Solved Driver causing BSOD - how to totally uninstall?

[luckycharms]

Hi folks,

Starting getting BSOD's when trying to sleep my comp. This started happening after my scanner driver started acting strange (though there were some other driver issues as well). In any case, I got the following entry in my Event Viewer just before the crash, so I'm guessing it's the scanner driver that's causing the issue.

The driver \Driver\WSDScan for device urn:uuid:e3248000-80ce-11db-8000-0022587e5c53\UMB\3&9784ddc&2&uri:e3248000-80ce-11db-8000-0022587e5c53/ScannerService stopped the power transition.

My question is, how can I be sure to really remove the driver completely?

thanks!

 

[Arc]

Can you post it following the Blue Screen of Death (BSOD) Posting Instructions, so that we can find out the causes?

 

[luckycharms]

Here you go - sorry about that. I uninstalled the printer that i thought was causing the issue, but still getting the same problem. See the attached zip. Any help is *greatly* appreciated. Please let me know once you've grabbed the zip so i can delete it. The bugcheck I get is:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: 9f
BCP1: 0000000000000003
BCP2: FFFFFA8006C8AE30
BCP3: FFFFF80000B9C518
BCP4: FFFFFA800C75E760
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\021313-50388-01.dmp
C:\Users\ashenkin\AppData\Local\Temp\WER-57205-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

 

[Arc]

Apparently, you need to update some drivers.

• Cisco AnyConnect VPN Client : Support and Downloads - Cisco Systems
• nVidia Display driver: Drivers - Download NVIDIA Drivers
• Intel Rapid Storage: This one.
• Intel Graphics driver: Intel Download Center
• Intel® Wireless WiFi Link Adapter: Intel® Customer Support

Found nothing wrong with the scanner driver itself.

0: kd> lmvm nvlddmkm
start             end                 module name
fffff880`0f68e000 fffff880`10368000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Fri Aug 12 16:25:35 2011 (4E4506A7)
    CheckSum:         00CD1690
    ImageSize:        00CDA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
-------------------------------------------------------------------------------------------------------
0: kd> lmvm iastor
start             end                 module name
fffff880`01213000 fffff880`0141d000   iaStor   T (no symbols)           
    Loaded symbol image file: iaStor.sys
    Image path: \SystemRoot\System32\Drivers\iaStor.sys
    Image name: iaStor.sys
    Timestamp:        Thu Mar 04 08:21:31 2010 (4B8F2033)
    CheckSum:         0008BE3A
    ImageSize:        0020A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
------------------------------------------------------------------------------------------------------
0: kd> lmvm igdkmd64
start             end                 module name
fffff880`05c55000 fffff880`067fec20   igdkmd64 T (no symbols)           
    Loaded symbol image file: igdkmd64.sys
    Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys
    Image name: igdkmd64.sys
    Timestamp:        Sat May 21 23:51:49 2011 (4DD802BD)
    CheckSum:         00BB6001
    ImageSize:        00BA9C20
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
------------------------------------------------------------------------------------------------------
0: kd> lmvm vpnva64
start             end                 module name
fffff880`0bbb8000 fffff880`0bbc2000   vpnva64  T (no symbols)           
    Loaded symbol image file: vpnva64.sys
    Image path: \SystemRoot\system32\DRIVERS\vpnva64.sys
    Image name: vpnva64.sys
    Timestamp:        Fri Mar 11 08:53:47 2011 (4D7995C3)
    CheckSum:         000060EB
    ImageSize:        0000A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
-------------------------------------------------------------------------------------------------------
0: kd> lmvm Netwsw00
start             end                 module name
fffff880`06a9c000 fffff880`075e5000   Netwsw00   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Netwsw00.sys
    Image name: Netwsw00.sys
    Timestamp:        Sun Jun 03 21:03:40 2012 (4FCB83D4)
    CheckSum:         00B012F3
    ImageSize:        00B49000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[luckycharms]

Thanks Arc. So, I'm on a thinkpad, and Lenovo recommends only installing lenovo drivers. They modify manufacturer drivers to work on their machines. Lenovo is notorious for being very slow at releasing their drivers.

In any case, I did update the NVIDIA and Intel Rapidstor drivers. The Anyconnect is up to date according to my provider - moving to version 3 is an upgrade.

After doing that, I'm still getting long hangs and then crashes when trying to sleep. Strangely, if I'm not doing much on my computer, it sleeps just fine. But if I've been doing stuff on it for a while, that's when the problem crops up. Please see the new logs, attached.

 

[Arc]

Mate, unfortunately there is no new crash dumps .
You sure that it's a BSOD? ?

 

[luckycharms]

Thanks Arc. So, you don't see evidence of a BSOD in this dump? Or, you mean there's just nothing new?

My machine has been experiencing BSOD's up until now. I didn't specifically see this BSOD, since it takes about 10 minutes to actually crash once I try to put it to sleep. But all the others have been BSOD's, and it definitely crashed just like all the other times.

I'm uploading another here just in case.

 

[Arc]

A new dump in the latest zip, and it is crashed on Intel wifi driver, again.

0: kd> !irp fffffa800c9c4ab0
Irp is active with 4 stacks 2 is current (= 0xfffffa800c9c4bc8)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

            Args: 00000000 00000000 00000000 00000000
>[ 16, 2]   0  0 fffffa800aa11050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\system32\DRIVERS\Netwsw00.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwsw00.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwsw00.sys
*** WARNING: Unable to verify timestamp for ndis.sys
*** ERROR: Module load completed but symbols could not be loaded for ndis.sys
 \Driver\NETwNs64
            Args: 00014400 00000000 00000004 00000002
 [ 16, 2]   0 e1 fffffa800aa12c70 00000000 fffff80003cce200-fffffa800bc7edb0 Success Error Cancel pending
           \Driver\vwifibus    nt!PopSystemIrpCompletion
            Args: 00014400 00000000 00000004 00000002
 [  0, 0]   0  0 00000000 00000000 00000000-fffffa800bc7edb0    

            Args: 00000000 00000000 00000000 00000000
0: kd> lmvm Netwsw00
start             end                 module name
fffff880`07a24000 fffff880`0856d000   Netwsw00 T (no symbols)           
    Loaded symbol image file: Netwsw00.sys
    Image path: \SystemRoot\system32\DRIVERS\Netwsw00.sys
    Image name: Netwsw00.sys
    Timestamp:        Sun Jun 03 21:03:40 2012 (4FCB83D4)
    CheckSum:         00B012F3
    ImageSize:        00B49000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Is there no possible update available?

Scan the system for possible virus infection.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Free up the startup.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept the restart.

 

[luckycharms]

Thanks Arc. I'll try updating the wifi driver once again. So strange - the sleep issue is totally intermittent. If I do it soon after I've started up the machine, it sleeps just fine. If I've been working on stuff for a while, it seems to have issues.

In any case, one question: when you say "it crashed on the intel wifi driver", do you mean my computer crashed, or your analysis crashed? I assume the former, which is strange, because oftentimes my wifi is *off* when I try to sleep my machine, and furthermore, I've been sleeping just fine for a long time with the drivers I had. That is, I hadn't touched the wifi drivers when this problem started cropping up.

I ran TDSSKiller and found no threats. I'll try the windows defender startup scan tonight. I have ms security essentials running all the time.

 

[Arc]

The computer crashed by that driver.

Though the wifi is off, it's driver is working in the system; and so, the driver somehow fails its power state.

As you try, you may disable USB selective suspense; it may solve the sleep issue, but that will consume a bit more power.
http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html

 

[luckycharms]

Arc,

I downgraded my wifi driver from version 15 to version 14 (both of which are listed as current on the lenovo website for this computer, for some reason). Since then, I haven't experienced a crash during sleep. So, it seems like the problem has fixed. Hard to know for sure, since it's an intermittent problem, but seems like it's fixed. So: THANK YOU! I have no idea why this driver started acting up all of a sudden (it had been fine for a long time), but whatever.

thanks again, ARC.

 

[Arc]

You are welcome, mate

If there is any further issue, let us know

 

[luckycharms]

of course, as soon as i celebrate, the problem crops up again. :-(

Mind taking a look at the attached? Wondering if it's the same wifi driver. If so, perhaps i'll try the newest version from intel and skip the lenovo drivers.

 

[Arc]

Intel 5100 wifi

Irp is active with 4 stacks 2 is current (= 0xfffffa800dddd408)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    

            Args: 00000000 00000000 00000000 00000000
>[ 16, 2]   0  0 fffffa800a9a1050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\system32\DRIVERS\NETw5s64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NETw5s64.sys
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=NETw5s64.sys"]NETw5s64.sys[/URL]
*** WARNING: Unable to verify timestamp for ndis.sys
*** ERROR: Module load completed but symbols could not be loaded for ndis.sys
 \Driver\NETw5s64
            Args: 00014400 00000000 00000004 00000002
 [ 16, 2]   0 e1 fffffa800b11ec70 00000000 fffff80003cd0200-fffffa800c73f070 Success Error Cancel pending
           \Driver\vwifibus    nt!PopSystemIrpCompletion
            Args: 00014400 00000000 00000004 00000002
 [  0, 0]   0  0 00000000 00000000 00000000-fffffa800c73f070    

            Args: 00000000 00000000 00000000 00000000
---------------------------------------------------------------------------------------------------------
fffff880`05e68000 fffff880`065c8000   NETw5s64 T (no symbols)           
    Loaded symbol image file: NETw5s64.sys
    Image path: \SystemRoot\system32\DRIVERS\NETw5s64.sys
[COLOR=Red]    Image name: NETw5s64.sys
    Timestamp:        Thu Mar 18 10:51:53 2010 [/COLOR](4BA1B871)
    CheckSum:         00763035
    ImageSize:        00760000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update site: Intel Download Center

You have a huge lot of programs stored in startup. Free up the startup.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus and the touchpad driver SynTPEnh.
5. Apply > OK
6. Accept the restart.

If possible,plan to update the BIOS.

BIOS Version/Date    LENOVO 6IET79WW (1.39 ), [COLOR=Red]7/15/2011[/COLOR]

 

[luckycharms]

Ok, ok, got it! Installed the newest driver from Intel for the Centrino Ultimate-N 6300 AGN (just the driver, not the proset software), and I haven't experienced a crash since. I've slept in numerous situations when my comp probably would have locked up otherwise (had been on for a long time, lots of programs in memory, etc). So, I *think* it's really solved this time.

I updated the BIOS, as well as the access connections software, but still got lockups after that. So, the intel driver was the solution, as you've said all along.

thank you SO much.

 

[Arc]

Sounds good Observe the situation now, and if there is any further crashes, let us know

 

[luckycharms]

darn - happened again. machine was particularly loaded. see attached. i know i have a ton of startups, but i need many of them. not sure if there are others i can disable that i don't need.

 

[Arc]

Lenovo Doze Mode HDD control

fffff800`057aa698  fffff880`017f5248Unable to load image \SystemRoot\System32\DRIVERS\[URL="http://www.carrona.org/drivers/driver.php?id=DzHDD64.sys"]DzHDD64.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=DzHDD64.sys"]DzHDD64.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=DzHDD64.sys"]DzHDD64.sys[/URL]
 DzHDD64+0x3248

I'd recommend you to http://www.sevenforums.com/tutorials/219576-clean-up-factory-bloatware.html, with a special reference to Point #13

13. Consider a Clean Reinstall - Factory OEM Windows 7 which is often better than getting a new computer considering how pre-installed bloatware can corrupt Windows 7 even if it's completely cleaned up.

 

[luckycharms]

OK. Well. I found a few posts on the web with similar problems to mine - i.e., putting the machine to sleep, the screen turns off, but it never goes to sleep, and eventually crashes. Some of those posts mentioned they had connectify installed. I also have connectify installed. Connectify adds a some sort of driver to each network device. It also has a feature that keeps your computer from going to sleep if there is a client connected. I never had connectify turned on, and I always had its service stopped, when I was having my problems. Regardless, it sticks it's dirty little fingers into window's power management system, it seems, even if it's processes and services are turned off.

So, I've uninstalled Connectify (prior to completely uninstalling, I tried using connectify's command line interface and setting power_management = NONE, but that didn't help anything), and I haven't had any problems . I'll keep an eye on it, but given that this is what solved some other peoples' issues, and given that I upgraded connectify a bit prior to the start of my issues, I'm thinking that this is probably it. I'll post back if the issue crops up again, but if I don't, just assume that it's fixed. phew. Thanks again for your help, Arc. I hope this thread might help out someone else in the future.

 

[Arc]

Definitely, it will be widely helpful. Well done, mate .... you filled a knowledge gap up for me