Windows 10: Random BSOD

So in the past couple days I have started getting random crashes. Always with the Kernel_Security_Check_Failure139


This is the first time this has happened since I installed. I have not made any changes to the system recently, its almost a full year old.


Results of the Memory dump are:


[COLOR=rgba30, 30, 30, 1]KERNEL_SECURITY_CHECK_FAILURE 139[/COLOR]

[COLOR=rgba30, 30, 30, 1]A kernel component has corrupted a critical data structure. The corruptioncould potentially allow a malicious user to gain control of this machine.Arguments:Arg1: 0000000000000003, A LIST_ENTRY has been corrupted i.e. double remove.Arg2: ffffd082192c76c0, Address of the trap frame for the exception that caused the bugcheckArg3: ffffd082192c7618, Address of the exception record for the exception that caused the bugcheckArg4: 0000000000000000, Reserved[/COLOR]


[COLOR=rgba30, 30, 30, 1]Debugging Details:[/COLOR]


[COLOR=rgba30, 30, 30, 1]------------------KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 2421 Key : Analysis.DebugAnalysisManager Value: Create Key : Analysis.Elapsed.mSec Value: 4520 Key : Analysis.Init.CPU.mSec Value: 389 Key : Analysis.Init.Elapsed.mSec Value: 5078 Key : Analysis.Memory.CommitPeak.Mb Value: 79 Key : FailFast.Name Value: CORRUPT_LIST_ENTRY Key : FailFast.Type Value: 3 Key : WER.OS.Branch Value: vb_release Key : WER.OS.Timestamp Value: 2019-12-06T14:06:00Z Key : WER.OS.Version Value: 10.0.19041.1[/COLOR]




[COLOR=rgba30, 30, 30, 1]BUGCHECK_CODE: 139BUGCHECK_P1: 3BUGCHECK_P2: ffffd082192c76c0BUGCHECK_P3: ffffd082192c7618BUGCHECK_P4: 0TRAP_FRAME: ffffd082192c76c0 -- [/COLOR][COLOR=rgba0, 0, 255, 1].trap 0xffffd082192c76c0[/COLOR][COLOR=rgba30, 30, 30, 1]NOTE: The trap frame does not contain all registers.[/COLOR][COLOR=rgba0, 0, 255, 1]Some register values may be zeroed or incorrect.[/COLOR][COLOR=rgba30, 30, 30, 1]rax=ffffe68555847d90 rbx=0000000000000000 rcx=0000000000000003rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff80065db2e00 rsp=ffffd082192c7850 rbp=ffffe68555343750 r8=ffffbd0173df6a70 r9=ffffe6854ca07370 r10=ffffbd015de8d840r11=ffffd082192c7800 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0 nv up ei ng nz na po cylibwamf+0x2e00:fffff800`65db2e00 cd29 int 29hResetting default scopeEXCEPTION_RECORD: ffffd082192c7618 -- [/COLOR][COLOR=rgba0, 0, 255, 1].exr 0xffffd082192c7618[/COLOR][COLOR=rgba30, 30, 30, 1]ExceptionAddress: fffff80065db2e00 libwamf+0x0000000000002e00 ExceptionCode: c0000409 Security check failure or stack buffer overrun ExceptionFlags: 00000001NumberParameters: 1 Parameter[0]: 0000000000000003Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY BLACKBOXBSD: 1 [/COLOR][COLOR=rgba0, 0, 255, 1]!blackboxbsd[/COLOR][COLOR=rgba30, 30, 30, 1]BLACKBOXNTFS: 1 [/COLOR][COLOR=rgba0, 0, 255, 1]!blackboxntfs[/COLOR][COLOR=rgba30, 30, 30, 1]BLACKBOXPNP: 1 [/COLOR][COLOR=rgba0, 0, 255, 1]!blackboxpnp[/COLOR][COLOR=rgba30, 30, 30, 1]BLACKBOXWINLOGON: 1PROCESS_NAME: SystemERROR_CODE: NTSTATUS 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.EXCEPTION_CODE_STR: c0000409EXCEPTION_PARAMETER1: 0000000000000003EXCEPTION_STR: 0xc0000409STACK_TEXT: ffffd082`192c7398 fffff800`58807b69 : 00000000`00000139 00000000`00000003 ffffd082`192c76c0 ffffd082`192c7618 : nt!KeBugCheckExffffd082`192c73a0 fffff800`58807f90 : ffffbd01`675874c0 fffff800`588075b5 ffffbd01`741b9c00 ffffbd01`71ee269c : nt!KiBugCheckDispatch+0x69ffffd082`192c74e0 fffff800`58806323 : ffffbd01`00000003 00000000`00000001 00000000`00000020 00000000`00000000 : nt!KiFastFailDispatch+0xd0ffffd082`192c76c0 fffff800`65db2e00 : 00000000`00000000 ffffe685`55343750 fffff800`65db5120 fffff800`65db275d : nt!KiRaiseSecurityCheckFailure+0x323ffffd082`192c7850 fffff800`65db2741 : ffffbd01`5de86e20 00000000`00000008 00000000`e314bd0d ffffd082`192c7939 : libwamf+0x2e00ffffd082`192c78a0 fffff800`57370440 : ffffbd01`6b277a20 00000000`00989680 ffffbd01`6aee2cc0 ffffbd01`6b277a30 : libwamf+0x2741ffffd082`192c78d0 fffff800`573720c8 : ffffbd01`71ee2010 ffffbd01`6b277a30 ffffbd01`6b277a30 00000000`00000000 : FLTMGR!FltOpenVolume+0xe50ffffd082`192c79a0 fffff800`573723a7 : ffffbd01`6b550190 00000000`00000008 ffffbd01`6b550040 ffffbd01`00000000 : FLTMGR!FltRemoveOpenReparseEntry+0x19e8ffffd082`192c79e0 fffff800`573726b5 : ffffbd01`6de2f810 fffff800`573726a0 ffffbd01`5de75c60 00000000`00000100 : FLTMGR!FltRemoveOpenReparseEntry+0x1cc7ffffd082`192c7a40 fffff800`58625975 : ffffbd01`675874c0 fffff800`5736ffc0 ffffbd01`5de75c60 ffffbd01`00000000 : FLTMGR!FltRemoveOpenReparseEntry+0x1fd5ffffd082`192c7a70 fffff800`58717e85 : ffffbd01`675874c0 00000000`00000080 ffffbd01`5de68080 000fa4ef`bd9bbfff : nt!ExpWorkerThread+0x105ffffd082`192c7b10 fffff800`587fd2a8 : ffffac80`521e0180 ffffbd01`675874c0 fffff800`58717e30 00000000`00000000 : nt!PspSystemThreadStartup+0x55ffffd082`192c7b60 00000000`00000000 : ffffd082`192c8000 ffffd082`192c1000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28SYMBOL_NAME: libwamf+2e00MODULE_NAME: [/COLOR][COLOR=rgba0, 0, 255, 1]libwamf[/COLOR][COLOR=rgba30, 30, 30, 1]IMAGE_NAME: libwamf.sysSTACK_COMMAND: .thread ; .cxr ; kbBUCKET_ID_FUNC_OFFSET: 2e00FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_libwamf!unknown_functionOS_VERSION: 10.0.19041.1BUILDLAB_STR: vb_releaseOSPLATFORM_TYPE: x64OSNAME: Windows 10FAILURE_ID_HASH: {13eabe20-0fac-c14f-91ee-170f860e7e14}Followup: MachineOwner[/COLOR]


[COLOR=rgba30, 30, 30, 1]Any help on this would be appreciated. [/COLOR]

[COLOR=rgba30, 30, 30, 1]All the searches I have done for the libwamf file just result in what it is and the company that is responsible but nothing on a possible resolution or why it is causing a crash.[/COLOR]

:)

 

Random BSOD while browsing internet


BitDefender is nothing special. mwac.sys causes BSODs anywhere.
A tiny documentation can be found here: Solved Random BSODs - Windows 10 Forums
In that very thread, the suggested action apparently worked.

The storage and network filters of any third party antivirus can cause BSODs. Neither MBAM nor BitDefender is any special. For a regular antivirus, it may be shifted to an alternative; but MBAM has no alternative. So a clean install of the said program is the most feasible first step.
As far as the first step is not failing, it is better to not think for the second step. Because the BSODs are not universal, failure at the first step is not universal; and success at the second step is also not universal.
That is why I posted that my suggestion may work, or may not. Let us see where it goes.

 

Random BSOD while browsing internet

Sorry, Bitdefender is a problem: BSOD BAD_POOL_HEADER - mwac.sys - Malwarebytes Anti-Malware Help - Malwarebytes Forums

 

Random BSODs "Bad_Pool_Caller"


This BSOD happens anywhere, irrespective of BitDefender. It takes place even when the antivirus is MSE in case of Windows 7. The most common cause is an expired trial or a cracked installation. Some examples:

• Norton: Windows 7 Random bsod caused by tcpip.sys - Windows 7 Help Forums
• MBAM only: Epic BSOD error appears just after few seconds from boot Solved - Windows 7 Help Forums
• McAfee: BSOD on Internet Related Programs (tcpip.sys) - Windows 7 Help Forums
• Avast: Bad Pool Header 0x00000019 at random times - Windows 7 Help Forums
• Avira: BSOD randomly Crashes my Laptop and freezes at Memory dump 100 - Windows 7 Help Forums
• Crack: BSOD every 6 minutes, also recent freezes - Windows 7 Help Forums

We are on our way of troubleshooting. If the uninstallation and reinstallation does not work, we will take the next step.

I, in general, know what I am doing and what I am suggesting. If I feel that I am unable to control the issue, I will definitely ask for help.