Hello GCFSA.
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
[COLOR=Red]BAD_POOL_HEADER (19)[/COLOR]
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and[COLOR=Red] then special pool applied to the suspect tags or the driver
verifier to a suspect driver.[/COLOR]
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffff8a00e8f25a0, The pool entry we were looking for within the page.
Arg3: fffff8a00e8f27c0, The next pool entry.
Arg4: 0000000005220010, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: fffff8a00e8f25a0 Paged pool
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff800037f6cae to fffff800036cbfc0
STACK_TEXT:
fffff880`03d70b68 fffff800`037f6cae : 00000000`00000019 00000000`00000020 fffff8a0`0e8f25a0 fffff8a0`0e8f27c0 : nt!KeBugCheckEx
fffff880`03d70b70 fffff800`039ace83 : fffff800`038c9600 fffff800`039ab730 fffff800`624e4d43 fffff880`04c5ee90 : nt!ExDeferredFreePool+0x12da
fffff880`03d70c20 fffff800`039aba6e : fffff8a0`15433cc0 00000000`361076d3 fffff8a0`00bef410 00000000`00000000 : nt!CmpFreeKeyControlBlock+0x123
fffff880`03d70c50 fffff800`036d5641 : fffff800`038692d8 fffffa80`03cebb50 00000000`00000000 fffffa80`03cebb50 : nt!CmpDelayDerefKCBWorker+0x33e
fffff880`03d70cb0 fffff800`03962e5a : fffff880`03d6c040 fffffa80`03cebb50 00000000`00000080 fffffa80`03cd7b30 : nt!ExpWorkerThread+0x111
fffff880`03d70d40 fffff800`036bcd26 : fffff880`03b67180 fffffa80`03cebb50 fffff880`03b720c0 fffff800`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03d70d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!CmpFreeKeyControlBlock+123
fffff800`039ace83 e90effffff jmp nt!CmpFreeKeyControlBlock+0x36 (fffff800`039acd96)
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!CmpFreeKeyControlBlock+123
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 503f82be
FAILURE_BUCKET_ID: X64_0x19_20_nt!CmpFreeKeyControlBlock+123
BUCKET_ID: X64_0x19_20_nt!CmpFreeKeyControlBlock+123
Followup: MachineOwner
---------
Your crash dumps are not showing any finite probable cause. In such a situation, it is better to enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.
Information
Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.
How Can we know that DV is enabled:
It will make the system bit of slow, laggy.
Warning
Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using
CCleaner looking at Tools > System Restore.
If there is no points,
make a System Restore Point manually before enabling DV.
Let us know the results, with the subsequent crash dumps, if any.