Solved BSOD, usually playing games, other times somewhat random

[shrekisfree]

Hello out there.
First of all, thanks for taking the time to read this, and help me if you can. I have been getting BSOD's for a while, and combined with it not affecting critical things (like schoolwork) and my course load (don't take 7 engineering classes in one semester, btw ), I just kinda let it go.
I'm in a bit of a lull at school, and I just found these forums again, so here goes.

Usually when I get BSODs, they're either "IRQL not less or equal" or "Page fault in non-paged area". Tonight I got "Bad pool header". Attached are the results from the grab tool; Looking at it, you apparently have an abundance of crash reports to peruse.

Last January (2012) I replaced the video card and ram, and the BSODs started around May 2012 or so. I've run memtest86 on the ram sticks and found no faults, and I can't find any sort of software that tests your video card in a similar manner.

Thanks again for your help, and let me know if there's any other info I can provide.

 

[koolkat77]

Welcome to the forum.

Norton is a known cause to BSOD's. Please uninstall it for testing purpose.

Start Menu\Programs\Norton 360 Premier Edition	Public:Start Menu\Programs\Norton 360 Premier Edition	Public
Start Menu\Programs\Norton Utilities 16	Public:Start Menu\Programs\Norton Utilities 16	Public

• Microsoft Security Essentials & the Free version of Malwarebytes, update and make full scans separately:
  • Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase
  • Help protect your PC with Microsoft Security Essentials
  • Malwarebytes Free

   Note

:info: Do not start the trial version of MalwareBytes

• Also take a look at: Good & Free System Security Combination

• Virus Check:
  • Make scans with these tools below:
    • TDSSKiller Rootkit Removal Utility Free Download | Kaspersky Lab US
    • Online Virus Scanner Eset
• Application conflict:
  • Reduce the start-up items. This will help avoid software conflicts:
    • Remove Startup Programs in Windows 7
    • Clean Startup in Windows 7

---

• System File Checker
  • The SFC /SCANNOW Command - System File Checker scans the integrity of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible. If you have modified your system files as in theming explorer/system files, running sfc /scannow will revert the system files to it's default state.
    • Link to full tutorial: http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
• Run Disk Check in Windows 7
  • Run this on your Hard Drive(s). This will show you how to run Check Disk or chkdsk in Windows 7 to check a selected hard disk for file system errors and bad sectors on it. With both boxes checked for all HDDs and with Automatically fix file system errors. Post back your logs for the checks after finding them using http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html
    • Link to full tutorial: http://www.sevenforums.com/tutorials/433-disk-check.html

• Check for heating issues using Speccy or HWmonitor
  • HWMonitor CPUID - System & hardware benchmark, monitoring, reporting
  • Speccy - System Information - Free Download
    • Please upload a summary tab using Speccy. http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Let us know the results.

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\USER\Downloads\SF_16-10-2013\SF_16-10-2013\101613-42921-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`03417000 PsLoadedModuleList = 0xfffff800`0365a6d0
Debug session time: Thu Oct 17 08:45:05.027 2013 (UTC + 6:00)
System Uptime: 0 days 2:19:36.433
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {3, fffff8a01f4084a0, fffff8a01f4084a0, 11dfc2ef7f7eb2cc}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+c96 )

Followup: Pool_corruption
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff8a01f4084a0, the pool entry being checked.
Arg3: fffff8a01f4084a0, the read back flink freelist value (should be the same as 2).
Arg4: 11dfc2ef7f7eb2cc, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------


BUGCHECK_STR:  0x19_3

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800035bf6ea to fffff8000348cbc0

STACK_TEXT:  
fffff880`08ade8d8 fffff800`035bf6ea : 00000000`00000019 00000000`00000003 fffff8a0`1f4084a0 fffff8a0`1f4084a0 : nt!KeBugCheckEx
fffff880`08ade8e0 fffff800`035c04f1 : fffff880`08adea80 fffff8a0`12ab27c0 fffff8a0`1b3cbd90 00000000`000aa401 : nt!ExDeferredFreePool+0xc96
fffff880`08ade970 fffff800`03742104 : fffff8a0`018eb620 fffff8a0`12ab27d0 fffffa80`6944624f fffffa80`0d4be4b0 : nt!ExFreePoolWithTag+0x411
fffff880`08adea20 fffff800`036ec6d4 : 00000000`00000000 fffffa80`0d4be498 fffff8a0`2040b000 00000000`00000000 : nt!ObpDeleteDirectoryEntry+0x54
fffff880`08adea50 fffff800`0378391d : 00000000`00000000 fffffa80`0a76e060 fffffa80`0d4be4b0 fffff800`03495e5c : nt! ?? ::NNGAKEGL::`string'+0xe62d
fffff880`08adeac0 fffff800`03783721 : 00000000`00000000 fffffa80`00000000 fffff8a0`0264d830 00000000`00000000 : nt!ObpDecrementHandleCount+0x6d
fffff880`08adeb40 fffff800`03783ce4 : 00000000`00000230 fffffa80`0a76e060 fffff8a0`0264d830 00000000`00000230 : nt!ObpCloseHandleTableEntry+0xb1
fffff880`08adebd0 fffff800`0348be53 : fffffa80`0ac77750 fffff880`08adeca0 00000000`7ef9e000 fffffa80`0d4be4e0 : nt!ObpCloseHandle+0x94
fffff880`08adec20 00000000`778513aa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`02cbe1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x778513aa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+c96
fffff800`035bf6ea cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExDeferredFreePool+c96

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+c96

BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+c96

Followup: Pool_corruption
---------

 

[shrekisfree]

I'm working on all of that stuff tonight. Should I post results when I'm done, or wait and see if another BSOD happens, then post?
Thanks

 

[koolkat77]

Wait for a bsod to happen after completing the steps