Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD on fresh Win8 (Bootcamp): HD Enclosure?


  • Please log in to reply
6 replies to this topic

#1 HouseNexus

HouseNexus

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:33 PM

Posted 03 June 2015 - 12:04 AM

I just installed Windows 8 on my Bootcamp drive, but I'm getting constant BSODs (Kernel_Security_Check_Failure) as soon as I start up. I've managed to narrow hardware faults down to an external HD enclosure I use primarily in OSX as a Time Machine drive (it works fine in OSX, showing all partitions). If I unplug the enclosure before booting, Windows appears to operate fine, but if I plug it in, the computer hard locks and when the system is restarted (with or without the device attached), it blue screens and reboots. If the enclosure is plugged in when Windows first boots, it either goes to a neutered Recovery mode (you can select all the troubleshooting items, but nothing can be done because the OS drive is locked), or blue screens within seconds of logging in. While I can use Windows without the drive attached, I really don't want to have to reach in back of the machine every time I boot to Windows. Perfmon gets the refusal message I see elsewhere in the forum, so it can't get a report. Attached are the FileCollection and a typical Minidump.

 

As for the things I've tried before posting here, the enclosure is a Sabrent EC-3US35 enclosure, and Sabrent's site claims there are no drivers required for it.

 

Guts of the system: 2013 iMac, 3.5GHz quad-i7, 32GB RAM, 3TB Fusion Drive, all internal hardware standard for the top-line of that time. Approx. 200GB reserved for Bootcamp drive.

 

(edits to correct typos)

Attached Files


Edited by HouseNexus, 03 June 2015 - 12:21 AM.


BC AdBot (Login to Remove)

 


m

#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,076 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:33 PM

Posted 03 June 2015 - 06:38 AM

The first step is to visit Apple Software Update and get all available updates for your system.

Do this first in OS X and make sure you update everything (it may take several trips to get them all).
Then do it again inside of Windows (it may take several trips to get them all).

Then visit Windows Update and get all available Windows Updates (it may take several trips to get them all).

 

Please remove Classic Start Menu/Classic Shell as I have seen problems with this in Win8.  After the system is stabilized (and fully updated), feel free to reinstall a fresh copy.

 

Only ran the last 9 memory dumps - one of the older dumps caused the app that I use to crash.

 

The other suspicions that I have are these programs/devices:

- libusb0.sys - a library that enables access for programs to USB devices

- Razer Synapse drivers (a past history of BSOD problems - none recently)

 

As you have problems with plugging/unplugging the external drive - I'd have to suspect the libusb0.sys program first.

Please uninstall that and test for further BSOD's.

If unable to uninstall it, please post back for suggestions on how to manually disable the driver safely (DO NOT do this yet - it may render the system unbootable).

 

If that doesn't work, please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

 

Analysis:
The following is for informational purposes only.

[font=lucida console]**************************Wed Jun  3 00:16:08.371 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-28406-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:07:02.104[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd001bb4b8570, ffffd001bb4b84c8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd001bb4b8570, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd001bb4b84c8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Jun  3 00:06:10.340 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-24406-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:01:44.074[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd00196d93710, ffffd00196d93668, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00196d93710, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00196d93668, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Jun  3 00:03:27.704 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-25843-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:00:13.437[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd001b0c6a630, ffffd001b0c6a588, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd001b0c6a630, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd001b0c6a588, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 23:58:07.851 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-33812-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:04:07.584[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd0011342a570, ffffd0011342a4c8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd0011342a570, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd0011342a4c8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 21:51:23.229 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-27015-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:06:27.962[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd00021530570, ffffd000215304c8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00021530570, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000215304c8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 04:11:28.840 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-45812-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:03:02.568[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd00021e177c0, ffffd00021e17718, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00021e177c0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00021e17718, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  IM142.88Z.0118.B09.1501071126
  BIOS Release Date             01/07/2015
  Manufacturer                  Apple Inc.
  Product Name                  iMac14,2
  Built b [B]:   [/B]  root@sa
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 03:49:08.237 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060215-36687-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:05:01.965[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd00021629570, ffffd000216294c8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd00021629570, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000216294c8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  IM142.88Z.0118.B09.1501071126
  BIOS Release Date             01/07/2015
  Manufacturer                  Apple Inc.
  Product Name                  iMac14,2
  Built b [B]:   [/B]  root@sa
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 01:26:06.505 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060115-43906-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17031.amd64fre.winblue_gdr.140221-1952
System Uptime:[B]0 days 0:02:21.234[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd0003b644750, ffffd0003b6446a8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd0003b644750, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd0003b6446a8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  TiWorker.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  IM142.88Z.0118.B09.1501071126
  BIOS Release Date             01/07/2015
  Manufacturer                  Apple Inc.
  Product Name                  iMac14,2
  Built b [B]:   [/B]  root@sa
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jun  1 17:05:15.705 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\060115-35234-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17031.amd64fre.winblue_gdr.140221-1952
System Uptime:[B]0 days 0:06:36.436[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, ffffd000240aa680, ffffd000240aa5d8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd000240aa680, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000240aa5d8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i7-4771 CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  IM142.88Z.0118.B09.1501071126
  BIOS Release Date             01/07/2015
  Manufacturer                  Apple Inc.
  Product Name                  iMac14,2
  Built b [B]:   [/B]  root@sa
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
[font=lucida console]**************************Wed Jun  3 00:16:08.371 2015 (UTC - 4:00)**************************
LGBusEnum.sys               Mon Nov 23 20:36:48 2009 (4B0B38B0)
LGVirHid.sys                Mon Nov 23 20:36:48 2009 (4B0B38B0)
CS420x64.sys                Thu Nov 11 19:04:13 2010 (4CDC847D)
[COLOR=RED][B]libusb0.sys                 Fri Apr  8 18:29:03 2011 (4D9F8C2F)[/B][/COLOR]
]MacHALDriver.sys            Fri Sep 23 21:57:09 2011 (4E7D38F5)[/B][/COLOR]
bScsiSDa.sys                Tue Aug 14 14:15:16 2012 (502A95B4)
AppleBtBc.sys               Tue Oct 30 20:42:46 2012 (50907406)
TeeDriverx64.sys            Mon Feb 25 15:25:04 2013 (512BC8A0)
b57nd60a.sys                Mon Mar 25 20:14:03 2013 (5150E84B)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
AppleMNT.sys                Mon Sep  2 10:15:16 2013 (52249D74)
AppleHFS.sys                Mon Sep  2 10:15:18 2013 (52249D76)
KeyAgent.sys                Mon Sep  2 11:17:11 2013 (5224ABF7)
bcmwl63a.sys                Fri Dec 13 19:53:40 2013 (52ABAC14)
rzpmgrk.sys                 Thu Apr 17 15:36:12 2014 (53502D2C)
rzpnk.sys                   Fri Oct 17 15:38:10 2014 (54417022)
rzudd.sys                   Tue Dec 30 04:32:50 2014 (54A27142)
NvStreamKms.sys             Tue Mar 17 02:19:52 2015 (5507C788)
nvvad64v.sys                Wed Apr  1 10:36:50 2015 (551C0282)
nvhda64v.sys                Thu Apr 16 15:03:16 2015 (55300774)
nvlddmkm.sys                Wed May 27 22:49:51 2015 (5566824F)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 03:49:08.237 2015 (UTC - 4:00)**************************
agp440.sys                  Thu Aug 22 07:39:35 2013 (5215F877)
nv_agp.sys                  Thu Aug 22 07:39:38 2013 (5215F87A)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jun  2 01:26:06.505 2015 (UTC - 4:00)**************************
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
nvlddmkm.sys                Tue Dec 24 14:41:39 2013 (52B9E373)
[/font]
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys
http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys
http://www.carrona.org/drivers/driver.php?id=CS420x64.sys
libusb0.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=MacHALDriver.sys
http://www.carrona.org/drivers/driver.php?id=bScsiSDa.sys
http://www.carrona.org/drivers/driver.php?id=AppleBtBc.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=b57nd60a.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=AppleMNT.sys
http://www.carrona.org/drivers/driver.php?id=AppleHFS.sys
http://www.carrona.org/drivers/driver.php?id=KeyAgent.sys
http://www.carrona.org/drivers/driver.php?id=bcmwl63a.sys
http://www.carrona.org/drivers/driver.php?id=rzpmgrk.sys
http://www.carrona.org/drivers/driver.php?id=rzpnk.sys
http://www.carrona.org/drivers/driver.php?id=rzudd.sys
http://www.carrona.org/drivers/driver.php?id=NvStreamKms.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=agp440.sys
http://www.carrona.org/drivers/driver.php?id=nv_agp.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 HouseNexus

HouseNexus
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:33 PM

Posted 04 June 2015 - 01:29 AM

In the research I was doing, the libusb0.sys file was a bog-standard USB compatibility thing that was general purpose. At first I thought it might have been installed when it detected my ANTStick (an item used with Garmin GPS and fitness peripherals) was connected. After trying for a while to remove bits and pieces (and not wanting to buy paid software that may or may not work to resolve that specific issue), I decided to nuke the site from orbit. Erase the partition, use Bootcamp to re-do everything from scratch (complete with re-downloading the Bootcamp software, which was already current). Virgin install of Win8, no software added (not even the razer software which I had to say no to four times during the Win8 install process, since my mouse was made by Razer), no hardware attached aside from the mouse, keyboard, and the installation USB drive. After creating a restore point just in case, I plugged in the HD enclosure and immediately blue-screened. While I'm going to go through the Windows Update process, I know where the physical part of the failure is: that HD enclosure. And since the ANTstick is not touching the system this time, I'm not going to give it a chance to install any drivers related to it.

 

At the moment, I am completely updating the Windows Update and Boot Camp until everything says "no updates" before proceeding. Then I'll create another restore point and try to plug in the enclosure again. I'll update in an additional reply with the virgin install minidump as well as the results from after I've fully updated the system, but before installing any software or hardware.


Edited by HouseNexus, 04 June 2015 - 01:39 AM.


#4 HouseNexus

HouseNexus
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:33 PM

Posted 04 June 2015 - 04:23 AM

Enclosed are the new installation's Collections and Minidumps. The two starting with "Verifier" are with Driver Verifier on.

Attached File  SysnativeFileCollectionApp.zip   289.54KB   0 downloads

Attached File  Minidumps.zip   106.41KB   1 downloads



#5 HouseNexus

HouseNexus
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:06:33 PM

Posted 05 June 2015 - 12:21 AM

After attempting a few other things and broadening my search, I've learned more details:

 

OSX reads the drive fine.

I've tried the same HDD in a different enclosure, and it still chokes.

I've connected it to different machines, with interesting results: A purely Windows PC does not crash. A different Bootcamp machine (Once with an MBP and once with an Air) gets the bluescreen.

Then I searched for HFS (the Mac file system) and found many posts in other forums with the same issue, specifically with HFS-formatted external drives, specifically the Security Check Failure, and specifically when Windows tries to access the HFS-formatted drive.

 

It appears to be a problem with Bootcamp's mounting drivers. Deleting (in my case, renaming) the AppleHFS.sys and AppleMNT.sys drivers so they aren't loaded makes the system run without blue screens. It's a doable workaround at the moment (the "loss" of accessing the Mac drive is acceptable since I was only using it in OSX as a Time Machine), and it looks like the culprit is basically on Apple's (specifically, the Bootcamp driver package's) side.

 

I figured I'd add this knowledge in in case others run into the issue.


Edited by HouseNexus, 05 June 2015 - 12:24 AM.


#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,076 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:33 PM

Posted 05 June 2015 - 05:22 AM

Great troubleshooting!!!  Thanks for letting us know!

 

FWIW - it's usually better to rename than it is to delete.  That way, if you have to go back it's usually easier just to name them back.
If you've deleted them, you'll have to go out and find copies that you can use (I keep a copy of the BootCamp drivers on my work flash drive).


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,076 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:08:33 PM

Posted 05 June 2015 - 05:53 AM

Interestingly, the Verifier memory dumps point to KeyAgent.sys

 

Analysis:
The following is for informational purposes only.

[font=lucida console]**************************Thu Jun  4 04:52:15.004 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\Verifier Open IE 0604 0200.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:01:18.759[/B]
*** WARNING: Unable to verify timestamp for KeyAgent.sys
*** ERROR: Module load completed but symbols could not be loaded for KeyAgent.sys
Probably caused by :[B]KeyAgent.sys ( KeyAgent+107c )[/B]
BugCheck [B]C4, {f6, 214, ffffe000f2cfd8c0, fffff801f643907c}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C4]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/url]
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000214, Handle value being referenced.
Arg3: ffffe000f2cfd8c0, Address of the current process.
Arg4: fffff801f643907c, Address inside the driver that is performing the incorrect reference.
BUGCHECK_STR:  0xc4_f6
PROCESS_NAME:  Bootcamp.exe
FAILURE_BUCKET_ID: [B]0xc4_f6_VRF_KeyAgent+107c[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jun  4 04:50:32.417 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\Verifier Plug In HD 0604 0150.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17736.amd64fre.winblue_r9.150322-1500
System Uptime:[B]0 days 0:01:38.171[/B]
*** WARNING: Unable to verify timestamp for KeyAgent.sys
*** ERROR: Module load completed but symbols could not be loaded for KeyAgent.sys
Probably caused by :[B]KeyAgent.sys ( KeyAgent+107c )[/B]
BugCheck [B]C4, {f6, 214, ffffe0002b51e8c0, fffff801f5ad507c}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C4]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/url]
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000214, Handle value being referenced.
Arg3: ffffe0002b51e8c0, Address of the current process.
Arg4: fffff801f5ad507c, Address inside the driver that is performing the incorrect reference.
BUGCHECK_STR:  0xc4_f6
PROCESS_NAME:  Bootcamp.exe
FAILURE_BUCKET_ID: [B]0xc4_f6_VRF_KeyAgent+107c[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
[font=lucida console]**************************Thu Jun  4 04:52:15.004 2015 (UTC - 4:00)**************************
[COLOR=RED][B]CS420x64.sys                Thu Nov 11 19:04:13 2010 (4CDC847D)[/B][/COLOR]
[COLOR=RED][B]MacHALDriver.sys            Fri Sep 23 21:57:09 2011 (4E7D38F5)[/B][/COLOR]
bScsiSDa.sys                Tue Aug 14 14:15:16 2012 (502A95B4)
AppleBtBc.sys               Tue Oct 30 20:42:46 2012 (50907406)
TeeDriverx64.sys            Mon Feb 25 15:25:04 2013 (512BC8A0)
b57nd60a.sys                Mon Mar 25 20:14:03 2013 (5150E84B)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
AppleMNT.sys                Mon Sep  2 10:15:16 2013 (52249D74)
AppleHFS.sys                Mon Sep  2 10:15:18 2013 (52249D76)
KeyAgent.sys                Mon Sep  2 11:17:11 2013 (5224ABF7)
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
bcmwl63a.sys                Fri Dec 13 19:53:40 2013 (52ABAC14)
nvlddmkm.sys                Tue Dec 24 14:41:39 2013 (52B9E373)
[/font]
http://www.carrona.org/drivers/driver.php?id=CS420x64.sys
http://www.carrona.org/drivers/driver.php?id=MacHALDriver.sys
http://www.carrona.org/drivers/driver.php?id=bScsiSDa.sys
http://www.carrona.org/drivers/driver.php?id=AppleBtBc.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=b57nd60a.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=AppleMNT.sys
http://www.carrona.org/drivers/driver.php?id=AppleHFS.sys
http://www.carrona.org/drivers/driver.php?id=KeyAgent.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=bcmwl63a.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users