HELP !! BAD_POOL_HEADER whith defrag, or installing Windows Defend

G

Guest

I need help ! When I try defragmenting my disk (C:), or when I try to install
Windows Defender I receive the blue screen with the message BAD_POOL_HEADER
0X00000019 (0X00000020, 0X827D4000, 0X827D4218, 0X0A430000).
I have already tried the following, without success:
- Using defrag in the Security Mode;
- using defrag in the command mode (defrag c: -v) in the security mode as
well.

I also tryed Starting up the system in the "Diagnostic Startup" mode
(loading just basic devices and services only) and then defrag....Same error !

Does anybodey have any suggestion ? My HD has two partitions C:(25Gb) and
D:(75Gb). When I try to defrag disc D: is Ok. The problem is just in disk C:
..

When I try to install Windows Defender I have the same problem. Any other
software have no problem to be installed.

And I also had this problems deleting users. I just could do it by renaming
the user's folders before deleting. Otherwise the bluescreen was showed up.

Thank you very much for your help!!
 
G

Guest

A BAD_POOL_HEADER message deals with memory,or lack of it.Youre
message might be in the page file or ram memory,for page-file,open
system properties & set it to "let system manage" click set 2X restart pc.
For ram,download microsofts memory tester.Also,in cmd for defrag,simply
type:Defrag C: Or D:
 
G

Gerry

http://msdn2.microsoft.com/en-us/library/ms793223.aspx

Are there any yellow question marks in Device Manager? Right click
on the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not
checked. Post a list of what you find.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
R

Ron Martell

Andrew E. said:
A BAD_POOL_HEADER message deals with memory,or lack of it.Youre
message might be in the page file or ram memory,for page-file,open
system properties & set it to "let system manage" click set 2X restart pc.
For ram,download microsofts memory tester.Also,in cmd for defrag,simply
type:Defrag C: Or D:

Andrew you are totally incorrect, as usual.

Please go away, or at least stop posting your misinformation and
blather to these newsgroups.

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
R

Ron Martell

Zero said:
I need help ! When I try defragmenting my disk (C:), or when I try to install
Windows Defender I receive the blue screen with the message BAD_POOL_HEADER
0X00000019 (0X00000020, 0X827D4000, 0X827D4218, 0X0A430000).
I have already tried the following, without success:
- Using defrag in the Security Mode;
- using defrag in the command mode (defrag c: -v) in the security mode as
well.

I also tryed Starting up the system in the "Diagnostic Startup" mode
(loading just basic devices and services only) and then defrag....Same error !

Does anybodey have any suggestion ? My HD has two partitions C:(25Gb) and
D:(75Gb). When I try to defrag disc D: is Ok. The problem is just in disk C:
.

When I try to install Windows Defender I have the same problem. Any other
software have no problem to be installed.

And I also had this problems deleting users. I just could do it by renaming
the user's folders before deleting. Otherwise the bluescreen was showed up.

Thank you very much for your help!!

Bad_Pool_Header errors are most commonly caused by defective device
drivers.

It might be worthwhile to try the following procedure which may
identify the device driver involved. What you would be looking for
is the item that is using memory address 0x827D4000 and also
0x827D4218

Identifying the cause of STOP errors using PSTAT & Excel

Many times when a STOP error occurs the information provided does not
specifically identify the application, device driver, or other
component file where the error occurred. However the 4 parameters
associated with the STOP (bugcheck) code will very often include one
that is the address where the error occurred. You first need to look
up the detailed information about the specific STOP code in order to
determine if the address is included and if so which of the 4
parameters has the address.

You can identify the meaning of each of the parameters for your
specific STOP code at:
http://msdn2.microsoft.com/en-us/library/ms789516.aspx

The second step in the procedure is to identify the addresses that
each active process is being loaded at. The PSTAT utility will
provide this information. On some systems the PSTAT utility may
already be present. Check this by opening a Command Prompt window
(Start - Run - CMD) and entering the following command:

PSTAT /?

If PSTAT is not on your computer you can download it free from
Microsoft. The download is called "Windows XP Service Pack 2 Support
Tools" and it is available from
http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en
With PSTAT installed on your computer the next step is to open a
Command Prompt window again (Start - Run - CMD) and generate a report
with PSTAT. Because you need to copy part of the information from
this report (and only part) it is best to create the report as a text
file. In the Command Prompt window enter the following command:

PSTAT > C:\JUNK\PSTAT.TXT

You may change C:\JUNK\ to whatever drive and folder that you want to
save the report into.

Now open the saved file in Notepad. Start - Run - NOTEPAD
C:\JUNK\PSTAT.TXT

Scroll down the file, about 80% of the way to the end of the file and
you will find a head line:

ModuleName Load Addr Code Data Paged LinkDate

It is the information from this line to the end of the file that we
want to copy from this file and save as a separate file. Select the
block of text and copy it to the clipboard. Open a new notepad window
and paste the clipboard contents into it. Save this file under a
different name. I use PSTAT2.TXT and put it into the same C:\JUNK
folder.

Now launch Microsoft Excel and use File - Open to bring the PSTAT2.TXT
file into Excel. Excel will automatically parse the file into
columns. Once this is done use DATA - SORT to sort the entire
spreadsheet based on the value in Column B (Load Addr).

It is now a simple task to read down the addresses until you find the
highest value that is less than the address where the error occurred.
That module (name in column A) is the prime suspect for the cause of
your error.


Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2008)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
G

Guest

Ron and Gerry,

Thank you very much for your help. I'm working now and I'll be home just in
the evening to try. So tomorrow morning I let you guys know whether the
problem has been solved or not.

Thank you again for your attention.

Cheers.
 
G

Guest

Dear Ron,

After using the pstat I've found the following suspected files:

ntoskrnl.exe 804D7000 477696 93440 1243648 Wed Feb 28 19:10:41 2007
hal.dll 806EC000 35456 42624 29824 Tue Nov 16 11:37:02 2004

As the second one is quite old I believe the problem is in the ntoskrnl.exe,
because it was modified last February.

I looked for information about it and I read I can't deleted it because is
used by the Windows. So I tried changed it by the one in the folder
Windows\driver cache\i386, but they are identical.

I believe the file is corrupted but I don't know how to replace it. I got a
Recovery DVD-ROM that came with my laptop (Toshiba Qosmio), but I couldn't
find the file in it and I don't want to use the recovery software, because it
erases all the content (including the partitions) to reinstall the Windows.

Can you help me ?

Thank you !
 
G

Guest

I did it. I replaced the file using the command "expand sp2.cab
-F:ntoskrnl.exe c:\windows\system32"

Then I restart the computer and the new result for the pstat is:
ntoskrnl.exe 804D7000 478976 93440 1243264 Wed Aug 04 16:19:48 2004
hal.dll 806EC000 35456 42624 29824 Tue Nov 16 11:37:02 2004

But I tried defragmenting again and the problem unfortunately is the same.

What do you think ? The problem is in the hal.dll file ?
 
G

Guest

Hi Gerry,

There are no errors in the Device Manager.
Running the sigverif I've found just one file : tvalzsys . This is a Toshiba
driver, which came installed in my LapTop. I believe it ain't the problem.

Any other ideas ? Thank you.
 
G

Gerry

Zero

Have you run Disk CleanUp in all user profiles before running Disk
Defragmenter?

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
G

Guest

Hi Gery,

I did it this morning after reading your post. But without results. The
problem persists and I really don't know what to do !

Thank you.
 
G

Guest

This morning the file was updated automatically by windows update and
returned to the previous version, dated 28/02/07.
 
G

Guest

PROBLEM SOLVED !!!!

The problem was some files without ownership and permissions within the
administrator profile.

Defrag working perfectly now !!

Thank you everybody how tryed to help me.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top