Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: recovery from unexpected shutdown message

30 Sep 2010   #1

64 bit
recovery from unexpected shutdown message

Discovered a message after another authorized user had used the computer. The message had some information about BCCode BCP1,2,3,4 O.S. version 6_1_7600 and service pack 0_0 product 768_1. It also directed to the location of minidump files. I have 3 from july 6, sept 8 and today. I tried to open the last file (with an extension dmp) to attach to this message but I can not open it. Please advise what to do. Thanks in advance

My System SpecsSystem Spec
30 Sep 2010   #2
Hopalong X

Windows7 Pro 64bit SP-1; Windows XP Pro 32bit

I can't fix it but if you zip the folder it can be posted.
Right click the file go down curtain to "Send To". In the new curtain click "Compressed zipped folder".
Upload that zip folder.

Then one of the "Specialists" can take a look for you.
My System SpecsSystem Spec
30 Sep 2010   #3

64 bit

Followed your sugestion but it comes with an error message that it can not be read or it is not authorized
My System SpecsSystem Spec

30 Sep 2010   #4
Hopalong X

Windows7 Pro 64bit SP-1; Windows XP Pro 32bit

I know what I did.

Right click the folder then left click copy. Then right click in the open area of the Windows screen as shown in picture.
Then left click paste.
A copy of the folder is now on the desk top.
Then zip the copy as I posted above.
When you know your finished with the copy just delete it.
My System SpecsSystem Spec
01 Oct 2010   #5

64 bit

Thanks for the advise. It works. Now I have the two files on the desktop. Should I just drag the zipped file into this area? If I do that it comes with some sort of warning. It is OK just to go ahead?
My System SpecsSystem Spec
01 Oct 2010   #6
Hopalong X

Windows7 Pro 64bit SP-1; Windows XP Pro 32bit

This is easier than it reads to do.
Open a second browser session side by side if you need to read and see as you go.
Much easier when I do things the first time.

1)In the Quick Reply box at the bottom of this page click go advanced.
2)Under Additional Options click manage attachments.
3)The new page top left click Browse button.
4)Find your Desktop and then the file you want to upload in the curtain.
5)On the right side of page click top UPLOAD button and wait for attachment to upload.
6)It will show on left side of screen under "Upload File from a URL" as Attachment when uploaded. If you have two files repeat step 3 back to here.
7)After upload is complete look at the top right of Manage attachments page is "Close this Window." Click it.

8)You will then see your file under "Additional Options" Attach files box.
Click submit reply.

You will feel unsure the first time you do it. Then you will say to yourself how easy when your done. I did my first time.

PS- If you mess up try it again. You won't loose the file. It uploads a copy of the copy on the desk top.
My System SpecsSystem Spec
01 Oct 2010   #7

64 bit

I succeded. Thanks! I had a couple of previous crashes recorded in minidump that I could submit later. Would that be Ok? They are slightly different. just from their size. Thanks again.
My System SpecsSystem Spec
01 Oct 2010   #8
Hopalong X

Windows7 Pro 64bit SP-1; Windows XP Pro 32bit

Excellent now I'll see if I can get you some assistance.
They will let you know what else they need and the other files you speak of get them up when you can.

I can help you to here but clueless on the file.

I posted for some help from the experts.
When one of them gets on line or may already be on line they will assist.
My System SpecsSystem Spec
01 Oct 2010   #9

64 bit

Would you please examminne these previous minidump filesas well. Perhaps there is a pattern to what is causing the crashes. It is a new computer and already had Dell relace thhe hard drive beccause of ann earlier very bad crash. Thanks for all your help.
My System SpecsSystem Spec
01 Oct 2010   #10

Windows 7 Ultimate 32 bit

The last two files came through as shortcuts and I cannot open them in WinDeBug. Try to zip them again and make sure you are not zipping shortcuts.

Stop error code 9F, DRIVER_POWER_STATE_FAILURE - likely caused by a device driver. The dump blames tcpip.sys which is a Windows system driver and not likely the real cause. Whenever we see tcpip.sys blamed one of the prime suspects is a third party antivirus and/or firewall interfering.

To begin your troubleshooting, I recommend that you completely uninstall Norton/Symnatec using this uninstall tool: Info > Tool. This may not be the cause of your problem; but Norton is know to cause BSOD's on some Win 7 systems. So let's eliminate it as a possibility. When you get your system stable, you can try it again. In the mean time, download and install Microsoft Security Essentials and make sure Windows Firewall is turned on. Norton is mentioned in the stack of the dump which means it is part of the crash.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\Owner\AppData\Local\Temp\\093010-19344-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02817000 PsLoadedModuleList = 0xfffff800`02a54e50
Debug session time: Thu Sep 30 10:47:58.294 2010 (GMT-4)
System Uptime: 0 days 22:10:40.167
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck 1000009F, {4, 258, fffffa8007b984a0, fffff80000b9c510}

Probably caused by : tcpip.sys ( tcpip!FlPnpEvent+17d )

Followup: MachineOwner

0: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

A driver is causing an inconsistent power state.
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
Arg2: 0000000000000258, Timeout in seconds.
Arg3: fffffa8007b984a0, The thread currently holding on to the Pnp lock.
Arg4: fffff80000b9c510

Debugging Details:


FAULTING_THREAD:  fffffa8007b984a0






LAST_CONTROL_TRANSFER:  from fffff8000288e992 to fffff8000288d5da

fffff880`0765ae80 fffff800`0288e992 : fffffa80`07b984a0 fffffa80`07b984a0 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x7a
fffff880`0765afc0 fffff800`02890cff : fffffa80`06e32700 fffffa80`06e32700 fffffa80`00000000 fffff880`0160b14c : nt!KiCommitThreadWait+0x1d2
fffff880`0765b050 fffff800`028e5906 : 00000000`00000000 fffffa80`00000000 fffff880`0176b900 fffff880`0154d100 : nt!KeWaitForSingleObject+0x19f
fffff880`0765b0f0 fffff880`0160f7bd : 00000000`00000100 0000000c`00000003 00000000`00000000 fffff800`40010023 : nt! ?? ::FNODOBFM::`string'+0x13066
fffff880`0765b160 fffff880`0173e31e : 00000000`c00000bb 00000000`00000008 fffff880`0765b2e0 fffff880`0765b2e0 : tcpip!FlPnpEvent+0x17d
fffff880`0765b1d0 fffff880`01564668 : 00000000`c00000bb fffff800`02a2c5a0 00000000`c00000bb fffffa80`039e6148 : tcpip!Fl48PnpEvent+0xe
fffff880`0765b200 fffff880`015659f7 : fffffa80`06e318d0 00000000`00000008 00000000`00000000 fffffa80`06e318d0 : ndis!ndisPnPNotifyBinding+0xb8
fffff880`0765b290 fffff880`0157d441 : fffffa80`00000000 00000000`00000000 00000000`00000000 fffffa80`073e5220 : ndis!ndisPnPNotifyAllTransports+0x377
fffff880`0765b400 fffff880`0157ec6b : 00000000`00000001 fffffa80`0658a1a0 fffffa80`062a8c60 fffffa80`0658a050 : ndis!ndisCloseMiniportBindings+0x111
fffff880`0765b510 fffff880`015166aa : fffffa80`0658a1a0 fffffa80`0658a1a0 fffffa80`07016c10 fffffa80`03973890 : ndis!ndisPnPRemoveDevice+0x25b
fffff880`0765b6b0 fffff880`015710c2 : 00000000`00000000 fffffa80`0658a1a0 fffffa80`07016c10 00000000`00000002 : ndis!ndisPnPRemoveDeviceEx+0xca
fffff880`0765b710 fffff800`02af3519 : fffff8a0`0a602540 fffffa80`0658a050 fffff880`0765b868 00000000`00000000 : ndis! ?? ::LNCPHCLB::`string'+0x73a3
fffff880`0765b7b0 fffff800`02c71831 : fffffa80`064d7060 00000000`00000000 fffffa80`064ecd90 00000000`00000801 : nt!IopSynchronousCall+0xc5
fffff880`0765b820 fffff800`02988bf3 : fffff8a0`0aba5150 fffff8a0`0aba5150 00000000`00000018 00000000`00000000 : nt!IopRemoveDevice+0x101
fffff880`0765b8e0 fffff800`02c71384 : fffffa80`064ecd90 00000000`00000000 00000000`00000002 00000000`00000000 : nt!PnpRemoveLockedDeviceNode+0x1a3
fffff880`0765b930 fffff800`02c71490 : 00000000`00000000 fffffa80`064d7000 fffff8a0`02c554c0 fffff800`02a8b300 : nt!PnpDeleteLockedDeviceNode+0x44
fffff880`0765b960 fffff800`02c71589 : fffffa80`08091f02 fffffa80`08091f90 00000000`00000001 00000000`00000000 : nt!PnpDeleteLockedDeviceNodes+0xa0
fffff880`0765b9d0 fffff800`02c71701 : fffffa80`08091f90 00000000`00000000 fffffa80`08091f90 00000000`00000001 : nt!PnpDelayedRemoveWorker+0x79
fffff880`0765ba20 fffff800`02988e19 : 00000000`00000000 fffffa80`03bba160 00000000`00000001 00000000`00000000 : nt!PnpChainDereferenceComplete+0x131
fffff880`0765ba60 fffff800`02d01d40 : 00000000`00000000 fffffa80`064ecd00 fffff8a0`0bd083d0 00000000`00000001 : nt!PnpIsChainDereferenced+0xc9
fffff880`0765bae0 fffff800`02d01fdc : fffff880`0765bcb8 fffffa80`044a7200 fffffa80`07b98400 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0xff0
fffff880`0765bc20 fffff800`02bed0dc : 00000000`00000000 fffffa80`044a7250 fffff8a0`0bd083d0 fffff880`0765bc00 : nt!PnpProcessTargetDeviceEvent+0x4c
fffff880`0765bc50 fffff800`02894961 : fffff800`02af3008 fffff8a0`0bd083d0 fffff800`02a2c5f8 fffff880`018e247d : nt! ?? ::NNGAKEGL::`string'+0x58ffb
fffff880`0765bcb0 fffff800`02b2bc06 : fffff880`00000003 fffffa80`07b984a0 00000000`00000080 fffffa80`03973890 : nt!ExpWorkerThread+0x111
fffff880`0765bd40 fffff800`02865c26 : fffff880`02fd3180 fffffa80`07b984a0 fffffa80`05dcf360 fffff880`0125e534 : nt!PspSystemThreadStartup+0x5a
fffff880`0765bd80 00000000`00000000 : fffff880`0765c000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16

STACK_COMMAND:  .thread 0xfffffa8007b984a0 ; kb

fffff880`0160f7bd 44392d08271600  cmp     dword ptr [tcpip!MICROSOFT_TCPIP_PROVIDER_Context+0x24 (fffff880`01771ecc)],r13d


SYMBOL_NAME:  tcpip!FlPnpEvent+17d

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  tcpip.sys


FAILURE_BUCKET_ID:  X64_0x9F_tcpip!FlPnpEvent+17d

BUCKET_ID:  X64_0x9F_tcpip!FlPnpEvent+17d

Followup: MachineOwner

0: kd> lmtsmn
start             end                 module name
fffff880`00e8e000 fffff880`00ee5000   ACPI     ACPI.sys     Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02d76000 fffff880`02e00000   afd      afd.sys      Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043c3000 fffff880`043d9000   AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`04358000 fffff880`0436d000   amdppm   amdppm.sys   Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e2a000 fffff880`00e35000   amdxata  amdxata.sys  Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`06c20000 fffff880`06c2b000   asyncmac asyncmac.sys Mon Jul 13 20:10:13 2009 (4A5BCCE5)
fffff880`00fef000 fffff880`00ff8000   atapi    atapi.sys    Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00e00000 fffff880`00e2a000   ataport  ataport.SYS  Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`04081000 fffff880`040a1000   AtiHdmi  AtiHdmi.sys  Fri Jun 05 04:31:42 2009 (4A28D7EE)
fffff880`048b5000 fffff880`04ecb000   atikmdag atikmdag.sys Sun Jun 14 22:41:39 2009 (4A35B4E3)
fffff880`01833000 fffff880`0183a000   Beep     Beep.SYS     Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`04245000 fffff880`04332000   BHDrvx64 BHDrvx64.sys Fri Aug 27 18:11:09 2010 (4C7837FD)
fffff880`04144000 fffff880`04155000   blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`03b99000 fffff880`03bb7000   bowser   bowser.sys   Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff880`040a8000 fffff880`04144000   ccHPx64  ccHPx64.sys  Fri Feb 05 16:05:45 2010 (4B6C8829)
fffff960`00660000 fffff960`00687000   cdd      cdd.dll      unavailable (00000000)
fffff880`01800000 fffff880`0182a000   cdrom    cdrom.sys    Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d27000 fffff880`00de7000   CI       CI.dll       Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`0197e000 fffff880`019ae000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cc9000 fffff880`00d27000   CLFS     CLFS.SYS     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`01000000 fffff880`01073000   cng      cng.sys      Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04fdb000 fffff880`04feb000   CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`059d8000 fffff880`059e6000   crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`03fdc000 fffff880`03ffa000   dfsc     dfsc.sys     Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`03fcd000 fffff880`03fdc000   discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`01968000 fffff880`0197e000   disk     disk.sys     Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0581a000 fffff880`0583c000   drmk     drmk.sys     Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`059f2000 fffff880`059fb000   dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`059e6000 fffff880`059f2000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`05800000 fffff880`05813000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`03e3d000 fffff880`03e49000   Dxapi    Dxapi.sys    Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`04ecb000 fffff880`04fbf000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04800000 fffff880`04846000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`03f32000 fffff880`03fa8000   eeCtrl64 eeCtrl64.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`06c00000 fffff880`06c20000   ENG64    ENG64.SYS    Wed Sep 15 06:25:35 2010 (4C909F1F)
fffff880`03fa8000 fffff880`03fcd000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:45 2010 (4BF6FECD)
fffff880`06c2b000 fffff880`06de9000   EX64     EX64.SYS     Wed Sep 15 06:33:41 2010 (4C90A105)
fffff880`02550000 fffff880`02586000   fastfat  fastfat.SYS  Mon Jul 13 19:23:28 2009 (4A5BC1F0)
fffff880`01137000 fffff880`0114b000   fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`00e35000 fffff880`00e81000   fltmgr   fltmgr.sys   Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`0122b000 fffff880`01235000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`0192e000 fffff880`01968000   fvevol   fvevol.sys   Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`015b6000 fffff880`01600000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`048a3000 fffff880`048b0000   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02df3000 fffff800`02e3c000   hal      hal.dll      Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04846000 fffff880`0486a000   HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`024ea000 fffff880`02503000   HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`02503000 fffff880`0250b080   HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`024dc000 fffff880`024ea000   hidusb   hidusb.sys   Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`03ad1000 fffff880`03b99000   HTTP     HTTP.sys     Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`01925000 fffff880`0192e000   hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`0614e000 fffff880`061c4000   IDSvia64 IDSvia64.sys Thu May 27 04:07:18 2010 (4BFE2836)
fffff880`01493000 fffff880`014ba000   Ironx64  Ironx64.SYS  Tue Apr 27 20:48:23 2010 (4BD785D7)
fffff880`0422f000 fffff880`0423e000   kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0250c000 fffff880`0251a000   kbdhid   kbdhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bd4000 fffff800`00bde000   kdcom    kdcom.dll    Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`041ba000 fffff880`041fd000   ks       ks.sys       Wed Mar 03 23:32:25 2010 (4B8F37D9)
fffff880`01200000 fffff880`0121a000   ksecdd   ksecdd.sys   Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000   ksecpkg  ksecpkg.sys  Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`0583c000 fffff880`05841200   ksthunk  ksthunk.sys  Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`025ca000 fffff880`025df000   lltdio   lltdio.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02586000 fffff880`025a9000   luafv    luafv.sys    Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00ca8000 fffff880`00cb5000   mcupdate_AuthenticAMD mcupdate_AuthenticAMD.dll Mon Jul 13 21:29:09 2009 (4A5BDF65)
fffff880`02542000 fffff880`02550000   monitor  monitor.sys  Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`041ab000 fffff880`041ba000   mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`0251a000 fffff880`02527000   mouhid   mouhid.sys   Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00fd5000 fffff880`00fef000   mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`03bb7000 fffff880`03bcf000   mpsdrv   mpsdrv.sys   Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`061d2000 fffff880`061fa000   mrxdav   mrxdav.sys   Mon Jul 13 19:23:57 2009 (4A5BC20D)
fffff880`03bcf000 fffff880`03bfc000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`03a00000 fffff880`03a4e000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`03a4e000 fffff880`03a71000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`01898000 fffff880`018a3000   Msfs     Msfs.SYS     Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00eee000 fffff880`00ef8000   msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01186000 fffff880`011e4000   msrpc    msrpc.sys    Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`03eb1000 fffff880`03ebc000   mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`01913000 fffff880`01925000   mup      mup.sys      Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014c4000 fffff880`015b6000   ndis     ndis.sys     Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04feb000 fffff880`04ff7000   ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02453000 fffff880`02466000   ndisuio  ndisuio.sys  Mon Jul 13 20:09:25 2009 (4A5BCCB5)
fffff880`04200000 fffff880`0422f000   ndiswan  ndiswan.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0406c000 fffff880`04081000   NDProxy  NDProxy.SYS  Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c74000 fffff880`02c83000   netbios  netbios.sys  Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c00000 fffff880`02c45000   netbt    netbt.sys    Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000   NETIO    NETIO.SYS    Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`018a3000 fffff880`018b4000   Npfs     Npfs.SYS     Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`03ea5000 fffff880`03eb1000   nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02817000 fffff800`02df3000   nt       ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01250000 fffff880`013f3000   Ntfs     Ntfs.sys     Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`0182a000 fffff880`01833000   Null     Null.SYS     Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02400000 fffff880`02453000   nwifi    nwifi.sys    Mon Jul 13 20:07:23 2009 (4A5BCC3B)
fffff880`02c4e000 fffff880`02c74000   pacer    pacer.sys    Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00f38000 fffff880`00f4d000   partmgr  partmgr.sys  Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00ef8000 fffff880`00f2b000   pci      pci.sys      Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00fbe000 fffff880`00fc5000   pciide   pciide.sys   Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00fc5000 fffff880`00fd5000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`0121a000 fffff880`0122b000   pcw      pcw.sys      Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05e10000 fffff880`05eb6000   peauth   peauth.sys   Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`03e00000 fffff880`03e3d000   portcls  portcls.sys  Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00cb5000 fffff880`00cc9000   PSHED    PSHED.dll    Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`043d9000 fffff880`043fd000   rasl2tp  rasl2tp.sys  Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04155000 fffff880`04170000   raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`04170000 fffff880`04191000   raspptp  raspptp.sys  Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`04191000 fffff880`041ab000   rassstp  rassstp.sys  Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`03e54000 fffff880`03ea5000   rdbss    rdbss.sys    Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`0187d000 fffff880`01886000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`01886000 fffff880`0188f000   rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0188f000 fffff880`01898000   rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`018d9000 fffff880`01913000   rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`025df000 fffff880`025f7000   rspndr   rspndr.sys   Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0486a000 fffff880`048a3000   Rt64win7 Rt64win7.sys Fri May 22 10:52:30 2009 (4A16BC2E)
fffff880`05eb6000 fffff880`05ec1000   secdrv   secdrv.SYS   Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`0148b000 fffff880`01493000   spldr    spldr.sys    Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`060c8000 fffff880`0614e000   SRTSP64  SRTSP64.SYS  Wed Feb 24 18:59:29 2010 (4B85BD61)
fffff880`02cb2000 fffff880`02cc6000   SRTSPX64 SRTSPX64.SYS Wed Feb 24 18:59:48 2010 (4B85BD74)
fffff880`06032000 fffff880`060c8000   srv      srv.sys      Mon Jun 21 23:21:11 2010 (4C202C27)
fffff880`05f08000 fffff880`05f70000   srv2     srv2.sys     Mon Jun 21 23:20:47 2010 (4C202C0F)
fffff880`05ec1000 fffff880`05eee000   srvnet   srvnet.sys   Mon Jun 21 23:20:32 2010 (4C202C00)
fffff880`05eee000 fffff880`05ef6000   SSPORT   SSPORT.sys   Thu Aug 11 19:07:32 2005 (42FBDA34)
fffff880`04ff7000 fffff880`04ff8480   swenum   swenum.sys   Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`010c9000 fffff880`01137000   SYMDS64  SYMDS64.SYS  Mon Aug 17 19:35:30 2009 (4A89E942)
fffff880`0114b000 fffff880`01186000   SYMEFA64 SYMEFA64.SYS Wed Apr 21 17:47:39 2010 (4BCF727B)
fffff880`02d40000 fffff880`02d76000   SYMEVENT64x86 SYMEVENT64x86.SYS Thu Aug 13 18:28:21 2009 (4A849385)
fffff880`02cca000 fffff880`02d40000   SYMTDIV  SYMTDIV.SYS  Tue May 04 00:38:27 2010 (4BDFA4C3)
fffff880`01600000 fffff880`017fd000   tcpip    tcpip.sys    Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`05ef6000 fffff880`05f08000   tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`019e4000 fffff880`019f1000   TDI      TDI.SYS      Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`018b4000 fffff880`018d2000   tdx      tdx.sys      Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c9e000 fffff880`02cb2000   termdd   termdd.sys   Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`005a0000 fffff960`005aa000   TSDDD    TSDDD.dll    unavailable (00000000)
fffff880`04332000 fffff880`04358000   tunnel   tunnel.sys   Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`04000000 fffff880`04012000   umbus    umbus.sys    Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`024bf000 fffff880`024dc000   usbccgp  usbccgp.sys  Mon Jul 13 20:06:45 2009 (4A5BCC15)
fffff880`024bd000 fffff880`024bef00   USBD     USBD.SYS     Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04fca000 fffff880`04fdb000   usbehci  usbehci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`04012000 fffff880`0406c000   usbhub   usbhub.sys   Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04fbf000 fffff880`04fca000   usbohci  usbohci.sys  Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`0436d000 fffff880`043c3000   USBPORT  USBPORT.SYS  Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`02527000 fffff880`02542000   USBSTOR  USBSTOR.SYS  Mon Jul 13 20:06:34 2009 (4A5BCC0A)
fffff880`00f2b000 fffff880`00f38000   vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0183a000 fffff880`01848000   vga      vga.sys      Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`05842000 fffff880`059d8000   viahduaa viahduaa.sys Fri Jul 24 08:23:37 2009 (4A69A7C9)
fffff880`01848000 fffff880`0186d000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`00f4d000 fffff880`00f62000   volmgr   volmgr.sys   Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00f62000 fffff880`00fbe000   volmgrx  volmgrx.sys  Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01073000 fffff880`010bf000   volsnap  volsnap.sys  Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c83000 fffff880`02c9e000   wanarp   wanarp.sys   Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0186d000 fffff880`0187d000   watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00c00000 fffff880`00ca4000   Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00de7000 fffff880`00df6000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02c45000 fffff880`02c4e000   wfplwf   wfplwf.sys   Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00050000 fffff960`0035f000   win32k   win32k.sys   unavailable (00000000)
fffff880`00ee5000 fffff880`00eee000   WMILIB   WMILIB.SYS   Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`025a9000 fffff880`025ca000   WudfPf   WudfPf.sys   Fri Jan 15 02:32:54 2010 (4B501A26)
fffff880`0247b000 fffff880`024bd000   WUSB54GSCV2_AMD64 WUSB54GSCV2_AMD64.sys Tue Jan 08 15:52:33 2008 (4783E291)

Unloaded modules:
fffff880`06de9000 fffff880`06df5000   hiber_atapor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06df5000 fffff880`06dfe000   hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06000000 fffff880`06013000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03ebc000 fffff880`03f32000   IDSvia64.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06c00000 fffff880`06c20000   ENG64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06c2f000 fffff880`06ded000   EX64.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06ded000 fffff880`06df9000   hiber_atapor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06000000 fffff880`06009000   hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06009000 fffff880`0601c000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06ded000 fffff880`06df9000   usbprint.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06c20000 fffff880`06c2c000   hiber_atapor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`06ded000 fffff880`06df6000   hiber_atapi.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`061bf000 fffff880`061d2000   hiber_dumpfv
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`0614e000 fffff880`061bf000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`03a71000 fffff880`03a8e000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019ae000 fffff880`019bc000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019bc000 fffff880`019c8000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019c8000 fffff880`019d1000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
fffff880`019d1000 fffff880`019e4000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
I find the following out of date drivers on your system. In general, Windows 7 does not like out of date third party drivers; they can and do cause conflicts memory corruption and crashes. In particular, those drivers dated 2008 and earlier are obsolete.
AtiHdmi.sys Fri Jun 05 04:31:42 2009 - ATI High Definition Audio Function Driver is a driver file from ATI Technologies, Inc. belonging to ATI HDMI Audio Driver. It may be a part of Catalyst Control Center; I am not sure. First see if you can update this driver through Dell. If not try these links: Global Provider of Innovative Graphics, Processors and Media Solutions | AMD and ATI Catalyst.

atikmdag.sys Sun Jun 14 22:41:39 2009 - ATI Video driver (remove the Catalyst Control Center and only install the Display Driver)Global Provider of Innovative Graphics, Processors and Media Solutions | AMD

Rt64win7.sys Fri May 22 10:52:30 2009 - Realtek 8101E/8168/8169 NDIS 6.20 64-bit Driver for Realtek 8101E/8168/8169 PCI/PCIe Adapters. Realtek

SSPORT.sys Thu Aug 11 19:07:32 2005 - Samsung printer driver Samsung. This is an XP driver. See if you can update it.

WUSB54GSCV2_AMD64.sys Tue Jan 08 15:52:33 2008 - Linksys Wireless-G USB Support and Services. This one can also be part of the cause of your crash, though it was not mentioned in the dump.
Update the above drives especially the two in red font. Reboot and run your system. Let's see how it does. Please let us know.
My System SpecsSystem Spec

 recovery from unexpected shutdown message

Thread Tools

Similar help and support threads
Thread Forum
Unexpected Shutdown
Unexpected shutdown - Win7 Pro 32-bit. First time on this O/S. Windows updates completed. Hobby project: Dell Latitude C640; 2GB RAM; NEW 60GB hdd. When Win7 Ultimate was installed (a previous thread), I checked memory sticks independently with Win 7 memory checker -- all was okay. Would someone...
BSOD Help and Support
"unexpected shutdown" message when computer did shut down properly
I turned on my Windows 7 machine for a short time yesterday evening. The computer was shut down correctly, yet I got an "unexpected shutdown" message when I logged on today. Anyone else ever experience this? If so, what could have been the cause?
General Discussion
Unexpected Shutdown ?
I had a reboot problem & the Event Logs show an unexpected shutdown. But how can the PC write that there was a shutdown to the Event Logs since there was no power to do so?
BSOD Help and Support
Disable "Windows has recovered from an unexpected shutdown" message
I have my Toshiba laptop set to turn off the screen while it downloads overnight. Every morning, I find the same problem: the computer has completely locked up with no pointer. I can't do anything, so I have to press and hold the power button to restart the machine. On restarting, the computer...
BSOD Help and Support
File Recovery after unexpected Shutdown
So hi! I am pretty pissed off right now so forgive me if I lack of any formality. I was using Corel Painter Essentials and meanwhile I had a movie in the background playing (I like drawing while listening to a movie), when my stupid computer shut down on its own. Now I am having it repaired...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:13.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App