STOP: 0x000000D1 (0x0000000000000010, 0x0000000000000002,0x0000000000000 000,0xFFFFF88004494123)
Had a server running 2008 R2 Enterprise BSOD with the above stop code and have not been able to find any information on the details below. nl_ndcap.sys - Address FFFFF88004494123 base at FFFFF88004492000, Datestamp 4bc64a4c Anyone have any idea where to look for info on nl_ndcap.sys?
August 31st, 2011 8:47am

Hello, Bug Check Code 0xD1: http://msdn.microsoft.com/en-us/library/ff560244(v=VS.85).aspx I searched on the internet about ndcap.sys driver and I found no information about it. I suspect that it belongs to a malware program. Please perform a full scan on your disks to detect malware programs and uninstall all programs that you don't use. Also, please use Microsoft Skydrive to upload dump files (c:\windowd\minidumps). Once done, post a link here. You can also contact Microsoft CSS. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator
Free Windows Admin Tool Kit Click here and download it now
August 31st, 2011 3:32pm

Hi, Please go through the following link first: How to read the small memory dump files that Windows creates for debugging http://support.microsoft.com/kb/315263 As this issue needs debugging while we do not provide debugging support in this forum, if you would like to perform debugging, please contact Microsoft Customer Support Service (CSS). To obtain the phone numbers for specific technology request, please refer to the website listed below: http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS If you are outside the US, please refer to http://support.microsoft.com for regional support phone numbers. Best Regards, Nina Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
September 1st, 2011 4:59am

Hi, Any update on this issue? If there is anything that I can do for you, please feel free to let me know. Thanks. NinaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2011 6:18am

Had a server running 2008 R2 Enterprise BSOD with the above stop code and have not been able to find any information on the details below. nl_ndcap.sys - Address FFFFF88004494123 base at FFFFF88004492000, Datestamp 4bc64a4c Anyone have any idea where to look for info on nl_ndcap.sys? The thread seems "abandoned" so I'm not sure the following will be worth, anyhow... Start by configuring your system to generate a dump file in case of BSOD (even a minidump will be ok) and also NOT to reboot in case of BSOD (so that you'll be able to see the full message - if needed); next, download this program on the box and extract the files from the "zip" to whatever suitable folder (e.g. c:\bsv); done that, either wait for another BSOD or, if the system was already configured to generate dumpfiles, just run the above program and select the latest dump; the app will load and parse the file and show you the details about the crash along with the drivers loaded at "BSOD time"; now, just check the driver infos and visit the manufacturer site to obtain a new version of the driver which may possibly solve your issue [edit] If you think that the file may belong to some kind of malware, try uploading it here and performing a full scan against various antivirus program to see if it's a known piece of malware; also, if you want to check your system for signs of malware (and possibly clean it up), you may download this app, burn it onto a CD and use the CD to boot the system and perform a full scan/clean
September 5th, 2011 9:26am

we need to analyze the crash dump file to narrow down the root cause of the issue. http://support.microsoft.com/kb/315263 http://thebackroomtech.com/2008/01/31/howto-use-the-windows-debugging-tools-to-analyze-a-crash-dump-bsod/ Unfortunately, it is not effective for us to debug the crash dump file here in the forum. Therefore, I would like to suggest that you contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request. To obtain the phone numbers for specific technology request please take a look at the web site listed below: http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607 http://www.virmansec.com/blogs/skhairuddin
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2011 9:56am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics