Windows 10: SYSTEM_SERVICE_EXCEPTION (Wdfilter.sys)

This morning my computer started freezing 10mins after login. The kind of freeze where the desktop hangs and moving mouse does nothing and keyboard is unresponsive.

After the freeze it would auto reboot and then repeat this process, freezing again after 10mins.

I'm on Windows 10 Home Insider Preview, Build 17074.rs_prerelease_flt.180116-1539

At first I tried safe mode which seemed to have stopped the crashing, my pc was on for 40mins without issue.

I was going to try a clean boot, disabling non-microsoft services until the problem would stop but this caused the freezing to start on the login screen.

So I did a Windows reset and removed my user profile - the first time I did this still produced the issue, but the 2nd time I did it, I skipped the WiFi connection part of the setup and this stopped the freezing.

So, if I keep my WiFi off, there's no problems. But I tried connecting to my WiFi again and the problem started happening again after an initial 25mins or so.

But this time instead of freezing I get a green screen of death saying SYSTEM_SERVICE_EXCEPTION (WDFILTER.SYS)

I tried sfc /scannow and dism commands but both returned with no corrupt files.

I found a post saying wdfilter is related to Windows defender and suggested doing the following commands, but those didn't stop the freezing either.
Sd config wdfilter start= boot
Sd start wdfilter

I also managed to reproduce the green screen of death by manually attempting to update Windows defender's virus definitions.
When I click the button to update definitions, it loads for a bit but then goes to that green screen.

So I assume there's an issue with windows defender and every 10mins when my connection is available, Windows is trying to update virus definitions?

I tried disabling windows defender protection but it continues attempting to update if my connection is active.

Where should I go from here?

:)

 

SYSTEM_SERVICE_EXCEPTION (wdfilter.sys) and DRIVER_OVERRAN_STACK_BUFFER

I have added the dmp files and system information data to my question! Thanks for the help!

 

SYSTEM_SERVICE_EXCEPTION (wdfilter.sys) and DRIVER_OVERRAN_STACK_BUFFER

Hi,

Thank you for posting your query in Microsoft Community. We are sorry for the inconvenience caused.

I understand that you are getting BSOD with error “SYSTEM_SERVICE_EXCEPTION (wdfilter.sys) and DRIVER_OVERRAN_STACK_BUFFER”.This might be due to the corruption of display drivers

Please answer the below question to assist you better.

What is the make and model of the computer?

I would suggest you to try the below methods and check:

Method 1: Try to boot into Safe Mode with Networking or
Enable low-resolution video.

Press and hold the shift key while clicking on
Restart at the login Screen (Bottom right corner).

1. Select Troubleshootand click on Advanced Options.

2. Select Startup Settingsand click on Restart.

3. After restarting, choose Enable Safe mode with networkingor
Low Resolution Video.

Also check Device Manager and look for Display Adapters.

• If you see 2 items under Display Adapters, disable to integrated video card (e.g. Intel HD 4000 or AMD Radeon HD 4200) and restart. (Try vice versa if it does not work).
  
• If you see 1 item under Display Adapters, rollback the driver or uninstall the display adapter in Device Manager, and enable the option to delete driver software.
  

Method 2: Update the drivers from the manufacturer’s website

Go to the manufacturer’s website and search for the latest drivers available for your computer model and then download and install them on the computer in compatibility mode.

Check the PC or display adapter manufacturer’s site for an updated driver.

Download the Windows 10/Windows 8 drivers from the Manufacturer’s website and install them
in compatibility mode.

1. Right click on the driver setup file and select "Properties".

2. Select "Compatibility" Tab.

3. Make a check mark next to Run this program in "Compatibility mode" and select previous version of Windows supported by the software, from the drop down list.

4. Then click on "Apply" and "Ok" option.

5. Then install the driver.

6. Then restart your computer and check how it works.

Also refer the below Microsoft Article on Troubleshoot Blue Screen Errors

http://windows.microsoft.com/en-us/windows-10/troubleshoot-blue-screen-errors

Hope this information helps. Do contact us for further queries. We will be happy to assist.

 

I’m having the same issue. Also started this morning.

 

I got a similar issue. I've tried everything and debugging everything from checking memory dump files. I got several B(/G)SODs, with STOPs like:

• IRQL_NOT_LESS_OR_EQUAL
• SYSTEM_SERVICE_EXCEPTION
• SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

The most prominent STOP was IRQL_NOT_LESS_OR_EQUAL. The first time my issue started occurring was while I was playing Grand Theft Auto V. I wasn't doing anything different than usual, and I hadn't installed applications in weeks. I do remember postponing Insider updates for another three days the night before, but knowing Microsoft they probably still downloaded some updates or something in the background, likely causing issues. The IRQL_NOT_LESS_OR_EQUAL refers to a broken driver. The computer collected info as usual and rebooted, although I could not get past the Windows start splash screen.

I am able to access Safe Mode but not normal mode, further confirming my suspicion of a driver issue. All BSOD's from that point onward were usually SYSTEM_SERVICE_EXCEPTION or IRQL_NOT_LESS_OR_EQUAL. I attempted using verifier.exe and found two drivers that were causing problems, one to do with VMware workstation and another to do with Malwarebytes. I uninstalled the two programs and manually removed the drivers from \windows\System32\drivers.

This fixed the SYSTEM_SERVICE_EXCEPTION stop code, but I then started getting IRQL_NOT_LESS_OR_EQUAL. This apparently correlates to a corrupt graphics driver, so I booted safe mode and used Display Driver Uninstaller and uninstalled the graphics drivers. I was able to reboot into normal mode, and I was actually able to get to my desktop for a couple seconds before getting an IRQL_NOT_LESS_OR_EQUAL stop code. My theory is that Windows is attempting to automatically install a corrupt graphics driver, as I believe most automatic driver updates are done after the user has logged in. After the first several IRQL_NOT_LESS_OR_EQUAL screens, it went back to having a SYSTEM_SERVICE_EXCEPTION, with WdFilter.sys being the culprit, according to both the details on the screen and the dump files.

I have no idea what to do, as I can't really do anything in normal mode and I can't access Windows Update settings from within the settings app in safe mode. And on top of that, I'm still Anyone who has any ideas: It'd be greatly appreciated.

Edit: OP mentioned using DISM, I'm running that now to see if that makes any difference.

 

Hi Purupuru , jlazerus , z609 ,
For all BSOD problems please open new threads and run the the beta log collector > post a zip into the thread:
log collector v2-beta08.zip
(extract > open)
In case there are any problems running the beta log collector see post #5 in this thread:
DM Log tool problem Solved - Windows 10 Forums

 

Did you try disabling your Internet connection when you get into normal mode?

I'm only getting SYSTEM_SERVICE_EXCEPTION (Wdfilter.sys) after 10mins if I'm connected to the Internet.

I'm not sure how to read the dump files but here are all of mine if anyone can help: Uploadfiles.io - minidumps.zip

 

Mine barely gets to the login screen before it crashes.

 

Thank you for your time, zbook
I've attached the output from that log collector

 

Having the same issue, I really think it might be graphics related... although I haven't made any system modifications in weeks... in fact I barely use my computer at all--I probably should.

I posted a thread about my issue, if you want you can probably follow it. The issues are all related so I assume getting as much information as possible would be beneficial before resorting to a complete re-installation...

 

See BSOD posting instructions:
BSOD - Posting Instructions - Windows 10 Forums
On the bottom of the post please use the beta log collector for each thread.

 

Is it fine that I attached my logs to the post #7 here SYSTEM_SERVICE_EXCEPTION (Wdfilter.sys)

Or do you want me to make a new thread as well?

Some more info: It appears I can use the internet on my pc for longer if I disabled real-time protection. But windows defender says it will enable itself again later but not sure when.

I also added a registry key to disable it but not sure if that helps, though only want to keep it disabled until I can get this problem solved.

There does not appear to be any other source to the problem I'm having, the root of the problem seems to be the attempt to update virus definitions as that's the only thing that I think was causing bsod.

 

Hi Purupuru ,

Welcome to Ten Forums BSOD forum.
There were 5 BSOD mini dump files with bugchecks A and 3B.
Debugging displayed 1 misbehaving hardware driver.
There were problems reported in the logs for 3 additional drivers that failed to load.

For all steps please post images into the thread.
If there are problems posting images please use one drive or drop box share links.


1) Check to see that Windows driver verifier is off.
2) Open administrative command prompt and type or copy and paste:
3) sfc /scannow
4) dism /online /cleanup-image /restorehealth
5) chkdsk /scan
6) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
7) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings > on the advanced tab under startup and recovery > click settings > un-check automatically restart

If there are any BSOD in the future with this setting there will be a BSOD window which will display a bugcheck and sometimes it may display a misbehaving driver. If you see the misbehaving driver please record it and report it in the thread. For any BSOD wait for the % to rise to 100% before rebooting so that there is sufficient time for the dump file to be created.

8) Run memtest86+ version 5.01 for at least 8 passes.
Memtest86+ - Advanced Memory Diagnostic Tool
This may take hours so plan to run it overnight.
a) Please make sure you use the Memtest86+ version 5.01 with the link below.
Memtest86+ - Advanced Memory Diagnostic Tool
The testing is done not by time but by passes.
The more passes the better.
There are a significant number of false negatives if fewer than 8 passes are made.
A false negative is a test pass when there is malfunctioning RAM.
There is 16 GB of RAM on the computer.
Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
Just 1 error is a fail and you can abort testing.
Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
b) When Memtest86+ version 5.01 has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
Memory problems. - Microsoft Community
MemTest86+ - Test RAM Windows 10 Tutorials

9) uninstall the Nvidia GPU driver using DDU (display driver uninstaller)
10) re-install the Nvidia GPU driver from the Nvidia website
11) make sure that you check the clean install box and if available install the physx driver.
Display Driver Uninstaller Download version 17.0.8.2 (or a newer version if available)
Display Driver Uninstaller: How to use - Windows 7 Help Forums
NVIDIA
Download Display Driver Uninstaller - MajorGeeks

12) Open device manager > click view > show hidden devices > expand all rows > look for any row that displays a yellow triangle with a black exclamation mark or unknown device > post an image into the thread

13) Update these drivers:
a) intcazaudaddservice Service for Realtek HD Audio (WDM) c:\windows\system32\drivers\rtkvhd64.sys
b) nvhda Service for NVIDIA High Definition Audio Driver c:\windows\system32\drivers\nvhda64v.sys
c) ctaud2k Creative Audio Driver (WDM) c:\windows\system32\drivers\ctaud2k.sys
Updating a driver. - Microsoft Community

c:\windows\system32\drivers\nvhda64v.sys (1.3.36.6, 229.91 KB (235,432 bytes), 19/02/2018 00:48)
c:\windows\system32\drivers\ctaud2k.sys (6.0.240.8, 686.90 KB (703,384 bytes), 28/02/2014 22:19)
c:\windows\system32\drivers\ctaud2k.sys (6.0.240.8, 686.90 KB (703,384 bytes), 28/02/2014 22:19)

14) The BIOS: BIOS Version/Date American Megatrends Inc. 1208, 18/04/2012
Check to upgrade the BIOS to the most up to date version:
Version 1604
2012/10/242.29 MBytes
SABERTOOTH 990FX BIOS 1604
1.Improve system stability.
2.Support new CPUs. Please refer to our website at: Official Support | ASUS USA
SABERTOOTH 990FX Driver & Tools | Motherboards | ASUS Global


Code: 04/04/2018 23:03 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff805da8980a2 P4: fffff184dc3fb1d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040518-12921-01.dmp \\?\C:\WINDOWS\TEMP\WER-16562-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D43.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D53.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D62.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D82.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_6396e224d6bbb972481251f6435ba2ffd32c74e8_00000000_cab_0bf05e2d Analysis symbol: Rechecking for solution: 0 Report Id: 69175d38-4b2b-47ec-883f-1c29946825d5 Report Status: 2049 Hashed bucket: Cab Guid: 004/04/2018 23:03 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff805da8980a2 P4: fffff184dc3fb1d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040518-12921-01.dmp \\?\C:\WINDOWS\TEMP\WER-16562-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D43.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D53.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D62.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D82.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_6396e224d6bbb972481251f6435ba2ffd32c74e8_00000000_033c5d81 Analysis symbol: Rechecking for solution: 0 Report Id: 69175d38-4b2b-47ec-883f-1c29946825d5 Report Status: 4 Hashed bucket: Cab Guid: 005/04/2018 00:59 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff8078a9f80a2 P4: ffff810c499ef1d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040518-39000-01.dmp \\?\C:\WINDOWS\TEMP\WER-45718-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD377.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD463.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD54C.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD906.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_b981b0d597a0773011ddf9507b5ef185f47a417_00000000_cab_03b9d963 Analysis symbol: Rechecking for solution: 0 Report Id: ebefc780-d1ef-4063-b8b7-23015da12668 Report Status: 4 Hashed bucket: Cab Guid: 004/04/2018 22:46 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff809380880a2 P4: ffffbd0f240441d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040418-13171-01.dmp \\?\C:\WINDOWS\TEMP\WER-17140-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5F75.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5F86.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5F94.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5FB5.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_27277f9fc95cfa48c69f285998c7f67c01f41a_00000000_cab_1820605f Analysis symbol: Rechecking for solution: 0 Report Id: 760b54ca-6a78-437e-8ef3-1805a6737cf4 Report Status: 2049 Hashed bucket: Cab Guid: 004/04/2018 22:46 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff809380880a2 P4: ffffbd0f240441d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040418-13171-01.dmp \\?\C:\WINDOWS\TEMP\WER-17140-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5F75.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5F86.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5F94.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5FB5.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_27277f9fc95cfa48c69f285998c7f67c01f41a_00000000_03405fb4 Analysis symbol: Rechecking for solution: 0 Report Id: 760b54ca-6a78-437e-8ef3-1805a6737cf4 Report Status: 4 Hashed bucket: Cab Guid: 004/04/2018 22:01 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80bc5da80a2 P4: ffffaa09c21b71d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040418-11906-01.dmp \\?\C:\WINDOWS\TEMP\WER-23578-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER759D.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER75AE.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER75CC.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER760B.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_23546ee2a787453eacc49d4d6d4d776a17261_00000000_cab_122c76e5 Analysis symbol: Rechecking for solution: 0 Report Id: 77531d6b-bcb7-483b-a390-db02d210744c Report Status: 2049 Hashed bucket: Cab Guid: 004/04/2018 22:01 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80bc5da80a2 P4: ffffaa09c21b71d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040418-11906-01.dmp \\?\C:\WINDOWS\TEMP\WER-23578-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER759D.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER75AE.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER75CC.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER760B.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_23546ee2a787453eacc49d4d6d4d776a17261_00000000_0338760a Analysis symbol: Rechecking for solution: 0 Report Id: 77531d6b-bcb7-483b-a390-db02d210744c Report Status: 4 Hashed bucket: Cab Guid: 004/04/2018 22:35 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80c69e580a2 P4: ffffb80c1ae441d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040418-12250-01.dmp \\?\C:\WINDOWS\TEMP\WER-24484-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER78D9.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER78EA.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7908.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7928.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_873cf83d91be4da08fc3d8e9a320fe214dabb7a2_00000000_cab_1678a7a9 Analysis symbol: Rechecking for solution: 0 Report Id: 8fdf3c67-2db0-4c62-968b-ef031d8d6b41 Report Status: 2049 Hashed bucket: Cab Guid: 004/04/2018 22:13 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 3b P2: c0000005 P3: fffff80c69e580a2 P4: ffffb80c1ae441d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040418-12250-01.dmp \\?\C:\WINDOWS\TEMP\WER-24484-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER78D9.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER78EA.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7908.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7928.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_873cf83d91be4da08fc3d8e9a320fe214dabb7a2_00000000_03247927 Analysis symbol: Rechecking for solution: 0 Report Id: 8fdf3c67-2db0-4c62-968b-ef031d8d6b41 Report Status: 4 Hashed bucket: Cab Guid: 005/04/2018 00:46 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: a P2: 0 P3: 2 P4: 0 P5: fffff801c7c58ccd P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040518-40578-01.dmp \\?\C:\WINDOWS\TEMP\WER-49687-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF9CC.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFB82.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFCE9.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER19D.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_a_25236a341eedb29989da769de69614730635d22_00000000_cab_03aa0257 Analysis symbol: Rechecking for solution: 0 Report Id: b814f7a0-59a8-423e-af6a-b8314c60e02e Report Status: 4 Hashed bucket: Cab Guid: 0[/quote] Code: 05/04/2018 01:19 Windows Error Reporting Fault bucket 0x3B_VRF_WdFilter!MpSendSyncMonitorNotification, type 0 Event Name: BlueScreen Response: Not available Cab Id: 1fb3b6ea-75cb-4593-bb4c-f9eae2563803 Problem signature: P1: 3b P2: c0000005 P3: fffff8078a9f80a2 P4: ffff810c499ef1d0 P5: 0 P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040518-39000-01.dmp \\?\C:\WINDOWS\TEMP\WER-45718-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD377.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD463.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD54C.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD906.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_b981b0d597a0773011ddf9507b5ef185f47a417_00000000_cab_1a849691 Analysis symbol: Rechecking for solution: 0 Report Id: ebefc780-d1ef-4063-b8b7-23015da12668 Report Status: 268435456 Hashed bucket: Cab Guid: 0[/quote] Code: 05/04/2018 01:19 Windows Error Reporting Fault bucket AV_VRF_WdFilter!MpAcquireSendingSyncMonitorNotification, type 0 Event Name: BlueScreen Response: Not available Cab Id: 88daf4d8-1c42-486a-85d5-03be17182c64 Problem signature: P1: a P2: 0 P3: 2 P4: 0 P5: fffff801c7c58ccd P6: 10_0_17074 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\040518-40578-01.dmp \\?\C:\WINDOWS\TEMP\WER-49687-0.sysdata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF9CC.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFB82.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFCE9.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER19D.tmp.txt \\?\C:\Windows\Temp\WER4C2B.tmp.WERDataCollectionStatus.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_a_25236a341eedb29989da769de69614730635d22_00000000_cab_1a845581 Analysis symbol: Rechecking for solution: 0 Report Id: b814f7a0-59a8-423e-af6a-b8314c60e02e Report Status: 268435456 Hashed bucket: Cab Guid: 0[/quote]
Code: Event[836]: Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 2018-04-05T01:21:40.172 Event ID: 219 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-S160KN8 Description: The driver \Driver\ctaud2k failed to load for the device PCI\VEN_1102&DEV_000B&SUBSYS_00431102&REV_04\4&e21b4e0&0&0050.[/quote] Code: Event[837]: Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 2018-04-05T01:21:41.501 Event ID: 219 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-S160KN8 Description: The driver \Driver\NVHDA failed to load for the device HDAUDIO\FUNC_01&VEN_10DE&DEV_0084&SUBSYS_104385A4&REV_1001\5&44edbdb&0&0001.[/quote] Code: Event[838]: Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 2018-04-05T01:21:41.776 Event ID: 219 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-S160KN8 Description: The driver \Driver\IntcAzAudAddService failed to load for the device HDAUDIO\FUNC_01&VEN_10EC&DEV_0892&SUBSYS_10438436&REV_1003\4&1dc8007c&0&0001.[/quote] Code: Name Realtek High Definition AudioManufacturer Realtek Status OK PNP Device ID HDAUDIO\FUNC_01&VEN_10EC&DEV_0892&SUBSYS_10438436&REV_1003\4&1DC8007C&0&0001 Driver c:\windows\system32\drivers\rtkvhd64.sys (6.0.1.8186, 5.56 MB (5,826,560 bytes), 05/03/2018 16:50) Name NVIDIA High Definition Audio Manufacturer NVIDIA Status OK PNP Device ID HDAUDIO\FUNC_01&VEN_10DE&DEV_0084&SUBSYS_104385A4&REV_1001\5&44EDBDB&0&0001 Driver c:\windows\system32\drivers\nvhda64v.sys (1.3.36.6, 229.91 KB (235,432 bytes), 19/02/2018 00:48) Name Creative X-Fi Audio Processor (WDM) Manufacturer Creative Technology, Ltd. Status OK PNP Device ID PCI\VEN_1102&DEV_000B&SUBSYS_00431102&REV_04\4&E21B4E0&0&0050 Memory Address 0xFC200000-0xFC20FFFF Memory Address 0xFC000000-0xFC1FFFFF Memory Address 0xF8000000-0xFBFFFFFF IRQ Channel IRQ 47 Driver c:\windows\system32\drivers\ctaud2k.sys (6.0.240.8, 686.90 KB (703,384 bytes), 28/02/2014 22:19)[/quote]
Code: nvlddmkm.sys Tue Jan 23 16:24:56 2018 (5A67B638)[/quote] Code: Name NVIDIA GeForce GTX 1060 6GB PNP Device ID PCI\VEN_10DE&DEV_1C03&SUBSYS_00000000&REV_A1\4&14E8F4CB&0&0010 Adapter Type GeForce GTX 1060 6GB, NVIDIA compatible Adapter Description NVIDIA GeForce GTX 1060 6GB Adapter RAM (1,048,576) bytes Installed Drivers C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_258f7a4f413a360c\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_258f7a4f413a360c\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_258f7a4f413a360c\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_258f7a4f413a360c\nvldumdx.dll Driver Version 23.21.13.9077 INF File oem69.inf (Section118 section) Colour Planes Not Available Colour Table Entries 4294967296 Resolution 1920 x 1080 x 60 hertz Bits/Pixel 32 Memory Address 0xFD000000-0xFDFFFFFF Memory Address 0xC0000000-0xFFFFFFFF Memory Address 0xD0000000-0xD1FFFFFF I/O Port 0x0000E000-0x0000E07F IRQ Channel IRQ 24 I/O Port 0x000003B0-0x000003DF I/O Port 0x000003C0-0x000003DF Memory Address 0xA0000-0xBFFFF Driver c:\windows\system32\driverstore\filerepository\nv_ref_pubwu.inf_amd64_258f7a4f413a360c\nvlddmkm.sys (23.21.13.9077, 16.68 MB (17,493,832 bytes), 19/02/2018 00:50)[/quote]

 

I had the same after it applied this update. Just got around to dealing with it.
I had to stop Windows Defender via the registry as per this How to permanently disable Windows Defender on Windows 10 | Windows Central
Then it would login and apply the newer updates, also checked other drivers like GPU were updated.
Reboot, renable Windows Defender.
All happy now.

Beware that disabling Defender could let a virus in, so would be wise to run a bootable rootkit and virus scan tool to rule that out before disabling Defender.

MS must have pushed out an update which was incompatible with certain systems so there have been a few discussions of the same issue.
Dangers of running their beta previews.