Hi,
We have various bug checks from the attached DMP's:
BAD_POOL_CALLER (c2)
This indicates that the current thread is making a bad pool request.
If we take a look at the call stack:
Code:
STACK_TEXT:
fffff880`08953768 fffff800`03401be9 : 00000000`000000c2 00000000`00000007 00000000`0000109b 00000000`042db124 : nt!KeBugCheckEx
fffff880`08953770 fffff880`01b6aebd : 00000000`00000490 fffffa80`07f5e8f0 fffffa80`0518f118 00000000`00000490 : nt!ExDeferredFreePool+0x1201
fffff880`08953820 fffff880`01b6a7df : fffffa80`0518f118 00000000`00000000 fffffa80`051ef76c 00000000`00000000 : [COLOR=#ff0000][I][B]rdyboost[/B][/I][/COLOR]!ST_STORE<SMD_TRAITS>::StReleaseRegion+0x59
fffff880`08953880 fffff880`01b694ce : fffffa80`0518f0b0 00000000`00000001 fffffa80`0518f0b0 00000000`00000001 : [COLOR=#ff0000][I][B]rdyboost[/B][/I][/COLOR]!ST_STORE<SMD_TRAITS>::StDmCleanup+0x183
fffff880`089538c0 fffff880`01b68a27 : fffffa80`0518f0b0 00000000`00000001 fffffa80`0518f0b0 fffff880`08953ca0 : [COLOR=#ff0000][I][B]rdyboost[/B][/I][/COLOR]!SMKM_STORE<SMD_TRAITS>::SmStCleanup+0x7a
fffff880`08953900 fffff880`01b6898a : fffff880`01b8b8f0 00000000`00000008 fffffa80`0518f0b0 fffff880`01b8b870 : [COLOR=#ff0000][I][B]rdyboost[/B][/I][/COLOR]!SMKM_STORE_MGR<SMD_TRAITS>::SmStoreMgrCallback+0x4b
fffff880`08953940 fffff880`01b8f4b8 : fffff880`01b8b870 fffff880`08953ca0 00000000`00000000 fffffa80`050abc58 : [COLOR=#ff0000][I][B]rdyboost[/B][/I][/COLOR]!SMKM_STORE_MGR<SMD_TRAITS>::SmCleanup+0x9a
fffff880`08953970 fffff880`01b70b26 : fffffa80`08fc6210 fffffa80`08fc6210 00000000`00000000 00000000`00000000 : [I][COLOR=#ff0000][B]rdyboost[/B][/COLOR][/I]!SmdRBContextShutdown+0x94
fffff880`089539b0 fffff800`035eb3a7 : 00000000`00000000 fffffa80`097a9e50 fffffa80`097a9f68 fffffa80`08fc6210 : [COLOR=#ff0000][I][B]rdyboost[/B][/I][/COLOR]!SmdDispatchDeviceControl+0x3ce
fffff880`08953a10 fffff800`035ebc06 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
fffff880`08953b40 fffff800`032cde53 : fffffa80`00000000 0000007f`ffffffff 00000000`00000000 00000980`00000000 : nt!NtDeviceIoControlFile+0x56
fffff880`08953bb0 00000000`77ae132a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00e1eca8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77ae132a
FAILURE_BUCKET_ID: X64_0xc2_7_rdyboost!ST_STORE_SMD_TRAITS_::StReleaseRegion+59
^^ It appears rdyboost.sys was the cause of the crash.
Code:
3: kd> !poolval fffffa8007f5e8f0
Pool page fffffa8007f5e8f0 region is Unknown
Validating Pool headers for pool page: fffffa8007f5e8f0
Pool page [ fffffa8007f5e000 ] is __inVALID.
Analyzing linked list...
[ fffffa8007f5e840 --> fffffa8007f5ea20 (size = 0x1e0 bytes)]: Corrupt region
^^ Possible hardware issues causing pool corruption.
DRIVER_CORRUPTED_EXPOOL (c5)
This indicates that the system attempted to access invalid memory at a process IRQL that was too high.
If we take a look at the call stack:
Code:
STACK_TEXT:
fffff880`033cac18 fffff800`032c2169 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`033cac20 fffff800`032c0de0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000011 : nt!KiBugCheckDispatch+0x69
fffff880`033cad60 fffff800`033f7b05 : fffffa80`07affb00 00000000`00000801 00000000`00000000 fffff800`033f6d0e : nt!KiPageFault+0x260
fffff880`033caef0 fffff800`033f64f1 : fffffa80`07a0ba00 fffffa80`07e52300 00000000`00000000 5254535f`000007ff : nt!ExDeferredFreePool+0x249
fffff880`033caf80 fffff880`00e1db6f : fffffa80`07e58ea0 fffffa80`07e5232e 00000000`5254535f 00000000`000000af : nt!ExFreePoolWithTag+0x411
fffff880`033cb030 fffff880`00e22f4f : fffffa80`04abf9c0 00000000`00000000 00000000`00000000 fffff880`00e2c730 : ACPI!GetObjectPath+0x167
fffff880`033cb060 fffff880`00e22e2b : fffffa80`04abf9c0 fffffa80`07e58ea0 00000000`00000000 00000000`00000000 : ACPI!AsyncEvalObject+0x77
fffff880`033cb0c0 fffff880`00e1b795 : 00000000`00000000 fffffa80`04abf9c0 00000000`00000000 00000000`00000000 : ACPI!SyncEvalObject+0x143
fffff880`033cb170 fffff880`00e0de26 : fffffa80`04abf9c0 fffff880`00e0f6e8 fffffa80`07e58e58 00000000`00000000 : ACPI!AMLIEvalNameSpaceObject+0xbd
fffff880`033cb1c0 fffff880`00e3a09d : fffff880`033cb810 00000000`5244415f fffffa80`00000000 fffffa80`04abf940 : ACPI!ACPIGet+0x2be
fffff880`033cb260 fffff880`00e38ca1 : fffffa80`07e525b0 fffff880`033cb400 fffffa80`07e2a930 00000000`000004ef : ACPI!ACPIBusAndFilterIrpQueryCapabilities+0x2d1
fffff880`033cb370 fffff880`00e01ae8 : fffffa80`05102ee3 00000000`00000009 fffffa80`07e2a930 fffffa80`05102c60 : ACPI!ACPIIrpCompletionRoutineWorker+0x69
fffff880`033cb3a0 fffff800`032c65d1 : fffff8a0`00024010 00000000`00000000 00000000`00000000 00000000`00000000 : ACPI!ACPIIrpGenericFilterCompletionHandler+0x44
fffff880`033cb3d0 fffff880`04b46d0b : fffff880`009ea180 00000000`00000000 fffff800`034526f0 00000000`00000000 : nt!IopfCompleteRequest+0x341
fffff880`033cb4c0 fffff880`04b37a1f : fffffa80`05102ee0 fffffa80`04eb6010 fffffa80`07e2b440 fffffa80`05102c60 : [COLOR=#ff0000][I][B]usbhub[/B][/I][/COLOR]!UsbhPdoPnp_QueryCapabilities+0x13f
fffff880`033cb4f0 fffff880`04b13fb7 : fffffa80`05102ee0 fffffa80`07e525b0 00000000`00000001 00000000`000007ff : [COLOR=#ff0000][I][B]usbhub[/B][/I][/COLOR]!UsbhPdoPnp+0x9b
fffff880`033cb520 fffff880`00e38c12 : fffffa80`00000000 fffffa80`07e2a930 fffff8a0`00003a10 00000000`000007ff : [COLOR=#ff0000][I][B]usbhub[/B][/I][/COLOR]!UsbhGenDispatch+0x57
fffff880`033cb550 fffff880`00e3c2c6 : fffff880`00e3c2a0 fffffa80`07e2a930 fffffa80`04eb6010 fffffa80`05102c60 : ACPI!ACPIIrpSetPagableCompletionRoutineAndForward+0xfe
fffff880`033cb580 fffff880`00e0ba8f : fffff880`033cb810 00000000`00000001 fffffa80`05102c60 fffffa80`05102f28 : ACPI!ACPIFilterIrpQueryCapabilities+0x26
fffff880`033cb5d0 fffff880`02caa190 : fffffa80`0416b660 fffff880`033cb6d0 fffffa80`05102f28 fffffa80`05102c60 : ACPI!ACPIDispatchIrp+0x17b
fffff880`033cb650 fffffa80`0416b660 : fffff880`033cb6d0 fffffa80`05102f28 fffffa80`05102c60 00000000`00000000 : [COLOR=#ff0000][I][B]nvstusb[/B][/I][/COLOR]+0x3190
fffff880`033cb658 fffff880`033cb6d0 : fffffa80`05102f28 fffffa80`05102c60 00000000`00000000 fffff880`02cac397 : 0xfffffa80`0416b660
fffff880`033cb660 fffffa80`05102f28 : fffffa80`05102c60 00000000`00000000 fffff880`02cac397 00000000`05060000 : 0xfffff880`033cb6d0
fffff880`033cb668 fffffa80`05102c60 : 00000000`00000000 fffff880`02cac397 00000000`05060000 fffff880`033cb688 : 0xfffffa80`05102f28
fffff880`033cb670 00000000`00000000 : fffff880`02cac397 00000000`05060000 fffff880`033cb688 fffff880`033cb688 : 0xfffffa80`05102c60
We have a nvstusb.sys call (Stereoscopic 3D USB controller driver from nVidia), and then three usbhub.sys calls.
BAD_POOL_HEADER (19)
This indicates that a pool header is corrupt.
If we take a look at the call stack:
Code:
STACK_TEXT:
fffff880`033bd9c8 fffff800`0340dcae : 00000000`00000019 00000000`00000020 fffffa80`08092600 fffffa80`080926a0 : nt!KeBugCheckEx
fffff880`033bd9d0 fffff880`059ae465 : fffff8a0`0cf4d7d0 fffffa80`08092610 fffff880`4d52564e fffff880`033bdc80 : nt!ExDeferredFreePool+0x12da
fffff880`033bda80 fffff8a0`0cf4d7d0 : fffffa80`08092610 fffff880`4d52564e fffff880`033bdc80 00000000`00000000 : [COLOR=#ff0000][I][B]nvlddmkm[/B][/I][/COLOR]+0x198465
fffff880`033bda88 fffffa80`08092610 : fffff880`4d52564e fffff880`033bdc80 00000000`00000000 fffff880`0599d1a6 : 0xfffff8a0`0cf4d7d0
fffff880`033bda90 fffff880`4d52564e : fffff880`033bdc80 00000000`00000000 fffff880`0599d1a6 fffff800`037a8770 : 0xfffffa80`08092610
fffff880`033bda98 fffff880`033bdc80 : 00000000`00000000 fffff880`0599d1a6 fffff800`037a8770 00000000`00000000 : 0xfffff880`4d52564e
fffff880`033bdaa0 00000000`00000000 : fffff880`0599d1a6 fffff800`037a8770 00000000`00000000 fffff880`033bdbd0 : 0xfffff880`033bdc80
Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+198465 )
^^ nVidia video driver.
Code:
2: kd> !poolval fffffa8008092600
Pool page fffffa8008092600 region is Unknown
Validating Pool headers for pool page: fffffa8008092600
Pool page [ fffffa8008092000 ] is __inVALID.
Analyzing linked list...
[ fffffa8008092600 --> fffffa8008092720 (size = 0x120 bytes)]: Corrupt region
^^ Possible hardware issues causing pool corruption.
----------------------------------------------------------
1. Ensure you have the latest video card drivers. If you are already on the latest video card drivers, uninstall and install a version or a few versions behind the latest to ensure it's not a latest driver only issue. If you have already experimented with the latest video card driver and many previous versions, please give the beta driver for your card a try.
2. Remove and replace avast! with Microsoft Security Essentials for temporary troubleshooting purposes:
avast! removal tool - avast! Uninstall Utility | Download aswClear for avast! Removal
MSE - Microsoft Security Essentials - Microsoft Windows
3. What USB related devices do you have connected on a regular basis?
4. Let's disable ReadyBoost via services.msc ~
Warning, if after disabling and restarting you have very long boot times, re-enable it.
Start > Search bar > services.msc > scroll down until you see ReadyBoost > right click > Properties > Startup type drop-down box > Disabled > Apply > OK > Restart computer.
Regards,
Patrick