Analizom zadnjeg crashdumpa se dođe do ovih informacija:
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 857804a0, Memory contents of the pool block
Arg4: 856b9168, Address of the block of pool being deallocated
Debugging Details:
------------------
POOL_ADDRESS: 856b9168
FREED_POOL_TAG: CcBc
BUGCHECK_STR: 0xc2_7_CcBc
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: firefox.exe
LAST_CONTROL_TRANSFER: from 8054b583 to 804f9f33
STACK_TEXT:
ba4d3e88 8054b583 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
ba4d3ed8 8054b95f 856b9168 00000000 ba4d3ef8 nt!ExFreePoolWithTag+0x2a3
ba4d3ee8 804ef5f7 856b9168 856ca058 ba4d3f10 nt!ExFreePool+0xf
ba4d3ef8 ba31aceb 856b9168 896ccc68 856ca058 nt!IoFreeMdl+0x5b
WARNING: Stack unwind information not available. Following frames may be wrong.
ba4d3f10 ba319fd9 856ca058 ba4d3f40 b9e1dc2c Epfwndis+0x2ceb
ba4d3f1c b9e1dc2c 89b39968 856ca058 00000000 Epfwndis+0x1fd9
ba4d3f40 b93fda00 89b8b130 856ca058 00000000 NDIS!ndisMSendCompleteX+0x8d
ba4d3f68 b93f95d9 00000001 861a8004 00000000 yk51x86+0xda00
ba4d3fa4 b93f9ecb 681a8004 861a8114 ba4d3fcc yk51x86+0x95d9
ba4d3fb4 b9e20e99 861a8004 861b9680 ffdff9c0 yk51x86+0x9ecb
ba4d3fcc 80545e6f 861a8128 861a8114 00000000 NDIS!ndisMDpcX+0x21
ba4d3ff4 805459db a941dd44 00000000 00000000 nt!KiRetireDpcList+0x61
ba4d3ff8 a941dd44 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2b
805459db 00000000 00000009 0081850f bb830000 0xa941dd44
STACK_COMMAND: kb
FOLLOWUP_IP:
Epfwndis+2ceb
ba31aceb ?? ???
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: Epfwndis+2ceb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Epfwndis
IMAGE_NAME: Epfwndis.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 48a956b3
FAILURE_BUCKET_ID: 0xc2_7_CcBc_Epfwndis+2ceb
BUCKET_ID: 0xc2_7_CcBc_Epfwndis+2ceb
Followup: MachineOwner
---------
Iz toga se vidi da je epfwndis.sys odgovoran za konkretan BSOD. Uz malo guglanja se otkrije da je to file dio Eset Personal firewalla.
Analizirao sam još dva minidumpa i u jednom od njih se ne može baš lako viditi krivac ali u drugom je također Eset kriv odnosno NOD32 antivirus (eamon.sys).
Probaj maknuti NOD32 i sve vezano za njega sa stroja pa vidi dali će ti to pomoći. Ovo naravno ne mora biti točno jer ako je hardwerska greška onda antivirusi i firewalli znaju potencirati problem jer su u principu to najaktivniji procesi na stroju.