Solved

Bad_Pool_Header 0x019 BSOD

Posted on 2011-02-10
11
2,339 Views
Last Modified: 2012-05-11
We are having an issue on a laptop were the computer is frequently recieving a BSOD. It is a Windows XP machine on an SBS2008 domain.

The BSODs have all been Bad_Pool_Header 0x019. They have happened randomly while working in Excel, powerpoint, and printing from IE. It can be caused by clicking on the Font portion of Word or Excel.

I have analyzed the minidump files using WinDbg but am not an expert at it.
What I have seen using the !analyze -v is that the pool header is already corrupt at the time of the current request. The pool_address is different in each dump file but it always points to Pooltag Gpff : GDI physical font file.

We have tried repairing office, and recreating the page file by setting it to not use one and then setting it to the recommended size.

I am attaching the dump files and the notes i have on this case.

Thanks for your help,
Grant
Minidump.zip
Tammy-s-BSOD-notes.docx
0
Comment
Question by:kliler
  • 5
  • 4
  • 2
11 Comments
 
LVL 5

Expert Comment

by:Precifijo
ID: 34865914
I'm not an expert on analyzing a minidump file either. Mostly because when ever I have a BSOD problem, 90% of the time it's a problem with a memory module. If you can duplicate it, I would try the good old "simple" memory test by removing one memory module at a time and try to duplicate it.
0
 
LVL 5

Assisted Solution

by:Precifijo
Precifijo earned 100 total points
ID: 34865931
You can also try running sfc /scannow  if the previous suggestion does not work.
0
 
LVL 48

Assisted Solution

by:dbrunton
dbrunton earned 100 total points
ID: 34866017
Try rebuilding your font cache.

From http://forums.quark.com/t/15314.aspx

Windows Font Cache (Windows 2000/XP/Vista)
The Windows operating system has a font cache file that is located here:
C:\Windows\System32\FNTCACHE.DAT
Delete this file, and restart your system. A new FNTCACHE.DAT file will be created on startup.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:kliler
ID: 34868107
We've run the SFC /scannow and reset the Font cache with no change (selecting the font dropown in Excel BSODs the machine).

A hardware memory test is currently running.
0
 
LVL 5

Expert Comment

by:Precifijo
ID: 34868198
Good. I'm almost certain that it's being caused by bad memory. However, if that's not the case, you need to read the following article:

http://support.microsoft.com/kb/834450

Your minidump seems to point to the win32k.sys driver.  
0
 

Author Comment

by:kliler
ID: 34868325
The memory test has completed two passes without errors.

Any additional steps we can try?

Thanks!
0
 
LVL 5

Expert Comment

by:Precifijo
ID: 34871872
did you read the article I posted on my previous comment?
0
 
LVL 48

Expert Comment

by:dbrunton
ID: 34875969
Hmm.

Try installing a font viewer.  Here is one you can use as shareware http://www.mindworkshop.com/fontrang.html  (just don't exceed the time limit of the font)

Use whichever font viewer you get and see if it can handle all of the fonts.  I'm still tempted to think that this is a font problem due to where the debug is pointing and the Excel font problems.

You don't have a huge amount of fonts in your font directory by any chance do you?
0
 

Accepted Solution

by:
kliler earned 0 total points
ID: 34899860
The issue has been resolved. It was a printer that had been installed a little while before the issue started happening. Deleted it and the issue went away. We were just getting ready to do a format and reload so happy to find that.

Thanks for the help and suggestions.

Grant
0
 

Author Comment

by:kliler
ID: 34899947
'
0
 

Author Closing Comment

by:kliler
ID: 34936444
Issue causing bluescreens was a Kyocera driver.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question