BSOD after opening Process Monitor

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   I recently started getting the BSOD after starting Process Monitor on my main workstation. I opened the minidump and here is what I saw in the call stack:

I opened Change Analysis Diagnostic for Windows XP and ran a report going back a few days to when I first noticed the problem. Very little had changed since then but the offender stood out immediately:

Systrace.sys was installed as part of the Windows System State Analyzer (under the guise of Software Certification Toolkit). It looks like this driver is conflicting with Process Monitor's fltmgr.sys.

After uninstalling Software Certification Toolkit the system continued to BSOD. Systrace remained behind and I had to manually delete the file. Afterwards, process monitor no longer crashed the system.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
William_D Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 August 2010 Location: USA Status: Offline Points: 3	Post Options Post Reply Quote William_D Report Post Thanks(0) Quote Reply Topic: BSOD after opening Process Monitor Posted: 26 August 2010 at 3:51pm
	I recently started getting the BSOD after starting Process Monitor on my main workstation. I opened the minidump and here is what I saw in the call stack: I opened Change Analysis Diagnostic for Windows XP and ran a report going back a few days to when I first noticed the problem. Very little had changed since then but the offender stood out immediately: Systrace.sys was installed as part of the Windows System State Analyzer (under the guise of Software Certification Toolkit). It looks like this driver is conflicting with Process Monitor's fltmgr.sys. After uninstalling Software Certification Toolkit the system continued to BSOD. Systrace remained behind and I had to manually delete the file. Afterwards, process monitor no longer crashed the system.