Question Kernel Security Check Failure BSOD?

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
So I've recently upgraded my AMD A10-6700 to an Athlon X4 880k, and things aren't looking too good. Randomly, I'll get the "KERNEL_SECURITY_CHECK_FAILURE" code, though sometimes it's something totally different, but the kernel one is what I get most of the time. I've tried reseating the CPU, reapplying thermal paste, and updating drivers. I tried running check disk in the recovery environment but it ended up blue screening there, which I have NO idea why that happened. I've run sfc scannow, and that told me there were corrupted files but it didn't fix any of them, then I ran dism check health, and I forgot what happened when I did that since it was a while ago. I've looked at blue screen viewer and ntoskrnl.exe is the file to blame in most of the crashes. In some others, it's ntoskrnl.exe and hal.dll, or instead of hal it's ntfs.sys. The time at which these blue screens occur can be totally random. I could be watching YouTube, playing a video game, or just allowing it to idle on desktop, at some point, it'll blue screen.

Here's what I see on blue screen viewer: http://prntscr.com/ojmnzl

My specs:
CPU: AMD Athlon X4 880k
GPU: EVGA GeForce GTX 950 SC
Mobo: Orchid2-S
HDD: Seagate ST2000DM001-1ER164 2TB
RAM: 10GB DDR3 RAM
PSU: I THINK it's an EVGA 500w PSU of some sort
Some of these parts are just stock with what came with the PC. I took a refurbished HP Pavilion 500-589c a couple of years ago and have been slowly upgrading it. I've never had any problems up until now with the CPU upgrade.
That's a LOT to read, I appreciate anyone who takes time out of their day to help me. Thanks in advance!
 

Colif

Win 11 Master
Moderator
can you go to c:/windows/minidump folder
if it exists, can you copy contents to another folder
upload contents to a file sharing website and show link here

Dumps will tell us more
ntoskrnl - Windows Kernel
Hal - Hardware abstraction layer
ntfs - New Technology File System
all 3 parts of windows, not the cause, just the victim

If C:/windows/minidump doesn't exist,
Can you follow option one on the following link - here - and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c windows/minidump after the next BSOD
copy that file to documents
upload the copy from documents to a file sharing web site, and share the link here and I will get someone to convert file into a format I can read
 

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
can you go to c:/windows/minidump folder
if it exists, can you copy contents to another folder
upload contents to a file sharing website and show link here

Dumps will tell us more
ntoskrnl - Windows Kernel
Hal - Hardware abstraction layer
ntfs - New Technology File System
all 3 parts of windows, not the cause, just the victim

If C:/windows/minidump doesn't exist,
Can you follow option one on the following link - here - and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c windows/minidump after the next BSOD
copy that file to documents
upload the copy from documents to a file sharing web site, and share the link here and I will get someone to convert file into a format I can read

I was thinking of uploading the minidump file, I just didn't know where it was, lol. There's only one file, though. Hope that's ok.
Here it is: https://mega.nz/#!3B91lI5K!LEsDmQHAu-hqOLF2wnS5vnS__Sebxz2Xf6gI-MVDwe8





Windows Memory Diagnostics may find RAM problems and troubleshoot Kernel Security Check Failure.

Open Windows Memory Diagnostic.
Click Restart Now and check for problems
run-windows-memory-diagnostic.jpg


After restart check test results. If they do not appear automatically, right-click the Windows icon and open the Event Viewer.
Windows Logs> System. right, click Search and type memorydiagnostic. Click on the appropriate event to see more details.


I'm pretty sure I've run a memory diagnostic test before, I don't know, I'll run one again and see how that turns out. Thanks!
 

gardenman

Splendid
Moderator
Hi, I ran the dump file through the debugger and got the following information: https://pste.eu/p/ukhD.html

File information:072419-37468-01.dmp (Jul 24 2019 - 22:20:06)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:ntkrnlmp.exe (Process: SDFSSvc.exe)
Uptime:0 Day(s), 4 Hour(s), 33 Min(s), and 33 Sec(s)

Comment: The overclocking driver "AODDriver2.sys" was found on your system. (AMD Overdrive)

Comment: BIOS information was not included in the dump file. This can sometimes mean an outdated BIOS is being used.

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.
 

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
Hi, I ran the dump file through the debugger and got the following information: https://pste.eu/p/ukhD.html

File information:072419-37468-01.dmp (Jul 24 2019 - 22:20:06)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:ntkrnlmp.exe (Process: SDFSSvc.exe)
Uptime:0 Day(s), 4 Hour(s), 33 Min(s), and 33 Sec(s)

Comment: The overclocking driver "AODDriver2.sys" was found on your system. (AMD Overdrive)

Comment: BIOS information was not included in the dump file. This can sometimes mean an outdated BIOS is being used.

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.

This might be the answer! I thought I had removed AMD Overdrive! Thank you so much!
 

gardenman

Splendid
Moderator
Overclocks and overclocking software can cause BSODs. I just mention the files when I see them, but it doesn't necessarily mean that's the source of the crash. It might be, might not.

It's usually not that simple. If you continue to have crashes, please post aditional dump files.
 

gardenman

Splendid
Moderator
I ran the dump file through the debugger and got the following information: https://pste.eu/p/hbzQ.html

File information:072719-34062-01.dmp (Jul 27 2019 - 09:57:46)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:ntkrnlmp.exe (Process: audiodg.exe)
Uptime:0 Day(s), 0 Hour(s), 57 Min(s), and 57 Sec(s)

@Colif will probably reply later today and he may have additional ideas.

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.

Edit: Results for the dump file below: https://pste.eu/p/bZF9.html

File information:072719-35593-01.dmp (Jul 27 2019 - 21:01:54)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:xusb22.sys (Process: System)
Uptime:0 Day(s), 7 Hour(s), 34 Min(s), and 31 Sec(s)

xusb22.sys = Xbox 360 Controller driver
 
Last edited:

Colif

Win 11 Master
Moderator
i was hoping the overclock drivers were right answer, hence me not answering before.

So do you use scarlet crush for your PS3/PS4 controller as it is a known cause of errors. remove it if you don't use it.

Nov 23 2015 bcbtums.sys Broadcom Bluetooth Firmware Download Filter driver
Nov 22 2016 bcmwl63a.sys Broadcom 802 11 Network Adapter Wireless driver http://www.broadcom.com/support/

I have seen both of those drivers cause bsod in recent months as well. See if newer drivers

any driver before June 2016 could be cause as all aren't win 10 drivers based on age, you have a few of those

May 05 2013 ScpVBus.sys Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus driver http://forums.pcsx2.net/
Nov 11 2013 CLVirtualDrive.sys CyberLink Virtual Drive Device driver https://www.cyberlink.com
Mar 30 2015 Hamdrv.sys LogMeIn Hamachi Virtual Miniport driver http://www.logmein.com/
Mar 31 2015 HWiNFO64A.SYS HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
Apr 24 2015 LGBusEnum.sys Logitech GamePanel Virtual Bus Enumerator Driver http://support.logitech.com/
Apr 24 2015 LGJoyXlCore.sys Logitech Gaming Software driver http://support.logitech.com/
Apr 24 2015 LGVirHid.sys Logitech Gamepanel Virtual HID Device driver http://support.logitech.com/
May 24 2015 droidcam.sys Droidcam Virtual Device driver
May 24 2015 droidcamvideo.sys Droidcam Virtual Device WDM Video Capture driver
Jun 09 2015 lgcoretemp.sys CPU Core Temperature Monitor http://support.logitech.com/

So I would look at removing/updating those if you can

Scarlet crush has no updates
Logitech Gaming Software might, I know there are newer versions.
HWINFO is likely part of chipset drivers as I see that all the time - probably okay
Not sure about rest, see if newer versions.
 

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
i was hoping the overclock drivers were right answer, hence me not answering before.

So do you use scarlet crush for your PS3/PS4 controller as it is a known cause of errors. remove it if you don't use it.

Nov 23 2015bcbtums.sysBroadcom Bluetooth Firmware Download Filter driver

Nov 22 2016bcmwl63a.sysBroadcom 802 11 Network Adapter Wireless driver http://www.broadcom.com/support/

I have seen both of those drivers cause bsod in recent months as well. See if newer drivers

any driver before June 2016 could be cause as all aren't win 10 drivers based on age, you have a few of those

May 05 2013ScpVBus.sysScarlet.Crush Productions Scp Dual Shock 3 Virtual Bus driver http://forums.pcsx2.net/
Nov 11 2013CLVirtualDrive.sysCyberLink Virtual Drive Device driver https://www.cyberlink.com
Mar 30 2015Hamdrv.sysLogMeIn Hamachi Virtual Miniport driver http://www.logmein.com/
Mar 31 2015HWiNFO64A.SYSHWiNFO AMD64 Kernel driver https://www.hwinfo.com/
Apr 24 2015LGBusEnum.sysLogitech GamePanel Virtual Bus Enumerator Driver http://support.logitech.com/
Apr 24 2015LGJoyXlCore.sysLogitech Gaming Software driver http://support.logitech.com/
Apr 24 2015LGVirHid.sysLogitech Gamepanel Virtual HID Device driver http://support.logitech.com/
May 24 2015droidcam.sysDroidcam Virtual Device driver
May 24 2015droidcamvideo.sysDroidcam Virtual Device WDM Video Capture driver
Jun 09 2015lgcoretemp.sysCPU Core Temperature Monitor http://support.logitech.com/

So I would look at removing/updating those if you can

Scarlet crush has no updates
Logitech Gaming Software might, I know there are newer versions.
HWINFO is likely part of chipset drivers as I see that all the time - probably okay
Not sure about rest, see if newer versions.

Okay, I'll try updating all of those and I'll just uninstall droidcam until I need it.
Also removing AOD helped a lot, it doesn't crash hardly as often now.
I went into some dump files myself (which are probably deleted by now) and saw practically random things causing it to crash each time. One of them was just discord, another chrome, and one that just said system. Thought that might be worth noting.
It could just be telling what program was running when it crashed, though, I don't know.
 

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
Also, I use a wireless Xbox 360 controller adapter, but I did use to have a PS2 adapter. I'm guessing the Xbox 360 controller and PS3/PS4 controller would be in the same ballpark when it comes to the scarlet crush driver?
Edit: found out that it was used for when I used a Wii U Pro controller via Bluetooth. I've uninstalled it.
 
Last edited:

gardenman

Splendid
Moderator
I ran the dump files through the debugger and got the following information: https://pste.eu/p/hvbX.html

File information:072819-50078-01.dmp (Jul 28 2019 - 19:24:14)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:partmgr.sys (Process: MsMpEng.exe)
Uptime:0 Day(s), 0 Hour(s), 01 Min(s), and 53 Sec(s)

File information:072819-31765-01.dmp (Jul 28 2019 - 19:21:54)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:ntkrnlmp.exe (Process: audiodg.exe)
Uptime:0 Day(s), 1 Hour(s), 21 Min(s), and 59 Sec(s)

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.
 

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
partmgr.sys = Partition manager. The process it crashed was WIndows Defender
might be a call back to how ntfs.sys was showing on previous errors. Try running this on hdd: https://www.seagate.com/au/en/support/downloads/seatools/seatools-win-master/

chkdsk created BSOD last time you ran it, might be drive causing problems?
Ok, also I'm updating my PC to the new 1903 update since I wasn't able to since Windows Update wasn't correctly scanning for other updates it needed before going onto 1903. Fixed it with the wudiag tool.
 

CreeperFino

Reputable
Dec 1, 2015
24
0
4,510
Did you run seatools? There is a bootable version - click on Download for USB - https://www.seagate.com/au/en/support/downloads/

check hdd before we try to install anything new on it.
I ran all of the tests except for long generic, advanced, and fix all. It came out fine. Any specific tests I should run? Some gave me a warning saying that I could lose data running the fixes.
Also more dumps. Different errors this time

https://mega.nz/#!KBl2WYLR!mPz7e3t2nW4W-diV6666CMoG6jCbBG8iC4c-_H8EFHE

https://mega.nz/#!vctCnQpA!cO_NGl8rPPUzSwjOQ9q9BkTgdYXJ8wESt3RRPEioHc0

https://mega.nz/#!CYlQgApb!U0glIIPOhos3e4ovwHkJRzYAPnwKNr61hwta0fTNjRo
 

gardenman

Splendid
Moderator
I ran the dump files through the debugger and got the following information: https://pste.eu/p/YruM.html
File information:073019-43140-01.dmp (Jul 30 2019 - 07:08:51)
Bugcheck:SYSTEM_PTE_MISUSE (DA)
Driver warnings:*** WARNING: Unable to verify timestamp for WdFilter.sys
Probably caused by:WdFilter.sys (Process: System)
Uptime:0 Day(s), 0 Hour(s), 04 Min(s), and 47 Sec(s)

File information:073019-40953-01.dmp (Jul 30 2019 - 07:36:59)
Bugcheck:DRIVER_CORRUPTED_EXPOOL (C5)
Probably caused by:Npfs.SYS (Process: chrome.exe)
Uptime:0 Day(s), 0 Hour(s), 27 Min(s), and 38 Sec(s)

File information:073019-31453-01.dmp (Jul 30 2019 - 07:39:12)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:rdyboost.sys (Process: System)
Uptime:0 Day(s), 0 Hour(s), 01 Min(s), and 14 Sec(s)

File information:072919-71812-01.dmp (Jul 29 2019 - 17:07:11)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:ntkrnlmp.exe (Process: System)
Uptime:0 Day(s), 0 Hour(s), 45 Min(s), and 31 Sec(s)

File information:072919-39500-01.dmp (Jul 29 2019 - 11:19:52)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Driver warnings:*** WARNING: Unable to verify timestamp for rtwlanu.sys
Probably caused by:ntkrnlmp.exe (Process: System)
Uptime:0 Day(s), 4 Hour(s), 08 Min(s), and 53 Sec(s)
Edit: Results from the dump file below: https://pste.eu/p/DqQM.html
File information:073019-57203-01.dmp (Jul 30 2019 - 13:44:29)
Bugcheck:KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:ntkrnlmp.exe (Process: nvcontainer.ex)
Uptime:0 Day(s), 4 Hour(s), 15 Min(s), and 19 Sec(s)

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.
 
Last edited: