Hi jamietoner,
I've powered up the notebook and on startup a BSOD error, new file this time, related to Eset Smart Security, minidump below. Am currently running SFC.
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Documents and Settings\Mark\My Documents\MiniDump Files\Rob\Mini090108-01.dm
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*c:\windows\symbols*htt
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_qfe.070227-2
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Mon Sep 1 13:06:05.468 2008 (GMT+10)
System Uptime: 0 days 0:01:25.156
Loading Kernel Symbols
..........................
Loading User Symbols
Loading unloaded module list
............
ERROR: FindPlugIns 8007007b
**************************
* *
* Bugcheck Analysis *
* *
**************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, e2bb0414, e2bb0e44, d46744e}
*** WARNING: Unable to verify timestamp for eamon.sys
*** ERROR: Module load completed but symbols could not be loaded for eamon.sys
Probably caused by : eamon.sys ( eamon+3be1 )
Followup: MachineOwner
---------
1: kd> !analyze -v
ERROR: FindPlugIns 8007007b
**************************
* *
* Bugcheck Analysis *
* *
**************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e2bb0414, The pool entry we were looking for within the page.
Arg3: e2bb0e44, The next pool entry.
Arg4: 0d46744e, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: e2bb0414
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: wmiprvse.exe
LAST_CONTROL_TRANSFER: from 8054a583 to 804f9f13
STACK_TEXT:
f77ec1c8 8054a583 00000019 00000020 e2bb0414 nt!KeBugCheckEx+0x1b
f77ec218 f730d94b e2bb041c 00000000 f7308f98 nt!ExFreePoolWithTag+0x2a3
f77ec224 f7308f98 01674400 00000000 d0c74508 Ntfs!NtfsCommonCreate+0x15
f77ec428 f730ad2d 85f1e2c0 85cb3008 f77ec480 Ntfs!NtfsCommonCreate+0x14
f77ec50c 804ef163 86d59020 85cb3008 8606b790 Ntfs!NtfsFsdCreate+0x1dc
f77ec51c f738e876 85cb3018 863af8a0 8606b790 nt!IopfCallDriver+0x31
f77ec568 804ef163 86389ac0 00000001 862dbf38 sr!SrCreate+0x150
f77ec578 a9d99be1 85cb3018 862dbf38 8606b790 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f77ec5a8 804ef163 85a96020 85cb3008 85cb3008 eamon+0x3be1
f77ec5b8 80581fe2 863b14f0 85bb10f4 f77ec750 nt!IopfCallDriver+0x31
f77ec698 805bdf06 863b1508 00000000 85bb1050 nt!IopParseDevice+0xa12
f77ec710 805ba58e 00000000 f77ec750 00000040 nt!ObpLookupObjectName+0x5
f77ec764 80574f33 00000000 00000000 00000000 nt!ObOpenObjectByName+0xea
f77ec7e0 805758aa f77ec9f4 00100001 f77ec9c0 nt!IopCreateFile+0x407
f77ec83c 80577f76 f77ec9f4 00100001 f77ec9c0 nt!IoCreateFile+0x8e
f77ec87c 805409ac f77ec9f4 00100001 f77ec9c0 nt!NtCreateFile+0x30
f77ec87c 804ff671 f77ec9f4 00100001 f77ec9c0 nt!KiFastCallEntry+0xfc
f77ec920 a9d97a55 f77ec9f4 00100001 f77ec9c0 nt!ZwCreateFile+0x11
f77ec968 a9d994a7 f77ec9f4 00100001 f77ec9c0 eamon+0x1a55
f77ec9fc a9d9ae40 00000028 000000f4 85b1a1bc eamon+0x34a7
f77eca28 a9d99b17 85f2d860 00000000 00000000 eamon+0x4e40
f77eca70 804ef163 85a96020 85b1a008 85b1a008 eamon+0x3b17
f77eca80 80581fe2 863b14f0 85f83a64 f77ecc18 nt!IopfCallDriver+0x31
f77ecb60 805bdf06 863b1508 00000000 85f839c0 nt!IopParseDevice+0xa12
f77ecbd8 805ba58e 00000000 f77ecc18 00000040 nt!ObpLookupObjectName+0x5
f77ecc2c 80574f33 00000000 00000000 9ebae001 nt!ObOpenObjectByName+0xea
f77ecca8 805758aa 0097e300 80100000 0097e258 nt!IopCreateFile+0x407
f77ecd04 8057906b 0097e300 80100000 0097e258 nt!IoCreateFile+0x8e
f77ecd44 805409ac 0097e300 80100000 0097e258 nt!NtOpenFile+0x27
f77ecd44 7c90eb94 0097e300 80100000 0097e258 nt!KiFastCallEntry+0xfc
0097e2a8 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: kb
FOLLOWUP_IP:
eamon+3be1
a9d99be1 ?? ???
SYMBOL_STACK_INDEX: 8
SYMBOL_NAME: eamon+3be1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: eamon
IMAGE_NAME: eamon.sys
DEBUG_FLR_IMAGE_TIMESTAMP:
FAILURE_BUCKET_ID: 0x19_20_eamon+3be1
BUCKET_ID: 0x19_20_eamon+3be1
Followup: MachineOwner
---------
Regards
Chiarne
Main Topics
Browse All Topics





by: jamietonerPosted on 2008-08-31 at 20:00:16ID: 22357268
ntkrpamp is a built in driver so i would try to run the system file checker. Click start->run->type sfc /scannow press enter and make sure to have the XP cd ready.