Unknown Bugcheck 9f

[Dman100]

I just encountered a problem yesterday where my PC would startup, get to the login screen and then shutdown. I'm running win 7 ultimate x64 (Dell Dimension T5400).

I tried doing a restore to the last successful login, but that didn't help.

I was able to login in Safe Mode and I ran a virus scan with MS Security Essentials and it did detect some trojans that I cleaned, but now when I try to login it gets to the Microsoft logo and just hangs.

I'm back in safe mode with networking. One of the checks showed me the following:

Unknown Bugcheck: Bugcheck 9f.Parameter = 0x3, 0xfffffa8007418060, 0xfffff8000069c4d8, 0xfffffa8006afb610

I did a google search and found that a stop 9f is DRIVER_POWER_STATE_FAILURE.

I've run the requested dumps described in the forum using the SF Diagnostic Tool. (see the attached zip file).

Any help is greatly appreciated!
Thank you.

 

[x BlueRobot]

[COLOR="Red"]BugCheck 1000009F[/COLOR], {4, 258, fffffa8006a1f660, fffff800041f24d0}

Implicit thread is now fffffa80`06a1f660

Probably caused by : ntkrnlmp.exe ( nt!KiSwapContext+7a )

Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours:

• http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

:info: Additional Help - http://www.sevenforums.com/crash-lo...-driver-verifier-identify-issues-drivers.html

Update (if possible):

Dell Inc. A04, [COLOR="Red"]8/21/2008[/COLOR]

Reduce the number of programs at startup, to avoid any driver or program conflicts:

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html
• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html

 

[Dman100]

Hi BlueRobot,

I enabled Driver Verifier as shown. One question? I'm running in Safe Mode currently because I cannot login normally, so I can't really use my PC normally. Also, do I need to select "Add currently not loaded drivers to the list"? I ask because since I'm in Safe Mode, not all the drivers have been loaded.

Thanks.

 

[Dman100]

As a quick follow-up, when I try and login normally after enabling Driver Verifier, it definitely gives me a BSOD and tries to restart and prompts me to repair, which the repair option has been unsuccessful. I can still login using Safe Mode no problem.

With the Driver Verifier disabled, when I try to login normally it just hangs at the Windows logo for a long time before finally indicating a system error and to try to restore.

Where can I obtain the list of the Driver Verifier failures? Is there a text file or a query I can run to see what Driver Verifier has identified?

I'm also tried a clean startup and removing everything from my start menu.

Thanks for the help.
Regards.

 

[x BlueRobot]

Upload the new BSOD, this will hopefully show the exact driver which is causing the problem.

 

[Dman100]

I've re-run the SF Diagnostic Tool and attached the new files generated. Please let me know if this is not what you needed?

Thanks for your help.
Regards.

 

[x BlueRobot]

It's the same file, have you made sure that a Minidump has been configured: http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

You also mentioned earlier, you were infected with several trojans, this may have caused damage to some your Windows files.

Scan for any missing, modified or corrupted protected Windows files with:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Scan for any additional malware or rootkits using:

• http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html
• Anti-rootkit utility TDSSKiller

 

[Dman100]

Sorry, for some reason it was reset to Kernal Memory dump. I set it back to a mini dump and have just re-run the SF Diagnostic Tool (see the attached file). Does this file look better?

Also,
I ran sfc /scannow
Verification 100% complete
Windows Resource Protection did not find any integrity violations

I ran TDSSKiller
Processed: 453 objects
Found: 0 threats
Neutralized: 0 threats
Quarantined: 0 threats

I'm going to re-run Windows Defender Offline and see if that catches anything further.

 

[x BlueRobot]

Problem Devices:

[COLOR="Red"]Security Processor Loader Driver[/COLOR]	ROOT\LEGACY_SPLDR\0000	This device is not present, is not working properly, or does not have all its drivers installed.

Do you know which program the driver may be related to?

This device seems to be disabled for some reason:

[COLOR="red"]Cisco AnyConnect VPN Virtual Miniport Adapter[/COLOR] for Windows x64	ROOT\NET\0000	This device is disabled.

The driver is also very old, update this driver if possible:

c:\windows\system32\drivers\vpnva64.sys (2.2.137.0, 23.68 KB (24,248 bytes), [COLOR="red"]8/20/2008[/COLOR] 7:57 PM)

The BSOD also seemed to be outdated also, and not caused by Driver Verifier:

0: kd> [COLOR="SeaGreen"].time[/COLOR]
Debug session time: T[COLOR="red"]hu Dec 13 10:08:48.473 2012[/COLOR] (UTC + 0:00)
System Uptime: 6 days 10:23:40.533

What AV real-time protection program are you using?