Windows 10: kernel_security_check BSOD occur repeatdly in random times

download and install: Everything search: voidtools

Then search for:
AVPCIFilter.sys
AVVideoCard.sys
avatron.com
Avatron Software Air Display
Air Display
Make sure this software/driver(s) are uninstalled.

 

Just to demonstrate the status I'm in, I recorded a short video:
TenForums - Boot - YouTube

My knowledge is limited so could it really be a result of misbehaving drivers? How should I proceed?

EDIT: At some part it will boot normally, but it does take several attempts and discharging it many times (which caused a corruption in Windows the last time)

 

We usually do not blame hardware unless we can be absolutely sure. One test is to see if you can keep the system running in safe mode - this usually indicates that the hardware is OK.

 

I respect that and was motivated to go on.
I think we're actually getting somewhere, I managed to boot into safe-mode and had no issues for the pat hour or so.
Using the software zbook provided I uninstalled almost every bit of Avatron drivers and peripherals, but I still see the following line when starting DDU:
GPU #0002 : Air Display (Microsoft Corporation - WDDM v1.1)
I'm pretty sure though it's just some registry line because voidtools shows nothing and I removed each of their drivers using pnputils.exe.

I'm now even able to start Driver Verifier and boot, but every time I start Windows normally I get a
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED.
Safe mode works fine.
Verifer is now disabled.

Here are the relevant logs:
Attachment 141861

 

There are some indicators still showing up in the threads:

Code: ffffde80`7fc44198 fffff802`ca07fbd0Unable to load image \??\C:\WINDOWS\system32\drivers\farflt.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for farflt.sys *** ERROR: Module load completed but symbols could not be loaded for farflt.sys farflt+0xfbd0 ffffde80`7fc45af0 fffff802`ca000100Unable to load image \??\C:\WINDOWS\system32\drivers\mbam.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for mbam.sys *** ERROR: Module load completed but symbols could not be loaded for mbam.sys mbam+0x100[/quote] Both of these are from Malwarebytes. Please uninstall Malwarebytes while we are troubleshooting - Windows Defender will be sufficient protection for now.

Code: ffff9480`a86f3620 fffff80c`91db277cUnable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for LGBusEnum.sys *** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys LGBusEnum+0x277c[/quote] This is the Logitech Keyboard driver. There may not be a lot you can do about this other than try another keyboard.

 

- Removed Malwarebytes
- Installed nVidia drivers which was not present at the time
- I don't have a Logitech keyboard, only headset, but I removed its software and disconnected it just in case
- Reset BIOS to default
- Removed a *hidden* AirDisplay device that I found in the device manager

I am now running Verifier in normal mode and will test it for some time.

Later I will reinstall Logitech drivers and test it again.
Will do the same with the nVidia Geforce Experience software.

I am getting my hopes up, will update again soon.

 

Code: ffff9480`a86f3620 fffff80c`91db277cUnable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for LGBusEnum.sys*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys LGBusEnum+0x277c[/quote] LGBusEnum.sys Logitech Keyboard http://www.logitech.com/en-us/suppor...oads/downloads Code: LGBusEnum Logitech Gaming Virtua Logitech Gaming Virtua Kernel Manual Stopped OK FALSE FALSE 5,248 7,552 0 2/27/2016 7:18:54 AM C:\WINDOWS\system32\drivers\LGBusEnum.sys 1,664[/quote] farflt.sys Malwarebytes Anti-Ransomware Protection Downloads: Free Cyber Security & Anti-Malware Software
Support: Customer Support & Help Center


Code: ffffcf01`026c5190 fffff801`811b3135Unable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for LGBusEnum.sys*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys[/quote] Code: ffffca01`b49cc360 fffff801`32a42d85Unable to load image \SystemRoot\system32\drivers\LGBusEnum.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for LGBusEnum.sys*** ERROR: Module load completed but symbols could not be loaded for LGBusEnum.sys LGBusEnum+0x2d85[/quote] Code: ffffca01`b49cc198 fffff801`31c2fbd0Unable to load image \??\C:\WINDOWS\system32\drivers\farflt.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for farflt.sys*** ERROR: Module load completed but symbols could not be loaded for farflt.sys farflt+0xfbd0[/quote]


Code: 30/06/2017 21:50 Application Error Faulting application name: NVIDIA Share.exe, version: 58.3029.1609.1, time stamp: 0x594a163d Faulting module name: ntdll.dll, version: 10.0.15063.0, time stamp: 0xa82cc161 Exception code: 0xc0000374 Fault offset: 0x000d9a8a Faulting process id: 0x20ec Faulting application start time: 0x01d2f1eadab48b65 Faulting application path: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: a9b578ef-21db-4087-82ca-cdabbe4daec4 Faulting package full name: Faulting package-relative application ID:[/quote] Code: {Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.[/quote] Code: Startup Repair failed.[/quote]
1) As above in philc43's post please uninstall Malwarebytes and use windows defender

2) Uninstall the Logitec keyboard driver
reinstall a new driver: Logitech Support + Downloads

 

I'm having good progress in getting all my devices to work, last one was a bluetooth receiver which caused a few crashes, but I was able to install the correct drivers.

I also disabled Windows searching for drivers by its own.

Everything was working well until Windows froze-
DPC_WATCHDOG_VIOLATION
Attachment 141901

(I'm attaching some of the links I used if someone will have the same problem)
[1] Uninstall Air Display on Windows 10... for realz - navhaxs
[2] Forums - Logitech Gaming Software prone to cause BlueScreen

 

Code: BugCheck 133, {0, 501, 500, fffff8013d267348}*** WARNING: Unable to verify timestamp for nvlddmkm.sys*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys Probably caused by : nvlddmkm.sys ( nvlddmkm+e8663 )[/quote] nvlddmkm
nvlddmkm.sys nVidia Video drivers Download Drivers | NVIDIA
Get from OEM for laptops
intelppm
intelppm.sys Intel Processor driver Drivers & Software also at Code: intelppm Intel Processor Driver Intel Processor Driver Kernel Manual Stopped OK FALSE FALSE 94,208 53,248 0 C:\WINDOWS\system32\drivers\intelppm.sys 8,192[/quote] Something is conflicting with the Nvidia driver or it may need to be rolled back

1)NVIDIA13) Uninstall all Nvidia drivers/softwareThe best way to do this is to uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from your Graphics card manufacturer or from the NVidia website. When you do this be sure the "clean install" box is checked and only install the Graphics driver and the PhysX driver.Display Driver Uninstaller Download version 17.0.6.7: Official Display Driver Uninstaller DDU Download


2) Uninstall Intel driver intelppm.sys using the control panel
reinstall Intel driver: Drivers & Software

 

Well to prevent such conflict I disabled Intel Graphics through BIOS and now all I see is black screen.
Connected using DVI straight to nVidia GPU

EDIT: I'll try reseting to default by unpluging the CMOS

EDIT 2: Done. I am now operating only with Nvidia GPU and its latest drivers (wiped the old ones using DDU)

 

Has it been stable since your last change?

 

There have been couple more crashes which were easy to deal with, since then I ran verifier for at least 24 hours with no sign of any problem.
I'm marking this thread as solved.

Phil and Eric, I thank you so much for your tremendous help and dedication and wish you the best!
Tomer