Windows 10: BSOD ATTEMPTED_WRITE_TO_READONLY_MEMORY error in Windows 10

Hi Guys


I've been banging my heag against a wall here.

So have this strange issue that started a few days ago. Where random computers in our computer labs start blue screening with the error


ATTEMPTED_WRITE_TO_READONLY_MEMORY

What failed: Ntfs.sys


System is configured to access a Citrix Virtual Desktop.

OS config

Windows 10 x64 LTSC

Citrix WEM with transformer configuration version 2012.1
Citrix workspace

Windows Enpoint security configured through SCCM


Hardware

Dell Optiplex 3060

BIOS ver 1.9.1

latest drivers running since January 2021 A12 driver pack


I've been through the dump file and here is the output


ATTEMPTED_WRITE_TO_READONLY_MEMORY be

An attempt was made to write to readonly memory. The guilty driver is on the

stack trace and is typically the current instruction pointer.

When possible, the guilty driver's name Unicode string is printed on

the bugcheck screen and saved in KiBugCheckDriver.

Arguments:

Arg1: fffff8064d2c8eaa, Virtual address for the attempted write.

Arg2: 0900000139eb5021, PTE contents.

Arg3: ffff9a82b241d370, reserved

Arg4: 000000000000000b, reserved





STACK_COMMAND: .trap 0xffff9a82b241d370 ; kb



SYMBOL_NAME: WdFilter+20e00



MODULE_NAME: WdFilter



IMAGE_NAME: WdFilter.sys



BUCKET_ID_FUNC_OFFSET: 20e00


FAILURE_BUCKET_ID: 0xBE_WdFilter!unknown_function

OS_VERSION: 10.0.17763.1

BUILDLAB_STR: rs5_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {ea485a3d-e464-9c5e-72a4-e3093d9814be}




From my initial investigation it points to Windows Defender.

if I check the event log is mentions a failed update for defender. If i repair by installing the missing update the issue persist.. I done windows updates, check for driver updates, hardware diagnostic, memory check all clear.


Anyone else had this issue?

:)

 

BSOD - attempted_write_to_readonly_memory

Hi,

I am in the process of spoofing my Acer Nitro AN515-43 HWID, and every time I attempt to change my HWID (with an application I paid for), I get the BSOD with the stop code attempted_write_to_readonly_memory, with the failure being "peauth.sys".

Is there any way to stop this from happening so I can spoof my HWID without the error code showing up? If not, that's fine.

Link to dump files: dumps

Thanks

 

ATTEMPTED_WRITE_TO_READONLY_MEMORY (vhdmp.sys)

Hi Blobb,

Thank you for posting your query in Microsoft Community.

I understand the inconvenience you are facing currently. Let me help you in resolving the issue.

As of now, I suggest you to follow the steps below and check if that helps.

Bug Check 0xBE:
ATTEMPTED_WRITE_TO_READONLY_MEMORY

Also suggest you refer to the following Microsoft article on
Troubleshoot blue screen errors and check.

Troubleshoot blue screen errors

Reference: Refer to the following Wiki article created by ZigZag3143 (MS - MVP) on
Blue Screen of Death (BSOD).

BSOD Finding and fixing them

Refer to the below Microsoft Help Article about the recovery options in
Windows 10 and check if it helps. It contains the information about the difference between
Reset option and create recovery drive option.

Recovery options in Windows 10

Hope the information helps. Keep us posted on Windows related queries and we will be happy to assist you further.

 

BSOD - Registry Error

Your BSOD code is 0X000000051

Here's the Google search I did for it: https://www.google.com/search?q=0x0...j5.399j0j7&sourceid=chrome&es_sm=122&ie=UTF-8

There is a hotfix available that might help, https://support.microsoft.com/en-us/kb/810558

This thread makes a few good suggestions too: http://www.sevenforums.com/bsod-hel...dows-7-pro-sp1-registry-error-0x00000051.html

+1 to listing your full system specs, OS version, etc. I did only look at your BSOD log file.

Run a Diskchk /R (I know you already ran one, so you can skip this)

Run SFC /SCANNOW

Report back.