[SOLVED] ntoskrnl.exe and wdfilter.sys BSOD

Mar 30, 2021
13
0
10
Hello,

I was having BSOD issues in March, so I replaced my RAM. For almost two months I had no issues, but now they are reoccurring BSOD again.
The first BSOD happened randomly when I was in a zoom call. The second happened when I was updating Apex Legends on steam.

I ran memtest86+ for 10 passes multiple times.
I ran a disk check, SFC scannow, disk store health check many times.
I ran CrystalDiskInfo, said both my drives were healthy (C drive 78%, D drive 100%)

dump file : https://drive.google.com/file/d/1nbP5Oz-qOHFbFmekQjQ4VqeTmRE8Xlxq/view?usp=sharing
three are from March, two are from this month.

PC SPECS:
i3 8100
GTX 1060 3GB
2x8 CORSAIR VENGEANCE LPX 3200MHz DDR4 RAM
SAMSUNG EVO 840 250GB SSD
PLEXTOR PX-512M5 PRO
ASROCK h310m-hdv
Windows Version 10.0.19042 Build 19042
Thanks
 
Solution
Hi, I ran the dump files through the debugger and got the following information: https://jsfiddle.net/9k2sma8t/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.
File information:051021-13234-01.dmp (May 10 2021 - 10:24:53)
Bugcheck:REGISTRY_FILTER_DRIVER_EXCEPTION (135)
Driver warnings:*** WARNING: Unable to verify timestamp for WdFilter.sys
Probably caused by:memory_corruption (Process: Registry)
Uptime:1 Day(s), 20 Hour(s), 25 Min(s), and 42 Sec(s)

File information:
...

gardenman

Splendid
Moderator
Hi, I ran the dump files through the debugger and got the following information: https://jsfiddle.net/9k2sma8t/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.
File information:051021-13234-01.dmp (May 10 2021 - 10:24:53)
Bugcheck:REGISTRY_FILTER_DRIVER_EXCEPTION (135)
Driver warnings:*** WARNING: Unable to verify timestamp for WdFilter.sys
Probably caused by:memory_corruption (Process: Registry)
Uptime:1 Day(s), 20 Hour(s), 25 Min(s), and 42 Sec(s)

File information:050421-13046-01.dmp (May 4 2021 - 09:10:07)
Bugcheck:KERNEL_DATA_INPAGE_ERROR (7A)
Driver warnings:*** WARNING: Unable to verify timestamp for FACEIT.sys
Probably caused by:memory_corruption (Process: svchost.exe)
Uptime:0 Day(s), 16 Hour(s), 35 Min(s), and 27 Sec(s)

File information:033021-12671-01.dmp (Mar 30 2021 - 17:23:18)
Bugcheck:MEMORY_MANAGEMENT (1A)
Probably caused by:memory_corruption (Process: System)
Uptime:0 Day(s), 21 Hour(s), 57 Min(s), and 51 Sec(s)

File information:032421-12875-01.dmp (Mar 24 2021 - 19:55:00)
Bugcheck:MEMORY_MANAGEMENT (1A)
Probably caused by:memory_corruption (Process: MemCompression)
Uptime:0 Day(s), 7 Hour(s), 27 Min(s), and 43 Sec(s)

File information:031921-16000-01.dmp (Mar 19 2021 - 15:02:53)
Bugcheck:UNEXPECTED_STORE_EXCEPTION (154)
Probably caused by:hardware_disk (Process: MemCompression)
Uptime:0 Day(s), 19 Hour(s), 06 Min(s), and 02 Sec(s)
Possible Motherboard page: https://www.asrock.com/mb/intel/h310m-hdv/index.asp
There is a minor BIOS update available for your system. Wait for additional information before deciding to update or not. Important: Verify that I have linked to the correct motherboard. Updating your BIOS can be risky. Never try it when you might lose power (lightning storms, recent power outages, etc).

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.
 
Solution

Colif

Win 11 Master
Moderator
WdFilter.sys = Windows Defender Mini filter driver.
2nd error caused by
Apr 08 2021FACEIT.sysFACEIT Client https://www.faceit.com/

now its possible the actual cause is one of these 2
Feb 06 2014bcmwl63a.sysBroadcom 802 11 Network Adapter Wireless driver http://www.broadcom.com/support/
Oct 03 2017rt640x64.sysRealtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
given their age and purpose
what Wi-Fi card are you using? using a 7 year old driver could cause problems.

If you use ethernet, use the 4th link here under windows to get newer drivers - https://www.realtek.com/en/componen...0-1000m-gigabit-ethernet-pci-express-software