Issue:
While browsing the web, nothing out of the ordinary, my system crashed with a DPC_WATCHDOG_VIOLATION. I began some troubleshooting and here are the details of my investigation. Minidump is available for review, upon request.
Issue Summary:
- Operating System: Windows 11 Pro
-
Error Encountered:
DPC_WATCHDOG_VIOLATION(Bugcheck code 133) - Debugging Tool Used: Windows Debugger (WinDbg)
-
Suspected Driver:
gwdrv.sys(associated with GlassWire)
Debugging Details:
- The system crashed with a
DPC_WATCHDOG_VIOLATION, indicating a prolonged run time at an IRQL of DISPATCH_LEVEL or above. - The debug output specifically warned that it was “Unable to verify timestamp for gwdrv.sys.”
- The crash occurred in a system process, suggesting a driver or hardware issue.
- The function where the crash occurred was
nt!KeAccumulateTicks+3cd, part of the Windows kernel (ntkrnlmp.exe).
Steps Taken for Troubleshooting:
- Analyzed the dump file using Windows Debugger (WinDbg).
- Identified
gwdrv.sysas a potential culprit based on the debug output. - Reviewed potential solutions, including updating or uninstalling the suspected driver (
gwdrv.sys), checking for Windows updates, and running hardware diagnostics. - Glasswire service has been stopped, and foreground application exited.
