Windows 7: Driver causing BSOD - how to totally uninstall?

luckycharms · 13 Feb 2013

Hi folks,

Starting getting BSOD's when trying to sleep my comp. This started happening after my scanner driver started acting strange (though there were some other driver issues as well). In any case, I got the following entry in my Event Viewer just before the crash, so I'm guessing it's the scanner driver that's causing the issue.

The driver \Driver\WSDScan for device urn:uuid:e3248000-80ce-11db-8000-0022587e5c53\UMB\3&9784ddc&2&uri:e3248000-80ce-11db-8000-0022587e5c53/ScannerService stopped the power transition.

My question is, how can I be sure to really remove the driver completely?

thanks!

Arc · 13 Feb 2013

Can you post it following the Blue Screen of Death (BSOD) Posting Instructions, so that we can find out the causes?

luckycharms · 13 Feb 2013

Here you go - sorry about that. I uninstalled the printer that i thought was causing the issue, but still getting the same problem. See the attached zip. Any help is *greatly* appreciated. Please let me know once you've grabbed the zip so i can delete it. The bugcheck I get is:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: 9f
BCP1: 0000000000000003
BCP2: FFFFFA8006C8AE30
BCP3: FFFFF80000B9C518
BCP4: FFFFFA800C75E760
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\021313-50388-01.dmp
C:\Users\ashenkin\AppData\Local\Temp\WER-57205-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Arc · 13 Feb 2013

Apparently, you need to update some drivers.

Cisco AnyConnect VPN Client : Support and Downloads - Cisco Systems
nVidia Display driver: Drivers - Download NVIDIA Drivers
Intel Rapid Storage: This one.
Intel Graphics driver: Intel Download Center
Intel® Wireless WiFi Link Adapter: Intel® Customer Support

Found nothing wrong with the scanner driver itself.

Code:

0: kd> lmvm nvlddmkm
start             end                 module name
fffff880`0f68e000 fffff880`10368000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Fri Aug 12 16:25:35 2011 (4E4506A7)
    CheckSum:         00CD1690
    ImageSize:        00CDA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
-------------------------------------------------------------------------------------------------------
0: kd> lmvm iastor
start             end                 module name
fffff880`01213000 fffff880`0141d000   iaStor   T (no symbols)           
    Loaded symbol image file: iaStor.sys
    Image path: \SystemRoot\System32\Drivers\iaStor.sys
    Image name: iaStor.sys
    Timestamp:        Thu Mar 04 08:21:31 2010 (4B8F2033)
    CheckSum:         0008BE3A
    ImageSize:        0020A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
------------------------------------------------------------------------------------------------------
0: kd> lmvm igdkmd64
start             end                 module name
fffff880`05c55000 fffff880`067fec20   igdkmd64 T (no symbols)           
    Loaded symbol image file: igdkmd64.sys
    Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys
    Image name: igdkmd64.sys
    Timestamp:        Sat May 21 23:51:49 2011 (4DD802BD)
    CheckSum:         00BB6001
    ImageSize:        00BA9C20
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
------------------------------------------------------------------------------------------------------
0: kd> lmvm vpnva64
start             end                 module name
fffff880`0bbb8000 fffff880`0bbc2000   vpnva64  T (no symbols)           
    Loaded symbol image file: vpnva64.sys
    Image path: \SystemRoot\system32\DRIVERS\vpnva64.sys
    Image name: vpnva64.sys
    Timestamp:        Fri Mar 11 08:53:47 2011 (4D7995C3)
    CheckSum:         000060EB
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
-------------------------------------------------------------------------------------------------------
0: kd> lmvm Netwsw00
start             end                 module name
fffff880`06a9c000 fffff880`075e5000   Netwsw00   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Netwsw00.sys
    Image name: Netwsw00.sys
    Timestamp:        Sun Jun 03 21:03:40 2012 (4FCB83D4)
    CheckSum:         00B012F3
    ImageSize:        00B49000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

luckycharms · 14 Feb 2013

Thanks Arc. So, I'm on a thinkpad, and Lenovo recommends only installing lenovo drivers. They modify manufacturer drivers to work on their machines. Lenovo is notorious for being very slow at releasing their drivers.

In any case, I did update the NVIDIA and Intel Rapidstor drivers. The Anyconnect is up to date according to my provider - moving to version 3 is an upgrade.

After doing that, I'm still getting long hangs and then crashes when trying to sleep. Strangely, if I'm not doing much on my computer, it sleeps just fine. But if I've been doing stuff on it for a while, that's when the problem crops up. Please see the new logs, attached.

Arc · 14 Feb 2013

Mate, unfortunately there is no new crash dumps .
You sure that it's a BSOD? ?

luckycharms · 14 Feb 2013

Thanks Arc. So, you don't see evidence of a BSOD in this dump? Or, you mean there's just nothing new?

My machine has been experiencing BSOD's up until now. I didn't specifically see this BSOD, since it takes about 10 minutes to actually crash once I try to put it to sleep. But all the others have been BSOD's, and it definitely crashed just like all the other times.

I'm uploading another here just in case.

Arc · 14 Feb 2013

A new dump in the latest zip, and it is crashed on Intel wifi driver, again.

Code:

0: kd> !irp fffffa800c9c4ab0
Irp is active with 4 stacks 2 is current (= 0xfffffa800c9c4bc8)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

            Args: 00000000 00000000 00000000 00000000
>[ 16, 2]   0  0 fffffa800aa11050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\system32\DRIVERS\Netwsw00.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwsw00.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwsw00.sys
*** WARNING: Unable to verify timestamp for ndis.sys
*** ERROR: Module load completed but symbols could not be loaded for ndis.sys
 \Driver\NETwNs64
            Args: 00014400 00000000 00000004 00000002
 [ 16, 2]   0 e1 fffffa800aa12c70 00000000 fffff80003cce200-fffffa800bc7edb0 Success Error Cancel pending
           \Driver\vwifibus    nt!PopSystemIrpCompletion
            Args: 00014400 00000000 00000004 00000002
 [  0, 0]   0  0 00000000 00000000 00000000-fffffa800bc7edb0    

            Args: 00000000 00000000 00000000 00000000
0: kd> lmvm Netwsw00
start             end                 module name
fffff880`07a24000 fffff880`0856d000   Netwsw00 T (no symbols)           
    Loaded symbol image file: Netwsw00.sys
    Image path: \SystemRoot\system32\DRIVERS\Netwsw00.sys
    Image name: Netwsw00.sys
    Timestamp:        Sun Jun 03 21:03:40 2012 (4FCB83D4)
    CheckSum:         00B012F3
    ImageSize:        00B49000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Is there no possible update available?

Scan the system for possible virus infection.

Free up the startup.

Click on the Start button
Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
Select the “Startup” tab.
Deselect all items other than the antivirus.
Apply > OK
Accept the restart.

luckycharms · 15 Feb 2013

Thanks Arc. I'll try updating the wifi driver once again. So strange - the sleep issue is totally intermittent. If I do it soon after I've started up the machine, it sleeps just fine. If I've been working on stuff for a while, it seems to have issues.

In any case, one question: when you say "it crashed on the intel wifi driver", do you mean my computer crashed, or your analysis crashed? I assume the former, which is strange, because oftentimes my wifi is *off* when I try to sleep my machine, and furthermore, I've been sleeping just fine for a long time with the drivers I had. That is, I hadn't touched the wifi drivers when this problem started cropping up.

I ran TDSSKiller and found no threats. I'll try the windows defender startup scan tonight. I have ms security essentials running all the time.

Arc · 15 Feb 2013

The computer crashed by that driver.

Though the wifi is off, it's driver is working in the system; and so, the driver somehow fails its power state.

As you try, you may disable USB selective suspense; it may solve the sleep issue, but that will consume a bit more power.
USB Selective Suspend - Turn On or Off