Windows updates have not been kind to Microsoft these past few weeks. First we had the file deletion bug in the October 2018 Update and now reports are coming in that HP workstations and laptops are receiving blue screen of death (BSOD) crashes that display a WDF_VIOLATION error after installing the latest Windows 10 updates.
According to numerous comments at BleepingComputer, this crash is being caused by the
C:\Windows\System32\drivers\HpqKbFiltr.sys file that is either installed or updated by this Tuesday’s Cumulative Update for Windows 10 Version 1803 (KB4462919) update. Others are also reporting that the KB4462919 update is causing similar issues or that it is simply a keyboard driver update being pushed out by Microsoft.
This HpqKbFiltr.sys file is a keyboard driver and appears to be part of the HP Quick Launch Buttons software that allows you to configure various buttons to launch programs in Windows.
When users attempt to install the KB4462919 update, the HP computer will crash and display an BSOD stating “Your PC ran into a problem and needs to restart ” and a stop code of WDF_VIOLATION as shown below.
Unfortunately, some BC users are reporting that they are receiving this BSOD crash and do not have the HpqKbFiltr.sys driver on their computer. For these types of users, it is not known what is currently causing their crashes.
Update 10/11/18 11:39 AM EST:
According to a post to the Microsoft forums, a support agent allegedly told a caller that this product is also affecting other systems such as Dell and that they have paused the update while they investigate the issue.
Update 10/11/18 7:11 PM EST:
When we contacted Microsoft regarding this problem, they issued this statement:
“We’re aware of reports and looking into the matter further.” – MS spokesperson
Fixing the WDF_VIOLATION on HP computers
To resolve the WDF_Violation blue screen crash you need to rename or delete the HpqKbFiltr.sys driver. The problem is that this conflict causes Windows 10 to crash before you can get into the operating system to remove the file.
Therefore, you need to delete it before Windows 10 starts by going into the Advanced options Command Prompt. To remove or rename the HpqKbFiltr.sys file, please follow these steps:
- When Windows starts after the crash, it should show you a recovery screen like the one below. At this screen, click on the Troubleshoot option.
- You will now be shown the Troubleshoot screen below, where you should click on the Advanced Options button.
- At the Advanced Options screen below, click on Command Prompt.
- A command prompt will now open. At this command prompt, you will need to determine what drive is associated with your computer’s hard drive. Then navigate to [drive_letter]:\Windows\system32\drivers and rename the HpqKbFiltr.sys file to HpqKbFiltr.sys.bak.While in the drivers folder, you can rename the file using the ren HpqKbFiltr.sys HpqKbFiltr.sys.bakcommand.
- After you have renamed the file, type exit and reboot the computer. Windows 10 should now restart properly.
If you have any issues with this process, feel free to ask in the comments or in the forums.
BleepingComputer has contacted HP for comment on this conflict, but had not heard back at the time of this publication.
