I been having stability issues and i noticed a few errors in event viewer logs which seemed like a driver issue. so i ran a driver verifier to check errors and it gave me a blue screen which created a memory dump. after reading the dump file im not sure how to go about fixing the issue if its the actual cause .
my specs are :
i7 8700
1080 gtx
Asus G21CN
here is the dump file listed
Loading Dump File [C:\Windows\Minidump\072420-4046-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff806
Debug session time: Fri Jul 24 10:38:59.756 2020 (UTC - 7:00)
System Uptime: 0 days 0:01:02.802
Loading Kernel Symbols
...............................................................
.................................
Loading User Symbols
Loading unloaded module list
..
For analysis of this file, run !analyze -v
0: kd> !analyze -v
***
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
Arg2: fffff800e4778e14, The address in the driver's code where the error was detected.
Arg3: 0000000000000000, Pool Type.
Arg4: 0000000051544c46, Pool Tag (if provided).
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for netfilter21573.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 2
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-AK0UA87
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 4
Key : Analysis.Memory.CommitPeak.Mb
Value: 93
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: c4
BUGCHECK_P1: 2000
BUGCHECK_P2: fffff800e4778e14
BUGCHECK_P3: 0
BUGCHECK_P4: 51544c46
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
ffff948d
SYMBOL_NAME: netfilter21573+8e14
MODULE_NAME: netfilter21573
IMAGE_NAME: netfilter21573.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 8e14
FAILURE_BUCKET_ID: 0xc4_2000_VRFK_netfilter21573!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {31c6cc40-e92a-dd08-3188-2ec1e69ead44}
Followup: MachineOwner
Any Help will be Appreciated !
my specs are :
i7 8700
1080 gtx
Asus G21CN
here is the dump file listed
Loading Dump File [C:\Windows\Minidump\072420-4046-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff806
70213000 PsLoadedModuleList = 0xfffff806
70e3d310Debug session time: Fri Jul 24 10:38:59.756 2020 (UTC - 7:00)
System Uptime: 0 days 0:01:02.802
Loading Kernel Symbols
...............................................................
.................................
Loading User Symbols
Loading unloaded module list
..
For analysis of this file, run !analyze -v
0: kd> !analyze -v
***
- *
- Bugcheck Analysis *
- *
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
Arg2: fffff800e4778e14, The address in the driver's code where the error was detected.
Arg3: 0000000000000000, Pool Type.
Arg4: 0000000051544c46, Pool Tag (if provided).
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for netfilter21573.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 2
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-AK0UA87
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 4
Key : Analysis.Memory.CommitPeak.Mb
Value: 93
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: c4
BUGCHECK_P1: 2000
BUGCHECK_P2: fffff800e4778e14
BUGCHECK_P3: 0
BUGCHECK_P4: 51544c46
BLACKBOXNTFS: 1 (!blackboxntfs)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
STACK_TEXT:
ffff948d
bee073a8 fffff806
70bf1e34 : 00000000000000c4 00000000
00002000 fffff800e4778e14 00000000
00000000 : nt!KeBugCheckExffff948d
bee073b0 fffff806
707bda95 : fffff80670e25b68 00000000
00002000 fffff800e4778e14 00000000
00000000 : nt!VerifierBugCheckIfAppropriate+0xe0ffff948d
bee073f0 fffff806
70be8df4 : 0000000051544c46 fffff806
70e25b68 fffff800e4778e14 00000000
001fffff : nt!VfReportIssueWithOptions+0x101ffff948d
bee07440 fffff806
70c022fa : 0000000000000000 00000000
00000001 0000000000000028 00000000
00000000 : nt!VfCheckPoolType+0x90ffff948d
bee07480 fffff800
e4778e14 : 0000000000000028 ffff948d
bee07600 ffffab8e2f0f8000 fffff806
70c00f95 : nt!VerifierExInitializeNPagedLookasideList+0x5affff948d
bee07500 00000000
00000028 : ffff948dbee07600 ffffab8e
2f0f8000 fffff80670c00f95 00000000
00000028 : netfilter21573+0x8e14ffff948d
bee07508 ffff948d
bee07600 : ffffab8e2f0f8000 fffff806
70c00f95 0000000000000028 00000000
51544c46 : 0x28ffff948d
bee07510 ffffab8e
2f0f8000 : fffff80670c00f95 00000000
00000028 0000000051544c46 00000000
00000000 : 0xffff948dbee07600
ffff948d
bee07518 fffff80670c00f95 : 00000000
00000028 0000000051544c46 00000000
00000000 0000000000000000 : 0xffffab8e
2f0f8000ffff948d
bee07520 00000000
0000001f : 0000000000000080 fffff806
7062b2eb 0000000000000000 00000000
00000000 : nt!VfAllocPoolNotification+0x31ffff948d
bee07550 00000000
00000080 : fffff8067062b2eb 00000000
00000000 0000000000000000 00000000
00000000 : 0x1fffff948d
bee07558 fffff806
7062b2eb : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : 0x80ffff948d
bee07560 00000000
00000000 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!ExAllocateHeapPool+0x1d443bSYMBOL_NAME: netfilter21573+8e14
MODULE_NAME: netfilter21573
IMAGE_NAME: netfilter21573.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 8e14
FAILURE_BUCKET_ID: 0xc4_2000_VRFK_netfilter21573!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {31c6cc40-e92a-dd08-3188-2ec1e69ead44}
Followup: MachineOwner
Any Help will be Appreciated !