locked
Bad Pool Caller Problem RRS feed

  • Question

  • I have been getting the bad pool caller message for a few months now but it has been progressively been getting worse. I wanted to know if you could tell me how to fix it. Below is a link of my minidumps files

    https://skydrive.live.com/#cid=18117198FD8BE42F&id=18117198FD8BE42F!110

    Monday, June 3, 2013 11:08 AM

Answers

  • Looks like Kaspersky is the cause:

    BugCheck C2, {7, 11c1, 420640, fffffa800aafd2b0}
    
    *** WARNING: Unable to verify timestamp for klwfp.sys
    *** ERROR: Module load completed but symbols could not be loaded for klwfp.sys
    *** WARNING: Unable to verify timestamp for kneps.sys
    *** ERROR: Module load completed but symbols could not be loaded for kneps.sys
    GetPointerFromAddress: unable to read from fffff8037316b168
    GetUlongFromAddress: unable to read from fffff8037316b1f8
    Probably caused by : NETIO.SYS ( NETIO! ?? ::FNODOBFM::`string'+7c9 )
    
    Followup: MachineOwner
    ---------
    
    3: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 0000000000000007, Attempt to free pool which was already freed
    Arg2: 00000000000011c1, (reserved)
    Arg3: 0000000000420640, Memory contents of the pool block
    Arg4: fffffa800aafd2b0, Address of the block of pool being deallocated
    
    Debugging Details:
    ------------------
    
    
    POOL_ADDRESS:  fffffa800aafd2b0 Nonpaged pool
    
    FREED_POOL_TAG:  ApxD
    
    BUGCHECK_STR:  0xc2_7_ApxD
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    PROCESS_NAME:  System
    
    CURRENT_IRQL:  2
    
    LAST_CONTROL_TRANSFER:  from fffff80373085a6a to fffff80372e6d440
    
    STACK_TEXT:  
    nt!KeBugCheckEx
    nt!ExFreePool
    NETIO! ?? ::FNODOBFM::`string'
    tcpip!FlpReturnNetBufferListChain
    NETIO!NetioDereferenceNetBufferList
    NETIO!NetioDereferenceNetBufferListChain
    tcpip!IppReceiveHeaderBatch
    tcpip!IpFlcReceivePackets
    tcpip!IppInspectInjectReceive
    fwpkclnt!FwppInjectionStackCallout
    nt!KeExpandKernelStackAndCalloutInternal
    nt!KeExpandKernelStackAndCalloutEx
    fwpkclnt!FwpsInjectTransportReceiveAsync0
    klwfp
    0x0
    0x0
    kneps
    0x0
    0x0
    0x0
    0x0
    0x0
    0x0
    klwfp
    0x0
    0x0
    kneps
    klwfp
    
    
    FAILURE_BUCKET_ID:  0xc2_7_ApxD_NETIO!_??_::FNODOBFM::_string_
    
    
        Loaded symbol image file: klwfp.sys
        Image path: \SystemRoot\system32\DRIVERS\klwfp.sys
        Image name: klwfp.sys
        Timestamp:        Wed Feb 27 09:48:31 2013 
    
      
        Loaded symbol image file: kneps.sys
        Image path: \SystemRoot\system32\DRIVERS\kneps.sys
        Image name: kneps.sys
        Timestamp:        Tue Mar 05 10:09:23 2013 (5135B643)
    

    update or remove Kaspersky.


    "A programmer is just a tool which converts caffeine into code"

    • Proposed as answer by ZigZag3143x Wednesday, June 5, 2013 2:36 AM
    • Marked as answer by Arthur Xie Tuesday, June 18, 2013 7:50 AM
    Monday, June 3, 2013 6:34 PM

All replies

  • Every dump I looked at is the result of a networking error. Make sure the drivers for your network device(s) is up to date and compatible with Windows 8.
    Monday, June 3, 2013 5:56 PM
  • Looks like Kaspersky is the cause:

    BugCheck C2, {7, 11c1, 420640, fffffa800aafd2b0}
    
    *** WARNING: Unable to verify timestamp for klwfp.sys
    *** ERROR: Module load completed but symbols could not be loaded for klwfp.sys
    *** WARNING: Unable to verify timestamp for kneps.sys
    *** ERROR: Module load completed but symbols could not be loaded for kneps.sys
    GetPointerFromAddress: unable to read from fffff8037316b168
    GetUlongFromAddress: unable to read from fffff8037316b1f8
    Probably caused by : NETIO.SYS ( NETIO! ?? ::FNODOBFM::`string'+7c9 )
    
    Followup: MachineOwner
    ---------
    
    3: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 0000000000000007, Attempt to free pool which was already freed
    Arg2: 00000000000011c1, (reserved)
    Arg3: 0000000000420640, Memory contents of the pool block
    Arg4: fffffa800aafd2b0, Address of the block of pool being deallocated
    
    Debugging Details:
    ------------------
    
    
    POOL_ADDRESS:  fffffa800aafd2b0 Nonpaged pool
    
    FREED_POOL_TAG:  ApxD
    
    BUGCHECK_STR:  0xc2_7_ApxD
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    PROCESS_NAME:  System
    
    CURRENT_IRQL:  2
    
    LAST_CONTROL_TRANSFER:  from fffff80373085a6a to fffff80372e6d440
    
    STACK_TEXT:  
    nt!KeBugCheckEx
    nt!ExFreePool
    NETIO! ?? ::FNODOBFM::`string'
    tcpip!FlpReturnNetBufferListChain
    NETIO!NetioDereferenceNetBufferList
    NETIO!NetioDereferenceNetBufferListChain
    tcpip!IppReceiveHeaderBatch
    tcpip!IpFlcReceivePackets
    tcpip!IppInspectInjectReceive
    fwpkclnt!FwppInjectionStackCallout
    nt!KeExpandKernelStackAndCalloutInternal
    nt!KeExpandKernelStackAndCalloutEx
    fwpkclnt!FwpsInjectTransportReceiveAsync0
    klwfp
    0x0
    0x0
    kneps
    0x0
    0x0
    0x0
    0x0
    0x0
    0x0
    klwfp
    0x0
    0x0
    kneps
    klwfp
    
    
    FAILURE_BUCKET_ID:  0xc2_7_ApxD_NETIO!_??_::FNODOBFM::_string_
    
    
        Loaded symbol image file: klwfp.sys
        Image path: \SystemRoot\system32\DRIVERS\klwfp.sys
        Image name: klwfp.sys
        Timestamp:        Wed Feb 27 09:48:31 2013 
    
      
        Loaded symbol image file: kneps.sys
        Image path: \SystemRoot\system32\DRIVERS\kneps.sys
        Image name: kneps.sys
        Timestamp:        Tue Mar 05 10:09:23 2013 (5135B643)
    

    update or remove Kaspersky.


    "A programmer is just a tool which converts caffeine into code"

    • Proposed as answer by ZigZag3143x Wednesday, June 5, 2013 2:36 AM
    • Marked as answer by Arthur Xie Tuesday, June 18, 2013 7:50 AM
    Monday, June 3, 2013 6:34 PM