Windows 10: BSOD Help

I've recently built a PC, here are the specs:

Asus ROG Maximus XI

i5-9600k

DEEPCOOL Castle 240 RGB V2

ROG GeForce RTX 2060 SUPER

G.SKILL Trident Z RGB 16GB DDR4 3600
SAMSUNG 970 EVO Plus M.2 NVMe PCI-E 500GB

Seagate BarraCuda 2TB SATA 3.5'' 7200RPM

Corsair RMx Series RM750x 80

Its been only around a month and I've gotten 3 bsod. I checked the memory dump and it seems to be something different each time. I am a beginner and know very little about computers and any help would be highly appreciated.


First

Microsoft R Windows Debugger Version 10.0.19041.1 AMD64

Copyright c Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Sam Zhang\Desktop\BSOD Mem Dump\073020-12281-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available




Symbol search path is: srv*

Executable search path is:

Windows 10 Kernel Version 19041 MP 6 procs Free x64

Product: WinNt, suite: TerminalServer SingleUserTS Personal

Built by: 19041.1.amd64fre.vb_release.191206-1406

Machine Name:

Kernel base = 0xfffff804`6b800000 PsLoadedModuleList = 0xfffff804`6c42a310

Debug session time: Thu Jul 30 10:43:34.383 2020 UTC - 4:00

System Uptime: 0 days 16:58:00.060

Loading Kernel Symbols

...............................................................

................................................................

................................................................

.............

Loading User Symbols

Loading unloaded module list

...................................

For analysis of this file, run !analyze -v

3: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



KERNEL_SECURITY_CHECK_FAILURE 139

A kernel component has corrupted a critical data structure. The corruption

could potentially allow a malicious user to gain control of this machine.

Arguments:

Arg1: 0000000000000003, A LIST_ENTRY has been corrupted i.e. double remove.

Arg2: ffffb2045f8476b0, Address of the trap frame for the exception that caused the bugcheck

Arg3: ffffb2045f847608, Address of the exception record for the exception that caused the bugcheck

Arg4: 0000000000000000, Reserved



Debugging Details:

------------------





KEY_VALUES_STRING: 1



Key : Analysis.CPU.Sec

Value: 2



Key : Analysis.DebugAnalysisProvider.CPP

Value: Create: 8007007e on DESKTOP-043JOFC



Key : Analysis.DebugData

Value: CreateObject



Key : Analysis.DebugModel

Value: CreateObject



Key : Analysis.Elapsed.Sec

Value: 2



Key : Analysis.Memory.CommitPeak.Mb

Value: 78



Key : Analysis.System

Value: CreateObject





BUGCHECK_CODE: 139



BUGCHECK_P1: 3



BUGCHECK_P2: ffffb2045f8476b0



BUGCHECK_P3: ffffb2045f847608



BUGCHECK_P4: 0



TRAP_FRAME: ffffb2045f8476b0 -- .trap 0xffffb2045f8476b0

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=ffffdb011b984198 rbx=0000000000000000 rcx=0000000000000003

rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8046bc653e5 rsp=ffffb2045f847840 rbp=ffff87807636d180

r8=0000000000000000 r9=0000000000000001 r10=0000000000000000

r11=0000000000000003 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0 nv up ei pl nz na po nc

nt!KiQueueReadyThread+0x17b305:

fffff804`6bc653e5 cd29 int 29h

Resetting default scope



EXCEPTION_RECORD: ffffb2045f847608 -- .exr 0xffffb2045f847608

ExceptionAddress: fffff8046bc653e5 nt!KiQueueReadyThread+0x000000000017b305

ExceptionCode: c0000409 Security check failure or stack buffer overrun

ExceptionFlags: 00000001

NumberParameters: 1

Parameter[0]: 0000000000000003

Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY



BLACKBOXBSD: 1 !blackboxbsd





BLACKBOXNTFS: 1 !blackboxntfs





BLACKBOXPNP: 1 !blackboxpnp





BLACKBOXWINLOGON: 1



CUSTOMER_CRASH_COUNT: 1



PROCESS_NAME: Discord.exe



ERROR_CODE: NTSTATUS 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.



EXCEPTION_CODE_STR: c0000409



EXCEPTION_PARAMETER1: 0000000000000003



EXCEPTION_STR: 0xc0000409



BAD_STACK_POINTER: ffffb2045f847388



STACK_TEXT:

ffffb204`5f847388 fffff804`6bbefa29 : 00000000`00000139 00000000`00000003 ffffb204`5f8476b0 ffffb204`5f847608 : nt!KeBugCheckEx

ffffb204`5f847390 fffff804`6bbefe50 : 00000000`00000000 00000000`00000000 fffff804`6b80b610 ffffdb01`108e6490 : nt!KiBugCheckDispatch+0x69

ffffb204`5f8474d0 fffff804`6bbee1e3 : 00000000`00000005 fffff804`6ba3f046 ffff8780`00000000 ffffdb01`1bb670c0 : nt!KiFastFailDispatch+0xd0

ffffb204`5f8476b0 fffff804`6bc653e5 : 00000000`00000000 fffff804`6ba26197 ffffd782`f1ecfda0 ffffffff`ffffffff : nt!KiRaiseSecurityCheckFailure+0x323

ffffb204`5f847840 fffff804`6bbe4b0e : 00000000`77b14630 ffffb204`00000000 ffff8780`00000000 00000000`00000000 : nt!KiQueueReadyThread+0x17b305

ffffb204`5f8478c0 fffff804`6bbe405e : ffffdb01`1b9840c0 00000000`0ce7c980 00000000`00000000 ffffffff`ffc05e01 : nt!KxDispatchInterrupt+0x12e

ffffb204`5f847a00 00000000`5b81b30f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDpcInterrupt+0x2ee

00000000`0053ee64 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x5b81b30f





SYMBOL_NAME: nt!KiFastFailDispatch+d0



MODULE_NAME: nt



IMAGE_NAME: ntkrnlmp.exe



IMAGE_VERSION: 10.0.19041.388



STACK_COMMAND: .thread ; .cxr ; kb



BUCKET_ID_FUNC_OFFSET: d0



FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_STACKPTR_ERROR_nt!KiFastFailDispatch



OS_VERSION: 10.0.19041.1



BUILDLAB_STR: vb_release



OSPLATFORM_TYPE: x64



OSNAME: Windows 10



FAILURE_ID_HASH: {902b8f52-7d9d-4ab0-2739-9ed0af87e702}



Followup: MachineOwner

---------

Second

Microsoft R Windows Debugger Version 10.0.19041.1 AMD64

Copyright c Microsoft Corporation. All rights reserved.





Loading Dump File [C:\Users\Sam Zhang\Desktop\BSOD Mem Dump\073020-12281-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available



Symbol search path is: srv*

Executable search path is:

Windows 10 Kernel Version 19041 MP 6 procs Free x64

Product: WinNt, suite: TerminalServer SingleUserTS Personal

Built by: 19041.1.amd64fre.vb_release.191206-1406

Machine Name:

Kernel base = 0xfffff804`6b800000 PsLoadedModuleList = 0xfffff804`6c42a310

Debug session time: Thu Jul 30 10:43:34.383 2020 UTC - 4:00

System Uptime: 0 days 16:58:00.060

Loading Kernel Symbols

...............................................................

................................................................

................................................................

.............

Loading User Symbols

Loading unloaded module list

...................................

For analysis of this file, run !analyze -v

3: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



KERNEL_SECURITY_CHECK_FAILURE 139

A kernel component has corrupted a critical data structure. The corruption

could potentially allow a malicious user to gain control of this machine.

Arguments:

Arg1: 0000000000000003, A LIST_ENTRY has been corrupted i.e. double remove.

Arg2: ffffb2045f8476b0, Address of the trap frame for the exception that caused the bugcheck

Arg3: ffffb2045f847608, Address of the exception record for the exception that caused the bugcheck

Arg4: 0000000000000000, Reserved



Debugging Details:

------------------





KEY_VALUES_STRING: 1



Key : Analysis.CPU.Sec

Value: 2



Key : Analysis.DebugAnalysisProvider.CPP

Value: Create: 8007007e on DESKTOP-043JOFC



Key : Analysis.DebugData

Value: CreateObject



Key : Analysis.DebugModel

Value: CreateObject



Key : Analysis.Elapsed.Sec

Value: 2



Key : Analysis.Memory.CommitPeak.Mb

Value: 78



Key : Analysis.System

Value: CreateObject





BUGCHECK_CODE: 139



BUGCHECK_P1: 3



BUGCHECK_P2: ffffb2045f8476b0



BUGCHECK_P3: ffffb2045f847608



BUGCHECK_P4: 0



TRAP_FRAME: ffffb2045f8476b0 -- .trap 0xffffb2045f8476b0

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=ffffdb011b984198 rbx=0000000000000000 rcx=0000000000000003

rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8046bc653e5 rsp=ffffb2045f847840 rbp=ffff87807636d180

r8=0000000000000000 r9=0000000000000001 r10=0000000000000000

r11=0000000000000003 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0 nv up ei pl nz na po nc

nt!KiQueueReadyThread+0x17b305:

fffff804`6bc653e5 cd29 int 29h

Resetting default scope



EXCEPTION_RECORD: ffffb2045f847608 -- .exr 0xffffb2045f847608

ExceptionAddress: fffff8046bc653e5 nt!KiQueueReadyThread+0x000000000017b305

ExceptionCode: c0000409 Security check failure or stack buffer overrun

ExceptionFlags: 00000001

NumberParameters: 1

Parameter[0]: 0000000000000003

Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY



BLACKBOXBSD: 1 !blackboxbsd





BLACKBOXNTFS: 1 !blackboxntfs





BLACKBOXPNP: 1 !blackboxpnp





BLACKBOXWINLOGON: 1



CUSTOMER_CRASH_COUNT: 1



PROCESS_NAME: Discord.exe



ERROR_CODE: NTSTATUS 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.



EXCEPTION_CODE_STR: c0000409



EXCEPTION_PARAMETER1: 0000000000000003



EXCEPTION_STR: 0xc0000409



BAD_STACK_POINTER: ffffb2045f847388



STACK_TEXT:

ffffb204`5f847388 fffff804`6bbefa29 : 00000000`00000139 00000000`00000003 ffffb204`5f8476b0 ffffb204`5f847608 : nt!KeBugCheckEx

ffffb204`5f847390 fffff804`6bbefe50 : 00000000`00000000 00000000`00000000 fffff804`6b80b610 ffffdb01`108e6490 : nt!KiBugCheckDispatch+0x69

ffffb204`5f8474d0 fffff804`6bbee1e3 : 00000000`00000005 fffff804`6ba3f046 ffff8780`00000000 ffffdb01`1bb670c0 : nt!KiFastFailDispatch+0xd0

ffffb204`5f8476b0 fffff804`6bc653e5 : 00000000`00000000 fffff804`6ba26197 ffffd782`f1ecfda0 ffffffff`ffffffff : nt!KiRaiseSecurityCheckFailure+0x323

ffffb204`5f847840 fffff804`6bbe4b0e : 00000000`77b14630 ffffb204`00000000 ffff8780`00000000 00000000`00000000 : nt!KiQueueReadyThread+0x17b305

ffffb204`5f8478c0 fffff804`6bbe405e : ffffdb01`1b9840c0 00000000`0ce7c980 00000000`00000000 ffffffff`ffc05e01 : nt!KxDispatchInterrupt+0x12e

ffffb204`5f847a00 00000000`5b81b30f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDpcInterrupt+0x2ee

00000000`0053ee64 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x5b81b30f





SYMBOL_NAME: nt!KiFastFailDispatch+d0



MODULE_NAME: nt



IMAGE_NAME: ntkrnlmp.exe



IMAGE_VERSION: 10.0.19041.388



STACK_COMMAND: .thread ; .cxr ; kb



BUCKET_ID_FUNC_OFFSET: d0



FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_STACKPTR_ERROR_nt!KiFastFailDispatch



OS_VERSION: 10.0.19041.1



BUILDLAB_STR: vb_release



OSPLATFORM_TYPE: x64



OSNAME: Windows 10



FAILURE_ID_HASH: {902b8f52-7d9d-4ab0-2739-9ed0af87e702}



Followup: MachineOwner

---------

Third

Microsoft R Windows Debugger Version 10.0.19041.1 AMD64

Copyright c Microsoft Corporation. All rights reserved.





Loading Dump File [C:\Users\Sam Zhang\Desktop\BSOD Mem Dump\073020-12281-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available



Symbol search path is: srv*

Executable search path is:

Windows 10 Kernel Version 19041 MP 6 procs Free x64

Product: WinNt, suite: TerminalServer SingleUserTS Personal

Built by: 19041.1.amd64fre.vb_release.191206-1406

Machine Name:

Kernel base = 0xfffff804`6b800000 PsLoadedModuleList = 0xfffff804`6c42a310

Debug session time: Thu Jul 30 10:43:34.383 2020 UTC - 4:00

System Uptime: 0 days 16:58:00.060

Loading Kernel Symbols

...............................................................

................................................................

................................................................

.............

Loading User Symbols

Loading unloaded module list

...................................

For analysis of this file, run !analyze -v

3: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



KERNEL_SECURITY_CHECK_FAILURE 139

A kernel component has corrupted a critical data structure. The corruption

could potentially allow a malicious user to gain control of this machine.

Arguments:

Arg1: 0000000000000003, A LIST_ENTRY has been corrupted i.e. double remove.

Arg2: ffffb2045f8476b0, Address of the trap frame for the exception that caused the bugcheck

Arg3: ffffb2045f847608, Address of the exception record for the exception that caused the bugcheck

Arg4: 0000000000000000, Reserved



Debugging Details:

------------------





KEY_VALUES_STRING: 1



Key : Analysis.CPU.Sec

Value: 2



Key : Analysis.DebugAnalysisProvider.CPP

Value: Create: 8007007e on DESKTOP-043JOFC



Key : Analysis.DebugData

Value: CreateObject



Key : Analysis.DebugModel

Value: CreateObject



Key : Analysis.Elapsed.Sec

Value: 2



Key : Analysis.Memory.CommitPeak.Mb

Value: 78



Key : Analysis.System

Value: CreateObject





BUGCHECK_CODE: 139



BUGCHECK_P1: 3



BUGCHECK_P2: ffffb2045f8476b0



BUGCHECK_P3: ffffb2045f847608



BUGCHECK_P4: 0



TRAP_FRAME: ffffb2045f8476b0 -- .trap 0xffffb2045f8476b0

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=ffffdb011b984198 rbx=0000000000000000 rcx=0000000000000003

rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8046bc653e5 rsp=ffffb2045f847840 rbp=ffff87807636d180

r8=0000000000000000 r9=0000000000000001 r10=0000000000000000

r11=0000000000000003 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0 nv up ei pl nz na po nc

nt!KiQueueReadyThread+0x17b305:

fffff804`6bc653e5 cd29 int 29h

Resetting default scope



EXCEPTION_RECORD: ffffb2045f847608 -- .exr 0xffffb2045f847608

ExceptionAddress: fffff8046bc653e5 nt!KiQueueReadyThread+0x000000000017b305

ExceptionCode: c0000409 Security check failure or stack buffer overrun

ExceptionFlags: 00000001

NumberParameters: 1

Parameter[0]: 0000000000000003

Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY



BLACKBOXBSD: 1 !blackboxbsd





BLACKBOXNTFS: 1 !blackboxntfs





BLACKBOXPNP: 1 !blackboxpnp





BLACKBOXWINLOGON: 1



CUSTOMER_CRASH_COUNT: 1



PROCESS_NAME: Discord.exe



ERROR_CODE: NTSTATUS 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.



EXCEPTION_CODE_STR: c0000409



EXCEPTION_PARAMETER1: 0000000000000003



EXCEPTION_STR: 0xc0000409



BAD_STACK_POINTER: ffffb2045f847388



STACK_TEXT:

ffffb204`5f847388 fffff804`6bbefa29 : 00000000`00000139 00000000`00000003 ffffb204`5f8476b0 ffffb204`5f847608 : nt!KeBugCheckEx

ffffb204`5f847390 fffff804`6bbefe50 : 00000000`00000000 00000000`00000000 fffff804`6b80b610 ffffdb01`108e6490 : nt!KiBugCheckDispatch+0x69

ffffb204`5f8474d0 fffff804`6bbee1e3 : 00000000`00000005 fffff804`6ba3f046 ffff8780`00000000 ffffdb01`1bb670c0 : nt!KiFastFailDispatch+0xd0

ffffb204`5f8476b0 fffff804`6bc653e5 : 00000000`00000000 fffff804`6ba26197 ffffd782`f1ecfda0 ffffffff`ffffffff : nt!KiRaiseSecurityCheckFailure+0x323

ffffb204`5f847840 fffff804`6bbe4b0e : 00000000`77b14630 ffffb204`00000000 ffff8780`00000000 00000000`00000000 : nt!KiQueueReadyThread+0x17b305

ffffb204`5f8478c0 fffff804`6bbe405e : ffffdb01`1b9840c0 00000000`0ce7c980 00000000`00000000 ffffffff`ffc05e01 : nt!KxDispatchInterrupt+0x12e

ffffb204`5f847a00 00000000`5b81b30f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDpcInterrupt+0x2ee

00000000`0053ee64 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x5b81b30f





SYMBOL_NAME: nt!KiFastFailDispatch+d0



MODULE_NAME: nt



IMAGE_NAME: ntkrnlmp.exe



IMAGE_VERSION: 10.0.19041.388



STACK_COMMAND: .thread ; .cxr ; kb



BUCKET_ID_FUNC_OFFSET: d0



FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_STACKPTR_ERROR_nt!KiFastFailDispatch



OS_VERSION: 10.0.19041.1



BUILDLAB_STR: vb_release



OSPLATFORM_TYPE: x64



OSNAME: Windows 10



FAILURE_ID_HASH: {902b8f52-7d9d-4ab0-2739-9ed0af87e702}



Followup: MachineOwner

---------

:)

 

help to remote connect

not sure how to use both programs u 2 suggested, i need more helpful steps thanks

 

BSOD Help!

Disable hardware accel in your browsers. Also aumha.org for bsods listing. Turn on power saving for your gcs(set to oc in games but not webbrowsing)

 

BAD_POOL_HEADER BSOD, Dump File attached


Hi Groggubus,

Welcome to the 10forums

Please remove / disable items from the startup in taskmanager
These programs could interfere with the boot process giving you trouble and increase the boot time.

Daemon tools, Alcohol 120% and Power Archiver Pro uses SCSI Pass Through Direct (SPTD), which is a well known cause for BSOD's.
Please remove Daemon Tools and run the SPTD pass through remover.

1. Uninstall Daemon Tools
2. Download the SPTD standalone installer and follow these steps:
   • Double click the executable to open it
   • Click on the button shown below

If the button is grayed out, like in the image, there is no more SPTD installation on your system, and you can close the window

Please follow this suggestion for the BSOD

1. Please open BitDefender and go to the modules,
2. Go to the firewall settings,
3. Uncheck 'Block port scans in the network',
4. Reboot your system <-- IMPORTANT