A
AndrewStephens5
Hi Guys
I've been banging my heag against a wall here.
So have this strange issue that started a few days ago. Where random computers in our computer labs start blue screening with the error
ATTEMPTED_WRITE_TO_READONLY_MEMORY
What failed: Ntfs.sys
System is configured to access a Citrix Virtual Desktop.
OS config
Windows 10 x64 LTSC
Citrix WEM with transformer configuration version 2012.1
Citrix workspace
Windows Enpoint security configured through SCCM
Hardware
Dell Optiplex 3060
BIOS ver 1.9.1
latest drivers running since January 2021 (A12 driver pack)
I've been through the dump file and here is the output
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory. The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8064d2c8eaa, Virtual address for the attempted write.
Arg2: 0900000139eb5021, PTE contents.
Arg3: ffff9a82b241d370, (reserved)
Arg4: 000000000000000b, (reserved)
STACK_COMMAND: .trap 0xffff9a82b241d370 ; kb
SYMBOL_NAME: WdFilter+20e00
MODULE_NAME: WdFilter
IMAGE_NAME: WdFilter.sys
BUCKET_ID_FUNC_OFFSET: 20e00
FAILURE_BUCKET_ID: 0xBE_WdFilter!unknown_function
OS_VERSION: 10.0.17763.1
BUILDLAB_STR: rs5_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {ea485a3d-e464-9c5e-72a4-e3093d9814be}
From my initial investigation it points to Windows Defender.
if I check the event log is mentions a failed update for defender. If i repair by installing the missing update the issue persist.. I done windows updates, check for driver updates, hardware diagnostic, memory check all clear.
Anyone else had this issue?
Continue reading...
I've been banging my heag against a wall here.
So have this strange issue that started a few days ago. Where random computers in our computer labs start blue screening with the error
ATTEMPTED_WRITE_TO_READONLY_MEMORY
What failed: Ntfs.sys
System is configured to access a Citrix Virtual Desktop.
OS config
Windows 10 x64 LTSC
Citrix WEM with transformer configuration version 2012.1
Citrix workspace
Windows Enpoint security configured through SCCM
Hardware
Dell Optiplex 3060
BIOS ver 1.9.1
latest drivers running since January 2021 (A12 driver pack)
I've been through the dump file and here is the output
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory. The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8064d2c8eaa, Virtual address for the attempted write.
Arg2: 0900000139eb5021, PTE contents.
Arg3: ffff9a82b241d370, (reserved)
Arg4: 000000000000000b, (reserved)
STACK_COMMAND: .trap 0xffff9a82b241d370 ; kb
SYMBOL_NAME: WdFilter+20e00
MODULE_NAME: WdFilter
IMAGE_NAME: WdFilter.sys
BUCKET_ID_FUNC_OFFSET: 20e00
FAILURE_BUCKET_ID: 0xBE_WdFilter!unknown_function
OS_VERSION: 10.0.17763.1
BUILDLAB_STR: rs5_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {ea485a3d-e464-9c5e-72a4-e3093d9814be}
From my initial investigation it points to Windows Defender.
if I check the event log is mentions a failed update for defender. If i repair by installing the missing update the issue persist.. I done windows updates, check for driver updates, hardware diagnostic, memory check all clear.
Anyone else had this issue?
Continue reading...