Windows 10: Memory Dump help

Enclosed is my memory dump output. I am running OBS, TrackIR, Tobii, GoXLR, AsusTweak II, Discord, ElgatoStream deck and lights, VoiceAttack, Restream.io chat, Edge Browser. I can stream all day with nothing bad happening, then out of the blue I get a BSOD. Previous blue screens I believe were caused by AsusTweak II component so I removed it and it stopped crashing because of that. This time it just says hardware failure in the reliability windows tool. KERNEL_SECURITY_CHECK_FAILURE 139is the result of this crash. Also recently installed razer central. This is a fresh install of windows. Thank you for any help.






Microsoft R Windows Debugger Version 10.0.20153.1000 AMD64

Copyright c Microsoft Corporation. All rights reserved.Loading Dump File [C:\Windows\MEMORY.DMP]Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.Symbol search path is: srv*Executable search path is: Windows 10 Kernel Version 19041 MP 64 procs Free x64Product: WinNt, suite: TerminalServer SingleUserTSEdition build lab: 19041.1.amd64fre.vb_release.191206-1406Machine Name:Kernel base = 0xfffff806`45800000 PsLoadedModuleList = 0xfffff806`4642a2b0Debug session time: Sat Dec 19 17:22:27.484 2020 UTC - 7:00System Uptime: 1 days 10:00:44.421Loading Kernel Symbols..............................................................................................................................................................................................................Loading User SymbolsLoading unloaded module list...........................For analysis of this file, run !analyze -vnt!KeBugCheckEx:fffff806`45bf5780 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff9485`6b4ae6c0=0000000000000139Loading Dump File [C:\Windows\MEMORY.DMP]Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.Can't set dump file contextsMachineInfo::SetContext failed - Thread: 00000187A3924B90 Handle: 30 Id: 30 - Error == 0x8000FFFF************* Path validation summary **************Response Time ms LocationDeferred srv*Symbol search path is: srv*Executable search path is: Windows 10 Kernel Version 19041 MP 64 procs Free x64Product: WinNt, suite: TerminalServer SingleUserTSEdition build lab: 19041.1.amd64fre.vb_release.191206-1406Machine Name:Kernel base = 0xfffff806`45800000 PsLoadedModuleList = 0xfffff806`4642a2b0Debug session time: Sat Dec 19 17:22:27.484 2020 UTC - 7:00System Uptime: 1 days 10:00:44.421Loading Kernel Symbols..............................................................................................................................................................................................................Loading User SymbolsLoading unloaded module list...........................nt!KeBugCheckEx:fffff806`45bf5780 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:ffff9485`6b4ae6c0=00000000000001391:47: kd> !analyze -v******************************************************************************** ** Bugcheck Analysis ** ********************************************************************************KERNEL_SECURITY_CHECK_FAILURE 139A kernel component has corrupted a critical data structure. The corruptioncould potentially allow a malicious user to gain control of this machine.Arguments:Arg1: 0000000000000000, A stack-based buffer has been overrun.Arg2: 0000000000000000, Address of the trap frame for the exception that caused the bugcheckArg3: 0000000000000000, Address of the exception record for the exception that caused the bugcheckArg4: 0000000000000020, ReservedDebugging Details:------------------KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 4405 Key : Analysis.DebugAnalysisProvider.CPP Value: Create: 8007007e on DESKTOP-KKAKIP1 Key : Analysis.DebugData Value: CreateObject Key : Analysis.DebugModel Value: CreateObject Key : Analysis.Elapsed.mSec Value: 4399 Key : Analysis.Memory.CommitPeak.Mb Value: 124 Key : Analysis.System Value: CreateObject Key : WER.OS.Branch Value: vb_release Key : WER.OS.Timestamp Value: 2019-12-06T14:06:00Z Key : WER.OS.Version Value: 10.0.19041.1ADDITIONAL_XML: 1OS_BUILD_LAYERS: 1BUGCHECK_CODE: 139BUGCHECK_P1: 0BUGCHECK_P2: 0BUGCHECK_P3: 0BUGCHECK_P4: 20TRAP_FRAME: 0000000000000000 -- .trap 0x0EXCEPTION_RECORD: 0000000000000000 -- .exr 0x0Cannot read Exception record @ 0000000000000000BLACKBOXBSD: 1 !blackboxbsdBLACKBOXNTFS: 1 !blackboxntfsBLACKBOXPNP: 1 !blackboxpnpBLACKBOXWINLOGON: 1PROCESS_NAME: SystemSTACK_TEXT: ffff9485`6b4ae6b8 fffff806`45bfe28b : 00000000`00000139 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeBugCheckExffff9485`6b4ae6c0 fffff806`45b92375 : ffffffff`ffffffff 00000000`00989600 0000011d`1690084e 00000000`00000000 : nt!guard_icall_bugcheck+0x1bffff9485`6b4ae6f0 fffff806`45a701e5 : 00000000`00000000 00001f80`00000009 00000000`00000000 00000000`00000000 : nt!PpmIdleSelectStates+0x415ffff9485`6b4aeaf0 fffff806`45bf92a4 : ffffffff`00000000 ffffb380`e23f7040 ffffa303`1b90a080 00000000`00001cb6 : nt!PoIdle+0x405ffff9485`6b4aec60 00000000`00000000 : ffff9485`6b4af000 ffff9485`6b4a9000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x54SYMBOL_NAME: nt!guard_icall_bugcheck+1bMODULE_NAME: ntIMAGE_NAME: ntkrnlmp.exeSTACK_COMMAND: .thread ; .cxr ; kbBUCKET_ID_FUNC_OFFSET: 1bFAILURE_BUCKET_ID: 0x139_0_LEGACY_GS_VIOLATION_nt!guard_icall_bugcheckOS_VERSION: 10.0.19041.1BUILDLAB_STR: vb_releaseOSPLATFORM_TYPE: x64OSNAME: Windows 10FAILURE_ID_HASH: {9bee41a7-2ef9-07ca-7e59-7d5a0c6e2d05}Followup: MachineOwner---------

:)

 

Frequent Memory Dumps

Thank you for your response.

I have uninstalled cccleANER as suggested.

I have turned off real time scanning on McAfee Total Protection.

A couple of questions:

1. How can I check that I am not getting Memory dump files anymore? - they were detected by cccleANER
2. How can I check that I'm not getting interference between Malwarebytes and McAfee? - i.e. I need to know what level of RAM?
   

Thank you for your assistance

 

Surface Pro Kernel Memory Dump When It Turn On Every time!

Hi,



Thank you for writing to Microsoft Community Forums.



As the dump file is kernel memory dump file. Please note that it records only the kernel memory. This speeds up the process of recording information in a log when your computer stops unexpectedly. You must have a pagefile large enough to accommodate
your kernel memory. The page file must be on the boot volume. Otherwise, a memory dump cannot be created. Before we provide any suggestions, I would like to confirm few things:

1. Could you please elaborate the statement: I got a very strange thing my Surface Pro Memory Dump when I turn on it everytime, but It don't happen if I just reboot after turn on?
   
2. Are you getting blue screen while booting or while using Windows?
   
3. Which version of Windows 10 are you using?
   

Meanwhile you can try the steps provided in the article: Bug
Check 0x9F: DRIVER_POWER_STATE_FAILURE (based on the dump files analyzation).



We await your reply.

Regards,

 

What Is Memory Dump?

No. Memory dump and being low on memory are entirely two different things.

Dump file, as the name suggests is a copy of what was in your RAM when your system crashed with a Blue screen of Death.

If your system is low on memory, you might need to add RAM to the device. How much RAM is currently installed?