Had to force shut down, BSOD after. Created dump file restarts okay.

aberfoyle · 26 Feb 2013

HP DV7 6143cl
Windows® 7 Home Premium with Service Pack 1 (64-bit)

I had something hang up and prevented shutdown so I forced shutdown and of course a blue screen occurred afterwards.

A couple of days before the 'hang up - forced shutdown - blue screen' I noticed high CPU usage and the fan running at high speed. It was not until I put the computer in sleep mode and exited that I saw the message window saying (the bits I remember)

Debug Assertion Failed!
Svchost plugandplay
Abort Retry Ignore

I clicked Abort and the CPU went back to normal.

The next day I installed the software for a WD Passport 2 TB external hard drive. It was installing and trying to update multiple components at the same time but ultimately installed and completed the first back up.

Later that day Windows update came on and tried to update the WD SES driver but failed because the device was not connected. (per the update error message).

Finally the hang up - forced shutdown – blue screen occurred. I was just shutting down as I normally would. I have automatically restart turned off so I restarted normally and looked at the dump file with Who Crashed hoping something obvious would be shown.

I downloaded the SF Diagnostic Tool and zipped the results with 7 Zip

The computer has started and shut down normally several times.

Northernsoul55 · 27 Feb 2013

Hi,

Your crashes are related to possible memory corruption and Norton AV / Symantec:

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000009F, {4, 258, fffffa8007374b50, fffff80000b9c3d0}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

https://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

fffff880`0397caa8 fffff880`0153e2deUnable to load image \SystemRoot\system32\drivers\NISx64\1305000.091\SYMDS64.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMDS64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMDS64.SYS
SYMDS64+0x52de
fffff880`0397d3d8 fffff880`03230bd5Unable to load image \SystemRoot\System32\Drivers\NISx64\1305000.091\SYMNETS.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMNETS.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMNETS.SYS
SYMNETS+0x1cbd5
fffff880`0397ccc8 fffff880`04aa15a3Unable to load image \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.1.3\Definitions\BASHDefs\20120215.001_468\BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
BHDrvx64+0x875a3
Relates to: Symantec Heuristics Driver

fffff880`03767e68 fffff880`0d62fb87Unable to load image \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130222.001\IDSvia64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for IDSvia64.sys
*** ERROR: Module load completed but symbols could not be loaded for IDSvia64.sys
IDSvia64+0xab87
Relates to: Norton Internet Security.

These four faulting drivers relate to: Symantec/ Norton NIS/ N360 driver
I would advise to remove Norton AV and Symantecs:

https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us?product=home&version=1

I would advise as an alternative to install Microsoft Security Essentials.
Recommended from a strict BSOD perspective, compatibility & stability
compared to other antiviruses/internet security software. Very light and free.

Microsoft Security Essentials - Microsoft Windows

Also run SFC to check the integrity of all Windows 7 system files:

Click on the Start > Type in search cmd
Right click cmd at top and Run as Administrator
Type SFC /scannow at the prompt (note the space between SFC and /scannow)

https://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Post back any results.

Cheers

Dave

aberfoyle · 28 Feb 2013

Downloaded the memtest86 file and burned to disc. I had to change the boot order for it to run, but once started I let it run for several hours. It said 0 errors.
I scheduled and check disk and it said no bad files, no bad sectors.
I will run the system file checker this weekend.

A lot of computer techs really dislike Norton. Why is that? Oddly it comes preloaded on many machines.

Golden · 28 Feb 2013

aberfoyle said:

A lot of computer techs really dislike Norton. Why is that? Oddly it comes preloaded on many machines.

It is a very common cause of BSOD's seen here, although not exclusively so.

Arc · 28 Feb 2013

Golden said:

aberfoyle said:

A lot of computer techs really dislike Norton. Why is that? Oddly it comes preloaded on many machines.

It is a very common cause of BSOD's seen here, although not exclusively so.

Norton and McAfee, they are equally likely BSOD causer. But if it does not crash, Norton is a very good AV.

Northernsoul55 · 28 Feb 2013

Its not that we dont dislike Norton, (i really dislike Norton btw

) its the fact it is causing your crashes that i recommended to remove, and for that reason only :)

aberfoyle · 06 Mar 2013

Okay a similar thing happened again. This time i let the machine continue to attempt shutdown untll it produced a stop error. This time it would not start normally until startup repair ran.
I am begining to understand what the following means. Somewhat.

The DRIVER_POWER_STATE_FAILURE bug check has a value of 0x0000009F.
This bug check indicates that the driver is in an inconsistent or invalid power state.
0x4 (Windows XP or later)
Time-out value, in seconds.
The thread currently holding onto the Plug-and-Play (PnP) lock.
The power state transition timed out waiting to synchronize with the PnP subsystem.

I don't understand how a computer can work so well when running and give no indication of a problem (CPU and memory usage normal) but fail to sheu down.

Please let me know what you see in the SF tool files. If it is Norton again I will remove it.
Thanks in advance

I will probably have to up load a new SF tool file. It was compressed with 7zip but got renamed .zip.

Northernsoul55 · 06 Mar 2013

Hi,

Yes it is mainly Norton as well as Intel Storage Drivers:

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1000009F, {4, 258, fffffa800731cb50, fffff80000b9c3d0}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption
Followup: memory_corruption
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state

Unable to load image \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130301.001\BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
BHDrvx64+0x94af3

Refers to: Symantec Heuristics Driver (Part of Norton)

Unable to load image \SystemRoot\System32\Drivers\NISx64\1403000.024\SRTSP64.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP64.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP64.SYS

Refers to: Symantec Real Time Storage Protection

Please remove Norton:

https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us?product=home&version=1

Unable to load image \SystemRoot\system32\DRIVERS\iaStor.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys

Refers to: Intel Storage drivers

Please run the Intel utility to see if it picks up newer drivers:

http://www.intel.com/p/en_US/support/detect

Did you run the SFC? You did not say? If not please run it.

Post back any developments / results
Cheers
Dave

aberfoyle · 06 Mar 2013

Yes I did run the SFC but zipped with 7 zip and then called it a .zip file and it cannot be opened. I forgot that I can click send to compressed folder and not use a stand alone zip app.
I will upload the SFC I made right after the event.

I ran the intel driver detection a few days ago at someone elses suggection.
The chipset drivers were up to date. I will run it again to check the Storage Drivers

I will post again later.

aberfoyle · 06 Mar 2013

Graphics Driver (Newer Driver Available)
Intel Chipset Software Installation Utility (Chipset INF)
Audio Driver for Intel Desktop Board
Wireless Networking (WiFi) (Newer Driver Available)
Wired Networking
Intel® Wireless Display Software (Newer Software Available)

It did not find the storage drivers (iaStor?)

The graphics driver actually is an AMD / Intel package from HP

The file aberfoyle 2 on this post is the latest SFC

BTW I ordered recovery discs from HP just in case