New
#1
blue screen after i shutdown, after a clean reformat
hello , I've got a dumpfile from a blue screen recently and was wondering if anybody could help me discern what type of error it was? I will upload the zipped dumpfile
hello , I've got a dumpfile from a blue screen recently and was wondering if anybody could help me discern what type of error it was? I will upload the zipped dumpfile
You need to grab all files following the Blue Screen of Death (BSOD) Posting Instructions
Right now the cause of your BSOD seems to be a very old driver of Driver Description: Intel(R) 82567LM Gigabit Network Connection try and update it to the latest version available: http://www.carrona.org/drivers/drive...d=e1y60x64.sys
Code:******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 9F, {3, fffffa800a8c3060, fffff80000b9c518, fffffa8010e07c80} Probably caused by : pci.sys Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_POWER_STATE_FAILURE (9f) A driver has failed to complete a power IRP within a specific time (usually 10 minutes). Arguments: Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time Arg2: fffffa800a8c3060, Physical Device Object of the stack Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack Arg4: fffffa8010e07c80, The blocked IRP Debugging Details: ------------------ DRVPOWERSTATE_SUBCODE: 3 IMAGE_NAME: pci.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc117 MODULE_NAME: pci FAULTING_MODULE: fffff88000f65000 pci CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0x9F PROCESS_NAME: System CURRENT_IRQL: 2 TAG_NOT_DEFINED_c000000f: FFFFF80000BA2FB0 STACK_TEXT: fffff800`00b9c4c8 fffff800`02ee8e23 : 00000000`0000009f 00000000`00000003 fffffa80`0a8c3060 fffff800`00b9c518 : nt!KeBugCheckEx fffff800`00b9c4d0 fffff800`02e85fa6 : fffff800`00b9c600 fffff800`00b9c600 00000000`00000001 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x29330 fffff800`00b9c570 fffff800`02e85326 : fffff800`03028700 00000000`03e3fc9d 00000000`00000000 fffffa80`0c0c0100 : nt!KiProcessTimerDpcTable+0x66 fffff800`00b9c5e0 fffff800`02e85e7e : 00000946`9e14e932 fffff800`00b9cc58 00000000`03e3fc9d fffff800`02ff6628 : nt!KiProcessExpiredTimerList+0xc6 fffff800`00b9cc30 fffff800`02e85697 : 0000026a`6ae3c3c1 0000026a`03e3fc9d 0000026a`6ae3c39f 00000000`0000009d : nt!KiTimerExpiration+0x1be fffff800`00b9ccd0 fffff800`02e826fa : fffff800`02ff2e80 fffff800`03000c40 00000000`00000000 fffff880`00000000 : nt!KiRetireDpcList+0x277 fffff800`00b9cd80 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd40 00000000`00000000 : nt!KiIdleLoop+0x5a STACK_COMMAND: kb FOLLOWUP_NAME: MachineOwner FAILURE_BUCKET_ID: X64_0x9F_3_e1y60x64_IMAGE_pci.sys BUCKET_ID: X64_0x9F_3_e1y60x64_IMAGE_pci.sys Followup: MachineOwner --------- 0: kd> !irp fffffa8010e07c80 Irp is active with 4 stacks 3 is current (= 0xfffffa8010e07de0) No Mdl: No System Buffer: Thread 00000000: Irp stack trace. cmd flg cl Device File Completion-Context [ 0, 0] 0 0 00000000 00000000 00000000-00000000 Args: 00000000 00000000 00000000 00000000 [ 0, 0] 0 0 00000000 00000000 00000000-00000000 Args: 00000000 00000000 00000000 00000000 >[ 16, 3] 0 e1 fffffa800b844050 00000000 fffff800030c3f70-fffffa800cfd9270 Success Error Cancel pending Unable to load image \SystemRoot\system32\DRIVERS\e1y60x64.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for e1y60x64.sys *** ERROR: Module load completed but symbols could not be loaded for e1y60x64.sys \Driver\e1yexpress nt!PopSystemIrpCompletion Args: 00016600 00000000 00000006 00000005 [ 0, 0] 0 0 00000000 00000000 00000000-fffffa800cfd9270 Args: 00000000 00000000 00000000 00000000 0: kd> lmvm e1y60x64 start end module name fffff880`07a00000 fffff880`07a49000 e1y60x64 T (no symbols) Loaded symbol image file: e1y60x64.sys Image path: \SystemRoot\system32\DRIVERS\e1y60x64.sys Image name: e1y60x64.sys Timestamp: Tue Aug 19 03:45:05 2008 (48A9ED61) CheckSum: 00051F0F ImageSize: 00049000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
oh my bad, here is the new dump file, the blue screen happened a few days ago , not sure if that is relevent.
Security App
Crashes indicate Kaspersky being a possible cause. Remove Kaspersky and replace with Microsoft Security Essentials to see if it provides more stability. Uninstallers (removal tools) for common antivirus softwareCode:kl1.sys Tue Jun 19 19:27:15 2012 (4FE07E33) klflt.sys Tue Mar 26 20:44:59 2013 (5151B46B) klif.sys Tue Mar 26 21:07:33 2013 (5151B9B5) klim6.sys Thu Aug 2 17:09:23 2012 (501A5FE3) klkbdflt.sys Mon Sep 3 19:55:35 2012 (5044B6D7) klmouflt.sys Mon Sep 3 20:21:58 2012 (5044BD06) kltdi.sys Fri Feb 15 20:37:32 2013 (511E482C) kneps.sys Tue Mar 5 15:09:23 2013 (5135B643)
Microsoft Security Essentials and Malwarebytes, both recommended from a strict BSOD perspective.
Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free
InformationDO NOT start the free trial of MalwareBytes. Deselect the option when prompted.
TipMake full scans with both separately.
These drivers need to be updated, if updates are not available remove the software with Revo Free.
RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver Driver Reference Table - lmimirr.sysCode:lmimirr.sys Wed Apr 11 04:32:45 2007 (461C108D)
LogMeIn/RemotelyAnywhere Kernel Information Provider Driver Reference Table - RaInfo.sysCode:RaInfo.sys Sat Jan 5 00:57:14 2008 (477E818A)
RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver Driver Reference Table - LMIRfsDriver.sysCode:LMIRfsDriver.sys Mon Jul 14 22:26:56 2008 (487B7E50)
Realtek High Definition Audio Function Driver Driver Reference Table - RTKVHD64.sysCode:RTKVHD64.sys Thu Jul 24 16:05:39 2008 (488853F3)
Intel(R) 82567LM Gigabit Network Connection Driver Reference Table - e1y60x64.sysCode:e1y60x64.sys Tue Aug 19 03:45:05 2008 (48A9ED61)
AMD storage controller driver - usually from the Windows 7 DVD Driver Reference Table - amdxata.sysCode:amdxata.sys Tue May 19 23:56:59 2009 (4A12F2EB)
NoteRevo Uninstaller
Download and install Revo Uninstaller free from here: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems
Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries). If required, reinstall the latest version available from the mfg website or a good source like filehippo.com
Basic checks: Please run these tests and report back the results
1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure
Install windows updates including Service Pack 1: Learn how to install Windows 7 Service Pack 1 (SP1)
BSOD BUGCHECK SUMMARY
Drivers:Code:Debug session time: Sun May 12 17:02:47.710 2013 (UTC + 6:00) Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\051213-32875-01.dmp] Missing Windows 7 Service Pack 1 Built by: 7600.16385.amd64fre.win7_rtm.090713-1255 System Uptime: 11 days 19:18:10.453 Probably caused by : pci.sys BugCheck 9F, {3, fffffa800a8c3060, fffff80000b9c518, fffffa8010e07c80} BugCheck Info: DRIVER_POWER_STATE_FAILURE (9f) Bugcheck code 0000009F Arguments: Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time Arg2: fffffa800a8c3060, Physical Device Object of the stack Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack Arg4: fffffa8010e07c80, The blocked IRP BUGCHECK_STR: 0x9F DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT PROCESS_NAME: System FAILURE_BUCKET_ID: X64_0x9F_3_e1y60x64_IMAGE_pci.sys MaxSpeed: 2670 CurrentSpeed: 2666 BiosVersion = SOX5810J.86A.3435.2009.0210.2311 BiosReleaseDate = 02/10/2009 иииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
Code:**************************Sun May 12 17:02:47.710 2013 (UTC + 6:00)************************** lmimirr.sys Wed Apr 11 04:32:45 2007 (461C108D) RaInfo.sys Sat Jan 5 00:57:14 2008 (477E818A) LMIRfsDriver.sys Mon Jul 14 22:26:56 2008 (487B7E50) RTKVHD64.sys Thu Jul 24 16:05:39 2008 (488853F3) e1y60x64.sys Tue Aug 19 03:45:05 2008 (48A9ED61) amdxata.sys Tue May 19 23:56:59 2009 (4A12F2EB) intelppm.sys Tue Jul 14 05:19:25 2009 (4A5BC0FD) safedrv.sys Mon Oct 25 11:12:57 2010 (4CC511D9) athurx.sys Wed Apr 20 16:07:45 2011 (4DAEB071) AtihdW76.sys Thu Feb 23 18:30:12 2012 (4F463154) GEARAspiWDM.sys Fri May 4 01:56:17 2012 (4FA2E2E1) kl1.sys Tue Jun 19 19:27:15 2012 (4FE07E33) klim6.sys Thu Aug 2 17:09:23 2012 (501A5FE3) klkbdflt.sys Mon Sep 3 19:55:35 2012 (5044B6D7) klmouflt.sys Mon Sep 3 20:21:58 2012 (5044BD06) atikmpag.sys Sat Nov 17 01:39:13 2012 (50A69661) atikmdag.sys Sat Nov 17 02:18:02 2012 (50A69F7A) kltdi.sys Fri Feb 15 20:37:32 2013 (511E482C) kneps.sys Tue Mar 5 15:09:23 2013 (5135B643) klflt.sys Tue Mar 26 20:44:59 2013 (5151B46B) klif.sys Tue Mar 26 21:07:33 2013 (5151B9B5)