Long Shut Down To Blue Screen

[TipTricky]

I was restarting my computer today and it took about 5 minutes on the shutdown screen then came the blue screen. The blue screen was not up long but when the computer was starting up it took like 4 times longer than normal. Windows gave me this "Windows has recovered from unexpected shut down"

Problem signature:
  Problem Event Name:    BlueScreen
  OS Version:    6.1.7601.2.1.0.768.3
  Locale ID:    1033

Additional information about the problem:
  BCCode:    1000009f
  BCP1:    0000000000000004
  BCP2:    0000000000000258
  BCP3:    FFFFFA80036EB040
  BCP4:    FFFFF80000B9C510
  OS Version:    6_1_7601
  Service Pack:    1_0
  Product:    768_1

Files that help describe the problem:
  C:\Windows\Minidump\082513-15522-01.dmp
  C:\Users\MastonMadHouse\AppData\Local\Temp\WER-135830-0.sysdata.xml

 

[mitchell65]

Hi and Welcome to the Forum. This would be much better for you - There is a special BSOD Help and Support Forum, Scroll down from the General Discussion Forum and you will see it. There you will get expert support. Just copy and paste your post and put it there. Get results quicker that way.

 

[YoYo155]

1st step: http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

 

[TipTricky]

Alright here you go.

 

[YoYo155]

The cause of your bugchecks are to be attributed to an Anti-Virus Company:

DRIVER_POWER_STATE_FAILURE (9f)

Arguments:
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
    subsystem.
Arg2: 0000000000000258, Timeout in seconds.
Arg3: fffffa80036eb040, The thread currently holding on to the Pnp lock.
Arg4: fffff80000b9c510, nt!TRIAGE_9F_PNP on Win7

• A driver has failed to complete a power IRP within a specific time (usually 10 minutes).

fffff880`039aea08  fffff880`051bc4fb [COLOR=Red][U][B]kneps[/B][/U][/COLOR]+0xa4fb
fffff880`039aea38  fffff880`051b98aa [COLOR=Red][B][U]kneps[/U][/B][/COLOR]+0x78aa
fffff880`039aec50  fffff880`051d44f0 [COLOR=Red][U][B]kneps[/B][/U][/COLOR]+0x224f0
fffff880`039aeca8  fffff880`04be2615 [COLOR=Red][B][U]kltdi[/U][/B][/COLOR]+0x5615
fffff880`039aecd8  fffff880`04be8288 [COLOR=Red][B][U]kltdi[/U][/B][/COLOR]+0xb288
fffff880`039aede8  fffff880`04bdfc41 [COLOR=Red][U][B]kltdi[/B][/U][/COLOR]+0x2c41

• Driver Reference Table - kneps.sys
• Driver Reference Table - kltdi.sys

We know those drivers belong to Kaspersky.

Start Menu\Programs\Kaspersky Internet Security 2013

Remove Kaspersky Internet Security 2013 using the removal tool.

• Removal tool to uninstall Kaspersky Lab products.
• Install Microsoft Security Essentials instead.

Disable the power savings setting for your NVIDIA nForce Networking Controller:

• rb: Start Menu, search for compmgmt.msc and press enter.

• View attachment 283198

• Expand Network adapters and select the internet conection that is currently being used (yours should say NVIDIA nForce Networking Controller).
• Double click the appropriate adapter and choose the Power Management tab, then un-check the checkbox corresponding to Allow the computer to turn off this device to save power
• OK to confirm the operation.
  • View attachment 283199

Keep us posted .

 

[TipTricky]

So the Blue Screen Of Death was from a Kaspersky driver? Is Microsoft security essentials a good virus protection?

 

[mitchell65]

So the Blue Screen Of Death was from a Kaspersky driver? Is Microsoft security essentials a good virus protection?

MSE is highly recommended. (IMHO)

 

[TipTricky]

Alright then i guess ill stop spending money on a virus protection haha. Ill post back if the BSOD happens again. ANy ideas why it would happen out of the blue like it did?

 

[YoYo155]

I second Mitchell on this one, MSSE is well regarded here and we suggest it almost unanimously.
Why it decided to happen all of a sudden, is a tough question to make.
Minidumps don't contain much information and are a bit iffy as to what they do retain at the time of the crash
an what they leave out there is no rhythm to it.
On top of it we only have access to the public symbol server (it basically phrases the drivers and the like to
an understandable form for us to read) which is why I couldn't find the symbol for argument 4.

[INDENT]dt nt!TRIAGE_9F_PNP fffff80000b9c510
Symbol nt!TRIAGE_9F_PNP not found.
[/INDENT]

So had to go with the stack:

00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x7a
00000444`00000000 00000007`ffffffff : nt!KiCommitThreadWait+0x1d2
00000000`00000000 fffff880`0531d700 : nt!KeWaitForSingleObject+0x19f
00000000`00000000 fffff880`01d2c101 : [COLOR=Blue][U][B]ndis[/B][/U][/COLOR]! ?? ::LNCPHCLB::`string'+0x4f4b
fffffa80`0852ba00 fffffa80`036927f0 : [COLOR=Blue][B][U]ndis[/U][/B][/COLOR]!ndisPnPNotifyAllTransports+0x18f
fffffa80`0852ba50 fffff880`039af740 : [COLOR=Blue][U][B]ndis[/B][/U][/COLOR]!NdisFNetPnPEvent+0xd2
fffffa80`03922010 fffff880`039af740 : [COLOR=Blue][B][U]ndis[/U][/B][/COLOR]!NdisFNetPnPEvent+0xa0
fffffa80`091ac1a0 00000000`00000002 : [COLOR=Blue][U][B]ndis[/B][/U][/COLOR]!NdisFNetPnPEvent+0xa0
fffff880`01d2c110 fffffa80`091ac1a0 : [COLOR=Blue][U][B]ndis[/B][/U][/COLOR]!ndisDevicePnPEventNotifyFiltersAndAllTransports+0x128
00000000`00000000 fffffa80`07adb6e0 : [COLOR=Blue][U][B]ndis[/B][/U][/COLOR]!ndisPnPQueryRemoveDevice+0x88
fffff880`039af970 fffff800`02fdde00 : [COLOR=Blue][B][U]ndis[/U][/B][/COLOR]!ndisPnPDispatch+0x4d4
00000000`00000000 00000000`00000001 : nt!PnpAsynchronousCall+0xce
fffff880`039afb40 fffff880`039afc38 : nt!PiIrpQueryRemoveDevice+0xda
fffff880`039afb40 00000000`00000000 : nt!PnpQueryRemoveLockedDeviceNode+0x67
fffff8a0`00ec7e10 ffffe7e1`c7dc0f3a : nt!PnpDeleteLockedDeviceNode+0x8d
fffffa80`04278890 fffff8a0`0faa1a20 : nt!PnpDeleteLockedDeviceNodes+0xa0
fffffa80`036eb000 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0x864
fffff8a0`0faa1a20 00000000`00000000 : nt!PnpProcessTargetDeviceEvent+0x4c
fffff800`030832d8 fffffa80`036eb040 : nt! ?? ::NNGAKEGL::`string'+0x551ab
fffff800`03054e80 fffffa80`036eb040 00000000`00000080 fffffa80`036d8040 : nt!ExpWorkerThread+0x111
fffff880`0376dfc0 fffff880`03763180 : nt!PspSystemThreadStartup+0x5a
fffff880`039af9e0 00000000`00000000 : nt!KxStartSystemThread+0x16

ndis being a legitimate Windows driver it is unlikely that it is the culprit.
Then I called the RAW stack in search for clues, keeping in mind network related drivers.
Sure enough Kaspersky Network filtering component &
Kaspersky KNEPS Power driver were present
and were consistent across both dumps.
Other drivers are present in the stack trace and should be updated but giving it is the
infamous nForce chipset as long as they don't cause any issues its best they are left alone.

​

Hope this is suffice .
Do post back here if other issues arise.

 

[TipTricky]

Ok well i have a huge problem now. I decided tonight i would go ahead and switch to MSSE and remove kespersky. I downloaded the remover for kespersky and the installer for MSSE. I ran the remover and the computer restared itself and when it rebooted it froze. Now the computer boots windows and freezes seconds later. I need help.

 

[mitchell65]

Can you get into Safe Mode? If so try a system restore to before you uninstalled Kapersky.

 

[YoYo155]

Did you read the instructions on Kaspersky's website?

2. Reboot the computer in the Safe mode

 

[TipTricky]

Alright so i just looked at the computer and its not froze the clock is still correct. Keyboard and mouse fail to work but pressing the power button does shut it down normally. Any ideas why the mouse and keyboard would stop working?

 

[mitchell65]

Have you done what I suggested in Post #11 above?

 

[TipTricky]

Have you done what I suggested in Post #11 above?

I can boot into safe mode but still have no keyboard or mouse contols...

 

[YoYo155]

Do you have input control to begin with then at some point it stops responding,
or you don't have any input what so ever right off the bat?

We need to know whether the PC is freezing or you're simply unable to use your input devices.

 

[TipTricky]

The computer is not actually freezing as i first thought. No controls at all as soon as windows boots up so no controls right off the bat

 

[YoYo155]

Thanks .
What keyboard and mouse do you have?
Wireless /wired, USB, PS/2, brand /generic?
Have you tried different ports?

 

[TipTricky]

Tried front and back ports. Acer brand mouse and keyboard both wired usb. When i switched the mouse to the front port it said installing drivers and still did not work when completed.

 

[YoYo155]

I'm assuming Windows successfully installed the drivers.
Do you have an extra pair or just a mouse/keyboard to test with?