Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Aspire One Netbook and many ?random BSODs


  • Please log in to reply
3 replies to this topic

#1 Niagol

Niagol

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:23 AM

Posted 01 December 2009 - 01:57 AM

Ok.. so I have an 8.9" Aspire One Netbook (AOA150-1777), was running dual boot XP and W7RC. Windows 7 RC was a bit wonky at times so I didn't switch everything over to it till the RTM came out, figured I'd bite the bullet once with that. Used a legal copy of 32bit Home Premium that I got from Acer to do a custom install to remove both XP and the W7RC. Only left the recovery partition. Got everything setup once but had many BSODs and eventually got to a point where it would load to desktop after login and then explorer would crash and crash and crash. So reinstall!

Now we are here. I still have some BSODs and I'm trying to track down what driver is causing it. I do have 1GIG of memory and I noticed that upon installing MS Security Essentials that it was causing a lot of system drag, so I removed it. I then used a 2Gig usb drive to devote to Ready Boost. Now I only get about 1 BSOD a day, maybe two. So I think its still a driver issue.

The problem, I don't know exactly how to track down the driver. I've read elsewhere on here how to debug the dump but don't know what to do after that. So I'm attaching the debug info here, with the hopes that someone will be kind enough to either tell me what to do (or where to find the information on how to track down the driver) or tell me what driver did it. Thanks for all your knowledge and help to whoever can help.

Anthony

Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Niagol\Desktop\113009-45021-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x8184b000 PsLoadedModuleList = 0x8198a570
Debug session time: Mon Nov 30 23:00:51.572 2009 (GMT-5)
System Uptime: 1 days 22:35:28.291
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
Loading unloaded module list
.................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 81aaa39c, a664a8c0, 0}

Probably caused by : ntkrnlmp.exe ( nt!CmpDoCompareKeyName+17 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 81aaa39c, The address that the exception occurred at
Arg3: a664a8c0, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!CmpDoCompareKeyName+17
81aaa39c f6400220 test byte ptr [eax+2],20h

TRAP_FRAME: a664a8c0 -- (.trap 0xffffffffa664a8c0)
ErrCode = 00000000
eax=00000fcc ebx=917a7b44 ecx=81a5e0c2 edx=8ccaa9d0 esi=8ccaa9d0 edi=917ae148
eip=81aaa39c esp=a664a934 ebp=a664a93c iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!CmpDoCompareKeyName+0x17:
81aaa39c f6400220 test byte ptr [eax+2],20h ds:0023:00000fce=??
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: firefox.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 81aac1e0 to 81aaa39c

STACK_TEXT:
a664a93c 81aac1e0 a664a9f0 ffffffc8 00002201 nt!CmpDoCompareKeyName+0x17
a664a964 81aac340 8ccaa9d0 a664a9f0 a664a9b8 nt!CmpCompareInIndex+0x3b
a664a984 81aaa4b2 8ccaa9d0 00001100 a664a9f0 nt!CmpFindSubKeyInLeafWithStatus+0x65
a664a9c0 81a4bc64 a664a9f0 a664aa64 a664ac18 nt!CmpFindSubKeyByNameWithStatus+0xb5
a664ab48 81a50908 96346030 8326f4f8 838d1958 nt!CmpParseKey+0x938
a664abc4 81a8f2d2 0000064c a664ac18 00000040 nt!ObpLookupObjectName+0x4fa
a664ac20 81a9591b 0a1df04c 8326f4f8 00000001 nt!ObOpenObjectByName+0x159
a664ad00 81a97435 0a1df13c 00020019 0a1df04c nt!CmOpenKey+0x1f4
a664ad1c 8188079a 0a1df13c 00020019 0a1df04c nt!NtOpenKeyEx+0x18
a664ad1c 77c964f4 0a1df13c 00020019 0a1df04c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0a1df08c 00000000 00000000 00000000 00000000 0x77c964f4


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!CmpDoCompareKeyName+17
81aaa39c f6400220 test byte ptr [eax+2],20h

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!CmpDoCompareKeyName+17

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bbffc

FAILURE_BUCKET_ID: 0x8E_nt!CmpDoCompareKeyName+17

BUCKET_ID: 0x8E_nt!CmpDoCompareKeyName+17

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:01:23 AM

Posted 01 December 2009 - 02:00 AM

This is just a guess as to the relevancy to your issue, but in general, laptops have very specific drivers for specific systems. Installing the OS only does part of the job; you generally need to head to the manufacturer's website to get the necessary hardware drivers to make everything work properly. They often have them bundled for you.

#3 Niagol

Niagol
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:23 AM

Posted 01 December 2009 - 02:02 AM

Here is another if it helps to have more than one


1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000003, the pool freelist is corrupt.
Arg2: b0435930, the pool entry being checked.
Arg3: b0435930, the read back flink freelist value (should be the same as 2).
Arg4: 14ff111a, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------


BUGCHECK_STR: 0x19_3

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: svchost.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8196b902 to 81924574

STACK_TEXT:
c5e51044 8196b902 00000019 00000003 b0435930 nt!KeBugCheckEx+0x1e
c5e51098 8196b2e5 8321d280 00000002 00000000 nt!ExDeferredFreePool+0x312
c5e51100 81a754d6 b056da28 00000000 832448e8 nt!ExFreePoolWithTag+0x848
c5e5127c 81aa957b 00000000 00000000 c5e512b8 nt!RtlpNewSecurityObject+0xe99
c5e512bc 81a5c30a 00000000 83600448 00000000 nt!ObpAssignSecurity+0x4d
c5e5144c 81a60b1d c5e51588 001fffff 00000000 nt!ObInsertObjectEx+0x1c0
c5e5150c 81a66ca3 83600448 83303d40 c5e5171c nt!PspInsertThread+0x317
c5e516d4 81aadf48 c5e51c14 001fffff c5e51bec nt!PspCreateThread+0x244
c5e51b08 8188879a c5e51c14 001fffff c5e51bec nt!NtCreateThreadEx+0x20b
c5e51b08 818863f1 c5e51c14 001fffff c5e51bec nt!KiFastCallEntry+0x12a
c5e51bac 81aa87b7 c5e51c14 001fffff c5e51bec nt!ZwCreateThreadEx+0x11
c5e51c44 818f5332 00000001 00040000 00004000 nt!RtlpCreateUserThreadEx+0xa4
c5e51c88 818bb175 00000001 00000000 00000001 nt!ExpWorkerFactoryCreateThread+0x37
c5e51cac 818baf50 c5e51cd8 d3a0d023 00000088 nt!ExpWorkerFactoryCheckCreate+0x6a
c5e51d24 8188879a 00000000 0121fd7c 0121fe28 nt!NtWaitForWorkViaWorkerFactory+0x27a
c5e51d24 770564f4 00000000 0121fd7c 0121fe28 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0121fe28 00000000 00000000 00000000 00000000 0x770564f4


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExDeferredFreePool+312
8196b902 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!ExDeferredFreePool+312

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: 0x19_3_nt!ExDeferredFreePool+312

BUCKET_ID: 0x19_3_nt!ExDeferredFreePool+312

Followup: Pool_corruption
---------

#4 Niagol

Niagol
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:23 AM

Posted 01 December 2009 - 02:05 AM

This is just a guess as to the relevancy to your issue, but in general, laptops have very specific drivers for specific systems. Installing the OS only does part of the job; you generally need to head to the manufacturer's website to get the necessary hardware drivers to make everything work properly. They often have them bundled for you.

Wow you are fast! Thank you very much. I've checked over Acers site and Ive yet to come across Windows 7 drivers since it was only a Windows XP model. I've pretty much used drivers from the manufactuer or also through aspireoneuser.com which has a large following but can't seem to figure out what I'm missing.

Is there a way I can determine what is causing it? I'm willing to learn how to do it myself, just need some prodding in the correct direction.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users