Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD / BAD_POOL_HEADER / Win 10


  • Please log in to reply
3 replies to this topic

#1 LiabilityMan

LiabilityMan

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:53 AM

Posted 04 September 2016 - 07:47 PM

So kinda out of nowhere my PC has recently been BSODing with BAD_POOL_HEADER, seemingly randomly a couple times a week, but getting more and more frequent.

 

I've noticed it primarily happens when playing videos, either through chrome or VLC, though it recently happened when playing a game too.

 

As per the instructions on this site, I have attached the SysnativeFileCollectionApp results, and also ran the Driver Verifier. Unfortunately I wasn't able to get perfmon to complete, it just hung at "Collecting data for 60 seconds".

 

After running Verifier it caused me to get stuck in a DRIVER_VERIFIER_DETECTED_VIOLATION BSOD loop. Using BlueScreenView I saw the "caused by address" was something called networx.sys. Networx is a network utilization monitor program I had running. I uninstalled it but shortly afterwards I got another BSOD, this time caused by "VerifierExt.sys".

 

I have now ran out of ideas on the cause, so I was hoping someone can check out the log files and help me find the culprit.

 

 

Specs:

 

I should mention my CPU is overclocked, but has been since February without any issue and temps never go above 60 under load.

 

· OS - Windows 10
· x86 (32-bit) or x64 ? - 64-bit
· What was original installed OS on system? - Windows 10 installed from scratch
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? - Upgraded license from Win 7
· Age of system (hardware) - 1-5 years old
· Age of OS installation - have you re-installed the OS? - Approx 1 year

· CPU - Intel i5-760 (overclocked to 4GHz)
· Video Card - AMD R9 390
· MotherBoard - (if NOT a laptop) - Asus P7P55D-E
· Power Supply - brand & wattage (skip if laptop) - EVGA 650W


· System Manufacturer - Self built
· Exact model number (if laptop, check label on bottom) - n/a

· Laptop or Desktop? - Desktop

Attached Files



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:53 AM

Posted 06 September 2016 - 03:04 PM

VerifierExt.sys is the verifier driver - stop running Verifier and see if the BSOD's continue.

To do this, open up verifier.exe and select "Delete existing settings", then click on "Finish" and reboot for the changes to take effect.

 

Your UEFI/BIOS (version 1504) dates from 2014.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

C: drive has less than 10% free space.  Windows likes 15% free space in order to perform stuff "behind the scenes" without adversely affecting the system's performance.  Please free up 15% on ALL hard drives (you can get away with 10% on larger drives and won't notice a large performance penalty).  Low free space can cause BSOD's - but the actual amount depends on the files being used by the system.

Please uninstall the SCP Toolkit - I see numerous errors due to in the WER section of the MSINFO32 report.

My records show this for that driver (in case you have both programs installed - uninstall them both):

 

ScpVBus.sys                 Sun May  5 17:31:26 2013 (5186CFAE)
Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus Driver http://forums.pcsx2.net/Thread-XInput-Wrapper-for-DS3-and-Play-com-USB-Dual-DS2-Controller?pid=186161#pid186161
http://www.carrona.org/drivers/driver.php?id=ScpVBus.sys

 

 

MSI Afterburner and Riva Tuner (along with EVGA Precision) are known to cause BSOD's in some Windows systems (it's driver is usually RTCore64.sys).  Please un-install them immediately!

If you're overclocking, please stop the overclock while we're troubleshooting.  Feel free to resume the overclock once the system has been stabilized.

 

Processor may be overclocked!
Expected Frequency:   2800
Actual Frequency:     4013
Overclock Ratio:      1.43321

FYI - the last memory dump actually blames your SCP Toolkit drivers - the VerifierExt.sys was just caught in the middle of the dump.

 

Please uninstall OpenHardwareMonitor.  It's drivers date from 2008

 

 

Analysis:

The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Sun Sep  4 19:40:18.983 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\090416-6687-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.545.amd64fre.th2_release.160802-1857
System Uptime:0 days 1:58:03.675
*** WARNING: Unable to verify timestamp for VerifierExt.sys
*** ERROR: Module load completed but symbols could not be loaded for VerifierExt.sys
*** WARNING: Unable to verify timestamp for ScpVBus.sys
*** ERROR: Module load completed but symbols could not be loaded for ScpVBus.sys
Probably caused by :ScpVBus.sys ( ScpVBus+7287 )
BugCheck C4, {43006, fffff800d7eeedb0, 0, 0}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 0000000000043006, ID of the 'PnpRemove' rule that was violated.
Arg2: fffff800d7eeedb0, A pointer to the string describing the violated rule condition.
Arg3: 0000000000000000, Reserved (unused).
Arg4: 0000000000000000, Reserved (unused).
BUGCHECK_STR:  0xc4_PnpRemove_XDV
PROCESS_NAME:  System
FAILURE_BUCKET_ID: 0xc4_PnpRemove_XDV_VRF_ScpVBus!unknown_function
CPUID:        "Intel® Core™ i5 CPU         760  @ 2.80GHz"
MaxSpeed:     2800
CurrentSpeed: 4013
 
Processor may be overclocked!
Expected Frequency:   2800
Actual Frequency:     4013
Overclock Ratio:      1.43321
 
  BIOS Version                  1504   
  BIOS Release Date             12/14/2010
  Manufacturer                  System manufacturer
  Baseboard Manufacturer        ASUSTeK Computer INC.
  Product Name                  System Product Name
  Baseboard Product             P7P55D-E
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Sep  4 17:28:23.914 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\090416-3656-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.545.amd64fre.th2_release.160802-1857
System Uptime:0 days 0:00:40.606
*** WARNING: Unable to verify timestamp for networx.sys
*** ERROR: Module load completed but symbols could not be loaded for networx.sys
Probably caused by :networx.sys ( networx+13c6 )
BugCheck C4, {f6, 434, ffffe0008b21a080, fffff8011f1213c6}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000434, Handle value being referenced.
Arg3: ffffe0008b21a080, Address of the current process.
Arg4: fffff8011f1213c6, Address inside the driver that is performing the incorrect reference.
BUGCHECK_STR:  0xc4_f6
PROCESS_NAME:  networx.exe
FAILURE_BUCKET_ID: 0xc4_f6_VRF_networx!unknown_function
CPUID:        "Intel® Core™ i5 CPU         760  @ 2.80GHz"
MaxSpeed:     2800
CurrentSpeed: 4013
 
Processor may be overclocked!
Expected Frequency:   2800
Actual Frequency:     4013
Overclock Ratio:      1.43321
 
  BIOS Version                  1504   
  BIOS Release Date             12/14/2010
  Manufacturer                  System manufacturer
  Baseboard Manufacturer        ASUSTeK Computer INC.
  Product Name                  System Product Name
  Baseboard Product             P7P55D-E
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Sep  4 17:27:14.387 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\090416-8375-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.545.amd64fre.th2_release.160802-1857
System Uptime:0 days 0:00:37.078
*** WARNING: Unable to verify timestamp for networx.sys
*** ERROR: Module load completed but symbols could not be loaded for networx.sys
Probably caused by :networx.sys ( networx+13c6 )
BugCheck C4, {f6, 430, ffffe001152bb080, fffff800900413c6}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000430, Handle value being referenced.
Arg3: ffffe001152bb080, Address of the current process.
Arg4: fffff800900413c6, Address inside the driver that is performing the incorrect reference.
BUGCHECK_STR:  0xc4_f6
PROCESS_NAME:  networx.exe
FAILURE_BUCKET_ID: 0xc4_f6_VRF_networx!unknown_function
CPUID:        "Intel® Core™ i5 CPU         760  @ 2.80GHz"
MaxSpeed:     2800
CurrentSpeed: 4013
 
Processor may be overclocked!
Expected Frequency:   2800
Actual Frequency:     4013
Overclock Ratio:      1.43321
 
  BIOS Version                  1504   
  BIOS Release Date             12/14/2010
  Manufacturer                  System manufacturer
  Baseboard Manufacturer        ASUSTeK Computer INC.
  Product Name                  System Product Name
  Baseboard Product             P7P55D-E
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

Spoiler




3rd Party Drivers:

The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Sun Sep  4 19:40:18.983 2016 (UTC - 4:00)**************************
OpenHardwareMonitor.sys     Sat Jul 26 09:29:37 2008 (488B26C1)
libusbK.sys                 Tue Jul  3 22:59:39 2012 (4FF3B19B)
AsIO.sys                    Wed Aug 22 05:54:47 2012 (5034AC67)
cmudaxp.sys                 Wed Oct  3 03:36:12 2012 (506BEAEC)
ASACPI.sys                  Thu Nov  1 21:54:34 2012 (509327DA)
speedfan.sys                Sat Dec 29 15:59:35 2012 (50DF59B7)
ScpVBus.sys                 Sun May  5 17:31:26 2013 (5186CFAE)
viahduaa.sys                Tue Jun 16 04:06:10 2015 (557FD8F2)
rzpnk.sys                   Wed Sep 16 20:16:35 2015 (55FA0663)
rzpmgrk.sys                 Thu Sep 17 14:42:44 2015 (55FB09A4)
intelppm.sys                Thu Oct 29 22:09:51 2015 (5632D16F)
xusb22.sys                  Thu Oct 29 22:41:10 2015 (5632D8C6)
rt640x64.sys                Fri Mar 11 00:57:50 2016 (56E25E5E)
AtihdWT6.sys                Wed Apr 13 19:23:34 2016 (570ED4F6)
IntelHaxm.sys               Sat Jun 11 21:31:48 2016 (575CBB84)
rzendpt.sys                 Wed Jun 15 23:43:23 2016 (5762205B)
rzudd.sys                   Wed Jun 15 23:43:26 2016 (5762205E)
VBoxUSBMon.sys              Tue Jul 12 10:51:31 2016 (578503F3)
VBoxNetAdp6.sys             Tue Jul 12 10:51:31 2016 (578503F3)
VBoxNetLwf.sys              Tue Jul 12 10:51:31 2016 (578503F3)
VBoxDrv.sys                 Tue Jul 12 10:52:04 2016 (57850414)
atikmpag.sys                Tue Aug 30 16:22:24 2016 (57C5EB00)
atikmdag.sys                Tue Aug 30 16:48:01 2016 (57C5F101)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Sep  4 17:28:23.914 2016 (UTC - 4:00)**************************
networx.sys                 Thu Nov  5 14:52:09 2015 (563BB369)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep  2 04:13:33.876 2016 (UTC - 4:00)**************************
atikmpag.sys                Thu Aug 11 04:17:00 2016 (57AC347C)
atikmdag.sys                Thu Aug 11 04:41:55 2016 (57AC3A53)

http://www.carrona.org/drivers/driver.php?id=OpenHardwareMonitor.sys
libusbK.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=AsIO.sys
http://www.carrona.org/drivers/driver.php?id=cmudaxp.sys
http://www.carrona.org/drivers/driver.php?id=ASACPI.sys
http://www.carrona.org/drivers/driver.php?id=speedfan.sys
http://www.carrona.org/drivers/driver.php?id=ScpVBus.sys
http://www.carrona.org/drivers/driver.php?id=viahduaa.sys
http://www.carrona.org/drivers/driver.php?id=rzpnk.sys
http://www.carrona.org/drivers/driver.php?id=rzpmgrk.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=xusb22.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=IntelHaxm.sys
http://www.carrona.org/drivers/driver.php?id=rzendpt.sys
http://www.carrona.org/drivers/driver.php?id=rzudd.sys
http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys
http://www.carrona.org/drivers/driver.php?id=VBoxNetAdp6.sys
http://www.carrona.org/drivers/driver.php?id=VBoxNetLwf.sys
http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=networx.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
 

 


Edited by usasma, 06 September 2016 - 03:05 PM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 LiabilityMan

LiabilityMan
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:53 AM

Posted 08 September 2016 - 01:30 AM

Thank you so much for the analysis!

 

Of course my PC has not had a BSOD since making this post, but I will take your advice with the changes anyway.

 

Out of interest, what tools/programs did you use to analyse the dump files?

 

Thanks again!



#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:53 AM

Posted 08 September 2016 - 10:12 AM

I use the Windows Debugging Tools and the Sysnative BSOD Analysis App available from here:  https://www.sysnative.com/forums/bsod-processing-apps-download-information-discussions/3219-official-update-sysnative-bsod-processing-apps-post158431.html#post158431 (registration may be required).


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users