BSOD - sporadic 1-3 times daily crash

hooflak · 01 Aug 2012

Hi
I get a BSOD crash (screenshot and zip file attached) approximately 1-3 times a day. I can't identify anything that would cause this or any consistency of when it crashes.
I have done a full Windows 7 reinstall, plus have had the system board and ram replaced under warranty but still no luck.
I have a Lenovo X220 laptop running Windows 7 (copy was installed when I bought it).
If you can help at all it would be much appreciated.
I have tried to fix this in the past but no luck so far.

Dan

Dave76 · 03 Aug 2012

Can you post your specs.
Use these links to find your system specs.
Speccy Free System information Utility
System Info - See Your System Specs

Same issues you were having in January?
Were the RAM and motherboard replaced since then?
How long ago did you do the re-install?

All three crash dumps are corrupt and not useful.
They are all the same Stop code.

Code:

STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED
Usual causes:  Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS
This is a very common bugcheck.
FAILURE_BUCKET_ID:  X64_0x1E_nt!KiKernelCalloutExceptionHandler+e

I see the Citrix drivers are still installed.
Update or remove these drivers for testing.

Code:

dne64x.sys   Tue Nov 11 09:01:24 2008 - Citrix Deterministic Network Enhancer Miniport or Cisco Systems VPN Client

Update or remove:

Code:

smihlp.sys   Fri Mar 13 20:47:32 2009 - SMI helper driver - Likely part of the UPEK Protector Suite

Do you know what this is for?

Update all your drivers from the Lenovo site.
Is this the right laptop: ThinkPad X220?
Post the drivers you update.
Be sure to update the CD ROM drivers.
Which BIOS version do you have?

Have you been running the Intel Tool Box on your SSD?

Uninstall PC Doctor for testing.
Have you been running this or any other cleaner software?

Post the full BSoD report package if you have another crash.
From your Sys Event Logs:

Code:

Event[135]:
  Log Name: System
  Source: Service Control Manager
  Date: 2012-07-26T13:30:31.383
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: spinningcube2
  Description: 
The Cisco Systems, Inc. VPN Service service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Remove this for testing.

A few of these.

Code:

Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2012-07-26T13:54:27.058
  Event ID: 89
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: spinningcube2
  Description: 
ACPI thermal zone ACPI\ThermalZone\THM0 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 0K             
_AC1 = 0K             
_AC2 = 0K             
_AC3 = 0K             
_AC4 = 0K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 372K             
_HOT = 0K             
_PSL - see event data.

Event[177]:
  Log Name: System
  Source: EventLog
  Date: 2012-07-26T13:54:34.000
  Event ID: 6008
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: spinningcube2
  Description: 
The previous system shutdown at 1:44:46 PM on ?26/?07/?2012 was unexpected.

Your CPU has been over heating, have you cleaned the dust out of the laptop?
Have you been checking your temperatures?
Use Real Temp , to check the CPU temps when at idle, under load and/or testing.
Let us know the minimum and maximum temps you get.

hooflak · 05 Aug 2012

Thanks you for your response. Have given some answers below. Will add extra information as soon as I can figure it out.

Dave76 said:

Can you post your specs.
Use these links to find your system specs.
Speccy Free System information Utility
System Info - See Your System Specs

Same issues you were having in January?

Yes I think so.

Were the RAM and motherboard replaced since then?

Yes they were replaced last week.

How long ago did you do the re-install?

Last Friday.

All three crash dumps are corrupt and not useful.
They are all the same Stop code.

Code:

STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED
Usual causes:  Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS
This is a very common bugcheck.
FAILURE_BUCKET_ID:  X64_0x1E_nt!KiKernelCalloutExceptionHandler+e

Yes thats the code I always see - how do I get a valid dump to write?

I see the Citrix drivers are still installed.
Update or remove these drivers for testing.

Code:

dne64x.sys   Tue Nov 11 09:01:24 2008 - Citrix Deterministic Network Enhancer Miniport or Cisco Systems VPN Client

The system was crashing before I re-installed Citrix VPN - I really need this on my machine very day in order to work with my clients. Also I did try unistalling the Cisco drivers earlier this year and the machine still crashed.

Update or remove:

Code:

smihlp.sys   Fri Mar 13 20:47:32 2009 - SMI helper driver - Likely part of the UPEK Protector Suite

Do you know what this is for?

From google it seems it is the fingerprint driver installed as standard on Lenovo machines.

Update all your drivers from the Lenovo site.
Is this the right laptop: ThinkPad X220?
Post the drivers you update.
Be sure to update the CD ROM drivers.
Which BIOS version do you have?

I updated all my drivers over the weekend and it still crashed today. There is no CD ROM on this machine.

Have you been running the Intel Tool Box on your SSD?

No I don't think so - not sure what this or SSD are?

Uninstall PC Doctor for testing.
Have you been running this or any other cleaner software?

Can't find this anywhere to remove it - no haven't installed anything extraneous since the reinstall last week.

Post the full BSoD report package if you have another crash.
From your Sys Event Logs:

Code:

Event[135]:
  Log Name: System
  Source: Service Control Manager
  Date: 2012-07-26T13:30:31.383
  Event ID: 7030
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: spinningcube2
  Description: 
The Cisco Systems, Inc. VPN Service service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

Remove this for testing.

A few of these.

Code:

Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2012-07-26T13:54:27.058
  Event ID: 89
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: spinningcube2
  Description: 
ACPI thermal zone ACPI\ThermalZone\THM0 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 0K             
_AC1 = 0K             
_AC2 = 0K             
_AC3 = 0K             
_AC4 = 0K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 372K             
_HOT = 0K             
_PSL - see event data.

Event[177]:
  Log Name: System
  Source: EventLog
  Date: 2012-07-26T13:54:34.000
  Event ID: 6008
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: spinningcube2
  Description: 
The previous system shutdown at 1:44:46 PM on ?26/?07/?2012 was unexpected.

Your CPU has been over heating, have you cleaned the dust out of the laptop?
Have you been checking your temperatures?
Use Real Temp , to check the CPU temps when at idle, under load and/or testing.
Let us know the minimum and maximum temps you get.

OK will do.

hooflak · 05 Aug 2012

Specs

CPU: Intel(R) Core(TM) i7-2640M CPU @ 2.80GHz
Motherboard:LENOVO 4290CTO
Bios Version: 8DET59WW (1.29 )
Memory 8GB Usable 7.89gb
HDD: INTEL SSDSA2BW160G3L
SOund Card: (1) Conexant 20672 SmartAudio HD (2) Intel(R) Display Audio
Graphics card: Intel(R) HD Graphics Family
OS: Microsoft Windows 7 Professional 64-bit 7601 Multiprocessor Free Service Pack 1

hooflak · 07 Aug 2012

It seems that all crashes occur when I am in my office and have a screen and keyboard plugged in. When I am at home i haven't seen it crash. Is it possible this could be causing it?

Dave76 · 12 Aug 2012

Yes that is possibly the cause, what screen and keyboard are you using?
Update the drivers and see if that helps.

hooflak · 14 Aug 2012

OK this is getting crazy.
Lenovo have now replaced my system board (incl CPU), RAM, and hard drive. So the hard drive was completely replaced and everything reinstalled on Friday. This morning I sat down in the office and got a crash after 2 hours. Have attached the new crash tool zip.
Also got a crash (before the hard drive replace) without my screen and keyboard plugged in so doesn't look like it is that. Just in case though it is a DELL P2011H monitor and a Microsoft Comfort Curve Keyboard 3000. Have updated the drivers.
Must be an incompatibility with something that I am installing?
When it comes back from a crash all of the icons next to the non system files and folders are blank - see screenshot attached.
Thanks for any help.

Dave76 · 15 Aug 2012

This crash was corupt, which doesn't give much information.

Code:

WARNING: Unable to verify timestamp for win32k.sys
STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED
Usual causes:  Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS
FAILURE_BUCKET_ID:  X64_0x1E_nt!KiKernelCalloutExceptionHandler+e

Application event logs:

Code:

Event[2744]:
  Log Name: Application
  Source: Microsoft-Windows-WMI
  Date: 2012-08-11T09:41:46.000
  Event ID: 10
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: spinningcube2
  Description: 
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Let's test the CPU using OCCT.
OCCT stability checking toolRun the CPU:OCCT test for at least 30 minutes, be sure to monitor your CPU and GPU temps.
Set the time before you start.
When its done, pass or fail, it will make some graphs. Post these here as they are useful for analyses.

Drivers needing updated:

Code:

smihlp.sys   Fri Mar 13 20:47:32 2009 - SMI helper driver - Likely part of the UPEK Protector Suite or part of the Lenovo easy camera

Update all the drivers from the Lenovo support site.

Do you have any Lenovo utilities installed?
If yes, which ones.

If you are using carbonite.com, un-install all associated programs for testing purposes.

hooflak · 20 Aug 2012

Hi
Here are the OCCT results charts - looks like the CPU is pretty warm. It is a brand new one. Thanks for your continued help.
Dan

hooflak · 21 Aug 2012

I have a new theory

As mentioned before it only seems to crash when at my office. I have disconnected everything (monitor, keyboard, mouse) step by step and still it was crashing. I have now removed the ethernet cable and am running off wireless (which I do at home) and it has not crashed all day. Am out of the office the rest of the week but will keep testing this theory next week. Any thoughts on if this is a possibility appreciated. I have checked all the network adapter drivers and they were all up to date.
D