Question Driver Detection Violation Error

Jul 25, 2020
2
0
10
0
I been having stability issues and i noticed a few errors in event viewer logs which seemed like a driver issue. so i ran a driver verifier to check errors and it gave me a blue screen which created a memory dump. after reading the dump file im not sure how to go about fixing the issue if its the actual cause .
my specs are :
i7 8700
1080 gtx
Asus G21CN


here is the dump file listed

Loading Dump File [C:\Windows\Minidump\072420-4046-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff80670213000 PsLoadedModuleList = 0xfffff80670e3d310
Debug session time: Fri Jul 24 10:38:59.756 2020 (UTC - 7:00)
System Uptime: 0 days 0:01:02.802
Loading Kernel Symbols
...............................................................
.................................
Loading User Symbols
Loading unloaded module list
..
For analysis of this file, run !analyze -v
0: kd> !analyze -v
***
  • *
  • Bugcheck Analysis *
  • *
***

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
Arg2: fffff800e4778e14, The address in the driver's code where the error was detected.
Arg3: 0000000000000000, Pool Type.
Arg4: 0000000051544c46, Pool Tag (if provided).

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for netfilter21573.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 2

Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-AK0UA87

Key : Analysis.DebugData
Value: CreateObject

Key : Analysis.DebugModel
Value: CreateObject

Key : Analysis.Elapsed.Sec
Value: 4

Key : Analysis.Memory.CommitPeak.Mb
Value: 93

Key : Analysis.System
Value: CreateObject


BUGCHECK_CODE: c4

BUGCHECK_P1: 2000

BUGCHECK_P2: fffff800e4778e14

BUGCHECK_P3: 0

BUGCHECK_P4: 51544c46

BLACKBOXNTFS: 1 (!blackboxntfs)


CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: System

STACK_TEXT:
ffff948dbee073a8 fffff80670bf1e34 : 00000000000000c4 0000000000002000 fffff800e4778e14 0000000000000000 : nt!KeBugCheckEx
ffff948dbee073b0 fffff806707bda95 : fffff80670e25b68 0000000000002000 fffff800e4778e14 0000000000000000 : nt!VerifierBugCheckIfAppropriate+0xe0
ffff948dbee073f0 fffff80670be8df4 : 0000000051544c46 fffff80670e25b68 fffff800e4778e14 00000000001fffff : nt!VfReportIssueWithOptions+0x101
ffff948dbee07440 fffff80670c022fa : 0000000000000000 0000000000000001 0000000000000028 0000000000000000 : nt!VfCheckPoolType+0x90
ffff948dbee07480 fffff800e4778e14 : 0000000000000028 ffff948dbee07600 ffffab8e2f0f8000 fffff80670c00f95 : nt!VerifierExInitializeNPagedLookasideList+0x5a
ffff948dbee07500 0000000000000028 : ffff948dbee07600 ffffab8e2f0f8000 fffff80670c00f95 0000000000000028 : netfilter21573+0x8e14
ffff948dbee07508 ffff948dbee07600 : ffffab8e2f0f8000 fffff80670c00f95 0000000000000028 0000000051544c46 : 0x28
ffff948dbee07510 ffffab8e2f0f8000 : fffff80670c00f95 0000000000000028 0000000051544c46 0000000000000000 : 0xffff948dbee07600
ffff948d
bee07518 fffff80670c00f95 : 0000000000000028 0000000051544c46 0000000000000000 0000000000000000 : 0xffffab8e2f0f8000
ffff948dbee07520 000000000000001f : 0000000000000080 fffff8067062b2eb 0000000000000000 0000000000000000 : nt!VfAllocPoolNotification+0x31
ffff948dbee07550 0000000000000080 : fffff8067062b2eb 0000000000000000 0000000000000000 0000000000000000 : 0x1f
ffff948dbee07558 fffff8067062b2eb : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x80
ffff948dbee07560 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!ExAllocateHeapPool+0x1d443b


SYMBOL_NAME: netfilter21573+8e14

MODULE_NAME: netfilter21573

IMAGE_NAME: netfilter21573.sys

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 8e14

FAILURE_BUCKET_ID: 0xc4_2000_VRFK_netfilter21573!unknown_function

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {31c6cc40-e92a-dd08-3188-2ec1e69ead44}

Followup: MachineOwner

Any Help will be Appreciated !
 

Ralston18

Titan
Moderator
Look in Reliability History for error codes, warnings, or informational events that correspond with the stability problems.

You can use Task Manager and Resource Monitor to observe what your system is doing (or trying to do) when the problems occur.

Try running "sfc /scannow" via the Command Prompt. Windows may find and fix some issue or issues.
 
Jul 25, 2020
2
0
10
0
Look in Reliability History for error codes, warnings, or informational events that correspond with the stability problems.

You can use Task Manager and Resource Monitor to observe what your system is doing (or trying to do) when the problems occur.

Try running "sfc /scannow" via the Command Prompt. Windows may find and fix some issue or issues.
I did the system file checker and it said no integrity violations were found. As for the task manager or resource monitor im not sure what to look for when looking at it. The stability issues that i have are freezing and my usb ports sometimes wont work, mostly freezing tho so i cant do anything until i hard shut it off.
I did find something in the Reliability History but im not sure how to address my findings. It has a bunch of errors . Here is a screenshot of the Errors : How do i Fix t his ?
 

ASK THE COMMUNITY