Bsod bad_pool_caller

Hello.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 109b, 4040006, fffffa8005550b90}

GetPointerFromAddress: unable to read from fffff80002eca100
GetUlongFromAddress: unable to read from fffff80002eca1c0
Probably caused by : NETIO.SYS ( NETIO!FeNotifyFilter+3f )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 000000000000109b, (reserved)
Arg3: 0000000004040006, Memory contents of the pool block
Arg4: fffffa8005550b90, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  fffffa8005550b90 Nonpaged pool

FREED_POOL_TAG:  Flng

BUGCHECK_STR:  0xc2_7_Flng

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002dc5be9 to fffff80002c9afc0

STACK_TEXT:  
fffff880`085016e8 fffff800`02dc5be9 : 00000000`000000c2 00000000`00000007 00000000`0000109b 00000000`04040006 : nt!KeBugCheckEx
fffff880`085016f0 fffff880`01761d08 : fffffa80`09525980 00000000`000007ff 00000000`00000000 00000000`00000801 : nt!ExDeferredFreePool+0x1201
fffff880`085017a0 fffff880`0176838c : fffffa80`081b7d58 fffffa80`095343d0 00000000`00000000 fffffa80`09525980 : tcpip!FlpEtDeleteEndpoint+0x28
fffff880`085017d0 fffff880`0176bb5c : fffffa80`061d2010 fffff880`014db755 00000000`00000000 fffffa80`061d2010 : tcpip!FlpEtDeleteEtFilter+0x2c
fffff880`08501800 fffff880`0176ecdf : fffffa80`09525980 fffffa80`09525980 00000000`00000001 fffff880`015b0d70 : tcpip!FlpEdgeTraversalCalloutNotifyWithType+0x11c
fffff880`08501840 fffff880`015b3e4f : 00000000`00000000 00000000`00000001 00000000`00000026 00000000`00000000 : tcpip!FlpEdgeTraversalCalloutNotify+0x1f
fffff880`08501870 fffff880`015babf3 : fffffa80`0961db00 fffffa80`05331700 fffffa80`053149d0 00000000`00000026 : NETIO!FeNotifyFilter+0x3f
fffff880`085018b0 fffff880`015b1885 : fffffa80`0961db00 00000000`00000000 00000000`000000ff fffffa80`05d0a4e0 : NETIO! ?? ::FNODOBFM::`string'+0x73cb
fffff880`085018e0 fffff880`015b19a8 : fffffa80`098c8820 fffffa80`06297e00 00000000`00000000 fffffa80`098c8858 : NETIO!DeleteFilterFromIndex+0x165
fffff880`08501960 fffff880`015b2274 : fffffa80`08000004 fffffa80`08c2e8c0 fffffa80`098c8858 00000000`00000000 : NETIO!KfdCommitTransaction+0xe1
fffff880`085019a0 fffff880`0166d94b : fffffa80`098c8820 fffffa80`08c2e8c0 fffffa80`078d5d60 00000000`00000001 : NETIO!IoctlKfdCommitTransaction+0x54
fffff880`085019d0 fffff800`02fb1687 : fffffa80`078d5d60 fffff880`08501ca0 fffffa80`078d5d60 fffffa80`098c8820 : tcpip!KfdDispatchDevCtl+0x6b
fffff880`08501a10 fffff800`02fb1ee6 : fffff8a0`0f4f0bb0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
fffff880`08501b40 fffff800`02c9a253 : fffffa80`095343d0 00000000`0256f7e8 fffff880`08501bc8 00000000`0256f8a8 : nt!NtDeviceIoControlFile+0x56
fffff880`08501bb0 00000000`770a138a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0256edb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770a138a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!FeNotifyFilter+3f
fffff880`015b3e4f 85c0            test    eax,eax

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  NETIO!FeNotifyFilter+3f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  5034f6a0

FAILURE_BUCKET_ID:  X64_0xc2_7_Flng_NETIO!FeNotifyFilter+3f

BUCKET_ID:  X64_0xc2_7_Flng_NETIO!FeNotifyFilter+3f

Followup: MachineOwner
---------

Code:

Start Menu\Programs\McAfee	Public:Start Menu\Programs\McAfee	Public

McAfee is a frequent cause of BSOD-s, consider uninstalling it with the McAfee Removal Tool and replace with Microsoft Security Essentials (To test)

• How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)
  
  • McAfee Removal Tool - McAfee Uninstaller

Make scans with the following:

-Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

-ESET online scanner

• Free Online Virus Scanner | ESET

Scan suspicious files on your PC:

• Online Scanners - Scan Suspicious Files on your PC

Microsoft Security Essentials.

Recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software. It is free and lightweight:-

• Microsoft Security Essentials - Free Antivirus for Windows
  
  • Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer
    
    • Good and Free system security combination.
    • How to Scan Your Computer With Multiple Antivirus Programs - How-To Geek
    
    
  
  

   Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

Perform a System File Check to check the integrity of all protected Windows 7 :

1. Click on the start
2. Type CMD on Search
3. Left click and Run as Administrator
4. Type SFC /scannow

Full tutorial here:

• SFC /Scannow Command - System File Checker

Disk Check on your hard drive for file system errors and bad sectors on it.

• How to run Disk Check on Windows 7

Reduce items at start-up. Nothing except anti-virus is required plus improves the time for logging in windows.

• Startup Programs - Change
• Troubleshoot Application Conflicts by Performing a Clean Startup

Check for a BIOS update:

Code:

BIOS Version/Date	TOSHIBA V1.20, 11/26/2009

Let us know the results.