BSOD after disconnecting CISCO VPN

[Dan]

Hi,

I have Cisco VPN client version 4.6.00.0045 on my computer. For no
apparent reason, after pressing the disconnect a BSOD appears saying
BAD_POOL_HEADER.

The event viewer has this info on it:
The computer has rebooted from a bugcheck. The bugcheck was:
0x00000019 (0x00000020, 0x857b5000, 0x857b55e8, 0x0abd0000). A dump was
saved in: C:\WINDOWS\Minidump\Mini051906-01.dmp.

Any ideas what is happening?
Thanks.
DT.

 

[Maurice N ~ MVP]

See Windows STOP messages at AumHa
http://aumha.org/win5/kbestop.htm

look for link to C2 bad pool caller on right-hand frame

HTH

 

[Dan]

Dont know if this helps to debug, but I ran the debugger on the
minidump and found this:
kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause
of
the problem, and then special pool applied to the suspect tags or the
driver
verifier to a suspect driver.
Arguments:
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 857b5000, The pool entry we were looking for within the page.
Arg3: 857b55e8, The next pool entry.
Arg4: 0abd0000, (reserved)

Debugging Details:
------------------


BUGCHECK_STR: 0x19_20

POOL_ADDRESS: 857b5000

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 8054b741 to 8053331e

STACK_TEXT:
ba3cfd00 8054b741 00000019 00000020 857b5000 nt!KeBugCheckEx+0x1b
ba3cfd50 8054b0b9 857b5008 00000000 85969f08 nt!ExFreePoolWithTag+0x2be
ba3cfd60 f7910036 857b5008 85b18860 ba3cfd98 nt!ExFreePool+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
ba3cfd78 f7632c25 85969e60 00000000 f7627464 simdrv+0x1036
ba3cfd98 f7627baa 85b18860 00000000 8582c7c0
NDIS!ndisMQueuedFinishClose+0x26
ba3cfdac 8057be15 85b18904 00000000 00000000 NDIS!ndisWorkerThread+0x75
ba3cfddc 804fa4da f7627b85 85b18904 00000000
nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
simdrv+1036
f7910036 ?? ???

FAULTING_SOURCE_CODE:


SYMBOL_STACK_INDEX: 3

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: simdrv+1036

MODULE_NAME: simdrv

IMAGE_NAME: simdrv.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3d8067cd

FAILURE_BUCKET_ID: 0x19_20_simdrv+1036

BUCKET_ID: 0x19_20_simdrv+1036

Followup: MachineOwner

ANy ideas?