Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BAD_POOL_HEADER


  • This topic is locked This topic is locked
12 replies to this topic

#1 judyjht

judyjht

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 20 June 2016 - 10:22 AM

I have a brand new Dell Precision 7510 laptop that I got in May 2016 - Windows 10.  It came with Microsoft 365, Kaspersky 2016.  I have only added a couple of programs so far - Quickbooks 2016, Itunes and maybe a couple of others. 

 

Last week a screen popped up saying it had to shutdown and reboot and it showed some "report" that popped up quickly but I have no clue what it said and said for more info search for BAD_POOL_HEADER.  then it rebooted.  An hour or two later it did it again.  Both timed it closed whatever I had open  A day or two later the same thing happened twice. So thee must be a virus or malware or something I need  check out.  Every so often an icon disappears.  Control Panel icon is gone now!  Really annoying.

 

Any help would be greatly appreciated.


Edited by judyjht, 20 June 2016 - 10:25 AM.


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:01:59 AM

Posted 21 June 2016 - 08:59 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your computer should still be under a warranty.

I would return it.

Read about it.
http://www.computerhope.com/issues/ch001142.htm

#3 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 21 June 2016 - 10:09 AM

Oh Geez!!  Just what I need!  Luckily I still have my desktop and older laptop.  I have just booted up this AM and got a message to update the AMD Catalyst Software Suite so I did and it got to 44% done and the got the message about rebooting again with the issue being driver_IRQL_not_less_or_equal. 

 

I have not even had the chance to do any of the original steps in the link you sent me.  Obviously, I would rather fix it than return it because my computer guy that is 5 hours away from me tweaked it up and cleaned off al the junk that always comes with them.  He also set it up so it would look more like XP which I was used to

 

What do you thinl I should do first or now?  It is now booted up and the desktop is showing.  Thanks for the help



#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:01:59 AM

Posted 21 June 2016 - 12:22 PM

lets see what I can find.

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.
===


Please post the logs.

#5 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 21 June 2016 - 01:30 PM

Here you go...........2 files

Attached Files



#6 nasdaq

nasdaq

  • Malware Response Team
  • 40,182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:01:59 AM

Posted 22 June 2016 - 07:15 AM

Nothing found that would indicate some issues.

Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.
 
start


EmptyTemp:
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Make sure you have all the latest drivers.

How to detect vulnerable and out-dated programs using Secunia Personal Software Inspector (PSI)
Follow the instructions on this page.


http://www.bleepingcomputer.com/tutorials/detect-vulnerable-programs-with-secunia-psi/

===

Let me know of any pending issues?

#7 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 22 June 2016 - 10:27 AM

Here you go................I'll do the Secunia now - everything is up to date - except the Sumatra PDF which I have no idea what it is or how it got here..

 

ix result of Farbar Recovery Scan Tool (x64) Version: 20-06-2016 01
Ran by Judy (2016-06-22 10:23:29) Run:1
Running from C:\Users\Judy\Desktop
Loaded Profiles: Judy (Available Profiles: Judy)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start


EmptyTemp:
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
 


Edited by judyjht, 22 June 2016 - 02:23 PM.


#8 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 22 June 2016 - 02:20 PM

It is now 3:00 and it just shut down again and got the same  BAD_POOL_HEADER



#9 nasdaq

nasdaq

  • Malware Response Team
  • 40,182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:01:59 AM

Posted 23 June 2016 - 07:12 AM


I do not see any problems with the Sumatra PDF reader.
Has your copy been compromised?
I do not know.

Not sure if you can remove it via the Control Panel > Programs > Programs and Features applet as I do not see it in your Installed programs lists.
You can possibly delete the folder it's located in.

Should you need a PDF reader you can install the latest version from this site.

http://www.majorgeeks.com/files/details/sumatra_pdf.html

==

Check Dell for the latest drivers for Windows 10.
http://www.dell.com/support/home/us/en/19/Products/?app=drivers

Install any that are suggested.

Keep me posted.

#10 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 24 June 2016 - 05:22 PM

I have been updating all the drivers - there are a lot of them.  Should be done soon.  One of them said not to shut down or disconnect during the installation or it could cause serious issues with the computer so I was afraid it would reboot on its own and really screw everything up.

 

I keep thinking that maybe I  posted this to the wrong forum.  What do you think>


Edited by judyjht, 24 June 2016 - 07:33 PM.


#11 nasdaq

nasdaq

  • Malware Response Team
  • 40,182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:01:59 AM

Posted 25 June 2016 - 07:02 AM

Install all the drivers and will take it from there.

When completed let me know what problem persists.

#12 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:59 AM

Posted 27 June 2016 - 03:31 PM

It seems to be much better now so we can close this case.  Thanks for the help.



#13 nasdaq

nasdaq

  • Malware Response Team
  • 40,182 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:01:59 AM

Posted 04 July 2016 - 07:33 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users