Debugging Stop 0x109 - Kernel Patch Protection
Stop 0x109's are not that frequent, but they do not provide much information to work with. Stop 0x109's are generally caused by driver modifying kernel code (Kernel Patch Protection detects this) and kernel code held within RAM has become corrupt (failing RAM modules). The purpose of this blog post, is mostly going to be explaining a little of Kernel Patch Protection and regions of the kernel which have been modified and are displayed within the bugcheck parameters. With a Stop 0x109 bugcheck, there is four different parameters, the only parameter in which you'll want to view is the fourth parameter which shows the corrupted region. The other parameters are undocumented and reserved for Microsoft use. The three parameters which I'll attempt to explain are: MSR, GDT and IDT. MSRs (Machine State Registers): Handlers for special instructions used for system calls. More Information - MSRs IDT (Interrupt Descriptor Table): A table which contains a list of ISRs and which in...