Solved BSOD, kernel_security_check_failure

Faris23

New Member
Messages
2
Hello guys, i need your expertise
at first, the BSOD came when i played game Payday 2.
and then the 2nd when i was just browsing and copying data.
the 3rd basically when my PC is idle, i was fallen asleep :confused:
just installed the windows 8.1 last night, and all drivers are updated.

any reply would be much appreciated :)
thanks !
 

My Computer

System One

  • OS
    Windows 8.1
Only 6 Windows Updates installed. Most systems have 56 - 60 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).
Please un-install the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): New link (15 Aug 2012): DuplexSecure - Downloads (pick the appropriate version for your system and select "Un-install" when you run it).
Alternate link: Disk-Tools.com
Manual procedure here: Registry and SPTD problems | DAEMON Pro Help

At times the Killer Network Manager may cause BSOD prolems:
NOTE: See this link first: http://www.eightforums.com/bsod-cra...msi-gt70-dragon-edition-2-a-4.html#post358413 (thanks to kaelaan) It appears that the Killer Service problem was solved with the latest release of the Qualcomm versions of the drivers (so try updating to a version dated from later in 2014).

The Qualcomm Atheros Killer Service/KillerNetManager is known to cause BSOD's. Please follow the workaround instructions here:
First, open the Run dialog (Win + R keys) and type in "services.msc" (without the quotes) and press Enter
Scroll down and locate the "Qualcomm Atheros Killer Service" and right click on it. Select "Stop"
Right click on it again and this time select "Properties"
In the dropdown box for "Startup type", select "Disabled", then click on the "OK" button at the bottom of the window

Next, open Task Manager (right click on TaskBar and select "Task Manager")
Click on the "More details" dropdown (if present)
Click on the "Startup" tab
Scroll down and locate the "KillerNetManager" entry, right click on it and select "Disable"
There may also be an Install Shield (with the Killer gaming K next to it), if so Right click on it and select "Disable"
Finally, restart the system in order for the changes to take affect.

At times the Killer Network Manager will continue to load. If so, it's usually listed in the MSINFO32...Software Environment...Startup Programs section. If it is, please try this:
It may be that the instructions aren't stopping everything.
In some cases, there's a program running out of the Program Files/Program Files (x86) directory.
"c:\program files\qualcomm atheros\killer network manager\killer~1.exe" (NOTE: killer~1.exe is most likely killernetmanager.exe)
In other cases, there's a program running out of c:\windows\installer\{Long string of letters, numbers, and dashes}\networkmanager.exe_130c27d738f34c89bddf21bcfd74b56d.exe (the long string of letters and numbers may change)

Here's some things to try
1) Please see if there are any entries in the Startup tab of Task Manager that are related to Qualcomm/Atheros/Killer Network Manager (and NOT the card itself) and disable them (please let us know what you find) Be careful as the wrong selection can disable the network card.
2) Check in "msconfig" for any entries that aren't in the Startup tab of Task Manager. Let us know if you find any Qualcomm/Atheros/Killer entries there (we'll disable them differently if they are there).
3) Locate the "c:\program files\qualcomm atheros\killer network manager\killer~1.exe" and rename the .exe to .BAD (the killer~1 is actually a filename that starts with killer and ends with .exe) There will be an error in event viewer, but it'll stop the bugger from loading.
4) Locate the "c:\windows\installer\{Long string of letters, numbers, and dashes}\networkmanager.exe_130c27d738f34c89bddf21bcfd74b56d.exe" entry and rename the last .exe to .BAD (the long string of letters and numbers may change)

Just FYI - here are the MSI workaround instructions: MSI USA

MSI Afterburner (along with Riva Tuner and EVGA Precision) are known to cause BSOD's in some Windows systems (it's driver is usually RTCore64.sys). Please un-install them immediately!

If you're overclocking, please stop the overclock while we're troubleshooting. Feel free to resume the overclock once the system has been stabilized.

All 3 of the memory dumps blame athurx.sys - a driver for your wireless TP-Link device. Please:
- download a fresh copy of the latest, Win8.1 compatible driver for this device
- uninstall the current driver from your system.
- install the freshly downloaded copy of the drivers
- monitor for further BSOD's

Please note the drivers below that date from before the release of Windows 8.1 (17 Oct 2013) - check to see that each and every one is compatible w/Windows 8.1 (at the manufacturer's website). If not, you must either remove the device and it's software - or locate a Windows 8.1 compatible update on the web. Removing some drivers may make the system unstable - so if you're unable to find updates, post back for info on the one's that can/cannot be safely removed.

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings




Analysis:
The following is for informational purposes only.
Code:
[font=lucida console]**************************Sat May  3 15:32:48.129 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\050414-17421-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17031.amd64fre.winblue_gdr.140221-1952
System Uptime:[B]0 days 2:09:28.783[/B]
*** WARNING: Unable to verify timestamp for athurx.sys
*** ERROR: Module load completed but symbols could not be loaded for athurx.sys
Probably caused by :[B]athurx.sys ( athurx+5521 )[/B]
BugCheck [B]139, {3, ffffd000250f26b0, ffffd000250f2608, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd000250f26b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000250f2608, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_athurx+5521[/B]
CPUID:        "Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3100[/B]
  BIOS Version                  V11.4
  BIOS Release Date             02/24/2014
  Manufacturer                  MSI
  Product Name                  MS-7816
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat May  3 13:22:22.573 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\050414-13671-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17031.amd64fre.winblue_gdr.140221-1952
System Uptime:[B]0 days 3:58:02.262[/B]
*** WARNING: Unable to verify timestamp for athurx.sys
*** ERROR: Module load completed but symbols could not be loaded for athurx.sys
Probably caused by :[B]athurx.sys ( athurx+5521 )[/B]
BugCheck [B]139, {3, ffffd00021d5a6b0, ffffd00021d5a608, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00021d5a6b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00021d5a608, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_athurx+5521[/B]
CPUID:        "Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3100[/B]
  BIOS Version                  V11.4
  BIOS Release Date             02/24/2014
  Manufacturer                  MSI
  Product Name                  MS-7816
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat May  3 09:07:51.339 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\050314-16015-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17031.amd64fre.winblue_gdr.140221-1952
System Uptime:[B]0 days 0:33:42.205[/B]
*** WARNING: Unable to verify timestamp for athurx.sys
*** ERROR: Module load completed but symbols could not be loaded for athurx.sys
Probably caused by :[B]athurx.sys ( athurx+5521 )[/B]
BugCheck [B]139, {3, ffffd0018fba56b0, ffffd0018fba5608, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd0018fba56b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd0018fba5608, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_athurx+5521[/B]
CPUID:        "Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: [B]3100[/B]
  BIOS Version                  V11.4
  BIOS Release Date             02/24/2014
  Manufacturer                  MSI
  Product Name                  MS-7816
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
Code:
[font=lucida console]**************************Sat May  3 15:32:48.129 2014 (UTC - 4:00)**************************
MBfilt64.sys                Thu Jul 30 23:40:32 2009 (4A7267B0)
[COLOR=RED][B]athurx.sys                  Wed Apr 20 06:07:45 2011 (4DAEB071)[/B][/COLOR]
AcpiCtlDrv.sys              Tue Jul 17 13:07:16 2012 (50059BC4)
[COLOR=RED][B]NTIOLib_X64.sys             Thu Oct 25 06:27:58 2012 (5089142E)[/B][/COLOR]
iocbios2.sys                Mon Jan  7 12:53:11 2013 (50EB0B87)
ICCWDT.sys                  Wed Jan 23 03:46:01 2013 (50FFA349)
bwcW8x64.sys                Wed Feb 13 12:25:48 2013 (511BCC9C)
e22w8x64.sys                Wed Mar 20 17:24:01 2013 (514A28F1)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
dump_storahci.sys           Thu Aug 22 07:40:39 2013 (5215F8B7)
TeeDriverx64.sys            Thu Sep  5 14:02:18 2013 (5228C72A)
RTKVHD64.sys                Tue Sep 10 09:37:35 2013 (522F209F)
INETMON.sys                 Thu Oct 10 20:28:28 2013 (5257462C)
idmwfp.sys                  Wed Nov 27 09:24:10 2013 (5296008A)
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
ikbevent.sys                Fri Jan 10 12:52:53 2014 (52D03375)
imsevent.sys                Fri Jan 10 12:52:53 2014 (52D03375)
ISCTD.sys                   Wed Jan 22 14:37:35 2014 (52E01DFF)
[COLOR=RED][B]dtsoftbus01.sys             Fri Feb 21 04:49:36 2014 (53072130)[/B][/COLOR]
Wof.sys                     Sat Feb 22 07:11:32 2014 (530893F4)
nvlddmkm.sys                Tue Mar  4 06:07:52 2014 (5315B408)
nvvad64v.sys                Fri Mar 21 13:42:58 2014 (532C7A22)
aswHwid.sys                 Tue Apr  8 11:43:26 2014 (5344191E)
aswRdr2.sys                 Thu Apr 17 07:02:56 2014 (534FB4E0)
aswSnx.sys                  Thu Apr 17 07:03:53 2014 (534FB519)
aswMonFlt.sys               Thu Apr 17 07:04:01 2014 (534FB521)
aswRvrt.sys                 Thu Apr 17 07:04:41 2014 (534FB549)
aswVmm.sys                  Thu Apr 17 07:04:55 2014 (534FB557)
aswSP.sys                   Thu Apr 17 07:12:02 2014 (534FB702)
aswStm.sys                  Thu Apr 17 07:12:31 2014 (534FB71F)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat May  3 09:07:51.339 2014 (UTC - 4:00)**************************
ISCTD64.sys                 Tue Nov 27 14:52:34 2012 (50B51A02)
INETMON.sys                 Wed Mar 13 17:11:58 2013 (5140EB9E)
imsevent.sys                Tue Jul  2 19:59:37 2013 (51D36969)
ikbevent.sys                Tue Jul  2 20:00:06 2013 (51D36986)
[/font]
http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys
http://www.carrona.org/drivers/driver.php?id=athurx.sys
AcpiCtlDrv.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys
http://www.carrona.org/drivers/driver.php?id=iocbios2.sys
http://www.carrona.org/drivers/driver.php?id=ICCWDT.sys
http://www.carrona.org/drivers/driver.php?id=bwcW8x64.sys
http://www.carrona.org/drivers/driver.php?id=e22w8x64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=dump_storahci.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
INETMON.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=idmwfp.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=ikbevent.sys
http://www.carrona.org/drivers/driver.php?id=imsevent.sys
ISCTD.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=dtsoftbus01.sys
Wof.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
aswHwid.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=aswRdr2.sys
http://www.carrona.org/drivers/driver.php?id=aswSnx.sys
http://www.carrona.org/drivers/driver.php?id=aswMonFlt.sys
http://www.carrona.org/drivers/driver.php?id=aswRvrt.sys
http://www.carrona.org/drivers/driver.php?id=aswVmm.sys
http://www.carrona.org/drivers/driver.php?id=aswSP.sys
aswStm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=ISCTD64.sys
INETMON.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=imsevent.sys
http://www.carrona.org/drivers/driver.php?id=ikbevent.sys
 

My Computer

System One

  • OS
    Win8.1Pro - Finally!!!
    Computer type
    Laptop
    System Manufacturer/Model
    Samsung/NP780
    CPU
    Came with the laptop (i7 of some sort)
    Motherboard
    Pretty sure that it has one, but haven't checked inside the case!
    Memory
    upgraded to 12 gB from 8 gB
    Graphics Card(s)
    has switchable - Intel/ATI - Used wrong drivers, now ATI card is inop :( Will have to fix it soon!
    Sound Card
    I'm nearly deaf, so this isn't used often
    Monitor(s) Displays
    Touchscreen on laptop/32" Toshiba on HDMI (laid the Sharp TV on a mouse and cracked the screen!)
    Screen Resolution
    800x600
    Hard Drives
    One Samsung 1tB drive - 5400 rpm. Gonna switch to a 7200/10000 rpm or an SSD (if I can find $500 for a 1tB SSD!)
    - Switched to 500 gB Samsung 840 series SSD - WOW!!!
    PSU
    Why do we ask this for laptops?
    Case
    Silver with a neat Samsung logo
    Cooling
    sub-par, gotta get around to working on it soon Worked on it - still sub-par! :(
    Keyboard
    Microsoft Natural - the same one I've used since it orignally came out around 1995
    Mouse
    no Mouse - Trackball!!!!
    Internet Speed
    too slow when I'm waiting for a download to finish
    Browser
    Yes, I use this (Firefox mostly, w/IE next most)
    Antivirus
    Windows Defender and Windows Firewall
    Other Info
    I'm handsome and a snappy dresser :0)
Only 6 Windows Updates installed. Most systems have 56 - 60 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

Sir, thanks a lot for your time analyzing my dump
after a few days, yes until now there are no more BSOD, maybe its because my windows is just one day old.
once again, thanks a lot sir :)
 

My Computer

System One

  • OS
    Windows 8.1
Back
Top