Solved Constant BSOD from iastorA.sys 0x10~7e or 0x10~7e

[simrick]

Hi.
I have a W7HP SP1 x64 Dell Inspiron 15Z Ultrabook model 5523, 6GB RAM, 500GB HDD, that is blue-screening so much I can't accomplish any type of troubleshooting anymore. I did manage to get some info from WhoCrashed: it said every crash was caused by iastorA.sys. Happens in safe mode as well. The error code is 0x10~7e or 0x0~7e

Sorry, I can't do the dm log collector - can't keep the computer on long enough to open the browser.

Right now, I have it booted to a live linux distro and am in the process of copying all User files over to an external HDD.

I ran the diagnostics available pre-boot, and everything checked out fine (hardware).

I am wondering if this iastorA.sys is corrupt, or not necessary? Is there a way to boot to safe mode with C prompt and just delete it or something?

Thanks.

 

[derekimo]

If WhoCrashed is correct, that driver is the Intel Rapid Storage Technology driver, that does fit the 7e bugcheck you mention. (Storage/HDD/Etc.)

You could try updating it first,

Intel Rapid Storage Technology Driver Driver Details | Dell US

If you're in there with a live CD grab the dump files from C:\Windows\(Minidump or MEMORY Dump) folder and post them.

 

[simrick]

If WhoCrashed is correct, that driver is the Intel Rapid Storage Technology driver, that does fit the 7e bugcheck you mention. (Storage/HDD/Etc.)

You could try updating it first,

Intel Rapid Storage Technology Driver Driver Details | Dell US

If you're in there with a live CD grab the dump files from C:\Windows\(Minidump or MEMORY Dump) folder and post them.

Hi. Thanks for the response.
I am attaching the WhoCrashed report here. Will do the minidumps as soon as I can figure out how to open them in this W10 machine.....

EDIT - zipped them up - here they are as well.

EDIT#2 - I was able to get the update "Serial-ATA_Driver_CY1HK_WN_12.8.0.1016_A03.EXE" installed and rebooted the machine successfully. Am running an ESET online scan now, just to see if anything is on here that shouldn't be, and to see if it stays on, or blue-screens again. Will report back.

 

[derekimo]

You're welcome.

Yeah, every one of your dumps is pointing to iastorA.sys,

BugCheck 1000007E, {ffffffffc0000005, fffff8800154f27c, fffff88002b6f7e8, fffff88002b6f040}

Probably caused by : iaStorA.sys ( iaStorA+6127c )

Followup: MachineOwner
Loaded symbol image file: iaStorA.sys
    Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys
    Image name: iaStorA.sys
    Timestamp:        [COLOR="Red"][B]Thu Aug 01 18:39:52 2013[/B][/COLOR] (51FB0DE8)
    CheckSum:         000AC609
    ImageSize:        002BA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

I don't think that driver I linked you is an update,

View attachment 367067

Pretty close to the same date on that driver, it may help though.

Try and run the log collector again, there's a lot of info in there that helps.

 

[essenbe]

Hello, simrick. I looked at your last 5 dump files and they were all the same.

Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff8800154f27c, fffff88002b6f7e8, fffff88002b6f040}
[COLOR=red]Probably caused by : iaStorA.sys[/COLOR] ( iaStorA+6127c )
Followup: MachineOwner

That is Intel Rapid Storage Technology (IRST) You may want to update it. This is your current IRST driver you have now.

iaStorA
start             end                 module name
fffff880`014ee000 fffff880`017a8000   iaStorA  T (no symbols)           
    Loaded symbol image file: iaStorA.sys
    Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys
    Image name: iaStorA.sys
    [COLOR=red]Timestamp:        Thu Aug 01 20:39:52 2013[/COLOR] (51FB0DE8)
    CheckSum:         000AC609
    ImageSize:        002BA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Sorry, I posted at the same time Derek did. Just trying to help the Boss out.

Are you in AHCI Mode? If so, you could try to go to Devics Manager and expand IDE/ATA/ATAPI and find the AHCI Drivers listed there. They will be the ones with AHCI in the name.

Here are mine. Look for the Intel 9 Series chipset AHCI controller. Yours will be a different chipset number.Right click it and select properties, go to the Driver tab and either roll back driver, or you could uninstall driver. I would try the roll back first. If you are in IDE or Raid mode, please let us know. That can be done pretty quickly. With mine the Roll Back Driver is Greyed out, my only choice is uninstall. You may try the Update Driver and then check online.

View attachment 367071

View attachment 367072

 

[derekimo]

Thanks Steve! Always good to have an extra set of eyes!

 

[simrick]

You're welcome.

Yeah, every one of your dumps is pointing to iastorA.sys,

BugCheck 1000007E, {ffffffffc0000005, fffff8800154f27c, fffff88002b6f7e8, fffff88002b6f040}

Probably caused by : iaStorA.sys ( iaStorA+6127c )

Followup: MachineOwner
Loaded symbol image file: iaStorA.sys
    Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys
    Image name: iaStorA.sys
    Timestamp:        [COLOR=Red][B]Thu Aug 01 18:39:52 2013[/B][/COLOR] (51FB0DE8)
    CheckSum:         000AC609
    ImageSize:        002BA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

I don't think that driver I linked you is an update,

View attachment 367067

Pretty close to the same date on that driver, it may help though.

Try and run the log collector again, there's a lot of info in there that helps.

Finally got the thing to stay on long enough to grab the collector zip file - here it is. Will update more from a different computer.

 

[simrick]

Hello, simrick. I looked at your last 5 dump files and they were all the same.

Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff8800154f27c, fffff88002b6f7e8, fffff88002b6f040}
[COLOR=red]Probably caused by : iaStorA.sys[/COLOR] ( iaStorA+6127c )
Followup: MachineOwner

That is Intel Rapid Storage Technology (IRST) You may want to update it. This is your current IRST driver you have now.

iaStorA
start             end                 module name
fffff880`014ee000 fffff880`017a8000   iaStorA  T (no symbols)           
    Loaded symbol image file: iaStorA.sys
    Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys
    Image name: iaStorA.sys
    [COLOR=red]Timestamp:        Thu Aug 01 20:39:52 2013[/COLOR] (51FB0DE8)
    CheckSum:         000AC609
    ImageSize:        002BA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Sorry, I posted at the same time Derek did. Just trying to help the Boss out.

Are you in AHCI Mode? If so, you could try to go to Devics Manager and expand IDE/ATA/ATAPI and find the AHCI Drivers listed there. They will be the ones with AHCI in the name.

Here are mine. Look for the Intel 9 Series chipset AHCI controller. Yours will be a different chipset number.Right click it and select properties, go to the Driver tab and either roll back driver, or you could uninstall driver. I would try the roll back first. If you are in IDE or Raid mode, please let us know. That can be done pretty quickly. With mine the Roll Back Driver is Greyed out, my only choice is uninstall. You may try the Update Driver and then check online.

View attachment 367071

View attachment 367072

Here is what I have:

EDIT: sorry for the short posts - it blue-screened on me right after I got these posted. I am on another machine now.

So, the Intel file, when run asked if I wanted to uninstall or fix, and I chose fix. Was able to get through that and a reboot before another BS. Then I tried the second download on that page, but it wouldn't work, as the drive is in use (or something like that).

I couldn't get through a complete ESET online scan, so I eventually had it running on the User account only, and managed to complete that. Found a lot of PUPs/PUMs, and one interesting installer.

TDSS Killer found nothing. RKILL found nothing. MBAM found very little.

I also got the WER files from the last dumps (attached).

Ran sfc /scannow and found no integrity violations.

I am stumped. I hope you guys have some ideas because I really don't want to do a factory reinstall.

Thanks to both of you!!

 

[essenbe]

Simrick, from looking at your Device Manager screenshot, you are not in AHCI Mode, you are in Raid mode. IRST is probably needed in that case. I suspect you have Intel Rapid Start enabled. I believe the SSD acts as a cache for your hard drive but requires Rapid Storage Driver to be installed. Did you install any new Software or programs immediately before this started?

Based on your MSINFO32, most of your problems in the past Month have come from Verizon.exe and MSVCR90.DLL. MSVCR90.DLL, I believe is a DLL file necessary for Visual Studio or Programs written for Visual Studio.

Have you tried booting into Safe Mode? If so, run in Safe Mode for a while and see if you do OK. I assume you ran OK running your Live Linux.

 

[simrick]

Simrick, from looking at your Device Manager screenshot, you are not in AHCI Mode, you are in Raid mode. IRST is probably needed in that case. I suspect you have Intel Rapid Start enabled. I believe the SSD acts as a cache for your hard drive but requires Rapid Storage Driver to be installed. Did you install any new Software or programs immediately before this started?

Based on your MSINFO32, most of your problems in the past Month have come from Verizon.exe and MSVCR90.DLL. MSVCR90.DLL, I believe is a DLL file necessary for Visual Studio or Programs written for Visual Studio.

Have you tried booting into Safe Mode? If so, run in Safe Mode for a while and see if you do OK. I assume you ran OK running your Live Linux.

Yes, I checked and IRST is indeed enabled in the BIOS. I disabled it, booted, got an error that it was not running, and re-enabled it.

Yes, there is a Verizon backup of some sort on here. I get an error from it every time I boot, that it needs a login or something. Since this is not my computer, I haven't touched that. I will ask if it's okay to remove.

I think this BSOD started around the 18th (near as I can tell), and I've looked at the installed programs by date (Ccleaner); not seeing anything really suspicious. I will upload a text file of installed programs when I boot it up again.

I have had it in safe mode a few times - always the same, blue-screening after a few minutes. I even have difficulty getting it to boot to disk at times. I can't even get it to boot to my Memtest86+ which I have used numerous times on other machines.

I had to turn off the secure boot and finally got the Linux distro to boot. I have had the live Linux CD running for quite some time, without issue, and it doesn't warn me that the HDD is failing either, so I am sure this is a driver issue. Like I said above, I have run the pre-boot diagnostics available on the machine and everything checked out okay.

Thanks.

Edit - have permission to get rid of the VZW stuff. Doing that now.

 

[simrick]

Installed programs file (current).

 

[essenbe]

I don't see but a couple of things that stand out.

There are 2 versions of Microsoft Office installed. That may not be a problem. I know some versions run well side by side.

There are 2 VLC Players installed, both the same version

Shared C Run-time for x64 McAfee 10/18/2013 1.38 MB 10.0.0 I'm not real sure what that is, but Everyone I know who works BSODs will say get rid of McAfee any time they see it. It is the cause of a multitude of problems. If it is a part of McAfee AV and Avast is installed, it is never a good idea to run 2 real time AVs, especially when one is named McAfee .

These all seem to have been installed about the same time the BSODs started

Dell SupportAssist Dell 7/19/2015 197 MB 1.1.6664.10
WhoCrashed 5.03 Resplendence Software Projects Sp. 7/18/2015 10.2 MB 
Malwarebytes Anti-Malware version 2.1.8.1057 Malwarebytes Corporation 7/17/2015 64.5 MB 2.1.8.1057
Citrix Online Launcher Citrix 7/17/2015 302 KB 1.0.335
GoToMeeting 7.2.3.3019 CitrixOnline 7/16/2015  7.2.3.3019
Adobe Flash Player 18 NPAPI Adobe Systems Incorporated 7/15/2015 17.6 MB 18.0.0.209
Adobe Flash Player 18 ActiveX Adobe Systems Incorporated 7/15/2015 17.1 MB 18.0.0.209
Mozilla Maintenance Service Mozilla 7/8/2015 373 KB 39.0
Mozilla Firefox 39.0 (x86 en-US) Mozilla 7/8/2015 162 MB 39.0

 

[simrick]

I don't see but a couple of things that stand out.

There are 2 versions of Microsoft Office installed. That may not be a problem. I know some versions run well side by side.

There are 2 VLC Players installed, both the same version

Shared C Run-time for x64 McAfee 10/18/2013 1.38 MB 10.0.0 I'm not real sure what that is, but Everyone I know who works BSODs will say get rid of McAfee any time they see it. It is the cause of a multitude of problems. If it is a part of McAfee AV and Avast is installed, it is never a good idea to run 2 real time AVs, especially when one is named McAfee .

These all seem to have been installed about the same time the BSODs started

Dell SupportAssist Dell 7/19/2015 197 MB 1.1.6664.10
WhoCrashed 5.03 Resplendence Software Projects Sp. 7/18/2015 10.2 MB 
Malwarebytes Anti-Malware version 2.1.8.1057 Malwarebytes Corporation 7/17/2015 64.5 MB 2.1.8.1057
Citrix Online Launcher Citrix 7/17/2015 302 KB 1.0.335
GoToMeeting 7.2.3.3019 CitrixOnline 7/16/2015  7.2.3.3019
Adobe Flash Player 18 NPAPI Adobe Systems Incorporated 7/15/2015 17.6 MB 18.0.0.209
Adobe Flash Player 18 ActiveX Adobe Systems Incorporated 7/15/2015 17.1 MB 18.0.0.209
Mozilla Maintenance Service Mozilla 7/8/2015 373 KB 39.0
Mozilla Firefox 39.0 (x86 en-US) Mozilla 7/8/2015 162 MB 39.0

Thanks Essenbe. I will start uninstalling all this stuff tomorrow and see what happens. I've already removed Avast and put MS Security Essentials on there for now. Still getting BSODs though.

 

[essenbe]

If none of those things help, there are several things we could try, depending on how much time you want to spend on it. Some would require a lot of time and some would be risking a clean install. There is one thing experimental I have thought of trying, but never have on a machine with driver problems.

One thing I would do for certain is cleanup your startup programs. There are way too many in startup. The only thing really necessary is the AV. These are the startups

Caption                                                               Command                                                                                                                                                       User                          
Sidebar                                                               %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun                                                                                                           NT AUTHORITY\LOCAL SERVICE    
Sidebar                                                               %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun                                                                                                           NT AUTHORITY\NETWORK SERVICE  
Dropbox                                                               Dropbox.lnk                                                                                                                                                   Cynthia-PC\Cynthia            
Verizon Wireless Software Utility Application for Android – Samsung  Verizon Wireless Software Utility Application for Android – Samsung.lnk                                                                                      Cynthia-PC\Cynthia            
SUPERAntiSpyware                                                      C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe                                                                                                        Cynthia-PC\Cynthia            
Google Update                                                         "C:\Users\Cynthia\AppData\Local\Google\Update\GoogleUpdate.exe" /c                                                                                            Cynthia-PC\Cynthia            
HLBackupScheduler                                                     "C:\Program Files\Verizon Cloud\Verizon Cloud Service.exe"                                                                                                    Cynthia-PC\Cynthia            
SmileboxTray                                                          "C:\Users\Cynthia\AppData\Roaming\Smilebox\SmileboxTray.exe"                                                                                                  Cynthia-PC\Cynthia            
Dropbox Update                                                        "C:\Users\Cynthia\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c                                                                                          Cynthia-PC\Cynthia            
HP Digital Imaging Monitor                                            C:\PROGRA~2\Hp\DIGITA~1\bin\hpqtra08.exe                                                                                                                      Public                        
SysTrayApp                                                            C:\Program Files\IDT\WDM\sttray64.exe                                                                                                                         Public                        
SynTPEnh                                                              %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe                                                                                                                   Public                        
QuickSet                                                              c:\Program Files\Dell\QuickSet\QuickSet.exe                                                                                                                   Public                        
IntelTBRunOnce                                                        wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"                                                                              Public                        
BLEServicesCtrl                                                       C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe                                                                                                    Public                        
BTMTrayAgent                                                          rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp                                                                                  Public                        
IAStorIcon                                                            "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60  Public

The problem you are facing is that your machine, as it is set up now, needs IRST to run because it is set up with Intel Rapid Start. But, it is IRST that is causing your problems. I know that if set up in a true Raid, a clean install is necessary to change it to AHCI or IDE mode. I don't know how it would affect the Intel Rapid Start, because it is not a true Raid set up.

The code you are getting and the fact that it is IaStor being pointed out, is a strong indication that it is a storage problem. Unless provided with some type of utility for the SSD, they are difficult to test, but I would suggest running Seatools for DOS on the Mechanical Hard Drive. http://www.sevenforums.com/tutorials/313457-seatools-dos-windows-how-use.html#Part2. I would suggest Check Disk too (http://www.sevenforums.com/tutorials/433-disk-check.html), but I can't suggest you run them on the SSD. In case you are not aware, IRST is Intel's Raid controller and also contains Intel's AHCI driver. So, it would seem the problem is with IRST, or the drives or system files being corrupted on the drive. If you have any questions, I will be happy to answer any of them. Let me know how it goes and if anything improves or not. We're not giving up yet.

 

[simrick]

@essenbe quick question: what about the first driver listed on this page?

https://downloadcenter.intel.com/product/55005/Intel-Rapid-Storage-Technology-Intel-RST-

I know this is not the Dell website....but....

Edit: Here, this is a link directly to the one I am looking at:

https://downloadcenter.intel.com/download/25091/Intel-Rapid-Storage-Technology-Intel-RST-RAID-Driver

 

[essenbe]

This will tell you which Chipsets it supports. Intel® Rapid Storage Technology (Intel® RST) — Supported Chipsets and Controller Hubs Which you probably have. The only thing I don't know is most OEMs alter many of their drivers. Whether IRST is one of them I don't know. I have downloaded and used drivers from Intel before and not had a problem. I would think it wouldn't hurt to try.

 

[simrick]

This will tell you which Chipsets it supports. Intel® Rapid Storage Technology (Intel® RST) — Supported Chipsets and Controller Hubs Which you probably have. The only thing I don't know is most OEMs alter many of their drivers. Whether IRST is one of them I don't know. I have downloaded and used drivers from Intel before and not had a problem. I would think it wouldn't hurt to try.

OMG I am feeling like a dweeb here...not making sense of that page. Do these snips from Belarc Advisor & Speccy provide the info needed to make that call?

 

[essenbe]

The HM67 motherboard is part of the Intel 6 Series Chipset C216.. No reason for you to feel like a dweeb or anything else. You have no reason to know that. I presume all of your drivers are from Dell for that particular laptop. I ask, because I questioned last night why you had some Series 7 drivers and some series 6 drivers. Not to try to confuse you, but it may be OK, as even though they are different chipsets, they are the same 1155 (desktop)socket. Probably called something else on laptops, but still the same. I don't know the answer to that one. But, I am assuming it is fine, for now. They are all just revisions of the same socket.

 

[essenbe]

Look at this one and see. I think this is the one. You don't need the F6flpy. That is for installing it during a clean install. You may want to get it and save it in case. But you need the setupRST https://downloadcenter.intel.com/download/23060/Intel-Rapid-Storage-Technology-Intel-RST-RAID-Driver I believe this is right and may be the same one you are looking for. Just set a restore point before installing if you have doubts. http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

 

[simrick]

Look at this one and see. I think this is the one. You don't need the F6flpy. That is for installing it during a clean install. You may want to get it and save it in case. But you need the setupRST https://downloadcenter.intel.com/download/23060/Intel-Rapid-Storage-Technology-Intel-RST-RAID-Driver I believe this is right and may be the same one you are looking for. Just set a restore point before installing if you have doubts. http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

Thanks Essenbe. I will try that in a little while. As of right now, I have uninstalled a bunch of the programs from around the time the problem began, and have modified startups (msconfig), but I - for some very strange reason - seem to have a stable boot right now, and have had the thing on for over an hour, so I decided to try making the recovery disks (which were never done). If I can get through that successfully, then I will d/l this driver, set a restore point, and if I am still blue-screening, I will install that driver.

Thanks for all the help! I will report back.