Solved BSOD - kernel_security_check_failure - media related?

Hi

I'm new to this forum and really hoping someone or anyone might be willing and able to help me.

I have a self-built evolving system that had been running well until about a month ago.
It's a system that intended to provide the processor power for a small, networked home recording studio.

I can't really correlate the problems with anything specific except possibly being around the time of installing cross platform network and monitor software.
Sadly, so far I haven't been able to identify the problem.

It is unpredictable / random - often involving media access with multiple programs and does also seem to be reliably reproducible when accessing some media such as playing CD's in iTunes - BUT it isn't restricted to this.

I have uninstalled and reinstalled a number of programs including itunes and other major software and uninstalled/reinstalled/updated drivers including graphics drivers as well as more obscure drivers - sadly all without success.
(I'd also run hardware checks and don't appear to have any hardware failures.)

Since this desktop is 99% intended for media (audio) production, crashing regularly when accessing media is a bit unhelpful.

Any help will be gratefully received!!!
Thanks in advance!

Regards,
Al

Hello onekeyboard, I've taken a look at some of your dumps (there are plenty of them) and there are a few things standing out. I'll list them down if you can work through them one by one and see if we can resolve your issues. If you have any questions feel free to ask.

Your VIA Labs USB 3.0 eXtensible Host Controller is causing issues. The drivers are old and need updating, check here for updated versions of the drivers. It may be worth checking for any firmware updates available too.

McAfee is also causing issues. Uninstall McAfee and use the native Defender coupled with MalwareBytes. Run MalwareBytes on demand as opposed to realtime.

Focusrite VRM Box has been flagged. Check the vendor's website for updates to VRM Box and all of the other Focusrite software you have installed.

Your nVidia driver has been flagged. Look for the latest driver for your card here and follow NVIDIA Drivers - Avoid Problems - Windows 7 Help Forums for the cleanest possible install. If you're running the latest version revert to the last known working driver using the same method.


Perform these steps and test the system for stability, report back with the results.

Hi Boozad

Thanks so much for your reply.
My time at this computer is a bit erratic due to work so my apologies for the slow reply but thanks again.
I'm very appreciative.

I've searched for new drivers and firmware as far as possible.
VIA has always been a bit of a nightmare, including updates.
The other stuff is, as far as I can tell, the most up to date software possible.

Unfortunately I'm still getting the same crashes.

I found an interesting repeatable event that causes the same crash that is not related to video launching.
I tried deleting the akamai netsession and adobe software.
Every time I attempt to delete or even freshly reinstall Adobe Air the same crash happens - immediately.

Given that I can't delete or reinstall the software, I'm not sure how to check this or whether it is part of the cause of the problem with the video related crashes.

I'm also not sure whether to upload any further files here?

Thanks again, in advance for any help.

Regards,
Al

Boozad said:

Hello onekeyboard, I've taken a look at some of your dumps (there are plenty of them) and there are a few things standing out. I'll list them down if you can work through them one by one and see if we can resolve your issues. If you have any questions feel free to ask.

ONE

VIA LABS

Your VIA Labs USB 3.0 eXtensible Host Controller is causing issues. The drivers are old and need updating, check here for updated versions of the drivers. It may be worth checking for any firmware updates available too.

Code:

fffff800`4d777288  fffff800`f0803539Unable to load image \SystemRoot\System32\drivers\ViaHub3.sys, Win32 error 0n2
[COLOR=#ff0000]*** WARNING: Unable to verify timestamp for ViaHub3.sys
*** ERROR: Module load completed but symbols could not be loaded for ViaHub3.sys[/COLOR]
 ViaHub3+0x3539

0: kd> lmvm ViaHub3
start             end                 module name
fffff800`f0800000 fffff800`f0837000   ViaHub3  T (no symbols)           
    Loaded symbol image file: ViaHub3.sys
    Image path: \SystemRoot\System32\drivers\ViaHub3.sys
    Image name: ViaHub3.sys
    Timestamp:        [COLOR=#ff0000]Fri Jan 20 04:39:13 2012[/COLOR] (4F18EFF1)
    CheckSum:         0003F14B
    ImageSize:        00037000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Code:

BugCheck 139, {3, fffff8004d776200, fffff8004d776158, 0}

[COLOR=#ff0000]*** WARNING: Unable to verify timestamp for xhcdrv.sys
*** ERROR: Module load completed but symbols could not be loaded for xhcdrv.sys[/COLOR]
Probably caused by : xhcdrv.sys ( xhcdrv+19bad )

Followup: MachineOwner

0: kd> lmvm xhcdrv
start             end                 module name
fffff800`efa11000 fffff800`efa55000   xhcdrv   T (no symbols)           
    Loaded symbol image file: xhcdrv.sys
    Image path: \SystemRoot\System32\drivers\xhcdrv.sys
    Image name: xhcdrv.sys
    Timestamp:        [COLOR=#ff0000]Fri Jan 20 04:39:02 2012[/COLOR] (4F18EFE6)
    CheckSum:         00041CF0
    ImageSize:        00044000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

TWO

McAFEE

McAfee is also causing issues. Uninstall McAfee and use the native Defender coupled with MalwareBytes. Run MalwareBytes on demand as opposed to realtime.

   Note

Make sure you uncheck the 'Enable Free Trial' box when installing MalwareBytes.

Code:

fffff800`4d775888  fffff800`eee0ae18Unable to load image \SystemRoot\system32\drivers\mfewfpk.sys, Win32 error 0n2
[COLOR=#ff0000]*** WARNING: Unable to verify timestamp for mfewfpk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfewfpk.sys[/COLOR]
 mfewfpk+0xae18

THREE

VRM BOX

Focusrite VRM Box has been flagged. Check the vendor's website for updates to VRM Box and all of the other Focusrite software you have installed.

Code:

fffff800`4d777338  fffff800`f18667c3
[COLOR=#ff0000]*** WARNING: Unable to verify timestamp for vrm.sys
*** ERROR: Module load completed but symbols could not be loaded for vrm.sys[/COLOR]
 vrm+0x67c3

0: kd> lmvm vrm
start             end                 module name
fffff800`f1860000 fffff800`f195d000   vrm      T (no symbols)           
    Loaded symbol image file: vrm.sys
    Image path: \SystemRoot\system32\DRIVERS\vrm.sys
    Image name: vrm.sys
    Timestamp:        [COLOR=#ff0000]Thu Dec 19 10:01:05 2013[/COLOR] (52B2C3E1)
    CheckSum:         00044015
    ImageSize:        000FD000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

FOUR

NVIDIA

Your nVidia driver has been flagged. Look for the latest driver for your card here and follow NVIDIA Drivers - Avoid Problems - Windows 7 Help Forums for the cleanest possible install. If you're running the latest version revert to the last known working driver using the same method.

Code:

fffff800`4d776948  fffff800`f01bd884Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
[COLOR=#ff0000]*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys[/COLOR]
 nvlddmkm+0x553884

0: kd> lmvm nvlddmkm
start             end                 module name
fffff800`efc6a000 fffff800`f0725000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        [COLOR=#ff0000]Tue May 12 02:59:00 2015[/COLOR] (55515E64)
    CheckSum:         00A86612
    ImageSize:        00ABB000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Perform these steps and test the system for stability, report back with the results.

Click to expand...

If you can upload new logs please that would be great.

Updated file

Hi Boozad

Thanks again for your help!
I've attached the new file as requested.

Regards,
Al

Hi Al,

All the dumps fpr today are pointing at the same thing, again it's the VIA Labs USB 3.0 eXtensible Host Controller.
Right now I could do with knowing what model motherboard you have, I know it's an ASUS but which model?

As for Akamai Net Session I've found the best solution is to remove it from Startup in msconfig before uninstalling it. However I haven't uninstalled it this time round, just removed it from Startup. That may be a better alternative. I'm a bit stumped on the Adobe software not uninstalling though, we'll get to that later.

Hi Boozad.

My apologies for the delayed replied... manic month.

I reinstalled most of the software and turned off the vrm box software and it all seems to work now.

I'm not sure whether it was definitely the vrm box software creating the problems but the system now plays media and hasn't crashed for the last few days... it wasn't very obvious which bit of software reinstallation was the cure.
My suspicion is that it was the vrm driver (which has to take over the system audio) but that's conjecture.
If the problem restarts when I eventually reinstall and reconnect the vrm box then I'll make a note back here.

Thanks for your help (and apologies again for the delay).
Even though I'm not sure which was the definite solution for the crashing in the end, I'm pretty sure I wouldn't have solved it without knowing what to start with.
Replacing McAfee with Windows Defender and Malwarebytes has also improved the system noticeably - so thanks also for that!

Thanks again.
Regards,
Al

You're welcome Al, glad to hear all is well