BSOD for several days

Norton 360 for Windows
1

I am experiencing problems with BSOD for several days, but until now I wasn’t able to sort out it. I tried to upload .dmp file, but wasn’t doable. I only could send a part of EventViewer.

Level Date and Time Source Event ID Task Category
Error 14/06/2026 22:26:35 Service Control Manager 7031 None The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
Warning 14/06/2026 22:26:34 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 22:26:34 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Error 14/06/2026 22:26:29 Service Control Manager 7009 None A timeout was reached (45000 milliseconds) while waiting for the Intel(R) Platform License Manager Service service to connect.
Error 14/06/2026 22:26:29 Microsoft-Windows-DeviceAssociationService 3502 (7000) Device Disassociation (Unpairing) Failed.
Warning 14/06/2026 22:26:28 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}
and APPID
{2ED83BAA-B2FD-43B1-99BF-E6149C622692}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 22:26:28 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 22:26:27 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 22:26:27 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 22:26:27 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Error 14/06/2026 22:26:27 Microsoft-Windows-WER-SystemErrorReporting 1001 None The computer has rebooted from a bugcheck. The bugcheck was: 0x00020001 (0x0000000000000011, 0x00000000002cd420, 0x0000000000001005, 0xffffe70001205d10). A dump was saved in: C:\WINDOWS\Minidump\061426-10796-01.dmp. Report Id: 7fa97b5c-5f1d-47e5-8406-2c9ac2638ab0.
Warning 14/06/2026 22:26:21 e2fnexpress 27 None "Intel(R) Ethernet Controller (3) I225-V
Network link is disconnected.
"
Critical 14/06/2026 22:26:19 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Error 14/06/2026 22:26:19 volmgr 162 None Dump file generation succeded.
Error 14/06/2026 22:26:19 volmgr 161 None Dump file creation failed due to error during dump creation. BugCheckProgress was: 0x00000053
Error 14/06/2026 22:26:17 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Error 14/06/2026 22:26:17 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Error 14/06/2026 22:26:17 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Error 14/06/2026 22:26:17 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Warning 14/06/2026 22:26:17 Microsoft-Windows-Hyper-V-Hypervisor 167 None The hypervisor did not enable mitigations for side channel vulnerabilities for virtual machines because HyperThreading is enabled. To enable mitigations for virtual machines, disable HyperThreading.
Error 14/06/2026 22:26:28 EventLog 6008 None The previous system shutdown at 10:09:18 PM on ‎6/‎14/‎2026 was unexpected.
Warning 14/06/2026 21:53:22 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:44:36 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:39:25 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}
and APPID
{2ED83BAA-B2FD-43B1-99BF-E6149C622692}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:39:14 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:30:25 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:30:25 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:30:25 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:30:25 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:32 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:32 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:32 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:31 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:28 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:28 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Error 14/06/2026 21:29:27 Service Control Manager 7031 None The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
Error 14/06/2026 21:29:19 Service Control Manager 7009 None A timeout was reached (45000 milliseconds) while waiting for the Intel(R) Platform License Manager Service service to connect.
Error 14/06/2026 21:29:19 Microsoft-Windows-DeviceAssociationService 3502 (7000) Device Disassociation (Unpairing) Failed.
Warning 14/06/2026 21:29:18 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}
and APPID
{2ED83BAA-B2FD-43B1-99BF-E6149C622692}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:29:18 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 21:29:17 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 21:29:17 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 21:29:17 Microsoft-Windows-FilterManager 11 None “File System Filter ‘PDFsFilter’ (Version 6.1, ‎2018‎-‎10‎-‎26T15:49:03.000000000Z) does not support bypass IO.
Supported features: 0x0.”
Warning 14/06/2026 21:29:10 e2fnexpress 27 None "Intel(R) Ethernet Controller (3) I225-V
Network link is disconnected.
"
Error 14/06/2026 21:29:07 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Error 14/06/2026 21:29:07 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Error 14/06/2026 21:29:07 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Error 14/06/2026 21:29:07 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.
Warning 14/06/2026 21:29:07 Microsoft-Windows-Hyper-V-Hypervisor 167 None The hypervisor did not enable mitigations for side channel vulnerabilities for virtual machines because HyperThreading is enabled. To enable mitigations for virtual machines, disable HyperThreading.
Warning 14/06/2026 21:28:38 Microsoft-Windows-WLAN-AutoConfig 10002 None "WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_1dcc048ae0ea02f8\IntelIHVRouter14.dll
"
Error 14/06/2026 21:20:14 Service Control Manager 7031 None The Norton Antivirus service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
Warning 14/06/2026 21:17:19 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”
Warning 14/06/2026 21:17:19 Microsoft-Windows-DistributedCOM 10016 None “The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user LeonardoVDBrito\sojes SID (S-1-5-21-427952838-1041004274-1754775166-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.”

2

@Leonardo_von_Dolinge Please tell us the following if you will: Note- All the errors you are posting here indicate local activation permissions, and system file corruption. Did this begin occurring during an update to Windows, Norton or have you seen signs of an infection? There is a lot going on with your device that suggests several things.

  • What is the version and build of your Windows installation? IE: Window 11 25H2 26200.8655 is the latest

  • Did you recently update the system BIOS and for some reason it failed? I see that suggestion on the text of the dump file you posted. There is more than one instance of the following in that dump:
    " Error 14/06/2026 22:26:17 ACPI 16 None : ACPI BIOS contains a _PRW, _PR0, _PR1, _PR2 or _PR3 object which is not a package. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS.

  • Is your version of Windows running in S mode?

  • What CPU do you have?

  • Are you logging into the computer under an account that has admin privileges?

Your first error: Microsoft-Windows-DistributedCOM
What is event ID 10016? This error code is generated when an app attempts to access the DCOM server or issues requests without adequate permissions . This error code 10016 mainly contains the CLSID and APPID, which are distinctive for every app and are needed to permit app-oriented permissions

Repair Corrupted System Files: Services Control Manager error 7009

If a core Windows service is timing out, system file corruption may be the root cause. [1]

  1. Press Windows + S and type cmd. Right-click Command Prompt and select Run as administrator.
  2. Type sfc /scannow and press Enter.
  3. Once the scan is finished, type dism.exe /online /cleanup-image /restorehealth and press Enter to ensure the Windows image is healthy.
  4. Restart your PC. [1, 2]

PDFsFilter: What is error in Microsoft-Windows-FilterManager

AI Overview

[image]

PDFsFilter (PDFsFilter.sys) is a Windows file system filter driver often associated with disk defragmentation tools like PerfectDisk. It sits between your operating system and storage drive to monitor, observe, or modify file inputs and outputs (I/O). [1, 2, 3, 4]

Why Are You Seeing It?

Most users discover PDFsFilter when trying to use Windows features like DirectStorage or the Xbox Game Bar. Windows 11 uses a performance feature called BypassIO to speed up game load times. If PDFsFilter is active, it blocks BypassIO. When this happens, Windows generates an error stating: “BypassIO not supported due to driver: PDFsFilter”. [1, 2, 3, 4, 5]

Where Is It?

If you have it installed on your system, it typically resides in the folder:
C:\Windows\System32\drivers [1]

How to Fix the BypassIO Conflict

Users on forums like [image]⁠Windows 11 Forum have varying experiences with it, but the general consensus is that it is a legacy driver. If you are experiencing performance drops or errors, you can manage it using the following steps: [1, 2]

  1. Uninstall the Software: The safest way to remove PDFsFilter.sys is to uninstall the program that installed it (usually PerfectDisk or another older disk utility).
  2. Check the Status: You can check the exact BypassIO health state for your drive by running the command fsutil bypassIo state c:\ in an elevated Command Prompt. [1, 3]

Bugcheck was: 0x00020001

AI Overview

The bugcheck 0x00020001 error code signifies a HYPERVISOR_ERROR, which means the Windows hypervisor has encountered a fatal, unrecoverable exception. This Blue Screen of Death (BSOD) usually happens due to conflicts with virtualization platforms, corrupted firmware, unstable overclocking, or faulty hardware. [1, 2, 3, 4, 5]

:hammer_and_wrench: Primary Fixes

Reset the Hypervisor Launch State [1]

The hypervisor can load incorrectly if its configuration cache corrupts. Force Windows to reload it cleanly:

  1. Open Command Prompt as an administrator.
  2. Run this command: bcdedit /set hypervisorlaunchtype auto.
  3. Restart your computer. [1, 2]

Resolve Third-Party Hypervisor Conflicts [1]

Running tools like VMware Workstation or VirtualBox alongside built-in Windows security features (like WSL2 or Core Isolation) can trigger this crash. If the error persists, completely disable Hyper-V to remove conflicts: [1, 2, 3]

  1. Open the administrator Command Prompt.
  2. Run the command: bcdedit /set hypervisorlaunchtype off.
  3. Open Windows Security and navigate to Device Security > Core Isolation.
  4. Toggle Memory Integrity to Off.
  5. Restart your computer. [1, 2]

Update BIOS/UEFI Firmware

Because hypervisor environments operate at a low hardware level, an outdated motherboard BIOS can communicate poorly with Windows virtualization features. Visit your motherboard manufacturer’s support site to download and flash the latest BIOS version. Ensure hardware virtualization settings (such as Intel VT-x or AMD-V) remain explicitly enabled after the update. [1, 2, 3]

Inspect for System Corruptions [1]

Corrupted system directories can force critical infrastructure to collapse. Check your system integrity by running the system file checker tool:

  1. Open the administrator Command Prompt.
  2. Type sfc /scannow and press Enter.
  3. After it completes, execute: DISM /Online /Cleanup-Image /RestoreHealth. [1, 2]

Verify Hardware Stability [1]

Virtualization environments put high pressure on physical system memory. Unstable memory timings or failing modules will frequently trip a HYPERVISOR_ERROR. [1, 2, 3]

  • Turn off XMP or EXPO memory profiles in your BIOS to see if a stock configuration stabilizes the computer.
  • Run a deep diagnostic scan using a tool like MemTest86 to isolate failing RAM sticks. [1, 2]

:magnifying_glass_tilted_left: Advanced Diagnosis

Because the parameters for this bug check are generic, you must inspect the raw system logs to find the exact component causing the crash: [1]

  1. Download WinDbg from the Microsoft Store.
  2. Launch the app, select File, and open the crash log located at C:\Windows\Minidump\.
  3. Click the !analyze -v hyperlink inside the debugger window.
  4. Look for the MODULE_NAME or IMAGE_NAME lines to see if a specific third-party driver (like an antivirus program or network adapter driver) caused the crash. [1, 2, 3, 4]

SA

1 Like
3

@Leonardo_von_Dolinge The first suggestion from the previous post about your dumpfile, I suggest doing the following first:

  1. Press Windows + S and type cmd. Right-click Command Prompt and select Run as administrator.
  2. Type sfc /scannow and press Enter.
  3. Once the scan is finished, type dism.exe /online /cleanup-image /restorehealth and press Enter to ensure the Windows image is healthy.
  4. Restart your PC. Re-check

Edited: Another issue presented was LRPC

AI Overview

In Windows, LRPC stands for Lightweight Remote Procedure Call. It is a heavily optimized, internal communication protocol used by the operating system to allow different programs and services running on the same machine to securely communicate with each other. [1, 2, 3]

How LRPC Works vs. RPC

Unlike standard Remote Procedure Calls (RPC) which are used to communicate across a network, LRPC is designed specifically for inter-process communication (IPC) on the local device. It acts as a bridge, allowing local protection domains (such as apps, services, and system daemons) to pass data and invoke functions back and forth quickly without the overhead of network packets. [1, 2, 3, 4]

The “LRPC” Error in Event Viewer

If you searched for LRPC, you are likely encountering Event ID 10016 in your Windows Event Viewer. This warning states that an application-specific permission setting does not grant “Local Activation” to a user (usually NT AUTHORITY\SYSTEM) running locally via LRPC. [1, 2, 3]

These warnings most frequently relate to built-in Microsoft services (like Windows.SecurityCenter.WscDataProtection or RuntimeBroker) trying to activate before the necessary background services have fully started. [1, 2]

How to Fix or Bypass the LRPC 10016 Warning

Microsoft officially recognizes these 10016 events as “by design” in many cases, meaning they can usually be safely ignored. They rarely cause system crashes or adverse impacts on daily performance

SA

4

I thank you for all your willingness and assistance. I follow your advices and, until now, I didn’t have more BSODs.

I am very hopelly that the problem is finally sorted out.

Thank you very much. May Jesus bless you.

1 Like
5

Awesome news indeed. Glad we could help with your issue. Let us know if the issue returns, we can follow up again.

SA