Solved Random BSOD Kernal security check failed

xaos · May 6, 2014

Hello all

I am getting a random BSOD and I can't pinpoint the cause. It seems to be completely at random.

Attached files. Any help appreciated

usasma · May 7, 2014

C: drive only has about 7% free space. Windows likes 15% free space in order to perform stuff "behind the scenes" without adversely affecting the system's performance. Please free up 15% on ALL hard drives (you can get away with 10% on larger drives and won't notice a large performance penalty)

You have 3 hard drives. What is the make/model/wattage and age of your Power Supply?

This device has issues in Device Manager:

Programmable Root Enumerator ROOT\PROGRAMMING_SUPPORT\0001 This device is not working properly because Windows cannot load the drivers required for this device.

This one is difficult to find. Try right clicking on it and select "Uninstall", then reboot to see if it comes back. Let us know the results and we'll move on from there.

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).

Please un-install the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): New link (15 Aug 2012): DuplexSecure - Downloads (pick the appropriate version for your system and select "Un-install" when you run it).
Alternate link: Disk-Tools.com
Manual procedure here: Registry and SPTD problems | DAEMON Pro Help

MSI Afterburner (along with Riva Tuner and EVGA Precision) are known to cause BSOD's in some Windows systems (it's driver is usually RTCore64.sys). Please un-install them immediately!

If you're overclocking, please stop the overclock while we're troubleshooting. Feel free to resume the overclock once the system has been stabilized.

Acronis drivers date from 2010 (snapman.sys) - please uninstall Acronis.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

AsIO.sys Mon Apr 6 03:21:08 2009 (49D9AD64)
Asus PCProbe Utility
http://www.carrona.org/drivers/driver.php?id=AsIO.sys

AtiPcie.sys Tue May 5 11:00:22 2009 (4A005486)
ATI PCIE Driver for ATI PCIE chipset or [br] ATI PCI Express (3GIO) Filter[br]Found in my ATI video drivers (I have an Intel chipset)
http://www.carrona.org/drivers/driver.php?id=AtiPcie.sys

nvBridge.kmd Fri May 20 23:58:23 2011 (4DD7385F)
nVidia Compatible Vista Kernel Mode Driver (likely belongs to nForce chipset drivers)
http://www.carrona.org/drivers/driver.php?id=nvBridge.kmd

LEqdUsb.Sys Fri Sep 2 02:22:56 2011 (4E607640)
Logitech SetPoint Unifying KMDF USB Filter
http://www.carrona.org/drivers/driver.php?id=LEqdUsb.Sys

LHidEqd.Sys Fri Sep 2 02:22:59 2011 (4E607643)
Logitech SetPoint Unifying KMDF HID Filter
http://www.carrona.org/drivers/driver.php?id=LHidEqd.Sys

LHidFilt.Sys Fri Sep 2 02:23:09 2011 (4E60764D)
Logitech SetPoint HID Filter Driver
http://www.carrona.org/drivers/driver.php?id=LHidFilt.Sys

LMouFilt.Sys Fri Sep 2 02:23:15 2011 (4E607653)
Logitech SetPoint HID Filter Driver
http://www.carrona.org/drivers/driver.php?id=LMouFilt.Sys

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Tue May  6 16:49:50.194 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\050614-58593-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].16452.amd64fre.winblue_gdr.131030-1505
System Uptime:[B]0 days 0:02:10.972[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd00026bea120, ffffd00026bea078, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00026bea120, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00026bea078, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  AvastSvc.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
  BIOS Version                  0803   
  BIOS Release Date             07/23/2012
  Manufacturer                  System manufacturer
  Product Name                  System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon May  5 17:20:42.755 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\050514-49765-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].16452.amd64fre.winblue_gdr.131030-1505
System Uptime:[B]4 days 1:55:48.534[/B]
Probably caused by :[B]win32k.sys ( win32k!xxxRealSleepThread+87 )[/B]
BugCheck [B]3B, {c0000005, fffff960000d7687, ffffd0002662bf80, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000003B]SYSTEM_SERVICE_EXCEPTION (3b)[/url]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff960000d7687, Address of the instruction which caused the bugcheck
Arg3: ffffd0002662bf80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  CurseClient.ex
FAILURE_BUCKET_ID: [B]0x3B_win32k!xxxRealSleepThread[/B]
  BIOS Version                  0803   
  BIOS Release Date             07/23/2012
  Manufacturer                  System manufacturer
  Product Name                  System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Apr 14 15:35:17.642 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\041414-85515-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].16452.amd64fre.winblue_gdr.131030-1505
System Uptime:[B]0 days 0:19:25.422[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KeRemoveQueueEx+7f9 )[/B]
BugCheck [B]1E, {ffffffffc000001d, fffff800ec91d1a9, ffffe000030433c0, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001E]KMODE_EXCEPTION_NOT_HANDLED (1e)[/url]
Arguments: 
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff800ec91d1a9, The address that the exception occurred at
Arg3: ffffe000030433c0, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c000001d
PROCESS_NAME:  ProfilerU.exe
FAILURE_BUCKET_ID: [B]0x1E_c000001d_BAD_IP_nt!KeRemoveQueueEx[/B]
  BIOS Version                  0803   
  BIOS Release Date             07/23/2012
  Manufacturer                  System manufacturer
  Product Name                  System Product Name
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Tue May  6 16:49:50.194 2014 (UTC - 4:00)**************************
[COLOR=RED][B]AsIO.sys                    Mon Apr  6 03:21:08 2009 (49D9AD64)[/B][/COLOR]
[COLOR=RED][B]AtiPcie.sys                 Tue May  5 11:00:22 2009 (4A005486)[/B][/COLOR]
[COLOR=RED][B]snapman.sys                 Sat Apr 10 05:16:30 2010 (4BC041EE)[/B][/COLOR]
[COLOR=RED][B]nvBridge.kmd                Fri May 20 23:58:23 2011 (4DD7385F)[/B][/COLOR]
[COLOR=RED][B]fltsrv.sys                  Thu Jul 14 05:50:57 2011 (4E1EBC01)[/B][/COLOR]
[COLOR=RED][B]LEqdUsb.Sys                 Fri Sep  2 02:22:56 2011 (4E607640)[/B][/COLOR]
[COLOR=RED][B]LHidEqd.Sys                 Fri Sep  2 02:22:59 2011 (4E607643)[/B][/COLOR]
[COLOR=RED][B]LHidFilt.Sys                Fri Sep  2 02:23:09 2011 (4E60764D)[/B][/COLOR]
[COLOR=RED][B]LMouFilt.Sys                Fri Sep  2 02:23:15 2011 (4E607653)[/B][/COLOR]
[COLOR=RED][B]dtsoftbus01.sys             Fri Jan 13 08:45:46 2012 (4F10358A)[/B][/COLOR]
imdisk.sys                  Thu Feb 16 05:25:23 2012 (4F3CD993)
viahduaa.sys                Fri May  4 06:35:46 2012 (4FA3B102)
SaiU1709.sys                Thu Sep 20 06:03:52 2012 (505AEA08)
SaiK1709.sys                Thu Sep 20 06:03:56 2012 (505AEA0C)
ASACPI.sys                  Thu Nov  1 21:54:34 2012 (509327DA)
speedfan.sys                Sat Dec 29 15:59:35 2012 (50DF59B7)
L1C63x64.sys                Sun Mar 31 23:15:17 2013 (5158FBC5)
SaiMini.sys                 Tue Apr 16 13:17:23 2013 (516D87A3)
SaiBus.sys                  Tue Apr 16 13:17:23 2013 (516D87A3)
cthda.sys                   Mon Jul 29 21:16:56 2013 (51F71408)
cthdb.sys                   Mon Jul 29 21:17:03 2013 (51F7140F)
aswRvrt.sys                 Fri Oct  4 03:48:58 2013 (524E72EA)
aswRdr2.sys                 Fri Oct 11 07:11:37 2013 (5257DCE9)
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
aswVmm.sys                  Mon Dec  9 02:04:51 2013 (52A56B93)
aswSP.sys                   Mon Dec  9 02:09:54 2013 (52A56CC2)
aswMonFlt.sys               Mon Dec 16 17:28:29 2013 (52AF7E8D)
aswSnx.sys                  Mon Dec 16 17:29:51 2013 (52AF7EDF)
aswStm.sys                  Fri Dec 20 05:11:43 2013 (52B417DF)
nvlddmkm.sys                Tue Mar  4 06:07:52 2014 (5315B408)
avgtpx64.sys                Wed Mar 12 06:48:45 2014 (53203B8D)
nvvad64v.sys                Fri Mar 21 13:42:58 2014 (532C7A22)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Apr 14 15:35:17.642 2014 (UTC - 4:00)**************************
rzudd.sys                   Tue Sep 18 02:21:55 2012 (50581303)
nvvad64v.sys                Wed Dec  4 18:10:01 2013 (529FB649)
avgtpx64.sys                Tue Mar  4 07:14:14 2014 (5315C396)
[/font]

xaos · May 7, 2014

Thank you for your help. I have done (most) of what you suggested...see below

usasma said:
C: drive only has about 7% free space. Windows likes 15% free space in order to perform stuff "behind the scenes" without adversely affecting the system's performance. Please free up 15% on ALL hard drives (you can get away with 10% on larger drives and won't notice a large performance penalty)Cleaned up a bunch of space. I didn't get to 15% but I am at about 12-13. I will clean up more

You have 3 hard drives. What is the make/model/wattage and age of your Power Supply?

Power Supply:
Rosewill BRONZE Series RBR1000-M 1000W Continuous@40°C, 80Plus Bronze Certified,Modular Cable Design,ATX12V v2.3/ EPS12V,SLI Ready,CrossFire Ready,Active PFC"Compatible with Core i7, i5" Power Supply

PS is about 1.5 years old, but only been installed for about 8 months

This device has issues in Device Manager:

Programmable Root Enumerator ROOT\PROGRAMMING_SUPPORT\0001 This device is not working properly because Windows cannot load the drivers required for this device.

Click to expand...

This one is difficult to find. Try right clicking on it and select "Uninstall", then reboot to see if it comes back. Let us know the results and we'll move on from there. Fixed... Although I have fixed this in the past and it has shown up again.

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).

Please un-install the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): New link (15 Aug 2012): DuplexSecure - Downloads (pick the appropriate version for your system and select "Un-install" when you run it). Done - Uninstalled - Removed SPTD
Alternate link: Disk-Tools.com
Manual procedure here: Registry and SPTD problems | DAEMON Pro Help

Click to expand...

MSI Afterburner (along with Riva Tuner and EVGA Precision) are known to cause BSOD's in some Windows systems (it's driver is usually RTCore64.sys). Please un-install them immediately! Removed. I also have something installed called "MSI KOMBUSTER" but since you didn't specifically mention it, I left it alone.

If you're overclocking, please stop the overclock while we're troubleshooting. Feel free to resume the overclock once the system has been stabilized. Have not overclocked

Acronis drivers date from 2010 (snapman.sys) - please uninstall Acronis. Uninstalled

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

AsIO.sys Mon Apr 6 03:21:08 2009 (49D9AD64)
Asus PCProbe Utility
http://www.carrona.org/drivers/driver.php?id=AsIO.sys Could not find this anywhere on the asustek site, so I just uninstalled asus probe.

AtiPcie.sys Tue May 5 11:00:22 2009 (4A005486)
ATI PCIE Driver for ATI PCIE chipset or [br] ATI PCI Express (3GIO) Filter[br]Found in my ATI video drivers (I have an Intel chipset)
http://www.carrona.org/drivers/driver.php?id=AtiPcie.sys Updated all chipset drivers

nvBridge.kmd Fri May 20 23:58:23 2011 (4DD7385F)
nVidia Compatible Vista Kernel Mode Driver (likely belongs to nForce chipset drivers)
http://www.carrona.org/drivers/driver.php?id=nvBridge.kmd Could not find this. All Nvidia Drivers are (supposedly) already up to date per their scan tool.

LEqdUsb.Sys Fri Sep 2 02:22:56 2011 (4E607640)
Logitech SetPoint Unifying KMDF USB Filter
http://www.carrona.org/drivers/driver.php?id=LEqdUsb.Sys

LHidEqd.Sys Fri Sep 2 02:22:59 2011 (4E607643)
Logitech SetPoint Unifying KMDF HID Filter
http://www.carrona.org/drivers/driver.php?id=LHidEqd.Sys

LHidFilt.Sys Fri Sep 2 02:23:09 2011 (4E60764D)
Logitech SetPoint HID Filter Driver
http://www.carrona.org/drivers/driver.php?id=LHidFilt.Sys

LMouFilt.Sys Fri Sep 2 02:23:15 2011 (4E607653)
Logitech SetPoint HID Filter Driver
http://www.carrona.org/drivers/driver.php?id=LMouFilt.Sys Only Logitech product I use is a wireless keyboard. I updated to the latest setpoint which I hope takes care of these drivers.

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings

I have not had a BSOD since yesterday (fingers crossed) I will check back in here with an update tomorrow and will marked solved if I have no more BSODS by then.

Thank you again for all your help!

Solved Random BSOD Kernal security check failed

xaos

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

xaos

New Member

My Computer

System One