kernel_security_check BSOD occur repeatdly in random times

We usually do not blame hardware unless we can be absolutely sure. One test is to see if you can keep the system running in safe mode - this usually indicates that the hardware is OK.

philc43 said:

We usually do not blame hardware unless we can be absolutely sure. One test is to see if you can keep the system running in safe mode - this usually indicates that the hardware is OK.

I respect that and was motivated to go on.
I think we're actually getting somewhere, I managed to boot into safe-mode and had no issues for the pat hour or so.
Using the software zbook provided I uninstalled almost every bit of Avatron drivers and peripherals, but I still see the following line when starting DDU:
GPU #0002 : Air Display (Microsoft Corporation - WDDM v1.1)
I'm pretty sure though it's just some registry line because voidtools shows nothing and I removed each of their drivers using pnputils.exe.

I'm now even able to start Driver Verifier and boot, but every time I start Windows normally I get a
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED.
Safe mode works fine.
Verifer is now disabled.

Here are the relevant logs:
Attachment 141861

There are some indicators still showing up in the threads:

Code:

ffffde80`7fc44198  fffff802`ca07fbd0Unable to load image \??\C:\WINDOWS\system32\drivers\farflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for farflt.sys
*** ERROR: Module load completed but symbols could not be loaded for farflt.sys
 farflt+0xfbd0

ffffde80`7fc45af0  fffff802`ca000100Unable to load image \??\C:\WINDOWS\system32\drivers\mbam.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mbam.sys
*** ERROR: Module load completed but symbols could not be loaded for mbam.sys
 mbam+0x100

Both of these are from Malwarebytes. Please uninstall Malwarebytes while we are troubleshooting - Windows Defender will be sufficient protection for now.

Code:

ffff9480`a86f3620  fffff80c`91db277cUnable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for LGBusEnum.sys
*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys
 LGBusEnum+0x277c

This is the Logitech Keyboard driver. There may not be a lot you can do about this other than try another keyboard.

- Removed Malwarebytes
- Installed nVidia drivers which was not present at the time
- I don't have a Logitech keyboard, only headset, but I removed its software and disconnected it just in case
- Reset BIOS to default
- Removed a *hidden* AirDisplay device that I found in the device manager

I am now running Verifier in normal mode and will test it for some time.

Later I will reinstall Logitech drivers and test it again.
Will do the same with the nVidia Geforce Experience software.

I am getting my hopes up, will update again soon.

Code:

ffff9480`a86f3620  fffff80c`91db277cUnable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for LGBusEnum.sys*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys LGBusEnum+0x277c

LGBusEnum.sys

Logitech Keyboard

http://www.logitech.com/en-us/suppor...oads/downloads

Code:

LGBusEnum    Logitech Gaming Virtua Logitech Gaming Virtua Kernel        Manual     Stopped    OK         FALSE       FALSE        5,248             7,552       0          2/27/2016 7:18:54 AM   C:\WINDOWS\system32\drivers\LGBusEnum.sys        1,664

farflt.sys

Malwarebytes Anti-Ransomware Protection

Downloads: https://www.malwarebytes.org/downloads/ Support: https://www.malwarebytes.org/support/

Code:

ffffcf01`026c5190  fffff801`811b3135Unable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for LGBusEnum.sys*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys

Code:

ffffca01`b49cc360  fffff801`32a42d85Unable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for LGBusEnum.sys*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys LGBusEnum+0x2d85

Code:

ffffca01`b49cc198  fffff801`31c2fbd0Unable to load image \??\C:\WINDOWS\system32\drivers\farflt.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for farflt.sys*** ERROR: Module load completed but symbols could not be loaded for farflt.sys farflt+0xfbd0

Code:

30/06/2017 21:50    Application Error    Faulting application name: NVIDIA Share.exe, version: 58.3029.1609.1, time stamp: 0x594a163d
Faulting module name: ntdll.dll, version: 10.0.15063.0, time stamp: 0xa82cc161
Exception code: 0xc0000374
Fault offset: 0x000d9a8a
Faulting process id: 0x20ec
Faulting application start time: 0x01d2f1eadab48b65
Faulting application path: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: a9b578ef-21db-4087-82ca-cdabbe4daec4
Faulting package full name: 
Faulting package-relative application ID:

Code:

{Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.

Code:

Startup Repair failed.

1) As above in philc43's post please uninstall Malwarebytes and use windows defender

2) Uninstall the Logitec keyboard driver
reinstall a new driver: Logitech Support + Downloads

I'm having good progress in getting all my devices to work, last one was a bluetooth receiver which caused a few crashes, but I was able to install the correct drivers.

I also disabled Windows searching for drivers by its own.

Everything was working well until Windows froze-
DPC_WATCHDOG_VIOLATION
Attachment 141901

(I'm attaching some of the links I used if someone will have the same problem)
[1] Uninstall Air Display on Windows 10... for realz - navhaxs
[2] Forums - Logitech Gaming Software prone to cause BlueScreen

Code:

BugCheck 133, {0, 501, 500, fffff8013d267348}*** WARNING: Unable to verify timestamp for nvlddmkm.sys*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+e8663 )

nvlddmkm

nvlddmkm.sys

nVidia Video drivers

http://www.nvidia.com/Download/index.aspx Get from OEM for laptops

intelppm

intelppm.sys

Intel Processor driver

http://downloadcenter.intel.com/Default.aspx also at

Code:

intelppm     Intel Processor Driver Intel Processor Driver Kernel        Manual     Stopped    OK         FALSE       FALSE        94,208            53,248      0                                 C:\WINDOWS\system32\drivers\intelppm.sys         8,192

Something is conflicting with the Nvidia driver or it may need to be rolled back

1)NVIDIA13) Uninstall all Nvidia drivers/softwareThe best way to do this is to uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from your Graphics card manufacturer or from the NVidia website. When you do this be sure the "clean install" box is checked and only install the Graphics driver and the PhysX driver.Display Driver Uninstaller Download version 17.0.6.7: Official Display Driver Uninstaller DDU Download


2) Uninstall Intel driver intelppm.sys using the control panel
reinstall Intel driver: Drivers & Software

Has it been stable since your last change?

There have been couple more crashes which were easy to deal with, since then I ran verifier for at least 24 hours with no sign of any problem.
I'm marking this thread as solved.

Phil and Eric, I thank you so much for your tremendous help and dedication and wish you the best!
Tomer