Hi,
A Toshiba notebook running Windows XP SP2 is intermittently crashing on windows startup and also while just sitting on the Windows desktop with no programs running. I've had no experience reading this type of error analysis but from what little I can gather the file ntkrpamp.exe seems to be involved.
I have no idea how to go about fixing this or whether its software or hardware related. Would be very grateful for any further help in regards to this problem.
Minidump crash as follows:
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e2bc736a, The pool entry we were looking for within the page.
Arg3: e2bc7dea, The next pool entry.
Arg4: 0d500417, (reserved)
Debugging Details:
------------------
GetUlongFromAddress: unable to read from 80564cb0
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: e2bc736a
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
LAST_CONTROL_TRANSFER: from 8054a583 to 804f9f13
STACK_TEXT:
9a4a8cc0 8054a583 00000019 00000020 e2bc736a nt!KeBugCheckEx+0x1b
9a4a8d10 805f4178 e2bc7372 00000000 9a4a8d50 nt!ExFreePoolWithTag+0x2a3
9a4a8d20 805beba7 e2bc7372 ffffff01 00000001 nt!SeReleaseLuidAndAttribu
tesArray+0
x26
9a4a8d50 805409ac 85d070f8 00000004 008cff14 nt!NtSetSecurityObject+0xb
7
9a4a8d50 7c90eb94 85d070f8 00000004 008cff14 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
008cfe44 00000000 00000000 00000000 00000000 0x7c90eb94
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExFreePoolWithTag+2a3
8054a583 8b45f8 mov eax,dword ptr [ebp-8]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExFreePoolWithTag+2a3
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP:
45e5484a
FAILURE_BUCKET_ID: 0x19_20_nt!ExFreePoolWithT
ag+2a3
BUCKET_ID: 0x19_20_nt!ExFreePoolWithT
ag+2a3
Followup: MachineOwner
---------
Regards
Chiarne