ntoskrnl.exe causing a blue screen! How to troubleshoot?

Discussion in 'Software' started by mp8617, Jul 6, 2010.

  1. mp8617

    mp8617 Private E-2

    Here is my dump file. How do I troubleshoot this problem? Thanks!

    ---------------------------------------------------

    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\mpotoczniak\Desktop\Mini070210-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: C:\WINDOWS\Symbols
    Executable search path is:
    Unable to load image ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Machine Name:
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Fri Jul 2 10:05:15.081 2010 (GMT-7)
    System Uptime: 0 days 0:28:14.282
    Unable to load image ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .............................
    Loading User Symbols
    Loading unloaded module list
    ..............
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck C2, {7, cd4, 96c9d104, 96c9d068}

    GetUlongFromAddress: unable to read from 805637f0
    GetUlongFromAddress: unable to read from 805637f0
    Probably caused by : ntoskrnl.exe ( nt!_woutput+414 )

    Followup: MachineOwner
    ---------

    1: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 00000007, Attempt to free pool which was already freed
    Arg2: 00000cd4, (reserved)
    Arg3: 96c9d104, Memory contents of the pool block
    Arg4: 96c9d068, Address of the block of pool being deallocated

    Debugging Details:
    ------------------

    GetUlongFromAddress: unable to read from 805637f0
    GetUlongFromAddress: unable to read from 805637f0

    POOL_ADDRESS: 96c9d068

    BUGCHECK_STR: 0xc2_7

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    PROCESS_NAME: System

    LAST_CONTROL_TRANSFER: from 00000000 to 804f9f43

    STACK_TEXT:
    ba50fcbc 00000000 000000c2 00000007 00000cd4 nt!_woutput+0x414


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!_woutput+414
    804f9f43 5d pop ebp

    SYMBOL_STACK_INDEX: 0

    SYMBOL_NAME: nt!_woutput+414

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME: ntoskrnl.exe

    DEBUG_FLR_IMAGE_TIMESTAMP: 4b7a9cac

    FAILURE_BUCKET_ID: 0xc2_7_nt!_woutput+414

    BUCKET_ID: 0xc2_7_nt!_woutput+414

    Followup: MachineOwner
    ---------
     
  2. plodr

    plodr Major Geek Super Extraordinaire

  3. mp8617

    mp8617 Private E-2

    Right but it's not a driver... is it? It's the NTOSKRNL.EXE. This is not as simple as the dump file listing an audio driver as the culprit, and the fix being to update the audio driver. (like it says in that sticky.

    Please tell me if I am misunderstanding this.

    Thanks!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds