Solved BSOD While Idle - wdf01000.sys ntoskrnl.exe

[natakublaze]

Hello everyone,

I build a new system about 6 months ago.

Started having BSOD problems about a month ago.

Not exactly sure what the problem is so I am seeking some help.

Attached is a crash dump file.

I have checked a few crash dump files previously and mentioned the errors mentioned in the title in the probably caused by line.

The BSOD only happens when idle. It never happens if i am using the computer regularly or if I have a torrent running.

Any help is appreciated.

If you need the system specs. I will post them once I get home from work tonight.

Thanks,

 

[koolkat77]

It seems that Avast! AV is causing problems for you.

fffff880`02958758  fffff880`02cb0b4dUnable to load image aswSnx.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSnx.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSnx.SYS
 aswSnx+0x5fb4d
fffff880`02958760  00000000`00003774
fffff880`02958768  fffff880`02958f60
fffff880`02958770  fffff8a0`00a87f90
fffff880`02958778  fffff800`031fe30d nt!ExFreePoolWithTag+0x22d
fffff880`02958780  00000000`0000001a
fffff880`02958788  00000000`00000000
fffff880`02958790  00000000`00000000
fffff880`02958798  fffff880`02ccdef6 aswSnx+0x7cef6
fffff880`029587a0  fffff880`02d31fd0 aswSnx+0xe0fd0
fffff880`029587a8  00000000`00000000
fffff880`029587b0  fffff8a0`00a87fd0
fffff880`029587b8  00000000`00000040
fffff880`029587c0  00000000`00000001
fffff880`029587c8  00000000`00000001
fffff880`029587d0  00000000`00000000
fffff880`029587d8  fffff880`03f64940Unable to load image aswSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
 aswSP+0x2f940

Please remove it and replace with Microsoft Security Essentials & the Free version of Malwarebytes, update and make full scans separately:

• Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase
• Help protect your PC with Microsoft Security Essentials
• Malwarebytes Free

   Note

:info: Do not start the trial version of MalwareBytes

You may also take a look at:

• Good & Free System Security Combination

And next time you get a BSOD. Grab all and upload a new zip.

 

[natakublaze]

thanks koolkat!

i'll do that once i get home.

 

[natakublaze]

I did that when i went home but i still got another BSOD after i left the system idle.

i deleted Avast and installed windows essentials and malware and ran them separately.

attached is the grab all file.

 

[koolkat77]

------------------------
Reduce the start-up items, Antivirus software is basically whats required.

• Remove Startup Programs in Windows 7
• Clean Startup in Windows 7

------------------------
Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow - read here

Run Disk Check on your Hard Drive for file system errors and bad sectors on it - read here

Follow these-

Get rid of intel rapid storage.

1. Right click on "my computer" icon and click "manage" on the context menu.
2. It will open the "computer management" window.
3. Select "Device Manager" in the left pane, It will list all the existing devices up.
4. Expand "Disc Drives" by clicking on the triangle in front of it.
5. Select one item under it, right click, uninstall.
6. Continue the process for all items under "Disc Drives"
7. Now restart the computer. At restart, windows will auto configure the appropriate system driver, msahci.sys.

If you have an SSD, make sure the following are up to date:

• SSD firmware
• BIOS Version
• Chipset Drivers
• Hard disk controller drivers/SATA drivers
• If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

------------------------
Upload a screenshot using:

• CrystalDiskInfo:tip: For how to upload a screenshot or file, read here

Test your Hard Drive(s) by running:

• Hard Drive Diagnostic Procedure

Monitor hardware temperature with system monitoring software like Speccy or HWMonitor. Upload a screen shot of the Summary tab as well:

• Piriform - Speccy
• CPUID - HWMonitor

 

[natakublaze]

Thanks for all the help and advice, really appreciate it!

I'll try that once I get home.

 

[natakublaze]

Hello all,

I'm still having an issue when the computer goes into sleep mode. I have done everything all the fixes as instructed above.

I currently have turned never go into sleep mode but was wondering if there is a fix for this issue.

Everything seems fine when it's working and even idle. But when it attempts to go into sleep mode, it would crash and restart the computer.

Any ideas?

 

[Arc]

For a desktop PC, Sleep is not anything that is required. It is a mechanism for mobile computers mainly, to save battery usage.

Enable driver verifier .... http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html
Put the computer to sleep. Wake it up. It is supposed to BSOD. Post it following the BSOD posting instructions.

 

[natakublaze]

okay, i will give that a try and post the results

 

[natakublaze]

Here is the grab all file

 

[Arc]

Update Intel(R) Gigabit Network Connection driver from https://downloadcenter.intel.com/default.aspx .

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffffa800f3ac990, The pool entry we were looking for within the page.
Arg3: fffffa800f3acab0, The next pool entry.
Arg4: 0000000004120002, (reserved)

Debugging Details:
------------------


BUGCHECK_STR:  0x19_20

POOL_ADDRESS: GetPointerFromAddress: unable to read from fffff80003307100
GetUlongFromAddress: unable to read from fffff800033071c0
 fffffa800f3ac990 Nonpaged pool

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80003202cae to fffff800030cfb80

STACK_TEXT:  
fffff880`033a7e98 fffff800`03202cae : 00000000`00000019 00000000`00000020 fffffa80`0f3ac990 fffffa80`0f3acab0 : nt!KeBugCheckEx
fffff880`033a7ea0 fffff880`01674845 : 00000000`00000000 fffffa80`10ea4460 fffff880`51314549 fffff880`0166dbc4 : nt!ExDeferredFreePool+0x12da
fffff880`033a7f50 fffff880`04501b23 : 00000000`00000000 fffff880`016e75ff fffffa80`1174a160 fffffa80`0cf79b10 : ndis!NdisFreeMemory+0x15
fffff880`033a7f80 00000000`00000000 : fffff880`016e75ff fffffa80`1174a160 fffffa80`0cf79b10 00000000`00000000 : e1c62x64+0x1fb23


STACK_COMMAND:  kb

FOLLOWUP_IP: 
e1c62x64+1fb23
fffff880`04501b23 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  e1c62x64+1fb23

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: e1c62x64

IMAGE_NAME:  e1c62x64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4f62ba28

FAILURE_BUCKET_ID:  X64_0x19_20_e1c62x64+1fb23

BUCKET_ID:  X64_0x19_20_e1c62x64+1fb23

Followup: MachineOwner
---------

2: kd> lmvm e1c62x64
start             end                 module name
fffff880`044e2000 fffff880`04563000   e1c62x64 T (no symbols)           
    Loaded symbol image file: e1c62x64.sys
    Image path: e1c62x64.sys
    Image name: e1c62x64.sys
    Timestamp:        Fri Mar 16 09:27:28 2012 (4F62BA28)
    CheckSum:         000895BE
    ImageSize:        00081000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[natakublaze]

tried that, will update if another BSOD happens due to sleep mode

 

[natakublaze]

After updating the Gigabit Network Driver.

I put the sleep mode back on just to see if it would BSOD.

It is still happening...not really sure what is going on anymore.

Any Help appreciated

 

[Arc]

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus and Display Fusion.
5. Apply > OK
6. Accept then restart.

Please care to uninstall Virtual Colne Drive.

Name    Virtual CloneDrive
Manufacturer    Elaborate Bytes AG
Status    OK
PNP Device ID    ROOT\SCSIADAPTER\0000
Driver    c:\windows\system32\drivers\vclone.sys (5.4.3.5, 35.50 KB (36,352 bytes), 8/9/2009 5:25 PM)

And, do one more thing. Disconnect the 640 GB WD external HDD (H Drive there).

After doing these two, put it back to sleep. Does it problem again?

If so, Disable USB Selective Suspend and put the computer to sleep again. What is the situation now?

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

 

[natakublaze]

i'll do the tests tonight and post the results!

thanks!

 

[natakublaze]

Sleep mode has been working fine and not going into BSOD.

Will update if BSOD starts up again.

thanks!

 

[Arc]

Sleep mode has been working fine and not going into BSOD.

Will update if BSOD starts up again.

thanks!

You are welcome mate
Let us know for any further issue.

 

[natakublaze]

Actually, it happened again...

Even trying it to put it into sleep mode gives problems. Becomes non-responsive...

Same situation as before, when idle and goes into sleep mode. But this time, it was more of a crash. It was set to reboot if it encounters BSOD but this time, it just froze and i can't wake it up. Had to push the power button to shut off and restart.

Any help is appreciated.

Regards,

Sunny

 

[Arc]

Well, I hope USB Selective Suspend is still disabled there. Now, update Intel(R) USB 3.0 eXtensible Host Controller, get your suitable one from https://downloadcenter.intel.com/SearchResult.aspx?lang=eng&keyword=XHCI.

If still it does not work, I would suggest you to go for a clean reinstall, and use only one XHCI controller. Either Intel or Asmedia. Not the both.

 

[natakublaze]

Hm, Thanks Arc.

I'll try that.

Really hope I don't have to do a clean install ><;