crash for wdfilter.sys

einstein1969 · May 17, 2022

zbook said:
If the computer cannot boot Sea Tools:

a) try another flash drive
b) try other USB ports
c) make sure secure boot is off
c) make sure ultra fast boot is off
d) make sure that fast boot is off

See if it can boot Ubuntu and / or Memtest86.

Create a bootable USB stick with Rufus on Windows | Ubuntu

Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.

ubuntu.com

MemTest86 - Official Site of the x86 Memory Testing Tool

MemTest86 is the original self booting memory testing software for x86 and ARM computers. Supporting both BIOS and UEFI, with options to boot from USB.

www.memtest86.com

Before trying another flash drive I wanted to tell you that I downloaded seatools "for windows" and installed it, is that okay?
I am attaching a picture it is taking 10 hours or more to complete the test.

Ubuntu starts quietly.

Seatools for USB does the boot and starts the initial screen of choice but stops while loading the extensions. I tried to disable secure boot and fast boot but it still doesn't start. I have tried all possible combinations and in one of these combinations it also gave me an error related to the graphics card and it freezes on lack of extensions.

zbook · May 17, 2022

The image displayed 68%.
Please report the final results.

What happens now when you boot Windows?

What are the status of the important files?

Run HD Tune: (free or trial version)

HD Tune website

HD Tune

www.hdtune.com

Post images or share links for results on these tabs:
a) Health
b) Benchmark
c) Full error scan

The full error scan can run in normal boot or safe mode and can be performed overnight.

einstein1969 · May 17, 2022

The seatests test report no problem.

Now the windows boot is normal but I have an excessive consumption of the cpu.

I don't have enough space to back up the entire disk, I'd rather not delete some partitions. I would try an "on-place upgrade".

zbook · May 17, 2022

Please run the V2 log collector and upload results into this thread.

If there are any problems uploading results please use share links.

Add, Remove, and Change Display Language in Windows 10

How to Add or Remove Language Packs and Change Display Language in Windows 10

www.tenforums.com

Change Display Language in Windows 10

How to Change Display Language in Windows 10

www.tenforums.com

einstein1969 · May 18, 2022

i tried memtest86, it boots normally and ran tonight.
It seems to have passed.
The cpu temperature is high because I have to change the thermal paste.

zbook · May 18, 2022

When available please upload V2 results.

If there are any problems uploading please use share links (one drive, drop box, or google drive).

einstein1969 · May 18, 2022

A strange thing happened to me, but it is very serious. On edge I had a lot of open tabs, now they have all disappeared and only the seatools one is left. I am very worried. Please help me to recover the open tabs. I don't wish it was the language change to run v2.

zbook · May 18, 2022

1) The free space on C: 14.86 GB

Increase the free space on C: so that it is > 30 GB

Free Up Drive Space in Windows 10

How to Free Up Drive Space in Windows 10

www.tenforums.com

2) The RAM modules are mismatched.

Please replace the RAM so that they are on the Qualified Vendor List (QVL) and have matching speed.

3) After increasing the free space on C: post a new image of disk management

a) Widen these rows: disk 0, disk 1 ,disk 2, etc > make sure that no characters are cut off

b) Widen these columns: Status and Volume > make sure that no characters are cut off

How to Post a Screenshot of Disk Management

How to Post a Screenshot of Disk Management at Ten Forums

www.tenforums.com

4) Run:

a) https://www.tenforums.com/attachmen...-files-use-bsod-debugging-tuneup_plus_log.bat

b) https://www.tenforums.com/attachmen...atch-files-use-bsod-debugging-diskparinfo.bat

c) https://www.tenforums.com/attachmen...od-debugging-gather_additional_dump_files.bat

Post share links into this thread using one drive, drop box, or google drive.

5) When was Windows Driver Verifier started?

The mini dump file was dated 05/13/2022
Windows driver verifier is still on ~5 days.

6) How come running WDV was not commented in this thread?
Had you forgotten that it was running and is still running?

7) Turn off WDV

8) Run:

HD Tune: (free or trial version) (all drives)

HD Tune website

HD Tune

www.hdtune.com

Post images or share links for results on these tabs:
a) Health
b)Benchmark
c) Full error scan

HD Sentinel: (free or trial version)

Hard Disk Sentinel - HDD health and temperature monitoring

Monitoring hard disk health and temperature. Test and repair HDD problems, predict disk failure.

www.hdsentinel.com

Post images for results on these tabs:
a) Overview
b) Temperature
c) SMART

9) Open task manager (ctrl + alt + del) > click performance tab > click memory > post an image of the whole box into this thread

Rich (BB code):

Location     : DIMM 0
BankLabel    : CHANNEL B
Manufacturer :
MemoryType   : DDR4
FormFactor   : SODIMM
Capacity     : 8GB
Speed        : 2400
Serial       : E62C115B
PartNumber   : CT8G4SFRA32A.M8FRS
ECC          : False
TypeDetail   : {Synchronous, Unbuffered (Unregistered)}

Location     : DIMM 1
BankLabel    : CHANNEL B
Manufacturer : Samsung
MemoryType   : DDR4
FormFactor   : SODIMM
Capacity     : 8GB
Speed        : 2133
Serial       : 00000000
PartNumber   : K4A8G085WB-BCPB   
ECC          : False
TypeDetail   : {Synchronous, Unbuffered (Unregistered)}

Code:

Windows RE status:         Disabled

einstein1969 · May 19, 2022

@zbook
The system has become extremely slow. Answering in the forum has also become a challenge. It will take me a long time to complete all the steps you have put in and I am getting extremely nervous as it requires a lot of patience which I don't have.
If we could solve this slowness problem first, it would be better.

In the meantime I have removed the 2400mhz RAM.

For the disk space I found enough 4.4vGB space used in the "system volume information" folder. How do I recover this space?

einstein1969 · May 19, 2022

The system protection (system restore) is already deactivated, but it uses space...

glasskuter · May 19, 2022

You have a lot more serious things going on here than closed tabs.
By default, Firefox can re-open the last 3* closed windows. There are a few different ways to do that after session restore (or during your running session). Either:

"3-bar" menu button > Library > History > Recently Closed Windows
"Library" toolbar button > History > Recently Closed Windows
(menu bar) History > Recently Closed Windows
Ctrl+Shift+n

In Edge- How to Reopen Recently Closed Tabs in Edge Computer?

zbook · May 19, 2022

Disk management displayed only 58 GB on the Windows partition.

Tree size displayed approximately 24 GB for Windows leaving 34 GB.

Program files 10 GB leaves 24 GB.

Users folders / files consumes 7 GB.

Over time program files and users grow in size.

Windows needs space to handle the growth of the paging and hibernation files, have room to perform in place upgrade repairs, chkdsk repairs, create dump files, etc.

It's best to have a larger size partition for Windows so that there is a minimum of 25 - 30 GB free space.

Please make sure that WDV is off as it stress drivers and CPU.

Enable and Disable Driver Verifier in Windows 10

How to Enable and Disable Driver Verifier in Windows 10

www.tenforums.com

When available please update the progress with the scripts and drive tests in the prior post.

The HD Tune full error scan can run overnight.
The HD Sentinel results are instantaneous.

einstein1969 · May 20, 2022

glasskuter said:
You have a lot more serious things going on here than closed tabs.
By default, Firefox can re-open the last 3* closed windows. There are a few different ways to do that after session restore (or during your running session). Either:

"3-bar" menu button > Library > History > Recently Closed Windows

"Library" toolbar button > History > Recently Closed Windows

(menu bar) History > Recently Closed Windows

Ctrl+Shift+n

In Edge- How to Reopen Recently Closed Tabs in Edge Computer?

I tried in all the ways you described and those of the link. Unfortunately they are gone. I think I've definitely lost them. I make up my mind. Now I have to focus on excessive CPU usage. The system is thus unusable. Thank you for your support.

einstein1969 · May 20, 2022

zbook said:
Disk management displayed only 58 GB on the Windows partition.

Tree size displayed approximately 24 GB for Windows leaving 34 GB.

Program files 10 GB leaves 24 GB.

Users folders / files consumes 7 GB.

Over time program files and users grow in size.

Windows needs space to handle the growth of the paging and hibernation files, have room to perform in place upgrade repairs, chkdsk repairs, create dump files, etc.

It's best to have a larger size partition for Windows so that there is a minimum of 25 - 30 GB free space.

Please make sure that WDV is off as it stress drivers and CPU.

Enable and Disable Driver Verifier in Windows 10

How to Enable and Disable Driver Verifier in Windows 10

www.tenforums.com

When available please update the progress with the scripts and drive tests in the prior post.

The HD Tune full error scan can run overnight.
The HD Sentinel results are instantaneous.

tree size has a bug.

if we look at this screen the counts do not add up.

Also there is a 5gb dump file. So to the 14Gb available, 5 + 4.4 = 9.4 are added which make about 23GB available. I just want to know if I can delete the dump file and if you know how to delete the files inside "system volume information". I have not succeeded.

in the meantime I have freed up space in other partitions

glasskuter · May 20, 2022

The System Volume Information folder is used for more than system restore. SVI stores metadata and information used by Windows Backup, System Image Backup, Volume Shadow Copy service, and Windows Search indexing.

zbook · May 20, 2022

Dump files are useful when troubleshooting BSOD or unexpected shutdowns and restarts, etc.

You can delete the dump files if there is no further troubleshooting.

Also you can delete livekernelevents and livekerneldump files if there is no longer any troubleshooting.

That's approximately 5 GB.

Windows creates memory dump files during BSOD as they have more information than mini dump files.
Windows though automatically deletes memory dump files when the free space is < 25 GB.
So when troubleshooting it's best to have 30 GB or more of free space so that the new memory file is not deleted.

einstein1969 · May 20, 2022

zbook said:
1) The free space on C: 14.86 GB

Increase the free space on C: so that it is > 30 GB

Free Up Drive Space in Windows 10

How to Free Up Drive Space in Windows 10

www.tenforums.com

2) The RAM modules are mismatched.

Please replace the RAM so that they are on the Qualified Vendor List (QVL) and have matching speed.

3) After increasing the free space on C: post a new image of disk management

a) Widen these rows: disk 0, disk 1 ,disk 2, etc > make sure that no characters are cut off

b) Widen these columns: Status and Volume > make sure that no characters are cut off

How to Post a Screenshot of Disk Management

How to Post a Screenshot of Disk Management at Ten Forums

www.tenforums.com

4) Run:

a) https://www.tenforums.com/attachmen...-files-use-bsod-debugging-tuneup_plus_log.bat

b) https://www.tenforums.com/attachmen...atch-files-use-bsod-debugging-diskparinfo.bat

c) https://www.tenforums.com/attachmen...od-debugging-gather_additional_dump_files.bat

Post share links into this thread using one drive, drop box, or google drive.

5) When was Windows Driver Verifier started?

The mini dump file was dated 05/13/2022
Windows driver verifier is still on ~5 days.

6) How come running WDV was not commented in this thread?
Had you forgotten that it was running and is still running?

7) Turn off WDV

8) Run:

HD Tune: (free or trial version) (all drives)

HD Tune website

HD Tune

www.hdtune.com

Post images or share links for results on these tabs:
a) Health
b)Benchmark
c) Full error scan

HD Sentinel: (free or trial version)

Hard Disk Sentinel - HDD health and temperature monitoring

Monitoring hard disk health and temperature. Test and repair HDD problems, predict disk failure.

www.hdsentinel.com

Post images for results on these tabs:
a) Overview
b) Temperature
c) SMART

9) Open task manager (ctrl + alt + del) > click performance tab > click memory > post an image of the whole box into this thread

Rich (BB code):

Location : DIMM 0 BankLabel : CHANNEL B Manufacturer : MemoryType : DDR4 FormFactor : SODIMM Capacity : 8GB Speed : 2400 Serial : E62C115B PartNumber : CT8G4SFRA32A.M8FRS ECC : False TypeDetail : {Synchronous, Unbuffered (Unregistered)} Location : DIMM 1 BankLabel : CHANNEL B Manufacturer : Samsung MemoryType : DDR4 FormFactor : SODIMM Capacity : 8GB Speed : 2133 Serial : 00000000 PartNumber : K4A8G085WB-BCPB ECC : False TypeDetail : {Synchronous, Unbuffered (Unregistered)}

Code:

Windows RE status: Disabled

5) I'm really sorry, I'll tell you how it happened.

When glasskuter told me in the second post it was related to microsoft defender I google and found this: Windows Defender Issue - Microsoft Q&A where it said to run "verifier" but didn't say to disable it.
I ran the command and followed the instructions but I didn't understand what I was doing.
When I restarted the problem was still there and I forgot about this thing that I thought was over there.

Now I deactivated it and the cpu is back to normal.

I'm continuing with the other points

glasskuter · May 20, 2022

einstein1969 said:
Now I deactivated it and the cpu is back to normal.

Don't just deactivate it, uninstall it. It will restart automatically at boot. WDV or any driver updater is not advisable.

einstein1969 · May 21, 2022

zbook said:
1) The free space on C: 14.86 GB

Increase the free space on C: so that it is > 30 GB

Free Up Drive Space in Windows 10

How to Free Up Drive Space in Windows 10

www.tenforums.com

2) The RAM modules are mismatched.

Please replace the RAM so that they are on the Qualified Vendor List (QVL) and have matching speed.

3) After increasing the free space on C: post a new image of disk management

a) Widen these rows: disk 0, disk 1 ,disk 2, etc > make sure that no characters are cut off

b) Widen these columns: Status and Volume > make sure that no characters are cut off

How to Post a Screenshot of Disk Management

How to Post a Screenshot of Disk Management at Ten Forums

www.tenforums.com

4) Run:

a) https://www.tenforums.com/attachmen...-files-use-bsod-debugging-tuneup_plus_log.bat

b) https://www.tenforums.com/attachmen...atch-files-use-bsod-debugging-diskparinfo.bat

c) https://www.tenforums.com/attachmen...od-debugging-gather_additional_dump_files.bat

Post share links into this thread using one drive, drop box, or google drive.

5) When was Windows Driver Verifier started?

The mini dump file was dated 05/13/2022
Windows driver verifier is still on ~5 days.

6) How come running WDV was not commented in this thread?
Had you forgotten that it was running and is still running?

7) Turn off WDV

8) Run:

HD Tune: (free or trial version) (all drives)

HD Tune website

HD Tune

www.hdtune.com

Post images or share links for results on these tabs:
a) Health
b)Benchmark
c) Full error scan

HD Sentinel: (free or trial version)

Hard Disk Sentinel - HDD health and temperature monitoring

Monitoring hard disk health and temperature. Test and repair HDD problems, predict disk failure.

www.hdsentinel.com

Post images for results on these tabs:
a) Overview
b) Temperature
c) SMART

9) Open task manager (ctrl + alt + del) > click performance tab > click memory > post an image of the whole box into this thread

Rich (BB code):

Location : DIMM 0 BankLabel : CHANNEL B Manufacturer : MemoryType : DDR4 FormFactor : SODIMM Capacity : 8GB Speed : 2400 Serial : E62C115B PartNumber : CT8G4SFRA32A.M8FRS ECC : False TypeDetail : {Synchronous, Unbuffered (Unregistered)} Location : DIMM 1 BankLabel : CHANNEL B Manufacturer : Samsung MemoryType : DDR4 FormFactor : SODIMM Capacity : 8GB Speed : 2133 Serial : 00000000 PartNumber : K4A8G085WB-BCPB ECC : False TypeDetail : {Synchronous, Unbuffered (Unregistered)}

Code:

Windows RE status: Disabled

zbook said:
Dump files are useful when troubleshooting BSOD or unexpected shutdowns and restarts, etc.

You can delete the dump files if there is no further troubleshooting.

Also you can delete livekernelevents and livekerneldump files if there is no longer any troubleshooting.

That's approximately 5 GB.

Windows creates memory dump files during BSOD as they have more information than mini dump files.
Windows though automatically deletes memory dump files when the free space is < 25 GB.
So when troubleshooting it's best to have 30 GB or more of free space so that the new memory file is not deleted.

Since I didn't know what to do I enlarged the partition. There are now about 39GB free

I'm still curious about what those 4.4GB are inside the system volume information and how to get them back. None of you have answered me clearly on how to get them back.