This pattern is observed when two products from different vendors compete in some functional domain such malware detection. In the example below ApplicationA and AV-DriverA modules belong to Vendor A and AV-B module belongs to Vendor B. Both threads are spiking threads (Volume 1, page 305) blocking all other activity in the system:
0: kd> !running System Processors: (0000000000000003) Idle Processors: (0000000000000000) (0000000000000000) (0000000000000000) (0000000000000000) Prcbs Current Next 0 fffff80001845e80 fffffa8004350060 ................ 1 fffff880009c4180 fffffa80028e7060 ................ 0: kd> !thread fffffa8004350060 3f THREAD fffffa8004350060 Cid 14424.14b34 Teb: 000000007efdb000 Win32Thread: fffff900c1d32c30 RUNNING on processor 0 Not impersonating DeviceMap fffff8a00148fe80 Owning Process fffffa8003d6cb30 Image: ApplicationA.exe Attached Process N/A Image: N/A Wait Start TickCount 10568630 Ticks: 0 Context Switch Count 345 LargeStack UserTime 00:02:21.360 KernelTime 01:09:32.130 Win32 Start Address ApplicationA!mainCRTStartup (0×0000000000404c1b) Stack Init fffff88006c71db0 Current fffff88006c71670 Base fffff88006c72000 Limit fffff88006c6a000 Call 0 Priority 9 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5 Child-SP RetAddr Call Site fffff880`06c70ec0 fffff880`0197d53c AVDriverA+0×15d69 fffff880`06c70f10 fffff880`01988556 AVDriverA+0×1453c fffff880`06c70fd0 fffff880`019886a8 AVDriverA+0×1f556 fffff880`06c71000 fffff800`0198ebfd AVDriverA+0×1f6a8 fffff880`06c71060 fffff800`019bf4f2 nt! ?? ::NNGAKEGL::`string′+0×2a6fd fffff880`06c711e0 fffff800`019c3385 nt!PspCreateThread+0×246 fffff880`06c71460 fffff800`016d28d3 nt!NtCreateThreadEx+0×25d fffff880`06c71bb0 00000000`76e61d9a nt!KiSystemServiceCopyEnd+0×13 (TrapFrame @ fffff880`06c71c20) 00000000`0008e178 00000000`74990411 ntdll!ZwCreateThreadEx+0xa 00000000`0008e180 00000000`7497cf87 wow64!whNtCreateThreadEx+0×815 00000000`0008e350 00000000`748c2776 wow64!Wow64SystemServiceEx+0xd7 00000000`0008ec10 00000000`7497d07e wow64cpu!TurboDispatchJumpAddressEnd+0×2d 00000000`0008ecd0 00000000`7497c549 wow64!RunCpuSimulation+0xa 00000000`0008ed20 00000000`76e54956 wow64!Wow64LdrpInitialize+0×429 00000000`0008f270 00000000`76e51a17 ntdll!LdrpInitializeProcess+0×17e4 00000000`0008f760 00000000`76e3c32e ntdll! ?? ::FNODOBFM::`string′+0×29220 00000000`0008f7d0 00000000`00000000 ntdll!LdrInitializeThunk+0xe
0: kd> !thread fffffa80028e7060 3f THREAD fffffa80028e7060 Cid 0dc4.0e5c Teb: 000000007efa4000 Win32Thread: 0000000000000000 RUNNING on processor 1 Not impersonating DeviceMap fffff8a000008b30 Owning Process fffffa8002817060 Image: AV-B.exe Attached Process N/A Image: N/A Wait Start TickCount 10568617 Ticks: 13 (0:00:00:00.203) Context Switch Count 1763138 UserTime 00:04:26.765 KernelTime 03:09:31.140 Win32 Start Address AV-B (0×00000000004289f2) Stack Init fffff88003b88db0 Current fffff88003b88900 Base fffff88003b89000 Limit fffff88003b83000 Call 0 Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5 Child-SP RetAddr Call Site fffff880`03b88660 fffff800`019919a9 nt!ObReferenceObjectSafe+0xf fffff880`03b88690 fffff800`01991201 nt!PsGetNextProcess+0×81 fffff880`03b886e0 fffff800`019dcef6 nt!ExpGetProcessInformation+0×774 fffff880`03b88830 fffff800`019dd949 nt!ExpQuerySystemInformation+0xfb4 fffff880`03b88be0 fffff800`016d28d3 nt!NtQuerySystemInformation+0×4d fffff880`03b88c20 00000000`76e6167a nt!KiSystemServiceCopyEnd+0×13 (TrapFrame @ fffff880`03b88c20) 00000000`0118e708 00000000`74987da7 ntdll!NtQuerySystemInformation+0xa 00000000`0118e710 00000000`74988636 wow64!whNT32QuerySystemProcessInformationEx+0×93 00000000`0118e760 00000000`7498a0e9 wow64!whNtQuerySystemInformation_SpecialQueryCase+0×466 00000000`0118e800 00000000`7497cf87 wow64!whNtQuerySystemInformation+0xf1 00000000`0118e840 00000000`748c2776 wow64!Wow64SystemServiceEx+0xd7 00000000`0118f100 00000000`7497d07e wow64cpu!TurboDispatchJumpAddressEnd+0×2d 00000000`0118f1c0 00000000`7497c549 wow64!RunCpuSimulation+0xa 00000000`0118f210 00000000`76e8e707 wow64!Wow64LdrpInitialize+0×429 00000000`0118f760 00000000`76e3c32e ntdll! ?? ::FNODOBFM::`string′+0×29364 00000000`0118f7d0 00000000`00000000 ntdll!LdrInitializeThunk+0xe