We help IT Professionals succeed at work.

Vista BSOD

dfranciscus
dfranciscus asked
on
Can anyone tell me what this means?


Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini120411-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18484.x86fre.vistasp2_gdr.110617-0336
Machine Name:
Kernel base = 0x82600000 PsLoadedModuleList = 0x82717c70
Debug session time: Sun Dec  4 16:33:24.070 2011 (UTC - 5:00)
System Uptime: 0 days 1:45:18.159
Loading Kernel Symbols
...............................................................
................................................................
.................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 826ee7d5, adaa0b5c, 0}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+1be )

Followup: Pool_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 826ee7d5, The address that the exception occurred at
Arg3: adaa0b5c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!ExDeferredFreePool+1be
826ee7d5 891e            mov     dword ptr [esi],ebx

TRAP_FRAME:  adaa0b5c -- (.trap 0xffffffffadaa0b5c)
ErrCode = 00000002
eax=fd318318 ebx=00000000 ecx=000001ff edx=00000000 esi=69050000 edi=9ca00dc0
eip=826ee7d5 esp=adaa0bd0 ebp=adaa0c08 iopl=0         nv up ei ng nz ac pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010297
nt!ExDeferredFreePool+0x1be:
826ee7d5 891e            mov     dword ptr [esi],ebx  ds:0023:69050000=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x8E

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 826ed858 to 826ee7d5

STACK_TEXT:  
adaa0c08 826ed858 9ca00dc0 00000001 00000000 nt!ExDeferredFreePool+0x1be
adaa0c74 9d36a9c3 fe5bbba8 00000000 adaa0ca0 nt!ExFreePoolWithTag+0x852
adaa0c84 9d34b223 fe5bbba8 00000008 00000000 win32k!FreeObject+0x2b
adaa0ca0 9d34b432 a3050cef 9d36bb7b adaa0d20 win32k!XEPALOBJ::vUnrefPalette+0x8d
adaa0d00 9d34b49d fe5bbba8 00000000 adaa0d24 win32k!SURFACE::bDeleteSurface+0x1fb
adaa0d10 9d34b564 00000000 00000000 ffae8258 win32k!SURFREF::bDeleteSurface+0x12
adaa0d24 9d36bbef a3050cef 001eb3e4 a3050cef win32k!bDeleteSurface+0x20
adaa0d38 8264ac7a a3050cef 001eb3f8 77d35ca4 win32k!NtGdiDeleteObjectApp+0x74
adaa0d38 77d35ca4 a3050cef 001eb3f8 77d35ca4 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
001eb3f8 00000000 00000000 00000000 00000000 0x77d35ca4


STACK_COMMAND:  kb

FOLLOWUP_IP:
nt!ExDeferredFreePool+1be
826ee7d5 891e            mov     dword ptr [esi],ebx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExDeferredFreePool+1be

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  0x8E_nt!ExDeferredFreePool+1be

BUCKET_ID:  0x8E_nt!ExDeferredFreePool+1be

Followup: Pool_corruption
---------

Comment
Watch Question

Might be a memory adress error.Did you try to update your firefox to the latest version?What are your system specifications?

Author

Commented:
Its an HP desktop, my girlfriend's parents computer. I don't have the specs right now. They were getting a BSOD using IE though as well, now with Firefox so I doubt it the problem lies with the browser. I did a memory diag test, that came back fine. Also did a System restore to 11/1/11 about two weeks ago. That seemed to work for a week, but now they are getting a BSOD again while using Firefox.
Top Expert 2013

Commented:
>>  PROCESS_NAME:  firefox.exe    <<   this points to firefox as the culprit; try uninstalling and reinstalling it
 
Top Expert 2013

Commented:
you can also switch to another browser : iE9
Bugcheck 0x8e (0xc5,,,) = exception thrown;
0xc5 = memory access violation

Make sure networking drivers updated - Ethernet + wifi - Driver Reference Table - sysnative.com MVP

If 3rd party firewall installed, remove it - http://kb.eset.com/esetkb/index?page=content&id=SOLN146