Logging off of Windows 7 Creates BSOD

A client I have, on multiple machines, has now got an issue when they "Log Off" everyday the workstation throws a BSOD/Stop Error. I used BlueScreenView to get a details but its the same everytime. To add to the aggravation, there are three KB's that are recommended as issues from searches on this stop error and those KB's are not installed, KB 4088875, 4088881, 4088878. I cannot narrow down this issue and its driving me nuts! I have also attached a timeline for the event viewer that doesn't show any issues leading up to the reboot...Thoughts?

==================================================
Dump File         : 032918-9188-01.dmp
Crash Time        : 3/29/2018 9:40:02 AM
Bug Check String  : SESSION_HAS_VALID_POOL_ON_EXIT
Bug Check Code    : 0x000000ab
Parameter 1       : 00000000`00000001
Parameter 2       : 00000000`00000350
Parameter 3       : 00000000`00000000
Parameter 4       : 00000000`00000001
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+a53a0
File Description  : NT Kernel & System
Product Name      : Microsoft® Windows® Operating System
Company           : Microsoft Corporation
File Version      : 6.1.7601.24059 (win7sp1_ldr_escrow.180308-1637)
Processor         : x64
Crash Address     : ntoskrnl.exe+a53a0
Stack Address 1   :
Stack Address 2   :
Stack Address 3   :
Computer Name     :
Full Path         : C:\Windows\Minidump\032918-9188-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 7601
Dump File Size    : 289,672
Dump File Time    : 3/29/2018 9:41:13 AM
==================================================
LVL 4
James BunchSystems EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

PerarduaadastraCommented:
Can you pinpoint when this issue started? A different update or a driver change might be causing the problem. Is there anything in the event viewer that only appears as a result of the BSOD or an event that occurs just before the BSOD happens? That would help to determine exactly when this began happening.
0
JayDubbCommented:
We started seeing this behavior this week as well.  Same exact code SESSION_HAS_VALID_POOL_ON_EXIT
I have been researching the KB's as well, but so far none of my machines have any of those either.
James are you using Symantec Endpoint Protection? I have read some stuff pointing possibly to AV.
0
JohnBusiness Consultant (Owner)Commented:
Windows 7 is getting updates for the Meltdown threat. In addition to the above, make sure BIOS, Chipset and Video are all update with the newest drivers.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

James BunchSystems EngineerAuthor Commented:
The AV on all of the machines is BitDefender Enterprise. It looks like the start date for the issues in BSV is 3/15/18.

John, what do you mean W7 is getting updates for the "Meltdown" threat? I have also made sure that the OS is fully up to date on a couple and some I haven't made any changes.
0
JohnBusiness Consultant (Owner)Commented:
What I mean is that newest Windows Updates on many / most computers require BIOS updates to work effectively. In some cases, the updates get done without BIOS and don't work properly. So I was suggesting you check this.
0
James BunchSystems EngineerAuthor Commented:
Thank you for the clarification John. I will look at these and report back if they are up to date etc. It may be later this afternoon, they are in production currently and I have to get some time available.
0
James BunchSystems EngineerAuthor Commented:
I have checked the system and the issue still occurs. SFC, rolling back updates, firmware updates etc have no bearing on the systems and its occurring during log off. Any other suggestions?
0
nobusCommented:
post the dmp file for more info plse
since it happens on multiple systems, it can be a GPO rule, or software he uses there - no indications in event viewer either?
did he install/uninstall anything around that date?
0
climbermat89Commented:
Try installing KB4099467.  It seems like this is caused by KB4088875, and KB4099467 is designed to fix this behavior.
0
James BunchSystems EngineerAuthor Commented:
No system changes on any workstations were done at the time. Event viewer didn't help wither regarding the locations. I will look up that KB that climbermat89 is referencing and see if its an option. Will update asap.
0
nobusCommented:
post the dmp file for more info plse
0
JohnBusiness Consultant (Owner)Commented:
Thanks James, and I trust you have made progress.
0
James BunchSystems EngineerAuthor Commented:
On most of the machines, yes. BIOS and Chipset updates helped. I still have one that is being a total pain and I may end up having to reformat it.
0
nobusCommented:
no dmp file is no help !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.