BSOD intermittent

BeachMan247 · Nov 8, 2010

I have a Lenovo 4313CTO Windows 7 (64-bit) preinstalled OS fully patched from MS and Lenovo.

Additional Info:
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 11/6/2010 03:02:52 AM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAP20-WIN7
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000009f (0x0000000000000003, 0xfffffa8003bcfbb0, 0xfffff80004a64518, 0xfffffa800873c710). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: .
Event Xml:

BugcheckCode159BugcheckParameter10x3BugcheckParameter20xfffffa8003bcfbb0BugcheckParameter30xfffff80004a64518BugcheckParameter40xfffffa800873c710SleepInProgresstruePowerButtonTimestamp0

param10x0000009f (0x0000000000000003, 0xfffffa8003bcfbb0, 0xfffff80004a64518, 0xfffffa800873c710)param2C:\Windows\MEMORY.DMPparam3

How do I fix this problem?

Jonathan_King · Nov 8, 2010

Welcome to SF!

You're getting consistent 9F bugchecks, a sure sign of a driver problem.

Could you enable driver verifier?

http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

...Summary of the dumps

Code:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Nov  5 06:31:39.771 2010 (UTC - 5:00)
System Uptime: 0 days 15:22:39.395
Probably caused by : ntkrnlmp
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_ntkrnlmp
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Thu Oct 28 12:30:09.831 2010 (UTC - 5:00)
System Uptime: 0 days 1:47:56.280
Probably caused by : ntkrnlmp
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_ntkrnlmp
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Tue Oct 26 11:39:44.991 2010 (UTC - 5:00)
System Uptime: 0 days 13:08:43.490
Probably caused by : ntkrnlmp
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_ntkrnlmp
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Mon Oct 25 20:10:14.814 2010 (UTC - 5:00)
System Uptime: 1 days 8:58:11.389
Probably caused by : ntkrnlmp
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_ntkrnlmp
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

BeachMan247 · Nov 9, 2010

Driver Verifier created more BSOD

I enabled Driver Verifer, rebooted and got repeated BSOD until it asked me to do a System Restore (which I did) to get back into Windows.

I am now back into Windows. What's the next step?

How do I get the results of the Driver Verifier BSOD's to you?

cybercore · Nov 9, 2010

BeachMan247 said:
I enabled Driver Verifer, rebooted and got repeated BSOD until it asked me to do a System Restore (which I did) to get back into Windows.

I am now back into Windows. What's the next step?

How do I get the results of the Driver Verifier BSOD's to you?

Get a few bsod's with DV on, and then attach the crash dumps.

BeachMan247 · Nov 9, 2010

more BSOD this morning

Here is the most recent dump (after another BSOD in windows this morning). This is after system restore (from boot BSOD by enabling Driver Verifier) from last night.

I do not know if this captured the Driver Verifier BSOD's from last night.

I will reenable Driver Verifier and post the resulting dumps, as requested.

Jonathan_King · Nov 9, 2010

Unfortunately, that didn't include the verifier-enabled dumps. We can work on some other probable causes though.

McAfee is known to cause BSODs, so remove that with this tool: http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

MSE is the recommended replacement: http://www.microsoft.com/security_essentials

PGP has some old drivers loaded, and according to WER, crashed at least once. I recommend that you remove that, or at least update it if possible.

Do you have a USB camera, or webcam? If so, what is is?

rasl2tp.sys is mentioned in 3 out of 4 dumps:

Code:

FAULTING_MODULE: fffff88004538000 rasl2tp

It seems to be a Windows networking driver, and doesn't conflict with the first dump's line:

Code:

FAULTING_MODULE: fffff88005400000 AgileVpn

To me, that implies a network error. Removing McAfee may help that.

Anyway, make sure Verifier is enabled, and wait for a crash. Then check in C:\Windows\Minidump for dumps dated from today or newer, and if present, upload them: http://www.sevenforums.com/tutorials/83172-dump-files-upload-seven-forums.html

BeachMan247 · Nov 9, 2010

Whew!! It took me all morning to recover from reenabling DV as requested.

I did a manual Restore Point, enabled DV and rebooted:

1st-3rd reboots: The system would not reboot into windows and hung with the glowing flags. HD stops working. Had to do a hard boot each time (power unplugged, no battery)

4th reboot: hit F8 to get to system restore. windows picked my manual Restore Point. rebooted

5th reboot: windows booted. I logged in but it complained of no profile in c:\windows\system32.... no personal destop icons, different skin. ran a BSOD Dump & System File Collection app. and got a BSOD!!

6th-10th reboots: login screens, but no login "The User Profile Service failed the login. User profile cannot be loaded."

11th reboot: into safe mode, did a prior, automatic restore point. rebooted

12th reboot: Finally back into windows!! Ran a BSOD Dump & System File Collection app
which is attached here.

NOTE: no recent dumps in minidump, but I included all that I found. (maybe this is when it started happening)

USB camera, or webcam is embedded in the laptop lid with the latest lenovo drivers (it is generic "Integrated Camera" in Device Mangler, properties say it is Ricoh, .

Jonathan_King · Nov 9, 2010

I guess all I can recommend at this point is keep trying. Enable Verifier again, and just keep trying to boot into Windows until you succeed. Leave it frozen for maybe 60 seconds, and if no joy, reboot and try again.

I'd say give up after about 10 tries.

BeachMan247 · Nov 9, 2010

OK. Here goes...

BeachMan247 · Nov 9, 2010

hmm...nothing but BSOD's and system restores. I have attached the BSOD after DV enabling.

Can I try selecting individual drivers to pick on one at a time?

Jonathan_King · Nov 9, 2010

It appears your Lenovo Display Filter driver is causing the crashes. I recommend that you uninstall Lenovo ThinkVantage Tools, and then check in C:\Windows\System32\drivers for a lvlddrv.sys file. If it remains after a reboot, rename it to lvlddrv.old, and then reboot.

If you haven't done so already, disable driver verifier, and hope the system stays stable.

BeachMan247 · Nov 9, 2010

What is Lenovo's "Display Filter" driver?

Do I have to uninstall the entire toolset to get rid of this? (I use it to update the Lenovo drivers/software/bios/etc..)

The tools also include the management software for the WWAN Broadband, Internet connection switching, Fingerprint reader, Power controls, Airbag protection, Backup and restore, etc...

can't I simply rename the file lvlddrv.sys to lvlddrv.old ?

Jonathan_King · Nov 10, 2010

Doing so will certainly "break" some program, the program or service to which the driver belongs. Thus, I like to leave that as a last resort.

If you want to just rename the file, I guess go ahead. Let's keep an eye on your Event Logs though, and perhaps we can determine the program using the driver from the looks of the error.

Just upload a new jcgriff2 report in a couple of days.

BeachMan247 · Nov 11, 2010

This happend this morning. It gave a minidump that is included

Jonathan_King · Nov 11, 2010

That driver is still loading in RAM:

Code:

lvlddrv.sys       Fri Feb 26 00:00:27 2010 (4B87556B)

The good news is, I learned what that driver is. It is for your port replicator. Remove that, and uninstall and software, and hopefully the BSODs will stop.

...Summary of the dumps

Code:

[font=lucida console]
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Thu Nov 11 09:20:25.709 2010 (UTC - 5:00)
System Uptime: 1 days 13:00:52.176
Probably caused by : ntkrnlmp
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_ntkrnlmp
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

BSOD intermittent

New member

My Computer

New member

My Computer

New member

My Computer

cybercore

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer