PHP:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Andrew\Desktop\Mini100909-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\temp\symbols\*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18005.amd64fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0xfffff800`01e1e000 PsLoadedModuleList = 0xfffff800`01fe2dd0
Debug session time: Fri Oct 9 15:44:33.622 2009 (GMT+1)
System Uptime: 0 days 6:28:50.494
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80001e8e606, fffffa6009e63100, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithQuotaTag+c6 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80001e8e606, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffa6009e63100, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExAllocatePoolWithQuotaTag+c6
fffff800`01e8e606 48897df8 mov qword ptr [rbp-8],rdi
CONTEXT: fffffa6009e63100 -- (.cxr 0xfffffa6009e63100)
rax=0000000000000000 rbx=0000000000000001 rcx=fffffa80082a9250
rdx=00000000000034b0 rsi=0000000000000300 rdi=fffffa8008443040
rip=fffff80001e8e606 rsp=fffffa6009e63960 rbp=00000000000004dc
r8=0000000000000000 r9=0000000000000320 r10=0000000000000028
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000020707249 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!ExAllocatePoolWithQuotaTag+0xc6:
fffff800`01e8e606 48897df8 mov qword ptr [rbp-8],rdi ss:0018:00000000`000004d4=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: audiodg.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80001e837de to fffff80001e8e606
STACK_TEXT:
fffffa60`09e63960 fffff800`01e837de : 00000000`00000300 00000000`00000008 00000000`00000000 00000000`002f0003 : nt!ExAllocatePoolWithQuotaTag+0xc6
fffffa60`09e639b0 fffff800`020da8f4 : fffffa80`08c0a300 fffffa80`0451b690 00000000`00000008 00000000`00000001 : nt!IopAllocateIrpPrivate+0x21e
fffffa60`09e63a10 fffff800`020e3586 : 00000000`027af3a0 00000000`000004dd 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x394
fffffa60`09e63b40 fffff800`01e77ef3 : fffffa80`04667350 00000000`027af388 fffffa60`09e63bc8 00000000`027af640 : nt!NtDeviceIoControlFile+0x56
fffffa60`09e63bb0 00000000`77356d8a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`027af398 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77356d8a
FOLLOWUP_IP:
nt!ExAllocatePoolWithQuotaTag+c6
fffff800`01e8e606 48897df8 mov qword ptr [rbp-8],rdi
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExAllocatePoolWithQuotaTag+c6
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0237f
STACK_COMMAND: .cxr 0xfffffa6009e63100 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithQuotaTag+c6
BUCKET_ID: X64_0x3B_nt!ExAllocatePoolWithQuotaTag+c6
Followup: MachineOwner
---------Still looks like it's something to do with the audio but also mentions something about memory. Have you tried running memtest (http://www.memtest.org/) for a few hours without any failures?
Also, have you got all windows updates?
