Re: ZenMap 6.25 causes Blue screens on Windows 7

[David Fifield <david () bamsoftware com>]

On Thu, May 30, 2013 at 11:43:19AM -0500, Dennis OBrien wrote:
> I upgraded today from nmap-5.52 with Zenmap to 6.25, using the
> nmap-6.25-setup.exe package, including the current pcap bundled with
> it.  Both scan attempts blue screens, after starting the slow full
> scan.  I have attached the event log provided, as well as details on
> my PC from our inventory system (attached).
>
> Log Name:      System
> Source:        Microsoft-Windows-Kernel-Power
> Date:          5/30/2013 10:41:46 AM
> Event ID:      41
> Task Category: (63)
> Level:         Critical
> Keywords:      (2)
> User:          SYSTEM
> Computer:      xxxxxx
> Description:
> The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped 
> responding, crashed, or lost power unexpectedly.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
>   <System>
>     <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
>     <EventID>41</EventID>
>     <Version>2</Version>
>     <Level>1</Level>
>     <Task>63</Task>
>     <Opcode>0</Opcode>
>     <Keywords>0x8000000000000002</Keywords>
>    <TimeCreated SystemTime="2013-05-30T15:41:46.056806300Z" />
>     <EventRecordID>191639</EventRecordID>
>     <Correlation />
>     <Execution ProcessID="4" ThreadID="8" />
>     <Channel>System</Channel>
>     <Computer>xxxxxx</Computer>
>     <Security UserID="S-1-5-18" />
>   </System>
>   <EventData>
>     <Data Name="BugcheckCode">209</Data>
>     <Data Name="BugcheckParameter1">0x28</Data>
>     <Data Name="BugcheckParameter2">0x2</Data>
>     <Data Name="BugcheckParameter3">0x0</Data>
>     <Data Name="BugcheckParameter4">0xfffff88001a08cd6</Data>
>     <Data Name="SleepInProgress">false</Data>
>     <Data Name="PowerButtonTimestamp">0</Data>
>   </EventData>
> </Event>

Thanks for this report. The best I can tell is that this is some problem
unrelated to Nmap. Microsoft Support published an article on this "Event
ID 41" error:
        http://support.microsoft.com/kb/2028504
And there are some TechNet threads about it:
        
https://social.technet.microsoft.com/Forums/windows/en-US/9e71f600-7c62-4869-8236-964e93d17936/iam-having-microsoftwindowskernelpower-crashes
        
https://social.technet.microsoft.com/Forums/windows/en-US/a611d79d-9865-4a8e-917b-74b0a891912f/windows-7-crash-and-reboot-automatically-kernelpower-error-part-1

You might try uninstalling the nmap-winpcap driver and reinstalling.

David Fifield
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/