New
#1
Bad_pool_header (19)
Ntfs.sys seems to be the culprit here, I'll be installing Windows 7 Ultimate Signature Edition very soon for the Windows 7 Launch Party as I'm a host. So should I do a long format of my 320G drive; that seems to have a bad format from the original install, this BSOD only happens randomly, but most often when defragmenting.
Code:Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: C:\Symbols Executable search path is: Windows 7 Kernel Version 7100 MP (2 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7100.0.amd64fre.winmain_win7rc.090421-1700 Machine Name: Kernel base = 0xfffff800`0300d000 PsLoadedModuleList = 0xfffff800`03246e90 Debug session time: Sun Sep 27 02:06:15.446 2009 (GMT-7) System Uptime: 0 days 0:59:31.128 Loading Kernel Symbols ............................................................... ................................................................ .................................. Loading User Symbols Loading unloaded module list ......... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 19, {20, fffffa80039a0950, fffffa80039a0ab0, 4160016} Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteFcb+3a3 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* BAD_POOL_HEADER (19) The pool is already corrupt at the time of the current request. This may or may not be due to the caller. The internal pool links must be walked to figure out a possible cause of the problem, and then special pool applied to the suspect tags or the driver verifier to a suspect driver. Arguments: Arg1: 0000000000000020, a pool block header size is corrupt. Arg2: fffffa80039a0950, The pool entry we were looking for within the page. Arg3: fffffa80039a0ab0, The next pool entry. Arg4: 0000000004160016, (reserved) Debugging Details: ------------------ BUGCHECK_STR: 0x19_20 POOL_ADDRESS: fffffa80039a0950 Nonpaged pool DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: System CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff800031ada6e to fffff8000308bf80 STACK_TEXT: fffff880`02dc48a8 fffff800`031ada6e : 00000000`00000019 00000000`00000020 fffffa80`039a0950 fffffa80`039a0ab0 : nt!KeBugCheckEx fffff880`02dc48b0 fffff880`01304af3 : fffff8a0`01bd46c0 fffff800`0321e5e0 fffffa80`7866744e fffffa80`04e63e40 : nt!ExDeferredFreePool+0x12be fffff880`02dc4960 fffff880`012553c9 : fffff800`0321e5e0 fffff880`02dc4b01 fffff880`02dc49e1 fffff8a0`01bd46c0 : Ntfs!NtfsDeleteFcb+0x3a3 fffff880`02dc49c0 fffff880`0130343c : fffffa80`04e63e40 fffffa80`043e3180 fffff8a0`01bd46c0 fffff8a0`01bd4a58 : Ntfs!NtfsTeardownFromLcb+0x1e9 fffff880`02dc4a50 fffff880`0125e182 : fffffa80`04e63e40 fffffa80`04e63e40 fffff8a0`01bd46c0 fffff880`02dc4c00 : Ntfs!NtfsTeardownStructures+0xcc fffff880`02dc4ad0 fffff880`0131c223 : fffffa80`043e3180 fffff800`0321e5e0 fffff8a0`6366744e 00000000`00000009 : Ntfs!NtfsDecrementCloseCounts+0xa2 fffff880`02dc4b10 fffff880`012eca4e : fffffa80`04e63e40 fffff8a0`01bd47f0 fffff8a0`01bd46c0 fffffa80`043e3180 : Ntfs!NtfsCommonClose+0x353 fffff880`02dc4be0 fffff800`03091744 : 00000000`00000000 fffff800`0321e500 fffff800`03280101 fffffa80`00000002 : Ntfs!NtfsFspClose+0x15e fffff880`02dc4cb0 fffff800`03311e66 : 0000045c`00000000 00000000`00000000 fffffa80`03a03680 0000045c`00000000 : nt!ExpWorkerThread+0x11a fffff880`02dc4d40 fffff800`0303ea86 : fffff880`009e8180 fffffa80`03a03680 fffff880`009f2f40 0000045c`00000000 : nt!PspSystemThreadStartup+0x5a fffff880`02dc4d80 00000000`00000000 : fffff880`02dc5000 fffff880`02dbf000 fffff880`02dc49e0 00000000`00000000 : nt!KxStartSystemThread+0x16 STACK_COMMAND: kb FOLLOWUP_IP: Ntfs!NtfsDeleteFcb+3a3 fffff880`01304af3 e9a2fdffff jmp Ntfs!NtfsDeleteFcb+0x14a (fffff880`0130489a) SYMBOL_STACK_INDEX: 2 SYMBOL_NAME: Ntfs!NtfsDeleteFcb+3a3 FOLLOWUP_NAME: MachineOwner MODULE_NAME: Ntfs IMAGE_NAME: Ntfs.sys DEBUG_FLR_IMAGE_TIMESTAMP: 49ee8de7 FAILURE_BUCKET_ID: X64_0x19_20_Ntfs!NtfsDeleteFcb+3a3 BUCKET_ID: X64_0x19_20_Ntfs!NtfsDeleteFcb+3a3 Followup: MachineOwner --------- 0: kd> lmvm Ntfs start end module name fffff880`0124b000 fffff880`013f6000 Ntfs (pdb symbols) c:\symbols\ntfs.pdb\25C1F1B3E16F44FE8E147572C90B62252\ntfs.pdb Loaded symbol image file: Ntfs.sys Image path: \SystemRoot\System32\Drivers\Ntfs.sys Image name: Ntfs.sys Timestamp: Tue Apr 21 20:24:23 2009 (49EE8DE7) CheckSum: 001AC27E ImageSize: 001AB000 File version: 6.1.7100.0 Product version: 6.1.7100.0 File flags: 0 (Mask 3F) File OS: 40004 NT Win32 File type: 3.7 Driver File date: 00000000.00000000 Translations: 0409.04b0 CompanyName: Microsoft Corporation ProductName: Microsoft® Windows® Operating System InternalName: ntfs.sys OriginalFilename: ntfs.sys ProductVersion: 6.1.7100.0 FileVersion: 6.1.7100.0 (winmain_win7rc.090421-1700) FileDescription: NT File System Driver LegalCopyright: © Microsoft Corporation. All rights reserved.
Quote