Answered by:
Bad Pool Caller Problem

Question
-
I have been getting the bad pool caller message for a few months now but it has been progressively been getting worse. I wanted to know if you could tell me how to fix it. Below is a link of my minidumps files
https://skydrive.live.com/#cid=18117198FD8BE42F&id=18117198FD8BE42F!110
Monday, June 3, 2013 11:08 AM
Answers
-
Looks like Kaspersky is the cause:
BugCheck C2, {7, 11c1, 420640, fffffa800aafd2b0} *** WARNING: Unable to verify timestamp for klwfp.sys *** ERROR: Module load completed but symbols could not be loaded for klwfp.sys *** WARNING: Unable to verify timestamp for kneps.sys *** ERROR: Module load completed but symbols could not be loaded for kneps.sys GetPointerFromAddress: unable to read from fffff8037316b168 GetUlongFromAddress: unable to read from fffff8037316b1f8 Probably caused by : NETIO.SYS ( NETIO! ?? ::FNODOBFM::`string'+7c9 ) Followup: MachineOwner --------- 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* BAD_POOL_CALLER (c2) The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc. Arguments: Arg1: 0000000000000007, Attempt to free pool which was already freed Arg2: 00000000000011c1, (reserved) Arg3: 0000000000420640, Memory contents of the pool block Arg4: fffffa800aafd2b0, Address of the block of pool being deallocated Debugging Details: ------------------ POOL_ADDRESS: fffffa800aafd2b0 Nonpaged pool FREED_POOL_TAG: ApxD BUGCHECK_STR: 0xc2_7_ApxD CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT PROCESS_NAME: System CURRENT_IRQL: 2 LAST_CONTROL_TRANSFER: from fffff80373085a6a to fffff80372e6d440 STACK_TEXT: nt!KeBugCheckEx nt!ExFreePool NETIO! ?? ::FNODOBFM::`string' tcpip!FlpReturnNetBufferListChain NETIO!NetioDereferenceNetBufferList NETIO!NetioDereferenceNetBufferListChain tcpip!IppReceiveHeaderBatch tcpip!IpFlcReceivePackets tcpip!IppInspectInjectReceive fwpkclnt!FwppInjectionStackCallout nt!KeExpandKernelStackAndCalloutInternal nt!KeExpandKernelStackAndCalloutEx fwpkclnt!FwpsInjectTransportReceiveAsync0 klwfp 0x0 0x0 kneps 0x0 0x0 0x0 0x0 0x0 0x0 klwfp 0x0 0x0 kneps klwfp FAILURE_BUCKET_ID: 0xc2_7_ApxD_NETIO!_??_::FNODOBFM::_string_ Loaded symbol image file: klwfp.sys Image path: \SystemRoot\system32\DRIVERS\klwfp.sys Image name: klwfp.sys Timestamp: Wed Feb 27 09:48:31 2013 Loaded symbol image file: kneps.sys Image path: \SystemRoot\system32\DRIVERS\kneps.sys Image name: kneps.sys Timestamp: Tue Mar 05 10:09:23 2013 (5135B643)
update or remove Kaspersky.
"A programmer is just a tool which converts caffeine into code"
- Proposed as answer by ZigZag3143x Wednesday, June 5, 2013 2:36 AM
- Marked as answer by Arthur Xie Tuesday, June 18, 2013 7:50 AM
Monday, June 3, 2013 6:34 PM
All replies
-
Every dump I looked at is the result of a networking error. Make sure the drivers for your network device(s) is up to date and compatible with Windows 8.Monday, June 3, 2013 5:56 PM
-
Looks like Kaspersky is the cause:
BugCheck C2, {7, 11c1, 420640, fffffa800aafd2b0} *** WARNING: Unable to verify timestamp for klwfp.sys *** ERROR: Module load completed but symbols could not be loaded for klwfp.sys *** WARNING: Unable to verify timestamp for kneps.sys *** ERROR: Module load completed but symbols could not be loaded for kneps.sys GetPointerFromAddress: unable to read from fffff8037316b168 GetUlongFromAddress: unable to read from fffff8037316b1f8 Probably caused by : NETIO.SYS ( NETIO! ?? ::FNODOBFM::`string'+7c9 ) Followup: MachineOwner --------- 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* BAD_POOL_CALLER (c2) The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc. Arguments: Arg1: 0000000000000007, Attempt to free pool which was already freed Arg2: 00000000000011c1, (reserved) Arg3: 0000000000420640, Memory contents of the pool block Arg4: fffffa800aafd2b0, Address of the block of pool being deallocated Debugging Details: ------------------ POOL_ADDRESS: fffffa800aafd2b0 Nonpaged pool FREED_POOL_TAG: ApxD BUGCHECK_STR: 0xc2_7_ApxD CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT PROCESS_NAME: System CURRENT_IRQL: 2 LAST_CONTROL_TRANSFER: from fffff80373085a6a to fffff80372e6d440 STACK_TEXT: nt!KeBugCheckEx nt!ExFreePool NETIO! ?? ::FNODOBFM::`string' tcpip!FlpReturnNetBufferListChain NETIO!NetioDereferenceNetBufferList NETIO!NetioDereferenceNetBufferListChain tcpip!IppReceiveHeaderBatch tcpip!IpFlcReceivePackets tcpip!IppInspectInjectReceive fwpkclnt!FwppInjectionStackCallout nt!KeExpandKernelStackAndCalloutInternal nt!KeExpandKernelStackAndCalloutEx fwpkclnt!FwpsInjectTransportReceiveAsync0 klwfp 0x0 0x0 kneps 0x0 0x0 0x0 0x0 0x0 0x0 klwfp 0x0 0x0 kneps klwfp FAILURE_BUCKET_ID: 0xc2_7_ApxD_NETIO!_??_::FNODOBFM::_string_ Loaded symbol image file: klwfp.sys Image path: \SystemRoot\system32\DRIVERS\klwfp.sys Image name: klwfp.sys Timestamp: Wed Feb 27 09:48:31 2013 Loaded symbol image file: kneps.sys Image path: \SystemRoot\system32\DRIVERS\kneps.sys Image name: kneps.sys Timestamp: Tue Mar 05 10:09:23 2013 (5135B643)
update or remove Kaspersky.
"A programmer is just a tool which converts caffeine into code"
- Proposed as answer by ZigZag3143x Wednesday, June 5, 2013 2:36 AM
- Marked as answer by Arthur Xie Tuesday, June 18, 2013 7:50 AM
Monday, June 3, 2013 6:34 PM