BSOD ntoskrnl.exe, fwpkclnt.sys, avnetflt.sys


  1. Posts : 1
    Windows 7 Pro x64
       #1

    BSOD ntoskrnl.exe, fwpkclnt.sys, avnetflt.sys


    Just wondering if anyone can help me. I've done a fresh install of Windows 7 Pro after upgrading to Windows 8 and disliking it. I've gotten several BSOD lately and I've since then downloaded BlueScreenView and viewed my dump files. I keep seeing "avnetflt.sys", "fwpkclnt.sys" & "ntoskrnl.exe" and under "Bug Check String" is says BAD_POOL_CALLER. Can anyone assist me on this and let me know what these issues are? Thanks.
      My Computer

  2.    #2

    Please follow - Blue Screen of Death (BSOD) Posting Instructions

    BlueScreenView is a pretty useless program in my opinion, it gives a Stop Code, a Probably Caused Line and maybe a call stack?

    If you want to have a look at the dump files yourself, even for curosity, then WinDbg is the proper tool to use - WinDBG: The very basics

    Code:
    BugCheck C2, {7, 109b, 4030010, fffffa8005a8faa0}
    
    Probably caused by : avnetflt.sys ( avnetflt+76fa )
    The bugcheck indicates that a driver has double freed a pool allocation.

    Code:
    3: kd> !pool fffffa8005a8faa0
    Pool page fffffa8005a8faa0 region is Nonpaged pool
     fffffa8005a8f000 size:  150 previous size:    0  (Allocated)  File (Protected)
     fffffa8005a8f150 size:   30 previous size:  150  (Free)       ....
     fffffa8005a8f180 size:  100 previous size:   30  (Allocated)  Ntfx
     fffffa8005a8f280 size:   40 previous size:  100  (Allocated)  ReTa
     fffffa8005a8f2c0 size:   c0 previous size:   40  (Allocated)  FMsl
     fffffa8005a8f380 size:  100 previous size:   c0  (Allocated)  MmCa
     fffffa8005a8f480 size:  100 previous size:  100  (Allocated)  Ntfx
     fffffa8005a8f580 size:  100 previous size:  100  (Allocated)  MmCa
     fffffa8005a8f680 size:   c0 previous size:  100  (Allocated)  EtwR (Protected)
     fffffa8005a8f740 size:   d0 previous size:   c0  (Allocated)  MmCa
     fffffa8005a8f810 size:   80 previous size:   d0  (Free)       WfpM
     fffffa8005a8f890 size:  100 previous size:   80  (Allocated)  MmCa
     fffffa8005a8f990 size:  100 previous size:  100  (Allocated)  Ntfx
    *fffffa8005a8fa90 size:   30 previous size:  100  (Free ) *Pctx
            Owning component : Unknown (update pooltag.txt)
     fffffa8005a8fac0 size:   60 previous size:   30  (Allocated)  Io  
     fffffa8005a8fb20 size:   b0 previous size:   60  (Free)       Vadm
     fffffa8005a8fbd0 size:  100 previous size:   b0  (Allocated)  Ntfx
     fffffa8005a8fcd0 size:  150 previous size:  100  (Allocated)  File (Protected)
     fffffa8005a8fe20 size:   90 previous size:  150  (Allocated)  WfpH
     fffffa8005a8feb0 size:   50 previous size:   90  (Free)       ObCi
     fffffa8005a8ff00 size:  100 previous size:   50  (Allocated)  Ntfx
    Code:
    3: kd> !pooltag Pctx
    Pooltag Pctx not found in pooltag.txt
    The important aspect is the Free, this indicates that the pool allocation has already been freed, and supports the assumption made by WinDbg that the pool allocation was freed twice. The owner of the pool allocation, or more specifically the Pool Tag isn't documented within PoolTag.txt, which (after installing WinDbg) can be found in this directory:

    Code:
    C:\Program Files\Windows Kits\8.0\Debuggers\x86\triage
    Code:
    3: kd> lmvm  avnetflt
    start             end                 module name
    fffff880`0849f000 fffff880`084b6000   avnetflt T (no symbols)           
        Loaded symbol image file: avnetflt.sys
        Image path: \SystemRoot\system32\DRIVERS\avnetflt.sys
        Image name: avnetflt.sys
        Timestamp:        Mon Sep 23 17:32:45 2013 (52406D2D)
        CheckSum:         0001500B
        ImageSize:        00017000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    The driver causing the problem seems to be related to your Avira Security Suite or program, please check for a updated version of the program, or remove the program completely with the Avira Removal Tool, and then use these free alternatives:

    Install and perform full scans with:

       Information
    Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system

    You can also view this thread for a complete free and lightweight security protection combination:

    Code:
    3: kd> lmvm netr28x
    
    start             end                 module name
    fffff880`04272000 fffff880`044b6000   netr28x  T (no symbols)           
        Loaded symbol image file: netr28x.sys
        Image path: \SystemRoot\system32\DRIVERS\netr28x.sys
        Image name: netr28x.sys
        Timestamp:        Wed Nov 28 01:32:10 2012 (50B5699A)
        CheckSum:         00248CC2
        ImageSize:        00244000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    Your Ralink RT2860 series Wireless LAN Card (you may have a different manufacturer) seems to be rather outdated, please update the driver from here MediaTek - Downloads Windows or check your motherboard/model support page.

    Code:
    3: kd> dds 0000000004030010
    00000000`04030010  ????????
    00000000`04030014  ????????
    00000000`04030018  ????????
    00000000`0403001c  ????????
    00000000`04030020  ????????
    00000000`04030024  ????????
    00000000`04030028  ????????
    00000000`0403002c  ????????
    00000000`04030030  ????????
    00000000`04030034  ????????
    00000000`04030038  ????????
    00000000`0403003c  ????????
    00000000`04030040  ????????
    00000000`04030044  ????????
    00000000`04030048  ????????
    00000000`0403004c  ????????
    00000000`04030050  ????????
    00000000`04030054  ????????
    00000000`04030058  ????????
    00000000`0403005c  ????????
    00000000`04030060  ????????
    00000000`04030064  ????????
    00000000`04030068  ????????
    00000000`0403006c  ????????
    00000000`04030070  ????????
    00000000`04030074  ????????
    00000000`04030078  ????????
    00000000`0403007c  ????????
    00000000`04030080  ????????
    00000000`04030084  ????????
    00000000`04030088  ????????
    00000000`0403008c  ????????
    We can also view the memory contents of the pool allocation, but these seem to be empty, I'm not sure if it's because the pool allocation was freed and therefore will contain no data, or that this file is a Minidump and this information wasn't retained.
    Last edited by x BlueRobot; 20 Nov 2013 at 09:02.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:13.
Find Us