XP BSOD

[joe43wv]

I have a Dell Inspiron I'm working on and here's the problem. When it loads it'll load to the desktop fine. When you try to open an application it goes straight to the BSOD. I'm not sure what is causing it. Is there any way I could pull the log file off and have somebody look at it and find out what is causing the BSOD? I also can't remember where to pull the file from so if somebody could show me where as well I'd appreciate it. THANKS!

[cluberti]

%windir%\memory.dmp is where it's located on your system.

[joe43wv]

I checked the hard drive and couldn't find the memory.dmp file. Is the hard drive itself going bad then?

[cluberti]

No, not necessarily. Make sure you've followed these instructions for creating a memory dump first. There are valid reasons why a crash wouldn't produce a dump file (for example, the paging file not being on the same partition/volume as the \Windows directory).

[joe43wv]

File uploaded and here's the link to the file.

http://www.megaupload.com/?d=R02G0TM4

[cluberti]

It's hard to say for certain, because this is kernel nonpaged pool corruption, but it looks like either pool was corrupted BEFORE this .dll loaded, or loading this .dll caused the corruption:

// The crash:
1: kd> kb10
ChildEBP RetAddr  Args to Child			  
eb3283b0 804fe827 0000008e c0000005 eda15b75 nt!KeBugCheckEx+0x1b
eb328778 80542095 eb328794 00000000 eb3287e8 nt!KiDispatchException+0x3b1
eb3287e0 80542046 eb328be0 eda15b75 badb0d00 nt!CommonDispatchException+0x4d
eb328800 8054b95f e342f870 00000000 eb328820 nt!KiExceptionExit+0x18a
eb328be0 805d00bc 84c78058 00000184 eb328c20 nt!ExFreePool+0xf
eb328c00 805b1421 84c78058 00000184 eb328c20 nt!PsCallImageNotifyRoutines+0x36
eb328c48 805b1efe 84c084b8 03780000 eb328d18 nt!MiMapViewOfImageSection+0x4c1
eb328ca4 805b22c3 00000004 84e688d0 eb328d18 nt!MmMapViewOfSection+0x13c
eb328d34 8054162c 000006d0 ffffffff 0012cd34 nt!NtMapViewOfSection+0x2bd
eb328d34 7c90e4f4 000006d0 ffffffff 0012cd34 nt!KiFastCallEntry+0xfc
0012cc58 7c90d50c 7c91bd03 000006d0 ffffffff ntdll!KiFastSystemCallRet
0012cc5c 7c91bd03 000006d0 ffffffff 0012cd34 ntdll!NtMapViewOfSection+0xc
0012cd50 7c91624a 00143808 0012cddc 0012d304 ntdll!LdrpMapDll+0x330
0012d010 7c9164b3 00000000 00143808 0012d304 ntdll!LdrpLoadDll+0x1e9
0012d2b8 7c801bbd 00143808 0012d304 0012d2e4 ntdll!LdrLoadDll+0x230
0012d320 791b5cc3 03b84ad8 00000000 00000009 KERNEL32!LoadLibraryExW+0x18e

// What we loaded right before the crash:
1: kd> .frame 5
05 eb328c00 805b1421 nt!PsCallImageNotifyRoutines+0x36

1: kd> dc 84c78058 
84c78058  00f800ac e267a830 00000000 00000000  ....0.g.........
84c78068  00000000 00000000 00000000 00040001  ................
84c78078  00000000 84c7807c 84c7807c 00040000  ....|...|.......
84c78088  00000000 84c7808c 84c7808c 00000000  ................
84c78098  00010013 00000000 0a040001 53646156  ............VadS
84c780a8  0000ba10 0000bb0f 84cdfa18 84d64910  .............I..
84c780b8  8458a2b8 84000018 0a060004 ee657645  ..X.........Eve.
84c780c8  00000001 00000001 853c2980 00000000  .........)<.....

1: kd> du e267a830
e267a830  "\Program Files\ATI Technologies\"
e267a870  "ATI.ACE\CLI.Aspect.DisplaysColou"
e267a8b0  "r2.Graphics.Shared.dll"

I'd consider a complete *uninstall* of the ATI graphics package, and reinstall from ATI.

[joe43wv]

Tried that and it worked! Thanks cluberti! The hard drive is still infected with virus's and spyware so I gotta work on cleaning that up, but other than that I'm back on track. Thanks again!