Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Computer Restarts on Shutdown (Windows 8.0) Occasional BSOD During Shutdown

  • Please log in to reply
3 replies to this topic

#1 faithisreason


  • Members
  • 1 posts
  • Local time:10:18 AM

Posted 20 September 2014 - 11:31 PM

Hey folks. I would appreciate if you could lend a hand with this issue, as I haven't had any luck so far.


My PC has been restarting instead of shutting down when I initiate a shutdown. I did a clean boot and tried it, as well safe mode, and it still replicates the problem. The BSOD I occasionally get before the restart is KERNEL_SECURITY_CHECK_FAILURE


Even though the BSOD doesn't show up every time, I am getting a minidump each time it restarts with the KERNEL_SECURITY_CHECK_FAILURE error. I've included the two most recent minidumps for analysis if it helps solve the problem.

Minidump 1: http://speedy.sh/WM23P/092014-21796-01.dmp

Minidump 2: http://speedy.sh/4UXvm/092014-24046-01.dmp


Where do I go from here?

Much obliged for your help,


Edited by faithisreason, 20 September 2014 - 11:32 PM.

BC AdBot (Login to Remove)


#2 gavinseabrook


  • Members
  • 773 posts
  • Gender:Male
  • Location:El Paso
  • Local time:10:18 AM

Posted 21 September 2014 - 03:03 AM

Have you made sure that you have all your windows updates?

Gavin Seabrook


#3 dc3


    Bleeping Treehugger

  • Members
  • 30,690 posts
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:18 AM

Posted 21 September 2014 - 12:35 PM

Please download and install Speccy to provide us with information about your computer.  When  FileHippo opens, click on Download latest version in the upper right pane.
When Speccy opens you will see a screen similar to the one below.
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
The following screen will appear, click on Yes.
The following screen will appear, click on Copy to Clipboard.
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.

Please download MiniToolBox, save it to your desktop and run it.
Checkmark the following checkboxes:
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.
• List Minidump Files
Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.





#4 Jared44


  • BSOD Kernel Dump Expert
  • 205 posts
  • Gender:Male
  • Location:Dronfield
  • Local time:06:18 PM

Posted 22 September 2014 - 03:23 PM

Lets take a look at your minidumps

A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff88001501460, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff880015013b8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

The first parameter indicates an inconsistency within a doubly linked list which could occur at any time and not be found untl later on.

fffff880`01501138 fffff802`554c9769 : 00000000`00000139 00000000`00000003 fffff880`01501460 fffff880`015013b8 : nt!KeBugCheckEx
fffff880`01501140 fffff802`554c9a90 : fffff880`00000000 fffffa80`0f3e9000 fffff880`08711ba7 fffff802`554fa0c9 : nt!KiBugCheckDispatch+0x69
fffff880`01501280 fffff802`554c8cf4 : fffff880`093bc110 fffff880`093a5077 00000000`00000000 fffff802`5542a2a1 : nt!KiFastFailDispatch+0xd0
fffff880`01501460 fffff880`0114c4ab : fffff880`01145539 fffff880`01501800 fffff802`5540af55 fffffa80`0cd59c20 : nt!KiRaiseSecurityCheckFailure+0xf4
fffff880`015015f8 fffff880`01145539 : fffff880`01501800 fffff802`5540af55 fffffa80`0cd59c20 fffff880`06e98400 : Wdf01000!FxIrpQueue::InsertIrpInQueue+0x6b
fffff880`01501600 fffff880`01180adc : fffffa80`0f545660 fffff880`01146f62 fffffa80`0f545660 fffff880`0114651a : Wdf01000!FxRequest::InsertTailIrpQueue+0x85
fffff880`01501640 fffff880`011450ef : fffffa80`0f545660 fffff880`015016d0 fffffa80`13592a02 00000000`00000004 : Wdf01000!FxIoQueue::InsertNewRequestLocked+0x34
fffff880`01501690 fffff880`011502fb : fffffa80`0cd5f6b0 fffffa80`0f969e02 fffffa80`0f969e70 fffffa80`0f969e70 : Wdf01000!FxIoQueue::DispatchEvents+0x55f
fffff880`01501710 fffff880`0114651a : fffffa80`0cd5f602 fffffa80`0f969e70 fffffa80`13592a60 fffff880`015017f0 : Wdf01000!FxIoQueue::QueueRequest+0x2ab
fffff880`01501780 fffff880`0114279a : fffffa80`0f969e70 fffffa80`13592a60 fffffa80`106c2010 fffffa80`13592a60 : Wdf01000!FxPkgIo::Dispatch+0x4da
fffff880`015017f0 fffff880`01142866 : fffffa80`13592a60 fffffa80`106c2010 fffffa80`0f545e10 fffffa80`1062ddc0 : Wdf01000!FxDevice::Dispatch+0x19a
fffff880`01501830 fffff880`071c584a : fffffa80`1062ddc0 fffffa80`106c2010 fffffa80`103b0002 fffff880`014d8180 : Wdf01000!FxDevice::DispatchWithLock+0xa6
fffff880`01501870 fffffa80`1062ddc0 : fffffa80`106c2010 fffffa80`103b0002 fffff880`014d8180 fffff880`0d1441f0 : mafw+0xd84a
fffff880`01501878 fffffa80`106c2010 : fffffa80`103b0002 fffff880`014d8180 fffff880`0d1441f0 00000000`00000000 : 0xfffffa80`1062ddc0
fffff880`01501880 fffffa80`103b0002 : fffff880`014d8180 fffff880`0d1441f0 00000000`00000000 fffffa80`1062ddc0 : 0xfffffa80`106c2010
fffff880`01501888 fffff880`014d8180 : fffff880`0d1441f0 00000000`00000000 fffffa80`1062ddc0 fffff880`071c5e09 : 0xfffffa80`103b0002
fffff880`01501890 fffff880`0d1441f0 : 00000000`00000000 fffffa80`1062ddc0 fffff880`071c5e09 00000000`00000004 : 0xfffff880`014d8180
fffff880`01501898 00000000`00000000 : fffffa80`1062ddc0 fffff880`071c5e09 00000000`00000004 00000000`00000440 : 0xfffff880`0d1441f0

mafw is causing the problems in both dump files but I'd like to try and find out why if you don't mind.


Apparently it's related to M-Audio with the description of 'M-Audio Delta FW WDM Driver'

3: kd> lmvm mafw
start             end                 module name
fffff880`071b8000 fffff880`071f3000   mafw     T (no symbols)           
    Loaded symbol image file: mafw.sys
    Image path: \SystemRoot\system32\DRIVERS\mafw.sys
    Image name: mafw.sys
    Timestamp:        Wed Jul 29 22:26:58 2009 (4A70BEA2)
    CheckSum:         000390C0
    ImageSize:        0003B000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Given that it's over 5 years old I'm not surprised it's causing issues.


Could I have a Kernel memoru dump?


Go the Start
Right click My Computer
Select Properties
Click Advanced system settings
Click on the Advanced tab
Select Settings under Startup and Recovery
Then under Write debugging information select Kernel memory dump.

Once a dump is created go to:


Copy the file to the desktop, zip it up and upload it to a file sharing site like Onedrive. After the upload is done post the download link in your next reply.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users