Windows 10: Driver Related BSOD - Driver Verifier

I recently started a new job and was given a new Dell Laptop. I am having seemingly randomly BSOD issues. Some days it doesn't happen at all and some days it can happen up to ten times. I've got several BSOD errors (mainly CRITICAL PROCESS DIED). I believe it's a driver

related issue. I've tried updating all my drivers and firmware to no avail.

I used the Driver Verifier and immediately got errors with sedfilter.sys and symefasi64.sys. I had to boot into safe mode to turn the verifier off. I tried the verifier without those two enabled and got DRIVER VERIFIER DETECTED VIOLATION.

Help would be greatly appreciated, this issue is a real pain!

Here are the debug files:
Attachment 67485


:)

 

Endless IRQL_NOT_LESS_OR_EQUAL and MEMEORY_MANAGEMENT

The 0xf7 bugcheck dump was interesting as it is quite different from the 0xa bugcheck dumps.

See if Driver Verifier flags any 3rd party drivers -
http://www.sysnative.com/forums/bsod-crashes-kernel-debugging/29-driver-verifier-bsod-related-windows-10-8-1-8-7-vista.html

 

Driver Verifier shows BSOD with "Driver Verifier Detected Violation" but doesn't create dump file

Swap the mouse out.

 

I found this with a Google search:

sedfilter.sys
Description: Related to SED Enhancement Driver from Dell Inc.

More here: What is sedfilter.sys ? | System Explorer

 

Please read How to upload files and edit your post to remove the unnecessary links.

 

Sorry, the link to the dumps had expired. I renewed it, thanks.

On another note, the dump log shows ccsetx64.sys, symefasi64.sys, and IDsvia64.sys as being probable corruptions when I view the dump logs after using driver verifier. These all seem like Symantec drivers. Any recommendations?

 

Thanks for the response. I removed the program responsible for sedfilter.sys but still experience the issues.

I have created a post in the BSOD forums with more info here.

 

Please read How to upload files
Read the tutorials, no link to external party is required.

 

Edited the original post to include the log collector data.

 

Axe0 will guide you there but my brief look at the dumps indicates ccSetx64.sys which belongs to Symantec (Norton).

Wait and see what axe0 has to say but I wouldn't surprised if he asked you to uninstall your Norton AV software and try something else.

Edit: 2nd dump indicates another Norton file: IDSvia64.sys

 

Correct, please try to reinstall Symantec or remove it while troubleshooting.

Please disable driver verifier

• Open an admin command prompt
• Enter "verifier/reset" (without quotes)

Why exactly is driver verifier enabled?

Driver verifier settings:
Code: Verify Flags Level 0x03adefbb STANDARD FLAGS: [X] (0x00000000) Automatic Checks [X] (0x00000001) Special pool [X] (0x00000002) Force IRQL checking [X] (0x00000008) Pool tracking [X] (0x00000010) I/O verification [X] (0x00000020) Deadlock detection [X] (0x00000080) DMA checking [X] (0x00000100) Security checks [X] (0x00000800) Miscellaneous checks [ ] (0x00020000) DDI compliance checking ADDITIONAL FLAGS: [ ] (0x00000004) Randomized low resources simulation [X] (0x00000200) Force pending I/O requests [X] (0x00000400) IRP logging [X] (0x00002000) Invariant MDL checking for stack [X] (0x00004000) Invariant MDL checking for driver [X] (0x00008000) Power framework delay fuzzing [X] (0x00040000) Systematic low resources simulation [X] (0x00080000) DDI compliance checking (additional) [X] (0x00200000) NDIS/WIFI verification [X] (0x00800000) Kernel synchronization delay fuzzing [X] (0x01000000) VM switch verification RESERVED FLAGS (use of these flags is unsupported): [X] (0x00010000) Unused or reserved flag [X] (0x02000000) Unused or reserved flag [X] Indicates flag is enabled[/quote]

 

I enabled driver verifier because no dumps were being generated and I expected a driver was the issue. I need a password from IT to uninstall Symantec though, I'll have to see if I can get the password.

 

Please make sure your pc is configured for small dump files How to configure minidump | Windows 10 tutorial

 

Okay, I uninstalled Symantec and made sure all the drivers weren't running anymore and then followed the steps to configure minidumps. I am still getting the blue screens with just a CRITICAL PROCESS DIED error and no dumps. I'm completely stumped on what to try next.

I tried running the laptop at home rather than work. At both locations I was connected to Ethernet via a Thunderbolt cable adapter and to a monitor via HDMI. However, the laptop was not plugged into a charger at home. I guess I could try at work with no laptop charger plugged in?

 

After all this troubleshooting, it looks like the blue screen only occurs when the laptop is at 100% and the charger is still plugged in. I didn't even think of that as an issue, as I've never heard of it occurring in new laptops. For now, it seems I can prevent the blue screens by unplugging the power before it hits 100%. Does anyone know of a permanent fix? Thanks.