My girl's BSOD

[ih8bills]

She has had several BSOD's lately-- I figured it could not hurt to try and analyze why before doing any repair/reinstall of Windows 7 Home premium...


Logs attached

 

[Malnutrition]

Hello, seems that these crashes are due to Online Armor. See this link for more information. http://www.carrona.org/drivers/search.php?id=oadriver.sys
Do you also have Panda Free antivirus installed? Another crash is also related to that software. http://www.carrona.org/drivers/search.php?id=NNSHttp.sys

The crashes go back and forth between the two software, I am not sure if they do not like each other or what, there is no evidence to support that. I would say that you should go ahead and remove both with revo free, then reinstall.

Download Revo Uninstaller Freeware - Free and Full ...

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 869b1340, The pool entry we were looking for within the page.
Arg3: 869b13d0, The next pool entry.
Arg4: 08120006, (reserved)

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

BUGCHECK_STR: 0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 831a984c
Unable to read MiSystemVaType memory at 83188f00
869b1340

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: DkService.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 845d73c8 to 83160c6b

STACK_TEXT:
c98e589c 845d73c8 869b1348 544d444f 00001688 nt!ExFreePoolWithTag+0x1b1
WARNING: Stack unwind information not available. Following frames may be wrong.
c98e58e0 845d8603 00000000 00001688 000019ec OADriver+0xa3c8
c98e5924 832ddda5 845fade8 0000001a c98e5a58 OADriver+0xb603
c98e5998 8326e286 0000001a c98e5a58 00000001 nt!CmpCallCallBacks+0x156
c98e5b30 83265d2e bf9f71b0 85fc6980 d9e49910 nt!CmpParseKey+0x2b9
c98e5bac 83276157 00000230 c98e5c00 00000040 nt!ObpLookupObjectName+0x4fa
c98e5c08 83241be5 04aff920 85fc6980 ffffff01 nt!ObOpenObjectByName+0x165
c98e5ce8 8324202c 04affc08 0002001f 04aff920 nt!CmCreateKey+0x2b2
c98e5d10 8307d8c6 04affc08 0002001f 04aff920 nt!NtCreateKey+0x1f
c98e5d10 77b370f4 04affc08 0002001f 04aff920 nt!KiSystemServicePostCall
04affb14 00000000 00000000 00000000 00000000 0x77b370f4


STACK_COMMAND: kb

FOLLOWUP_IP:
OADriver+a3c8
845d73c8 ?? ???

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: OADriver+a3c8

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: OADriver

IMAGE_NAME: OADriver.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 525756f4

FAILURE_BUCKET_ID: 0x19_20_OADriver+a3c8

BUCKET_ID: 0x19_20_OADriver+a3c8

Followup: MachineOwner

 

[ih8bills]

Thanks== done and done. Please mark as solved...

 

[Malnutrition]

Thanks== done and done. Please mark as solved...

I would love to mark solved, but lets see if it crashes again before we get ahead of ourselves. Wait a couple days, then come back and let us know if it has crashed again.

 

[ih8bills]

OK-- agreed.