Hi,
We have investigated a pool corruption issue that seem to be caused by the atitool.sys driver. The driver is reported to be using wcsrchr in it's DriverEntry on a string that is not null terminated. Somehow this leads to a couple of bytes being zeroed out in the name of another object...