Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Bad Pool Header BSOD


  • Please log in to reply

#1
chrmdfreak

chrmdfreak

    New Member

  • Member
  • Pip
  • 1 posts

Good day!

 

Lately, I've been experiencing a lot of BSOD. All i can see from that BSOD is BAD_POOL_HEADER because it flashes by so fast. 

I'm not an expert at this so I'm seeking your help. 

 

Attached is a .dmp file from the Minidump folder. 

 

Thank you for your help! 

 

PS: It comes and goes, so this is a lucky time that I can access the internet and ask help from you guys. Thanks! 

Attached Files


  • 0

Advertisements


#2
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,911 posts

:welcome:   chrmdfreak,

 

Sorry that you have waited longer than we would like to receive a reply to your OP  :(

 

MBAM is identified as the cause of the crash and yours is the second such instance I have recently seen highlighting the same culprit, see thread here

 

From your crash dump;

 

BUGCHECK_STR: 0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from 83175718
Unable to read MiSystemVaType memory at 831551a0
878132f0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: mbamservice.ex

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 890d6345 to 8312cc6b

STACK_TEXT:
95d288b8 890d6345 878132f8 00000000 84fbf190 nt!ExFreePoolWithTag+0x1b1
95d28a4c 89161e26 850eb710 00000014 00000000 tcpip!IppInspectBuildHeaders+0x56a
95d28a9c 9ddc7503 850eb710 00000014 00000002 fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x16c
WARNING: Stack unwind information not available. Following frames may be wrong.
95d28af0 9ddc768c 850eb710 9ddcd468 851a1af8 mwac+0x5503
95d28b04 9ddc7fea 00000001 00000002 9ddcd468 mwac+0x568c
95d28b1c 9ddc5c3a 851a1b38 00000002 95d28b8c mwac+0x5fea
95d28b34 9ddc4ef3 00000000 95d28b54 00000002 mwac+0x3c3a
95d28b90 9ddc4b50 9ddcd714 851ce910 00000002 mwac+0x2ef3
95d28bb0 9ddc5b48 9ddcd714 00000090 00000002 mwac+0x2b50
95d28bcc 9ddca29a 9ddcd468 00000090 00000002 mwac+0x3b48
95d28bec 9ddc9289 9ddcd7f0 87b70380 95d28c14 mwac+0x829a
95d28bfc 83042593 86d19858 87b70380 87b70380 mwac+0x7289
95d28c14 8323699f 87a6f100 87b70380 87b703f0 nt!IofCallDriver+0x63
95d28c34 83239b71 86d19858 87a6f100 00000000 nt!IopSynchronousServiceTail+0x1f8
95d28cd0 832803f4 86d19858 87b70380 00000000 nt!IopXxxControlFile+0x6aa
95d28d04 830491ea 00000488 000007e8 00000000 nt!NtDeviceIoControlFile+0x2a
95d28d04 76fc70b4 00000488 000007e8 00000000 nt!KiFastCallEntry+0x12a
1471f6fc 00000000 00000000 00000000 00000000 0x76fc70b4


STACK_COMMAND: kb

FOLLOWUP_IP:
fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+16c
89161e26 3bc3 cmp eax,ebx

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+16c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: fwpkclnt

IMAGE_NAME: fwpkclnt.sys


DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7892c

FAILURE_BUCKET_ID: 0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+16c

BUCKET_ID: 0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+16c

 


 

Uninstall MBAM if you will please and see how it goes;

 

Steps for removing MBAM here, please disregard any other product or service that may be offered at the link.

 

TIP

To ensure that you receive notification of any reply to your topic please click on the Follow this topic tab at the upper right corner of the page. 


  • 0

#3
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,911 posts

Not heard back from you chrmdfreak, do you still require assistance or is the issue now resolved, an update would be appreciated.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP