Stop error 0xD5 when you use Network Monitor on Windows 8.1 or Windows Server 2012 R2

Symptoms
Consider the following scenario:
  • You have a computer is running Windows 8.1 or Windows Server 2012 R2.
  • A wireless network adapter (WLAN) or a wired network adapter is disabled and then enabled. Or you run the "DF –PNP Disable and Enable Device Test" Windows Hardware Certification Kit (HCK) test.
  • The Microsoft Network Monitor 3.4 filter driver (NM3.SYS) is loaded.
In this scenario, the computer may encounter the following Stop error:
0xD5 DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL
Cause
When you disable a WLAN network adapter while the OID_DOT11_DELETE_MAC request is being processed, the NM3.SYS filter driver releases the object identifier (also known as OID) request buffer too soon. This causes a Stop error to occur when the network stack references the request buffer. 
Resolution
If you experience this problem, you should uninstall Microsoft Network Monitor. This also removes the NM3.SYS filter driver. Be aware that the Microsoft Network Monitor tool and its NM3.SYS filter driver were deprecated and were replaced by Microsoft Message Analyzer. Message Analyzer uses the new in-box NdisCap filter driver. Message Analyzer can be downloaded from the following Microsoft website: 
More information
More information about the WHCK test is available at the following Microsoft Developer Network (MSDN) website:
Properties

Article ID: 3115861 - Last Review: 11/23/2015 23:38:00 - Revision: 1.0

Windows 8.1, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard

  • kbexpertiseadvanced kbsurveynew kbtshoot KB3115861
Feedback