880`019c0000 dump_storpor Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0000A000 fffff880`019c0000 fffff880`019df000 dump_LSI_SCS Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0001F000 fffff880`00f48000 fffff880`00f63000 sacdrv.sys Timestamp: unavailable (00000000) Checksum: 00000000 ImageSize: 0001B000 Closing open log file c:\debuglog.txt Please help me understand what is the problem...

Please understand that to troubleshoot the blue screen issues, we usually need to perform debugging. However, in this forum, we do not provide debugging support. If you would like to perform debugging, please contact Microsoft Customer Support Service (CSS). To obtain the phone numbers for specific technology request, please refer to the website listed below: http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS If you are outside the US, please refer to http://support.microsoft.com for regional support phone numbers.http://www.virmansec.com/blogs/skhairuddin

i see posts by others that does get help... for example... http://social.technet.microsoft.com/Forums/en-GB/w7itprogeneral/thread/1a55f35d-efdf-4a63-8408-3bb739a7de05 http://social.technet.microsoft.com/Forums/en-GB/w7itprogeneral/thread/acbd8459-224e-4b0c-8570-27dc89a7c05a maybe i'm in the wrong thread?

Hello, I can debug that for you. Bug Check Code 0xD1: http://msdn.microsoft.com/en-us/library/ff560244(VS.85).aspx There is a problem with one of the drivers. The BSOD occured when running w3wp.exe process. More information about it: http://www.processlibrary.com/directory/files/w3wp/25761/ If you are not using it, run msconfig and disable it or uninstall the application. If this does not help, start updating all possible drivers (especially NIC card drivers). This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator

Thank you Mr X, I'm afraid stopping the w3wp.exe (IIS) is impossible at the moment since it'll stop the websites on the server... I checked available windows updates on the server and checked if they're relevant but the info in the KB's talks about IE9. I thought about creating new 'Application pools' to replace and delete the old 'Application pools'. Does anyone have another ideas maybe?

For that you have to ask in IIS forums: http://forums.iis.net/ Also, start updating all possible drivers that you have especially NIC card ones. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator

I'll try, Thanks again @Mr X.

I'll try, Thanks again @Mr X. You are welcome :) This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator