BSOD after Hibernation

Peerless · Apr 20, 2013

Hi,

I have a HP p6234f running Windows 7 64bit OS.

It seems recently, when I put my PC in hibernate and wake up in the morning, I get the error:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 1e
BCP1: 0000000000000000
BCP2: 0000000000000000
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\042013-50045-01.dmp
C:\Users\Brent\AppData\Local\Temp\WER-276090-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Here is the grab all information:

Download SF_20-04-2013.rar from Sendspace.com - send big files the easy way

koolkat77 · Apr 20, 2013

Norton has been contributing to your crashes. Please remove it using your removal tool from here: Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase

Replace with Microsoft Security Essentials and Malwarebytes which are recommended from a strict BSOD perspective. Run a full scan with both (separately) once downloaded, installed and updated. Microsoft Security Essentials, Free antivirus for windows

Malwarebytes Anti-Malware Free

Good and Free system security combination

Information

DO NOT start the free trial of MalwareBytes. Unselect the option when prompted.

Use the System File Checker tool (SFC.exe) to determine which file is causing the issue, and then replace the file. Use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7 . The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

This tutorial http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html may help you:

To Disable Selective Suspend:

1. open the control panel
2. go to power options (you may have to set view to small icons)
3. click change plan settings
4. in the window that opens:
5. click change plan settings
6. click change advanced power settings, expand usb and ensure usb selective suspend is disabled.

Keep less stuff at the start-up. Only anti-virus, this helps avoid driver conflicts and improves time to log in to windows.

http://www.sevenforums.com/tutorials/1401-startup-programs-change.html

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Run disk check for errors on your Hard Drive(s) http://www.sevenforums.com/tutorials/433-disk-check.html

Keep less stuff at the start-up. Only anti-virus, this helps avoid driver conflicts and improves time to log in to windows.

http://www.sevenforums.com/tutorials/1401-startup-programs-change.html

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Scan your system with the following:
- Kaspersky TDSSKiller How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)
- ESET online scanner One-time virus scanner free with ESET online scanner
- Run the scanners listed here: How to Scan Suspicious Files using Online Scanners
- As well as Windows Defender Offline: How to Use Windows Defender Offline

Heat:

Only use the laptop on a hard surface with nothing blocking any of the vents.

Use a laptop cooling pad if possible

Blow out all vents with canned air (DO NOT use a vacuum cleaner or an air compressor, they can damage the components).

Ensure that the fan comes on and is blowing air out of the vent (may not happen at startup, but should happen after using it for a while).

For monitoring heat of the system, use Speccy or HWMonitor:

Speccy System Information
HWMonitor

Analysis:

Following is for informational purposes only:

*** 3rd PARTY DRIVER LIST ***

Code:

[FONT="Lucida Console"]BHDrvx64.sys                Wed Apr 10 11:39:03 2013 (5164FAF7)
ENG64.SYS                   Thu Dec 20 15:24:21 2012 (50D2D945)
EX64.SYS                    Thu Dec 20 15:22:39 2012 (50D2D8DF)
EraserUtilDrv11220.sys      Wed Aug  1 05:36:50 2012 (50186C12)
EraserUtilRebootDrv.sys     Wed Aug  1 05:36:50 2012 (50186C12)
GEARAspiWDM.sys             Fri May  4 01:56:17 2012 (4FA2E2E1)
IDSvia64.sys                Wed Aug 29 08:48:40 2012 (503D8308)
Ironx64.SYS                 Tue Jul 24 06:34:50 2012 (500DEDAA)
RTKVHD64.sys                Tue Aug  4 15:50:52 2009 (4A78047C)
Rt64win7.sys                Thu Aug 20 22:05:06 2009 (4A8D7432)
SRTSP64.SYS                 Sat Jan 26 03:26:16 2013 (5102F878)
SRTSPX64.SYS                Sat Jan 26 03:30:05 2013 (5102F95D)
SYMDS64.SYS                 Thu Jan 17 07:56:45 2013 (50F75A5D)
SYMEFA64.SYS                Sat Jan 19 06:31:37 2013 (50F9E969)
SYMEVENT64x86.SYS           Thu May 24 06:52:24 2012 (4FBD8648)
SYMNETS.SYS                 Sat Jul 21 08:07:07 2012 (500A0ECB)
amdxata.sys                 Fri Mar 19 22:18:18 2010 (4BA3A3CA)
ccSetx64.sys                Fri Aug 17 03:18:11 2012 (502D6393)
eeCtrl64.sys                Wed Aug  1 05:36:51 2012 (50186C13)
iaStor.sys                  Thu Mar  4 08:51:31 2010 (4B8F2033)
igdkmd64.sys                Fri Sep 11 23:04:45 2009 (4AAA832D)
intelppm.sys                Tue Jul 14 05:19:25 2009 (4A5BC0FD)
netr28x.sys                 Fri Feb 22 15:10:29 2013 (51273605)[/FONT]

BSOD SUMMARY

Code:

[FONT="Lucida Console"]Debug session time: Sat Apr 20 16:12:51.203 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\042013-50045-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 2:00:56.014
Probably caused by : usbuhci.sys ( usbuhci!UhciUnlinkQh+53 )
BugCheck 1E, {0, 0, 0, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001E]KMODE_EXCEPTION_NOT_HANDLED (1e)[/url]
Bugcheck code 0000001E
Arguments: 
Arg1: 0000000000000000, The exception code that was not handled
Arg2: 0000000000000000, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
BUGCHECK_STR:  0x1E
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x1E_usbuhci!UhciUnlinkQh+53
BiosVersion = 5.43   
BiosReleaseDate = 09/10/2009
SystemManufacturer = HP-Pavilion
SystemProductName = NY614AA-ABA p6234f
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat Apr 20 03:37:04.546 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Yusra\SysnativeBSODApps\041913-60200-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 21:58:59.341
Probably caused by : memory_corruption ( nt!MiUpdateWsleHash+1e3 )
BugCheck 50, {fffff7807ffffe00, 0, fffff80002cb1553, 2}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Bugcheck code 00000050
Arguments: 
Arg1: fffff7807ffffe00, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80002cb1553, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000002, (reserved)
BUGCHECK_STR:  0x50
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x50_nt!MiUpdateWsleHash+1e3
BiosVersion = 5.43   
BiosReleaseDate = 09/10/2009
SystemManufacturer = HP-Pavilion
SystemProductName = NY614AA-ABA p6234f
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``[/FONT]

Peerless · Apr 20, 2013

Thanks for the reply.

I wonder why Norton is acting all buggy now? I've used it the past two years.

And am I supposed to do something with that third party driver list?

Thanks.

koolkat77 · Apr 20, 2013

Peerless said:
Thanks for the reply.

I wonder why Norton is acting all buggy now? I've used it the past two years.

And am I supposed to do something with that third party driver list?

Thanks.

Remove it to test. If it was not the cause of your BSOD's, you can install a fresh copy back.
That list is just for information purpose on what drivers were acting up during a crash.

Peerless · Apr 21, 2013

Well after having Norton uninstalled (cleanly) for most of the day, I came back form dinner and found my computer in another BSOD after hibernation.

I have no clue what to do from here.

koolkat77 · Apr 21, 2013

Hmm OK. Upload the new dump files.

And have you performed the rest of the steps?

Peerless · Apr 21, 2013

Yeah I performed the rest of those.

I don't understand what is going on, my PC seemed to be working great until about two weeks ago. I didn't install anything new other than windows updates.

Here is the new information:

Download SF_21-04-2013.rar from Sendspace.com - send big files the easy way

koolkat77 · Apr 21, 2013

Do you have a restore point to two weeks back?

Peerless · Apr 21, 2013

Unfortunately no.

Arc · Apr 21, 2013

Realtek network drivers are causing issues for you ....

Code:

fffff880`0277c180  fffff880`0767c400Unable to load image \SystemRoot\system32\DRIVERS\[URL="http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys"]Rt64win7.sys,[/URL] Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys"]Rt64win7.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys"]Rt64win7.sys[/URL]
 Rt64win7+0x1b400

And the installed version is very old.

Code:

fffff880`07661000 fffff880`076ad000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
[COLOR=Red]    Image name: Rt64win7.sys
    Timestamp:        Fri Nov 27 15:15:07 2009[/COLOR] (4B0F9FA3)
    CheckSum:         00056663
    ImageSize:        0004C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update it from Realtek

Let us know the results.

Peerless · Apr 21, 2013

Hmmm, I see that.

Excuse me for being a moron, but what driver do I update? There seems to be two different windows 7 drivers to download.

Arc · Apr 21, 2013

Peerless said:
what driver do I update? There seems to be two different windows 7 drivers to download.

Both are the same. But the sixth one in the list is easy to install : "Win7 and WinServer 2008 R2 Auto Installation Program (SID:1568649)"

Peerless · Apr 21, 2013

Alright thanks, it is installed. Hopefully it will work!

I might put it into hibernation and see what happens!

Arc · Apr 21, 2013

Let us know how it worked ... and about any further issues.

Peerless · Apr 23, 2013

So far so good!!

Thanks for all of your help.

BSOD after Hibernation

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer

New member

My Computer