BAD_POOL_HEADER caused by ntoskrnl.exe and tcpip.sys

emilyan2015 · 19 Aug 2015

Hello,

I have Windows 10 PRO installed. Other important installed applications are Malwarebytes (Antimalware and Antiexploit), Adguard and utorrent.

Last night I have started a big download on utorrent (a 20GB file) and after some minutes I got this BSOD with BAD_POOL_HEADER; the system restarted, and again after some time I got again BSOD. Again and again, for a total of 6 BSODs. After that, I disabled utorrent and both Malwarebytes programs, and since then I have had no crash.

Could you please tell me what is the problem, by looking at the log archive I am uploading, and what should I do to prevent this BSOD (a solution not involving permanently disable of Malwarebytes and utorrent)? If you have any more questions for me, please ask!

Also, I will upload an image taken with BlueScreenView application:
Attachment 32569

Thanks in advance!

EDIT: since problem involves TCP/IP, I think I should mention that I use wireless USB (as I am on a computer), with drivers installed from the same USB, and the site for this USB device is http://www.tenda.cn/uk/product/W326U.html

Boozad · 20 Aug 2015

Are you running MalwareBytes realtime? There are plenty of instances of it showing in your logs.

Code:

BugCheck 19, {20, ffffe001569e5340, ffffe001569e5360, 4020034}

*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )

Code:

ffffd000`233c7768  fffff800`5c2c1ed8 mwac+0x1ed8
ffffd000`233c7770  00000000`00000002
ffffd000`233c7778  fffff800`5c2c6f51 mwac+0x6f51
ffffd000`233c7780  ffffe001`4e74abd0
ffffd000`233c7788  00000000`00000002
ffffd000`233c7790  fffff800`5c2ce7c0 mwac+0xe7c0
ffffd000`233c7798  fffff800`5c2ce420 mwac+0xe420
ffffd000`233c77a0  00000000`00000002
ffffd000`233c77a8  fffff800`5c2c451f mwac+0x451f
ffffd000`233c77b0  fffff800`5c2cec80 mwac+0xec80
ffffd000`233c77b8  fffff800`5c2cec80 mwac+0xec80
ffffd000`233c77c0  00000000`00000002
ffffd000`233c77c8  fffff800`5c2ce7c0 mwac+0xe7c0
ffffd000`233c77d0  ffffe001`4e4419a0
ffffd000`233c77d8  fffff800`5c2c3233 mwac+0x3233
ffffd000`233c77e0  00000000`00000000
ffffd000`233c77e8  00000000`00000000
ffffd000`233c77f0  fffff800`5c2ceca0 mwac+0xeca0
ffffd000`233c77f8  fffff800`5c2c3315 mwac+0x3315
ffffd000`233c7800  fffff800`5c2ceca8 mwac+0xeca8
ffffd000`233c7808  fffff803`51a2cd8b nt!ObReferenceObjectByHandleWithTag+0xbb

If so, just run MBAM on demand to see if the problem stops.

emilyan2015 · 20 Aug 2015

Yes, when I had those BSODs, I was running Malwarebytes realtime. Now, I have disabled it, as a temporary solution, and no crash occured since then (it appears utorrent was not a problem).

Boozad · 20 Aug 2015

Keep us posted.

emilyan2015 · 21 Aug 2015

Ok, I ran a demand scan, and everything was ok. I even reactivated Malwarebytes Antimalware (but uninstalled AntiExploit), and so far I had no problem.
I suspect the problem appears only when I am downloading a huge file with utorrent (and Malwarebytes is realtime) and the download speed goes high (probably around 4-6 MB/s). I will try tonight to check if this is true.

Windows10users · 21 Aug 2015

emilyan2015 said:

Ok, I ran a demand scan, and everything was ok. I even reactivated Malwarebytes Antimalware (but uninstalled AntiExploit), and so far I had no problem.
I suspect the problem appears only when I am downloading a huge file with utorrent (and Malwarebytes is realtime) and the download speed goes high (probably around 4-6 MB/s). I will try tonight to check if this is true.

A week ago one more guy had the same Error. You are right Malware bytes may be the Culprit. The Drivers conflicts on boot causing the issue. I learned it Here Fix "Bad_Pool_Header" Error in Windows 7/8/8.1 & 10 | Fix Errors

If the Issue persists again and again even after disabling Malwarebyte or any other Anti virus other then Windows Defender then you might want to make use of Restore point. Obviously if you had already created it. Hope this helps.

-W10U

emilyan2015 · 22 Aug 2015

Today I started again to download a big file, and everything seemed ok. But, after I entered on the site http://www.gq.com/story/scariest-horror-movies-ever and scrolled for some seconds, the BAD_POOL_HEADER BSOD appeared again. After the restart, I disabled malwarebytes, restarted the download on utorrent, and everything was ok. I again entered this site, and forced some scrolling (very fast scrolling up-down from the head to the bottom of the page) and nothing happened.

So, it appears malwarebytes has an issue with high speed downloads and/or scrolling on sites with much graphic content. I will disable it for now and only run on-demand scans.