Blue Screen - After Sleeping

MitchellEve · 24 Oct 2010

Hey Guys,

Just recently I've been getting Blue Screens after I wake up my computer after sleeping. It keeps give me the error of a physical memory dump and I'm guessing its because of a program that I have installed.

I'm just wondering if you guys have any suggestions, and is there anyway that I can view the specific details of the issue? I'm not sure if event viewer would show me that but if it can, would one of you post the sub area that would be under?

Thanks.

CarlTR6 · 24 Oct 2010

Please read these threads and post back. We will be glad to help you.

[1 - Novice] How to ask for help with a BSOD problem

https://www.sevenforums.com/crashes-d...tructions.html

MitchellEve · 24 Oct 2010

Thanks my friend, I'll post back after I follow these instructions. Sorry if I've frustrated you.

CarlTR6 · 24 Oct 2010

No frustration at all. We just want to see your problem solved. :)

MitchellEve · 24 Oct 2010

Alright, I've attached the files to this post. I hope that's okay, or would you rather me make a post in the Crashes forum?

Attachment 107370

Once again, let me know if you'd like me to make a thread in the Crashes forum.

CarlTR6 · 24 Oct 2010

Thanks for uploading the files. Unfortunately, the dump is corrupt and much of the needed information is not there.

Error code D1, DRIVER_IRQL_NOT_LESS_OR_EQUAL. Usual causes: Device driver

Code:

Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02e15000 PsLoadedModuleList = 0xfffff800`03052e50
Debug session time: Sun Oct 24 00:35:22.388 2010 (GMT-4)
System Uptime: 0 days 4:25:52.666
Loading Kernel Symbols
.................................................
Loading User Symbols
Missing image name, possible paged-out or corrupt data.
Loading unloaded module list
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.Missing image name, possible paged-out or corrupt data.
.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {168, 2, 1, fffff880040ab84e}

Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000168, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff880040ab84e, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800030bd0e0
 0000000000000168 

CURRENT_IRQL:  2

FAULTING_IP: 
+61a5952f00d3da54
fffff880`040ab84e ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff80000ba2400 -- (.trap 0xfffff80000ba2400)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff88004194418 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880040ab84e rsp=fffff80000ba2598 rbp=0000000000000001
 r8=0000000000000000  r9=0000000000000000 r10=fffffa80044e7000
r11=fffff88004140a28 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz ac po nc
fffff880`040ab84e ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e84ca9 to fffff80002e85740

STACK_TEXT:  
fffff800`00ba22b8 fffff800`02e84ca9 : 00000000`0000000a 00000000`00000168 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff800`00ba22c0 fffff800`02e83920 : fffffa80`031f000e fffff880`04194418 00000000`00000000 fffffa80`0589c580 : nt!KiBugCheckDispatch+0x69
fffff800`00ba2400 fffff880`040ab84e : fffff880`040ab913 00000000`00000000 fffff800`034011bc 00000000`00000000 : nt!KiPageFault+0x260
fffff800`00ba2598 fffff880`040ab913 : 00000000`00000000 fffff800`034011bc 00000000`00000000 fffffa80`0339f850 : 0xfffff880`040ab84e
fffff800`00ba25a0 00000000`00000000 : fffff800`034011bc 00000000`00000000 fffffa80`0339f850 fffffa80`033a0f90 : 0xfffff880`040ab913


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiPageFault+260
fffff800`02e83920 440f20c0        mov     rax,cr8

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiPageFault+260

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0xD1_nt!KiPageFault+260

BUCKET_ID:  X64_0xD1_nt!KiPageFault+260

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff880`00f30000 fffff880`00f87000   ACPI     ACPI.sys     unavailable (00000000)
fffff880`0111a000 fffff880`01125000   amdxata  amdxata.sys  unavailable (00000000)
fffff880`00d99000 fffff880`00da2000   atapi    atapi.sys    unavailable (00000000)
fffff880`00da2000 fffff880`00dcc000   ataport  ataport.SYS  unavailable (00000000)
fffff880`00c00000 fffff880`00cc0000   CI       CI.dll       unavailable (00000000)
fffff880`01850000 fffff880`01880000   CLASSPNP CLASSPNP.SYS unavailable (00000000)
fffff880`00d21000 fffff880`00d7f000   CLFS     CLFS.SYS     unavailable (00000000)
fffff880`01000000 fffff880`01073000   cng      cng.sys      unavailable (00000000)
fffff880`0183a000 fffff880`01850000   disk     disk.sys     unavailable (00000000)
fffff880`01171000 fffff880`01185000   fileinfo fileinfo.sys unavailable (00000000)
fffff880`01125000 fffff880`01171000   fltmgr   fltmgr.sys   unavailable (00000000)
fffff880`013dc000 fffff880`013e6000   Fs_Rec   Fs_Rec.sys   unavailable (00000000)
fffff880`01800000 fffff880`0183a000   fvevol   fvevol.sys   unavailable (00000000)
fffff880`018d3000 fffff880`0191d000   fwpkclnt fwpkclnt.sys unavailable (00000000)
fffff800`033f1000 fffff800`0343a000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`019cd000 fffff880`019d6000   hwpolicy hwpolicy.sys unavailable (00000000)
fffff800`00bab000 fffff800`00bb5000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`013b1000 fffff880`013cb000   ksecdd   ksecdd.sys   unavailable (00000000)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  unavailable (00000000)
fffff880`00cc9000 fffff880`00d0d000   mcupdate mcupdate.dll unavailable (00000000)
fffff880`00d7f000 fffff880`00d99000   mountmgr mountmgr.sys unavailable (00000000)
fffff880`00f90000 fffff880`00f9a000   msisadrv msisadrv.sys unavailable (00000000)
fffff880`01191000 fffff880`011ef000   msrpc    msrpc.sys    unavailable (00000000)
fffff880`019bb000 fffff880`019cd000   mup      mup.sys      unavailable (00000000)
fffff880`014cf000 fffff880`015c1000   ndis     ndis.sys     unavailable (00000000)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    unavailable (00000000)
fffff800`02e15000 fffff800`033f1000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0120e000 fffff880`013b1000   Ntfs     Ntfs.sys     unavailable (00000000)
fffff880`00dcc000 fffff880`00df7000   nvstor   nvstor.sys   unavailable (00000000)
fffff880`010f8000 fffff880`0111a000   nvstor64 nvstor64.sys unavailable (00000000)
fffff880`00fda000 fffff880`00fef000   partmgr  partmgr.sys  unavailable (00000000)
fffff880`00f9a000 fffff880`00fcd000   pci      pci.sys      unavailable (00000000)
fffff880`00e71000 fffff880`00e78000   pciide   pciide.sys   unavailable (00000000)
fffff880`00fef000 fffff880`00fff000   PCIIDEX  PCIIDEX.SYS  unavailable (00000000)
fffff880`013cb000 fffff880`013dc000   pcw      pcw.sys      unavailable (00000000)
fffff880`00d0d000 fffff880`00d21000   PSHED    PSHED.dll    unavailable (00000000)
fffff880`01185000 fffff880`01191000   PxHlpa64 PxHlpa64.sys unavailable (00000000)
fffff880`01981000 fffff880`019bb000   rdyboost rdyboost.sys unavailable (00000000)
fffff880`01979000 fffff880`01981000   spldr    spldr.sys    unavailable (00000000)
fffff880`01096000 fffff880`010f8000   storport storport.sys unavailable (00000000)
fffff880`01602000 fffff880`017ff000   tcpip    tcpip.sys    unavailable (00000000)
04fcf400`20000036 04fcf400`40000061   Unknown_Module_04fcf400_20000036 Unknown_Module_04fcf400`20000036 unavailable (00000000)
fffff880`00fcd000 fffff880`00fda000   vdrvroot vdrvroot.sys unavailable (00000000)
fffff880`0191d000 fffff880`0192d000   vmstorfl vmstorfl.sys unavailable (00000000)
fffff880`00e00000 fffff880`00e15000   volmgr   volmgr.sys   unavailable (00000000)
fffff880`00e15000 fffff880`00e71000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff880`0192d000 fffff880`01979000   volsnap  volsnap.sys  unavailable (00000000)
fffff880`00e7d000 fffff880`00f21000   Wdf01000 Wdf01000.sys unavailable (00000000)
fffff880`00f21000 fffff880`00f30000   WDFLDR   WDFLDR.SYS   unavailable (00000000)
fffff880`00f87000 fffff880`00f90000   WMILIB   WMILIB.SYS   unavailable (00000000)
Missing image name, possible paged-out or corrupt data.

Unloaded modules:
04607fa3`046079a0 04607fa4`03c88740   Unknown_Module_04607fa3`046079a0
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607fa8`04607900 04607fa9`03c88740   Unknown_Module_04607fa8`04607900
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607fad`04607860 04607fae`03c88740   Unknown_Module_04607fad`04607860
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f76`04607f40 04607f77`03c88740   Unknown_Module_04607f76`04607f40
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f7b`04607ea0 04607f7c`03c88740   Unknown_Module_04607f7b`04607ea0
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f80`04607e00 04607f81`03c88740   Unknown_Module_04607f80`04607e00
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f85`04607d60 04607f86`03c88740   Unknown_Module_04607f85`04607d60
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f8a`04607cc0 04607f8b`03c88740   Unknown_Module_04607f8a`04607cc0
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f8f`04607c20 04607f90`03c88740   Unknown_Module_04607f8f`04607c20
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f94`04607b80 04607f95`03c88740   Unknown_Module_04607f94`04607b80
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f99`04607ae0 04607f9a`03c88740   Unknown_Module_04607f99`04607ae0
    Timestamp: unavailable (00000000)
    Checksum:  00000000
Missing image name, possible paged-out or corrupt data.
04607f9e`04607a40 04607f9f`03c88740   Unknown_Module_04607f9e`04607a40
    Timestamp: unavailable (00000000)
    Checksum:  00000000

The dump indicates a driver problem. Because of the corrupted data, I am unable to determine the dates of your drivers to see if any of them are outdated. I do find one that I know is outdated an is a problem driver.

PxHlpa64.sys - Sonic CD/DVD driver (used by many different CD/DVD programs) pxHelp20.sys programs
Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished.

I recommend that you enable Driver Verifier following the instructions in this tutorial. Driver Verifier will cause BOD's if it encounters a faulty driver. Use you computer normally while Driver Verifier is running. Upload any and all BSOD's generated by Driver Verifier.

Driver Verifier - Enable and Disable