Windows 10: Microsoft Defender error messages in Event Viewer 7000 and 7001

Windows Security [Microsoft Defender] has started throwing error messages in Event Viewer, in Windows 10 Pro 64-bit, both version 1909 and 2004, apparently in the latest Defender Platform 4.18.2007.8:


Event 7001: “The Windows Defender Antivirus Network Inspection Service service depends on the Windows Defender Antivirus Network Inspection System Driver service which failed to start because of the following error: The supplied user buffer is not valid for the requested operation.”


Event 7000: “The Windows Defender Antivirus Network Inspection System Driver service failed to start due to the following error: The supplied user buffer is not valid for the requested operation.”


The only fix found so far is to disable Core Isolation and Virtualization Based Security, by going to: Windows Security->Device Security->Core Isolation->toggle off memory integrity. Then, on reboot, the above errors stop.


This is discussed in two places:


https://www.tenforums.com/antivirus...r-network-inspection-service-fails-start.html


and


https://answers.microsoft.com/en-us...spection/e3ed244b-6fd1-4a46-9828-1c0ba973dacc


PLEASE GO THERE TO POST - DO NOT POST HERE

​

:)

 

Event ID's lead to BSOD 7001, 7000 & 1000

Since the upgrade to WIN 10 from WIN 7, I have continually gotten these errors following a BSOD. I am not 100% sure what to do to "fix" these errors since they happen quite frequently, sometimes 2 or 3 times a day sometimes things will be fine a a week or
so.

Under the Event Viewer, Windows Logs, System it shows a total of 4,698 errors I have only been focusing on the red ones which are 7001, 7000 and 1000.

Error code for 7001 - The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error: The service cannot be started,
either because it is disabled or because it has no enabled devices associated with it.

Error code for 7000- The VBoxAswDrv service failed to start due to the following error: The system cannot find the path specified.

Error code for 1000 - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0000000000000010, 0x0000000000000002, 0x0000000000000001, 0xfffff803218db924). A dump
was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 139d5ded-2b48-43e5-96cc-1fa3e6a87d06.

Please help, WIN 10 in not the best experience so far :-/

 

Event ID's associated to BSOD 7001, 7000 & 1000


Hi stacchz,

Welcome to the 10forums

Please note, only the red onces in the event logs are errors, any others are information event logs.

For the 7001 event, I would suggest to create a new thread at the General Support forum.
In the BSOD Crashes and Debugging forum we focus on BSODs only, rarely do we also handle restart/shutdown/freeze crashes but usually only when they are mixed with BSODs.

For the 7000 event, the driver 'VBoxAswDrv.sys' is from Avast. I would suggest to download the Avast uninstall tool to get rid if left behinds *Arrow Avast Uninstall Utility | Download aswClear for Avast Removal

For the BSOD event, the last one was on the 22th of previous month, unless you experience new BSODs anytime soon I do not see a reason to worry about it

 

Error in Event Viewer

Hi,



Thank you for writing to Microsoft Community Forums.



As you have mentioned, you have performed a repair installation on the computer and you see Event 508, 510 and 533 in Event Viewer.



I would like to inform that if you see any critical error in Event Viewer, please share the event logs with us to help you with the appropriate troubleshooting steps. Please follow the steps mentioned below to share the event logs:

1. Press Windows + X from the keyboard, select
   Event Viewer.
   
2. Expand Windows Logs from the left pane and select
   Applications.
   
3. Click Filter Current Log from extreme right pane. Then in the new windows check the box beside
   Error and click OK.
   
4. Now, look for a critical Error in the list and note down the message/information from the
   General Tab in the lower section.
   

Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator