Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
1: kd> K
ChildEBP RetAddr
80699908 83f1a565 nt!KeBugCheckEx+0x1e
80699928 83f14773 nt!VerifierBugCheckIfAppropriate+0x32
80699944 83db848e nt!ViCheckDriverUnloading+0x82
8069995c 83db8898 nt!VerifierDriverUnloading+0x61
8069999c 83d7e1d1 nt!MmUnloadSystemImage+0x26a
806999b4 83e2ccb8 nt!IopDeleteDriver+0x38
806999d0 83ca8cf2 nt!ObpRemoveObjectRoutine+0x13d
806999f8 83d9fcd8 nt!ObfDereferenceObject+0xa1
80699bd4 83f8a24c nt!IopLoadDriver+0x942
80699c38 83f8a943 nt!IopInitializeSystemDrivers+0x1af
80699c94 83f8e3ea nt!IoInitSystem+0x62c
80699d74 83d8e018 nt!Phase1InitializationDiscard+0xb15
80699d7c 83de4609 nt!Phase1Initialization+0xd
80699dc0 83ccb56e nt!PspSystemThreadStartup+0x9d
00000000 00000000 nt!KiThreadStartup+0x16
1: kd> lmvm vsprtnt4
start end module name
95a8e000 95a9b8a0 vsprtnt4 T (no symbols)
Loaded symbol image file: [COLOR=#ff0000]vsprtnt4.sys[/COLOR]
Image path: \SystemRoot\System32\DRIVERS\[COLOR=#ff0000]vsprtnt4.sys[/COLOR]
Image name: [COLOR=#ff0000]vsprtnt4.sys[/COLOR]
Timestamp: Wed May 28 10:20:44 2008 (483D6A3C)
0: kd> k
ChildEBP RetAddr
80699524 838c5cb4 nt!KeBugCheckEx+0x1e
80699560 83920bf2 nt!ExpFindAndRemoveTagBigPages+0x1d5
806995d0 92879fa4 nt!ExFreePoolWithTag+0x145
WARNING: Stack unwind information not available. Following frames may be wrong.
80699800 92878eb2 [COLOR=#ff0000]avgldx86+0x5fa4[/COLOR]
8069981c 928a17fb [COLOR=#ff0000]avgldx86+0x4eb2[/COLOR]
806999f0 8399fb9b [COLOR=#ff0000]avgldx86+0x2d7fb[/COLOR]
80699bd4 83b8a24c nt!IopLoadDriver+0x805
80699c38 83b8a943 nt!IopInitializeSystemDrivers+0x1af
80699c94 83b8e3ea nt!IoInitSystem+0x62c
80699d74 8398e018 nt!Phase1InitializationDiscard+0xb15
80699d7c 839e4609 nt!Phase1Initialization+0xd
80699dc0 838cb56e nt!PspSystemThreadStartup+0x9d
00000000 00000000 nt!KiThreadStartup+0x16
Hi,
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
This is the general bug check code for fatal errors found by Driver Verifier.
Code:1: kd> K ChildEBP RetAddr 80699908 83f1a565 nt!KeBugCheckEx+0x1e 80699928 83f14773 nt!VerifierBugCheckIfAppropriate+0x32 80699944 83db848e nt!ViCheckDriverUnloading+0x82 8069995c 83db8898 nt!VerifierDriverUnloading+0x61 8069999c 83d7e1d1 nt!MmUnloadSystemImage+0x26a 806999b4 83e2ccb8 nt!IopDeleteDriver+0x38 806999d0 83ca8cf2 nt!ObpRemoveObjectRoutine+0x13d 806999f8 83d9fcd8 nt!ObfDereferenceObject+0xa1 80699bd4 83f8a24c nt!IopLoadDriver+0x942 80699c38 83f8a943 nt!IopInitializeSystemDrivers+0x1af 80699c94 83f8e3ea nt!IoInitSystem+0x62c 80699d74 83d8e018 nt!Phase1InitializationDiscard+0xb15 80699d7c 83de4609 nt!Phase1Initialization+0xd 80699dc0 83ccb56e nt!PspSystemThreadStartup+0x9d 00000000 00000000 nt!KiThreadStartup+0x16
Code:1: kd> lmvm vsprtnt4 start end module name 95a8e000 95a9b8a0 vsprtnt4 T (no symbols) Loaded symbol image file: [COLOR=#ff0000]vsprtnt4.sys[/COLOR] Image path: \SystemRoot\System32\DRIVERS\[COLOR=#ff0000]vsprtnt4.sys[/COLOR] Image name: [COLOR=#ff0000]vsprtnt4.sys[/COLOR] Timestamp: Wed May 28 10:20:44 2008 (483D6A3C)
vsprtnt4.sys is a Virtual Serial Port driver AFAIK. Please uninstall the software ASAP regarding this driver.
BAD_POOL_HEADER (19)
This indicates that a pool header is corrupt.
Code:0: kd> k ChildEBP RetAddr 80699524 838c5cb4 nt!KeBugCheckEx+0x1e 80699560 83920bf2 nt!ExpFindAndRemoveTagBigPages+0x1d5 806995d0 92879fa4 nt!ExFreePoolWithTag+0x145 WARNING: Stack unwind information not available. Following frames may be wrong. 80699800 92878eb2 [COLOR=#ff0000]avgldx86+0x5fa4[/COLOR] 8069981c 928a17fb [COLOR=#ff0000]avgldx86+0x4eb2[/COLOR] 806999f0 8399fb9b [COLOR=#ff0000]avgldx86+0x2d7fb[/COLOR] 80699bd4 83b8a24c nt!IopLoadDriver+0x805 80699c38 83b8a943 nt!IopInitializeSystemDrivers+0x1af 80699c94 83b8e3ea nt!IoInitSystem+0x62c 80699d74 8398e018 nt!Phase1InitializationDiscard+0xb15 80699d7c 839e4609 nt!Phase1Initialization+0xd 80699dc0 838cb56e nt!PspSystemThreadStartup+0x9d 00000000 00000000 nt!KiThreadStartup+0x16
We can see avgldx86.sys calls into the nt!ExFreePoolWithTag routine which deallocates a block of pool memory allocated with the specified tag. We can see directly afterwards the bug check was called because the pool header of the freed block has been modified after it was freed, thus the reason I believe it was called twice in this instance. avgldx86.sys is the AVG AVI Loader driver.
1. Remove and replace AVG with Microsoft Security Essentials for temporary troubleshooting purposes as it's very likely causing conflicts:
AVG removal - http://www.avg.com/us-en/utilities
MSE - Microsoft Security Essentials - Microsoft Windows
2. Ensure you have the latest video card drivers. If you are already on the latest video card drivers, uninstall and install a version or a few versions behind the latest to ensure it's not a latest driver only issue. If you have already experimented with the latest video card driver and many previous versions, please give the beta driver for your card a try.
3. Uninstall ArcSoft ASAP.
Regards,
Patrick
Has Sysnative Forums helped you? Please consider donating to help us support the site!