0x00000019 BAD_POOL_HEADER Invalid Pool Header

Are you running wireless? Check out this doc:
http://www.tweaksforgeeks.com/BAD_POOL_HEADER.html

Other than that, I'm stumped. Symantec doesn't address the issue at all. Out of curiousity... does "one button checkup" also run liveupdate?

Good luck.
Matt

Hi Schroederm,
                      I did come across that link as well in my surfing for answers. No OneButton Checkup doesn't run Live Update & I'm now convinced it's not isolated to Norton/Symantec as I get the BSOD error when trying to run Registry 1st Aid & also Incredimail. No wireless other than Bluetooth for Logitech Di  Novo Keyboard/mouse/mediapad. I've also done further researching on Google/Vivisimo & came across disabling the "Indexing" service, which I've done to no avail. Same annnoying random BSOD. I know it's just a matter of finding what's causing it to happen, but how to go about it is the tough part.
Thanks for trying,
                         Gary.

When Windows crashes with blue screen, it writes a system event 1001 and a minidump to the folder \windows\minidump. Check system event 1001 and it has the content of the blue screen

Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001. Copy the content and paste it back here. Zip 3 to 4 minidumps and attach the zip files at any webspace. I will study the dump and find out the culprit.

Thank You cpc2004, I've zipped the dump files but had to e-mail them to your yahoo mail account that is posted w/EE. Also in the Event viewer for "system" I don't see any events for 1001. Most of them are 7035 or 7036. There was an odd one 33. I'll paste them: In the process I did come across some 1001:Event Type:      Information
Event Source:      Save Dump
Event Category:      None
Event ID:      1001
Date:            6/1/2005
Time:            8:50:49 PM
User:            N/A
Computer:      GENIE
Description:
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000019 (0x00000020, 0x87650148, 0x87650260, 0x0a230002). A dump was saved in: C:\WINDOWS\Minidump\Mini060105-10.dmp.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


 Event Type:      Information
Event Source:      Save Dump
Event Category:      None
Event ID:      1001
Date:            6/1/2005
Time:            9:38:40 PM
User:            N/A
Computer:      GENIE
Description:
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000019 (0x00000020, 0x8a018820, 0x8a018920, 0x0a20001b). A dump was saved in: C:\WINDOWS\Minidump\Mini060105-11.dmp.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type:      Error
Event Source:      Dhcp
Event Category:      None
Event ID:      1002
Date:            6/2/2005
Time:            6:56:08 AM
User:            N/A
Computer:      GENIE
Description:
The IP address lease 192.168.1.100 for the Network Card with network address 00508DE52811 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type:      Information
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7036
Date:            6/2/2005
Time:            10:10:01 AM
User:            N/A
Computer:      GENIE
Description:
The IMAPI CD-Burning COM Service service entered the stopped state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type:      Information
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7035
Date:            6/2/2005
Time:            10:10:01 AM
User:            NT AUTHORITY\SYSTEM
Computer:      GENIE
Description:
The IMAPI CD-Burning COM Service service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type:      Error
Event Source:      Cdrom
Event Category:      None
Event ID:      7
Date:            6/2/2005
Time:            8:10:50 AM
User:            N/A
Computer:      GENIE
Description:
The device, \Device\CdRom0, has a bad block.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b8 00   ..h...¸.
0008: 00 00 00 00 07 00 04 c0   .......À
0010: 00 01 00 00 9c 00 00 c0   ....œ..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 20 6c 14 00 00 00 00   . l.....
0028: ff d9 00 00 00 00 00 00   ÿÙ......
0030: ff ff ff ff 01 00 00 00   ÿÿÿÿ....
0038: 40 00 00 c4 02 00 00 00   @..Ä....
0040: 00 20 0a 12 48 02 00 40   . ..H..@
0048: 00 00 00 00 0a 00 00 00   ........
0050: 00 00 00 00 a0 33 48 8a   .... 3HŠ
0058: 00 00 00 00 70 6e 42 8a   ....pnBŠ
0060: 02 00 00 00 84 8d 02 00   ....„..
0068: 28 00 00 02 8d 84 00 00   (...„..
0070: 02 00 00 00 00 00 00 00   ........
0078: f0 00 03 00 02 8d 84 0e   ð....„.
0080: 00 00 00 00 15 00 00 00   ........
0088: 00 00 00 00 00 00 00 00   ........

Probably caused by : WsKrnlab.sys ( WsKrnlab+7336 ). I have no idea what it is and I will search internet to find out any known problem relating to wskrnlab.sys

STACK_TEXT:  
ade4f86c 80550fc5 00000019 00000020 876f2af8 nt!KeBugCheckEx+0x1b
ade4f8bc 805503e3 876f2b00 00000000 ade4f95c nt!ExFreePoolWithTag+0x2c1
ade4f8cc f767e336 876f2b00 00000000 8a7e1638 nt!ExFreePool+0xf
WARNING: Stack unwind information not available. Following frames may be wrong.
ade4f95c 804e13d9 8a46ab50 87669d70 ade4f9c0 WsKrnlab+0x7336  <----
ade4f9dc 804e13d9 893c0020 87669d70 87669d70 nt!IopfCallDriver+0x31
ade4f9ec 8057ccc7 87829028 ade4fc38 ade4fbbc nt!IopfCallDriver+0x31
ade4facc 80581322 893c0020 00000000 876ef270 nt!IopParseDevice+0xa58
ade4fb04 80571ef1 87829028 00000000 876ef270 nt!IopParseFile+0x46
ade4fb7c 8056f2a8 000002f4 ade4fbbc 00000040 nt!ObpLookupObjectName+0x119
ade4fbd0 80581e21 00000000 00000000 ade4fd01 nt!ObOpenObjectByName+0xea
ade4fd54 804dd99f 0012eba4 0012eb7c 0012ebd0 nt!NtQueryAttributesFile+0xf1
ade4fd54 7c90eb94 0012eba4 0012eb7c 0012ebd0 nt!KiFastCallEntry+0xfc
0012eb5c 00000000 00000000 00000000 00000000 0x7c90eb94

Thanks cpc2004,
                       I'll also run a search & see what this "WsKrnlab.sys" is & what I can do to rectify these errors (BSOD). I can add that running Incredimail alone doesn't cause a crash, however Lockergnome e-mails (IT only) does. Lockergnomes' "Hot Downloads" & "Windows Fanatics" e-mails don't & neither do any other -emails (mostly subscripts).
Thanks again,
                   Gary.

Does the minidump instruction address include this wskrnlab.sys? I've yet to find this wskrnlab.sys on my system with a thorough search. In the process of methodically removing suspect software (trial & error). I did remove Systemworks 2005 & have left it off (though it didn't seem the likely culprit) as I'm using anti-virus from Zonelabs Security Suite. Will check back.

Thank you for all of your help cpc2004. You kept me on the correct path & I learned some things along the way. I did remove many  programs which I suspected were causing this problem, however it persisted & I was getting to the point where it was simply futile. Unfortunately (or fortunately depending on how it's viewed) I've had to re-format & re-install it all.....Enough can't be said about good solid backups. Another hard lesson I learned was that backups must be kept on hard drives of equal or greater size (this is how you learn, but good!). I truly feel my culprit was somehow connected to using files from an "image" for the sake of time. Some files just have to go through an "installation with the registry" otherwise you're begging for corruption. I suppose that's of value. It was to me.

Thanks again,
                 Gary

I just unplugged my Netgear USB wireless dongle, booted to Safe Mode with Networking, went to Add/ Remove Programs, uninstalled the Netgear USB Wireless dongle software and re- booted. That's all. ;-)