Windows 10: BSOD When Trying To Refresh Windows 10 (WDF_Violation)

  1.    22 Jul 2015 #1

    BSOD When Trying To Reset Windows 10 (WDF_Violation)


    Hey Guys, need urgent help here
    i have windows 8.1 earlier and upgrade it to windows 10 latest build
    its working fine till i notice system thread exception BSOD occur sometimes (when using chrome) so i decided to reset my windows 10 and start from begining, but when i try to refresh, it show bsod called WDF_Violation (while screen says preparing) it actually happen when i try to use every option on advanced startup too
    Please help me, thanks
    Last edited by IcyGlacial; 22 Jul 2015 at 21:56.
      My ComputerSystem Spec


  2. Posts : 1,634
    W7 Pro x64 | W10 IP x64 | Linux Mint VM
       22 Jul 2015 #2

    Are you running MalwareBytes in real time? There are numerous instances of it being flagged in each of the three dumps.

    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 3B, {c0000005, fffff800940008fa, ffffd0018b041660, 0}
    
    *** WARNING: Unable to verify timestamp for mwac.sys
    *** ERROR: Module load completed but symbols could not be loaded for mwac.sys
    Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )
    
    Followup: MachineOwner
    Code:
    ffffd001`8b042668  fffff800`96a51ed8 mwac+0x1ed8
    ffffd001`8b042670  00000000`00000002
    ffffd001`8b042678  fffff800`96a56f51 mwac+0x6f51
    ffffd001`8b042680  ffffe000`cdda67e0
    ffffd001`8b042688  00000000`00000002
    ffffd001`8b042690  fffff800`96a5e7c0 mwac+0xe7c0
    ffffd001`8b042698  fffff800`96a5e420 mwac+0xe420
    ffffd001`8b0426a0  00000000`00000002
    ffffd001`8b0426a8  fffff800`96a5451f mwac+0x451f
    ffffd001`8b0426b0  fffff800`96a5ec80 mwac+0xec80
    ffffd001`8b0426b8  fffff800`96a5ec80 mwac+0xec80
    ffffd001`8b0426c0  00000000`00000002
    ffffd001`8b0426c8  fffff800`96a5e7c0 mwac+0xe7c0
    ffffd001`8b0426d0  ffffe000`cf1de950
    ffffd001`8b0426d8  fffff800`96a53233 mwac+0x3233
    ffffd001`8b0426e0  00000000`00000000
    ffffd001`8b0426e8  00000000`00000000
    ffffd001`8b0426f0  fffff800`96a5eca0 mwac+0xeca0
    ffffd001`8b0426f8  fffff800`96a53315 mwac+0x3315
    ffffd001`8b042700  fffff800`96a5eca8 mwac+0xeca8
    ffffd001`8b042708  fffff801`a5e42d8b nt!ObReferenceObjectByHandleWithTag+0xbb
    ffffd001`8b042710  ffffe000`ce8a77e0
    ffffd001`8b042718  ffffe000`ce8a7760
    ffffd001`8b042720  00000000`00000000
    ffffd001`8b042728  fffff800`96a5ecc8 mwac+0xecc8
    ffffd001`8b042730  ffffe000`ce8a7500
    ffffd001`8b042738  ffff8006`aabffcfd
    ffffd001`8b042740  ffffe000`cef4dd90
    ffffd001`8b042748  fffff800`96a52e9e mwac+0x2e9e
    ffffd001`8b042750  00000000`00000000
    ffffd001`8b042758  00000000`00000002
    ffffd001`8b042760  fffff800`96a5eca0 mwac+0xeca0
    ffffd001`8b042768  fffff801`a5a6a111 nt!ExAllocatePoolWithQuotaTag+0x61
    ffffd001`8b042770  ffffe000`cef4dd90
    ffffd001`8b042778  fffff800`96a54377 mwac+0x4377
    ffffd001`8b042780  fffff800`96a5e7c0 mwac+0xe7c0
    ffffd001`8b042788  00000000`00000000
    ffffd001`8b042790  ffffe000`ce8e1880
    ffffd001`8b042798  ffffd001`8b042b80
    ffffd001`8b0427a0  ffffe000`cef4dd90
    ffffd001`8b0427a8  fffff800`96a598e8 mwac+0x98e8
    I so disable MBAM real time and just run on demand. See how it goes and report back.
      My ComputerSystem Spec


  3. Posts : 1,875
    Windows 3.1 to Windows 10
       22 Jul 2015 #3

    Windows 10 build 10240 does not have the option to Refresh - only Reset
    So we must assume you choose Reset

    Attachment 25458
      My ComputerSystem Spec

  4.    22 Jul 2015 #4

    Boozad said: View Post
    Are you running MalwareBytes in real time? There are numerous instances of it being flagged in each of the three dumps.

    Code:
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 3B, {c0000005, fffff800940008fa, ffffd0018b041660, 0}
    
    *** WARNING: Unable to verify timestamp for mwac.sys
    *** ERROR: Module load completed but symbols could not be loaded for mwac.sys
    Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )
    
    Followup: MachineOwner
    Code:
    ffffd001`8b042668  fffff800`96a51ed8 mwac+0x1ed8
    ffffd001`8b042670  00000000`00000002
    ffffd001`8b042678  fffff800`96a56f51 mwac+0x6f51
    ffffd001`8b042680  ffffe000`cdda67e0
    ffffd001`8b042688  00000000`00000002
    ffffd001`8b042690  fffff800`96a5e7c0 mwac+0xe7c0
    ffffd001`8b042698  fffff800`96a5e420 mwac+0xe420
    ffffd001`8b0426a0  00000000`00000002
    ffffd001`8b0426a8  fffff800`96a5451f mwac+0x451f
    ffffd001`8b0426b0  fffff800`96a5ec80 mwac+0xec80
    ffffd001`8b0426b8  fffff800`96a5ec80 mwac+0xec80
    ffffd001`8b0426c0  00000000`00000002
    ffffd001`8b0426c8  fffff800`96a5e7c0 mwac+0xe7c0
    ffffd001`8b0426d0  ffffe000`cf1de950
    ffffd001`8b0426d8  fffff800`96a53233 mwac+0x3233
    ffffd001`8b0426e0  00000000`00000000
    ffffd001`8b0426e8  00000000`00000000
    ffffd001`8b0426f0  fffff800`96a5eca0 mwac+0xeca0
    ffffd001`8b0426f8  fffff800`96a53315 mwac+0x3315
    ffffd001`8b042700  fffff800`96a5eca8 mwac+0xeca8
    ffffd001`8b042708  fffff801`a5e42d8b nt!ObReferenceObjectByHandleWithTag+0xbb
    ffffd001`8b042710  ffffe000`ce8a77e0
    ffffd001`8b042718  ffffe000`ce8a7760
    ffffd001`8b042720  00000000`00000000
    ffffd001`8b042728  fffff800`96a5ecc8 mwac+0xecc8
    ffffd001`8b042730  ffffe000`ce8a7500
    ffffd001`8b042738  ffff8006`aabffcfd
    ffffd001`8b042740  ffffe000`cef4dd90
    ffffd001`8b042748  fffff800`96a52e9e mwac+0x2e9e
    ffffd001`8b042750  00000000`00000000
    ffffd001`8b042758  00000000`00000002
    ffffd001`8b042760  fffff800`96a5eca0 mwac+0xeca0
    ffffd001`8b042768  fffff801`a5a6a111 nt!ExAllocatePoolWithQuotaTag+0x61
    ffffd001`8b042770  ffffe000`cef4dd90
    ffffd001`8b042778  fffff800`96a54377 mwac+0x4377
    ffffd001`8b042780  fffff800`96a5e7c0 mwac+0xe7c0
    ffffd001`8b042788  00000000`00000000
    ffffd001`8b042790  ffffe000`ce8e1880
    ffffd001`8b042798  ffffd001`8b042b80
    ffffd001`8b0427a0  ffffe000`cef4dd90
    ffffd001`8b0427a8  fffff800`96a598e8 mwac+0x98e8
    I so disable MBAM real time and just run on demand. See how it goes and report back.
    i try disabling it and even uninstall it , but the problem still occur
      My ComputerSystem Spec

  5.    22 Jul 2015 #5

    Kyhi said: View Post
    Windows 10 build 10240 does not have the option to Refresh - only Reset
    So we must assume you choose Reset

    Attachment 25458
    yeah im sorry, its actuall reset but i choose keep files option
      My ComputerSystem Spec


  6. Posts : 1,634
    W7 Pro x64 | W10 IP x64 | Linux Mint VM
       22 Jul 2015 #6

    IcyGlacial said: View Post
    i try disabling it and even uninstall it , but the problem still occur
    The BSODs? If you've received more please upload new logs.
      My ComputerSystem Spec

  7.    22 Jul 2015 #7

    Boozad said: View Post
    The BSODs? If you've received more please upload new logs.
    yes the WDF_Violation bsod
      My ComputerSystem Spec


 

Related Threads
Installation & Upgrade Refresh Windows 10 in Tutorials
How to Refresh Windows 10 Resetting lets you choose whether to keep your files or remove them, and then reinstalls Windows. For more information, see: Push-button reset (Windows Drivers) Recovery options in Windows 10
Installation & Upgrade Create Custom Recovery Image in Windows 10 in Tutorials
How to Create a Custom Recovery Image used to Refresh Windows 10 This tutorial no longer works starting with Windows 10 build 10130 released on May 29th 2015. The "C:\Windows\System32\recimg.exe" file has been removed in build 10130, and will...
WDF_VIOLATION when install/refresh/reset in BSOD Crashes and Debugging
Been using Windows 10 since it was released with no major problems. On 10061 I got some malware (russian game website open in browser on boot) so i tried to use Settings->Reset/Refresh but it just BSOD and reset without changing anything. So I...
Installation & Upgrade Deregister Refresh Custom Recovery Image in Windows 10 in Tutorials
How to Deregister Current Custom Recovery Image used to Refresh Windows 10 This tutorial no longer works starting with Windows 10 build 10130 released on May 29th 2015. If you're having problems with Windows 10 on your PC, you can try to...
How to Set a Custom Recovery Image as Active to use to Refresh Windows 10 This tutorial no longer works starting with Windows 10 build 10130 released on May 29th 2015. If you're having problems with Windows 10 on your PC, you can try to...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:08.
Find Us