[SOLVED] Blue screen at random times twice yesterday. PROBLEM: Kaseya VSA KAPFA.SYS. FIX: Kaseya solved it.

x BlueRobot said:
The dump files are the same as before apart from a Stop 0x154. I suspect the issue is still hardware. Does the system crash at all within Safe Mode with Networking?
Click to expand...
So I've gone a consistent week with no crashes while in safe mode with networking. Any suggestions on what to do to start narrowing down the culprit?
 
Have you run driver verifier yet?
If not start with all non microsoft drivers from A to M in normal mode, making sure to create a recovery point first.
 
Wrench97 said:
Have you run driver verifier yet?
If not start with all non microsoft drivers from A to M in normal mode, making sure to create a recovery point first.
Click to expand...
I started this today. Am I waiting for another crash or is there info I need to review from Driver Verifier?
 
Looks like Verifer is calling out KAPFA.SYS from Kaseya IT management software.


Debug session time: Thu Dec 22 14:16:55.452 2022 (UTC - 5:00)
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\122222-17671-01.dmp]
System Uptime: 1 days 9:25:00.553
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Bugcheck code 000000c4
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 000000000002001c, ID of the 'IrqlPsPassive' rule that was violated.
Arg2: fffff8045ca3bd70, A pointer to the string describing the violated rule condition.
Arg3: 0000000000000000, Reserved (unused).
Arg4: 0000000000000000, Reserved (unused).
*** WARNING: Unable to verify timestamp for KAPFA.SYS
*** WARNING: Unable to verify timestamp for win32k.sys
PROCESS_NAME: AgentMon.exe
Probably caused by: KAPFA.SYS ( KAPFA+4deb )
FAILURE_BUCKET_ID: 0xc4_IrqlPsPassive_XDV_VRF_KAPFA!unknown_function
BiosVersion = 0402
BiosReleaseDate = 03/19/2018
SystemManufacturer = System manufacturer
BaseBoardManufacturer = ASUSTeK COMPUTER INC.
SystemProductName = System Product Name
BaseBoardProduct = TUF B360M-PLUS GAMING

The driver is from 2016 check to see if there is a newer version.
 
Last edited:
Wrench97 said:
Looks like Verifer is calling out KAPFA.SYS from Kaseya IT management software.


Debug session time: Thu Dec 22 14:16:55.452 2022 (UTC - 5:00)
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\122222-17671-01.dmp]
System Uptime: 1 days 9:25:00.553
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Bugcheck code 000000c4
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 000000000002001c, ID of the 'IrqlPsPassive' rule that was violated.
Arg2: fffff8045ca3bd70, A pointer to the string describing the violated rule condition.
Arg3: 0000000000000000, Reserved (unused).
Arg4: 0000000000000000, Reserved (unused).
*** WARNING: Unable to verify timestamp for KAPFA.SYS
*** WARNING: Unable to verify timestamp for win32k.sys
PROCESS_NAME: AgentMon.exe
Probably caused by: KAPFA.SYS ( KAPFA+4deb )
FAILURE_BUCKET_ID: 0xc4_IrqlPsPassive_XDV_VRF_KAPFA!unknown_function
BiosVersion = 0402
BiosReleaseDate = 03/19/2018
SystemManufacturer = System manufacturer
BaseBoardManufacturer = ASUSTeK COMPUTER INC.
SystemProductName = System Product Name
BaseBoardProduct = TUF B360M-PLUS GAMING

The driver is from 2016 check to see if there is a newer version.
Click to expand...

Thanks. Odd because that is what we use for about 800 computers. For some reason this one must have old remnants or something didn't install/update correctly. I'll try something after first of the year and report back- end user is out and computer is off until then.
 
Just an update that we are working with Kaseya to get this resolved. Trying to uninstall our agent resulted in more blue screens.
 
Finally this is resolved. Had to work through multiple layers of Kaseya support to acknowledge it as a problem and assist in resolution. Definitely was their software as it has not blue screened for over a month. Thanks to everyone for their help!
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top