blue screen after i shutdown, after a clean reformat

burningash · May 18, 2013

hello , I've got a dumpfile from a blue screen recently and was wondering if anybody could help me discern what type of error it was? I will upload the zipped dumpfile

koolkat77 · May 18, 2013

You need to grab all files following the http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

Right now the cause of your BSOD seems to be a very old driver of Driver Description: Intel(R) 82567LM Gigabit Network Connection try and update it to the latest version available: http://www.carrona.org/drivers/driver.php?id=e1y60x64.sys

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa800a8c3060, fffff80000b9c518, fffffa8010e07c80}

Probably caused by : pci.sys

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa800a8c3060, Physical Device Object of the stack
Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa8010e07c80, The blocked IRP

Debugging Details:
------------------


DRVPOWERSTATE_SUBCODE:  3

IMAGE_NAME:  pci.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc117

MODULE_NAME: pci

FAULTING_MODULE: fffff88000f65000 pci

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

TAG_NOT_DEFINED_c000000f:  FFFFF80000BA2FB0

STACK_TEXT:  
fffff800`00b9c4c8 fffff800`02ee8e23 : 00000000`0000009f 00000000`00000003 fffffa80`0a8c3060 fffff800`00b9c518 : nt!KeBugCheckEx
fffff800`00b9c4d0 fffff800`02e85fa6 : fffff800`00b9c600 fffff800`00b9c600 00000000`00000001 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x29330
fffff800`00b9c570 fffff800`02e85326 : fffff800`03028700 00000000`03e3fc9d 00000000`00000000 fffffa80`0c0c0100 : nt!KiProcessTimerDpcTable+0x66
fffff800`00b9c5e0 fffff800`02e85e7e : 00000946`9e14e932 fffff800`00b9cc58 00000000`03e3fc9d fffff800`02ff6628 : nt!KiProcessExpiredTimerList+0xc6
fffff800`00b9cc30 fffff800`02e85697 : 0000026a`6ae3c3c1 0000026a`03e3fc9d 0000026a`6ae3c39f 00000000`0000009d : nt!KiTimerExpiration+0x1be
fffff800`00b9ccd0 fffff800`02e826fa : fffff800`02ff2e80 fffff800`03000c40 00000000`00000000 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff800`00b9cd80 00000000`00000000 : fffff800`00b9d000 fffff800`00b97000 fffff800`00b9cd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0x9F_3_e1y60x64_IMAGE_pci.sys

BUCKET_ID:  X64_0x9F_3_e1y60x64_IMAGE_pci.sys

Followup: MachineOwner
---------

0: kd> !irp fffffa8010e07c80
Irp is active with 4 stacks 3 is current (= 0xfffffa8010e07de0)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 00000000
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 00000000
>[ 16, 3]   0 e1 fffffa800b844050 00000000 fffff800030c3f70-fffffa800cfd9270 Success Error Cancel pending
	      Unable to load image \SystemRoot\system32\DRIVERS\e1y60x64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1y60x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1y60x64.sys
 \Driver\e1yexpress	nt!PopSystemIrpCompletion
			Args: 00016600 00000000 00000006 00000005
 [  0, 0]   0  0 00000000 00000000 00000000-fffffa800cfd9270    

			Args: 00000000 00000000 00000000 00000000
0: kd> lmvm e1y60x64
start             end                 module name
fffff880`07a00000 fffff880`07a49000   e1y60x64 T (no symbols)           
    Loaded symbol image file: e1y60x64.sys
    Image path: \SystemRoot\system32\DRIVERS\e1y60x64.sys
    Image name: e1y60x64.sys
    Timestamp:        Tue Aug 19 03:45:05 2008 (48A9ED61)
    CheckSum:         00051F0F
    ImageSize:        00049000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

burningash · May 18, 2013

oh my bad, here is the new dump file, the blue screen happened a few days ago , not sure if that is relevent.

koolkat77 · May 18, 2013

Security App

Code:

kl1.sys                     Tue Jun 19 19:27:15 2012 (4FE07E33)
klflt.sys                   Tue Mar 26 20:44:59 2013 (5151B46B)
klif.sys                    Tue Mar 26 21:07:33 2013 (5151B9B5)
klim6.sys                   Thu Aug  2 17:09:23 2012 (501A5FE3)
klkbdflt.sys                Mon Sep  3 19:55:35 2012 (5044B6D7)
klmouflt.sys                Mon Sep  3 20:21:58 2012 (5044BD06)
kltdi.sys                   Fri Feb 15 20:37:32 2013 (511E482C)
kneps.sys                   Tue Mar  5 15:09:23 2013 (5135B643)

Crashes indicate Kaspersky being a possible cause. Remove Kaspersky and replace with Microsoft Security Essentials to see if it provides more stability. Uninstallers (removal tools) for common antivirus software

Microsoft Security Essentials and Malwarebytes, both recommended from a strict BSOD perspective.

Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free

Information

DO NOT start the free trial of MalwareBytes. Deselect the option when prompted.

Tip

Make full scans with both separately.

These drivers need to be updated, if updates are not available remove the software with Revo Free.

Code:

lmimirr.sys                 Wed Apr 11 04:32:45 2007 (461C108D)

RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver Driver Reference Table - lmimirr.sys

Code:

RaInfo.sys                  Sat Jan  5 00:57:14 2008 (477E818A)

LogMeIn/RemotelyAnywhere Kernel Information Provider Driver Reference Table - RaInfo.sys

Code:

LMIRfsDriver.sys            Mon Jul 14 22:26:56 2008 (487B7E50)

RemotelyAnywhere Mirror Miniport Driver or LogMeIn Mirror Miniport Driver Driver Reference Table - LMIRfsDriver.sys

Code:

RTKVHD64.sys                Thu Jul 24 16:05:39 2008 (488853F3)

Realtek High Definition Audio Function Driver Driver Reference Table - RTKVHD64.sys

Code:

e1y60x64.sys                Tue Aug 19 03:45:05 2008 (48A9ED61)

Intel(R) 82567LM Gigabit Network Connection Driver Reference Table - e1y60x64.sys

Code:

amdxata.sys                 Tue May 19 23:56:59 2009 (4A12F2EB)

AMD storage controller driver - usually from the Windows 7 DVD Driver Reference Table - amdxata.sys

Note

Revo Uninstaller
Download and install Revo Uninstaller free from here: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Opt for "Advanced Mode" and uninstall the software (also delete the leftover registry entries). If required, reinstall the latest version available from the mfg website or a good source like filehippo.com

Basic checks: Please run these tests and report back the results

1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure

Install windows updates including Service Pack 1: Learn how to install Windows 7 Service Pack 1 (SP1)

BSOD BUGCHECK SUMMARY

Code:

[FONT="Lucida Console"]Debug session time: Sun May 12 17:02:47.710 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\051213-32875-01.dmp]
[B][COLOR=RED]Missing Windows 7 Service Pack 1[/COLOR][/B]
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
System Uptime: 11 days 19:18:10.453
Probably caused by : pci.sys
BugCheck 9F, {3, fffffa800a8c3060, fffff80000b9c518, fffffa8010e07c80}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000009F]DRIVER_POWER_STATE_FAILURE (9f)[/url]
Bugcheck code 0000009F
Arguments: 
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa800a8c3060, Physical Device Object of the stack
Arg3: fffff80000b9c518, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa8010e07c80, The blocked IRP
BUGCHECK_STR:  0x9F
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_e1y60x64_IMAGE_pci.sys
MaxSpeed:     2670
CurrentSpeed: 2666
BiosVersion = SOX5810J.86A.3435.2009.0210.2311
BiosReleaseDate = 02/10/2009                          
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``[/FONT]

Drivers:

Code:

[FONT="Lucida Console"]**************************Sun May 12 17:02:47.710 2013 (UTC + 6:00)**************************
lmimirr.sys                 Wed Apr 11 04:32:45 2007 (461C108D)
RaInfo.sys                  Sat Jan  5 00:57:14 2008 (477E818A)
LMIRfsDriver.sys            Mon Jul 14 22:26:56 2008 (487B7E50)
RTKVHD64.sys                Thu Jul 24 16:05:39 2008 (488853F3)
e1y60x64.sys                Tue Aug 19 03:45:05 2008 (48A9ED61)
amdxata.sys                 Tue May 19 23:56:59 2009 (4A12F2EB)
intelppm.sys                Tue Jul 14 05:19:25 2009 (4A5BC0FD)
safedrv.sys                 Mon Oct 25 11:12:57 2010 (4CC511D9)
athurx.sys                  Wed Apr 20 16:07:45 2011 (4DAEB071)
AtihdW76.sys                Thu Feb 23 18:30:12 2012 (4F463154)
GEARAspiWDM.sys             Fri May  4 01:56:17 2012 (4FA2E2E1)
kl1.sys                     Tue Jun 19 19:27:15 2012 (4FE07E33)
klim6.sys                   Thu Aug  2 17:09:23 2012 (501A5FE3)
klkbdflt.sys                Mon Sep  3 19:55:35 2012 (5044B6D7)
klmouflt.sys                Mon Sep  3 20:21:58 2012 (5044BD06)
atikmpag.sys                Sat Nov 17 01:39:13 2012 (50A69661)
atikmdag.sys                Sat Nov 17 02:18:02 2012 (50A69F7A)
kltdi.sys                   Fri Feb 15 20:37:32 2013 (511E482C)
kneps.sys                   Tue Mar  5 15:09:23 2013 (5135B643)
klflt.sys                   Tue Mar 26 20:44:59 2013 (5151B46B)
klif.sys                    Tue Mar 26 21:07:33 2013 (5151B9B5)[/FONT]

koolkat77 · Jun 1, 2013

Any update?

blue screen after i shutdown, after a clean reformat

burningash

New member

My Computer

koolkat77

New member

My Computer

burningash

New member

My Computer

koolkat77

New member

My Computer

koolkat77

New member

My Computer

Similar threads

blue screen after i shutdown, after a clean reformat

burningash

New member

My Computer My Computer

koolkat77

New member

My Computer My Computer

burningash

New member

My Computer My Computer

koolkat77

New member

My Computer My Computer

koolkat77

New member

My Computer My Computer

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer