Windows 8.1 Kernel Security Check Failure

ffteddy · Jul 22, 2014

Been having this problem all of a sudden and blue screen keep happening.
Thanks for you guys help first, please help me to solve this >.<

usasma · Jul 22, 2014

What is your Q: drive? - there is no information available about it in MSINFO32.nfo

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).

Please un-install the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): New link (15 Aug 2012): DuplexSecure - Downloads (pick the appropriate version for your system and select "Un-install" when you run it).
Alternate link: Disk-Tools.com
Manual procedure here: Registry and SPTD problems | DAEMON Pro Help

MSI Afterburner and Riva Tuner (along with EVGA Precision) are known to cause BSOD's in some Windows systems (it's driver is usually RTCore64.sys). Please un-install them immediately!

If you're overclocking, please stop the overclock while we're troubleshooting. Feel free to resume the overclock once the system has been stabilized.

Processor may be overclocked!
Expected Frequency: 2000
Actual Frequency: 2594
Overclock Ratio: 1.297

You have both McAfee and 360 Internet Security (I think this is the program listed: Start Menu\Programs\360安全中心 )
Please uninstall both. Only have one antivirus and one firewall running at a time (they fight each other and cause problems such as BSOD's).
If so desired, then install a freshly downloaded copy of the latest Win8.1 compatible version of the one antivirus/firewall that you choose.

The memory dumps blame Netwbw02.sys - a driver for your Intel® Wireless WiFi Link Adapter
While this is the named cause, other things can cause this (such as the antivirus/firewall conflicts, the Daemon Tools problem, the MSI Afterburner/Riva Tuner programs, or even other things)
Please:
- download the latest, Win8.1 compatible version from the Lenovo website. If not available from Lenovo, then download it from http://downloadcenter.intel.com (search for the Intel(R) Dual Band Wireless-AC 3160 )
- uninstall the current Intel WiFi drivers/software
- install the freshly downloaded drivers/software
- monitor for further BSOD's

Finally, these BSOD's are caused due to a buffer overrun - an attack vector that malware likes to use.
Be sure to scan your system with an independent malware scanner (in case your anti-malware programs are corrupted).

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Tue Jul 22 06:18:44.155 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072214-17875-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 0:01:58.968[/B]
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by :[B]Netwbw02.sys ( Netwbw02+d825 )[/B]
BugCheck [B]139, {2, fffff803d292c1b0, fffff803d292c108, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
    buffer overrun.
Arg2: fffff803d292c1b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff803d292c108, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x139_2_Netwbw02+d825[/B]
CPUID:        "Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz"
MaxSpeed:     2000
CurrentSpeed: [B]2594[/B]
 
Processor may be overclocked!
Expected Frequency:   2000
Actual Frequency:     2594
Overclock Ratio:      [COLOR=red]1.297[/COLOR]
 
  BIOS Version                  A0CN21WW
  BIOS Release Date             03/21/2014
  Manufacturer                  LENOVO
  Product Name                  20405
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 06:16:06.624 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072214-15531-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 0:11:36.437[/B]
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by :[B]Netwbw02.sys ( Netwbw02+d825 )[/B]
BugCheck [B]139, {2, ffffd000a7ebde60, ffffd000a7ebddb8, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
    buffer overrun.
Arg2: ffffd000a7ebde60, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000a7ebddb8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_2_Netwbw02+d825[/B]
CPUID:        "Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz"
MaxSpeed:     2000
CurrentSpeed: [B]2594[/B]
 
Processor may be overclocked!
Expected Frequency:   2000
Actual Frequency:     2594
Overclock Ratio:      [COLOR=red]1.297[/COLOR]
 
  BIOS Version                  A0CN21WW
  BIOS Release Date             03/21/2014
  Manufacturer                  LENOVO
  Product Name                  20405
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 06:03:52.270 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072214-9906-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 0:03:54.082[/B]
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by :[B]Netwbw02.sys ( Netwbw02+d825 )[/B]
BugCheck [B]139, {2, ffffd000e5f865f0, ffffd000e5f86548, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
    buffer overrun.
Arg2: ffffd000e5f865f0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000e5f86548, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_2_Netwbw02+d825[/B]
CPUID:        "Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz"
MaxSpeed:     2000
CurrentSpeed: [B]2594[/B]
 
Processor may be overclocked!
Expected Frequency:   2000
Actual Frequency:     2594
Overclock Ratio:      [COLOR=red]1.297[/COLOR]
 
  BIOS Version                  A0CN21WW
  BIOS Release Date             03/21/2014
  Manufacturer                  LENOVO
  Product Name                  20405
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 05:59:19.293 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072214-13265-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 1:50:16.107[/B]
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by :[B]Netwbw02.sys ( Netwbw02+d825 )[/B]
BugCheck [B]139, {2, ffffd00170550e60, ffffd00170550db8, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
    buffer overrun.
Arg2: ffffd00170550e60, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00170550db8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_2_Netwbw02+d825[/B]
CPUID:        "Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz"
MaxSpeed:     2000
CurrentSpeed: [B]2594[/B]
 
Processor may be overclocked!
Expected Frequency:   2000
Actual Frequency:     2594
Overclock Ratio:      [COLOR=red]1.297[/COLOR]
 
  BIOS Version                  A0CN21WW
  BIOS Release Date             03/21/2014
  Manufacturer                  LENOVO
  Product Name                  20405
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 04:08:16.709 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072214-30281-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 1:48:15.521[/B]
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by :[B]Netwbw02.sys ( Netwbw02+d825 )[/B]
BugCheck [B]139, {2, ffffd000b950d5f0, ffffd000b950d548, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
    buffer overrun.
Arg2: ffffd000b950d5f0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000b950d548, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_2_Netwbw02+d825[/B]
CPUID:        "Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz"
MaxSpeed:     2000
CurrentSpeed: [B]2594[/B]
 
Processor may be overclocked!
Expected Frequency:   2000
Actual Frequency:     2594
Overclock Ratio:      [COLOR=red]1.297[/COLOR]
 
  BIOS Version                  A0CN21WW
  BIOS Release Date             03/21/2014
  Manufacturer                  LENOVO
  Product Name                  20405
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 02:19:34.782 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072214-23156-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]3 days 15:01:02.594[/B]
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by :[B]Netwbw02.sys ( Netwbw02+d825 )[/B]
BugCheck [B]139, {2, ffffd000eff37e60, ffffd000eff37db8, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
    buffer overrun.
Arg2: ffffd000eff37e60, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000eff37db8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_2_Netwbw02+d825[/B]
CPUID:        "Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz"
MaxSpeed:     2000
CurrentSpeed: [B]2594[/B]
 
Processor may be overclocked!
Expected Frequency:   2000
Actual Frequency:     2594
Overclock Ratio:      [COLOR=red]1.297[/COLOR]
 
  BIOS Version                  A0CN21WW
  BIOS Release Date             03/21/2014
  Manufacturer                  LENOVO
  Product Name                  20405
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Tue Jul 22 06:18:44.155 2014 (UTC - 4:00)**************************
GEARAspiWDM.sys               Thu May  3 15:56:17 2012 (4FA2E2E1)
vmci.sys                      Fri May 17 21:19:18 2013 (5196D716)
VMNET.SYS                     Thu Jul 18 15:42:50 2013 (51E8453A)
vmnetadapter.sys              Thu Jul 18 15:43:00 2013 (51E84544)
vmnetbridge.sys               Thu Jul 18 15:43:47 2013 (51E84573)
vsock.sys                     Wed Jul 31 22:46:10 2013 (51F9CBF2)
TeeDriverx64.sys              Mon Aug 19 13:23:31 2013 (52125493)
intelppm.sys                  Thu Aug 22 04:46:35 2013 (5215CFEB)
dtscsidrv.SYS                 Tue Sep 10 09:56:12 2013 (522F24FC)
iaStorA.sys                   Wed Sep 18 11:33:51 2013 (5239C7DF)
dump_iaStorA.sys              Wed Sep 18 11:33:51 2013 (5239C7DF)
AcpiVpc.sys                   Tue Sep 24 22:29:03 2013 (52424A6F)
hcmon.sys                     Wed Oct  9 11:03:51 2013 (52557057)
vmnetuserif.sys               Fri Oct 18 14:19:38 2013 (52617BBA)
vmx86.sys                     Fri Oct 18 15:34:39 2013 (52618D4F)
[COLOR=RED][B]sptd.sys                      Thu Oct 31 11:26:53 2013 (527276BD)[/B][/COLOR]
btmaux.sys                    Wed Nov  6 23:24:38 2013 (527B1606)
btmhsf.sys                    Wed Nov  6 23:25:49 2013 (527B164D)
ibtusb.sys                    Fri Nov 22 18:14:26 2013 (528FE552)
iwdbus.sys                    Tue Dec 17 17:47:38 2013 (52B0D48A)
Rt630x64.sys                  Tue Dec 17 22:30:14 2013 (52B116C6)
igdkmd64.sys                  Mon Dec 30 15:52:24 2013 (52C1DD08)
rtsuvc.sys                    Tue Jan 21 04:12:34 2014 (52DE3A02)
Netwbw02.sys                  Tue Jan 28 13:59:26 2014 (52E7FE0E)
360FsFlt.sys                  Wed Feb 19 23:08:06 2014 (53057FA6)
SynTP.sys                     Tue Feb 25 16:19:45 2014 (530D08F1)
Smb_driver_Intel.sys          Tue Feb 25 16:25:13 2014 (530D0A39)
RTKVHD64.sys                  Tue Mar  4 07:26:03 2014 (5315C65B)
360Camera64.sys               Fri Mar  7 05:29:56 2014 (53199FA4)
nvvad64v.sys                  Fri Mar 28 09:32:06 2014 (533579D6)
BAPIDRV64.sys                 Fri Apr 11 05:52:40 2014 (5347BB68)
nvlddmkm.sys                  Mon May 19 19:08:44 2014 (537A8EFC)
NvStreamKms.sys               Thu May 22 12:43:14 2014 (537E2922)
360Box64.sys                  Tue May 27 05:23:22 2014 (5384598A)
360WiFiNAT64.sys              Wed Jun 11 07:30:12 2014 (53983DC4)
mfehidk.sys                   Fri Jun 13 12:28:09 2014 (539B2699)
mfewfpk.sys                   Fri Jun 13 12:28:21 2014 (539B26A5)
mfeapfk.sys                   Fri Jun 13 12:28:47 2014 (539B26BF)
mfeavfk.sys                   Fri Jun 13 12:29:02 2014 (539B26CE)
mfefirek.sys                  Fri Jun 13 12:30:21 2014 (539B271D)
cfwids.sys                    Fri Jun 13 12:30:46 2014 (539B2736)
360AntiHacker64.sys           Mon Jun 16 01:35:54 2014 (539E823A)
mfencbdc.sys                  Wed Jun 18 06:07:48 2014 (53A164F4)
360netmon.sys                 Thu Jul  3 03:47:50 2014 (53B50AA6)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 06:16:06.624 2014 (UTC - 4:00)**************************
TuneUpUtilitiesDriver64.sys   Fri May 25 06:28:19 2012 (4FBF5EC3)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jul 22 02:19:34.782 2014 (UTC - 4:00)**************************
ComputerZ_x64.sys             Thu Apr 17 23:58:34 2014 (5350A2EA)
[/FONT]

Windows 8.1 Kernel Security Check Failure

ffteddy

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One