BSOD while browsing in Chrome - BAD POOL HEADER

[yongnuo]

Hello
Recently while browsing using Chrome i have been getting a BAD POOL HEADER BSOD
I have the dmp file but cannot upload it here which seems bizarre .
Anyway i have copied info to paste here . Hope you can help me . Thanks Col

Happy to add or to do what you ask ...



Machine Name:
Kernel base = 0xfffff800`02e17000 PsLoadedModuleList = 0xfffff800`03051c90
Debug session time: Sat Nov 3 11:30:13.229 2018 (UTC - 5:00)
System Uptime: 0 days 4:24:30.994
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff80003012c40, the pool entry being checked.
Arg3: 0000000000000000, the read back flink freelist value (should be the same as 2).
Arg4: fffff80003012c40, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

BUGCHECK_STR: 0x19_3

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

PROCESS_NAME: chrome.exe

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from fffff80002ff3253 to fffff80002eaa9a0

STACK_TEXT:
fffff880`0d134ea8 fffff800`02ff3253 : 00000000`00000019 00000000`00000003 fffff800`03012c40 00000000`00000000 : nt!KeBugCheckEx
fffff880`0d134eb0 fffff880`02e2d56f : 00000000`00000000 fffffa80`13db3740 fffff800`00000000 fffffa80`00000000 : nt!ExFreePool+0x4fb
fffff880`0d134fa0 fffff880`01201c9b : fffffa80`00000000 fffffa80`1a044bf0 fffffa80`14af3430 00000000`00000000 : tdx!TdxTdiDispatchCreate+0x10f
fffff880`0d135040 fffffa80`00000000 : fffffa80`1a044bf0 fffffa80`14af3430 00000000`00000000 fffffa80`1a044bf0 : adgnetworktdidrv+0x1c9b
fffff880`0d135048 fffffa80`1a044bf0 : fffffa80`14af3430 00000000`00000000 fffffa80`1a044bf0 fffff880`01202096 : 0xfffffa80`00000000
fffff880`0d135050 fffffa80`14af3430 : 00000000`00000000 fffffa80`1a044bf0 fffff880`01202096 fffffa80`1a044d08 : 0xfffffa80`1a044bf0
fffff880`0d135058 00000000`00000000 : fffffa80`1a044bf0 fffff880`01202096 fffffa80`1a044d08 00000000`00000240 : 0xfffffa80`14af3430


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePool+4fb
fffff800`02ff3253 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!ExFreePool+4fb

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: X64_0x19_3_nt!ExFreePool+4fb

BUCKET_ID: X64_0x19_3_nt!ExFreePool+4fb

Followup: Pool_corruption

 

[Paul Black]

Hi yongnuo,

Before posting a BSOD thread, please read the instructions here => Blue Screen Of Death Posting Instructions.

Thanks.

 

[yongnuo]

Hi Paul
I restored my PC after the initial crash so most of the info on the pc will be gone . But i did save the dmp file .
Can i just zip it and upload ?
Thanks Col

 

[Paul Black]

Hi yongnuo,

I restored my PC after the initial crash so most of the info on the pc will be gone. But i did save the dmp file. Can i just zip it and upload?

Yes.

I hope this helps!

 

[yongnuo]

Many Thanks Paul
You are a star to reply so quickly . All the best, Col

DMP zipped and uploaded .

 

[yongnuo]

Any ideas anyone ?
Thank you .

 

[Paul Black]

Hi yongnuo,

DMP zipped and uploaded.

Can you please upload the file as a .zip file as per the instructions here => Blue Screen Of Death Posting Instructions.

People will not open .rar file for security reasons!

I hope this helps!

 

[yongnuo]

Sorry about that .
Here you go . Thank you.

 

[Paul Black]

Hi yongnuo,

Sorry about that. Here you go. Thank you.

Not a problem!
The thing is it won't let me view it!

 

[yongnuo]

Is it corrupted after upload ?

Hmmm ok . Lets try this . Now it should open fine .

 

[Paul Black]

Hi yongnuo,

Hmmm ok. Lets try this. Now it should open fine.

No, I still can't open it. Maybe it is just me!

 

[yongnuo]

Hmm maybe it is .
I just downloaded it and it opened fine in winrar and in winzip

Is there anywhere i can just put the dmp file for you to look at it ?

 

[yongnuo]

Ok
I went to another PC with the dmp on a stick and zipped it using Winzip 23 Pro

Finally it should open for you . Thanks , Col

 

[yongnuo]

Please let me know what you discover.
I ran driver verifier to which blue screened on a tap driver .
I'll add the details later. But not even sure if its connected to my problem to be honest

 

[yongnuo]

I guess I'm stuck with it then . Oh well .

 

[Paul Black]

Hi yongnuo,

I still can't open it, very strange indeed!

I will PM axe0 who is our resident BSOD expert and ask him if he will have a look!

I hope this helps!

 

[yongnuo]

Hi Paul
It is odd as I sent the file to a few friends out of curiosity , and all were able to open it with WinZip.
Thanks for helping though , really appreciate it. Col

 

[Paul Black]

Hi yongnuo,

It is odd as I sent the file to a few friends out of curiosity, and all were able to open it with WinZip.

Thanks for helping though, really appreciate it. Col

You are very welcome!

I never usually have trouble opening the files posted on the forum. I will investigate why tomorrow!

I have asked axe0 to have a look for you.

I hope this helps!

 

[axe0]

Hi Yongnuo,

Could you upload a zip from the DM Log Collector, more dumps is mostly what I need and all I have is a single dump.
Also, are you using multiple Anti-virus programs? The single dump looks to be caused by AdGuard whilst your 'My System Specs' state you use Bitdefender.

 

[yongnuo]

Hi axe0
I do have Bitdefender internet security 2019 installed , but Adguard is nothing more than an advert blocker . (pop up blocker)
I have made the DM Zip for you but please note i have reverted back my system to before the crash with True image so i doubt it'll hold much of any use . But what do i know !
Thanks for your help , Col