Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD comes quick, reboots before I can PrintSCRN; DM log .zip attached

17 May 2015   #1
johnlyman

Windows x64
 
 
BSOD comes quick, reboots before I can PrintSCRN; DM log .zip attached

Hello everyone~

This is a BSOD that shows up and within 2 or 3 sec's the computer reboots so I barely have time to hit the print screen button. The pc doesn't lock up, it just reboots and back to the desktop we go...

My first approach was to check for viruses, trojans, etc.
Did ChkDisk.
All of those maintenance sort of things you'd think of-I think I've done them all.

Did a memory test by typing "memory" in the START box; it ran and I thought I was going to get a report but nothing showed up... Was I supposed to look for it somewhere?

I did follow along and ran the DM_log prog as instructed here; I'm attaching the .zip file.

Thank you for any help you can provide. If this is just a simple Windows "oddity" then fine, but if there's a problem I don't want to wait until the system crashes to deal with it.

Other information related to my system should be in my profile..

Thanks again....


My System SpecsSystem Spec
.
18 May 2015   #2
SGT Oddball

 

Your one dump shows a network related crash originating from Malwarebytes, this would generally point to some sort of infection, so a very deep scan for malware and viruses would be in order, malwarebytes could be compromised so I wouldn't trust the results from that atm.

Driver Reference Table - fwpkclnt.sys
Driver Reference Table - mwac.sys


Code:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, fffffa80095dae70, fffffa80095dae90, 4020005}
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffffa80095dae70, The pool entry we were looking for within the page.
Arg3: fffffa80095dae90, The next pool entry.
Arg4: 0000000004020005, (reserved)
Debugging Details:
------------------
 
BUGCHECK_STR:  0x19_20
POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff8000310a100
GetUlongFromAddress: unable to read from fffff8000310a1c0
 fffffa80095dae70 Nonpaged pool
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  mbamservice.ex
CURRENT_IRQL:  2
ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
LAST_CONTROL_TRANSFER:  from fffff80003003cbe to fffff80002ecd8c0
STACK_TEXT:  
fffff880`06eb62e8 fffff800`03003cbe : 00000000`00000019 00000000`00000020 fffffa80`095dae70 fffffa80`095dae90 : nt!KeBugCheckEx
fffff880`06eb62f0 fffff880`01727d2d : 00000000`00000008 00000000`00000010 00000000`676e7049 fffffa80`0889314c : nt!ExAllocatePoolWithTag+0x1a2a
fffff880`06eb63a0 fffff880`0140a066 : 00000000`00000000 fffff880`014060c3 00000000`00000000 fffffa80`068c7a90 : tcpip!IppInspectBuildHeaders+0x65d
fffff880`06eb6680 fffff880`0671c12d : 00000000`00000008 00000000`00000014 00000000`00000000 fffffa80`0b83c010 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x20a
fffff880`06eb6720 00000000`00000008 : 00000000`00000014 00000000`00000000 fffffa80`0b83c010 fffffa80`0b83c024 : mwac+0x612d
fffff880`06eb6728 00000000`00000014 : 00000000`00000000 fffffa80`0b83c010 fffffa80`0b83c024 fffffa80`00000011 : 0x8
fffff880`06eb6730 00000000`00000000 : fffffa80`0b83c010 fffffa80`0b83c024 fffffa80`00000011 00000000`00000000 : 0x14
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
fffff880`0140a066 85c0            test    eax,eax
SYMBOL_STACK_INDEX:  3
SYMBOL_NAME:  fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: fwpkclnt
IMAGE_NAME:  fwpkclnt.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  533f5b09
IMAGE_VERSION:  6.1.7601.18438
FAILURE_BUCKET_ID:  X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
BUCKET_ID:  X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:x64_0x19_20_fwpkclnt!fwpsconstructipheaderfortransportpacket0+20a
FAILURE_ID_HASH:  {863e217f-0693-d7a3-6d21-a4c5a3f57698}
Followup: MachineOwner
---------
My System SpecsSystem Spec
18 May 2015   #3
johnlyman

Windows x64
 
 
Re:

Thank you for that. I did upgrade Malware bytes from the free to the paid version and right after that is actually when the problems started. I had forgotten that but your post brought it back to attention. And you're correct; Malwarebytes found nothing but I've run two other malware scans using other tools. One found two serious instances of malware, the other one is running but it looks like it may have found something too.

I'm going to uninstall malwarebytes; I'm not sure I can trust my installation of it now. And this has been a good warning to me; I used to be in the habit of backing up business files to an external harddrive, but I had become a bit lazy and not doing that as much as I should so I'm doing that as well.

I'll keep going with checking the system and backing up files; if anything else should erupt I'll follow up here.
My System SpecsSystem Spec
.

20 May 2015   #4
johnlyman

Windows x64
 
 
re:

I guess I've got it fixed, thanks for your help. A different prog found two instances of malware and removed them; I haven't had any issues for the past few days..
My System SpecsSystem Spec
Reply

 BSOD comes quick, reboots before I can PrintSCRN; DM log .zip attached




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Prevent removing attached VHD, from safely removed attached media
Hi all, I was just wondering if anyone knows a way to prevent users from removing a attached VHD from "Safely remove hardware and eject media", We have had multiple users eject the VHD when they are going to unplug their USB and they are ejecting the attached VHD insted. Any help would be...
Virtualization
Win 7 Starter, unexpected reboots, very quick after startup
Hi, I have no idea what is going wrong. The model is an Acer Aspire One netbook (10.1 D270). After a few minutes, it just reboots. This happened recently. How can I diagnose the problem? I can see nothing strange in eventvwr.
General Discussion
BSOD too quick to see error code. Jcgriff files etc attached
Windows 7 x64 Not the original installed OS on the system - OEM reinstall disk from Dell I reinstalled this a week ago. age of system (hardware): 12 months, I bought refurbished 2 mo. ago Dell Studio 1569 notebook Also - new Intel SS Hard Drive 240 gigs. I installed this after old HD...
BSOD Help and Support
BSOD Or reboots?
hey i got a computer spec are: cpu: amd athlon 64 x2 4600 ram: pc2-6400 1gb x 2 gfx: geforce 9800GT 1gb ddr3 hdd: wdc wd3200ks-oop cd drive: HL-DT-stDVD-ram power S: Enermax Liberty 620w (some of these parts are new)
Installation & Setup
BSOD & Reboots
I've attached the Minidump file. Can anyone help? I don't seem to be doing anything in general when it happens. Sometimes when I get up in the morning it has rebooted and yesterday and today it did it, once while I was looking at Safari (evaluating it, not all that hot, by the way...) and...
BSOD Help and Support
BSOD and Reboots
Started getting BSOD and random reboots after receiving the Falcon Northwest case and Motherboard/cpu combo from a friend and setting the rest of it up with Win 7 beta and hardware. Crashed the 2nd day I had it and every day since. Tried different drivers for all hardware, and overheating isnt a...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:34.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App