Jump to content

Blue Screen Of Death Bad_Pool_Header


Recommended Posts

I have been getting this blue screen of death and everytime I check blue screen view it tells me that it was caused by tcpip.sys 
I have windows 10 My Specs Are: 
CPU: i7 4790K
GPU: GTX 980
MotherBoard: Asus VII Hero
16 GB Corsair Vengeance RAM
Windows 10
Here is a link to the screenshot from BlueScreenView:https://gyazo.com/2427ae4d8e2f855dc20526447ae4d649
Here is a link to my Dmp Files.: 
https://onedrive.live.com/redir?resid=CA35D6448CD5C91F!397&authkey=!AHPh_S2rAFadt4U&ithint=folder%2cdmp

Link to post
Share on other sites

:welcome:

Would you let me know the Brand-name of antivirus on this Asus system, and its version number, please.  Thanks.

 

p.s. A few other things, too.  What was the main program in use at that moment when this stop abort happened?

and was it while using some specific web browser?  if yes, which one ?

Thanks.

Edited by Maurice Naggar
Link to post
Share on other sites

Looks like Zyremus has both BitDefender and MBAM installed, Maurice. Most likely a conflict with these 2 softwares as others are experiencing.

Zyremus, Maurice has posted a guide on how to make these two softwares more compatible HERE . Good luck!

 

 

Information about their 2 latest dumps for those interested:

Quote

 

**************************Tue Mar 29 20:29:00.741 2016 (UTC - 5:00)**************************
STACK_TEXT:  
ffffd000`2302a0b8 fffff800`3e245de5 : 00000000`00000019 00000000`00000020 ffffe000`c4656220 ffffe000`c4656240 : nt!KeBugCheckEx
ffffd000`2302a0c0 fffff801`e7150ed2 : 00000000`00000000 ffffe000`c0e04940 00000000`00000000 ffffe000`676e7049 : nt!ExFreePool+0x2c5
ffffd000`2302a1a0 fffff801`e7151bf2 : 00000000`00000000 00000000`00000000 00000000`00000011 fffff801`e71ac000 : tcpip!IppCleanupSendState+0x1a
ffffd000`2302a1d0 fffff801`e7275b1d : ffffe000`c5c850d0 00000000`00000001 00000000`00000000 ffffe000`c47a5c60 : tcpip!IppInspectBuildHeaders+0x412
ffffd000`2302a4b0 fffff801`ea3c6135 : 00000000`00000008 ffffd000`00000014 ffffe000`c5d11110 ffffe000`c5d11134 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x1dd
ffffd000`2302a570 00000000`00000008 : ffffd000`00000014 ffffe000`c5d11110 ffffe000`c5d11134 ffffe000`c5d11124 : mwac+0x6135
ffffd000`2302a578 ffffd000`00000014 : ffffe000`c5d11110 ffffe000`c5d11134 ffffe000`c5d11124 ffffe000`00000011 : 0x8
ffffd000`2302a580 ffffe000`c5d11110 : ffffe000`c5d11134 ffffe000`c5d11124 ffffe000`00000011 00000000`00000000 : 0xffffd000`00000014
ffffd000`2302a588 ffffe000`c5d11134 : ffffe000`c5d11124 ffffe000`00000011 00000000`00000000 00000000`00000000 : 0xffffe000`c5d11110
ffffd000`2302a590 ffffe000`c5d11124 : ffffe000`00000011 00000000`00000000 00000000`00000000 ffffe000`00000000 : 0xffffe000`c5d11134
ffffd000`2302a598 ffffe000`00000011 : 00000000`00000000 00000000`00000000 ffffe000`00000000 ffffe000`00000000 : 0xffffe000`c5d11124
ffffd000`2302a5a0 00000000`00000000 : 00000000`00000000 ffffe000`00000000 ffffe000`00000000 00000000`00000000 : 0xffffe000`00000011


ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
**************************Tue Mar 29 20:03:47.413 2016 (UTC - 5:00)**************************
STACK_TEXT:  
ffffd000`23ce30b8 fffff800`7e2afde5 : 00000000`00000019 00000000`00000020 ffffe000`a0a3a260 ffffe000`a0a3a280 : nt!KeBugCheckEx
ffffd000`23ce30c0 fffff800`b2750ed2 : 00000000`00000000 ffffe000`9cf9c130 00000000`00000000 ffffe000`676e7049 : nt!ExFreePool+0x2c5
ffffd000`23ce31a0 fffff800`b2751bf2 : 00000000`00000000 00000000`00000000 00000000`00000011 fffff800`b27ac000 : tcpip!IppCleanupSendState+0x1a
ffffd000`23ce31d0 fffff800`b2875b1d : ffffe000`afb94400 00000000`00000001 00000000`00000000 ffffe000`9bb188c0 : tcpip!IppInspectBuildHeaders+0x412
ffffd000`23ce34b0 fffff800`b6bb6135 : 00000000`00000008 ffffd000`00000014 ffffe000`a56af8a0 ffffe000`a56af8c4 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x1dd
ffffd000`23ce3570 00000000`00000008 : ffffd000`00000014 ffffe000`a56af8a0 ffffe000`a56af8c4 ffffe000`a56af8b4 : mwac+0x6135
ffffd000`23ce3578 ffffd000`00000014 : ffffe000`a56af8a0 ffffe000`a56af8c4 ffffe000`a56af8b4 ffffe000`00000011 : 0x8
ffffd000`23ce3580 ffffe000`a56af8a0 : ffffe000`a56af8c4 ffffe000`a56af8b4 ffffe000`00000011 00000000`00000000 : 0xffffd000`00000014
ffffd000`23ce3588 ffffe000`a56af8c4 : ffffe000`a56af8b4 ffffe000`00000011 00000000`00000000 00000000`00000000 : 0xffffe000`a56af8a0
ffffd000`23ce3590 ffffe000`a56af8b4 : ffffe000`00000011 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffe000`a56af8c4
ffffd000`23ce3598 ffffe000`00000011 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`00000000 : 0xffffe000`a56af8b4
ffffd000`23ce35a0 00000000`00000000 : 00000000`00000000 00000000`00000000 ffffd000`00000000 00000000`00000000 : 0xffffe000`00000011


ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``

 

mwac.sys                    Tue Jun 17 21:07:00 2014 (53A0F444) -> http://www.carrona.org/drivers/driver.php?id=mwac.sys

Followed by these BitDefender (probably 2016 according to dates given) drivers.

avc3.sys                    Tue Jan 19 07:52:34 2016 (569E3FA2)
avckf.sys                   Tue Jan 19 07:55:54 2016 (569E406A)
bdfwfpf.sys                 Tue Feb  9 06:12:25 2016 (56B9D7A9)
bdvedisk.sys                Mon Nov 23 05:38:07 2015 (5652FA9F)

http://www.carrona.org/drivers/driver.php?id=avc3.sys
http://www.carrona.org/drivers/driver.php?id=avckf.sys
http://www.carrona.org/drivers/driver.php?id=bdfwfpf.sys
http://www.carrona.org/drivers/driver.php?id=bdvedisk.sys

___

Other details...

**************************Tue Mar 29 20:29:00.741 2016 (UTC - 5:00)**************************
Loading Dump File [D:\SysnativeBSODApps\032916-4390-01.dmp]
 
Built by: 10586.162.amd64fre.th2_release_sec.160223-1728
 
System Uptime: 0 days 0:24:45.374
 
BugCheck 19, {20, ffffe000c4656220, ffffe000c4656240, 4020008}
 
*** WARNING: Unable to verify timestamp for mwac.sys
 
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
 
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )
 
BAD_POOL_HEADER (19)
 
BUGCHECK_STR:  0x19_20
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  mbamservice.ex
 
FAILURE_BUCKET_ID:  0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0
 
CPUID:        "Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz"
 
MaxSpeed:     4000
 
CurrentSpeed: 4007
 
  BIOS Version                  2801
 
  BIOS Release Date             06/25/2015
 
  Manufacturer                  ASUS
 
  Product Name                  All Series
 
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
**************************Tue Mar 29 20:03:47.413 2016 (UTC - 5:00)**************************
Loading Dump File [D:\SysnativeBSODApps\032916-5218-01.dmp]
 
Built by: 10586.162.amd64fre.th2_release_sec.160223-1728
 
System Uptime: 0 days 22:55:40.045
 
BugCheck 19, {20, ffffe000a0a3a260, ffffe000a0a3a280, 402000a}
 
*** WARNING: Unable to verify timestamp for mwac.sys
 
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
 
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )
 
BAD_POOL_HEADER (19)
 
BUGCHECK_STR:  0x19_20
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  mbamservice.ex
 
FAILURE_BUCKET_ID:  0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0
 
CPUID:        "Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz"
 
MaxSpeed:     4000
 
CurrentSpeed: 4007
 
  BIOS Version                  2801
 
  BIOS Release Date             06/25/2015
 
  Manufacturer                  ASUS
 
  Product Name                  All Series
 
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``


   --- E O J ---   Sun 04/03/2016      18:38:40.75     importantInfo   Copyright 2012 Sysnative Forums
   --- E O J ---   Sun 04/03/2016      18:38:40.75     importantInfo   Copyright 2012 Sysnative Forums
   --- E O J ---   Sun 04/03/2016      18:38:40.75     importantInfo   Copyright 2012 Sysnative Forums

 

Link to post
Share on other sites

Hi Zyremus,

We would like to gather additional information.

Which version / release of Bitdefender is installed ?

also, 

look at the file bdfwfpf.sys

at this folder please
C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys

The Version number of that driver  needs to be 7.00.16  for  BitDefender 2016

 

Other desired info:

Was this Bitdefender an upgrade from a previous version ?  and if so, when was that done ?

The other detail I would like to have is:   Just what program was in use at that moment when the STOP abort happened?  Were you using a web browser at that moment ?

if yes, which web browser ?

 

Edited by Maurice Naggar
Link to post
Share on other sites

@Zyremus

I have moved your posts here, so as to guide you going forward.  I would like to get some diagnostic reports from your system.

Please read the following and in your next reply ATTACH the 3 requested logs - Diagnostic Logs
(the three files should be CheckResults.txt, FRST.txt and Addition.txt)

 

Just only attach your reports as we go along.

Thank You,

Link to post
Share on other sites

Well I uninstalled malate bytes right now. And I haven't gotten a bsod since. I uninstalled it on Friday. And it's Wednesday and nothing yet. And I had a paid version of Bit defender but it recently ran out around monday. So I have avast for now until I buy Bit defender again.

 

Link to post
Share on other sites

OK.  Thanks for the update.  I will then close this case if you have no issue.

I was simply volunteering to help out.  Please know that BitDefender 2016 and our Malwarebytes Anti-Malware do co-exist fine.

Both have to be good current release programs.   Once that is verified, then simply insure to add in mutual Trusted applications exclusions.

Our teams have done a lot of testing and do not run into abort issues.  Those that we have cured have been mostly customers who happened to have incomplete updates in their 2016 BitDefender software.  Otherwise they simply needed a solid good new re install.  Plus the Trusted application settings.

Since your pc is fine now, I do wish you well.

Cheers.

Link to post
Share on other sites

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.