Windows 7 BSOD BAD_POOL_HEADER

Tejas_1

Commendable
Feb 26, 2016
1
0
1,510
I get a BSOD crash once a day. I debugged the minidump and found the following output :

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c4b000 PsLoadedModuleList = 0xfffff800`02e88e50
Debug session time: Fri Feb 26 23:07:42.531 2016 (GMT+6)
System Uptime: 0 days 13:47:44.546
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
.................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {3, fffff80002e4ac40, 0, fffff80002e4ac40}

*** ERROR: Module load completed but symbols could not be loaded for networx.sys
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Probably caused by : Pool_Corruption ( nt!ExFreePool+536 )

Followup: Pool_corruption
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff80002e4ac40, the pool entry being checked.
Arg3: 0000000000000000, the read back flink freelist value (should be the same as 2).
Arg4: fffff80002e4ac40, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------

PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details

BUGCHECK_STR: 0x19_3

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: uTorrent.exe

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from fffff80002deed6f to fffff80002cbcf00

STACK_TEXT:
fffff880`090b9fc8 fffff800`02deed6f : 00000000`00000019 00000000`00000003 fffff800`02e4ac40 00000000`00000000 : nt!KeBugCheckEx
fffff880`090b9fd0 fffff880`01991c37 : fffff880`00000000 00000000`c000000d fffff8a0`02be3a50 fffff8a0`00000000 : nt!ExFreePool+0x536
fffff880`090ba0c0 fffff880`0199bb1a : 00000000`c000000d fffffa80`06d62890 fffffa80`09a17190 fffffa80`05af5600 : tdx!TdxCreateConnection+0x37
fffff880`090ba110 fffff880`019b483a : fffffa80`096884a0 fffff880`090ba1b0 fffffa80`05d83890 00000000`00000000 : tdx!TdxTdiDispatchCreate+0x18a
fffff880`090ba1a0 fffff880`019b4c4d : fffffa80`09a172a8 fffff800`02fbced0 fffffa80`06d626b0 00000000`00000000 : networx+0x183a
fffff880`090ba1d0 fffff880`019be9f0 : 00000000`00000004 fffffa80`070c6b10 fffffa80`05d838c0 fffffa80`09a17190 : networx+0x1c4d
fffff880`090ba200 fffff800`02fbd477 : 00000000`00000004 fffff800`02fbced0 fffffa80`070c6b10 fffffa80`05d83958 : networx+0xb9f0
fffff880`090ba230 fffff800`02fb3764 : fffffa80`06d626b0 00000000`00000000 fffffa80`06848b10 00000000`00000000 : nt!IopParseDevice+0x5a7
fffff880`090ba3c0 fffff800`02fb8876 : fffffa80`06848b10 fffff880`090ba540 fffff880`00000240 fffffa80`05af5600 : nt!ObpLookupObjectName+0x585
fffff880`090ba4c0 fffff800`02fbf587 : 00000000`00000001 00000000`00000002 fffff880`090ba600 00000000`000007ff : nt!ObOpenObjectByName+0x306
fffff880`090ba590 fffff800`02f7f36a : fffffa80`061379f8 00000000`c0100000 00000000`00000000 fffff880`090ba770 : nt!IopCreateFile+0x2b7
fffff880`090ba630 fffff880`02d17d57 : fffffa80`06137950 00000000`00000000 fffffa80`060df0b8 fffffa80`06926c70 : nt!IoCreateFile+0x8a
fffff880`090ba6c0 fffff880`02d08dd0 : fffffa80`060df010 00000000`00000000 00000000`00000000 00000000`00000010 : afd! ?? ::GFJBLGFE::`string'+0x4fbf
fffff880`090ba7f0 fffff800`02fd53a7 : fffffa80`060df010 fffffa80`097f3900 00000000`00000000 00000000`00000000 : afd!AfdConnect+0x530
fffff880`090ba9d0 fffff800`02fd5c06 : fffff880`090babb8 00000000`00000000 00000000`00000001 00000000`035275d8 : nt!IopXxxControlFile+0x607
fffff880`090bab00 fffff800`02cbc153 : fffff880`090bac60 fffffa80`098513d0 fffff880`090babb8 00000000`0291f101 : nt!NtDeviceIoControlFile+0x56
fffff880`090bab70 00000000`74a62dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0291f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x74a62dd9


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExFreePool+536
fffff800`02deed6f cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!ExFreePool+536

FOLLOWUP_NAME: Pool_corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID: X64_0x19_3_nt!ExFreePool+536

BUCKET_ID: X64_0x19_3_nt!ExFreePool+536

Followup: Pool_corruption
---------

I'm guessing this issue is caused by utorrent only? Could anyone please let me know? I use to get some of the free music bundles they offer but I can get rid of it easily.