Solved BSOD Kernel Security Check Failure

adeep

New Member
Messages
8
Hi,

BSOD comes out lately very often with kernel security check failure. İt's come out i guess when watching youtube video in fullscreen and paused video and away from keyboard and screen goes off (power managment). Then i come and saw BSOD with kernel security check.
 

My Computer

System One

  • OS
    windows 8.1
Sorry for thedelay in responding. There just aren't that many people who do BSOD analysis,so at times we get a bit overwhelmed!

Your latest dumpfile blames Probably caused by : NETwew00.sys ( NETwew00+e3ad )
This is the driver for your Intel(R) Centrino(R) Wireless-N 2230.
Please update to the latest windows 8.1 compatible driver from here https://downloadcenter.intel.com/SearchResult.aspx?lang=eng&ProductFamily=Wireless+Networking&ProductLine=Intel%c2%ae+Wi-Fi+Products&ProductProduct=Intel%c2%ae+Centrino%c2%ae+Wireless-N+2230

Looking at your driverlist you have many older driver (windows 8), please update all your drivers to windows 8.1 compatible drivers from the Lenovo downloadpage for your model from here http://support.lenovo.com/en_US/downloads/detail.page?DocID=DS032587

 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    self build
    CPU
    Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
    Motherboard
    Asrock P55 Pro
    Memory
    DDR3 Team--Elite-1333 8 gb
    Graphics Card(s)
    Sapphire R9 280x
    Sound Card
    Realtek Alc 855
    Monitor(s) Displays
    Acer V233H
    Screen Resolution
    1920 x 1020
    Hard Drives
    Samsung evo 850 SSd
    Seagate ST 320 gb
    Samsung HD 750 gb
    Seagate ST 3000gb
    PSU
    OCZ Stealth 600 watt
    Case
    Antec 300
    Mouse
    Speedlink Ledos and Nexus
I noticed a lot of question for bsod so i gave a time for answer :).
i updated wireless driver and check lenovo support page for update. İ am up to date now. But i think maybe my notebook cooler cause bsod. i disconnect it already and now observing for bsod.
i will try with cooler connected again and if bsod not shows, you are right wireless is reason.
 

My Computer

System One

  • OS
    windows 8.1
Hi Adeep,

Did you notice some strange issues with your PC like some of your files just vanish in thin air or like that?

Also, your 2nd and 3rd dumps have a DPC_WATCHDOG_TIMER bugcheck which blames to the nvlddkm.sys which is the NVIDIA driver. Could you please completely remove your NVIDIA driver suite and install the latest WHQL drivers from NVIDIA to see if the issue still persists?

Also, please follow lifetec's advice first and if the issue is still not solved then we could move forward ^_^

@Lifetec - Good work mate, unfortunately it is not allowing me to add you rep <_<
 

My Computer

System One

  • OS
    Windows 8.1 Industry Pro B-)
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core I5 2430M @ 2.4GHz
    Memory
    8 GB DDR3 @ 1600MHz Dual Channel ^_^
    Graphics Card(s)
    Intel HD 3000 B-)
    Screen Resolution
    1366x768
    Hard Drives
    Toshiba 500 GB
    Browser
    Google Chrome
    Antivirus
    Windows Defender & Common Sense!
@blueelvis yes i noticed sometimes my folder on desktop "vanish in thin air". is it related for this kernel problem?

i updated nvidia wdm driver from update. İ will push my pc to the limit, playing game, movies, flash content etc. for recreate bsod :)
 

My Computer

System One

  • OS
    windows 8.1
@blueelvis yes i noticed sometimes my folder on desktop "vanish in thin air". is it related for this kernel problem?

i updated nvidia wdm driver from update. İ will push my pc to the limit, playing game, movies, flash content etc. for recreate bsod :)

Hi adeep,

The thing that is troubling me is your last dump file. Could you please run this tool found over here :-

aswMBR Download

and report back the results of the log file?
 

My Computer

System One

  • OS
    Windows 8.1 Industry Pro B-)
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core I5 2430M @ 2.4GHz
    Memory
    8 GB DDR3 @ 1600MHz Dual Channel ^_^
    Graphics Card(s)
    Intel HD 3000 B-)
    Screen Resolution
    1366x768
    Hard Drives
    Toshiba 500 GB
    Browser
    Google Chrome
    Antivirus
    Windows Defender & Common Sense!
hi again @blueelvis,
here is the logs from aswmbr

p.s: scan end very quick i hope it is normal. Because log is very short also :)
 

My Computer

System One

  • OS
    windows 8.1
:( I get BSOD again. My suspect for that, last night i hibernate and today i wake up pc from hibarnate and continue to use, maybe hibarnate trigger bsod. And nvidia geforce experience pop up for update to 2.1 half hours ago and i update it too. maybe geforce experience is the guilty.
i uploading my sf logs again.
 

My Computer

System One

  • OS
    windows 8.1
Hi Adeep,

Sorry for late reply because I was out of town and seems like a lot of threads opened here. I have analyzed your dump files and below is provided the analysis of your latest dump files :-
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************


KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
buffer overrun.
Arg2: ffffd0003806c610, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd0003806c568, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved


Debugging Details:
------------------




DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump


TRAP_FRAME: ffffd0003806c610 -- (.trap 0xffffd0003806c610)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000002
rdx=ffffffffea84c8b2 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8011fa9f33d rsp=ffffd0003806c7a8 rbp=ffffd000228b90a4
r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
r11=ffffd0003806c7f4 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
Netwew00+0xe33d:
fffff801`1fa9f33d ?? ???
Resetting default scope


EXCEPTION_RECORD: ffffd0003806c568 -- (.exr 0xffffd0003806c568)
ExceptionAddress: fffff8011fa9f33d (Netwew00+0x000000000000e33d)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000002


CUSTOMER_CRASH_COUNT: 1


BUGCHECK_STR: 0x139


PROCESS_NAME: System


CURRENT_IRQL: 2


ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.


EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.


EXCEPTION_PARAMETER1: 0000000000000002


DEFAULT_BUCKET_ID: STACK_COOKIE_CHECK_FAILURE


ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre


LAST_CONTROL_TRANSFER: from fffff801e63deae9 to fffff801e63d2fa0


STACK_TEXT:
ffffd000`3806c2e8 fffff801`e63deae9 : 00000000`00000139 00000000`00000002 ffffd000`3806c610 ffffd000`3806c568 : nt!KeBugCheckEx
ffffd000`3806c2f0 fffff801`e63dee10 : ffffe001`14e5f3a8 ffffd000`3806c4c0 ffffe001`111dc1a0 ffffe001`11190728 : nt!KiBugCheckDispatch+0x69
ffffd000`3806c430 fffff801`e63de034 : ffffe001`17f62900 00000000`00000000 00000000`00000000 fffff801`1df353f0 : nt!KiFastFailDispatch+0xd0
ffffd000`3806c610 fffff801`1fa9f33d : fffff801`1fb9f129 ffffe001`17f628f0 ffffd000`3806c880 ffffe001`17f6cea0 : nt!KiRaiseSecurityCheckFailure+0xf4
ffffd000`3806c7a8 fffff801`1fb9f129 : ffffe001`17f628f0 ffffd000`3806c880 ffffe001`17f6cea0 ffffd000`3806c849 : Netwew00+0xe33d
ffffd000`3806c7b0 ffffe001`17f628f0 : ffffd000`3806c880 ffffe001`17f6cea0 ffffd000`3806c849 ffffe001`14793e10 : Netwew00+0x10e129
ffffd000`3806c7b8 ffffd000`3806c880 : ffffe001`17f6cea0 ffffd000`3806c849 ffffe001`14793e10 fffff801`1fc4c740 : 0xffffe001`17f628f0
ffffd000`3806c7c0 ffffe001`17f6cea0 : ffffd000`3806c849 ffffe001`14793e10 fffff801`1fc4c740 00000000`00000000 : 0xffffd000`3806c880
ffffd000`3806c7c8 ffffd000`3806c849 : ffffe001`14793e10 fffff801`1fc4c740 00000000`00000000 00000000`00000000 : 0xffffe001`17f6cea0
ffffd000`3806c7d0 ffffe001`14793e10 : fffff801`1fc4c740 00000000`00000000 00000000`00000000 00524556`0000004c : 0xffffd000`3806c849
ffffd000`3806c7d8 fffff801`1fc4c740 : 00000000`00000000 00000000`00000000 00524556`0000004c 00000000`00000000 : 0xffffe001`14793e10
ffffd000`3806c7e0 00000000`00000000 : 00000000`00000000 00524556`0000004c 00000000`00000000 00000000`00000000 : Netwew00+0x1bb740




STACK_COMMAND: kb


FOLLOWUP_IP:
Netwew00+e33d
fffff801`1fa9f33d ?? ???


SYMBOL_STACK_INDEX: 4


SYMBOL_NAME: Netwew00+e33d


FOLLOWUP_NAME: MachineOwner


MODULE_NAME: Netwew00


IMAGE_NAME: Netwew00.sys


DEBUG_FLR_IMAGE_TIMESTAMP: 530c94f8


FAILURE_BUCKET_ID: 0x139_2_Netwew00+e33d


BUCKET_ID: 0x139_2_Netwew00+e33d


ANALYSIS_SOURCE: KM


FAILURE_ID_HASH_STRING: km:0x139_2_netwew00+e33d


FAILURE_ID_HASH: {86310b31-3819-64f4-9fa1-7956524c43e1}


Followup: MachineOwner
In all of your dump files, there is presence of "Netwew00.sys" . Since you have updated it to the latest version, I think that there is some software conflict which is causing this BSOD repeatedly. Could you please uninstall the following softwares so that we could eliminate if one of them is causing the conflict :-

1. Connectify (Make sure it is completely removed from your system)
2. ESET Antivirus (Use this LINK to get the cleaning tool and follow the instructions)
3. Internet Download Manager

Also, you using Windows Terminal Server? o_O (Just curious)

Could you also test your system for stability to see if it BSOD's even while your network adapter is turned off?


EDIT :- Could you please run this tool once and report back the output :- GMER - Rootkit Detector and Remover
 

My Computer

System One

  • OS
    Windows 8.1 Industry Pro B-)
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core I5 2430M @ 2.4GHz
    Memory
    8 GB DDR3 @ 1600MHz Dual Channel ^_^
    Graphics Card(s)
    Intel HD 3000 B-)
    Screen Resolution
    1366x768
    Hard Drives
    Toshiba 500 GB
    Browser
    Google Chrome
    Antivirus
    Windows Defender & Common Sense!
Hi Blueelvis,
Thank you for your efford. I suspect connectify too, now almost 12 hours i shutdown connectify and disable its services, there is no bsod. İf still bsod came out i will uninstall Eset and idm and disable network adaptor too.
No i don't use terminals server.
 

My Computer

System One

  • OS
    windows 8.1
Hi Blueelvis,
Thank you for your efford. I suspect connectify too, now almost 12 hours i shutdown connectify and disable its services, there is no bsod. İf still bsod came out i will uninstall Eset and idm and disable network adaptor too.
No i don't use terminals server.
Check my edit of the above post as well ^_^.

Do let me know how it goes on.
 

My Computer

System One

  • OS
    Windows 8.1 Industry Pro B-)
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core I5 2430M @ 2.4GHz
    Memory
    8 GB DDR3 @ 1600MHz Dual Channel ^_^
    Graphics Card(s)
    Intel HD 3000 B-)
    Screen Resolution
    1366x768
    Hard Drives
    Toshiba 500 GB
    Browser
    Google Chrome
    Antivirus
    Windows Defender & Common Sense!
:) i run gmer but in the middle of scan i get bsod with "IRQL_NOT_LESS_OR_EQUAL" error. i added last dmp files, now i will give a try again :)

------------------------

Restart my pc and re run gmer. added log below.
But when start and end popup message told me "c:\windows\system32\config\system:
The process cannot access the file because it is being used by another process" i added screenshot in log zip.
 

My Computer

System One

  • OS
    windows 8.1
I found problem, it is Connectify that cause BSOD. No bsod until i reactivate connectify, after 1 minute bsod comes again with same error.
Thanks agian @blueelvis, @lifetec
 

My Computer

System One

  • OS
    windows 8.1
Thanks for posting back the solution that worked for you ^_^
 

My Computer

System One

  • OS
    Windows 8.1 Industry Pro B-)
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core I5 2430M @ 2.4GHz
    Memory
    8 GB DDR3 @ 1600MHz Dual Channel ^_^
    Graphics Card(s)
    Intel HD 3000 B-)
    Screen Resolution
    1366x768
    Hard Drives
    Toshiba 500 GB
    Browser
    Google Chrome
    Antivirus
    Windows Defender & Common Sense!

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom build
    CPU
    i5-6500 @3.20GHz
    Motherboard
    Gigabyte B150-HD3P-CF
    Memory
    16GB DDR4 2133 Crucial Ballistix Sport LT
    Graphics Card(s)
    MSI GeForce GTX 1060 GAMING X 6G
    Sound Card
    Built-in
    Monitor(s) Displays
    Liyama ProLite XB2483HSU-B2
    Screen Resolution
    1920 x 1080
    Hard Drives
    Crucial MX200 500GB & Toshiba DT01ACA300 3TB
    PSU
    Corsair RM550x
    Case
    Fractal Design Define S
    Cooling
    Cooler Master TX3 i
    Keyboard
    Func KB-460 (MX Red)
    Mouse
    Corsair Gaming M65 RGB
    Browser
    Google Chrome
    Antivirus
    Bitdefender Total Security 2017 + MBAM Pro + MBAE Pro
    Other Info
    Creative Sound Blaster Tactic3D Rage V2 headset
my pc this masseg karnel security check failure and restart plz any body
 

My Computer

System One

  • OS
    EIGHT TORUMS
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Z97-K
    CPU
    core i7
    Motherboard
    ASUS
    Memory
    adata
    Browser
    MOZILLA
    Antivirus
    KASPERSKY

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom build
    CPU
    i5-6500 @3.20GHz
    Motherboard
    Gigabyte B150-HD3P-CF
    Memory
    16GB DDR4 2133 Crucial Ballistix Sport LT
    Graphics Card(s)
    MSI GeForce GTX 1060 GAMING X 6G
    Sound Card
    Built-in
    Monitor(s) Displays
    Liyama ProLite XB2483HSU-B2
    Screen Resolution
    1920 x 1080
    Hard Drives
    Crucial MX200 500GB & Toshiba DT01ACA300 3TB
    PSU
    Corsair RM550x
    Case
    Fractal Design Define S
    Cooling
    Cooler Master TX3 i
    Keyboard
    Func KB-460 (MX Red)
    Mouse
    Corsair Gaming M65 RGB
    Browser
    Google Chrome
    Antivirus
    Bitdefender Total Security 2017 + MBAM Pro + MBAE Pro
    Other Info
    Creative Sound Blaster Tactic3D Rage V2 headset
Back
Top