NETIO.SYS/ntoskrnl.exe BSOD error

~4 users at my company experience seemingly random BSODs. Windows Event Logs show that a bugcheck is causing the unexpected shutdowns: 0x0000003B (0x00000000c0000005, 0xfffff801c2770bc0, 0xffffd480a493df40, 0x0000000000000000).

I have ran Windows debugger on the Memory dump file and attached it to this thread as a .txt file. What could be causing this?

We have Bitdefender software AV and a Sonic FW. I have made sure that all device drivers are up to date and have toggled the power-saver settings for ethernet off. I am hoping that you are able to see the system specs from that ZIP file the instructions said to upload. Let me know if you need any more info.

Hi jdaigle ,

Welcome to Ten Forums BSOD forum.

The debugging displayed 2 software drivers.
Were you at any time using Trend Micro products?
What other AV products are/were in use on this computer?

1) Uninstall Bitdefender using the uninstall tool:
Uninstall Bitdefender
2) Turn on Windows defender.
In two weeks if there are no longer any BSOD you can reinstall Bitdefender.
If there are BSOD after reinstalling Bitdefender then find an alternative AV product.
If there are no BSOD after reinstalling Bitdefender you can continue using the AV product.
3) If there are any BSOD please post a new zip into the thread:
BSOD - Posting Instructions - Windows 10 Forums
4) Open administrative command prompt and type or copy and paste:
5) sfc /scannow
6) dism /online /cleanup-image /restorehealth
7) chkdsk /scan
8) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
9) The latest driver updates were December 21,2017. Check to see that all drivers have been updated:
Support for OptiPlex 5040 | Drivers & downloads | Dell US

Code:

bdfwfpf    Bdfwfpf    \??\c:\program files\bitdefender\endpoint security\bdfwfpf.sys    Kernel Driver    Yes    System    Running    OK    Normal    No    Yes

Code:

tm_filter    tm_filter    c:\windows\system32\drivers\tm_filter.sys    Kernel Driver    Yes    System    Running    OK    Normal    No    Yes

Code:

tm_filter tm_filter.sys Mon Jul 10 06:10:50 2017 (596360BA)

Code:

bdfwfpf  bdfwfpf.sys  Wed May 31 07:19:51 2017 (592EB4E7)

Code:

12/20/2017 7:09 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff800639f5f6f
P4: ffff8284b9155fc0
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-3687-01.dmp
\\?\C:\WINDOWS\TEMP\WER-13640-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER40F1.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4100.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4111.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_a0374640eb10d87355f7431c806d5f7538c1ac84_00000000_cab_03804110

Analysis symbol: 
Rechecking for solution: 0
Report Id: 9aa7d816-fcb2-4d38-a8be-9c2034f25f16
Report Status: 100
Hashed bucket:12/20/2017 7:09 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff800639f5f6f
P4: ffff8284b9155fc0
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-3687-01.dmp
\\?\C:\WINDOWS\TEMP\WER-13640-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER40F1.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4100.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4111.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_a0374640eb10d87355f7431c806d5f7538c1ac84_00000000_cab_03804110

Analysis symbol: 
Rechecking for solution: 0
Report Id: 9aa7d816-fcb2-4d38-a8be-9c2034f25f16
Report Status: 4
Hashed bucket:
1/2/2018 3:52 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff801c2770bc0
P4: ffffd480a493df40
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010218-4890-01.dmp
\\?\C:\WINDOWS\TEMP\WER-15875-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4815.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4824.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4854.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_4043cc8491c27fa703a5dca1262b1b063ced7_00000000_cab_03804853

Analysis symbol: 
Rechecking for solution: 0
Report Id: eabb0c2a-03b1-4d9c-936e-b4643a9de54a
Report Status: 100
Hashed bucket:
1/2/2018 3:52 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff801c2770bc0
P4: ffffd480a493df40
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010218-4890-01.dmp
\\?\C:\WINDOWS\TEMP\WER-15875-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4815.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4824.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4854.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_4043cc8491c27fa703a5dca1262b1b063ced7_00000000_cab_03804853

Analysis symbol: 
Rechecking for solution: 0
Report Id: eabb0c2a-03b1-4d9c-936e-b4643a9de54a
Report Status: 4
Hashed bucket:
12/20/2017 5:59 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff808e3150a08
P4: ffff8d0ab2cb5f40
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-4093-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14375-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER440D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER442D.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445D.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_f117eefd697fbb61ed527ffb4f2221c6420cd51_00000000_cab_0384445c

Analysis symbol: 
Rechecking for solution: 0
Report Id: f4e7ed07-9880-4085-8177-4f47e594e3a6
Report Status: 100
Hashed bucket:
12/20/2017 5:59 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff808e3150a08
P4: ffff8d0ab2cb5f40
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-4093-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14375-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER440D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER442D.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445D.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_f117eefd697fbb61ed527ffb4f2221c6420cd51_00000000_cab_0384445c

Analysis symbol: 
Rechecking for solution: 0
Report Id: f4e7ed07-9880-4085-8177-4f47e594e3a6
Report Status: 4
Hashed bucket:
12/20/2017 9:16 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff80a7b170bc0
P4: ffff91859c77df00
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-3765-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44AA.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44B9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DA.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_c2f1e58458c978f15fbd1d2931d785b34d9210be_00000000_cab_038844d9

Analysis symbol: 
Rechecking for solution: 0
Report Id: 35c428fc-d2f1-418b-b219-d8d087e919b6
Report Status: 100
Hashed bucket:
12/20/2017 9:15 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff80a7b170bc0
P4: ffff91859c77df00
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-3765-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44AA.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44B9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DA.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_c2f1e58458c978f15fbd1d2931d785b34d9210be_00000000_cab_038844d9

Analysis symbol: 
Rechecking for solution: 0
Report Id: 35c428fc-d2f1-418b-b219-d8d087e919b6
Report Status: 4
Hashed bucket:
1/2/2018 7:53 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff80dcb5f0bc0
P4: fffffd85d22cdf00
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010218-3890-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14484-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445C.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER446B.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER449B.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_15d14f1d9248721238f422d9b27aa1cf6b1d4f7_00000000_cab_037c44aa

Analysis symbol: 
Rechecking for solution: 0
Report Id: 3529f39a-c3cd-4265-a524-fc07305e459b
Report Status: 100
Hashed bucket:
1/2/2018 7:52 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 3b
P2: c0000005
P3: fffff80dcb5f0bc0
P4: fffffd85d22cdf00
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010218-3890-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14484-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445C.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER446B.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER449B.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_3b_15d14f1d9248721238f422d9b27aa1cf6b1d4f7_00000000_cab_037c44aa

Analysis symbol: 
Rechecking for solution: 0
Report Id: 3529f39a-c3cd-4265-a524-fc07305e459b
Report Status: 4
Hashed bucket:

Code:

1/2/2018 7:57 PM    Windows Error Reporting    Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 6e05a421-1deb-47b1-a663-1e99bad24e77

Problem signature:
P1: 3b
P2: c0000005
P3: fffff80dcb5f0bc0
P4: fffffd85d22cdf00
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010218-3890-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14484-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445C.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER446B.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER449B.tmp.txt
\\?\C:\Windows\Temp\WERC70A.tmp.WERDataCollectionStatus.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_15d14f1d9248721238f422d9b27aa1cf6b1d4f7_00000000_cab_2bd03f95

Analysis symbol: 
Rechecking for solution: 0
Report Id: 3529f39a-c3cd-4265-a524-fc07305e459b
Report Status: 268435556
Hashed bucket:1/2/2018 3:53 PM    Windows Error Reporting    Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 78dcf50a-c630-4e97-9bae-e407fa4df8ba

Problem signature:
P1: 3b
P2: c0000005
P3: fffff801c2770bc0
P4: ffffd480a493df40
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010218-4890-01.dmp
\\?\C:\WINDOWS\TEMP\WER-15875-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4815.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4824.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4854.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_4043cc8491c27fa703a5dca1262b1b063ced7_00000000_cab_1fa0d716

Analysis symbol: 
Rechecking for solution: 0
Report Id: eabb0c2a-03b1-4d9c-936e-b4643a9de54a
Report Status: 268435556
Hashed bucket:
12/20/2017 6:00 PM    Windows Error Reporting    Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 79b55b59-9c7d-4fa5-b9cc-cceb8c83e868

Problem signature:
P1: 3b
P2: c0000005
P3: fffff808e3150a08
P4: ffff8d0ab2cb5f40
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-4093-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14375-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER440D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER442D.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER445D.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_f117eefd697fbb61ed527ffb4f2221c6420cd51_00000000_cab_27e0d1d6

Analysis symbol: 
Rechecking for solution: 0
Report Id: f4e7ed07-9880-4085-8177-4f47e594e3a6
Report Status: 268435556
Hashed bucket:
12/20/2017 9:16 PM    Windows Error Reporting    Fault bucket 0x3B_NETIO!StreamInvokeCalloutAndNormalizeAction, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 972d6666-f84a-4f9f-9fc4-e124e5433b94

Problem signature:
P1: 3b
P2: c0000005
P3: fffff80a7b170bc0
P4: ffff91859c77df00
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-3765-01.dmp
\\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44AA.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44B9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER44DA.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_c2f1e58458c978f15fbd1d2931d785b34d9210be_00000000_cab_1c88d987

Analysis symbol: 
Rechecking for solution: 0
Report Id: 35c428fc-d2f1-418b-b219-d8d087e919b6
Report Status: 268435556
Hashed bucket:
12/20/2017 7:09 PM    Windows Error Reporting    Fault bucket 0x3B_netio!StreamProcessCallout, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 20c19cd8-a3a6-4f02-a7a5-d57a6fb47524

Problem signature:
P1: 3b
P2: c0000005
P3: fffff800639f5f6f
P4: ffff8284b9155fc0
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122017-3687-01.dmp
\\?\C:\WINDOWS\TEMP\WER-13640-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER40F1.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4100.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4111.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_3b_a0374640eb10d87355f7431c806d5f7538c1ac84_00000000_cab_1cc4e38a

Analysis symbol: 
Rechecking for solution: 0
Report Id: 9aa7d816-fcb2-4d38-a8be-9c2034f25f16
Report Status: 268435556
Hashed bucket:

Code:

1/2/2018 3:40 PM    Windows Error Reporting    Fault bucket LKD_0x190_win32kbase!GreValidateRgnInDCSurfBounds, type 0
Event Name: LiveKernelEvent
Response: Not available
Cab Id: c031271b-dd3b-4d89-9b28-1d166bbe1040

Problem signature:
P1: 190
P2: 1
P3: fffff9d78270a3c0
P4: fffff9d7803aa000
P5: fffff9d7827e8440
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\LiveKernelReports\win32k.sys\win32k.sys-20180102-1031.dmp
\\?\C:\WINDOWS\TEMP\WER-11123093-0.sysdata.xml
\\?\C:\WINDOWS\LiveKernelReports\win32k.sys-20180102-1031.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC5F9.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC609.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC629.tmp.txt
\\?\C:\Windows\Temp\WER161E.tmp.WERDataCollectionStatus.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_190_d841ab7ed2e841cc826f1b3a393619237f6322_00000000_cab_05e825df

Analysis symbol: 
Rechecking for solution: 0
Report Id: 1266645c-d6de-436b-b4d5-a6def21ec6b9
Report Status: 268435456
Hashed bucket:12/20/2017 4:18 PM    Windows Error Reporting    Fault bucket LKD_0x190_win32kbase!GreValidateRgnInDCSurfBounds, type 0
Event Name: LiveKernelEvent
Response: Not available
Cab Id: d446c835-5919-4236-b1c2-b802afebd6a9

Problem signature:
P1: 190
P2: 1
P3: ffff8e4f4483c010
P4: ffff8e4f403aa000
P5: ffff8e4f427c1dd0
P6: 10_0_16299
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\LiveKernelReports\win32k.sys\win32k.sys-20171220-1053.dmp
\\?\C:\WINDOWS\TEMP\WER-67925734-0.sysdata.xml
\\?\C:\WINDOWS\LiveKernelReports\win32k.sys-20171220-1053.dmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER85F9.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER85F9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER861A.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_190_e7b062d4ed5dea8888aa7150c0be62ac855c66b0_00000000_cab_3fa9587b

Analysis symbol: 
Rechecking for solution: 0
Report Id: aa800207-9f27-4587-8c78-998ee66ff281
Report Status: 268435556
Hashed bucket:

Code:

12/20/2017 10:14 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Corporation.BlueScreenDiagnostic.1.1
P2: Default
P3: 1.0.0.0
P4: Default
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\SHAdmin\AppData\Local\Temp\msdtadmin\_6DAEF6DD-1D88-423D-8A8F-BB0892B3A826_\PkgED6E.cab
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREDAE.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREDCC.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREDEC.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_da15eef057dffa683da5341c73ad0cfb08a39b4_00000000_cab_30e7edeb

Analysis symbol: 
Rechecking for solution: 0
Report Id: c9c1e03e-2494-459a-93a9-91afcacfcac3
Report Status: 4
Hashed bucket:12/20/2017 10:17 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Corporation.BlueScreenDiagnostic.1.1
P2: Default
P3: 1.0.0.0
P4: Default
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\SHAdmin\AppData\Local\Temp\msdtadmin\_715A33AC-0762-4A0E-BE8E-70B101829816_\Pkg7D60.cab
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DA0.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DA7.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DD6.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_da15eef057dffa683da5341c73ad0cfb08a39b4_00000000_cab_0cbe7dcd

Analysis symbol: 
Rechecking for solution: 0
Report Id: c366e281-90a1-4a2f-94d1-abb6d2bb8c23
Report Status: 4
Hashed bucket:
1/2/2018 4:06 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Corporation.BlueScreenDiagnostic.1.1
P2: Default
P3: 1.0.0.0
P4: Default
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\SHAdmin\AppData\Local\Temp\msdtadmin\_BE1BC9F8-3B25-415A-87C1-9B970720AD8B_\Pkg56B1.cab
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER56F0.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER570E.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER573E.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_da15eef057dffa683da5341c73ad0cfb08a39b4_00000000_cab_530c573d

Analysis symbol: 
Rechecking for solution: 0
Report Id: 2d51902b-56e5-4c84-bab7-83307f5c8bc7
Report Status: 4
Hashed bucket:

Thank you zbook for the quick reply. I checked for updates online for the main drivers (display, audio, network, processor, & firmware) through device manager. I also ran Dell Command Update and found no updates aside from Dell Digital Delivery Application. I have not run a memory test on the machine as the BSOD-event does not seem related to periods of high-load. Also, I know this does not prove anything for this computer, but I ran a memory test on a Dell Latitude 7-series laptop that is experiencing the same BSOD-issue as this user's Optiplex and no errors were found.

Good idea for disabling then re-enabling BitDefender after ~2 weeks. I will pursue this first and provide an update by 01/17/18, or once the error occurs again, whichever occurs first. Did you want #5-8 completed now, or after future BSOD events?

-Jacob

Please indicate whether or not the AV product Trend micro was ever in use on the computer.
If you can run steps 4 - 8 and post into the thread they will be useful in evaluating the OS, and drive file system.
If there is any BSOD you can post a new zip into the thread for debugging.
BSOD - Posting Instructions - Windows 10 Forums

Once you have a stable system consider the following steps:
1) backup all files
2) make a backup image using Macrium (free edition)
Macrium Software | Macrium Reflect Free
3) place the backup image onto another drive or into the cloud
4) make a brand new restore point

Trend Micro has not been used on this machine before. Here are the sfc / dism / chkdsk results, memory looks clean/healthy:

Microsoft Windows [Version 10.0.16299.125]
(c) 2017 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\WINDOWS\system32>dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool
Version: 10.0.16299.15

Image Version: 10.0.16299.125

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

C:\WINDOWS\system32>chkdsk /scan
The type of the file system is NTFS.
Volume label is OS.

Stage 1: Examining basic file system structure ...
512000 file records processed.
File verification completed.
6819 large file records processed.
0 bad file records processed.

Stage 2: Examining file name linkage ...
3468 reparse records processed.
625716 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered to lost and found.
3468 reparse records processed.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
56859 data files processed.
CHKDSK is verifying Usn Journal...
36416168 USN bytes processed.
Usn Journal verification completed.

Windows has scanned the file system and found no problems.
No further action is required.

236024831 KB total disk space.
160692812 KB in 284858 files.
181696 KB in 56860 indexes.
0 KB in bad sectors.
631491 KB in use by the system.
65536 KB occupied by the log file.
74518832 KB available on disk.

4096 bytes in each allocation unit.
59006207 total allocation units on disk.
18629708 allocation units available on disk.

C:\WINDOWS\system32>​
-------------------------------------------------
The BSOD error occurred previously on 12/20/17 and was resolved until 1/2/18 by updating system drivers through Dell Command Update. I created a restore point before I ran the commands above. Backup then factory reset may be my next avenue if the issue persists.