Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

That Dreaded Bsod!


  • Please log in to reply
12 replies to this topic

#1 compunerd

compunerd

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:12:22 PM

Posted 21 January 2008 - 03:05 PM

Hi,

I was trying to do a backup onto an external HD when got the BSOD.
Here's the stop codes; 0x00000019(0x00000020, 0xE1A94A88, 0x0c0401) BAD_POOL_HEADER.
I tried again only to get the BSOD again with these codes; 0x00000019(0x00000020, 0xE29A1378, 0x0c040401) BAD_POOL_HEADER.

I recently cloned a new HD and had to do a repair install of WinXP/SP2. I had this external drive installed before the cloning and had no problems whatsoever. Did several backups before, no problems.

Any suggestions?

BC AdBot (Login to Remove)

 


#2 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,260 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:11:22 AM

Posted 21 January 2008 - 04:22 PM

You wouldn't happen to have a USB WiFi device, would you?

#3 compunerd

compunerd
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:12:22 PM

Posted 21 January 2008 - 05:11 PM

No, the device is a Maxtor 3200 USB 160GB external HD(not wifi).

#4 Pippincp

Pippincp

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:07:22 PM

Posted 21 January 2008 - 05:23 PM

You have't plugged the USB into the port on the front of the PC have you? Sometimes it is looked on as a hub and not everythig works on it

#5 Andrew

Andrew

    Bleepin' Night Watchman


  • Moderator
  • 8,260 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Right behind you
  • Local time:11:22 AM

Posted 21 January 2008 - 07:27 PM

No, the device is a Maxtor 3200 USB 160GB external HD(not wifi).


The reason I asked is that I've had a similar experience with my external HD (also a Maxtor 3200) and my USB wifi dongle. Using both at the same time has caused bluescreens of the 0x00000019 bad pool header variety.

#6 compunerd

compunerd
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:12:22 PM

Posted 21 January 2008 - 11:12 PM

Pippincp, I have it plugged in the back of the case.

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:22 PM

Posted 22 January 2008 - 08:07 AM

Typically this error message is caused by:
1) Device drivers
2) Disk issues
3) RAM (not very common)

I suspect that it's a driver issue (given the history of the repair install), but would check the hard drive with a diagnostic from the hard drive manufacturer to be sure.

To start to isolate the driver that's at fault, you can use this reference ( http://www.bleepingcomputer.com/forums/top...tml#entry409491 )to find the dump files on your hard drive and perform an analysis of them. Post the results of the analysis here and we'll see what we can figure out.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 compunerd

compunerd
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:12:22 PM

Posted 22 January 2008 - 11:13 PM

Hi Usasma,
The link, "http://www.microsoft.com/whdc/devtoo...nstallx86.mspx" doesn't work. What I get is," Sorry, unable to fill request". So, I went to Microsoft, but there were several debugger tools available and I didn't know which one to use.

#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,414 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:22 PM

Posted 23 January 2008 - 08:28 AM

I just tried the MS link for debug tool utility...it works.

http://www.microsoft.com/whdc/devtools/deb...installx86.mspx

Louis

#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:22 PM

Posted 23 January 2008 - 07:03 PM

You'll have to either click on the link, or copy the link (NOT just the text) to paste into your browser. Alternatively, search for Microsoft Debugging Tools and download them from there.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#11 compunerd

compunerd
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:12:22 PM

Posted 23 January 2008 - 11:03 PM

Typically this error message is caused by:
1) Device drivers
2) Disk issues
3) RAM (not very common)

I suspect that it's a driver issue (given the history of the repair install), but would check the hard drive with a diagnostic from the hard drive manufacturer to be sure.

To start to isolate the driver that's at fault, you can use this reference ( http://www.bleepingcomputer.com/forums/top...tml#entry409491 )to find the dump files on your hard drive and perform an analysis of them. Post the results of the analysis here and we'll see what we can figure out.

Microsoft Windows Debugger Version 6.8.0004.0 X86
Copyright Microsoft Corporation. All rights reserved.

Hey Usasma,

Here's the results of the first dump, 1 more to follow.
Loading Dump File [C:\WINDOWS\Minidump\Mini011408-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Mon Jan 14 19:17:13.281 2008 (GMT-8)
System Uptime: 0 days 0:14:21.986
Loading Kernel Symbols
..........................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, e1a94a88, e1a94aa8, c040401}

GetUlongFromAddress: unable to read from 8056a9f0


Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e1a94a88, The pool entry we were looking for within the page.
Arg3: e1a94aa8, The next pool entry.
Arg4: 0c040401, (reserved)

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 8056a9f0



BUGCHECK_STR: 0x19_20

POOL_ADDRESS: e1a94a88

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

LOCK_ADDRESS: 805604e0 -- (!locks 805604e0)

Resource @ nt!PiEngineLock (0x805604e0) Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE:
Lock address : 0x805604e0
Thread Count : 0
Thread address: 0x00000000
Thread wait : 0x0

LAST_CONTROL_TRANSFER: from 80550fc5 to 8053738a

STACK_TEXT:
f7a8e928 80550fc5 00000019 00000020 e1a94a88 nt!KeBugCheckEx+0x1b
f7a8e978 805c0799 e1a94a90 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
f7a8e9d8 805a3e60 85c68b98 e658db08 f7a8ea44 nt!PipMakeGloballyUniqueId+0x3a9
f7a8eacc 805a4b58 85bffa98 86dbc228 86f64420 nt!PipProcessNewDeviceNode+0x185
f7a8ed20 8059f5e7 86f64420 00000001 00000000 nt!PipProcessDevNodeTree+0x16b
f7a8ed54 8050ceae 00000003 805605c0 805694fc nt!PiProcessReenumeration+0x60
f7a8ed7c 804e23b5 00000000 00000000 86fc1da8 nt!PipDeviceActionWorker+0x170
f7a8edac 80574128 00000000 00000000 00000000 nt!ExpWorkerThread+0xef
f7a8eddc 804ec781 804e22f1 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePoolWithTag+2c1
80550fc5 83f801 cmp eax,1

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!ExFreePoolWithTag+2c1

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e54690

FAILURE_BUCKET_ID: 0x19_20_nt!ExFreePoolWithTag+2c1

BUCKET_ID: 0x19_20_nt!ExFreePoolWithTag+2c1

Followup: MachineOwner
---------

#12 compunerd

compunerd
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Local time:12:22 PM

Posted 23 January 2008 - 11:20 PM

Typically this error message is caused by:
1) Device drivers
2) Disk issues
3) RAM (not very common)

I suspect that it's a driver issue (given the history of the repair install), but would check the hard drive with a diagnostic from the hard drive manufacturer to be sure.

To start to isolate the driver that's at fault, you can use this reference ( http://www.bleepingcomputer.com/forums/top...tml#entry409491 )to find the dump files on your hard drive and perform an analysis of them. Post the results of the analysis here and we'll see what we can figure out.


Here's my 2nd dump;Microsoft Windows Debugger Version 6.8.0004.0 X86
Copyright Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini011408-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Mon Jan 14 19:31:25.343 2008 (GMT-8)
System Uptime: 0 days 0:08:14.045
Loading Kernel Symbols
.........................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, e29a1358, e29a1378, c040401}

GetUlongFromAddress: unable to read from 8056a9f0


Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: e29a1358, The pool entry we were looking for within the page.
Arg3: e29a1378, The next pool entry.
Arg4: 0c040401, (reserved)

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 8056a9f0



BUGCHECK_STR: 0x19_20

POOL_ADDRESS: e29a1358

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

LOCK_ADDRESS: 805604e0 -- (!locks 805604e0)

Resource @ nt!PiEngineLock (0x805604e0) Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE:
Lock address : 0x805604e0
Thread Count : 0
Thread address: 0x00000000
Thread wait : 0x0

LAST_CONTROL_TRANSFER: from 80550fc5 to 8053738a

STACK_TEXT:
f7a7e928 80550fc5 00000019 00000020 e29a1358 nt!KeBugCheckEx+0x1b
f7a7e978 805c0799 e29a1360 00000000 00000000 nt!ExFreePoolWithTag+0x2c1
f7a7e9d8 805a3e60 85c14908 e5621a00 f7a7ea44 nt!PipMakeGloballyUniqueId+0x3a9
f7a7eacc 805a4b58 85c252c0 86ed0df8 86f94790 nt!PipProcessNewDeviceNode+0x185
f7a7ed20 8059f5e7 86f94790 00000001 00000000 nt!PipProcessDevNodeTree+0x16b
f7a7ed54 8050ceae 00000003 805605c0 805694fc nt!PiProcessReenumeration+0x60
f7a7ed7c 804e23b5 00000000 00000000 86fc28b8 nt!PipDeviceActionWorker+0x170
f7a7edac 80574128 00000000 00000000 00000000 nt!ExpWorkerThread+0xef
f7a7eddc 804ec781 804e22f1 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePoolWithTag+2c1
80550fc5 83f801 cmp eax,1

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!ExFreePoolWithTag+2c1

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e54690

FAILURE_BUCKET_ID: 0x19_20_nt!ExFreePoolWithTag+2c1

BUCKET_ID: 0x19_20_nt!ExFreePoolWithTag+2c1

Followup: MachineOwner
---------

#13 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:22 PM

Posted 24 January 2008 - 07:36 AM

I presume that the hard drive passed the manufacturer's diagnostic? Did you test both your internal hard drive and the external one?

Once the hard drives have passed the diagnostics, then I'd running the RAM test (free from here: http://www.memtest86.com/ ) because of some odd entries in the dump files that you supplied.

After that, the logs don't show anything really specific for the errors - but since it involves your USB ports I'd suggest updating your motherboard/chipset drivers (which includes the USB drivers). Does the BSOD occur with any other USB devices? Are you fully updated with Windows Update?
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users