Answered by:
BSOD Cache_Dump

Question
-
I keep getting this bluescreen now after I fixed the BAD_POOL_HEADER error, this is what the dmp file says:
CACHE_MANAGER (34) See the comment for FAT_FILE_SYSTEM (0x23) Arguments: Arg1: 0000000000050853 Arg2: fffff8800553d6a8 Arg3: fffff8800553cf00 Arg4: fffff80002e8bac5 Debugging Details: ------------------ TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2 EXCEPTION_RECORD: fffff8800553d6a8 -- (.exr 0xfffff8800553d6a8) ExceptionAddress: fffff80002e8bac5 (nt!ExpInterlockedPopEntrySListFault16) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff CONTEXT: fffff8800553cf00 -- (.cxr 0xfffff8800553cf00) rax=0000000042ad0010 rbx=0000000000000000 rcx=fffff88002f65ac0 rdx=fff6fa7610eb4248 rsi=0000000000000003 rdi=0000000000000000 rip=fffff80002e8bac5 rsp=fffff8800553d8e0 rbp=fffff88002f65ac0 r8=fff6fa7610eb4247 r9=fffff80002e1e000 r10=fffff88002f65ac0 r11=fffff8800553d890 r12=fffff80003023580 r13=0000000000000000 r14=0000000000000002 r15=000000006b576343 iopl=0 nv up ei ng nz na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286 nt!ExpInterlockedPopEntrySListFault16: fffff800`02e8bac5 498b08 mov rcx,qword ptr [r8] ds:002b:fff6fa76`10eb4247=???????????????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT PROCESS_NAME: System CURRENT_IRQL: 0 ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: ffffffffffffffff READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030cb100 GetUlongFromAddress: unable to read from fffff800030cb1c0 ffffffffffffffff FOLLOWUP_IP: nt!ExpInterlockedPopEntrySListFault16+0 fffff800`02e8bac5 498b08 mov rcx,qword ptr [r8] FAULTING_IP: nt!ExpInterlockedPopEntrySListFault16+0 fffff800`02e8bac5 498b08 mov rcx,qword ptr [r8] BUGCHECK_STR: 0x34 LAST_CONTROL_TRANSFER: from fffff80002fc7d0e to fffff80002e8bac5 STACK_TEXT: fffff880`0553d8e0 fffff800`02fc7d0e : 00000000`00000000 fffff800`030cea40 00000000`00000002 00000000`00000002 : nt!ExpInterlockedPopEntrySListFault16 fffff880`0553d8f0 fffff800`02ed917f : 00000000`00000002 00000000`00000000 fffff800`03039280 fffffa80`0dc96a00 : nt!ExAllocatePoolWithTag+0xfe fffff880`0553d9e0 fffff800`02ed8b29 : fffff880`00000006 fffffa80`00000000 00000000`0000006d fffffa80`0dc80e00 : nt!CcLazyWriteScan+0x2eb fffff880`0553dac0 fffff800`02e9d261 : fffffa80`0ce29190 fffff800`0318a101 fffff800`0309a920 fffffa80`0dc9ec00 : nt!CcWorkerThread+0x1f9 fffff880`0553db70 fffff800`031302ea : fffffa80`11073000 fffffa80`110a8600 00000000`00000080 fffffa80`0cced9e0 : nt!ExpWorkerThread+0x111 fffff880`0553dc00 fffff800`02e848e6 : fffff880`009b3180 fffffa80`110a8600 fffffa80`0ce14040 fffff800`03023580 : nt!PspSystemThreadStartup+0x5a fffff880`0553dc40 00000000`00000000 : fffff880`0553e000 fffff880`05538000 fffff880`0553d8a0 00000000`00000000 : nt!KxStartSystemThread+0x16 SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: nt!ExpInterlockedPopEntrySListFault16+0 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 521ea035 STACK_COMMAND: .cxr 0xfffff8800553cf00 ; kb FAILURE_BUCKET_ID: X64_0x34_nt!ExpInterlockedPopEntrySListFault16+0 BUCKET_ID: X64_0x34_nt!ExpInterlockedPopEntrySListFault16+0 Followup: MachineOwner
Friday, February 7, 2014 11:10 AM
Answers
-
I have found these steps from article to fix blue screen error, i hope it will works for u.
- Disconnect incompatible hardware
- Check and repair disk errors
- Perform System Clean-Up
- Fix Windows hidden errors with Reginout.
- Scan for Malicious Content
- Run System File Check UpThanks
- Marked as answer by Cloud_TS Monday, February 24, 2014 3:14 PM
Friday, February 7, 2014 3:04 PM
All replies
-
We do need the actual DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.We prefer at least 2 DMP files to spot trends and confirm the cause.
Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found hereIf you have any questions about the procedure please askWanikiya and Dyami--Team Zigzag
Friday, February 7, 2014 12:50 PM -
I have found these steps from article to fix blue screen error, i hope it will works for u.
- Disconnect incompatible hardware
- Check and repair disk errors
- Perform System Clean-Up
- Fix Windows hidden errors with Reginout.
- Scan for Malicious Content
- Run System File Check UpThanks
- Marked as answer by Cloud_TS Monday, February 24, 2014 3:14 PM
Friday, February 7, 2014 3:04 PM