Bad pool Thread - Windows Crash RRS feed

  • Question

  • Hi,

    Windows 8  is crashing almost at same time around 7:40 PM IST with Bad_pool_header error message

    crash dump files can be found at:


    Only change that I can remember is I have switched my ISP and using some other internet network now (using wifi).

    Other, I installed Kaspersky, but that I did on 7th Oct and I switched ISP on 10th and from 10th system is crashing.

    Weird thing is, it crashed almost at Same time daily :(.



    Saturday, October 12, 2013 2:35 PM


  • SH2

    These were Related to klwfp.sys Network filtering component from Kaspersky Lab.  I would remove and replace it with MSE (at least to test)

    Kaspersky is a frequent cause of BSOD's.  

    I would remove and replace it with Microsoft Security Essentials AT LEAST TO TEST.



    BugCheck 19, {d, fffffa801138310f, 9b7e21ab3fcf0670, 679b7e21ab3fcf19}
    *** WARNING: Unable to verify timestamp for klwfp.sys
    *** ERROR: Module load completed but symbols could not be loaded for klwfp.sys
    *** WARNING: Unable to verify timestamp for klflt.sys
    *** ERROR: Module load completed but symbols could not be loaded for klflt.sys
    Probably caused by : Pool_Corruption ( nt!ExFreePool+60 )
    Followup: Pool_corruption
    The pool is already corrupt at the time of the current request.
    This may or may not be due to the caller.
    The internal pool links must be walked to figure out a possible cause of
    the problem, and then special pool applied to the suspect tags or the driver
    verifier to a suspect driver.
    Arg1: 000000000000000d, 
    Arg2: fffffa801138310f
    Arg3: 9b7e21ab3fcf0670
    Arg4: 679b7e21ab3fcf19
    Debugging Details:
    BUGCHECK_STR:  0x19_d
    PROCESS_NAME:  System
    LAST_CONTROL_TRANSFER:  from fffff8038807a1f0 to fffff80387e62440
    fffff880`19b4fa38 fffff803`8807a1f0 : 00000000`00000019 00000000`0000000d fffffa80`1138310f 9b7e21ab`3fcf0670 : nt!KeBugCheckEx
    fffff880`19b4fa40 fffff803`88079c4c : fffffa80`00000000 fffffa80`0b5be110 fffffa80`135e50e0 00000000`00000080 : nt!ExFreePool+0x60
    fffff880`19b4fad0 fffff880`1ba0d8c8 : fffffa80`0b5be120 fffff880`17cb8110 fffffa80`135e50e0 00000000`70574c4b : nt!ExFreePoolWithTag+0xaec
    fffff880`19b4fbb0 fffffa80`0b5be120 : fffff880`17cb8110 fffffa80`135e50e0 00000000`70574c4b fffff880`17cb9d60 : klwfp+0x78c8
    fffff880`19b4fbb8 fffff880`17cb8110 : fffffa80`135e50e0 00000000`70574c4b fffff880`17cb9d60 fffff880`17cd1cf1 : 0xfffffa80`0b5be120
    fffff880`19b4fbc0 fffffa80`135e50e0 : 00000000`70574c4b fffff880`17cb9d60 fffff880`17cd1cf1 fffffa80`057920f0 : klflt+0xc110
    fffff880`19b4fbc8 00000000`70574c4b : fffff880`17cb9d60 fffff880`17cd1cf1 fffffa80`057920f0 fffff8a0`0d14f000 : 0xfffffa80`135e50e0
    fffff880`19b4fbd0 fffff880`17cb9d60 : fffff880`17cd1cf1 fffffa80`057920f0 fffff8a0`0d14f000 fffffa80`057a8db0 : 0x70574c4b
    fffff880`19b4fbd8 fffff880`17cd1cf1 : fffffa80`057920f0 fffff8a0`0d14f000 fffffa80`057a8db0 fffffa80`135e50e0 : klflt+0xdd60
    fffff880`19b4fbe0 fffffa80`057920f0 : fffff8a0`0d14f000 fffffa80`057a8db0 fffffa80`135e50e0 00000000`00000001 : klflt+0x25cf1
    fffff880`19b4fbe8 fffff8a0`0d14f000 : fffffa80`057a8db0 fffffa80`135e50e0 00000000`00000001 fffff803`87e34fd9 : 0xfffffa80`057920f0
    fffff880`19b4fbf0 fffffa80`057a8db0 : fffffa80`135e50e0 00000000`00000001 fffff803`87e34fd9 fffffa80`0459a700 : 0xfffff8a0`0d14f000
    fffff880`19b4fbf8 fffffa80`135e50e0 : 00000000`00000001 fffff803`87e34fd9 fffffa80`0459a700 fffff880`17cb9d60 : 0xfffffa80`057a8db0
    fffff880`19b4fc00 00000000`00000001 : fffff803`87e34fd9 fffffa80`0459a700 fffff880`17cb9d60 fffff880`0099ae40 : 0xfffffa80`135e50e0
    fffff880`19b4fc08 fffff803`87e34fd9 : fffffa80`0459a700 fffff880`17cb9d60 fffff880`0099ae40 fffff880`19b4fe70 : 0x1
    fffff880`19b4fc10 fffff803`87ee97e6 : fffff880`0098f180 fffffa80`0459a700 fffff880`0099ae40 fffffa80`036ce040 : nt!PspSystemThreadStartup+0x59
    fffff880`19b4fc60 00000000`00000000 : fffff880`19b50000 fffff880`19b4a000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16

    Wanikiya & Dyami--Team Zigzag

    Saturday, October 12, 2013 4:42 PM