Solved BSOD when computer goes to sleep mode - 0x0000000a

[JMF11]

Dear all,

I have setup a new build, and it works fine except that I get quasi systematic BSOD when the computer goes to sleep mode. If I prevent going to sleep mode, then the computer can work 24 hours without issue.

The BIOS is up to date. I tried to get all drivers at the latest revision (it is a simple config with only a SSD, a HDD, a DVD burner, a Wifi PCI board).

I tried to understand what goes wrong by myself, but do not succeed. Help would be greatly appreciated

I attach the dump files (SF).

Kind regards,

JMF

 

[Arc]

Hi JMF11.

The crash dumps are not very informative themselves.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

If it does not show any error, enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

   Information

Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How Can we know that DV is enabled:
It will make the system bit of slow, laggy.

   Warning

Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point manually before enabling DV.

   Tip

• If you fail to get on the Desktop because of DV, Boot into Advanced Boot Options > Safe mode. Disable DV there. Now boot normally again, and try following the instruction of enabling DV again.
• If you cannot boot in Safe mode too, do a System Restore to a point you made earlier.

Let us know the results, with the subsequent crash dumps, if any.
____________________________

BugCheck A, {fffff8a0003274e0, 2, 0, fffff80002e5deaa}

Probably caused by : cng.sys ( cng!GatherRandomKey+294 )

Followup: MachineOwner
---------

ASUS PID on MSI?
​

 

[JMF11]

Hi Arc,

Thanks for the instructions. I'll perform the different tests and post the result. At the moment I have a small problem booting on the USB key to perform the Memtest86+. Hopefully I'll solve it soon.

Regards,

JMF

 

[Arc]

In that case you may try a bootable memtest86+ CD.

 

[JMF11]

Yes, I went the easy way and used the bootable CD. It then went straigth forward. I let the test run all the afternoon (6hours something) and no error. Fine.

Next step will be DV. I'll let you know about the result.

Regards,

JMF

 

[JMF11]

Hello,

Just a post to say that I will be out of home for a few days, so I won't be able to work on my troubleshooting.

As of today, I setup Driver Verifier and activated it. As a result, the PC is not booting any more, and directly crashes with a BSOD.

I have to read the tutorial for this case and I imagine start in safe mode and hope the that dump file helps to identify the first faulty driver.

Regards

JMF

 

[Arc]

Boot into Safe mode and disable Driver Verifier.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept then restart.

Now enable Driver Verifier again. Hopefully this time it will generate a crash dump.

 

[JMF11]

Hi,

Last update: I followed the instructions to boot in safe mode. Through trial and error process I identified the drivers that generated the crash at the boot when using DV. It is mbfilt64.sys.

I excluded this mbfilt64.sys from the list of the drivers to be verified, and then Seven is booting fine. It was stable all over the night.

This driver seems to be related to the Realtek audio chipset, and HD audio. I went to realtek website and downloaded the last versions of the drivers and installed them. Seems that It didn't changed anything as the dirver version is the same... and it still crash at the boot if in DV list.

I unchecked it from DV list, and let the PC running for today, testing at least the other drivers.

Regards,

JMF

 

[Arc]

Hi,

Last update: I followed the instructions to boot in safe mode. Through trial and error process I identified the drivers that generated the crash at the boot when using DV. It is mbfilt64.sys.

I excluded this mbfilt64.sys from the list of the drivers to be verified, and then Seven is booting fine. It was stable all over the night.

This driver seems to be related to the Realtek audio chipset, and HD audio. I went to realtek website and downloaded the last versions of the drivers and installed them. Seems that It didn't changed anything as the dirver version is the same... and it still crash at the boot if in DV list.

I unchecked it from DV list, and let the PC running for today, testing at least the other drivers.

Regards,

JMF

Your experience with mbfilt64.sys is normal. There is no update to this driver, and sometimes it causes problems in simple safe mode boot, too.

BTW, I dont have mbfilt64.sys present in my system, though I have RTKVHD64.sys present there.

Just being curious about that particular driver, I have a request to you (not a suggestion; it might not form a part of the troubleshooting, but will help me to enhance my knowledge). Can you please upload the list of all the third party drivers Using NirSoft DriverView :

• Download and execute Driverview
• View > Hide Microsoft Drivers
• Edit > Select all
• File > Save Selected Items
• In the Save dialog, Set the path to desktop, Put "Driverview" in the name field, and save.
• Zip the .txt file and upload it.

As it is not present in my system, your upload will help me to learn the actual status of this driver.

 

[JMF11]

Here is the DriverView file, that contains the mbfilt64.sys.

Would it be worth trying to uninstall this driver to see if it is the one that cause the BSOD when the computer goes to sleep ? And how to do it ?

It would be a bit surprising that this driver, that comes with the mobo bundle is the one that cause my problems... but who knows.

All the other drivers passed the 24 hours DV test....

Regards,

JMF

 

[Arc]

Thanks for the file, now I know what is it.

==================================================
[COLOR=Red]Driver Name       : MBfilt64.sys[/COLOR]
Address           : 00000000`061CB000
End Address       : 00000000`061D9000
Size              : 0x0000e000
Load Count        : 1
Index             : 122
File Type         : Dynamic Link Library
[COLOR=Red]Description       : Creative Audio Driver[/COLOR]
Version           : 6.10.0.8
[COLOR=Red]Company           : Creative Technology Ltd.[/COLOR]
Product Name      : 
Modified Date     : 18/11/2009 07:12:00
Created Date      : 24/06/2014 07:02:51
[COLOR=Red]Filename          : C:\Windows\system32\drivers\MBfilt64.sys[/COLOR]
File Attributes   : A
Service Name      : MBfilt
Service Display Name: 
Digital Signature : 
==================================================

It is leveled as Creative Audio Driver by Creative Technology Ltd. And you dont have any audio device by creative, it is Realtek HD Audio only that you have. At this point I am suspecting that it is not very wanted or you.

If your computer is having a factory installed OS (it seems so), then It will be the best for you to http://www.sevenforums.com/tutorials/219576-clean-up-factory-bloatware.html, with a special reference to Point #13

13. Consider a Clean Reinstall - Factory OEM Windows 7 which is often better than getting a new computer considering how pre-installed bloatware can corrupt Windows 7 even if it's completely cleaned up.

 

[JMF11]

Hello,

In fact, I personally installed Windows, and it is a clean install. The only thing is that I installed all mother board drivers, and I fill that it came with the package associated to the realtek chipset. I had no option to install a subset of drivers...

1) is there a way to uninstall this driver that I do not need ?

2) Would you have other ideas to troubleshoot my BSOD when the PC goes to sleep mode (however it did not happened again since yesterday...) ?

FYI, i uninstalled Glary utilities.

Kind regards,

JM

 

[Arc]

Hi JMF11.

It is a bad news that you did not have an option to customize the driver installation. Apparently that is the root of all the issues you are having. A very limited few of the bundled items of the motherboard's disc is actually needed. The rest are the bloated items. Never necessary and often problematic.

I am trying to answer your questions:

► 1. Yes, you can attempt to uninstall and reinstall the Realtek Audio drivers. From Realtek's uninstallation instructions:

View attachment 323113​

Hopefully it will uninstall teh entire audio driver package, including mbfilt64.sys.

Next, go to Realtek and download Vista, Windows7, Windows8, Windows8.1, Driver (32/64bits) Driver only (ZIP file) i.e. the 5th item on the list (not the executable, coz that will execute all the drivers again). Follow http://www.sevenforums.com/tutorials/97061-driver-install-device-manager.html to install the driver to Device Manager > Sound, Video and Game Controllers > Realtek High Definition audio.

► The Sleep related BSODs are caused when you wake a computer up from sleep. A power state changes, and one (or more) device driver/s fail/s to respond within a stipulated time period. The devices are configured with ACPI.

In your system, ACPI is controlled by a third party element, not by windows itself.

==================================================
[COLOR=Red]Driver Name       : AcpiCtlDrv.sys[/COLOR]
Address           : 00000000`04D7E000
End Address       : 00000000`04D88000
Size              : 0x0000a000
Load Count        : 1
Index             : 99
File Type         : Installable Driver
[COLOR=Red]Description       : Intel(R) Acpi Control Driver[/COLOR]
Version           : 3.0.25.1
Company           : Intel Corporation
[COLOR=Red]Product Name      : Intel(R) Extreme Tuning Utility Performance Tuning Driver[/COLOR]
Modified Date     : 17/07/2012 10:07:22
Created Date      : 17/07/2012 10:07:22
[COLOR=Red]Filename          : C:\Windows\system32\DRIVERS\AcpiCtlDrv.sys[/COLOR]
File Attributes   : A
[COLOR=Red]Service Name      : AcpiCtlDrv[/COLOR]
Service Display Name: 
Digital Signature : 
==================================================

You have got Intel Extreme Tuning Utility by installing the entire items of the Driver CD in a single go. You dont want to install it, and it is not anyhow needed for the computer. If it is present there in the Control Panel's uninstallation list, uninstall it.

But if it is not there, the best way to avoid unwanted drivers is to have a driver complete clean reinstall.

 

[JMF11]

Hello,

I followed your instructions. I uninstalled Realtek HD audio drivers. In fact, no issue identified in the device manager: a microsoft HD audio driver has been installed at the reboot.

I also uninstalled Intel Extreme Tuning Utility. And as I was there, I uninstalled Avast to replace it by Microsoft Security Essentials.

I attach the new driver list.

I'll test for some days, to see if the way to and from sleep mode is improved. I'll let you know.

Thanks a lot for all your advices and support ! It is much much appreciated. I learned a lot.

I also bookmarked the link about the clean install. I'll go this way the next time

Kind regards,

JMF

 

[Arc]

Well done!

Avast is a good antivirus. Sometimes it causes issues, but that is not very frequent. MSE is not bad, too.

About learning, we always learn from each other. That is why we are here.

Let us know how it goes.

 

[JMF11]

Hello,

No BSOD since the last cleaning . The PC works fine now. Let's consider that the problem is solved now.

Thanks you so much for your invaluable help, Arc.

I'll mark the thread as solved except if you feel some additional actions have to be performed.

Kind regards,

JMF

 

[Arc]

I think you may mark it as solved. Your issue is dealt with.

But the BSODs are unpredictable, you know.

 

[JMF11]

Thanks a Lot Arc !!!

The issue is solved.

JMF

 

[Arc]

Credit goes to you. You worked really hard to solve it, and I also enriched my knowledge from your efforts.