internal power failure

[nchoma]

I have an IBM ThinkPad T60, up until last week it was doing great then one day I tried to shutdown and blue screen came up saying internal power failure. It only happens on shutdown but then on start up it say it was not shut down properly. I am running Windows 7 Professional with SP1 - i am trying to update windows and drivers but according to device manager there are no conflicts and everything is running poperly. Windows updates gives me the 80072efe error code so I cant update. I ran Nortons and Malware and removed minimal tracking issues.
Any suggestion?

 

[Shadowjk]

You said you had a Blue Screen - Please Upload the Files we need to analyse

http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

Many Thanks,
Josh

 

[nchoma]

ummmm..yeah, I would like to do that but I am not an advanced user - I ran both reports but do i have to take screen shots to post? The folder is 1/2 .txt files and the report is html as requested but not sure how to upload. sorry.

 

[Shadowjk]

No problem and yep that is what we need - Just upload the zipped Folder

See http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html For More Information

 

[nchoma]

is this right - do you need all this report or is this enough? Also it says no anti virus but i am running Norton's

 

[Shadowjk]

Thanks but I will also need the Folder created when following the Tutorial

Many thanks,
Josh

 

[nchoma]

Here you go - thanks for your help

 

[Shadowjk]

Thank you - Will Debug them now and Report back...

 

[Jonathan_King]

I see a lot of issues here; let's go through them all.

The most glaring is this:

Event[1282]:
  Log Name: System
  Source: Microsoft-Windows-DNS-Client
  Date: 2011-04-18T21:24:21.562
  Event ID: 1012
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: N/A
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: LENOVO-4619BAF0
  Description: 
There was an error while attempting to read the local hosts file.

This is repeated hundreds of times since April 15; the first system crash also happened that day:

Event[10081]:
  Log Name: System
  Source: EventLog
  Date: 2011-04-15T23:40:29.000
  Event ID: 6008
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: LENOVO-4619BAF0
  Description: 
The previous system shutdown at 11:37:29 PM on ?4/?15/?2011 was unexpected.

I tried to view your hosts file, but apparently there was an error in collecting it. Hmm...

Open a command prompt, and run:

copy c:\windows\system32\drivers\etc\hosts c:\desktop

Zip up the HOSTS file that should be on your desktop, and attach it to your next post.

I'm seeing other network issues as well; let's update your network adapter drivers:

e1e6232.sys             Fri Mar 26 04:13:32 2010 (4BAC6CAC) - Intel Ethernet
netw5v32.sys            Thu Mar 26 12:10:37 2009 (49CBA8FD) - Intel WiFi

[url=http://www.intel.com/p/en_US/support/detect/?iid=dc_iduu]Intel® Driver Update Utility[/url]

The latest dump shows some corrupted modules; it may be hardware, or perhaps a low-level driver. I suspect SPTD, partly because of it's long history of trouble like this, and partly because of the error below:

Event[1248]:
  Log Name: System
  Source: sptd
  Date: 2011-04-18T21:36:24.111
  Event ID: 4
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: LENOVO-4619BAF0
  Description: 
Driver detected an internal error in its data structures for .

Uninstall Daemon Tools, Alcohol 52/120%, or whatever similar program you are using. I don't see either listed in your Start Menu, but that doesn't mean it's not installed. When the program removal is done, remove SPTD itself with the tool found here: DuplexSecure

When all of the above is completed, please run: http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

When you get more BSODs, upload a new jcgriff2 report.

...Summary of the dumps:

[font=lucida console]
*** WARNING: Unable to verify timestamp for Unknown_Module_244e6de4
*** ERROR: Module load completed but symbols could not be loaded for Unknown_Module_244e6de4
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 19 11:36:01.626 2011 (UTC - 4:00)
System Uptime: 0 days 0:36:37.419
*** WARNING: Unable to verify timestamp for Unknown_Module_244e6de4
*** ERROR: Module load completed but symbols could not be loaded for Unknown_Module_244e6de4
*** WARNING: Unable to verify timestamp for Unknown_Module_244e6de4
*** ERROR: Module load completed but symbols could not be loaded for Unknown_Module_244e6de4
BUGCHECK_STR:  0xA0
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 19 10:55:21.478 2011 (UTC - 4:00)
System Uptime: 0 days 1:19:30.772
BUGCHECK_STR:  0xA0
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
SystemProductName = 200766U
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 19 08:07:58.823 2011 (UTC - 4:00)
System Uptime: 0 days 10:09:37.632
BUGCHECK_STR:  0xA0
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  wininit.exe
FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
SystemProductName = 200766U
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Debug session time: Mon Apr 18 21:57:31.886 2011 (UTC - 4:00)
System Uptime: 0 days 0:21:16.526
BUGCHECK_STR:  0xA0
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  wininit.exe
FAILURE_BUCKET_ID:  0xA0_nt!PopAllocateIrp+a0
SystemProductName = 200766U
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

 

[nchoma]

lol - now i am having trouble even loading windows - i might just pull the hard drive and hook it up as an external hard drive to pull some important files off it, then format it and start all over.

 

[Jonathan_King]

I told Josh (Shadowjk) in another thread that I was quite close to recommending you just do a clean install. There is a big mess on your system to be honest, not the least of which includes probable malware infection.

You might go ahead with that plan now; be sure to completely wipe the drive before reinstalling, as a simple format may not clear up deep rootkits. Use the Clean All command from the command prompt.

 

[JLex]

You might need to replace your Master Boot Record

I had the same problem with internal_power_failure error crashed whenever I shut down the PC. This problem seemed to come out of the blue (well, BSOD anyway). I also saw the error: IRQL_not_less_or_equal occasionally. Norton was giving me a warning about blocking Tidserv access whenever I tried to access the internet. Tidserv is a pretty aggressive virus. I tried a number of antivirus tools like MalWareBytes, but none detected a virus. I also tried to restore a previous system backup. No luck.

A few posts suggested to replace the master boot record as it might be corrupted. It is fairly easy process (see How to use the Bootrec.exe tool in the Windows Recovery Environment to troubleshoot and repair startup issues in Windows).

THIS FIXED MY PROBLEM!!

Apparently recent versions of this virus are infecting the MBR. Since the MBR is separate from the C drive, the antivirus tools don't find it (at least they didn't work for me).

I hope this helps you. I did a lot of searching before I tried this. Maybe it will save others some time and lots of frustration.

 

[RhapsodyOfFire]

This exact issue giving Windows Update error and BSOD on shutting down is caused by a rootkit called "TDSS" which infects the hard drive's MBR. Installing a new Master Boot Record fix this rootkit (virus/malware) because the old MBR is infected.
I didn't noticed any other symptoms on the infected system I happened to diagnose. It was Win 7 Ultimate 32 bits.

 

[Jonathan_King]

It's possible that the rootkit is at fault here, but I really don't see the usual symptoms. It could be a different rootkit, or something completely unrelated.