Issue:
While browsing the web, nothing out of the ordinary, my system crashed with a DPC_WATCHDOG_VIOLATION
. I began some troubleshooting and here are the details of my investigation. Minidump is available for review, upon request.
Issue Summary:
- Operating System: Windows 11 Pro
-
Error Encountered:
DPC_WATCHDOG_VIOLATION
(Bugcheck code 133) - Debugging Tool Used: Windows Debugger (WinDbg)
-
Suspected Driver:
gwdrv.sys
(associated with GlassWire)
Debugging Details:
- The system crashed with a
DPC_WATCHDOG_VIOLATION
, indicating a prolonged run time at an IRQL of DISPATCH_LEVEL or above. - The debug output specifically warned that it was “Unable to verify timestamp for gwdrv.sys.”
- The crash occurred in a system process, suggesting a driver or hardware issue.
- The function where the crash occurred was
nt!KeAccumulateTicks+3cd
, part of the Windows kernel (ntkrnlmp.exe
).
Steps Taken for Troubleshooting:
- Analyzed the dump file using Windows Debugger (WinDbg).
- Identified
gwdrv.sys
as a potential culprit based on the debug output. - Reviewed potential solutions, including updating or uninstalling the suspected driver (
gwdrv.sys
), checking for Windows updates, and running hardware diagnostics. - Glasswire service has been stopped, and foreground application exited.