Solved Random BSOD bad pool caller

hrk9 · Jul 29, 2014

Hello,

I am facing random BSODs since few months. Now they have become more frequent. I tried to use driver Verifier but I couldn't boot after that. I have attached my dump files which i retrieved using SF tool. Please analyse it.
PS.: I think it is due to some issue with WiFi driver as it BSODs sometimes when I start WiFi or open utorrent. I tried refreshing PC and updating Drivers but it didn't help.

Any help would be appreciated.

usasma · Jul 29, 2014

Uninstall Connectify - the version that you are using (cnnctfy2.sys) may have known BSOD issues, it dates from 2011 (before Win8.1 was released) and it was blamed in the latest Driver Verifier enabled memory dump.

The previous memory dump has traces of Kaspersky all over it (but is not directly blamed). So, I looked at your 3rd party drivers and I also found traces of McAfee installed. Only use 1 antivirus and one firewall at a time. They can conflict with each other and cause problems (to include BSOD's).

I suggest uninstalling both Kaspersky and McAfee and seeing if that helps.
Use Windows Defender and the Windows Firewall while testing.
Once the testing is done, feel free to reinstall one (and only one) of the security protection products (Kaspersky or M that you were using. Make sure to get the latest, Win8.1 compatible version from the developer's website.

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Tue Jul 29 00:35:37.940 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072914-14812-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 0:00:58.779[/B]
*** WARNING: Unable to verify timestamp for cnnctfy2.sys
*** ERROR: Module load completed but symbols could not be loaded for cnnctfy2.sys
Probably caused by :[B]cnnctfy2.sys ( cnnctfy2+2396 )[/B]
BugCheck [B]C4, {20003, fffff800f379c250, 0, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C4]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/url]
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments: 
Arg1: 0000000000020003, ID of the 'IrqlDispatch' rule that was violated.
Arg2: fffff800f379c250, A pointer to the string describing the violated rule condition.
Arg3: 0000000000000000, Reserved (unused).
Arg4: 0000000000000000, Reserved (unused).
BUGCHECK_STR:  0xc4_IrqlDispatch_XDV
PROCESS_NAME:  Connectifyd.ex
FAILURE_BUCKET_ID: [B]0xc4_IrqlDispatch_XDV_cnnctfy2+2396[/B]
CPUID:        "Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz"
MaxSpeed:     2500
CurrentSpeed: [B]2494[/B]
  BIOS Version                  A10
  BIOS Release Date             11/04/2013
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 3520
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jul 28 23:59:36.034 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072914-32500-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 21:07:21.808[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
*** WARNING: Unable to verify timestamp for klwfp.sys
*** ERROR: Module load completed but symbols could not be loaded for klwfp.sys
*** WARNING: Unable to verify timestamp for kneps.sys
*** ERROR: Module load completed but symbols could not be loaded for kneps.sys
*** WARNING: Unable to verify timestamp for klflt.sys
*** ERROR: Module load completed but symbols could not be loaded for klflt.sys
Probably caused by :[B]NETIO.SYS ( NETIO!IoctlKfdDeleteIndex+8077 )[/B]
BugCheck [B]C2, {7, 1200, 280001, ffffe0001cbcaaa8}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C2]BAD_POOL_CALLER (c2)[/url]
Arguments: 
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001200, (reserved)
Arg3: 0000000000280001, Memory contents of the pool block
Arg4: ffffe0001cbcaaa8, Address of the block of pool being deallocated
BUGCHECK_STR:  0xc2_7_NDnd
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0xc2_7_NDnd_NETIO!IoctlKfdDeleteIndex[/B]
CPUID:        "Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz"
MaxSpeed:     2500
CurrentSpeed: [B]2494[/B]
  BIOS Version                  A10
  BIOS Release Date             11/04/2013
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 3520
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Tue Jul 29 00:35:37.940 2014 (UTC - 4:00)**************************
[COLOR=RED][B]cnnctfy2.sys            Fri Jun 24 11:29:01 2011 (4E04AD3D)[/B][/COLOR]
CSLFDx64.sys            Mon Mar 19 21:56:09 2012 (4F67E3B9)
TurboB.sys              Wed May 30 16:10:44 2012 (4FC67EC4)
IntcDAud.sys            Tue Jun 19 10:40:51 2012 (4FE08F73)
Apfiltr.sys             Wed Jul 11 10:04:25 2012 (4FFD87E9)
SCDEmu.SYS              Fri Aug 17 00:19:38 2012 (502DC65A)
mfehidk.sys             Tue Jan 15 13:21:15 2013 (50F59E1B)
mfewfpk.sys             Tue Jan 15 13:21:30 2013 (50F59E2A)
mfeavfk.sys             Tue Jan 15 13:22:16 2013 (50F59E58)
mfefirek.sys            Tue Jan 15 13:24:04 2013 (50F59EC4)
btath_bus.sys           Mon Jan 21 04:18:42 2013 (50FD07F2)
klpd.sys                Fri Apr 12 07:34:45 2013 (5167F155)
klim6.sys               Thu Jul 11 03:53:56 2013 (51DE6494)
Rt630x64.sys            Fri Jul 26 03:01:35 2013 (51F21ECF)
iaStorA.sys             Thu Aug  1 21:39:52 2013 (51FB0DE8)
dump_iaStorA.sys        Thu Aug  1 21:39:52 2013 (51FB0DE8)
klmouflt.sys            Thu Aug  8 09:09:08 2013 (52039874)
athwbx.sys              Thu Aug 15 23:13:28 2013 (520D98D8)
TeeDriverx64.sys        Mon Aug 19 13:23:31 2013 (52125493)
intelppm.sys            Thu Aug 22 04:46:35 2013 (5215CFEB)
RtsUStor.sys            Tue Aug 27 02:11:31 2013 (521C4313)
btfilter.sys            Tue Sep  3 06:02:07 2013 (5225B39F)
iwdbus.sys              Thu Sep 26 17:38:04 2013 (5244A93C)
kl1.sys                 Fri Oct 18 05:18:22 2013 (5260FCDE)
kneps.sys               Thu Oct 31 09:45:52 2013 (52725F10)
igdkmd64.sys            Wed Dec 18 15:49:12 2013 (52B20A48)
SmartDefragDriver.sys   Mon Dec 23 05:05:52 2013 (52B80B00)
klkbdflt.sys            Fri Dec 27 08:35:56 2013 (52BD823C)
klwfp.sys               Wed Feb  5 08:33:44 2014 (52F23DB8)
klflt.sys               Sat Mar  1 18:02:12 2014 (531266F4)
klif.sys                Thu Mar  6 11:38:02 2014 (5318A46A)
idmwfp.sys              Sun Jun  8 18:40:54 2014 (5394E676)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jul 28 23:59:36.034 2014 (UTC - 4:00)**************************
mfeapfk.sys             Tue Jan 15 13:21:56 2013 (50F59E44)
[/font]

hrk9 · Aug 1, 2014

Thank you. I uninstalled connectify. No BSOD since 2 days. McAfee was already uninstalled but it has left some residual files and processes which are showing in logs. Will wait for a week before marking this thread as solved.

usasma · Aug 1, 2014

You can remove the McAfee stuff by running the McAfee Consumer Products Removal Tool
Direct download link (always scan a direct download with an antivirus BEFORE opening it!): http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

Solved Random BSOD bad pool caller

hrk9

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

hrk9

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One