BSOD on seemingly random occasions: BAD_POOL_HEADER 0x00000019

[Aurion2112]

Up until tonight I've managed to crash out with the BAD_POOL_HEADER message fairly infrequently, it started happening a few weeks ago and at that point it was uncommon. Now it has happened twice in one night so far so I'm out looking for some assistance. The first instance tonight was while playing Minecraft, the second instance was in the middle of playing Battlefield 4.

This is my first time posting for help on these forums so if I need to include more information please let me know.

I've run the SF Diagnostic tool and attached the resulting .zip to this post.

 

[koolkat77]

Welcome to the forum Aurion2112,

MalwareBytes seems to be causing the problem. Please uninstall it.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {20, fffffa8017b96100, fffffa8017b96120, 4020010}

*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffffa8017b96100, The pool entry we were looking for within the page.
Arg3: fffffa8017b96120, The next pool entry.
Arg4: 0000000004020010, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff80003709100
GetUlongFromAddress: unable to read from fffff800037091c0
 fffffa8017b96100 Nonpaged pool

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  mbamservice.ex

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80003604cae to fffff800034da1c0

STACK_TEXT:  
fffff880`0e672258 fffff800`03604cae : 00000000`00000019 00000000`00000020 fffffa80`17b96100 fffffa80`17b96120 : nt!KeBugCheckEx
fffff880`0e672260 fffff880`01f290bd : 00000000`00000008 00000000`0000000c 00000000`676e7049 fffffa80`1826888c : nt!ExDeferredFreePool+0x12da
fffff880`0e672310 fffff880`01db904a : 00000000`00000000 fffff880`01db50c3 00000000`00000000 fffffa80`1bc1b430 : tcpip!IppInspectBuildHeaders+0x65d
fffff880`0e6725f0 fffff880`0b460109 : 00000000`00000000 00000000`00000014 00000000`00000000 fffffa80`1c5cab00 : fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+0x20a
fffff880`0e672690 00000000`00000000 : 00000000`00000014 00000000`00000000 fffffa80`1c5cab00 fffffa80`1c5cab14 : mwac+0x6109


STACK_COMMAND:  kb

FOLLOWUP_IP: 
fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a
fffff880`01db904a 85c0            test    eax,eax

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: fwpkclnt

IMAGE_NAME:  fwpkclnt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  50e4f5c8

FAILURE_BUCKET_ID:  X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a

BUCKET_ID:  X64_0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+20a

Followup: MachineOwner
---------

Use Revo Uninstaller to uninstall stubborn software. Opt for Advance Mode while uninstalling which allows you to remove leftover registry:-

• Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Perform a Clean boot:

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

• How to Change, Add, or Remove Startup Programs in Windows 7

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Post back results.