Windows 8 and 8.1 Forums


Various BSOD's at various times.

  1. #1


    Wuxi, China
    Posts : 20
    Windows 7 RTM 64bit, Windows 8 Pro 64bit

    Various BSOD's at various times.


    Hey guys, I am really getting frustrated with all these BSOD's I am getting. They vary from CACHE MANAGER errors to Kernel security failures, etc. I attach the rar as instructed and hope someone can help. Thanks.

      My System SpecsSystem Spec

  2. #2


    bangalore
    Posts : 634
    Windows 8.1 professional x64 + WMC


    Code:
    ********************************************************************************                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    
    KERNEL_SECURITY_CHECK_FAILURE (139)
    A kernel component has corrupted a critical data structure.  The corruption
    could potentially allow a malicious user to gain control of this machine.
    Arguments:
    Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
    Arg2: fffff8801c163610, Address of the trap frame for the exception that caused the bugcheck
    Arg3: fffff8801c163568, Address of the exception record for the exception that caused the bugcheck
    Arg4: 0000000000000000, Reserved
    
    
    Debugging Details:
    ------------------
    
    
    
    
    TRAP_FRAME:  fffff8801c163610 -- (.trap 0xfffff8801c163610)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa8012b753b0 rbx=0000000000000000 rcx=0000000000000003
    rdx=fffffa8012a0cfe0 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff802e9ad2bb0 rsp=fffff8801c1637a0 rbp=0000000000000000
     r8=0000000000000002  r9=0000000000000000 r10=fffff880009c0e80
    r11=fffffa8012a77880 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na po cy
    nt!IopCompleteRequest+0x8db:
    fffff802`e9ad2bb0 cd29            int     29h
    Resetting default scope
    
    
    EXCEPTION_RECORD:  fffff8801c163568 -- (.exr 0xfffff8801c163568)
    ExceptionAddress: fffff802e9ad2bb0 (nt!IopCompleteRequest+0x00000000000008db)
       ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
      ExceptionFlags: 00000001
    NumberParameters: 1
       Parameter[0]: 0000000000000003
    
    
    CUSTOMER_CRASH_COUNT:  1
    
    
    DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
    
    
    BUGCHECK_STR:  0x139
    
    
    PROCESS_NAME:  svchost.exe
    
    
    CURRENT_IRQL:  2
    
    
    ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
    
    
    EXCEPTION_PARAMETER1:  0000000000000003
    
    
    IRP_ADDRESS:  ffffffffffffff88
    
    
    LAST_CONTROL_TRANSFER:  from fffff802e9a97a69 to fffff802e9a98740
    
    
    STACK_TEXT:  
    fffff880`1c1632e8 fffff802`e9a97a69 : 00000000`00000139 00000000`00000003 fffff880`1c163610 fffff880`1c163568 : nt!KeBugCheckEx
    fffff880`1c1632f0 fffff802`e9a97d90 : 00000000`00000000 fffffa80`0e456800 fffff780`00000320 fffffa80`0e96c160 : nt!KiBugCheckDispatch+0x69
    fffff880`1c163430 fffff802`e9a96ff4 : fffffa80`129ba040 fffff880`1c1636f9 fffffa80`00000006 fffffa80`00000003 : nt!KiFastFailDispatch+0xd0
    fffff880`1c163610 fffff802`e9ad2bb0 : fffffa80`12a77880 fffffa80`10e5d080 00000000`00000001 fffffa80`206c644d : nt!KiRaiseSecurityCheckFailure+0xf4
    fffff880`1c1637a0 fffff802`e9a571d1 : 00000000`00000000 00000000`00000000 00000000`00000a00 fffffa80`10e5d080 : nt!IopCompleteRequest+0x8db
    fffff880`1c163870 fffff802`e9e65e06 : fffffa80`11474e40 fffffa80`10e5d001 00000000`00000001 fffffa80`12b75390 : nt!IopPostProcessIrp+0x71
    fffff880`1c163910 fffff802`e9ad8585 : fffffa80`11474e40 0000000c`d7cda880 fffff880`1c163a40 00000000`00000000 : nt!IoRemoveIoCompletion+0x196
    fffff880`1c1639a0 fffff802`e9a97753 : 00000000`0000009c 0000000c`d7cda880 fffff880`00000010 0000000c`c867fc40 : nt!NtWaitForWorkViaWorkerFactory+0x295
    fffff880`1c163b00 000007f9`774f46ab : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    0000000c`c867fbe8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007f9`774f46ab
    
    
    
    
    STACK_COMMAND:  kb
    
    
    FOLLOWUP_IP: 
    nt!KiFastFailDispatch+d0
    fffff802`e9a97d90 c644242000      mov     byte ptr [rsp+20h],0
    
    
    SYMBOL_STACK_INDEX:  2
    
    
    SYMBOL_NAME:  nt!KiFastFailDispatch+d0
    
    
    FOLLOWUP_NAME:  MachineOwner
    
    
    MODULE_NAME: nt
    
    
    IMAGE_NAME:  ntkrnlmp.exe
    
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  50875b31
    
    
    BUCKET_ID_FUNC_OFFSET:  d0
    
    
    FAILURE_BUCKET_ID:  0x139_3_nt!KiFastFailDispatch
    
    
    BUCKET_ID:  0x139_3_nt!KiFastFailDispatch
    
    
    Followup: MachineOwner
    ---------
    Did you try sfc/scannow command??
      My System SpecsSystem Spec

  3. #3


    Wuxi, China
    Posts : 20
    Windows 7 RTM 64bit, Windows 8 Pro 64bit


    No, I did not, and don't really want to. I have a lot of edited files as I use a custom designed W8 visual style. But if you think that it will resolve all these BSOD's I am having, then I will do it.
      My System SpecsSystem Spec

  4. #4


    bangalore
    Posts : 634
    Windows 8.1 professional x64 + WMC


    sfc scans for protected system files and if it is corrupt it will try to correct them..

    By the way which anti virus do you have?
      My System SpecsSystem Spec

  5. #5


    Wuxi, China
    Posts : 20
    Windows 7 RTM 64bit, Windows 8 Pro 64bit


    Yeah, I know, but it will also revert the files I edited.

    I use Norton Internet Security
      My System SpecsSystem Spec

  6. #6


    Tropical Island Pair a Dice
    Posts : 3,030
    Windows 8.1 Pro x64/ Windows 7 Ult x64


    Hi Pierre, long time since I've seen you post, welcome back.

    Agree with bagavan, looks like there is some kernel corruption. Probably caused by your alterations, best way to find out for sure is to make a image backup, run SFC and see if that corrects it.
    If it does, then you can make another image backup, then add you graphics alterations again, see if it starts crashing.
    The image backups should save you some time, installations, etc.
    If you don't have an image backup program you can get WD free version of Acronis.
    Acronis True Image WD Edition Software


    We have also seen Norton cause crashes on w8.
    For testing, un-install it and run MSE or Avast, until the cause is found.
      My System SpecsSystem Spec

  7. #7


    Wuxi, China
    Posts : 20
    Windows 7 RTM 64bit, Windows 8 Pro 64bit


    Thanks gents. I will get onto this, and report back. Good to see you still in action Dave!
      My System SpecsSystem Spec

  8. #8


    Tropical Island Pair a Dice
    Posts : 3,030
    Windows 8.1 Pro x64/ Windows 7 Ult x64


    Let us know how it's going.

    Additional info from your System Event Logs:
    Code:
    Event[12]:
      Log Name: System
      Source: Microsoft-Windows-Kernel-General
      Date: 2012-11-05T02:43:51.780
      Event ID: 6
      Task: N/A
      Level: Error
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: Pierre
      Description: 
    An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): ''.
    
    Event[423]:
      Log Name: System
      Source: Service Control Manager
      Date: 2012-11-05T03:36:31.551
      Event ID: 7030
      Task: N/A
      Level: Error
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: Pierre
      Description: 
    The ServiceLayer service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    
    Event[708]:
      Log Name: System
      Source: Ntfs
      Date: 2012-11-05T11:28:05.875
      Event ID: 55
      Task: N/A
      Level: Error
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: Pierre
      Description: 
    A corruption was discovered in the file system structure on volume D:.
    
    The exact nature of the corruption is unknown.  The file system structures need to be scanned online.
    
    Event[811]:
      Log Name: System
      Source: disk
      Date: 2012-11-05T11:48:08.933
      Event ID: 153
      Task: N/A
      Level: Warning
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: Pierre
      Description: 
    The IO operation at logical block address 633498 for Disk 0 was retried.
    
    Event[5498]:
      Log Name: System
      Source: Service Control Manager
      Date: 2012-11-28T11:54:46.682
      Event ID: 7009
      Task: N/A
      Level: Error
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: Pierre
      Description: 
    A timeout was reached (30000 milliseconds) while waiting for the Software Protection service to connect.
    Run the WD Lifeguard test on your 2TB HDD. Quick Test and Extended Test.
    Data Lifeguard Diagnostic for Windows
    Code:
    Event[5187]:
      Log Name: System
      Source: disk
      Date: 2012-11-27T19:14:12.552
      Event ID: 7
      Task: N/A
      Level: Error
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: Pierre
      Description: 
    The device, \Device\Harddisk0\DR0, has a bad block.
    STOP 0x00000034: CACHE_MANAGER
    Usual causes: Insufficient physical memory, Indexing, Device driver
    Several of these.
    Code:
    Event[5374]:
      Log Name: System
      Source: Microsoft-Windows-WER-SystemErrorReporting
      Date: 2012-11-28T09:03:14.000
      Event ID: 1001
      Task: N/A
      Level: Error
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: Pierre
      Description: 
    The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000034 (0x0000000000050eec, 0xfffff880017e57f8, 0xfffff880017e5030, 0xfffff8038dd672b3). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 112812-88968-01.

    Looks like your CPU is overheating.
    Code:
    Event[5485]:
      Log Name: System
      Source: Microsoft-Windows-Kernel-Power
      Date: 2012-11-28T11:51:40.840
      Event ID: 125
      Task: N/A
      Level: Information
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: Pierre
      Description: 
    ACPI thermal zone \_TZ.TZ01 has been enumerated.             
    _PSV = 372K             
    _TC1 = 1             
    _TC2 = 5             
    _TSP = 1000ms             
    _AC0 = 0K             
    _AC1 = 0K             
    _AC2 = 0K             
    _AC3 = 0K             
    _AC4 = 0K             
    _AC5 = 0K             
    _AC6 = 0K             
    _AC7 = 0K             
    _AC8 = 0K             
    _AC9 = 0K             
    _CRT = 372K             
    _HOT = 0K
    This is probably why only one crash dump was in your zip file.
    Code:
    Event[5496]:
      Log Name: System
      Source: Microsoft-Windows-WER-SystemErrorReporting
      Date: 2012-11-28T11:53:22.000
      Event ID: 1018
      Task: N/A
      Level: Information
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: Pierre
      Description: 
    The dump file at location: C:\Windows\MEMORY.DMP was deleted because the disk volume had less than 25 GB free space.
    Last edited by Dave76; 28 Nov 2012 at 04:21.
      My System SpecsSystem Spec

  9. #9


    Wuxi, China
    Posts : 20
    Windows 7 RTM 64bit, Windows 8 Pro 64bit


    I tried to do a clean install of W8, but can't even do that now. During installation I am getting a BSOD now.....CACHE_MANAGER error or something......
      My System SpecsSystem Spec

  10. #10


    Tropical Island Pair a Dice
    Posts : 3,030
    Windows 8.1 Pro x64/ Windows 7 Ult x64


    Looks like you're having hardware issues. You need to fix them first.

    Get the Data Lifeguard Diagnostic for DOS, it will run without Windows.
    Run Data Lifeguard Tools 11 for DOS on your hard drive.
    How to create a Data Lifeguard diagnostics bootable CD.
    Run the QUICK TEST and the EXTENDED TEST.

    That BSoD may be due to the CPU overheating.
    Check that the case and fans are clean, check if the CPU cooler is firmly attached.
    If everything is ok, then replace the CPU thermal paste.
    Let me know if you need help with that.
      My System SpecsSystem Spec

Various BSOD's at various times.
Related Threads
BSOD Random times. in BSOD Crashes and Debugging
I've had numerous BSOD crashes recently. The past two have occurred around 5 hours of pc uptime. At the time i was skyping and watching a youtube video, for both of these times. Help would be appreciated. 56549 Specs: Windows 8.1 64bit Intel 4790k Geforce 660ti 16GB Ram.
BSOD Random Times in BSOD Crashes and Debugging
For the past two days, I have been getting the BSOD randomly. The only error code I get is Kernal_Data_Inpage_Error. Thank you for your help! 56576
Get tons of BSODs, a different explanations very time. I get Memory Management, Kernel Security Check Fail, NTFS File System, System Service Exceptions... Please help!
BSOD 1-2 times a day in BSOD Crashes and Debugging
Hi. I am getting a BSOD 1-2 times a day. It seems to happen most often when running Steam or a gaming application, but is not unique to running those types of applications. I have had the comp crash while watching a movie or even just idling. Usually when the BSOD of death shows up I get the...
BSOD numerous times. in BSOD Crashes and Debugging
Hi. Thanks in advance for reading this. I have received multiple BSOD within the past week and I am not sure what it is. I suspect it might be drivers but I am not certain. Thank you for your time, Justin
BSOD for multiple times in BSOD Crashes and Debugging
Don't know why keep having BSOD
BSOD on Win 8 3-4 times a day in BSOD Crashes and Debugging
Hi guys Recently upgraded my wife's laptop from win 7 to the release preview build 8400 now im getting BSOD nearly 3-4 times a day I have memtest86'ed the ram, HDD Checkdisked, with no errors, I even changed hdd, and still getting crashes :( I have attached the minidump files for you to...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook