Jump to content

What Causing This BSOD?

Curesto
By Curesto
in Troubleshooting
 Share
Go to solution Solved by Radium_Angel,
14 minutes ago, Curesto said:

Hi, i've been getting BSODs while downloading the files from internet. I want to know what causing this.

 

Minidump file:Minidump.rar

Here is the full bugcheck, analysis at the end

 

 

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffa306a4d77390, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffa306a4d772e8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for athurx.sys
*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.Sec
    Value: 4

    Key  : Analysis.DebugAnalysisProvider.CPP
    Value: Create: 8007007e on DESKTOP-HDJ0CJJ

    Key  : Analysis.DebugData
    Value: CreateObject

    Key  : Analysis.DebugModel
    Value: CreateObject

    Key  : Analysis.Elapsed.Sec
    Value: 36

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 76

    Key  : Analysis.System
    Value: CreateObject


BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffa306a4d77390

BUGCHECK_P3: ffffa306a4d772e8

BUGCHECK_P4: 0

TRAP_FRAME:  ffffa306a4d77390 -- (.trap 0xffffa306a4d77390)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffcd8f37877196 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffcd8f37914c48 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803784f404c rsp=ffffa306a4d77520 rbp=0000000000000001
 r8=0000000000000014  r9=0000000000000000 r10=0000000000000000
r11=0000000000000010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl nz na po nc
nt!ExInterlockedRemoveHeadList+0x8c:
fffff803`784f404c cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffa306a4d772e8 -- (.exr 0xffffa306a4d772e8)
ExceptionAddress: fffff803784f404c (nt!ExInterlockedRemoveHeadList+0x000000000000008c)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
ffffa306`a4d77068 fffff803`78607769 : 00000000`00000139 00000000`00000003 ffffa306`a4d77390 ffffa306`a4d772e8 : nt!KeBugCheckEx
ffffa306`a4d77070 fffff803`78607b90 : 00000000`00000103 00000000`00000000 00000000`00000000 fffff803`785d16f8 : nt!KiBugCheckDispatch+0x69
ffffa306`a4d771b0 fffff803`78605f23 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffa306`a4d77390 fffff803`784f404c : 00000000`00000000 fffff803`00000000 ffffcd8f`37914c58 ffffcd8f`37914c48 : nt!KiRaiseSecurityCheckFailure+0x323
ffffa306`a4d77520 fffff803`750854c0 : ffffcd8f`38961390 ffffcd8f`37888050 ffffcd8f`37cbb480 fffff803`750d3360 : nt!ExInterlockedRemoveHeadList+0x8c
ffffa306`a4d77550 ffffcd8f`38961390 : ffffcd8f`37888050 ffffcd8f`37cbb480 fffff803`750d3360 00000000`00000000 : athurx+0x54c0
ffffa306`a4d77558 ffffcd8f`37888050 : ffffcd8f`37cbb480 fffff803`750d3360 00000000`00000000 ffffcd8f`37902030 : 0xffffcd8f`38961390
ffffa306`a4d77560 ffffcd8f`37cbb480 : fffff803`750d3360 00000000`00000000 ffffcd8f`37902030 ffffcd8f`37902001 : 0xffffcd8f`37888050
ffffa306`a4d77568 fffff803`750d3360 : 00000000`00000000 ffffcd8f`37902030 ffffcd8f`37902001 fffff803`750aabf4 : 0xffffcd8f`37cbb480
ffffa306`a4d77570 00000000`00000000 : ffffcd8f`37902030 ffffcd8f`37902001 fffff803`750aabf4 ffffcd8f`37902030 : athurx+0x53360


SYMBOL_NAME:  athurx+54c0

MODULE_NAME: athurx

IMAGE_NAME:  athurx.sys

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  54c0

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {cf0b00cb-8b52-be47-e20d-865e290d55f0}

Followup:     MachineOwner
 

______________

Looks like your driver for your WiFi device is either outdated, corrupted, or the wifi unit itself is bad.

Posted
10 minutes ago, Curesto said:

Hi, i've been getting BSODs while downloading the files from internet. I want to know what causing this.

 

Minidump file:Minidump.rar

hold tight, I'll deconstruct the crash dump and tell you.

 

NOTE: I no longer frequent this site. If you really need help, PM/DM me and my e.mail will alert me. 

Link to comment
https://linustechtips.com/topic/1294391-what-causing-this-bsod/#findComment-14395728
Share on other sites
Link to post
Share on other sites
Posted
  • Solution
14 minutes ago, Curesto said:

Hi, i've been getting BSODs while downloading the files from internet. I want to know what causing this.

 

Minidump file:Minidump.rar

Here is the full bugcheck, analysis at the end

 

 

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffa306a4d77390, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffa306a4d772e8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for athurx.sys
*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.Sec
    Value: 4

    Key  : Analysis.DebugAnalysisProvider.CPP
    Value: Create: 8007007e on DESKTOP-HDJ0CJJ

    Key  : Analysis.DebugData
    Value: CreateObject

    Key  : Analysis.DebugModel
    Value: CreateObject

    Key  : Analysis.Elapsed.Sec
    Value: 36

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 76

    Key  : Analysis.System
    Value: CreateObject


BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffa306a4d77390

BUGCHECK_P3: ffffa306a4d772e8

BUGCHECK_P4: 0

TRAP_FRAME:  ffffa306a4d77390 -- (.trap 0xffffa306a4d77390)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffcd8f37877196 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffcd8f37914c48 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803784f404c rsp=ffffa306a4d77520 rbp=0000000000000001
 r8=0000000000000014  r9=0000000000000000 r10=0000000000000000
r11=0000000000000010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl nz na po nc
nt!ExInterlockedRemoveHeadList+0x8c:
fffff803`784f404c cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffa306a4d772e8 -- (.exr 0xffffa306a4d772e8)
ExceptionAddress: fffff803784f404c (nt!ExInterlockedRemoveHeadList+0x000000000000008c)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
ffffa306`a4d77068 fffff803`78607769 : 00000000`00000139 00000000`00000003 ffffa306`a4d77390 ffffa306`a4d772e8 : nt!KeBugCheckEx
ffffa306`a4d77070 fffff803`78607b90 : 00000000`00000103 00000000`00000000 00000000`00000000 fffff803`785d16f8 : nt!KiBugCheckDispatch+0x69
ffffa306`a4d771b0 fffff803`78605f23 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffa306`a4d77390 fffff803`784f404c : 00000000`00000000 fffff803`00000000 ffffcd8f`37914c58 ffffcd8f`37914c48 : nt!KiRaiseSecurityCheckFailure+0x323
ffffa306`a4d77520 fffff803`750854c0 : ffffcd8f`38961390 ffffcd8f`37888050 ffffcd8f`37cbb480 fffff803`750d3360 : nt!ExInterlockedRemoveHeadList+0x8c
ffffa306`a4d77550 ffffcd8f`38961390 : ffffcd8f`37888050 ffffcd8f`37cbb480 fffff803`750d3360 00000000`00000000 : athurx+0x54c0
ffffa306`a4d77558 ffffcd8f`37888050 : ffffcd8f`37cbb480 fffff803`750d3360 00000000`00000000 ffffcd8f`37902030 : 0xffffcd8f`38961390
ffffa306`a4d77560 ffffcd8f`37cbb480 : fffff803`750d3360 00000000`00000000 ffffcd8f`37902030 ffffcd8f`37902001 : 0xffffcd8f`37888050
ffffa306`a4d77568 fffff803`750d3360 : 00000000`00000000 ffffcd8f`37902030 ffffcd8f`37902001 fffff803`750aabf4 : 0xffffcd8f`37cbb480
ffffa306`a4d77570 00000000`00000000 : ffffcd8f`37902030 ffffcd8f`37902001 fffff803`750aabf4 ffffcd8f`37902030 : athurx+0x53360


SYMBOL_NAME:  athurx+54c0

MODULE_NAME: athurx

IMAGE_NAME:  athurx.sys

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  54c0

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {cf0b00cb-8b52-be47-e20d-865e290d55f0}

Followup:     MachineOwner
 

______________

Looks like your driver for your WiFi device is either outdated, corrupted, or the wifi unit itself is bad.

NOTE: I no longer frequent this site. If you really need help, PM/DM me and my e.mail will alert me. 

Link to comment
https://linustechtips.com/topic/1294391-what-causing-this-bsod/#findComment-14395745
Share on other sites
Link to post
Share on other sites
Posted
  • Author
Just now, Radium_Angel said:

Here is the full bugcheck, analysis at the end

 

 

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffa306a4d77390, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffa306a4d772e8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for athurx.sys
*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.Sec
    Value: 4

    Key  : Analysis.DebugAnalysisProvider.CPP
    Value: Create: 8007007e on DESKTOP-HDJ0CJJ

    Key  : Analysis.DebugData
    Value: CreateObject

    Key  : Analysis.DebugModel
    Value: CreateObject

    Key  : Analysis.Elapsed.Sec
    Value: 36

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 76

    Key  : Analysis.System
    Value: CreateObject


BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffa306a4d77390

BUGCHECK_P3: ffffa306a4d772e8

BUGCHECK_P4: 0

TRAP_FRAME:  ffffa306a4d77390 -- (.trap 0xffffa306a4d77390)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffcd8f37877196 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffcd8f37914c48 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803784f404c rsp=ffffa306a4d77520 rbp=0000000000000001
 r8=0000000000000014  r9=0000000000000000 r10=0000000000000000
r11=0000000000000010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up di pl nz na po nc
nt!ExInterlockedRemoveHeadList+0x8c:
fffff803`784f404c cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffa306a4d772e8 -- (.exr 0xffffa306a4d772e8)
ExceptionAddress: fffff803784f404c (nt!ExInterlockedRemoveHeadList+0x000000000000008c)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
ffffa306`a4d77068 fffff803`78607769 : 00000000`00000139 00000000`00000003 ffffa306`a4d77390 ffffa306`a4d772e8 : nt!KeBugCheckEx
ffffa306`a4d77070 fffff803`78607b90 : 00000000`00000103 00000000`00000000 00000000`00000000 fffff803`785d16f8 : nt!KiBugCheckDispatch+0x69
ffffa306`a4d771b0 fffff803`78605f23 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffa306`a4d77390 fffff803`784f404c : 00000000`00000000 fffff803`00000000 ffffcd8f`37914c58 ffffcd8f`37914c48 : nt!KiRaiseSecurityCheckFailure+0x323
ffffa306`a4d77520 fffff803`750854c0 : ffffcd8f`38961390 ffffcd8f`37888050 ffffcd8f`37cbb480 fffff803`750d3360 : nt!ExInterlockedRemoveHeadList+0x8c
ffffa306`a4d77550 ffffcd8f`38961390 : ffffcd8f`37888050 ffffcd8f`37cbb480 fffff803`750d3360 00000000`00000000 : athurx+0x54c0
ffffa306`a4d77558 ffffcd8f`37888050 : ffffcd8f`37cbb480 fffff803`750d3360 00000000`00000000 ffffcd8f`37902030 : 0xffffcd8f`38961390
ffffa306`a4d77560 ffffcd8f`37cbb480 : fffff803`750d3360 00000000`00000000 ffffcd8f`37902030 ffffcd8f`37902001 : 0xffffcd8f`37888050
ffffa306`a4d77568 fffff803`750d3360 : 00000000`00000000 ffffcd8f`37902030 ffffcd8f`37902001 fffff803`750aabf4 : 0xffffcd8f`37cbb480
ffffa306`a4d77570 00000000`00000000 : ffffcd8f`37902030 ffffcd8f`37902001 fffff803`750aabf4 ffffcd8f`37902030 : athurx+0x53360


SYMBOL_NAME:  athurx+54c0

MODULE_NAME: athurx

IMAGE_NAME:  athurx.sys

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  54c0

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {cf0b00cb-8b52-be47-e20d-865e290d55f0}

Followup:     MachineOwner
 

______________

Looks like your driver for your WiFi device is either outdated, corrupted, or the wifi unit itself is bad.

Thanks. This driver isn't suitable to my Wifi Adapter. I'll setup suitable driver.

 

How to uninstall Wi-Fi Driver?

Link to comment
https://linustechtips.com/topic/1294391-what-causing-this-bsod/#findComment-14395753
Share on other sites
Link to post
Share on other sites
Posted
1 minute ago, Curesto said:

How to uninstall Wi-Fi Driver?

Shouldn't be required, just update it with the right one. It'll overwrite the wrong one.

NOTE: I no longer frequent this site. If you really need help, PM/DM me and my e.mail will alert me. 

Link to comment
https://linustechtips.com/topic/1294391-what-causing-this-bsod/#findComment-14395761
Share on other sites
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing Troubleshooting

×