Windows 10: NETIO.SYS/ntoskrnl.exe BSOD error

~4 users at my company experience seemingly random BSODs. Windows Event Logs show that a bugcheck is causing the unexpected shutdowns: 0x0000003B (0x00000000c0000005, 0xfffff801c2770bc0, 0xffffd480a493df40, 0x0000000000000000).

I have ran Windows debugger on the Memory dump file and attached it to this thread as a .txt file. What could be causing this?

We have Bitdefender software AV and a Sonic FW. I have made sure that all device drivers are up to date and have toggled the power-saver settings for ethernet off. I am hoping that you are able to see the system specs from that ZIP file the instructions said to upload. Let me know if you need any more info.

:)

 

BSOD Bad_Pool_Caller Win10 on Dell Inspiron

Repeated bsod when browsing with chrome/firefox/edge on new Dell Inspiron 15-7579 running Windows 10 pro

From searching on the web for info I have reset system, uninstalled McAfee and after further crashes run BlueScreenView

BlueScreenView points to fwpkclnt.sys (fwpkclnt.sys/ndis.sys/NETIO.sys/ntoskrnl.exe)

What do I do with that info?

 

bsod because of netio.sys and ntoskrnl.exe

i have an alienware x51 r2 with upgraded 16 gb ddr3 ram

Minidump attached:

Dropbox - 012118-26468-01.dmp

 

Hi jdaigle ,

Welcome to Ten Forums BSOD forum.

The debugging displayed 2 software drivers.
Were you at any time using Trend Micro products?
What other AV products are/were in use on this computer?

1) Uninstall Bitdefender using the uninstall tool:
Uninstall Bitdefender
2) Turn on Windows defender.
In two weeks if there are no longer any BSOD you can reinstall Bitdefender.
If there are BSOD after reinstalling Bitdefender then find an alternative AV product.
If there are no BSOD after reinstalling Bitdefender you can continue using the AV product.
3) If there are any BSOD please post a new zip into the thread:
BSOD - Posting Instructions - Windows 10 Forums
4) Open administrative command prompt and type or copy and paste:
5) sfc /scannow
6) dism /online /cleanup-image /restorehealth
7) chkdsk /scan
8) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
9) The latest driver updates were December 21,2017. Check to see that all drivers have been updated:
Support for OptiPlex 5040 | Drivers & downloads | Dell US




Code: bdfwfpf Bdfwfpf \??\c:\program files\bitdefender\endpoint security\bdfwfpf.sys Kernel Driver Yes System Running OK Normal No Yes[/quote] Code: tm_filter tm_filter c:\windows\system32\drivers\tm_filter.sys Kernel Driver Yes System Running OK Normal No Yes[/quote] Code: tm_filter tm_filter.sys Mon Jul 10 06:10:50 2017 (596360BA)[/quote] Code: bdfwfpf bdfwfpf.sys Wed May 31 07:19:51 2017 (592EB4E7)[/quote] Code: 12/20/2017 7:09 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff800639f5f6f P4: ffff8284b9155fc0 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-3687-01.dmp \\?\C:\WINDOWS\TEMP\WER-13640-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER40F1.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4100.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4111.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_a0374640eb10d87355f7431c806d5f7538c1ac84_00000000_cab_03804110 Analysis symbol: Rechecking for solution: 0 Report Id: 9aa7d816-fcb2-4d38-a8be-9c2034f25f16 Report Status: 100 Hashed bucket:12/20/2017 7:09 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff800639f5f6f P4: ffff8284b9155fc0 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-3687-01.dmp \\?\C:\WINDOWS\TEMP\WER-13640-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER40F1.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4100.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4111.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_a0374640eb10d87355f7431c806d5f7538c1ac84_00000000_cab_03804110 Analysis symbol: Rechecking for solution: 0 Report Id: 9aa7d816-fcb2-4d38-a8be-9c2034f25f16 Report Status: 4 Hashed bucket: 1/2/2018 3:52 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff801c2770bc0 P4: ffffd480a493df40 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\010218-4890-01.dmp \\?\C:\WINDOWS\TEMP\WER-15875-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4815.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4824.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4854.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_4043cc8491c27fa703a5dca1262b1b063ced7_00000000_cab_03804853 Analysis symbol: Rechecking for solution: 0 Report Id: eabb0c2a-03b1-4d9c-936e-b4643a9de54a Report Status: 100 Hashed bucket: 1/2/2018 3:52 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff801c2770bc0 P4: ffffd480a493df40 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\010218-4890-01.dmp \\?\C:\WINDOWS\TEMP\WER-15875-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4815.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4824.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4854.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_4043cc8491c27fa703a5dca1262b1b063ced7_00000000_cab_03804853 Analysis symbol: Rechecking for solution: 0 Report Id: eabb0c2a-03b1-4d9c-936e-b4643a9de54a Report Status: 4 Hashed bucket: 12/20/2017 5:59 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff808e3150a08 P4: ffff8d0ab2cb5f40 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-4093-01.dmp \\?\C:\WINDOWS\TEMP\WER-14375-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER440D.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER442D.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445D.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_f117eefd697fbb61ed527ffb4f2221c6420cd51_00000000_cab_0384445c Analysis symbol: Rechecking for solution: 0 Report Id: f4e7ed07-9880-4085-8177-4f47e594e3a6 Report Status: 100 Hashed bucket: 12/20/2017 5:59 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff808e3150a08 P4: ffff8d0ab2cb5f40 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-4093-01.dmp \\?\C:\WINDOWS\TEMP\WER-14375-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER440D.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER442D.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445D.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_f117eefd697fbb61ed527ffb4f2221c6420cd51_00000000_cab_0384445c Analysis symbol: Rechecking for solution: 0 Report Id: f4e7ed07-9880-4085-8177-4f47e594e3a6 Report Status: 4 Hashed bucket: 12/20/2017 9:16 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80a7b170bc0 P4: ffff91859c77df00 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-3765-01.dmp \\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44AA.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44B9.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DA.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_c2f1e58458c978f15fbd1d2931d785b34d9210be_00000000_cab_038844d9 Analysis symbol: Rechecking for solution: 0 Report Id: 35c428fc-d2f1-418b-b219-d8d087e919b6 Report Status: 100 Hashed bucket: 12/20/2017 9:15 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80a7b170bc0 P4: ffff91859c77df00 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-3765-01.dmp \\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44AA.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44B9.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DA.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_c2f1e58458c978f15fbd1d2931d785b34d9210be_00000000_cab_038844d9 Analysis symbol: Rechecking for solution: 0 Report Id: 35c428fc-d2f1-418b-b219-d8d087e919b6 Report Status: 4 Hashed bucket: 1/2/2018 7:53 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80dcb5f0bc0 P4: fffffd85d22cdf00 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\010218-3890-01.dmp \\?\C:\WINDOWS\TEMP\WER-14484-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER446B.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER449B.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_15d14f1d9248721238f422d9b27aa1cf6b1d4f7_00000000_cab_037c44aa Analysis symbol: Rechecking for solution: 0 Report Id: 3529f39a-c3cd-4265-a524-fc07305e459b Report Status: 100 Hashed bucket: 1/2/2018 7:52 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80dcb5f0bc0 P4: fffffd85d22cdf00 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\010218-3890-01.dmp \\?\C:\WINDOWS\TEMP\WER-14484-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER446B.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER449B.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_15d14f1d9248721238f422d9b27aa1cf6b1d4f7_00000000_cab_037c44aa Analysis symbol: Rechecking for solution: 0 Report Id: 3529f39a-c3cd-4265-a524-fc07305e459b Report Status: 4 Hashed bucket:[/quote] Code: 1/2/2018 7:57 PM Windows Error Reporting Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0 Event Name: BlueScreen Response: Not available Cab Id: 6e05a421-1deb-47b1-a663-1e99bad24e77 Problem signature: P1: 3b P2: c0000005 P3: fffff80dcb5f0bc0 P4: fffffd85d22cdf00 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\010218-3890-01.dmp \\?\C:\WINDOWS\TEMP\WER-14484-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER446B.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER449B.tmp.txt \\?\C:\Windows\Temp\WERC70A.tmp.WERDataCollectionStatus.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_15d14f1d9248721238f422d9b27aa1cf6b1d4f7_00000000_cab_2bd03f95 Analysis symbol: Rechecking for solution: 0 Report Id: 3529f39a-c3cd-4265-a524-fc07305e459b Report Status: 268435556 Hashed bucket:1/2/2018 3:53 PM Windows Error Reporting Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0 Event Name: BlueScreen Response: Not available Cab Id: 78dcf50a-c630-4e97-9bae-e407fa4df8ba Problem signature: P1: 3b P2: c0000005 P3: fffff801c2770bc0 P4: ffffd480a493df40 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\010218-4890-01.dmp \\?\C:\WINDOWS\TEMP\WER-15875-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4815.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4824.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4854.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_4043cc8491c27fa703a5dca1262b1b063ced7_00000000_cab_1fa0d716 Analysis symbol: Rechecking for solution: 0 Report Id: eabb0c2a-03b1-4d9c-936e-b4643a9de54a Report Status: 268435556 Hashed bucket: 12/20/2017 6:00 PM Windows Error Reporting Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0 Event Name: BlueScreen Response: Not available Cab Id: 79b55b59-9c7d-4fa5-b9cc-cceb8c83e868 Problem signature: P1: 3b P2: c0000005 P3: fffff808e3150a08 P4: ffff8d0ab2cb5f40 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-4093-01.dmp \\?\C:\WINDOWS\TEMP\WER-14375-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER440D.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER442D.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445D.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_f117eefd697fbb61ed527ffb4f2221c6420cd51_00000000_cab_27e0d1d6 Analysis symbol: Rechecking for solution: 0 Report Id: f4e7ed07-9880-4085-8177-4f47e594e3a6 Report Status: 268435556 Hashed bucket: 12/20/2017 9:16 PM Windows Error Reporting Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0 Event Name: BlueScreen Response: Not available Cab Id: 972d6666-f84a-4f9f-9fc4-e124e5433b94 Problem signature: P1: 3b P2: c0000005 P3: fffff80a7b170bc0 P4: ffff91859c77df00 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-3765-01.dmp \\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44AA.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44B9.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DA.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_c2f1e58458c978f15fbd1d2931d785b34d9210be_00000000_cab_1c88d987 Analysis symbol: Rechecking for solution: 0 Report Id: 35c428fc-d2f1-418b-b219-d8d087e919b6 Report Status: 268435556 Hashed bucket: 12/20/2017 7:09 PM Windows Error Reporting Fault bucket 0x3B_netio!StreamProcessCallout, type 0 Event Name: BlueScreen Response: Not available Cab Id: 20c19cd8-a3a6-4f02-a7a5-d57a6fb47524 Problem signature: P1: 3b P2: c0000005 P3: fffff800639f5f6f P4: ffff8284b9155fc0 P5: 0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\122017-3687-01.dmp \\?\C:\WINDOWS\TEMP\WER-13640-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER40F1.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4100.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4111.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_a0374640eb10d87355f7431c806d5f7538c1ac84_00000000_cab_1cc4e38a Analysis symbol: Rechecking for solution: 0 Report Id: 9aa7d816-fcb2-4d38-a8be-9c2034f25f16 Report Status: 268435556 Hashed bucket:[/quote] Code: 1/2/2018 3:40 PM Windows Error Reporting Fault bucket LKD_0x190_win32kbase!GreValidateRgnInDCSurfBounds, type 0 Event Name: LiveKernelEvent Response: Not available Cab Id: c031271b-dd3b-4d89-9b28-1d166bbe1040 Problem signature: P1: 190 P2: 1 P3: fffff9d78270a3c0 P4: fffff9d7803aa000 P5: fffff9d7827e8440 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\LiveKernelReports\win32k.sys\win32k.sys-20180102-1031.dmp \\?\C:\WINDOWS\TEMP\WER-11123093-0.sysdata.xml \\?\C:\WINDOWS\LiveKernelReports\win32k.sys-20180102-1031.dmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC5F9.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC609.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC629.tmp.txt \\?\C:\Windows\Temp\WER161E.tmp.WERDataCollectionStatus.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_190_d841ab7ed2e841cc826f1b3a393619237f6322_00000000_cab_05e825df Analysis symbol: Rechecking for solution: 0 Report Id: 1266645c-d6de-436b-b4d5-a6def21ec6b9 Report Status: 268435456 Hashed bucket:12/20/2017 4:18 PM Windows Error Reporting Fault bucket LKD_0x190_win32kbase!GreValidateRgnInDCSurfBounds, type 0 Event Name: LiveKernelEvent Response: Not available Cab Id: d446c835-5919-4236-b1c2-b802afebd6a9 Problem signature: P1: 190 P2: 1 P3: ffff8e4f4483c010 P4: ffff8e4f403aa000 P5: ffff8e4f427c1dd0 P6: 10_0_16299 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\LiveKernelReports\win32k.sys\win32k.sys-20171220-1053.dmp \\?\C:\WINDOWS\TEMP\WER-67925734-0.sysdata.xml \\?\C:\WINDOWS\LiveKernelReports\win32k.sys-20171220-1053.dmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER85F9.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER85F9.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER861A.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_190_e7b062d4ed5dea8888aa7150c0be62ac855c66b0_00000000_cab_3fa9587b Analysis symbol: Rechecking for solution: 0 Report Id: aa800207-9f27-4587-8c78-998ee66ff281 Report Status: 268435556 Hashed bucket:[/quote] Code: 12/20/2017 10:14 PM Windows Error Reporting Fault bucket , type 0 Event Name: ScriptedDiagFailure Response: Not available Cab Id: 0 Problem signature: P1: Microsoft Corporation.BlueScreenDiagnostic.1.1 P2: Default P3: 1.0.0.0 P4: Default P5: P6: P7: P8: P9: P10: Attached files: \\?\C:\Users\SHAdmin\AppData\Local\Temp\msdtadmin\_6DAEF6DD-1D88-423D-8A8F-BB0892B3A826_\PkgED6E.cab \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREDAE.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREDCC.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREDEC.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_da15eef057dffa683da5341c73ad0cfb08a39b4_00000000_cab_30e7edeb Analysis symbol: Rechecking for solution: 0 Report Id: c9c1e03e-2494-459a-93a9-91afcacfcac3 Report Status: 4 Hashed bucket:12/20/2017 10:17 PM Windows Error Reporting Fault bucket , type 0 Event Name: ScriptedDiagFailure Response: Not available Cab Id: 0 Problem signature: P1: Microsoft Corporation.BlueScreenDiagnostic.1.1 P2: Default P3: 1.0.0.0 P4: Default P5: P6: P7: P8: P9: P10: Attached files: \\?\C:\Users\SHAdmin\AppData\Local\Temp\msdtadmin\_715A33AC-0762-4A0E-BE8E-70B101829816_\Pkg7D60.cab \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DA0.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DA7.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DD6.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_da15eef057dffa683da5341c73ad0cfb08a39b4_00000000_cab_0cbe7dcd Analysis symbol: Rechecking for solution: 0 Report Id: c366e281-90a1-4a2f-94d1-abb6d2bb8c23 Report Status: 4 Hashed bucket: 1/2/2018 4:06 PM Windows Error Reporting Fault bucket , type 0 Event Name: ScriptedDiagFailure Response: Not available Cab Id: 0 Problem signature: P1: Microsoft Corporation.BlueScreenDiagnostic.1.1 P2: Default P3: 1.0.0.0 P4: Default P5: P6: P7: P8: P9: P10: Attached files: \\?\C:\Users\SHAdmin\AppData\Local\Temp\msdtadmin\_BE1BC9F8-3B25-415A-87C1-9B970720AD8B_\Pkg56B1.cab \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER56F0.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER570E.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER573E.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_da15eef057dffa683da5341c73ad0cfb08a39b4_00000000_cab_530c573d Analysis symbol: Rechecking for solution: 0 Report Id: 2d51902b-56e5-4c84-bab7-83307f5c8bc7 Report Status: 4 Hashed bucket:[/quote]

 

Thank you zbook for the quick reply. I checked for updates online for the main drivers (display, audio, network, processor, & firmware) through device manager. I also ran Dell Command Update and found no updates aside from Dell Digital Delivery Application. I have not run a memory test on the machine as the BSOD-event does not seem related to periods of high-load. Also, I know this does not prove anything for this computer, but I ran a memory test on a Dell Latitude 7-series laptop that is experiencing the same BSOD-issue as this user's Optiplex and no errors were found.

Good idea for disabling then re-enabling BitDefender after ~2 weeks. I will pursue this first and provide an update by 01/17/18, or once the error occurs again, whichever occurs first. Did you want #5-8 completed now, or after future BSOD events?

-Jacob

 

Please indicate whether or not the AV product Trend micro was ever in use on the computer.
If you can run steps 4 - 8 and post into the thread they will be useful in evaluating the OS, and drive file system.
If there is any BSOD you can post a new zip into the thread for debugging.
BSOD - Posting Instructions - Windows 10 Forums

Once you have a stable system consider the following steps:
1) backup all files
2) make a backup image using Macrium (free edition)
Macrium Software | Macrium Reflect Free
3) place the backup image onto another drive or into the cloud
4) make a brand new restore point

 

Trend Micro has not been used on this machine before. Here are the sfc / dism / chkdsk results, memory looks clean/healthy:

Microsoft Windows [Version 10.0.16299.125]
(c) 2017 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\WINDOWS\system32>dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool
Version: 10.0.16299.15

Image Version: 10.0.16299.125

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

C:\WINDOWS\system32>chkdsk /scan
The type of the file system is NTFS.
Volume label is OS.

Stage 1: Examining basic file system structure ...
512000 file records processed.
File verification completed.
6819 large file records processed.
0 bad file records processed.

Stage 2: Examining file name linkage ...
3468 reparse records processed.
625716 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered to lost and found.
3468 reparse records processed.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
56859 data files processed.
CHKDSK is verifying Usn Journal...
36416168 USN bytes processed.
Usn Journal verification completed.

Windows has scanned the file system and found no problems.
No further action is required.

236024831 KB total disk space.
160692812 KB in 284858 files.
181696 KB in 56860 indexes.
0 KB in bad sectors.
631491 KB in use by the system.
65536 KB occupied by the log file.
74518832 KB available on disk.

4096 bytes in each allocation unit.
59006207 total allocation units on disk.
18629708 allocation units available on disk.

C:\WINDOWS\system32>​
-------------------------------------------------
The BSOD error occurred previously on 12/20/17 and was resolved until 1/2/18 by updating system drivers through Dell Command Update. I created a restore point before I ran the commands above. Backup then factory reset may be my next avenue if the issue persists.