bad_pool_caller BSOD ?!

DrM · Aug 10, 2016

Hi there,

I have searched a solution to this issue and I came across many websites and forums, but I choose to register here as I think the members here are expert and reliable. the problem started after a while of upgrading the system from Win 8 to Win 10. I did memtest with no problem, also I checked the hard driver with no problem as well. I searched drivers updates from the manufacture (LENOVO) and download all of them. I looked at Event View and bluescreen and the prime suspect is ntoskrnl.exe in all the dump files. howvere, ndis.sys and NETIO.sys appeared frequently and TCPIP.sys also appeared sometimes. I have run sfc/ scannow and the search found corrupted files but was unable to fix them. I have run alsoDISM.exe /Online /Cleanup-image /Scanhealth and

DISM.exe /Online /Cleanup-image /Restorehealth

and it found some warnings and errors. Please find attached the CBS.log and dism.log

Any help will be really appreciated.

Thanks in advance

axe0 · Aug 10, 2016

Hi DrM,

Please follow https://www.sysnative.com/forums/bs...ng-instructions-windows-10-8-1-8-7-vista.html

For Windows Update issues, please post a thread here after reading the Windows Update Posting Instructions

DrM · Aug 10, 2016

Here the files attached. Also the CBS.log after doing SFCFIX.exe.

Any help?

axe0 · Aug 10, 2016

Please remove the IObit programs and use backup/restore point for reverting back the changes they have made.

Code:

Start Menu\Programs\Advanced SystemCare	Public:Start Menu\Programs\Advanced SystemCare	Public
Start Menu\Programs\Driver Booster 3	Public:Start Menu\Programs\Driver Booster 3	Public
Start Menu\Programs\IObit Malware Fighter	Public:Start Menu\Programs\IObit Malware Fighter	Public
Start Menu\Programs\IObit Uninstaller	Public:Start Menu\Programs\IObit Uninstaller	Public

IObit doesn't have a proper reputation not to forget that their software could cause many problems, including (but not excluded to) BSODs and unbootable systems.

I would suggest to use only 1 anti-malware program, at least temporary given that it looks like Emsisoft is causing the crashes.

Code:

 # Child-SP          RetAddr           Call Site
00 ffffd000`8c5a2308 fffff801`35244ceb nt!KeBugCheckEx
01 ffffd000`8c5a2310 fffff800`230b4a20 nt!ExAllocatePoolWithTag+0x100b
02 ffffd000`8c5a23f0 fffff800`23225a8c NETIO! ?? ::FNODOBFM::`string'+0x9bb0
03 ffffd000`8c5a2440 fffff800`23081781 tcpip! ?? ::FNODOBFM::`string'+0x327dc
04 ffffd000`8c5a2490 fffff800`23081507 NETIO!NetioDereferenceNetBufferList+0x161
05 ffffd000`8c5a2510 fffff800`2316d300 NETIO!NetioDereferenceNetBufferListChain+0x367
06 ffffd000`8c5a25e0 fffff800`2316e5b8 tcpip!IppReceiveHeaderBatch+0x4b0
07 ffffd000`8c5a26e0 fffff800`23283b08 tcpip!IppFlcReceivePacketsCore+0x338
08 ffffd000`8c5a2800 fffff800`23594fa6 tcpip!IppInspectInjectReceive+0xf8
09 ffffd000`8c5a2840 fffff801`35079115 fwpkclnt!FwppInjectionStackCallout+0x116
0a ffffd000`8c5a28d0 fffff800`23596886 nt!KeExpandKernelStackAndCalloutInternal+0x85
0b ffffd000`8c5a2920 fffff800`235964dd fwpkclnt!NetioExpandKernelStackAndCallout+0x52
0c ffffd000`8c5a2960 fffff800`23f730f3 fwpkclnt!FwpsInjectTransportReceiveAsync0+0x2ad
0d ffffd000`8c5a2aa0 ffffe000`0a283e40 fwwfp764+0x30f3
0e ffffd000`8c5a2aa8 00000000`00000000 0xffffe000`0a283e40

DrM · Aug 10, 2016

thank you axe0 for your reply. The thing is the IObit programs was installed long time before the issue occurred without causing any problems. Do you think removing the IObit will solve the issue? or do you suggest to keep the IObit and remove Emsisoft? or remove both of them?

DrM · Aug 10, 2016

Also, I don't have a restore point to revert the changes unfortunately!

axe0 · Aug 10, 2016

Do you think removing the IObit will solve the issue?

It'll prevent issues in the future for sure.

or do you suggest to keep the IObit and remove Emsisoft?

If I had to choose between a bad program and one that causes instability, I would go for the one that causes instability. The IObit programs cause problems for years now. All I would have to do with the one program that causes instability is report the problem with additional information and it would be resolved in a matter of time, if a reinstallation wouldn't help.

I wouldn't suggest to keep IObit and remove Emsisoft, I would suggest to remove them both. IObit anti-malware is a bad program, Emsisoft unfortunately looks to be causing instability issues.

Also, I don't have a restore point to revert the changes unfortunately!

You'll want to install the drivers Lenovo provides in that case, simply download all newest drivers and install them one-by-one.

I do not know if multiple AV's on the same system causes problems also counts for AM's, but I would suggest to use 1 Anti-Malware program on the system.

DrM · Aug 10, 2016

I just removed Emsisoft initially and the system crashed again, but now the bluescreen indicates that these files having problem; ntoskrnl.sys as usual and vdrvroot.sys <<< this file appears for the first time now. I will remove all IObit programs and wait for the next crash and inform you with the updates!

DrM · Aug 12, 2016

Hi there,

here is the new CBS.log and DISM.log attached. Please check it if everything is ok!

axe0 · Aug 12, 2016

As I said in this post -> https://www.sysnative.com/forums/bs...d_pool_caller-bsod-post164368.html#post164368
For Windows Update related things, create a new thread in the Windows Update part.

DrM · Aug 12, 2016

axe0 said:
As I said in this post -> https://www.sysnative.com/forums/bs...d_pool_caller-bsod-post164368.html#post164368
For Windows Update related things, create a new thread in the Windows Update part.

it is not meant to rise new issue. it is just the same problem with the progress. I put it here as I couldn't attach files in a private msg, so I posted here for someone to have a look!

axe0 · Aug 12, 2016

it is just the same problem with the progress

It are 2 different problems, BSODs & Windows Update are different problems!

axe0 · Aug 12, 2016

I would prefer it if you don't PM someone to have a look at logs.

This looks fine, but it has often occured that the experts are finding problems somewhere.

Code:

Checking System Update Readiness.



Summary:
Operation: Detect and Repair 
Operation result: 0x0
Last Successful Step: Entire operation completes.
Total Detected Corruption:	0
	CBS Manifest Corruption:	0
	CBS Metadata Corruption:	0
	CSI Manifest Corruption:	0
	CSI Metadata Corruption:	0
	CSI Payload Corruption:	0
Total Repaired Corruption:	0
	CBS Manifest Repaired:	0
	CSI Manifest Repaired:	0
	CSI Payload Repaired:	0
	CSI Store Metadata refreshed:	True

Search

Search

bad_pool_caller BSOD ?!

DrM

Member

Attachments

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

DrM

Member

Attachments

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

DrM

Member

DrM

Member

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

DrM

Member

DrM

Member

Attachments

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

DrM

Member

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

bad_pool_caller BSOD ?!

Member

Attachments

Administrator, BSOD Academy Instructor, Security Analyst

Member

Attachments

Administrator, BSOD Academy Instructor, Security Analyst

Member

Member

Administrator, BSOD Academy Instructor, Security Analyst

Member

Member

Attachments

Administrator, BSOD Academy Instructor, Security Analyst

Member

Administrator, BSOD Academy Instructor, Security Analyst

Administrator, BSOD Academy Instructor, Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst