BSOD on seemingly random occasions: BAD_POOL_HEADER 0x00000019


  1. Posts : 1
    Windows 7 Professional x64
       #1

    BSOD on seemingly random occasions: BAD_POOL_HEADER 0x00000019


    Up until tonight I've managed to crash out with the BAD_POOL_HEADER message fairly infrequently, it started happening a few weeks ago and at that point it was uncommon. Now it has happened twice in one night so far so I'm out looking for some assistance. The first instance tonight was while playing Minecraft, the second instance was in the middle of playing Battlefield 4.

    This is my first time posting for help on these forums so if I need to include more information please let me know.

    I've run the SF Diagnostic tool and attached the resulting .zip to this post.
      My Computer


  2. Posts : 15,026
    Windows 10 Home 64Bit
       #2

    Welcome to the forum Aurion2112,

    MalwareBytes seems to be causing the problem. Please uninstall it.
    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 19, {20, fffffa8017b96100, fffffa8017b96120, 4020010}
    
    *** WARNING: Unable to verify timestamp for mwac.sys
    *** ERROR: Module load completed but symbols could not be loaded for mwac.sys
    Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a )
    
    Followup: MachineOwner
    ---------
    
    4: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_HEADER (19)
    The pool is already corrupt at the time of the current request.
    This may or may not be due to the caller.
    The internal pool links must be walked to figure out a possible cause of
    the problem, and then special pool applied to the suspect tags or the driver
    verifier to a suspect driver.
    Arguments:
    Arg1: 0000000000000020, a pool block header size is corrupt.
    Arg2: fffffa8017b96100, The pool entry we were looking for within the page.
    Arg3: fffffa8017b96120, The next pool entry.
    Arg4: 0000000004020010, (reserved)
    
    Debugging Details:
    ------------------
    
    
    BUGCHECK_STR:  0x19_20
    
    POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff80003709100
    GetUlongFromAddress: unable to read from fffff800037091c0
     fffffa8017b96100 Nonpaged pool
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
    
    PROCESS_NAME:  mbamservice.ex
    
    CURRENT_IRQL:  0
    
    LAST_CONTROL_TRANSFER:  from fffff80003604cae to fffff800034da1c0
    
    STACK_TEXT:  
    fffff880`0e672258 fffff800`03604cae : 00000000`00000019 00000000`00000020 fffffa80`17b96100 fffffa80`17b96120 : nt!KeBugCheckEx
    fffff880`0e672260 fffff880`01f290bd : 00000000`00000008 00000000`0000000c 00000000`676e7049 fffffa80`1826888c : nt!ExDeferredFreePool+0x12da
    fffff880`0e672310 fffff880`01db904a : 00000000`00000000 fffff880`01db50c3 00000000`00000000 fffffa80`1bc1b430 : tcpip!IppInspectBuildHeaders+0x65d
    fffff880`0e6725f0 fffff880`0b460109 : 00000000`00000000 00000000`00000014 00000000`00000000 fffffa80`1c5cab00 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x20a
    fffff880`0e672690 00000000`00000000 : 00000000`00000014 00000000`00000000 fffffa80`1c5cab00 fffffa80`1c5cab14 : mwac+0x6109
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
    fffff880`01db904a 85c0            test    eax,eax
    
    SYMBOL_STACK_INDEX:  3
    
    SYMBOL_NAME:  fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: fwpkclnt
    
    IMAGE_NAME:  fwpkclnt.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  50e4f5c8
    
    FAILURE_BUCKET_ID:  X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
    
    BUCKET_ID:  X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
    
    Followup: MachineOwner
    ---------
    Use Revo Uninstaller to uninstall stubborn software. Opt for Advance Mode while uninstalling which allows you to remove leftover registry:-

    Perform a Clean boot:

    Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

    Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:
    • Click on the
    • Type CMD on Search
    • Left click and Run as Administrator
    • Type SFC /scannow

    Full tutorial here:

    Post back results.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:09.
Find Us