Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD, How to find information about it?

07 Feb 2013   #1
MadeInBrazil

Windows 7 Ultimate, x64.
 
 
BSOD, How to find information about it?

Hello, my computer is about 2 years old and never had a problem with it until now. I decided to format it and do a clean install of windows. Today I got a BSOD after a shutdown that had 2 updates to be made. It did the updates process where it said to not shutdown the computer but then the BOSD happened. I could get all the information from it, but from what I remember it had something like: "Bad Pool Header".

I'm trying to get more info on this error and that's where I came across this board and decided to ask for help. I have found that a log is saved to windows/minidump but i cant read it =/
I have attached the file here.

Can anyone help me with this problem?

Thank you.

Sorry for my bad english.


My System SpecsSystem Spec
.
07 Feb 2013   #2
Dsprague

Microsoft Community Contributor Award Recipient

Windows 7 enterprise 64 bit, Windows 7 Pro 64 bit ,Windows 8 64bit
 
 

It seems that it is being caused by your network driver try updating it:
Code:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, fffffa8008de89b0, fffffa8008de8ad0, 4120002}

*** WARNING: Unable to verify timestamp for e1c62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1c62x64.sys
Probably caused by : e1c62x64.sys ( e1c62x64+1bec2 )

Followup: MachineOwner
---------
You can update the driver from here:
Intel Download Center
My System SpecsSystem Spec
07 Feb 2013   #3
MadeInBrazil

Windows 7 Ultimate, x64.
 
 

Thank you I will try that. Funny you mention it because I had a problem where I lost connection after a system sleep, when it would come back up I did not have internet. So I apply a hot fix and re-download drivers from asus website.

Now why did it said Bad Pool Header on the BSOD and how can I do what you did. I mean check the log and find the problem like you did for use in the future xD.

Thank you once again.
My System SpecsSystem Spec
.

07 Feb 2013   #4
Dsprague

Microsoft Community Contributor Award Recipient

Windows 7 enterprise 64 bit, Windows 7 Pro 64 bit ,Windows 8 64bit
 
 

If you are interested in learning how to debug BSODs there is a number of tutorials and information sites here:

BSOD Tutorials and Information Links

BSOD Analysis - Getting Started

Learning debugging - Video Tutorials
My System SpecsSystem Spec
08 Feb 2013   #5
MadeInBrazil

Windows 7 Ultimate, x64.
 
 

Hi, me again. I did what you said and update the drivers for my network card. So I have not had any problems until now, I set the computer to shut down and again BSOD. It seens to only do that when I set it to shutdown. Same problem "Bad Pool Header" and stop error 0x00000019.

Please help.
My System SpecsSystem Spec
09 Feb 2013   #6
carwiz

Windows 7 Pro-x64
 
 

This is paged pool memory error. This type of error is hard to trace since the page pool, in this case, is corrupt and the steps (addresses) through the pool are invalid. The last driver (elc62x64.sys) may or may not have been the cause. This can happen if you have multiple drivers attempting to use the same page pool area--Either by accident (outdated drivers) or on purpose (malware).

Page Pool stepping couldn't continue.

Code:
 
kd> !pool fffffa8007f80810
Pool page fffffa8007f80810 region is Unknown
 fffffa8007f80000 size:   c0 previous size:    0  (Free)       EtwR
 fffffa8007f800c0 size:   20 previous size:   c0  (Allocated)  VfIT
 fffffa8007f800e0 size:  170 previous size:   20  (Allocated)  NDpw
 fffffa8007f80250 size:  100 previous size:  170  (Allocated)  MmCa
 fffffa8007f80350 size:  1e0 previous size:  100  (Free)       VadS
 fffffa8007f80530 size:   c0 previous size:  1e0  (Allocated)  FMsl
 fffffa8007f805f0 size:   d0 previous size:   c0  (Free )  NSIr
 fffffa8007f806c0 size:   30 previous size:   d0  (Free)       KsoO
 fffffa8007f806f0 size:  120 previous size:   30  (Free )  IE1Q
GetUlongFromAddress: unable to read from fffff80003028a38
fffffa8007f80810 is not a valid small pool allocation, checking large pool...
unable to get pool big page table - either wrong symbols or pool tagging is disabled
fffffa8007f80810 is freed (or corrupt) pool
Bad allocation size @fffffa8007f80810, zero is invalid
***
*** An error (or corruption) in the pool was detected;
*** Pool Region unknown (0xFFFFFA8007F80810)
***
kd> !poolval fffffa8007f80000
Pool page fffffa8007f80000 region is Unknown
Validating Pool headers for pool page: fffffa8007f80000
Pool page [ fffffa8007f80000 ] is __inVALID.
Analyzing linked list...
[ fffffa8007f806f0 --> fffffa8007f808d0 (size = 0x1e0 bytes)]: Corrupt region

Scanning for single bit errors...
None found
There's a number of drivers that may be outdated. You haven't provided enough info on your system to determine if it is OEM or home-built so you'll need to verify that your motherboard drivers are up to date as well as a few of your hardware drivers and anti-virus. The two at the bottom of the list may be malware.

InfoWatch Encrypt Sector
Image path: \SystemRoot\system32\DRIVERS\CSCrySec.sys
Image name: CSCrySec.sys
Timestamp: Mon Dec 07 02:34:23 2009 (4B1CBE0F)

Image path: \SystemRoot\system32\DRIVERS\CSVirtualDiskDrv.sys
Image name: CSVirtualDiskDrv.sys
Timestamp: Mon Dec 07 02:34:27 2009 (4B1CBE13)


Kaspersky Lab (Anti-Virus)
Timestamp: Mon Nov 02 10:26:06 2009 (4AEF081E) Plus several others!!!!!!

DPL2/EQ Filter Driver from Logitech
Image path: \SystemRoot\system32\DRIVERS\ladfGSCamd64.sys
Image name: ladfGSCamd64.sys
Timestamp: Mon Apr 11 13:41:01 2011 (4DA34B3D)

Image path: \SystemRoot\system32\DRIVERS\ladfGSRamd64.sys
Image name: ladfGSRamd64.sys
Timestamp: Mon Apr 11 13:41:07 2011 (4DA34B43)

GamePanel Software from Logitech Inc.
Image path: \SystemRoot\system32\drivers\LGBusEnum.sys
Image name: LGBusEnum.sys
Timestamp: Mon Nov 23 19:36:48 2009 (4B0B38B0)

Image path: \SystemRoot\System32\Drivers\LGPBTDD.sys
Image name: LGPBTDD.sys
Timestamp: Wed Jul 01 13:47:52 2009 (4A4BAF58)

Image path: \SystemRoot\system32\drivers\LGVirHid.sys
Image name: LGVirHid.sys
Timestamp: Mon Nov 23 19:36:48 2009 (4B0B38B0)

Audio Driver
Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
Image name: RTKVHD64.sys
Timestamp: Tue Nov 02 06:25:59 2010 (4CCFF547)

NEC USB3 Drivers
Image path: \SystemRoot\system32\DRIVERS\nusb3hub.sys
Image name: nusb3hub.sys
Timestamp: Thu Dec 09 22:50:35 2010 (4D01B19B)

Image path: \SystemRoot\system32\DRIVERS\nusb3xhc.sys
Image name: nusb3xhc.sys
Timestamp: Thu Dec 09 22:50:35 2010 (4D01B19B)

These could be a Trojans
Image path: \SystemRoot\System32\Drivers\msrpc.sys
Image name: msrpc.sys
Timestamp: unavailable (00000000)
Image path: \SystemRoot\System32\Drivers\Fs_Rec.sys
Image name: Fs_Rec.sys
Timestamp: unavailable (00000000)

Before doing anything else, run SFC /scannow in an elevated command prompt (Administrator) to make sure the two above drivers are legit. Report back any console messages.
My System SpecsSystem Spec
09 Feb 2013   #7
MadeInBrazil

Windows 7 Ultimate, x64.
 
 

Hello and thank you for your help.

I ran what you asked, and I attached a print screen and a log of the test.

About my computer it's a home-built computer with a ASUS P8P67 PRO REV 3.0 motherboard Link. After the clean install I downloaded most drivers from Asus website Link.
I'm using Kaspersky Pure 2.0 as anti virus program.

If anymore info is needed please let me know.

Thank you.
My System SpecsSystem Spec
09 Feb 2013   #8
carwiz

Windows 7 Pro-x64
 
 

Did you follow the instructions on the console screen about rebooting? The scan replaced numerous Windows drivers that won't take effect until a reboot occurs. This could indicate that you have malware that is not being caught by Kaspersky.

Do NOT add or remove any software, unless directed, until we make sure your system is stable and checked for malware.

Download and install the free version of MBAM then start it and make sure it is updated. You may need to set your Anti-Virus/Internet-Security to ignore/exclude "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe". Then run a full scan.

If there are no "hits" from the MBAM scan we'll have to go through your list of "Most" updates for your motherboard drivers. Critical items are any hardware drivers (display, audio, USB, Bluetooth, LAN, SATA, etc.), BIOS and chipset INF updates. You do not need the Intel Management Engine or other motherboard utilities.
My System SpecsSystem Spec
21 Feb 2013   #9
MadeInBrazil

Windows 7 Ultimate, x64.
 
 
1st time computer BSOD dont know the cause. Please help with dump file

This time is my laptop. Got it from lenovo about 1 month ago, it was just sitting in my desk idle, then I see BSOD. didnt even have time to read what was on it. I tried installing Windbg according to this thread: BSOD Analysis - Getting Started but cant get it to work.

Can anyone tell me what happened and why I might have gotten this BSOD...


ty
My System SpecsSystem Spec
22 Feb 2013   #10
Dsprague

Microsoft Community Contributor Award Recipient

Windows 7 enterprise 64 bit, Windows 7 Pro 64 bit ,Windows 8 64bit
 
 

the crash you had appears to be a manualy initiated crash:

Code:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck DEADDEAD, {f00004b, 1a700ac, 12a60000, 0}

Probably caused by : NETwNs64.sys ( NETwNs64+1f619b )

Followup: MachineOwner
---------
But for some reason its also blaming your intel wireless driver? Not sure why it would be doing that, did you at any point try to initiate a manual crash?
My System SpecsSystem Spec
Reply

 BSOD, How to find information about it?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Halo 2 refuses to install - can't find performance information
Hi, I just bought the retail dvd of Halo 2 and I'm trying to install it on Windows 7. The install pops up a message box that says and the installation stops when I hit 'Run' anyway. But I have done a performance test to create a score of 5.9. I have a quad core i7 with 12 gig of ram...
Gaming
Image Restore Can Not Find Setup Information Files
My hard drive crashed recently and after purchasing a new one, I was able to use the HP Windows 7 Professional System Disk Restore. Worked great and ready to restore an image I have of my hard drive earlier this year. When go through the process of restoring my image from either an external...
Backup and Restore
Can't find the prefix's thread for post's? (eg. [note] , [information]
Basically say's it in the title :p I seen a link before to all the prefix's for posting. Like making them move and adding in the information, note, etc
Chillout Room
Windows unable to find my user desktop/information
Hey Guys, I was wondering if anyone had any idea into a slightly annoying reason that is somewhat perplexing me. Occasionaly when I load my machine windows (after asking me to log in with my password) loads a default desktop almost as if it cannot find my user specific desktop. This issue...
BSOD Help and Support
Where to find information about concurrency?
Hello. I am currently working on a school paper about Windows 7, and I am looking for where I can find papers/information about how W7 handles concurrency and processing/processes. I'd be very happy if some of you could point me in the right direction (links) to where I can find information...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:28.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App