Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\admin\Downloads\120514-25209-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18409.x86fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0x82e3e000 PsLoadedModuleList = 0x82f875b0
Debug session time: Fri Dec 5 17:04:01.553 2014 (UTC + 6:00)
System Uptime: 0 days 0:01:57.192
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, 87752670, 877526f8, 8110018}
*** WARNING: Unable to verify timestamp for PSINFile.sys
*** ERROR: Module load completed but symbols could not be loaded for PSINFile.sys
Probably caused by : PSINFile.sys ( PSINFile+1056 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 87752670, The pool entry we were looking for within the page.
Arg3: 877526f8, The next pool entry.
Arg4: 08110018, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: GetPointerFromAddress: unable to read from 82fa784c
Unable to read MiSystemVaType memory at 82f86f00
87752670
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 82f5fa76 to 82f5ec6b
STACK_TEXT:
8a593a4c 82f5fa76 87752678 00000000 8a593a68 nt!ExFreePoolWithTag+0x1b1
8a593a5c 94774056 87752678 8a593a84 9477ce40 nt!ExFreePool+0xf
WARNING: Stack unwind information not available. Following frames may be wrong.
8a593a68 9477ce40 947884f8 87752678 94788000 PSINFile+0x1056
8a593a84 9477654e 8770d8fc 94788000 9478421c PSINFile+0x9e40
8a593a9c 9477701f 8770d8f4 86a133a0 8770d878 PSINFile+0x354e
8a593ab4 883285f4 8770d8a8 00000008 87ae51c8 PSINFile+0x401f
8a593ad0 883287c0 8770d878 869d38a0 8a593aec fltmgr!DoFreeContext+0x66
8a593ae0 88328841 8770d878 8a593b18 9477724f fltmgr!DoReleaseContext+0x42
8a593aec 9477724f 8770d8a8 0000271b 00000001 fltmgr!FltReleaseContext+0x11
8a593b18 88327aeb 87ae51c8 8a593b38 8a593b64 PSINFile+0x424f
8a593b84 8832a9f0 8a593bd8 871af608 871af7e0 fltmgr!FltpPerformPreCallbacks+0x34d
8a593b9c 8832af01 8a593bd8 00000000 858e7408 fltmgr!FltpPassThroughInternal+0x40
8a593bc0 8832b3ba 12593bd8 858e7408 00000000 fltmgr!FltpPassThrough+0x203
8a593bf0 82e74c1e 858e7408 871af608 8739b320 fltmgr!FltpDispatch+0xb4
8a593c08 83070c95 84b08870 8739b308 00000001 nt!IofCallDriver+0x63
8a593c48 8306211f 86a92030 8739b320 00000001 nt!IopCloseFile+0x2f3
8a593c94 8308354c 86a92030 89b6e388 876f3528 nt!ObpDecrementHandleCount+0x139
8a593cdc 8308328c 89b6e388 9a713ef0 86a92030 nt!ObpCloseHandleTableEntry+0x203
8a593d0c 83083626 86a92030 876f3501 017cebbc nt!ObpCloseHandle+0x7f
8a593d28 82e7b8c6 00000778 017cebc0 770570f4 nt!NtClose+0x4e
8a593d28 770570f4 00000778 017cebc0 770570f4 nt!KiSystemServicePostCall
017cebc0 00000000 00000000 00000000 00000000 0x770570f4
STACK_COMMAND: kb
FOLLOWUP_IP:
PSINFile+1056
94774056 ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: PSINFile+1056
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: PSINFile
IMAGE_NAME: PSINFile.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4acdd49c
FAILURE_BUCKET_ID: 0x19_20_PSINFile+1056
BUCKET_ID: 0x19_20_PSINFile+1056
Followup: MachineOwner
---------
0: kd> lmvm PSINFile
start end module name
94773000 9478e000 PSINFile T (no symbols)
Loaded symbol image file: PSINFile.sys
Image path: \SystemRoot\system32\DRIVERS\PSINFile.sys
Image name: PSINFile.sys
Timestamp: Thu Oct 08 18:01:32 2009 (4ACDD49C)
CheckSum: 00023C88
ImageSize: 0001B000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
