BSOD's Again on Desktop

Amcgrap · Feb 4, 2013

I have been on Sysnative several times with 100% success rate. My desktop (this time) has been generating BSOD's since the 29th of Jan. They happen when the system is idle for a fairly long time. I have attached 3 minidump files, as well as an assortment of files generated after the crashes and about the system configuration. I haven't installed any new software recently and would really appreciate your spotting what the culprit could be. As always, Thanks in Advance.

usasma · Feb 4, 2013

Please provide this information so we can provide a complete analysis: https://www.sysnative.com/forums/bs...d-posting-instructions-windows-8-7-vista.html

e1e6232e.sys is blamed in the BSOD's. This is your network driver. Please:
- download a fresh copy of the latest, Win7 compatible version of the driver from the manufacturer's website
- uninstall the current drivers from your system.
- install the freshly downloaded drivers
- monitor for further BSOD's

Info on the driver:

e1e6232e.sys Wed Mar 7 04:50:47 2012 (4F572F77)
Intel(R) PRO/1000 PCI Express Network Connection Driver
http://www.carrona.org/drivers/driver.php?id=e1e6232e.sys

Your BIOS dates from 2008. Please check at the manufacturer's website to see if there are any BIOS updates available for your system. Also check the readme file to see if they apply to the problems that you are having. Please be advised that flashing the BIOS is a very unforgiving process - and one mistake can physically damage your motherboard. I'm not that concerned with older BIOS's on OEM Win7 systems, but it's something to watch "just in case".

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sun Feb  3 08:38:55.203 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020413-17908-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]1 days 17:43:40.998[/B]
*** ERROR: Module load completed but symbols could not be loaded for pci.sys
Probably caused by :[B]pci.sys[/B]
BugCheck [B]9F, {3, fffffa8006c14a10, fffff80000b9c518, fffffa800767bcc0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000009F]DRIVER_POWER_STATE_FAILURE (9f)[/url]
Arguments: 
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa8006c14a10, Physical Device Object of the stack
Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa800767bcc0, The blocked IRP
BUGCHECK_STR:  0x9F
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0x9F_3_e1e6232e_IMAGE_pci.sys[/B]
CPUID:        "Intel(R) Core(TM)2 Quad  CPU   Q8200  @ 2.33GHz"
MaxSpeed:     2330
CurrentSpeed: [B]2327[/B]
  BIOS Version                  2SKt45A
  BIOS Release Date             12/22/2008
  Manufacturer                  LENOVO
  Product Name                  8702z
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Feb  1 14:50:29.460 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020113-19032-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 23:13:56.240[/B]
*** ERROR: Module load completed but symbols could not be loaded for pci.sys
Probably caused by :[B]pci.sys[/B]
BugCheck [B]9F, {3, fffffa8006c13a10, fffff8000442f518, fffffa80072b4010}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000009F]DRIVER_POWER_STATE_FAILURE (9f)[/url]
Arguments: 
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa8006c13a10, Physical Device Object of the stack
Arg3: fffff8000442f518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa80072b4010, The blocked IRP
BUGCHECK_STR:  0x9F
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0x9F_3_e1e6232e_IMAGE_pci.sys[/B]
CPUID:        "Intel(R) Core(TM)2 Quad  CPU   Q8200  @ 2.33GHz"
MaxSpeed:     2330
CurrentSpeed: [B]2327[/B]
  BIOS Version                  2SKt45A
  BIOS Release Date             12/22/2008
  Manufacturer                  LENOVO
  Product Name                  8702z
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jan 31 13:28:31.644 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\013113-16582-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]2 days 0:58:10.048[/B]
*** ERROR: Module load completed but symbols could not be loaded for pci.sys
Probably caused by :[B]pci.sys[/B]
BugCheck [B]9F, {3, fffffa800758ba10, fffff80004438518, fffffa800c0d8010}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000009F]DRIVER_POWER_STATE_FAILURE (9f)[/url]
Arguments: 
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa800758ba10, Physical Device Object of the stack
Arg3: fffff80004438518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa800c0d8010, The blocked IRP
BUGCHECK_STR:  0x9F
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0x9F_3_e1e6232e_IMAGE_pci.sys[/B]
CPUID:        "Intel(R) Core(TM)2 Quad  CPU   Q8200  @ 2.33GHz"
MaxSpeed:     2330
CurrentSpeed: [B]2327[/B]
  BIOS Version                  2SKt45A
  BIOS Release Date             12/22/2008
  Manufacturer                  LENOVO
  Product Name                  8702z
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sun Feb  3 08:38:55.203 2013 (UTC - 5:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
igdkmd64.sys                Wed Sep 23 15:22:57 2009 (4ABA7591)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
psi_mf.sys                  Wed Sep  1 03:53:14 2010 (4C7E066A)
appliand.sys                Fri May 20 06:20:42 2011 (4DD6407A)
LEqdUsb.Sys                 Fri Sep  2 02:22:56 2011 (4E607640)
LHidEqd.Sys                 Fri Sep  2 02:22:59 2011 (4E607643)
LHidFilt.Sys                Fri Sep  2 02:23:09 2011 (4E60764D)
LMouFilt.Sys                Fri Sep  2 02:23:15 2011 (4E607653)
e1e6232e.sys                Wed Mar  7 04:50:47 2012 (4F572F77)
MpFilter.sys                Wed Oct 31 18:43:06 2012 (5091A97A)
[/font]

Amcgrap · Feb 4, 2013

Thanks. I am no longer at the office but will attempt what you are suggesting as soon as I arrive tomorrow. No drivers were shown in red so I am assuming none have to be deleted or updated. Thanks again.

usasma · Feb 4, 2013

Right, there doesn't appear to be any drivers that we are concerned about. I suspect the network driver due to the memory dump analysis - but there is a possibility of other problems (such as a bad network card).

Amcgrap · Feb 4, 2013

Thanks...it seems like if it's not one thing, it is another! Saying that Windows under the hood is complicated is a real understatement!! Couple that with potential hardware problems, thanks to groups like you, we push forward and prevail! I'll let you know what happens tomorrow. I did do an update of the network drivers before I received your last message but didn't go through the uninstall and re-install routine you suggested. If when I get in tomorrow, the PC is still running, we may have solved the problem again. Thanks and I'll be in touch.

Amcgrap · Feb 5, 2013

In arriving at the office, the PC did not crash overnight, so the updating of the network driver seems to have worked. Let's see what happens the balance of the day and tonight. Thanks.

Amcgrap · Feb 5, 2013

Hello again, I stepped out of the office after my previous post for a couple of hours and the BSOD occured again. I then rebooted, stepped out again for a lunch meeting (approx. 3 hours), and the system was still up. Please see the 2 zipped files attached (dmp and xml). I cannot sead them, but am assuming that it is the same problem. Could you confirm, please? Thanks.

usasma · Feb 6, 2013

It's still pointing at the network driver - even though you've updated it.

Possibilities include:
- an unknown driver/program that's causing problems and exiting before the crash occurs
- a hardware problem
- a Windows problem

There's lot's of instances of hal.dll in the raw stack text, so that makes me wonder about a hardware problem.
Can you disable the wired network card in the BIOS? (and use wireless for network connections)

Another thing to try is running SFC.EXE /SCANNOW from an elevated (Run as administrator) Command Prompt.
If it can't fix all the issues, please upload the log file for us to have a look at. It's located at C:\Windows\Logs\CBS\CBS.log

Just FYI - I also wonder about these drivers as they are older and they have networking abilities:

psi_mf.sys Wed Sep 1 03:53:14 2010 (4C7E066A)
Secunia PSI (Personal Software Inspector) driver
http://www.carrona.org/drivers/driver.php?id=psi_mf.sys

appliand.sys Fri May 20 06:20:42 2011 (4DD6407A)
Applian Network Service/Applian Technologies APPLIAND helper driver
http://www.carrona.org/drivers/driver.php?id=appliand.sys

LEqdUsb.Sys Fri Sep 2 02:22:56 2011 (4E607640)
Logitech SetPoint Unifying KMDF USB Filter
http://www.carrona.org/drivers/driver.php?id=LEqdUsb.Sys

LHidEqd.Sys Fri Sep 2 02:22:59 2011 (4E607643)
Logitech SetPoint Unifying KMDF HID Filter
http://www.carrona.org/drivers/driver.php?id=LHidEqd.Sys

LHidFilt.Sys Fri Sep 2 02:23:09 2011 (4E60764D)
Logitech SetPoint HID Filter Driver
http://www.carrona.org/drivers/driver.php?id=LHidFilt.Sys

LMouFilt.Sys Fri Sep 2 02:23:15 2011 (4E607653)
Logitech SetPoint HID Filter Driver
http://www.carrona.org/drivers/driver.php?id=LMouFilt.Sys

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Tue Feb  5 12:11:31.515 2013 (UTC - 5:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\020513-17191-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].17944.amd64fre.win7sp1_gdr.120830-0333
System Uptime:[B]0 days 21:51:41.294[/B]
*** ERROR: Module load completed but symbols could not be loaded for pci.sys
Probably caused by :[B]pci.sys[/B]
BugCheck [B]9F, {3, fffffa8006c15060, fffff80000b9c518, fffffa80085e1a00}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000009F]DRIVER_POWER_STATE_FAILURE (9f)[/url]
Arguments: 
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa8006c15060, Physical Device Object of the stack
Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa80085e1a00, The blocked IRP
BUGCHECK_STR:  0x9F
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]X64_0x9F_3_e1e6232e_IMAGE_pci.sys[/B]
CPUID:        "Intel(R) Core(TM)2 Quad  CPU   Q8200  @ 2.33GHz"
MaxSpeed:     2330
CurrentSpeed: [B]2327[/B]
  BIOS Version                  2SKt45A
  BIOS Release Date             12/22/2008
  Manufacturer                  LENOVO
  Product Name                  8702z
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Tue Feb  5 12:11:31.515 2013 (UTC - 5:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
igdkmd64.sys                Wed Sep 23 15:22:57 2009 (4ABA7591)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
psi_mf.sys                  Wed Sep  1 03:53:14 2010 (4C7E066A)
appliand.sys                Fri May 20 06:20:42 2011 (4DD6407A)
LEqdUsb.Sys                 Fri Sep  2 02:22:56 2011 (4E607640)
LHidEqd.Sys                 Fri Sep  2 02:22:59 2011 (4E607643)
LHidFilt.Sys                Fri Sep  2 02:23:09 2011 (4E60764D)
LMouFilt.Sys                Fri Sep  2 02:23:15 2011 (4E607653)
e1e6232e.sys                Tue Oct 30 05:19:42 2012 (508F9BAE)
MpFilter.sys                Wed Oct 31 18:43:06 2012 (5091A97A)
[/font]

Amcgrap · Feb 6, 2013

I arrived this morning and the system was still up! I have a wireless setup at the office but I would need to get a wireless adapter for the subject desktop apply your first suggestion. As to your second suggestion, I ran the SFC as you suggested and it didn't find anything wrong with the integrity of the files. I have attached the zipped CBS file, although I am not sure it will be of any value.

I can call our IT Tech for him to bring a new network card to test, unless you have any other suggestions / tests that may disclose the problem again. I think the problem we also have here is that the problem is intermittent. What I didn't do was to uninstall the network driver and reinstall with the newer version; I just updated it, which seemed to correct the problem.

Please let me know what you think. Thanks.

writhziden · Feb 6, 2013

I recently started looking closer at these types of crashes when network crashes are involved even after updating network drivers. I look for any network related software that might cause conflicts that maybe we have not heard of or experienced before. For instance, your system has two pieces of software that utilize the network and may be involved in the crashes despite not showing up as so in the .dmp files.

About Applian

Free Computer Security - Personal Software Inspector (PSI) - Secunia

If I were a gambler, I would bet on the first of the two, but my advice would be to remove both programs and install one at a time to see if one triggers crashes again.

Uninstall or change a program

-----

Amcgrap · Feb 6, 2013

I have been using both packages for many months on my desktop and notebook without a hitch. The first one is "Replay Capture Suite", Capture All Video and Audio Sites with the Replay Capture Suite, which although a bit rustic has a few interesting and useful applications. The second one has been highly recommended as an application that checks for updates for all your software. I normally do not like updaters taking up resources but several Windows experts recommended it as a must have utility to keep your system always up to date.

I thought of another culprit, only because at the time of crashing it has always been open, and when long intervals of time pass without crashing it has been closed. That is "X1", in my opinion by far the best desktop search engine on the market. The only problem historically has been that it is a resource hog. This PC system has plenty of resources and never showed a problem with X1, although X1 itself occasionally will crash. Once you have X1 and become accustomed to it, it is almost a must to have for ultimate productivity.

Do you still think I should uninstall those 2 packages?

Also, funny enough, the system never crashes when I am using it. It has only generated BSOD's when idle.

writhziden · Feb 6, 2013

I'd need a more thorough list of what programs are installed than what is included in the autoruns utility. msinfo32.nfo is usually a better place to look. msinfo32.nfo is included in the collected files through the blue screen posting instructions. You can also get it by following the subsequent procedure and upload it to us in a compressed format:

Please upload your msinfo32.nfo file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.

I am not entirely sure whether it is one of those two programs or something similar.

The reason I suspected those two is their interface with the operating system is constantly running and they both interact with the network. The first does so through online streaming video. The second does so to keep up to date with a database of software that needs updating. There may be other software on your system that does similar, but the two I mentioned have drivers loaded at the time of crashes which lead me to wonder about them as possible culprits. Given that crashes occur during idle and appear to happen when the system tries to enter a hibernate or sleep state (likely sleep), I would suspect that a program/driver is interfering with your network adapter being able to turn off to allow sleep to occur.

You are welcome to keep those programs on the system, but at some point, consider removing them to see if the crashes stop.

Amcgrap · Feb 6, 2013

I have attached the zipped msinfo32.nfo file. Two things that continue to be peculiar:

I haven't made any major changes or installations of new software prior to the BSOD's occuring. The system was running well. See the only updates that I have made recently as of the date of the first BSOD.
Although the BSOD's happen when going into a sleep / hibernate state, that is also intermittent as this morning when I arrived to the office the unit powered up normally after being in sleep state throughout the evening.

I have other software that can show installed software or running software. Let me know if another look will help. Thanks.

writhziden · Feb 7, 2013

Programs that use your network regularly and I am unfamiliar with (in no particular order):

sync2pst for Outlook syncing between computers
Applian Replay Capture Suite
Free Computer Security - Personal Software Inspector (PSI) - Secunia

The last two have drivers being loaded, as I mentioned in my previous post.

Other than that, things look pretty good. You do have some software installed that is duplicated in terms of functionality. Not a problem if you are using all of it for certain features, but I thought I would provide that information in case you wanted to do some cleaning up and uninstall software you no longer use.

Amcgrap · Feb 7, 2013

Thanks for your comments. Sync2PST in my opinion is the best software to synchronize whole OUTLOOK PST files, or specific folders. It works seamlessly and for someone like myself that needs my notebook and desktop to be synchronized, it is seamless and painless. I have been using it for some time, as well as the other two you mentioned without problems.

I just came in this morning and found another BSOD. I don't think it is worth sending the DMP file unless you think it will be productive. Do you think uninstalling and re-installing the network driver is worth a shot? I also thought about shutting down X1 to see if for some reason it's being a resource hog has something to do with it. The only other thing I could do is replace my network card and see what happensa. The fact that the BSOD's never occur while I am using the PC is still puzzling.

Please let me know. Thanks.

writhziden · Feb 7, 2013

Before you replace the network card, you could uninstall and re-install the three programs I mentioned. It is always possible corruption of a network-heavy program is causing problems. The program itself may not be to blame, just the fact that the program became corrupted is enough to lead to these problems. Removing X1 is also not a bad step.

If you re-install the network driver, make sure to remove it completely from the system first.

To fully re-install the Intel Ethernet driver, use the following general steps.

First, download the driver you plan to install. Then do the next steps.
Click the Start Button
Right Click My Computer/Computer
Click Manage
Click Device Manager from the list on the left
Click Network adapters
Right click the Intel Ethernet PCI device
Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
Restart your computer only if Windows asks you to.
Install the latest driver for the device.

Alternatively:

Login as an adminstrative user.
First, download the driver you plan to install. Then do the next steps.
Click Start Button
Click Control Panel
Click Hardware and Sound
Click Device Manager (the last link under Devices and Printers)
Click Network adapters
Right click the Intel Ethernet PCI device
Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
Restart your computer only if Windows asks you to.
Install the latest driver for the device.

Amcgrap · Feb 8, 2013

I will do as you suggest, but just wanted to let you know that I shut down X1 yesterday, and the system was up this morning. It's not a problem shutting down X1 every evening, because it only indexes effectively during the time there is new work going on. I hate to chalk these problems up to X1, so I will uninstall and re-install the programs as suggested and uninstall and re-install the network drivers. Up to recently X1 was always left on without a problem. There was a recent update several days ago so perhaps that will help also.

I may not be able to do all the uninstalls and re-installs during work today, so it may be until Monday. Thanks again and have a nice weekend.

Amcgrap · Feb 14, 2013

I went through with the uninstall / re-install of the network drivers and the system on Monday as another BSOD occurred over the weekend. Since the re-install of the drivers the system has been up for 3-1/2 days without any events. Let's see what happens the next few days and this case may be closed. Unless you want me to send the mini-DMP and Memory.dmp, I have opted not to attach them because I assume the problem was the same on Monday.

Thanks for your help and I'll check in in a few days unless the problem reoccurs.

writhziden · Feb 14, 2013

Nope, no need for the .dmps unless you continue to have problems. Best wishes the full driver re-install fixes the problem. Look forward to your post in a few days hopefully stating that all is solved. :-}

Amcgrap · Feb 18, 2013

Hello again, well everything ran well until this morning, when 2 BSOD's have occurred. I have attached two files and for some reason I could not upload the Memory.DMP file, which I will continue to attempt. Could you please see if it is the same nagging problem with the network drivers?

Conditions are the same; i.e. when the machine is idle and in sleep mode is when the BSOD's occur.. Perhaps I should disable sleep mode and see if the problem persists?

BSOD's Again on Desktop

Well-known member

Attachments

Retired Admin

Well-known member

Retired Admin

Well-known member

Well-known member

Well-known member

Attachments

Retired Admin

Well-known member

Attachments

Administrator, .NET/UWP Developer

Well-known member

Administrator, .NET/UWP Developer

Well-known member

Attachments

Administrator, .NET/UWP Developer

Well-known member

Administrator, .NET/UWP Developer

Well-known member

Well-known member

Administrator, .NET/UWP Developer

Well-known member

Attachments