Window 8.1 Kernel_Security_Check_Failure
My PC ran into problem , The window is 8.1 ,this is not before window 8.1 ,This error started after i have installed the window 8.1
Plz tell me what will be the process to resolve this problem.
The error is
KERNEL_SECURIT_FAILURE_CHECK
Plese suggest me something to resolve out this problem
Crazy learner
Hello,
I'd ask in the
Windows 8.1 IT Pro forums if this is a machine in a corporate environment, or in the
Windows 8.1 forum on Microsoft Community if this is your personal PC.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book:
Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})
Similar Messages
-
Hi!
I've got a new 27" iMac (late 2013), and I was going to install Windows 8.1 (64-bit) to be able to play a few games.
Everything went smoothly (installed normally via Boot Camp Assistant), and after the Windows setup, the Boot Camp drivers needed to be installed. After this, the computer rebooted, but crashed at a blue screen with the error called "kernel_security_check_failure".
It rebooted a few times on its own, but after a few times, I got some options, and I chose to "refresh" the Windows 8 install, meaning it would reset the install while keeping my files (even though I didn't have any, as I never got to use it). This took some time, but it worked, and it booted into W8.
The Boot Camp drivers had been removed though, so I had to reinstall them. After they had reinstalled, the computer rebooted and the same blue screen with the same error hit me.
Something tells me that some of the BC drivers are messing things up. I can't find any information on this elsewhere.
Would it be possible to install only selected drivers, to eventually find out which driver is causing the problem?
All help is greatly appreciated!I finally gave up, reloaded everything, this time, using WIn 8.1 Pro, not Enterprise. After I did the updates, patches, Norton 360, shut computer down and connected the external drives, and booted up...and got the BSOD. This time, I went to Microsoft and downloaded the Windows Debugger, and think I may have found the problem...NORTON!
Probably caused by : SYMDS64.SYS ( SYMDS64+71be6 )
Am conrtacting them, but, here's the Debugger output:
Microsoft (R) Windows Debugger Version 6.3.9600.17029 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Dump\MEMORY.DMP]
Kernel Bitmap Dump File: Only kernel address space is available
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
Machine Name:
Kernel base = 0xfffff802`0f87e000 PsLoadedModuleList = 0xfffff802`0fb482d0
Debug session time: Tue Jun 17 00:48:52.131 2014 (UTC - 6:00)
System Uptime: 0 days 0:03:09.864
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck 139, {3, ffffd0002852d3e0, ffffd0002852d338, 0}
*** ERROR: Module load completed but symbols could not be loaded for SYMDS64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEFA64.SYS
Probably caused by : SYMDS64.SYS ( SYMDS64+71be6 )
Followup: MachineOwner
6: kd> !analyze -v
* Bugcheck Analysis *
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd0002852d3e0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd0002852d338, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
TRAP_FRAME: ffffd0002852d3e0 -- (.trap 0xffffd0002852d3e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe00059c129f0 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe0005718d2a0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8020f9e8cdb rsp=ffffd0002852d570 rbp=0000000000000000
r8=0000000000005aa0 r9=00000000000007ff r10=ffffd00066cc8000
r11=ffffe00059963040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe cy
nt! ?? ::FNODOBFM::`string'+0x682b:
fffff802`0f9e8cdb cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffd0002852d338 -- (.exr 0xffffd0002852d338)
ExceptionAddress: fffff8020f9e8cdb (nt! ?? ::FNODOBFM::`string'+0x000000000000682b)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
LAST_CONTROL_TRANSFER: from fffff8020f9ddae9 to fffff8020f9d1fa0
STACK_TEXT:
ffffd000`2852d0b8 fffff802`0f9ddae9 : 00000000`00000139 00000000`00000003 ffffd000`2852d3e0 ffffd000`2852d338 : nt!KeBugCheckEx
ffffd000`2852d0c0 fffff802`0f9dde10 : ffffe000`59c8cc40 00000000`00000000 ffffe000`54b71040 fffff800`1d6d40b6 : nt!KiBugCheckDispatch+0x69
ffffd000`2852d200 fffff802`0f9dd034 : 00000000`00000000 00000000`00000000 ffff6d2d`50094127 fffff802`0f81458f : nt!KiFastFailDispatch+0xd0
ffffd000`2852d3e0 fffff802`0f9e8cdb : ffffc000`061df4e0 ffffc000`061df4e0 ffffc000`061dfbf8 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0xf4
ffffd000`2852d570 fffff800`1d7a0be6 : ffffe000`59e10120 fffff800`1d794388 ffffe000`54dfe9c8 fffff800`1d735f7c : nt! ?? ::FNODOBFM::`string'+0x682b
ffffd000`2852d5a0 fffff800`1d7a54e2 : ffffc000`061df4e0 ffffc000`061dfbf8 ffffc000`061df550 fffff800`1d7367ea : SYMDS64+0x71be6
ffffd000`2852d5d0 fffff800`1d737f20 : ffffc000`061df378 ffffc000`061dfbf8 00000000`00000000 ffffc000`05a9bf18 : SYMDS64+0x764e2
ffffd000`2852d620 fffff800`1d73e171 : ffffc000`051e6a88 ffffc000`05a9bf18 ffffc000`05a9bf18 ffffe000`5988cb00 : SYMDS64+0x8f20
ffffd000`2852d650 fffff800`1d782027 : ffffc000`061ea018 00000000`00000000 ffffe000`58409008 fffff800`1d794388 : SYMDS64+0xf171
ffffd000`2852d680 fffff800`1d79af21 : ffffc000`061ea018 ffffd000`2852d8c9 ffffe000`58409008 00000000`10000004 : SYMDS64+0x53027
ffffd000`2852d6c0 fffff800`1d9a3bb3 : ffffe000`58409078 fffff800`1d98b3e8 ffffe000`58409008 ffffd000`2852d8c9 : SYMDS64+0x6bf21
ffffd000`2852d6f0 fffff800`1d9a91fa : ffffe000`5840a1a8 ffffe000`58409008 00000000`00000000 ffffe000`00000000 : SYMEFA64+0xe9bb3
ffffd000`2852d720 fffff800`1d9ae015 : 00000000`00000000 00000000`00000000 ffffd000`2852d8c9 ffffe000`58a10e60 : SYMEFA64+0xef1fa
ffffd000`2852d760 fffff800`1d9adf4c : 00000000`01820201 ffffe000`58a10e60 ffffe000`58a10e60 ffffe000`58a10be0 : SYMEFA64+0xf4015
ffffd000`2852d790 fffff800`1d9b294c : ffffe000`59e0a150 ffffe000`58a10e60 ffffe000`5988ca80 ffffe000`58a10e60 : SYMEFA64+0xf3f4c
ffffd000`2852d7c0 fffff800`1d9a2435 : ffffd000`2852d8a0 ffffe000`599a4010 ffffd000`00000000 ffffe000`59e0a010 : SYMEFA64+0xf894c
ffffd000`2852d7f0 fffff800`1d6d528a : 00000000`00000000 ffffe000`59e0a070 ffffe000`5604e300 ffffe000`58a10e60 : SYMEFA64+0xe8435
ffffd000`2852d820 fffff800`1d71bf76 : ffffd000`2852d960 00000000`00000000 ffffe000`5604f900 ffffe000`571dab10 : fltmgr!FltpPerformPreCallbacks+0x31a
ffffd000`2852d930 fffff800`1d6d413a : ffffe000`57170dd0 ffffe000`571dabd0 ffffe000`59cf18c0 fffff802`0fd411a7 : fltmgr!FltpProcessShutdownRequest+0x122
ffffd000`2852d9b0 fffff802`0fbf7518 : ffffe000`57170dd0 00000000`00000001 ffffe000`571dabd0 fffff802`0fb54a90 : fltmgr!FltpDispatch+0x13a
ffffd000`2852da10 fffff802`0fbf7273 : 00000000`00000001 00000000`00000000 00000000`00000001 00000000`00000000 : nt!IopShutdownBaseFileSystems+0xb8
ffffd000`2852da90 fffff802`0fbfb722 : fffff802`0fbfb4b0 00000000`00000000 ffffe000`59963040 ffffe000`59963040 : nt!IoShutdownSystem+0x127
ffffd000`2852db10 fffff802`0f8d1adb : fffff802`0fbfb4b0 ffffd000`2852dbd0 00000000`00000000 ffffe000`59963040 : nt!PopGracefulShutdown+0x272
ffffd000`2852db50 fffff802`0f94d794 : ffffe000`59965800 ffffe000`59963040 ffffe000`59963040 ffffe000`54b71040 : nt!ExpWorkerThread+0x293
ffffd000`2852dc00 fffff802`0f9d85c6 : ffffd000`66c40180 ffffe000`59963040 ffffe000`59965800 00000000`00000000 : nt!PspSystemThreadStartup+0x58
ffffd000`2852dc60 00000000`00000000 : ffffd000`2852e000 ffffd000`28528000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
SYMDS64+71be6
fffff800`1d7a0be6 33d2 xor edx,edx
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: SYMDS64+71be6
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: SYMDS64
IMAGE_NAME: SYMDS64.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 51f84c44
FAILURE_BUCKET_ID: 0x139_3_SYMDS64+71be6
BUCKET_ID: 0x139_3_SYMDS64+71be6
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_symds64+71be6
FAILURE_ID_HASH: {bf9be68b-5f04-08d4-3152-3d420dc362f6}
Followup: MachineOwner -
Windows 2012 BSOD - dump output
Hello,
1 of our Windows 2012 R2 server has been blue screening to day, any ideas what the bug might be? It is our Citrix server so many users are logged in most of the time, here is the memory.dmp out put via Windbg:
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\MEMORY.DMP]
Kernel Bitmap Dump File: Only kernel address space is available
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Product: Server, suite: TerminalServer
Built by: 9600.17630.amd64fre.winblue_r7.150109-2022
Machine Name:
Kernel base = 0xfffff802`b1a76000 PsLoadedModuleList = 0xfffff802`b1d4f250
Debug session time: Fri May 1 15:55:24.789 2015 (UTC + 1:00)
System Uptime: 0 days 7:53:47.588
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck 139, {3, fffff802b4fe47f0, fffff802b4fe4748, 0}
Probably caused by : ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )
Followup: MachineOwner
0: kd> !analyze -v
* Bugcheck Analysis *
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff802b4fe47f0, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff802b4fe4748, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
TRAP_FRAME: fffff802b4fe47f0 -- (.trap 0xfffff802b4fe47f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe001e61412d8 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff802b1c087bb rsp=fffff802b4fe4980 rbp=0000000000000000
r8=0000000000000000 r9=0000000000000002 r10=fffff802b1a76000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe cy
nt! ?? ::FNODOBFM::`string'+0x3190b:
fffff802`b1c087bb cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff802b4fe4748 -- (.exr 0xfffff802b4fe4748)
ExceptionAddress: fffff802b1c087bb (nt! ?? ::FNODOBFM::`string'+0x000000000003190b)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_PARAMETER1: 0000000000000003
TAG_NOT_DEFINED_c000000f: FFFFF802B4FEBFB0
LAST_CONTROL_TRANSFER: from fffff802b1bd24e9 to fffff802b1bc69a0
STACK_TEXT:
fffff802`b4fe44c8 fffff802`b1bd24e9 : 00000000`00000139 00000000`00000003 fffff802`b4fe47f0 fffff802`b4fe4748 : nt!KeBugCheckEx
fffff802`b4fe44d0 fffff802`b1bd2810 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff802`b4fe4610 fffff802`b1bd1a34 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
fffff802`b4fe47f0 fffff802`b1c087bb : fffff802`b1d79180 00000000`00000000 fffff802`b4fe4ae0 ffffe001`efac1350 : nt!KiRaiseSecurityCheckFailure+0xf4
fffff802`b4fe4980 fffff802`b1b2a987 : ffffffff`fffe7960 00000000`00000001 fffff802`b4fe4ae0 fffff802`00000002 : nt! ?? ::FNODOBFM::`string'+0x3190b
fffff802`b4fe49e0 fffff802`b1bca4ea : fffff802`b1d79180 fffff802`b1d79180 fffff802`b1dd2a00 ffffe001`ede29080 : nt!KiRetireDpcList+0xa57
fffff802`b4fe4c60 00000000`00000000 : fffff802`b4fe5000 fffff802`b4fdf000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff802`b1bd2810 c644242000 mov byte ptr [rsp+20h],0
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 54b0c2f7
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_3_nt!KiFastFailDispatch
BUCKET_ID: 0x139_3_nt!KiFastFailDispatch
Followup: MachineOwnerI usually start with MSDN analytical articles. In this case
https://msdn.microsoft.com/en-us/library/windows/hardware/jj569891(v=vs.85).aspx
HTH
Milos -
C# SerialPort KERNEL_SECURITY_CHECK_FAILURE
I'm using SerialPort class to read and write data from an USB device that use USB CDC class. My Program is called CameraControl.
Often I get blue screen with KERNEL_SECURITY_CHECK_FAILURE
Below WinDbg analysis
* Bugcheck Analysis *
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00020d51470, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00020d513c8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
OVERLAPPED_MODULE: Address regions for 'niorbk' and 'IntcDAud.sys' overlap
TRAP_FRAME: ffffd00020d51470 -- (.trap 0xffffd00020d51470)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe001e1d400b8 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe001e5cf6c28 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800c73f0414 rsp=ffffd00020d51600 rbp=ffffe001e1a87080
r8=fffff800c73f03c0 r9=0000000000000012 r10=0000000000000000
r11=fffff80209967897 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
usbser+0xa414:
fffff800`c73f0414 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffd00020d513c8 -- (.exr 0xffffd00020d513c8)
ExceptionAddress: fffff800c73f0414 (usbser+0x000000000000a414)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
BUGCHECK_STR: 0x139
PROCESS_NAME: CameraControl.
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - Il sistema ha rilevato un sovraccarico di un buffer basato su stack in questa applicazione. Il sovraccarico potrebbe consentire a un utente non autorizzato di assumere il controllo dell'applicazione.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Il sistema ha rilevato un sovraccarico di un buffer basato su stack in questa applicazione. Il sovraccarico potrebbe consentire a un utente non autorizzato di assumere il controllo dell'applicazione.
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
LAST_CONTROL_TRANSFER: from fffff802099667e9 to fffff8020995aca0
STACK_TEXT:
ffffd000`20d51148 fffff802`099667e9 : 00000000`00000139 00000000`00000003 ffffd000`20d51470 ffffd000`20d513c8 : nt!KeBugCheckEx
ffffd000`20d51150 fffff802`09966b10 : ffffe001`e7dc0440 00000000`00000000 ffffe001`00000001 ffffd000`20d514c0 : nt!KiBugCheckDispatch+0x69
ffffd000`20d51290 fffff802`09965d34 : 00000000`00000000 ffffe001`e7956de8 ffffc001`e05c6320 fffff800`c377ccb2 : nt!KiFastFailDispatch+0xd0
ffffd000`20d51470 fffff800`c73f0414 : 00000000`00000306 00000000`00000000 00000000`00000050 00000000`000007ff : nt!KiRaiseSecurityCheckFailure+0xf4
ffffd000`20d51600 fffff800`c73f0470 : ffffe001`e5cf6c18 00000000`00000000 ffffe001`e1aa4400 00000000`00000000 : usbser+0xa414
ffffd000`20d51630 fffff800`c73ef9a1 : ffffe001`e53ffa00 ffffe001`e5cf69d0 ffffe001`e5cf6880 00000000`00000010 : usbser+0xa470
ffffd000`20d51660 fffff802`09bdcab2 : ffffe001`e17bf780 ffffe001`e17bf780 00000000`00000000 ffffe001`e7546680 : usbser+0x99a1
ffffd000`20d51690 fffff802`09bed5fa : ffffe001`e1aa43d0 ffffe001`e0d88dc0 ffffe001`e1aa43e0 ffffe001`e1aa4300 : nt!IopCloseFile+0x152
ffffd000`20d51720 fffff802`09bed3f3 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`00000001 : nt!ObpDecrementHandleCount+0x1b6
ffffd000`20d517c0 fffff802`09bed02e : ffffe001`e1a8c080 fffff802`09855114 00000000`00000000 00000000`00000002 : nt!ObCloseHandleTableEntry+0x313
ffffd000`20d51890 fffff802`09d641f6 : ffffe001`e1a87080 ffffe001`e1a7e400 ffffc001`ed9e17c0 00000000`00000001 : nt!ExSweepHandleTable+0xba
ffffd000`20d518f0 fffff802`09b9506a : ffffd000`245d7713 ffffd000`245d7713 ffffe001`e1a87348 ffffffff`00000040 : nt! ?? ::NNGAKEGL::`string'+0x32c16
ffffd000`20d51960 fffff802`09c2f6cb : 00000000`e1a87088 00000000`e1a87088 00000000`c000010a 00000000`00000000 : nt!PspRundownSingleProcess+0x286
ffffd000`20d519f0 fffff802`09c2f3d1 : ffffe001`e1def880 ffffe001`e1a7e400 ffffe001`e1a87080 ffffe001`e1a87080 : nt!PspTerminateAllThreads+0x27f
ffffd000`20d51a50 fffff802`09c2f15e : ffffffff`ffffffff ffffe001`e10c0080 ffffe001`e1a87080 ffffe001`e1a7e080 : nt!PspTerminateProcess+0xe5
ffffd000`20d51a90 fffff802`099664b3 : ffffe001`e1a87080 ffffe001`e1a7e080 ffffd000`20d51b80 00000000`0000159c : nt!NtTerminateProcess+0x9e
ffffd000`20d51b00 00000000`77022772 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0ff6eac8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77022772
STACK_COMMAND: kb
FOLLOWUP_IP:
usbser+a414
fffff800`c73f0414 cd29 int 29h
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: usbser+a414
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: usbser
IMAGE_NAME: usbser.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5215f890
IMAGE_VERSION: 6.3.9600.16384
FAILURE_BUCKET_ID: 0x139_3_usbser+a414
BUCKET_ID: 0x139_3_usbser+a414
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_usbser+a414
FAILURE_ID_HASH: {f38f031c-a840-6c18-f377-c47aa3e1dec1}
Followup: MachineOwner
I'm using Windows 8.1 PRO and this problem is very embarrassing for my clients.
Thank youHello tazzo,
According to this
article, the issue seems to be related with the system as it describes that “This bug check indicates that the kernel has detected the corruption of a critical data structure”.
I would suggest that you could post this issue to:
http://answers.microsoft.com/en-us
Best Regards,
Fred.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey. -
Windows 8 crashes after installing Apple drivers
Due to an electrical storm, I had a 2 partition drive fail. The Mac partition was corrupted, the Windows 8 (via BootCamp) install was fine. However, I couldn't reformat (or even mount) OS X so decided to reinstall both OSes on their own physical drives within a Mac Pro. Mountain Lion restored from a Time Machine backup and I got Windows 8 up and running, via BootCamp, on the other drive. All seemed well until I went to install the Apple drivers/software where upon my restart from the install I got the BSoD. No matter what I do or how many times I restart, it continuously crashes. Curiously, two randomly spouted errors are offered...
KERNEL_SECURITY_CHECK_FAILURE
and
IQRL_NOT_LESS_OR_EQUAL
The problem seems to be with the Apple drivers. I used the updated BootCamp 5 software. However, I also used BootCamp 4 software after restoring Windows 8 to a clean install, that set of drivers doing exactly what BC5 did. I've stripped my settings back down to initial install, even reformatted the physical drive, re-partitioned via BootCamp and reinstalled Win8. While working correctly, I set up my account, redownloaded apps I installed from Windows Store, restarted to finish those installations; still, the only issue seems to be when I install the Apple offered drivers. I would just not use them but with many of my peripherals being Apple products it's more of a hassle than I care to deal with. And, I had it all working before with no problem. What's wrong this time? Below I list some concerns...
Is there any difference between installing a BootCamp/Win8 partition on a startup drive or another internal harddrive? Once, BootCamp had to be installed on the startup disk.
Is there any way to install just certain drivers from Apple's software pack since best I can find from MS's site is that the errors seem to be one or two driver incompatibilities?
I've installed Win8 updates prior to and after running Apple's software... would this affect the installation of that software either way or system integrity in Win8?
The above are the only two error messages I've seen. Why do they alternate? Is there more than one issue needing to be addressed?
It all worked before, could it be the software offered now? I've tried BootCamp 4, 5; should I try a lower numbered driver set?My apologies for not following up on this topic.
Yes, I found a fix for my issue. It involved the Time Machine backup drive I had installed.
I reinstalled OS X and Win 8 onto the same drive and experimented pulling drives out of the Mac Pro. However, I never removed the Time Machine drive alone, only took the three extra drives out at the same time so I did not which one was causing the crash. It didn't seem to matter which bay it was in, it was the backup itself that Win 8 didn't work with. My Time Machine backup goes back for over a year so I wasn't interested in starting all over so I removed it from the Mac and installed it in an external enclosure. HOWEVER, if this drive is connected and on while booting up in Win 8 the OS will still crash. Within the Mac, it was impossible to keep the backup from mounting. In the external, I have to remember to disconnect when I switch OSes. Not a fix really, but a solid workaround.
If someone wanted to set up a new backup perhaps that would fix the issue completely. Perhaps it's because OS X/startup disk was restored from the backup and the backup have the same data, maybe it's an issue with data on the backup disk and Windows 8. I don't know. But several times, while switching the OSes I have forgotten to disconnect the now external backup and Win 8 crashes; if I remember to disconnect no issues at all. -
Windows 8.1 - \windows\system32\winload.efi missing or corrupt Code: 0cx000000f
I have had my Lenovo IdeaPad U330 Touch 4th Gen i5 for 5 months now, and last week, lots of blue screen errors started appearing. Here is a list of the BSOD Errors I had DURING ONE DAY:
BAD_POOL_HEADER
PAGE_FAULT_IN_NON_PAGED_AREA
MEMORY_MANAGEMENT
KERNEL_SECURITY_CHECK_FAILURE
PFN_FILE_CORRUPT
BAD_POOL CALLER
ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
Anyway, It worked fine this morning, but after I came back from lunch, It told me that my computer needed to be repaired, because the file \windows\system32\winload.efi was either missing or contained errors. I have 3 options on this screen which are:
"Press Enter to try again" - which does nothing
"Press F8 for Startup Settings" - which does nothing
"Press Esc for UEFI Firmware Settings" - which works and takes me to the "InsydeH2O Setup Utility"
What do I do to get my laptop working again??Hi,
How about your problem now? According to your description, the only way except reinstall OS to fix your problem was create a system repair disc, USB drive is OK. Then connect to your computer to fix this problem.
Roger Lu
TechNet Community Support -
Windows 10 upgrade fail on Y570
I tried upgrading my lenovo laptop yesterday from Windows 7 to 10 it failed twice with a pop up saying "Drive where windows installed is locked. Unlock the drive and try again." Can someone point me in the right direction where to do so?
Ok, here we go with some explanations, this might be a long post. Laptop specification: Series: Y570Intel Core i7-2670QM @ 2.20GHzRAM: 8 GB256GB Crucial M550 mSATA SSD drive - previously there was a 32GB SSD drive750 GB WD Scorpio Blue HDD driveWindows 7 Pro NRapidDrive driver installed I have been fighting with Windows 7 to Windows 10 upgrade for about 10 days now with no luck. In my case the main thing is to keep the data on hard drives and the main problem is the RapidDrive driver.I know you can do a clean install but this would cause a data loss. 1. When you try to upgrade to Windows 10 with configuration mentioned above or similar you will most probably get an error message during second stage of Win10 installation (1st - copying files goes ok., 2nd - installation of drivers and functions fails, 3rd - never got to it with both drives plugged in). You will most probably get BSOD with error message kernel_security_check_failure. This is caused by the incompatibility of RapidDrive driver with Windows 10 (the same was with Windows 8) 2. In my case with bigger SSD drive I have managed to upgrade to Windows 10 but only partially. During the upgrade process at first reboot I have powered off the computer and taken out the HDD. Started back up and system installed/upgraded on the SSD. Due to the fact that the system was upgraded, it took over all the drivers from previous instance (Windows 7) together with RapidDrive.This is now causing two things:1) When I plug in the HDD, system will boot once and only once normally. Second power on/restart/wake up from hibernation or whatever will cause BSOD with kernel_security_check_failure message 2) Removing the RapidDrive driver files (HybridCFileX64.sys, HybridDiskX64.sys, LhdX64.sys) together with all corresponding registry entries will cause BSOD with inaccessible_boot_device message. This will show up regardless if the HDD is plugged in or not As from what I have seen and figured out RapidDrive driver modifies the disk/partition size somehow in partition table so the size of the disk is in fact bigger that it really is. As far as I know, nobody was able to uninstall the RapidDrive driver so far to split the SSD and HDD drives. But maybe someone has some suggestions? The problem with Y570 with RapidDrive installed, is the driver and since Lenovo has not done anything with it for about 4 years, I believe they have abandoned the solution leaving users with existing problem.The only hope is either within the users that will be able to find an uninstallation method or with MS that will find a way to upgrade or delete the **bleep** driver.
-
Problem with Threads and "plase wait..."-Window
Hi everyone,
I have a problem that I'm not able to solve in any way... I have a time-consuming task (a file decryption) which I execute in a separate thread; I've used the SwingWorker class, like suggested by sun-tutorial, and it works right. The problem is that I have to wait that the decryption have finished before continuing with program-execution. Therefore I would like to display a "please wait"-window while the task runs. I've tryed all the possible ways I know but the problem is always the same: the waitWindow is displayed empty, the bounds are painted but the contents no; it's only painted when the decrypt-task has finished. Please help me, I have no more resources....
decrypt-file code:
public class DecryptFile {
private String cryptedFileNameAndPath;
private ByteArrayInputStream resultStream = null;
// need for progress
private int lengthOfTask;
private int current = -1;
private String statMessage;
public DecryptFile(String encZipFileNameAndPath) {
cryptedFileNameAndPath = encZipFileNameAndPath;
//Compute length of task...
// 0 for indeterminate
lengthOfTask = 0;
public ByteArrayInputStream getDecryptedInputStream() {
return this.resultStream;
* Called from ProgressBarDemo to start the task.
public void go() {
current = -1;
final SwingWorker worker = new SwingWorker() {
public Object construct() {
return new ActualTask();
worker.start();
* Called from ProgressBarDemo to find out how much work needs
* to be done.
public int getLengthOfTask() {
return lengthOfTask;
* Called from ProgressBarDemo to find out how much has been done.
public int getCurrent() {
return current;
public void stop() {
current = lengthOfTask;
* Called from ProgressBarDemo to find out if the task has completed.
public boolean done() {
if (current >= lengthOfTask)
return true;
else
return false;
public String getMessage() {
return statMessage;
* The actual long running task. This runs in a SwingWorker thread.
class ActualTask {
ActualTask () {
current = -1;
statMessage = "";
resultStream = AIUtil.getInputStreamFromEncZip(cryptedFileNameAndPath); //here the decryption happens
current = 0;
statMessage = "";
}The code that calls decryption and displays waitWindow
final WaitSplash wS = new WaitSplash("Please wait...");
final DecryptFile cryptedTemplate = new DecryptFile (this.templateFile);
cryptedTemplate.go();
while (! cryptedTemplate.done()) {
try {
wait();
} catch (Exception e) { }
this.templateInputStream = cryptedTemplate.getDecryptedInputStream();
wS.close();Thanks, thanks, thanks in advance!
EdoardoMaybe you can try setting the priority of the long-running thread to be lower? so that the UI will be more responsive...
-
Last sunday i install a window 8 and this window format my all drive & make it 1 drive (DRIVE C). Before all of this i have 5 drive in different size with 1 Bitlocker protect drive.
So i try data recovery software to recover my data. i got back all my data without that ( bitlocker ) protected drive.
so please guys help me how can i get back data from bitlocker protected drives.
please please help me.Hi,
I sorry for your experience, but there is no way to recovery the data encryped by BitLocker untill now.
BitLocker is designed to make the encrypted drive unrecoverable without the required authentication. When in recovery mode, the user needs the recovery password or recovery key to unlock the encrypted drive. Therefore, we highly recommend
that you store the recovery information in AD DS or in another safe location.
Please refer to the link below for the statement:
http://technet.microsoft.com/de-de/library/ee449438(v=ws.10).aspx#BKMK_RecoveryInfo
Roger Lu
TechNet Community Support -
HP LaserJet Enterprise 500 Color MFP M575 - Can't scan from Windows
We recently purchased and installed an HP LaserJet Enterprise 500 Color MFP M575 to be used as a networked all-in-one solution for a number of offices. I have been able to get it set up on our network and have installed the appropriate drivers on the requested Windows 7 x64 machines, and network printing works perfectly. However, it seems that despite the fancy scanning features available from the all-in-one itself (scan to email, scan to a network folder, etc.), I can't find any way to do an old-fashioned scan from Windows.
I have installed the full software solution available on the driver download page for the device, and while Windows lists the device as a "Multi Function Printer; Scanner" it does not recognize it as an actual scanner. The built-in Windows Fax and Scan simply reports that no scanners are installed. The software installation did not include the HP Solution Center (which I am used to seeing from my experience with various other HP all-in-one devices) or any equivalent for direct scanning. The driver download page for the device does not include any separate scanning drivers, so I can't be certain if they were included with the full installation or exist at all.Some of our staff also use Adobe Acrobat to scan, and even that fails to recognize the MFP as a scanner.
We'll eventually be setting up the device to scan directly to a network folder, but we need a fallback while IT takes their time getting it set up; I can't imagine that the simplest option is not available at all. I must be missing something here, any assistance would be greatly appreciated.
Edit: To add, I also ran the HP Print and Scan Doctor. Interestingly, it reports the device as a printer and only offers to "Fix Printing" without any sort of resolution for my scanning problem.There is no change to this problem after 6 months since the last post. Put simply, and as stated in the previous posts, there is no way to scan a document and receive the image on your PC. If you are working with graphics for any length of time or want to create an image for inclusion as an image in a document or web page using this piece of equipment will not allow you to do so.
Great shame as every other function works well - it cannot be beyond the wit of HP to include a Windows application that enables you to scan an image, receive it in the software you are using at the time (e.g. Outlook, Word, Photoshop...) and use it in your work.
HP Printers several years older than this £1000+ Enterprise printer were able to do this simple job and have done so for a great many years. Just being able to use Microsoft's Fax and Scan would be start. -
Windows no longer detecting my Audigy 4?(Non-P
Hey all. I've had my Audigy 4 (non-Pro) installed and working super for about 50 days, but it started giving me a weird problem. Windows was no longer detecting the card! It was weird. DX Diag, programs like EVEREST... they all report no sound card whatsoever.
Here are my PC specs:
XP Home Edition
Albatron K8X800 Pro
S754 3200+ ClawHammer
x 2 OCZ ELPE 52 MB(2-3-2-5)
Visiontek XTASY X850XT PE
x 80 GB SATA 2 Seagate, x 80 GB Maxtor
Some other things to note:
XP has been repaired. Went from Service Pack , updates, and all the way to Service Pack 2. The card requires XP w/SP2, yes, so I have that covered.
Onboard audio is disabled through the bios. I have AC'97 integrated audio on this.
My motherboard has fi've PCI slots - although I can only access 4 because my video card is in the way, and I have tried three of those and I get the same problem.
I have tried it in other PCs in my house, double-checked each time - so it is not ESD as I originally believed. It works just fine on those PCs. It is being not located only on MY PC.
So guys and gals, I do not know what to do... I am stumped. It's the weekend so I can't call Creative support until Monday. I don't want to request an RMA through my warranty because clearly it's just a problem with my PC. What should I do?!Message Edited by Celsius on -26-2005 07:36 PMDevice not recognized in iTunes
-
IPod Touch/Phone 4gens No Longer Detected in WINDOWS MY COMPUTER but OK in iTunes
Since I have not found help online regarding the above situation I'm looking for help accordingly. For most folks it's iTunes not detecting i-Devices, but my situation is unique.
It started last night after I was on the phone for hours with Norton regarding error messages I was getting with Internet Security. Those issues have been resolved.
Again: iTunes detects and interacts successfully with ALL my iDevices. Windows Vista > My Computer no longer does.
Please help.Just now I performed the following:
Turned off and turned back on AMDS(Apple Mobile Device) Service.
Disabled Norton Internet Security, and tried checking if Windows would see my devices.
For anyone who has Windows Vista you are familiar with the notes that play when you plug in a USB device: "da-dunk!" Low-High note dadunk indicates connected. High-low indicates it was disconnected.
I can tell there is a problem because right after the Low-High dadunk in Vista I get a triple Low-note Du-du-dunk.
Please help! -
IPod is not recognized by Windows Vista - possible solution
During the past couple of weeks that I faced this problem I found out that a lot of people had the same question as I did.
Here is a possible solution.
I have HP Pavilion laptop with Windows Vista. After I connected my new iPod – it didn’t show up in My Computer as a new device and in Device Manager it was listed in “Other devices” with a question mark next to it. I already had iTunes installed – it didn’t show up in iTunes. On the attempt to reinstall the driver I had a message that the driver was found but an error occurred while installing it.
Here is what I did:
1. Install iTunes (it has iPod driver for Vista in it).
2. Turn on iPod and connect it to computer.
3. Restart computer with iPod turned on and connected to computer.
4. On the start up the computer will begin automatically installing the driver and the message will appear in the corner that new device is being installed.
5. After it has been installed – check My Computer – you should see it listed there.
6. Run iTunes and configure iPod.
iTunes might run a little bit slow when configuring iPod for the first time.
Good luck.if only this fix worked for windows xp or even 2000 (at my job)
insane, but it IS a driver/usb problem i now know, at least i've gotten that far. -
IPod not recognized by iTunes, Windows Vista prompts to format iPod drive
Hello,
I have IPod 80GB which I rarely use. Yesterday when I wanted to use it, I went to add a few new audios to it, connected to my computer and launched iTunes. I added the folder which contained audios to iPod, synced it and wanted to disconnect, but iTunes took excepionally long to finish.
When I clicked on 'eject' icon, I go a message saying 'some files are being accessed' or something like that. I waited for 5-10 minutes but it won't finish up, so I unplugged my iPod as I had to leave.
Later when I wanted to play, I noticed I had no audios in iPod at all.
Later when I got home, connected it again to computer, launched iTunes, but iTunes won't show iPod. A few minutes later, windows (Vista) prompted a message saying that it needs to format N: drive (which was iPod).
I tried diagnostics on tis site, restarted/reset iPod etc, but it didn't solve the problem. I removed and reinstalled iTunes as per instructions, still no use.
Then I called Apple support Canada and the guy on the phone said I need to pay to get support. He said he'd send me some documents via email which would solve the problem and hen I wouldn't have to pay. I gave him my email address, but so far I have recieved no emails from him. I have checked my spam and junk folders, just in case, but nothing there.
Anyhow, this issue came up all of a sudden, there has been no physical damage to iPod, I barely use it. maybe for few minutes here and there a month. I have had numerous problems in the past every time a new iTunes update come, it always creates problems. Last year I spent many hours after iTunes update make iPod unrecognizable so I had to go back to older version, then upgrade etc. I don't remember how I solved the issue, but it took a while and it turned out to be something of iTunes version issue.
I wonder if this is another of such issue. I hope its not a hardware issue with iPod. I'd appreciate any help.
ThanksI just got Vista too and it does recognize my ipod, but itunes can't find a lot of my songs on the computer. I tried to uninstall itunes and reinstall it thinking that it would seach for new music when I installed it again but nothing new happened when I did that.
-
Windows no longer boots up, paging file error
I just reinstalled windows on my mac last week because until now I had been running the old beta version of boot camp.
Just a few days ago I started getting blue screens every so often and it happened again (twice to be exact) yesterday, however one of the times it booted up and informed me I might want to change my paging file size. Not quite sure what this was I went and found the paging file option in settings and found it was clicked on a set size...so I figured I'd set it on the option that lets windows decide for me hoping this would fix the blue screen problem.
I shut down my computer later that night and now windows won't get to the desktop.
When I start it up normally it runs the system check (which I cannot skip for some reason) which gets to 84% and then says \windows\Dump3865.tmp is cross-linked on allocation unit 1731772
Above it it mentions there is an invalid size for my page file.
I tried booting it up the in safe mode multiple times and every time it generates a list in dos and stops on windows\system32\Drivers\mup.sys
I really don't want to have to reload windows again. Is there anyway to skip the system check (it says press anykey, but that has never worked for me) or any other way to get my paging files back to the way they were?
Thank you.
Oh I'm running leopard with windows XP professional on a macbook pro (last years model) if that helps in anyway.
Message was edited by: TommmmmA. run chkdsk
B. What happens if you boot from XP CD and Repair System
C. system file checker - from command "sfc /scannow"
http://www.informationweek.com/news/windows/showArticle.jhtml?articleID=18530125 1
http://windowshelp.microsoft.com/Windows/en-US/Help/f768809f-ed90-415f-a83f-89b4 2108b3551033.mspx
Maybe you are looking for
-
I plugged my Iphone 4s in my computer last night to sync and it asked me if I wanted to do an update, so I clicked to start the update. When I woke up this morning my phone is frozen with the display having the blue circle itunes on the top and botto
-
I want to create a back up of my iPhoto library on an external hard (not the time machine backup). I've searched the iPhoto help, but unfortunately it does not tell me 'how' to create this additional backup of my library. Thanks
-
i forgot my passcode and have not snyced to a computer so I can not restore. Please help
-
hi gurus, i'm facing a weird problem, i have implmented three scenarios IDOC - > FILE, inside each mapping i created an UDF that call an RFC function that brings me an accounting value, the rfc call another FM : LAST_DAY_IN_PERIOD_GET. of course i
-
How do I delete text from a textArea?
How do I delete text from a textArea? I basically want the opposite of append(String)... I want something that removes a line from my TextArea. Anyone know?>