computer would not go to sleep fully

red123 · 10 Jun 2013

Once in awhile when I put my computer to sleep, my monitor will shut off, but the remainder of my components (fans, keyboard, mouse, etc.) remain active. Pressing the shift key more than 5 times will activate stick key and my mouse led remains on. Pressing any key will not wake my computer from this state unfortunately. I need to do a hard reset every single time this happens. Anyone have any idea what is causing this?

My event log shows this around the time when this happens. Not sure if it is related.
Event 1014, DNS Client Events
Name resolution for the name isatap.hsd1.ca.comcast.net timed out after none of the configured DNS servers responded.

This started ever since I did my yearly routine of reformatting my computer. The only thing that is different is that I updated my graphics card driver to the latest version. I am using ATI HD5850.

gregrocker · 10 Jun 2013

Did you try the driver delivered by Windows Updates after enabling Automatically deliver drivers via Windows Update (Step 3). This is how Win7 delivers drivers it wants.

Since the Display driver is most important for the sleep and hibernate functions, you may have to roll back to the one which works if you can't find another solution.

First try the fixes for Sleep Mode Problems - Vista Forums

You shouldn't have to reinstall Win7 every year, since once you get a perfect Clean Reinstall
you can save a backup image to use in place of reinstall. But make sure you are sticking closely to the steps in the blue link since your problem seems to be driver-related and many try to apply old XPired rules for drivers to the first driver-complete OS and find themselves in trouble.

red123 · 10 Jun 2013

It's a little habit of mine started way before the age of SSD. Anyway, I updated my power settings to the recommended. Let's see if this works. Thanks

red123 · 11 Jun 2013

I updated everything from Windows Update and rollback my drivers, but started getting crashes whenever I sleep now. This is my minidump. Please advise. Thanks.

koolkat77 · 11 Jun 2013

Hi,

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {10, 2, 0, fffff880021bbc83}

*** WARNING: Unable to verify timestamp for nlndis.sys
*** ERROR: Module load completed but symbols could not be loaded for nlndis.sys
Probably caused by : nlndis.sys ( nlndis+19c8 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880021bbc83, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003113100
GetUlongFromAddress: unable to read from fffff800031131c0
 0000000000000010 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
ndis!NdisReturnPackets+73
fffff880`021bbc83 488b7910        mov     rdi,qword ptr [rcx+10h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88005280880 -- (.trap 0xfffff88005280880)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000098 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880021bbc83 rsp=fffff88005280a10 rbp=0000000000000001
 r8=fffffa800a795cb0  r9=fffffa8006b592d0 r10=fffffa800a795020
r11=fffffa800a795e30 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
ndis!NdisReturnPackets+0x73:
fffff880`021bbc83 488b7910        mov     rdi,qword ptr [rcx+10h] ds:00000000`00000010=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002edb1a9 to fffff80002edbc00

STACK_TEXT:  
fffff880`05280738 fffff800`02edb1a9 : 00000000`0000000a 00000000`00000010 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`05280740 fffff800`02ed9e20 : fffffa80`0c781110 fffff880`05af1e66 fffff801`00000001 fffffa80`06b793d0 : nt!KiBugCheckDispatch+0x69
fffff880`05280880 fffff880`021bbc83 : fffffa80`0a795000 fffff880`021085c4 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x260
fffff880`05280a10 fffff880`072719c8 : fffffa80`0a1b81a0 00000000`00000000 00000000`00000000 00000000`00000001 : ndis!NdisReturnPackets+0x73
fffff880`05280a60 fffffa80`0a1b81a0 : 00000000`00000000 00000000`00000000 00000000`00000001 fffffa80`0a795e30 : nlndis+0x19c8
fffff880`05280a68 00000000`00000000 : 00000000`00000000 00000000`00000001 fffffa80`0a795e30 fffff880`021bb9e0 : 0xfffffa80`0a1b81a0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nlndis+19c8
fffff880`072719c8 ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nlndis+19c8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nlndis

IMAGE_NAME:  nlndis.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d585625

FAILURE_BUCKET_ID:  X64_0xD1_nlndis+19c8

BUCKET_ID:  X64_0xD1_nlndis+19c8

Followup: MachineOwner
---------

5: kd> lmvm nlndis
start             end                 module name
fffff880`07270000 fffff880`077d2000   nlndis   T (no symbols)           
    Loaded symbol image file: nlndis.sys
    Image path: \SystemRoot\system32\DRIVERS\nlndis.sys
    Image name: nlndis.sys
    Timestamp:        Mon Feb 14 04:07:33 2011 (4D585625)
    CheckSum:         000126CB
    ImageSize:        00562000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Your BSOD was caused by this driver: nlndis.sys Driver Description: NetLimiter driver

You should update to the latest version available from this link: Driver Reference Table - nlndis.sys

Kaspersky also seems to be contributing to these crashes:
Driver Reference Table - klim6.sys

Code:

fffff880`05280818  fffff880`05450c7fUnable to load image \SystemRoot\system32\DRIVERS\klim6.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klim6.sys
*** ERROR: Module load completed but symbols could not be loaded for klim6.sys
 klim6+0x2c7f

Driver Reference Table - klflt.sys

Code:

fffff880`05280708  fffff880`04f2dd63Unable to load image \SystemRoot\system32\DRIVERS\klflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klflt.sys
*** ERROR: Module load completed but symbols could not be loaded for klflt.sys
 klflt+0x2d63

Driver Reference Table - kneps.sys

Code:

fffff880`052806a8  fffff880`05af74e2Unable to load image \SystemRoot\system32\DRIVERS\kneps.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for kneps.sys
*** ERROR: Module load completed but symbols could not be loaded for kneps.sys
 kneps+0xd4e2

I would recommend that you remove Kaspersky and replace with Microsoft Security Essentials to see if it provides more stability. Uninstallers (removal tools) for common antivirus software. Microsoft Security Essentials and Malwarebytes are recommended from a strict BSOD perspective. They do not cause blue screens on the system as other AV products do.

Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free

Information

Do not start the free trial of MalwareBytes, unselect that option when prompted.
Update and make full scans with both separately.

Update this driver also: Driver Description: Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
Driver Reference Table - Rt64win7.sys

Tip

How to clean left over drivers
Sometimes drivers remain, not completely uninstalled. Follow this tutorial for complete removal of drivers of the particular program: How to Clean Left Over Driver Files with Driver Sweeper

Click on the Start
Control Panel
Programs
Uninstall a program
Uninstall everything related to the software

Delete remnants of its drivers/older drivers using Driver Sweeper

Good luck :)

red123 · 11 Jun 2013

Wow! Good catch! I have been using a very out of date NetLimiter so most likely getting the driver update for my network card from Microsoft caused the instability. It was totally random as I have been using the same NetLimiter version for years. I'll leave Kaspersky installed for now and continue to monitoring anymore crashes. Thanks :)

koolkat77 · 11 Jun 2013

Alright :)