WppRecorder.sys problem when updating Windows 10 from 1909 to 20H2

@zbook

After install the Intel Driver I would check the drivers.txt.

Then uninstall Malwarebytes.

Clean Boot and start directly the 20h2 upgrade.

The wpprecorder.sys error is most likely caused by the Intel driver.

@smartcooky ,

If possible, please upload V2 and CBS before retiring.

Thx.



@Tekkey Boy ,

Thx

Code:

Use !analyze -v to get detailed debugging information.

BugCheck 7E, {c0000005, 86ca8259, 95f46498, 95f46040}

Probably caused by : WppRecorder.sys ( WppRecorder!WppAutoLogTrace+129 )

Followup:     MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 86ca8259, The address that the exception occurred at
Arg3: 95f46498, Exception Record Address
Arg4: 95f46040, Context Record Address

Code:

STACK_TEXT:  
95f46610 b5711645 089c08bc 00000005 00000009 WppRecorder!WppAutoLogTrace+0x129
WARNING: Stack unwind information not available. Following frames may be wrong.
95f4664c b573f90b a029e000 00000005 00000009 TeeDriverW10+0x1645
95f46678 86c0d57c 72c7bec8 95f46698 ac6fe430 TeeDriverW10+0x2f90b
95f468ac 86c0d4ed 91a87318 95f468d8 82571fc7 Wdf01000!FxDriver::AddDevice+0x84 [minkernel\wdf\framework\shared\core\km\fxdriverkm.cpp @ 72] 
95f468b8 82571fc7 ac6fe430 91a87318 ac68e8e8 Wdf01000!FxDriver::AddDevice+0x21 [minkernel\wdf\framework\shared\core\km\fxdriverkm.cpp @ 51] 
95f468d8 8288da71 86c0d4cc 00000004 00000003 nt!PpvUtilCallAddDevice+0x1f
95f46920 8285815f 86c0d4cc 00000003 906b3ae0 nt!PnpCallAddDevice+0x75
95f46a18 82857626 a5d6eb78 906b3ae0 00000000 nt!PipCallDriverAddDevice+0x729
95f46a4c 8296994c 95f46a78 00000000 00000000 nt!PipProcessDevNodeTree+0xf4
95f46a80 825e4114 89b64150 aa66d040 826c6820 nt!PiRestartDevice+0x92
95f46ae8 824b4108 00000000 00000000 aa66d040 nt!PnpDeviceActionWorker+0x986da
95f46b38 824f4ca2 89b64150 0243e199 00000000 nt!ExpWorkerThread+0xf8
95f46b70 8259a19d 824b4010 89b64150 00000000 nt!PspSystemThreadStartup+0x4a
95f46b7c 00000000 00000000 025efa20 00000023 nt!KiThreadStartup+0x15

Code:

95f46554  00000000
95f46558  00000000
95f4655c  00000000
95f46560  00000000
95f46564  00000000
95f46568  00000000
95f4656c  00000000
95f46570  95f46610
95f46574  86ca8259 WppRecorder!WppAutoLogTrace+0x129
95f46578  badb0d00
95f4657c  01000000
95f46580  b573d03c TeeDriverW10+0x2d03c
95f46584  00000020
95f46588  00000000
95f4658c  00000000
95f46590  00000001
95f46594  00000001
95f46598  00000000
95f4659c  00000000
95f465a0  b5730023 TeeDriverW10+0x20023
95f465a4  00000023
95f465a8  a029e000
95f465ac  000000c8
95f465b0  ac7d0818
95f465b4  00000001
95f465b8  00001f80
95f465bc  95f46b60
95f465c0  b5730030 TeeDriverW10+0x20030
95f465c4  a029089c
95f465c8  a029e908
95f465cc  a029e924
95f465d0  95f46610
95f465d4  00000000
95f465d8  86ca8259 WppRecorder!WppAutoLogTrace+0x129
95f465dc  00000008
95f465e0  00010202
95f465e4  00000009
95f465e8  00000000
95f465ec  00000005
95f465f0  0878089c
95f465f4  00000020
95f465f8  00000020
95f465fc  0000089c
95f46600  a029e064
95f46604  00000020
95f46608  0000089c
95f4660c  0000005c
95f46610  95f4664c
95f46614  b5711645 TeeDriverW10+0x1645
95f46618  089c08bc
95f4661c  00000005
95f46620  00000009
95f46624  000000c8
95f46628  00000010
95f4662c  95f46668
95f46630  00000004
95f46634  00000000
95f46638  000000c8
95f4663c  00000000
95f46640  72c7bec8
95f46644  a029e000
95f46648  000000c8
95f4664c  95f46678
95f46650  b573f90b TeeDriverW10+0x2f90b
95f46654  a029e000
95f46658  00000005
95f4665c  00000009
95f46660  00000010
95f46664  000000c8
95f46668  00000000
95f4666c  8d384130
95f46670  72c7bec8
95f46674  0000000c
95f46678  95f468ac
95f4667c  86c0d57c Wdf01000!FxDriver::AddDevice+0x84 [minkernel\wdf\framework\shared\core\km\fxdriverkm.cpp @ 72]
95f46680  72c7bec8
95f46684  95f46698
95f46688  ac6fe430
95f4668c  ac6fe430
95f46690  91a87318
95f46694  82761500 nt!ObpCreateHandle+0x1060
95f46698  ae7fd300
95f4669c  8d384130
95f466a0  8b416b88
95f466a4  00010001
95f466a8  80000900
95f466ac  00000000
95f466b0  00000000
95f466b4  00000002
95f466b8  0000002a
95f466bc  00000000
95f466c0  00000100
95f466c4  80000002
95f466c8  00000020
95f466cc  00000000
95f466d0  00000000
95f466d4  00000001
95f466d8  00000001
95f466dc  00000000
95f466e0  00000000
95f466e4  b573d014 TeeDriverW10+0x2d014
95f466e8  00000018
95f466ec  b571c2c0 TeeDriverW10+0xc2c0
95f466f0  b571c000 TeeDriverW10+0xc000
95f466f4  b571c570 TeeDriverW10+0xc570
95f466f8  00000002
95f466fc  80000002
95f46700  00000002
95f46704  00006001
95f46708  00000000
95f4670c  00000000
95f46710  00000000
95f46714  00000000
95f46718  00000000
95f4671c  00000000
95f46720  00000020
95f46724  00000000
95f46728  00000000
95f4672c  00000001
95f46730  00000001
95f46734  00000000
95f46738  00000000
95f4673c  b573d064 TeeDriverW10+0x2d064
95f46740  00000000
95f46744  b57308c0 TeeDriverW10+0x208c0
95f46748  00000001
95f4674c  00000048
95f46750  b5721fc0 TeeDriverW10+0x11fc0
95f46754  b5722200 TeeDriverW10+0x12200
95f46758  b5722520 TeeDriverW10+0x12520
95f4675c  b5722770 TeeDriverW10+0x12770
95f46760  b573eda0 TeeDriverW10+0x2eda0
95f46764  b573ee40 TeeDriverW10+0x2ee40
95f46768  00000000
95f4676c  00000000
95f46770  00000000
95f46774  00000000
95f46778  00000000
95f4677c  b5722ba0 TeeDriverW10+0x12ba0
95f46780  00000000
95f46784  00000000
95f46788  00000000
95f4678c  00000000
95f46790  00000000
95f46794  00000000
95f46798  00000000
95f4679c  00000000
95f467a0  00000000
95f467a4  00000000
95f467a8  00000000
95f467ac  00000000
95f467b0  00000000
95f467b4  00000000
95f467b8  00000000
95f467bc  00000000
95f467c0  00000002
95f467c4  00000000
95f467c8  00000000
95f467cc  00000000
95f467d0  00000000
95f467d4  00000034
95f467d8  00000020
95f467dc  00000000
95f467e0  b573e5a0 TeeDriverW10+0x2e5a0
95f467e4  00000000
95f467e8  00000000
95f467ec  b5711ac0 TeeDriverW10+0x1ac0
95f467f0  b57118d0 TeeDriverW10+0x18d0
95f467f4  b5711940 TeeDriverW10+0x1940
95f467f8  00000000
95f467fc  00000000
95f46800  00000000
95f46804  00000000
95f46808  00000000
95f4680c  00000000
95f46810  00000000

smartcooky said:

Upgrade_failure_info.bat says its putting a file oin the desktop, but there is notihng there.

Run the following command on Command Prompt and see whether it can find a ZIP file.

@Echo off&For %# In ("%temp%\Upgrade_failure_logs_*.zip") Do (Echo "%#")

If it finds no ZIP file, run the following command on PowerShell and see whether "C:\Testing.zip" will be created.

PowerShell Compress-Archive -Path "C:\Windows\WindowsUpdate.log" -DestinationPath "C:\Testing"

zbook said:

@smartcooky ,

If possible, please upload V2 and CBS before retiring.

Thx.

Sorry, I didn't see this before leaving last night

- - - Updated - - -

Right, I am working may way through everything starting with post #104.

Please don't flood me with things to do as it is obvious I have a lot of catching up to do

First. No BSOD overnight AFAIK, but as soon as just tried to start collecting V2 logs, the screen went black again. WDV was still running, so I restarted, turned off WDV and restarted again. and I will start V2 again

Turn off WDV as stress testing has completed before the upgrade

zbook said:

Turn off WDV as stress testing has completed before the upgrade

Done that

Here is the V2 log requested in post 104 ; Dropbox - PHOTOLAB-(2021-04-26_16-23-51).zip

How do I uninstall and reinstall TeeDriverW10.sys

NOTE: "Everything" doesn't find any such file

- - - Updated - - -

I can't get past the step "Uninstall and reinstall: teedriverw10.sys"

1. I don't know how to do that

2. I can't even find that file anywhere on the computer (even using "Everything")

- - - Updated - - -

And dammit, how do I stop this forum from adding what I want to be a NEW post as an update to my previous post !?

- - - Updated - - -

Matthew Wai said:

Run the following command on Command Prompt and see whether it can find a ZIP file.

@Echo off&For %# In ("%temp%\Upgrade_failure_logs_*.zip") Do (Echo "%#")

It finds no file

Matthew Wai said:

If it finds no ZIP file, run the following command on PowerShell and see whether "C:\Testing.zip" will be created.

PowerShell Compress-Archive -Path "C:\Windows\WindowsUpdate.log" -DestinationPath "C:\Testing"

Yes, Testing.zip is created in C:\

See post #106

smartcooky said:

Yes, Testing.zip is created in C:\

Run the following command via Command Prompt to create a ZIP file in the %temp% folder:
PowerShell Compress-Archive -Path "C:\Windows\WindowsUpdate.log" -DestinationPath "%temp%\Testing_1"

Then run the following command to find the ZIP file:
@Echo off&For %# In ("%temp%\Testing_*.zip") Do (Echo "%#")

Post the output.

zbook said:

See post #106

OK, here is drivers.txt

Dropbox - drivers.txt

- - - Updated - - -

Matthew Wai said:

Run the following command via Command Prompt to create a ZIP file in the %temp% folder:
PowerShell Compress-Archive -Path "C:\Windows\WindowsUpdate.log" -DestinationPath "%temp%\Testing_1"

Then run the following command to find the ZIP file:
@Echo off&For %# In ("%temp%\Testing_*.zip") Do (Echo "%#")

Post the output.

Deleted result. Needed to use ACP

This time...

Microsoft Windows [Version 10.0.18363.1500]
(c) 2019 Microsoft Corporation. All rights reserved.
C:\WINDOWS\system32>PowerShell Compress-Archive -Path "C:\Windows\WindowsUpdate.log" -DestinationPath "%temp%\Testing_1"
C:\WINDOWS\system32>@Echo off&For %# In ("%temp%\Testing_*.zip") Do (Echo "%#")
"C:\Users\PHOTOO~1\AppData\Local\Temp\Testing_1.zip"

And "Testing.zip" has been created in C:\Users\Photo One\AppData\Local\Temp

- - - Updated - - -

zbook said:

Run the scan again enabling rootkit testing.

See edited earlier post.

How do I enable rootkit testing. Not seeing any earlier post that says how to do this

Right upper corner > click the sprocket/gear > click Security tab > select rootkit

Post scan results.

If clean > uninstall Malwarebytes using the applicable uninstall tool:
https://downloads.malwarebytes.com/file/mb_clean

If you've followed all the steps posted by Tekkie Boy then place the computer in clean boot (reboot) > then perform an in place upgrade repair using the windows 10 iso.



Perform a Clean Boot in Windows 10 to Troubleshoot Software Conflicts

Repair Install Windows 10 with an In-place Upgrade

https://www.microsoft.com/en-us/soft...load/windows10
Download Windows 10 ISO File
Create Bootable USB Flash Drive to Install Windows 10