KERNEL_SECURITY_CHECK_ERROR during installing software

Anakunda

Member
Member
Messages
71
HI, I'm getting occasional BSOD's when installing / uninstalling software.

Latest case - KERNEL_SECURITY_CHECK_ERROR during Pot Player update (non intrusive installer)

paEs40B.png


chkdsk c: /f - negative

sfc /scannow gives an error (not sure if relevant for the Windows crash). I attach log file.
Code:
C:\>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 42% complete.

Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios.

SFC wasn't neither able to finish in offline mode run from Windows install DVD

Any help to find the culprit and solve the problem would be appreciated
 
Last edited:

My Computer

System One

  • OS
    Windows 8.1 Enterprise 64bit
    Computer type
    Laptop

ArazelEternal

Prince of Darkness
Power User
Messages
255
Location
Cross Plains
This is the STOP code:

Code:
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00020262220, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00020262178, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

This driver has been flagged:

Code:
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+3f0c2)



I would first suggest updating the driver for your NVIDIA graphics card and see if this helps.

When it comes to the sfc error:

In an elevated command prompt run:

dism /online /cleanup-image /restorehealth

After that finishes, run:

sfc /scannow

Once again. This can help correct errors that sfc isnt able to fix on its own. Sometimes sfc needs to be run a few times consecutively for it to fix all the errors.
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home Built
    CPU
    Intel Xeon E3-1230 V2 @ 3.3-3.7 Ghz
    Motherboard
    MSI Z77-G41
    Memory
    16 GB Kingston HyperX Beast DDR3-1600
    Graphics Card(s)
    NVIDIA GT 730
    Sound Card
    Creative Sound Blaster X-Fi XtremeMusic
    Monitor(s) Displays
    Dual 20 Inch Dell
    Screen Resolution
    1680*1050
    Hard Drives
    Western Digital Caviar Blue 500 GB
    Western Digital Caviar Black 1 TB
    PSU
    Thermaltake 550W
    Case
    Antec Nine Hundred Two
    Cooling
    Arctic Freezer i30 CO
    Keyboard
    Logitech K330
    Mouse
    Logitech M215
    Internet Speed
    60 Mbps
    Browser
    Comodo Chromodo
    Antivirus
    Comodo Internet Security Premium

Anakunda

Member
Member
Messages
71
I would first suggest updating the driver for your NVIDIA graphics card and see if this helps.
To exclude problem with graphics driver does the report say there's something wrong with the driver?
I already have installed latest update (358.59-notebook-win8-win7-64bit-international.hf) from NVIDIA web site.
Nonstandard feature: for latest driver versions I'm unable to update directly by running the driver installer over existing driver (install fail). I must firstly run DDU in safe mode, then do a clean install which finishes successfully.

As for SFC I'm unable to complete the DISM command:

Code:
Windows PowerShell
Copyright (C) 2014 Microsoft Corporation. All rights reserved.

PS C:\Windows\System32> dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool
Version: 6.3.9600.17031

Image Version: 6.3.9600.17031

[==========================100.0%==========================]

Error: 0x80240021

DISM failed. No operation was performed.
For more information, review the log file.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
 

My Computer

System One

  • OS
    Windows 8.1 Enterprise 64bit
    Computer type
    Laptop

axe0

BSOD Analyst & Security Analyst
VIP Member
Pro User
Messages
2,437
I am sorry to bump in, but there are some problems.
There is a 15.000+ url collection in the hosts file where some are non-family and/or against the rules as some are bypasses.

KMSpico is installed, for what is it used? I only see Microsoft Office 2016 Tools installed.

Forum rules
4) No piracy or discussion of piracy allowed at all. Such as software, music, videos and other intellectual property violations (e.g. downloading youtube videos locally etc).
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom build
    CPU
    i5-6500 @3.20GHz
    Motherboard
    Gigabyte B150-HD3P-CF
    Memory
    16GB DDR4 2133 Crucial Ballistix Sport LT
    Graphics Card(s)
    MSI GeForce GTX 1060 GAMING X 6G
    Sound Card
    Built-in
    Monitor(s) Displays
    Liyama ProLite XB2483HSU-B2
    Screen Resolution
    1920 x 1080
    Hard Drives
    Crucial MX200 500GB & Toshiba DT01ACA300 3TB
    PSU
    Corsair RM550x
    Case
    Fractal Design Define S
    Cooling
    Cooler Master TX3 i
    Keyboard
    Func KB-460 (MX Red)
    Mouse
    Corsair Gaming M65 RGB
    Browser
    Google Chrome
    Antivirus
    Bitdefender Total Security 2017 + MBAM Pro + MBAE Pro
    Other Info
    Creative Sound Blaster Tactic3D Rage V2 headset

ArazelEternal

Prince of Darkness
Power User
Messages
255
Location
Cross Plains
Try running the command

dism /Online /Cleanup-Image /StartComponentCleanup

Then run

dism /online /cleanup-image /restorehealth

Again and see what happens.

Source
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home Built
    CPU
    Intel Xeon E3-1230 V2 @ 3.3-3.7 Ghz
    Motherboard
    MSI Z77-G41
    Memory
    16 GB Kingston HyperX Beast DDR3-1600
    Graphics Card(s)
    NVIDIA GT 730
    Sound Card
    Creative Sound Blaster X-Fi XtremeMusic
    Monitor(s) Displays
    Dual 20 Inch Dell
    Screen Resolution
    1680*1050
    Hard Drives
    Western Digital Caviar Blue 500 GB
    Western Digital Caviar Black 1 TB
    PSU
    Thermaltake 550W
    Case
    Antec Nine Hundred Two
    Cooling
    Arctic Freezer i30 CO
    Keyboard
    Logitech K330
    Mouse
    Logitech M215
    Internet Speed
    60 Mbps
    Browser
    Comodo Chromodo
    Antivirus
    Comodo Internet Security Premium

ArazelEternal

Prince of Darkness
Power User
Messages
255
Location
Cross Plains
I am sorry to bump in, but there are some problems.
There is a 15.000+ url collection in the hosts file where some are non-family and/or against the rules as some are bypasses.

KMSpico is installed, for what is it used? I only see Microsoft Office 2016 Tools installed.

Forum rules
4) No piracy or discussion of piracy allowed at all. Such as software, music, videos and other intellectual property violations (e.g. downloading youtube videos locally etc).

KMSPico can also be used to activate Windows itself. But.... I guess this means that this has to stop here. Wish I had noticed that.....
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home Built
    CPU
    Intel Xeon E3-1230 V2 @ 3.3-3.7 Ghz
    Motherboard
    MSI Z77-G41
    Memory
    16 GB Kingston HyperX Beast DDR3-1600
    Graphics Card(s)
    NVIDIA GT 730
    Sound Card
    Creative Sound Blaster X-Fi XtremeMusic
    Monitor(s) Displays
    Dual 20 Inch Dell
    Screen Resolution
    1680*1050
    Hard Drives
    Western Digital Caviar Blue 500 GB
    Western Digital Caviar Black 1 TB
    PSU
    Thermaltake 550W
    Case
    Antec Nine Hundred Two
    Cooling
    Arctic Freezer i30 CO
    Keyboard
    Logitech K330
    Mouse
    Logitech M215
    Internet Speed
    60 Mbps
    Browser
    Comodo Chromodo
    Antivirus
    Comodo Internet Security Premium

axe0

BSOD Analyst & Security Analyst
VIP Member
Pro User
Messages
2,437
KMSPico can also be used to activate Windows itself. But.... I guess this means that this has to stop here. Wish I had noticed that.....

That is right yes, the Genuine file looks a lot like KMSpico has been used.

I am usually specific mentioning Office, because I hope it is Office everytime.
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom build
    CPU
    i5-6500 @3.20GHz
    Motherboard
    Gigabyte B150-HD3P-CF
    Memory
    16GB DDR4 2133 Crucial Ballistix Sport LT
    Graphics Card(s)
    MSI GeForce GTX 1060 GAMING X 6G
    Sound Card
    Built-in
    Monitor(s) Displays
    Liyama ProLite XB2483HSU-B2
    Screen Resolution
    1920 x 1080
    Hard Drives
    Crucial MX200 500GB & Toshiba DT01ACA300 3TB
    PSU
    Corsair RM550x
    Case
    Fractal Design Define S
    Cooling
    Cooler Master TX3 i
    Keyboard
    Func KB-460 (MX Red)
    Mouse
    Corsair Gaming M65 RGB
    Browser
    Google Chrome
    Antivirus
    Bitdefender Total Security 2017 + MBAM Pro + MBAE Pro
    Other Info
    Creative Sound Blaster Tactic3D Rage V2 headset

Anakunda

Member
Member
Messages
71
Thanks ArazelEternal, the first Dism command worked

Dism /online /cleanup-image /restorehealth succeeded this time

But sfc /scannow still says not being able to fix corrupt files (this time it's able to reach 100% progress)
Log file doesn't contain any Error entries.

Current CBS.log attached. Thanks
 

My Computer

System One

  • OS
    Windows 8.1 Enterprise 64bit
    Computer type
    Laptop

axe0

BSOD Analyst & Security Analyst
VIP Member
Pro User
Messages
2,437
Anakunda, please remove every method of bypassing/cracking before we proceed.
Troubleshooting a system with counterfeit programs is useless as it is not known what has been modified to the program.A counterfeit program contains heavily modified code which causes the system to behave in unexpected ways.
For this reason, analyzing counterfeit systems is unreliable and most analysts won't try it.
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom build
    CPU
    i5-6500 @3.20GHz
    Motherboard
    Gigabyte B150-HD3P-CF
    Memory
    16GB DDR4 2133 Crucial Ballistix Sport LT
    Graphics Card(s)
    MSI GeForce GTX 1060 GAMING X 6G
    Sound Card
    Built-in
    Monitor(s) Displays
    Liyama ProLite XB2483HSU-B2
    Screen Resolution
    1920 x 1080
    Hard Drives
    Crucial MX200 500GB & Toshiba DT01ACA300 3TB
    PSU
    Corsair RM550x
    Case
    Fractal Design Define S
    Cooling
    Cooler Master TX3 i
    Keyboard
    Func KB-460 (MX Red)
    Mouse
    Corsair Gaming M65 RGB
    Browser
    Google Chrome
    Antivirus
    Bitdefender Total Security 2017 + MBAM Pro + MBAE Pro
    Other Info
    Creative Sound Blaster Tactic3D Rage V2 headset
Top