0xc0000409 crash with Endpoint Protection installed

book

Article ID: 171381

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

With Symantec Endpoint Protection (SEP) installed, some machines may experience a blue screen with a stop code of 0xc0000409 and bugcheck of 0x139.

BSOD 0xc0000409 

Bugcheck 0x139

Cause

An invalid scan object causes a BugCheck 0x139 (KERNEL_SECURITY_CHECK_FAILURE) due to LIST_ENTRY corruption by srtsp64.sys.

Environment

Windows 7

Windows 10

Resolution

This issue is fixed in Symantec Endpoint Protection 14 RU1 MP2  For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.