BSOD Windows 2008 R2

i had system blue screen following information.  can please resolving issue.

 

*******************************************************************************
*                                                                             *
*                        bugcheck analysis                                    *
*                                                                             *
*******************************************************************************

driver_corrupted_expool (c5)
attempt made access pageable (or invalid) address @ an
interrupt request level (irql) high.  is
caused drivers have corrupted system pool.  run driver
verifier against new (or suspect) drivers, , if doesn't turn up
culprit, use gflags enable special pool.
arguments:
arg1: 0000000000000008, memory referenced
arg2: 0000000000000002, irql
arg3: 0000000000000000, value 0 = read operation, 1 = write operation
arg4: fffff80001bee000, address referenced memory

debugging details:
------------------

bugcheck_str:  0xc5_2

current_irql:  2

faulting_ip:
nt!exdeferredfreepool+174
fffff800`01bee000 4c395008        cmp     qword ptr [rax+8],r10

customer_crash_count:  1

default_bucket_id:  driver_fault_server_minidump

process_name:  system

trap_frame:  fffff8800225b310 -- (.trap 0xfffff8800225b310)
note: trap frame not contain registers.
register values may zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880008001c0
rdx=fffffa80636ef110 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80001bee000 rsp=fffff8800225b4a0 rbp=0000000000000000
 r8=fffffa806890e990  r9=fffffa80636ef0a0 r10=fffffa80636ef0b0
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv ei ng nz ac po cy
nt!exdeferredfreepool+0x174:
fffff800`01bee000 4c395008        cmp     qword ptr [rax+8],r10 ds:00000000`00000008=????????????????
resetting default scope

last_control_transfer:  fffff80001ab9b69 fffff80001aba600

stack_text: 
fffff880`0225b1c8 fffff800`01ab9b69 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!kebugcheckex
fffff880`0225b1d0 fffff800`01ab87e0 : 00000000`00000001 00000000`00000000 00000000`00000e9b 00000000`00000000 : nt!kibugcheckdispatch+0x69
fffff880`0225b310 fffff800`01bee000 : fffffa80`680d6000 fffffa80`dd8b27f0 fffffa80`680e1f80 fffff880`0611df5c : nt!kipagefault+0x260
fffff880`0225b4a0 fffff800`01bef4c1 : fffff880`00000001 fffffa80`690dc5f0 00000000`00000000 00000000`00000000 : nt!exdeferredfreepool+0x174
fffff880`0225b530 fffff880`00e77c44 : fffffa80`680e2320 fffffa80`00000000 fffffa80`626c6670 00000000`00000000 : nt!exfreepoolwithtag+0x411
fffff880`0225b5e0 fffff880`0611e91e : fffffa80`680d6990 00000000`00000000 00000000`00000000 fffff880`0225b840 : ndis!ndisfreenetbufferlistcontext+0x54
fffff880`0225b610 fffffa80`680d6990 : 00000000`00000000 00000000`00000000 fffff880`0225b840 fffffa80`680d6000 : basp+0x1291e
fffff880`0225b618 00000000`00000000 : 00000000`00000000 fffff880`0225b840 fffffa80`680d6000 fffff880`01a71260 : 0xfffffa80`680d6990

stack_command:  kb

followup_ip:
nt!exdeferredfreepool+174
fffff800`01bee000 4c395008        cmp     qword ptr [rax+8],r10

symbol_stack_index:  3

symbol_name:  nt!exdeferredfreepool+174

followup_name:  pool_corruption

image_name:  pool_corruption

debug_flr_image_timestamp:  0

module_name: pool_corruption

failure_bucket_id:  x64_0xc5_2_nt!exdeferredfreepool+174

bucket_id:  x64_0xc5_2_nt!exdeferredfreepool+174

followup: pool_corruption
---------

hi,

 

i confirm following questions first:

 

1.     when did issue start occur?

2.     is there change made on system?

3.     what doing or program running when bsod occurred?

4.     is reproducible?

 

based on following information, bsod issue can caused network card. ndis means issue may relate network components , basp can network card driver broadcom.

 

------------------------------------------------------------------------

fffff880`0225b5e0 fffff880`0611e91e : fffffa80`680d6990 00000000`00000000 00000000`00000000 fffff880`0225b840 : ndis!ndisfreenetbufferlistcontext+0x54

fffff880`0225b610 fffffa80`680d6990 : 00000000`00000000 00000000`00000000 fffff880`0225b840 fffffa80`680d6000 : basp+0x1291e

------------------------------------------------------------------------

 

if have broadcom network adapter installed, please try update network card driver test issue.

 

if issue persists, please send me more minidump files analyzing. convenience, have created workspace you. can upload information files following link. (please choose "send files microsoft")

 

workspace url: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=ca806d59-13cf-44d6-b09b-f46a0626232b

password: epjvici3jn!no4

 

note: due differences in text formatting various email clients, workspace link above may appear broken.  please sure include text between '(' , ')' when typing or copying workspace link browser. meanwhile, please note files uploaded more 72 hours deleted automatically. please ensure notify me timely after have uploaded files. thank understanding.

 

collect minidump files

=================

1. click "start", input "sysdm.cpl" (without quotation marks) in “search” bar , press “enter”.

2. switch "advanced" tab , click "settings" button under "startup , recovery".

3. under "write debugging information" section, make sure "small memory dump (128kb)" option selected.

4. make sure "%systemroot%\minidump" in "small dump directory" open box , click “ok”.

 

if blue screen appears again, please refer following steps collect memory dump files:

 

1. click “start”, type “%systemroot%\minidump" (without quotation marks) in “search” bar , press “enter”.

2. go desktop, right-click on , create new folder named "dump".

3. copy memory dump files (looks [mini092008-01.dmp]) in minidump folder.

4. right-click on dump folder, click "send to", , click "compressed (zipped) folder".

5. please send zip file us.

 

for more information, please read microsoft kb article: how read small memory dump files windows creates debugging.

 

if no more clues can found, may contact microsoft customer service , support (css) via telephone dedicated support professional can assist request. troubleshoot kind of kernel crash issue, need debug crashed system dump. unfortunately, debugging beyond can in forum. please advised contacting phone support charged call.

 

to obtain phone numbers specific technology request please take @ web site listed below:

http://support.microsoft.com/default.aspx?scid=fh;en-us;offerprophone#faq607

 

regards,

 

---

please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.

Windows Server  >  Windows Server General Forum