STOP: 0x000000D1 (0x0000000000000010, 0x0000000000000002,0x0000000000000 000,0xFFFFF88004494123)
Had a server running 2008 R2 Enterprise BSOD with the above stop code and have not been able to find any information on the details below.
nl_ndcap.sys - Address FFFFF88004494123 base at FFFFF88004492000, Datestamp 4bc64a4c
Anyone have any idea where to look for info on nl_ndcap.sys?
August 31st, 2011 8:47am
Hello,
Bug Check Code 0xD1: http://msdn.microsoft.com/en-us/library/ff560244(v=VS.85).aspx
I searched on the internet about ndcap.sys driver and I found no information about it. I suspect that
it belongs to a malware program. Please perform a full scan on your disks to detect malware programs and uninstall all programs that you don't use.
Also, please use Microsoft Skydrive to upload dump files (c:\windowd\minidumps). Once done, post a link here.
You can also contact Microsoft CSS.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft Student
Partner 2010 / 2011
Microsoft Certified Professional
Microsoft Certified Systems Administrator:
Security
Microsoft Certified Systems Engineer:
Security
Microsoft Certified Technology Specialist:
Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist:
Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified Technology Specialist:
Windows Server 2008 Applications Infrastructure, Configuration
Microsoft Certified Technology Specialist:
Windows 7, Configuring
Microsoft Certified IT Professional: Enterprise
Administrator
Microsoft Certified IT Professional: Server Administrator
Free Windows Admin Tool Kit Click here and download it now
August 31st, 2011 3:32pm
Hi,
Please go through the following link first:
How to read the small memory dump files that Windows creates for debugging
http://support.microsoft.com/kb/315263
As this issue needs debugging while we do not provide debugging support in this forum, if you would like to perform debugging, please contact Microsoft Customer Support
Service (CSS). To obtain the phone numbers for specific technology request, please refer to the website listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS
If you are outside the US, please refer to
http://support.microsoft.com for regional support phone numbers.
Best Regards,
Nina
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
September 1st, 2011 4:59am
Hi,
Any update on this issue? If there is anything that I can do for you, please feel free to let me know.
Thanks.
NinaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2011 6:18am
Had a server running 2008 R2 Enterprise BSOD with the above stop code and have not been able to find any information on the details below.
nl_ndcap.sys - Address FFFFF88004494123 base at FFFFF88004492000, Datestamp 4bc64a4c
Anyone have any idea where to look for info on nl_ndcap.sys?
The thread seems "abandoned" so I'm not sure the following will be worth, anyhow...
Start by configuring your system to generate a dump file in case of BSOD (even a minidump will be ok) and also NOT to reboot in case of BSOD (so that you'll be able to see the full message - if needed); next, download
this program on the box and extract the files from the "zip" to whatever suitable folder (e.g. c:\bsv); done that, either wait for another BSOD or, if the system was already configured to generate dumpfiles, just run the above program and select the latest
dump; the app will load and parse the file and show you the details about the crash along with the drivers loaded at "BSOD time"; now, just check the driver infos and visit the manufacturer site to obtain a new version of the driver which may possibly solve
your issue
[edit]
If you think that the file may belong to some kind of malware, try uploading it
here and performing a full scan against various antivirus program to see if it's a known piece of malware; also, if you want to check your system for signs of malware (and possibly clean it up), you may download
this app, burn it onto a CD and use the CD to boot the system and perform a full scan/clean
September 5th, 2011 9:26am
we need to analyze the crash dump file to narrow down the root cause of the issue.
http://support.microsoft.com/kb/315263
http://thebackroomtech.com/2008/01/31/howto-use-the-windows-debugging-tools-to-analyze-a-crash-dump-bsod/
Unfortunately, it is not effective for us to debug the crash dump file here in the forum. Therefore, I would like to suggest that you contact Microsoft Customer Service
and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
To obtain the phone numbers for specific technology request please take a look at the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
http://www.virmansec.com/blogs/skhairuddin
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2011 9:56am