Windows 10: Kernel_security_check_failure


  1. Posts : 51
    Microsoft Windows 10 Education 64-bit 14393 Multiprocessor Free
       05 Feb 2018 #1

    Kernel_security_check_failure


    Getting BSOD at random parts of the day with the last one happening while I was installing a program called LTspice. Can't seem to force the computer to BSOD by doing any one particular thing. For some reason, only one dump files seems to show up in the folder as the older ones are overwritten every time the computer BSOD.

    DESKTOP-2UMU17L-Mon_02_05_2018_170240_46.zip
      My ComputerSystem Spec


  2. Posts : 16,315
    windows 10 professional version 1607 build 14393.969 64 bit
       06 Feb 2018 #2

    There were 2 BSOD mini dump files and when debugged they did not display a definitive driver.
    The bugchecks were 139, and 24.
    The logs displayed older bugchecks: 7E, 1A, A, 50.
    The files displayed drive file system corruption.
    Windows fast startup failed.

    For all tests /steps please post images into the thread.
    If there are any problems posting images please use one drive or drop box share links.
    Share OneDrive files and folders - Office Support
    Upload photos and files to OneDrive - OneDrive
    Share OneDrive files and folders - Office Support
    Upload photos and files to OneDrive - OneDrive

    1) Open administrative command prompt and type or copy and paste:
    2) sfc /scannow
    3) dism /online /cleanup-image /restorehealth
    4) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
    5) chkdsk /x /f /r C:
    6) chkdsk /x /f /r D:

    C:\Windows\system32>chkdsk /x /f /r
    The type of the file system is NTFS.
    Cannot lock current drive.


    Chkdsk cannot run because the volume is in use by another
    process. Would you like to schedule this volume to be
    checked the next time the system restarts? (Y/N)

    Type: Y
    reboot
    This may take many hours so plan to run overnight

    7) Use the information in this link to find the chkdsk reports in the event viewer. Copy and paste > notepad > save to desktop > post into the thread:
    Read Chkdsk Log in Event Viewer in Windows 10 Performance Maintenance Tutorials

    8) Make sure that there is no over clocking while troubleshooting.

    9) Sometimes there are problems in the bios that produce bsod.
    The BIOS: Version/Date American Megatrends Inc. P1.60, 6/13/2016
    10) Please check to see if this is the most up to date version.
    11) Open the website for the computer or motherboard manufacturer to view the drivers and post a URL or hyperlink into the thread.

    12) To ensure that there are no improper bios settings please reset the bios.
    13) Sometimes there can be failure to boot after resetting the bios.
    14) Backup the computer files to another drive or to the cloud.
    15) Make a backup image usig Macrium:
    Macrium Software | Macrium Reflect Free:
    Macrium Software | Macrium Reflect Free

    16) And please create a brand new restore point.

    How to Clear Your Computers CMOS to Reset BIOS Settings:
    How to Clear Your Computers CMOS to Reset BIOS Settings
    3 Ways to Reset Your BIOS - wikiHow:
    3 Ways to Reset Your BIOS - wikiHow

    17) If the computer has Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread

    18) In the left lower corner search type clean > open disk cleanup > scroll up and down > post images into the thread
    19) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings
    > on the advanced tab under startup and recovery click settings > post an image of the startup and recovery into the thread.
    > on the advanced tab under performance > click on settings > click on advanced tab > under virtual memory click on change > post an image of the virtual memory tab into the thread

    20) Run HDTune on every drivehttp://www.hdtune.com/
    Post images in the thread for results of these tests:
    a) Health (SMART)
    b) Benchmark
    c) Full error scan

    21) For any BSOD please use this version of the log collector and post a new zip into the thread:
    log collector v2-beta08.zip

    22) Run memtest86+ version 5.01 for at least 8 passes.
    Memtest86+ - Advanced Memory Diagnostic Tool
    This may take hours so plan to run it overnight.
    a) Please make sure you use the Memtest86+ version 5.01 with the link below.
    Memtest86+ - Advanced Memory Diagnostic Tool
    The testing is done not by time but by passes.
    The more passes the better.
    There are a significant number of false negatives if fewer than 8 passes are made.
    A false negative is a test pass when there is malfunctioning RAM.
    There is 16 GB of RAM on the computer.
    Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
    Just 1 error is a fail and you can abort testing.
    Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
    b) When Memtest86+ has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
    Memory problems. - Microsoft Community
    MemTest86+ - Test RAM BSOD Tutorials

    23) Turn off Windows fast startup:
    Turn On or Off Fast Startup in Windows 10 Performance Maintenance Tutorials



    Code:
    Event[3933]:  Log Name: System  Source: Ntfs  Date: 2018-01-02T09:59:40.837  Event ID: 55  Task: N/A  Level: Error  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: DESKTOP-2UMU17L  Description: A corruption was discovered in the file system structure on volume C:.The exact nature of the corruption is unknown.  The file system structures need to be scanned online.
    Code:
    Event[789]:  Log Name: System  Source: Microsoft-Windows-Kernel-Boot  Date: 2017-11-08T14:52:24.628  Event ID: 29  Task: N/A  Level: Error  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: DESKTOP-2UMU17L  Description: Windows failed fast startup with error status 0xC0000411.
    Code:
    Event[3996]:  Log Name: System  Source: Microsoft-Windows-Ntfs  Date: 2018-01-03T14:05:53.897  Event ID: 98  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: DESKTOP-2UMU17L  Description: Volume ?? (\Device\HarddiskVolumeShadowCopy6) requires an Online Scan.  An Online Scan will automatically run as part of the next scheduled maintenance task.  Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.
    Code:
    Event[3146]:  Log Name: System  Source: Disk  Date: 2017-12-12T09:02:00.276  Event ID: 51  Task: N/A  Level: Warning  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: DESKTOP-2UMU17L  Description: An error was detected on device \Device\Harddisk1\DR1 during a paging operation.Event[3147]:  Log Name: System  Source: Disk  Date: 2017-12-12T09:02:00.276  Event ID: 51  Task: N/A  Level: Warning  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: DESKTOP-2UMU17L  Description: An error was detected on device \Device\Harddisk1\DR1 during a paging operation.
    Code:
    Event[3886]:  Log Name: System  Source: Volsnap  Date: 2018-01-02T09:44:40.372  Event ID: 30  Task: N/A  Level: Warning  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: DESKTOP-2UMU17L  Description: An unfinished create of a shadow copy of volume C: was deleted.
    Code:
    1/26/2018 3:32 AM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000007e
    P2: ffffffffc0000005
    P3: fffff803be8b5ddd
    P4: fffff40ef3bc62f8
    P5: fffff40ef3bc5b40
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\012518-7812-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-15968-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER47C7.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER47D6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER47E7.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_dd610545af1d09eb5e2b7ffeb3262bdc2d81080_00000000_cab_02c847e6
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 7f768b83-5a07-4232-a17b-401485a87b9b
    Report Status: 4
    Hashed bucket:1/2/2018 3:44 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 139
    P2: 3
    P3: ffff890c16cecda0
    P4: ffff890c16ceccf8
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\010218-8218-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-12484-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER396F.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER397E.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER397F.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_139_f26ee97a41ae76923e9a39e3813751bdb4cdc5a_00000000_cab_02e0398e
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 8294c8d0-fde7-4833-b2d7-79c402c5e181
    Report Status: 4
    Hashed bucket:
    2/5/2018 11:01 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 139
    P2: 3
    P3: ffffeb8fe7475550
    P4: ffffeb8fe74754a8
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\020518-7156-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11093-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3884.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38B3.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38C4.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_139_83b5ca84d7e761a44635e12af855c857d9c66fa_00000000_cab_02dc38d2
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: cf24275c-96d7-434c-a94a-67dc008a83e8
    Report Status: 4
    Hashed bucket:
    1/17/2018 9:26 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1a
    P2: 41792
    P3: ffffb08141d7a258
    P4: 8
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\011718-8218-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER42C5.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER42D5.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER42E6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_c82767e63aa7279162f1b2a6378113ddab5badd_00000000_cab_02e042e5
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: fa8c195f-f1fe-4e44-9e81-ee6973d157e3
    Report Status: 4
    Hashed bucket:
    12/4/2017 6:10 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 24
    P2: af000c0966
    P3: 99237
    P4: 1000000
    P5: 1000000
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\120417-7625-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11296-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AD6.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_24_44ff2898fa3f8e145624aa98a8d112ec3c95816_00000000_cab_02e03b15
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c6ff02eb-2c60-4c89-9100-91a5aad770db
    Report Status: 4
    Hashed bucket:
    11/7/2017 6:10 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 50
    P2: fffffffffffffff0
    P3: 0
    P4: fffff8023c97f04b
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\110717-8000-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11609-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3894.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38A4.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38A5.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_50_6eb44d8f88c698de684f5ce3f4e4fab5f02f20_00000000_cab_02e038a4
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: fa007614-9a2a-4110-a0d5-42f2054c7b9c
    Report Status: 4
    Hashed bucket:
    2/2/2018 9:45 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: a
    P2: 38
    P3: 2
    P4: 0
    P5: fffff801568b2785
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\020218-8015-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11781-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3827.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3836.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3847.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_a_48fcd539e34bb339738d9274f1fd799c818e3313_00000000_cab_02e03846
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 507bae52-ffaf-49ec-8ec5-fb47efdc3d86
    Report Status: 4
    Hashed bucket:
    12/4/2017 6:38 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 966873f1-6b77-4441-adc1-b1cec5f61021
    
    Problem signature:
    P1: 24
    P2: af000c0966
    P3: 99237
    P4: 1000000
    P5: 1000000
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\120417-7625-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11296-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AD6.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_24_44ff2898fa3f8e145624aa98a8d112ec3c95816_00000000_cab_02e03b15
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c6ff02eb-2c60-4c89-9100-91a5aad770db
    Report Status: 4
    Hashed bucket:
    12/4/2017 6:17 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 966873f1-6b77-4441-adc1-b1cec5f61021
    
    Problem signature:
    P1: 24
    P2: af000c0966
    P3: 99237
    P4: 1000000
    P5: 1000000
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\120417-7625-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11296-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AD6.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_24_44ff2898fa3f8e145624aa98a8d112ec3c95816_00000000_cab_02e03b15
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c6ff02eb-2c60-4c89-9100-91a5aad770db
    Report Status: 4
    Hashed bucket:
    12/4/2017 6:10 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 966873f1-6b77-4441-adc1-b1cec5f61021
    
    Problem signature:
    P1: 24
    P2: af000c0966
    P3: 99237
    P4: 1000000
    P5: 1000000
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\120417-7625-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11296-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AD6.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_24_44ff2898fa3f8e145624aa98a8d112ec3c95816_00000000_cab_02e03b15
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c6ff02eb-2c60-4c89-9100-91a5aad770db
    Report Status: 4
    Hashed bucket:
    Code:
    1/2/2018 3:46 PM    Windows Error Reporting    Fault bucket 0x139_3_CORRUPT_LIST_ENTRY_nt!MiUnlinkUnusedControlArea, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 4e1684ec-31d6-4cc0-bfd6-314b3e83da33
    
    Problem signature:
    P1: 139
    P2: 3
    P3: ffff890c16cecda0
    P4: ffff890c16ceccf8
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\010218-8218-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-12484-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER396F.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER397E.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER397F.tmp.txt
    \\?\C:\Windows\Temp\WER593C.tmp.WERDataCollectionStatus.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_139_f26ee97a41ae76923e9a39e3813751bdb4cdc5a_00000000_cab_15c17589
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 8294c8d0-fde7-4833-b2d7-79c402c5e181
    Report Status: 268435456
    Hashed bucket:2/5/2018 11:01 PM    Windows Error Reporting    Fault bucket 0x139_3_CORRUPT_LIST_ENTRY_ONE_BIT_IMAGE_memory_corruption, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 2a22cc94-fa25-45d8-a9e0-b8cc142522ab
    
    Problem signature:
    P1: 139
    P2: 3
    P3: ffffeb8fe7475550
    P4: ffffeb8fe74754a8
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\020518-7156-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11093-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3884.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38B3.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38C4.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_139_83b5ca84d7e761a44635e12af855c857d9c66fa_00000000_cab_1e805d14
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: cf24275c-96d7-434c-a94a-67dc008a83e8
    Report Status: 268435456
    Hashed bucket:
    12/4/2017 6:52 PM    Windows Error Reporting    Fault bucket 0x24_NTFS!NtfsPagingFileIo, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 966873f1-6b77-4441-adc1-b1cec5f61021
    
    Problem signature:
    P1: 24
    P2: af000c0966
    P3: 99237
    P4: 1000000
    P5: 1000000
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\120417-7625-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11296-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AD6.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_24_44ff2898fa3f8e145624aa98a8d112ec3c95816_00000000_cab_180afc68
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c6ff02eb-2c60-4c89-9100-91a5aad770db
    Report Status: 268435460
    Hashed bucket:
    Code:
    2/2/2018 9:45 PM    Windows Error Reporting    Fault bucket AV_nt!MmCopyVirtualMemory, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 708ae890-6dd5-40f0-96ba-c70db174d1f2
    
    Problem signature:
    P1: a
    P2: 38
    P3: 2
    P4: 0
    P5: fffff801568b2785
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\020218-8015-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11781-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3827.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3836.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3847.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_a_48fcd539e34bb339738d9274f1fd799c818e3313_00000000_cab_167859b8
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 507bae52-ffaf-49ec-8ec5-fb47efdc3d86
    Report Status: 268435456
    Hashed bucket:11/7/2017 6:10 PM    Windows Error Reporting    Fault bucket AV_R_INVALID_nt!ObfDereferenceObjectWithTag, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 77550f71-ef60-4ede-86ac-3797c2bc6533
    
    Problem signature:
    P1: 50
    P2: fffffffffffffff0
    P3: 0
    P4: fffff8023c97f04b
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\110717-8000-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-11609-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3894.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38A4.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER38A5.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_50_6eb44d8f88c698de684f5ce3f4e4fab5f02f20_00000000_cab_15286f63
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: fa007614-9a2a-4110-a0d5-42f2054c7b9c
    Report Status: 268435456
    Hashed bucket:
    1/26/2018 3:32 AM    Windows Error Reporting    Fault bucket AV_wdfilter!MpDeleteStreamContext, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 6427ae04-9667-4114-87d5-e6edd986d948
    
    Problem signature:
    P1: 1000007e
    P2: ffffffffc0000005
    P3: fffff803be8b5ddd
    P4: fffff40ef3bc62f8
    P5: fffff40ef3bc5b40
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\012518-7812-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-15968-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER47C7.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER47D6.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER47E7.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_dd610545af1d09eb5e2b7ffeb3262bdc2d81080_00000000_cab_19c4a344
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 7f768b83-5a07-4232-a17b-401485a87b9b
    Report Status: 268435456
    Hashed bucket:
    1/17/2018 9:26 PM    Windows Error Reporting    Fault bucket MEMORY_CORRUPTION_ONE_BIT, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 104f0b22-2193-41ce-992a-2d205088e48d
    
    Problem signature:
    P1: 1a
    P2: 41792
    P3: ffffb08141d7a258
    P4: 8
    P5: 0
    P6: 10_0_16299
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\011718-8218-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-14750-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER42C5.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER42D5.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER42E6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_c82767e63aa7279162f1b2a6378113ddab5badd_00000000_cab_17406e0b
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: fa8c195f-f1fe-4e44-9e81-ee6973d157e3
    Report Status: 268435456
    Hashed bucket:
      My ComputerSystem Spec


  3. Posts : 51
    Microsoft Windows 10 Education 64-bit 14393 Multiprocessor Free
    Thread Starter
       06 Feb 2018 #3

    To add some more info. I ran driver verifier and got a BSOD from mbamswissarmy.sys which seems to be part of MalwareBytes. Don't know if this is the problem or just a symptom of a bigger issue.
      My ComputerSystem Spec


  4. Posts : 3,283
    64bit Win 10 Pro ver 1709 Build 16299.371 and W10 Insider Builds 17134.1 and 17643
       06 Feb 2018 #4

    Hello jag213,

    I would uninstall Malwarebytes if Driver Verifier indicated its driver was misbehaving and see if it makes any difference. If not you can always add it back later.

    From my check of the original set of logfiles I would concentrate on testing memory and hard disks for problems as suggested by @zbook.
      My ComputersSystem Spec


 

Related Threads
Kernel_security_check_failure in BSOD Crashes and Debugging
Nineteen days of BSODS with the this warning. Started with a cumulative update. Have not gotten a solution, yet. Windows 10 (64), with all the latest (updated) programs, versions, and drivers, and I ran every conceivable scan to detect...
kernel_security_check_failure (WIN10 x64) in BSOD Crashes and Debugging
HI, So I purchased a new pc about a month ago and it has been running great. The past week however I have gotten the occasional 'kernel_security_check_failure' bsod, probably about 5 in total, once per day (twice today). Normally these run either...
Kernel_security_check_failure in BSOD Crashes and Debugging
Today i installed Adobe Photoshop to work on some images but when i launched it i got a bsod with KERNEL_SECURITY_CHECK_FAILURE and my laptop restarted. I haven't installed Photoshop since i installed Windows 10 but it worked fine when i had Windows...
Solved kernel_security_check_failure in BSOD Crashes and Debugging
I have updated the files for the BSOD logs. Please do take a look. It is a Kernal_Security_Check_Failure about 99% of the time. Sometimes they will happen when I launch a game, when I start playing music, or even when I am away from the computer...
Kernel_security_check_failure in BSOD Crashes and Debugging
Hi all, First of all, thanks for creating the tool to gather all debug info into one single file, and having the trouble to help people in trouble like me. 44703 Today for the first time I noticed my "server" desktop, i.e. my PC running 24h...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:29.
Find Us