Kernel Security Check Failure Windows 8
I have had this error at random times while i am on my computer. Here is the drop box file with all the Minidump files. https://dl.dropboxusercontent.com/u/71858973/Minidump%20(2).zip
November 3rd, 2014 12:44am
Hi,
Use !analyze -v to get detailed debugging information.
BugCheck 139, {3, fffff8015f30b560, fffff8015f30b4b8, 0}
*** WARNING: Unable to verify timestamp for MRVW24C.sys
*** ERROR: Module load completed but symbols could not be loaded for MRVW24C.sys
Probably caused by : MRVW24C.sys ( MRVW24C+272f1 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff8015f30b560, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff8015f30b4b8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
TRAP_FRAME: fffff8015f30b560 -- (.trap 0xfffff8015f30b560)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe000465fe008 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe000465fdd10 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8015daf7d01 rsp=fffff8015f30b6f0 rbp=0000000000000000
r8=ffffe000465fe1e8 r9=ffffe000465fdd10 r10=ffffe00046866bc0
r11=fffff8015f30b780 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di ng nz na pe cy
nt!ExInterlockedInsertTailList+0xad:
fffff801`5daf7d01 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff8015f30b4b8 -- (.exr 0xfffff8015f30b4b8)
ExceptionAddress: fffff8015daf7d01 (nt!ExInterlockedInsertTailList+0x00000000000000ad)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
BUGCHECK_STR: 0x139
PROCESS_NAME: steamwebhelper
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
DPC_STACK_BASE: FFFFF8015F30CFB0
LAST_CONTROL_TRANSFER: from fffff8015db62ae9 to fffff8015db56fa0
STACK_TEXT:
fffff801`5f30b238 fffff801`5db62ae9 : 00000000`00000139 00000000`00000003 fffff801`5f30b560 fffff801`5f30b4b8 : nt!KeBugCheckEx
fffff801`5f30b240 fffff801`5db62e10 : 000026c5`00005000 00000000`00000000 00000000`00000001 00000000`000005b4 : nt!KiBugCheckDispatch+0x69
fffff801`5f30b380 fffff801`5db62034 : 00000000`0000ffff ffffe000`440adf30 00000000`00000000 fffff800`78b1d0de : nt!KiFastFailDispatch+0xd0
fffff801`5f30b560 fffff801`5daf7d01 : ffffe000`47d5c3d1 00000000`00000014 ffffe000`47ca7030 fffff800`78505887 : nt!KiRaiseSecurityCheckFailure+0xf4
fffff801`5f30b6f0 fffff800`79c2e2f1 : ffffe000`465fd000 ffffe000`47af2e20 00000000`00000000 ffffe000`46add590 : nt!ExInterlockedInsertTailList+0xad
fffff801`5f30b730 ffffe000`465fd000 : ffffe000`47af2e20 00000000`00000000 ffffe000`46add590 00000000`00000000 : MRVW24C+0x272f1
fffff801`5f30b738 ffffe000`47af2e20 : 00000000`00000000 ffffe000`46add590 00000000`00000000 fffff800`79c3338e : 0xffffe000`465fd000
fffff801`5f30b740 00000000`00000000 : ffffe000`46add590 00000000`00000000 fffff800`79c3338e ffffe000`47ca7030 : 0xffffe000`47af2e20
STACK_COMMAND: kb
FOLLOWUP_IP:
MRVW24C+272f1
fffff800`79c2e2f1 ?? ???
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: MRVW24C+272f1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: MRVW24C
IMAGE_NAME: MRVW24C.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 472551f7
FAILURE_BUCKET_ID: 0x139_3_MRVW24C+272f1
BUCKET_ID: 0x139_3_MRVW24C+272f1
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_mrvw24c+272f1
FAILURE_ID_HASH: {405011a6-34ec-30a6-31a9-53275dcd66c7}
Followup: MachineOwner
---------
0: kd> lmvm MRVW24C
start end module name
fffff800`79c07000 fffff800`79c5a200 MRVW24C T (no symbols)
Loaded symbol image file: MRVW24C.sys
Image path: \SystemRoot\system32\DRIVERS\MRVW24C.sys
Image name: MRVW24C.sys
Timestamp: Mon Oct 29 11:22:31 2007 (472551F7)
CheckSum: 00055C61
ImageSize: 00053200
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
According to the results, it seems like caused by MRVM24C.sys. Generally speaking, this file belongs to Marvell Semiconductor. Therefore, you can try to upgrade or reinstall Network Adapter driver for test.
In addition, in my opinion, this problem also can be caused by other application conflict. You can check if you installed any application before this problem occures, please try to disable Security application for test.
Free Windows Admin Tool Kit Click here and download it now
November 4th, 2014 2:32am


