kernel security check failure win 8.1 pro

Hi, I have recently run into an error on my MSI gs 70 sealth pro, and at the blue screen it says KERNEL_SECURITY_CHECK_FAILURE or something like that. Can `you guys pls help me find a solution to this error?

And here is my minidump file

https://onedrive.live.com/?cid=b8691941b01457ce&id=B8691941B01457CE%213225&ithint=file,zip&authkey=!AHWDaIoS1xOxELI

May 4th, 2015 5:25am

TM

This was related to the NETwbw02.sys Intel Wireless WiFi Link Driver from Intel Corporation.  I would remove the current driver and install the newest driver available

Microsoft (R) Windows Debugger Version 6.3.9600.17298 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\zigza\Desktop\Minidump\050415-5171-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*D:\Symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*D:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17736.amd64fre.winblue_r9.150322-1500
Machine Name:
Kernel base = 0xfffff802`be473000 PsLoadedModuleList = 0xfffff802`be74c850
Debug session time: Mon May  4 05:05:37.594 2015 (UTC - 4:00)
System Uptime: 1 days 11:41:20.303
Loading Kernel Symbols
...............................................................
................................................................
.........................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 139, {3, ffffd000ed0bde10, ffffd000ed0bdd68, 0}

*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
Probably caused by : vwififlt.sys ( vwififlt!FilterSendNetBufferListsComplete+181 )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd000ed0bde10, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000ed0bdd68, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------


TRAP_FRAME:  ffffd000ed0bde10 -- (.trap 0xffffd000ed0bde10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000002 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe0019d691a78 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8008e8ace06 rsp=ffffd000ed0bdfa0 rbp=ffffd000ed0be040
 r8=ffffe0019ee6a018  r9=0000000000000000 r10=ffffd000ec28eee0
r11=ffffd000ed0bdfc0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po cy
ndis!ndisFreeNblToNPagedPool+0x71:
fffff800`8e8ace06 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffd000ed0bdd68 -- (.exr 0xffffd000ed0bdd68)
ExceptionAddress: fffff8008e8ace06 (ndis!ndisFreeNblToNPagedPool+0x0000000000000071)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT

BUGCHECK_STR:  0x139

PROCESS_NAME:  System

CURRENT_IRQL:  2

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_PARAMETER1:  0000000000000003

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre

LAST_CONTROL_TRANSFER:  from fffff802be5cf7e9 to fffff802be5c3ca0

STACK_TEXT:  
ffffd000`ed0bdae8 fffff802`be5cf7e9 : 00000000`00000139 00000000`00000003 ffffd000`ed0bde10 ffffd000`ed0bdd68 : nt!KeBugCheckEx
ffffd000`ed0bdaf0 fffff802`be5cfb10 : 00000000`00000001 00000000`00000000 00000000`0000002f fffff802`be408ff2 : nt!KiBugCheckDispatch+0x69
ffffd000`ed0bdc30 fffff802`be5ced34 : 00000000`fffffffe 00000000`00000000 00000007`00000000 ffffd000`ed0be0c0 : nt!KiFastFailDispatch+0xd0
ffffd000`ed0bde10 fffff800`8e8ace06 : ffffe001`9dbaed20 fffff800`8f47c146 00000000`ffffffff 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0xf4
ffffd000`ed0bdfa0 fffff800`8e8a686c : ffffe001`9d691a90 ffffe001`9d6eb820 00000000`00000000 ffffe001`9c2b0001 : ndis!ndisFreeNblToNPagedPool+0x71
ffffd000`ed0bdfd0 fffff800`8ff76e19 : ffffe001`9c2b0ca0 ffffe001`9f1de5a0 ffffe001`9d691a90 00000000`00000001 : ndis!NdisFreeCloneNetBufferList+0x18c
ffffd000`ed0be080 fffff800`8e8aaeee : 00000000`00000000 ffffd000`ed0be1d0 fffff800`8ff76c98 00000000`00000000 : vwififlt!FilterSendNetBufferListsComplete+0x181
ffffd000`ed0be0d0 fffff800`9189a671 : ffffe001`94c141a0 ffffe001`9e3ad030 00000000`00000002 00000000`00000000 : ndis!NdisMSendNetBufferListsComplete+0x4de
ffffd000`ed0be240 ffffe001`94c141a0 : ffffe001`9e3ad030 00000000`00000002 00000000`00000000 ffffe001`95ab7780 : Netwbw02+0x1b1671
ffffd000`ed0be248 ffffe001`9e3ad030 : 00000000`00000002 00000000`00000000 ffffe001`95ab7780 fffff800`9170b222 : 0xffffe001`94c141a0
ffffd000`ed0be250 00000000`00000002 : 00000000`00000000 ffffe001`95ab7780 fffff800`9170b222 ffffe001`95abe730 : 0xffffe001`9e3ad030
ffffd000`ed0be258 00000000`00000000 : ffffe001`95ab7780 fffff800`9170b222 ffffe001`95abe730 fffff800`9170ac3f : 0x2


STACK_COMMAND:  kb

FOLLOWUP_IP: 
vwififlt!FilterSendNetBufferListsComplete+181
fffff800`8ff76e19 488b0d40920000  mov     rcx,qword ptr [vwififlt!WPP_GLOBAL_Control (fffff800`8ff80060)]

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  vwififlt!FilterSendNetBufferListsComplete+181

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: vwififlt

IMAGE_NAME:  vwififlt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  53609ba2

IMAGE_VERSION:  6.3.9600.17111

BUCKET_ID_FUNC_OFFSET:  181

FAILURE_BUCKET_ID:  0x139_3_vwififlt!FilterSendNetBufferListsComplete

BUCKET_ID:  0x139_3_vwififlt!FilterSendNetBufferListsComplete

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x139_3_vwififlt!filtersendnetbufferlistscomplete

FAILURE_ID_HASH:  {e85670f0-8cf4-aafd-5f32-c9de2917d36a}

Followup: MachineOwner
---------


Free Windows Admin Tool Kit Click here and download it now
May 4th, 2015 6:17am

But this the newest driver. I just installed yesterday.

the second problem is that sound doesn't work anymore after this blue screen.

May 4th, 2015 6:41am

Hi,

Based on information from Dump file, the error does occur due to the loading process for Netwbw02.sys. If this error occurred after you replaced the driver. Try completely removing current version and install previous version for good measure, and please check your radio device working state from device manager. Re-install the driver and give it a reboot.

Regards,

D. Wu

Free Windows Admin Tool Kit Click here and download it now
May 6th, 2015 9:30pm

TM

If you are continuing to crash upload the new DMP files.  I would completely remove the current driver and install the newest driver available.

Sound is a different issue

May 6th, 2015 9:44pm

Hi. . .

Just for info, I have the exact same Intel driver installed on my HP Envy 17 Windows 8.1 laptop and suffered the same type of BSOD earlier tonight.

Bugcheck - 0x139 - (same as yours) = KERNEL_SECURITY_CHECK_FAILURE

I even had the same exception code as yours....

Exception error code = 0xc409 - buffer overrun

My Intel driver found in the dump -

NETwbw02.sys Mon Mar 23 04:53:41 2015 (550FD495)
My wifi & driver info  - Intel Dual Band Wireless-AC 3160 -  v17.16.0.4 (per Device Manager) - 3/23/2015

Additional info can be found in the thread at Sysnative Forums -

http://www.sysnative.com/forums/bsod-crashes-kernel-debugging/15253-jcgriff2-bsod-windows-8-1-x64-0x139.html

Also, while the BSOD was dumping the kernel memory, a rather high-pitched audio sound was heard, which ceased the moment the 2.2 GB full kernel dump was written (a rather large BSOD full kernel dump by any stretch of the imagination).

Regards. . .

jcgriff2

Microsoft MVP

Windows Experience

Free Windows Admin Tool Kit Click here and download it now
July 6th, 2015 11:59pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics