none
Kernel security check failure

    Question

  • I've had three unexpected shutdowns with the "blue screen of death" in the past month, each have said to lookup "KERNEL_SECURITY_CHECK_FAILURE". I'm using a Toshiba Satellite C55-A5302 laptop. My antivirus and security program scans come back clean. What can I do to stop this issue from continuing?
    Tuesday, April 15, 2014 7:30 PM

Answers

  • Thanks very much!

    The attached DMP file is of the KERNEL_SECURITY_CHECK_FAILURE (139) bug check.


    This bug check indicates that the kernel has detected the corruption of a critical data structure.


    BugCheck 139, {3, ffffd001305ba920, ffffd001305ba878, 0}

    ^^ The 1st parameter of the bugcheck is 3 which indicates that a LIST_ENTRY was corrupted. Code 3, LIST_ENTRY corruption. This type of bug check can be difficult to track down and indicates that an inconsistency has been introduced into a doubly-linked list (detected when an individual list entry element is added to or removed from the list).

    ----------------

    1. Uninstall AVG Secure Search ASAP.

    2. ESET is likely causing file system conflicts, so please remove and replace it with Windows Defender for temporary troubleshooting purposes:


    ESET removal -
    http://kb.eset.com/esetkb/index?page=content&id=SOLN2788


    Windows Defender (how to turn on after removal) -
    http://www.eightforums.com/tutorials/21962-windows-defender-turn-off-windows-8-a.html


    Regards,

    Patrick





    Tuesday, April 15, 2014 8:21 PM

All replies

  • Hi,

    In order to assist you, we will need the .DMP files to analyze what exactly occurred at the time of the crash, etc.

    If you don't know where .DMP files are located, here's how to get to them:

    1. Navigate to the %systemroot%\Minidump folder.

    2. Copy any and all DMP files in the Minidump folder to your Desktop and then zip up these files.

    3. Upload the zip containing the .DMP files to Onedrive or a hosting site of your choice and paste in your reply. Prefered sites: Onedrive, Mediafire, Dropbox, etc. Nothing with wait-timers.

    4 (optional): The type of .DMP files located in the Minidump folder are known as Small Memory Dumps. In %systemroot% there will be what is known as a Kernel-Dump (if your system is set to generate). It is labeled MEMORY.DMP. The difference between Small Memory Dumps and Kernel-Dumps in the simplest definition is a Kernel-Dump contains much more information at the time of the crash, therefore allowing further debugging of your issue. If your upload speed permits it, and you aren't going against any strict bandwidth and/or usage caps, etc, the Kernel-Dump is the best choice. Do note that Kernel-Dumps are much larger in size due to containing much more info, which is why I mentioned upload speed, etc.

    If you are going to use Onedrive but don't know how to upload to it, please visit the following:

    Upload photos and files to Onedrive.

    Please note that any "cleaner" programs such as TuneUp Utilities, CCleaner, etc, by default will delete .DMP files upon use.

    If your computer is not generating .DMP files, please do the following:

    1. Start > type %systemroot% which should show the Windows folder, click on it. Once inside that folder, ensure there is a Minidump folder created. If not, CTRL-SHIFT-N to make a New Folder and name it Minidump.

    2. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Performance > Settings > Advanced > Ensure there's a check-mark for 'Automatically manage paging file size for all drives'.

    3. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the system log'.

    Ensure Small Memory Dump is selected and ensure the path is %systemroot%\Minidump.

    4. Double check that the WERS is ENABLED:

    Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.

    If you cannot get into normal mode to do any of this, please do this via Safe Mode.

    Regards,

    Patrick
    Tuesday, April 15, 2014 7:44 PM
  • Here's a link to the memory.dmp file you mentioned in step 4.

    https://onedrive.live.com/redir?resid=64D031C49E6C960E!732&authkey=!AP2Bmvf76LHD_AI&ithint=file%2c.zip

    Tuesday, April 15, 2014 8:06 PM
  • Thanks very much!

    The attached DMP file is of the KERNEL_SECURITY_CHECK_FAILURE (139) bug check.


    This bug check indicates that the kernel has detected the corruption of a critical data structure.


    BugCheck 139, {3, ffffd001305ba920, ffffd001305ba878, 0}

    ^^ The 1st parameter of the bugcheck is 3 which indicates that a LIST_ENTRY was corrupted. Code 3, LIST_ENTRY corruption. This type of bug check can be difficult to track down and indicates that an inconsistency has been introduced into a doubly-linked list (detected when an individual list entry element is added to or removed from the list).

    ----------------

    1. Uninstall AVG Secure Search ASAP.

    2. ESET is likely causing file system conflicts, so please remove and replace it with Windows Defender for temporary troubleshooting purposes:


    ESET removal -
    http://kb.eset.com/esetkb/index?page=content&id=SOLN2788


    Windows Defender (how to turn on after removal) -
    http://www.eightforums.com/tutorials/21962-windows-defender-turn-off-windows-8-a.html


    Regards,

    Patrick





    Tuesday, April 15, 2014 8:21 PM
  • Thank you for your help Patrick! I really appreciate it :)

    I use ESET as my anti-virus protection (I have been doing so for about 6 months now without incident until now). Should I try re-installing it or should I look for another program to use for anti-virus?

    Tuesday, April 15, 2014 8:28 PM
  • Sure, give a reinstall a try (it will also ensure latest version is installed that way as well). If you still crash afterwards, I would run on Defender a while just to be sure the crashes have ceased. If they have, you can then explore alternatives if you are not happy with Defender.

    Also, if you pay for ESET, you can even contact them and see if they can workaround with a patch for you, etc.

    Regards,

    Patrick
    Tuesday, April 15, 2014 9:03 PM
  • Ok cool. Thanks again for the help and advice!
    Tuesday, April 15, 2014 9:05 PM
  • My pleasure!

    Regards,

    Patrick
    Tuesday, April 15, 2014 9:16 PM