"Windows has recovered from an unexpected shutdown" after sleep?

[Darklord36]

"Windows has recovered from an unexpected shutdown" after sleep?

Every time my new Windows7 PC sleeps or hibernates I get the same error after the login screen? It tries to check online for a solution, but after searching for a min it offers no solution? Occurs everyday.

Is Windows 7 . . .
- x86 Yes
- the original installed OS on the system? Yes
- full retail version? Yes
- What is the age of system (hardware)? 4 month, but has happened since beginning
- What is the age of OS installation (have you re-installed the OS?) No, brand new. Updates too?






Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.4
Locale ID: 1033

Additional information about the problem:
BCCode: 7a
BCP1: 0000000000000020
BCP2: FFFFFFFFC000009D
BCP3: FFFFFA8005AD47C8
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\101010-17581-01.dmp
C:\Users\admin1\AppData\Local\Temp\WER-33353-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

 

[zigzag3143]

Every time my new Windows7 PC sleeps or hibernates I get the same error after the login screen? It tries to check online for a solution, but after searching for a min it offers no solution? Occurs everyday.

Is Windows 7 . . .
- x86 Yes
- the original installed OS on the system? Yes
- full retail version? Yes
- What is the age of system (hardware)? 4 month, but has happened since beginning
- What is the age of OS installation (have you re-installed the OS?) No, brand new. Updates too?






Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.4
Locale ID: 1033

Additional information about the problem:
BCCode: 7a
BCP1: 0000000000000020
BCP2: FFFFFFFFC000009D
BCP3: FFFFFA8005AD47C8
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\101010-17581-01.dmp
C:\Users\admin1\AppData\Local\Temp\WER-33353-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Several things going on here

1-HD Problem
2- Old drivers (ASACPI.sys--2005)
3- more driver issues


First HD problem run HD diagnostics.
HD Diagnostic

2-ASACPI.sys
ASACPI.sys Sun Mar 27 22:30:36 2005

The 2005 version of this driver is a known BSOD cause.
Please visit this link: ASUSTeK Computer Inc.-Support- download_item_mkt
Scroll down to the Utilities category, then scroll down to the "ATK0110 driver for WindowsXP/Vista/Windows 7 32&64-bit " (it's about the 8th item down).
Download and install it.
Go to C:\Windows\System32\drivers to check and make sure that the ASACPI.sys file is date stamped from 2009 or 2010 (NOT 2005).[/quote


3-Drivers
Update all these drivers as well

regi.sys        fffff880`07193000    fffff880`0719b000    0x00008000    0x454707b3    10/31/2006 04:22:11                        
000.fcl        fffff880`07000000    fffff880`0702b000    0x0002b000    0x48dcdf7a    9/26/2008 09:11:22                        
MpFilter.sys        fffff880`0719b000    fffff880`071b4000    0x00019000    0x49fb8451    5/1/2009 19:22:57                        
AtiPcie.sys        fffff880`0192a000    fffff880`01932000    0x00008000    0x4a005486    5/5/2009 11:00:22                        
spldr.sys        fffff880`01485000    fffff880`0148d000    0x00008000    0x4a0858bb    5/11/2009 12:56:27                        
amdxata.sys        fffff880`00fc3000    fffff880`00fce000    0x0000b000    0x4a12f2eb    5/19/2009 13:56:59

How To Find Drivers:

- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Let us know if you need help

Ken

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\092510-18174-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\symbols;*http://msdl.microsoft.com/download/symbols/;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02c53000 PsLoadedModuleList = 0xfffff800`02e90e50
Debug session time: Sat Sep 25 01:30:35.553 2010 (GMT-4)
System Uptime: 1 days 0:07:36.285
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {fffff6fc400394c8, ffffffffc000000e, 2746abe0, fffff88007299000}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+34c0e )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc400394c8, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc000000e, error status (normally i/o status code)
Arg3: 000000002746abe0, current process (virtual address for lock type 3, or PTE)
Arg4: fffff88007299000, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c000000e

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002d38168 to fffff80002cc3740

STACK_TEXT:  
fffff880`0331d848 fffff800`02d38168 : 00000000`0000007a fffff6fc`400394c8 ffffffff`c000000e 00000000`2746abe0 : nt!KeBugCheckEx
fffff880`0331d850 fffff800`02cb552b : fffffa80`064fce90 fffff880`0331d9c0 fffff800`02e50440 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x34c0e
fffff880`0331d930 fffff800`02cde5c4 : 00000000`00000000 00000000`00000001 ffffffff`ffffffff fffff800`00000000 : nt!MiIssueHardFault+0x28b
fffff880`0331da00 fffff800`02cb8004 : 00000000`00000001 fffff6fc`400394a0 fffffa80`05f03b00 00000000`00000000 : nt!MmAccessFault+0x11c4
fffff880`0331db60 fffff800`02cb81ec : fffffa80`05f03b60 00000000`00000001 fffffa80`068d0770 fffff800`02cb63fb : nt!MiInPageSingleKernelStack+0x134
fffff880`0331dc70 fffff800`02cb8187 : fffffa80`068d0770 00000000`00000080 fffffa80`03676b30 fffffa80`05f03c00 : nt!MmInPageKernelStack+0x40
fffff880`0331dcd0 fffff800`02cb7e2c : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`03676b00 : nt!KiInSwapKernelStacks+0x1f
fffff880`0331dd00 fffff800`02f67c06 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeSwapProcessOrStack+0x84
fffff880`0331dd40 fffff800`02ca1c26 : fffff880`02f63180 fffffa80`0370b040 fffff880`02f6dfc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`0331dd80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+34c0e
fffff800`02d38168 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+34c0e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

FAILURE_BUCKET_ID:  X64_0x7a_c000000e_nt!_??_::FNODOBFM::_string_+34c0e

BUCKET_ID:  X64_0x7a_c000000e_nt!_??_::FNODOBFM::_string_+34c0e

Followup: MachineOwner
---------

 

[Avatar]

Wow, I have the same problem that just started happening with my home office computer about one month ago. At first it was an occasional thing but now in the past 2+ weeks it's every time I try and put it to sleep. The difference for me is my computer always crashes/locks up when trying to go into sleep mode and I have to restart it and then get that error message. This was an upgrade from Vista 64 to Win7 64 Home Premium.

I'm going to try and follow the advice here about updating drivers and see if that helps at all.

I think I might be a little in over my head here... I tried searching for the first file mentioned (regi.sys) and don't really understand the two results that I got. Opening the first one this is what I see:

<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" description="NetFx35 - Linq component" displayName="NetFx35 - Linq System.Management.Instrumentation.Registry" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
<assemblyIdentity name="System.Management.Instrumentation.Registry" version="6.1.7600.16385" processorArchitecture="amd64" language="neutral" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
<trustInfo>
<security>
<accessControl>
<securityDescriptorDefinitions>
<securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)" operationHint="replace" />
</securityDescriptorDefinitions>
</accessControl>
</security>
</trustInfo>
</assembly>

The next one gives me this:

<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" description="NetFx35 - Linq component" displayName="NetFx35 - Linq System.Management.Instrumentation.Registry" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
<assemblyIdentity name="System.Management.Instrumentation.Registry" version="6.1.7600.16385" processorArchitecture="x86" language="neutral" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
<registryKeys>
<registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{54D8502C-527D-43F7-A506-A9DA075E229C}\InprocServer32" owner="false">
<registryValue name="Class" valueType="REG_SZ" value="System.Management.Instrumentation.ManagedCommonProvider" operationHint="replace" owner="true" />
<registryValue name="Assembly" valueType="REG_SZ" value="System.Management.Instrumentation, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" operationHint="replace" owner="true" />
<registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" operationHint="replace" owner="true" />
<registryValue name="RuntimeVersion" valueType="REG_SZ" value="v2.0.50727" operationHint="replace" owner="true" />
<registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\mscoree.dll" operationHint="replace" owner="true" />
</registryKey>
<registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{54D8502C-527D-43F7-A506-A9DA075E229C}" owner="false">
<registryValue name="" valueType="REG_SZ" value="System.Management.Instrumentation.ManagedCommonProvider" operationHint="replace" owner="true" />
<securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
</registryKey>
<registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{54D8502C-527D-43F7-A506-A9DA075E229C}\InprocServer32\3.5.0.0" owner="false">
<registryValue name="Assembly" valueType="REG_SZ" value="System.Management.Instrumentation, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" operationHint="replace" owner="true" />
<registryValue name="Class" valueType="REG_SZ" value="System.Management.Instrumentation.ManagedCommonProvider" operationHint="replace" owner="true" />
<registryValue name="RuntimeVersion" valueType="REG_SZ" value="v2.0.50727" operationHint="replace" owner="true" />
</registryKey>
</registryKeys>
<trustInfo>
<security>
<accessControl>
<securityDescriptorDefinitions>
<securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)" operationHint="replace" />
</securityDescriptorDefinitions>
</accessControl>
</security>
</trustInfo>
</assembly>

What program is related to this that I should look at updating its' driver? Thanks. I'll probably be asking for more help with the other ones once I search for those, too.

 

[Jonathan_King]

Wow, I have the same problem that just started happening with my home office computer about one month ago. At first it was an occasional thing but now in the past 2+ weeks it's every time I try and put it to sleep. The difference for me is my computer always crashes/locks up when trying to go into sleep mode and I have to restart it and then get that error message. This was an upgrade from Vista 64 to Win7 64 Home Premium.

I'm going to try and follow the advice here about updating drivers and see if that helps at all.

Hello,

Please follow these directions: http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

Start a new thread, and someone will take a look as soon as they are available.

 

[Avatar]

Thanks for your reply. I will start a new thread and do as you suggest. Though I don't get any BSOD, the screen is black and then eventually the computer shuts off. Restarting gives me the error that the original poster stated in the subject. Sorry for hijacking the thread.

 

[Darklord36]

Hi Ken.
Thanks for the help.
Here is the update:

2- Old drivers (ASACPI.sys--2005): Check
3- more driver issues: I believe these were all updated although some of the drivers/programs were ambiguous. I updated several of them but others I couldn't find so I reinstalled the program with a newer version. Please check the attachment to see if they pop up again.

1-HD Problem: I had alot of trouble getting this one accomplished. I went to the above website, did 1-6 with the Western Digital drive http://support.wdc.com/product/download.asp?groupid=601&sid=30〈=en
I created the boot CD from the .iso file fine and booted into it from bios, but run into a peculiar error. It boots and runs the CD for a few minutes and then reports:
"Unable to locate the license agreement file, DLGLICE.TXT!!"
and shortly after: "Cannot load the file A:\COMMAND.com"
This has happened with several CDs and I can clearly see the DLGLICE.TXT file on the CD?
This issue is discussed on the following forum, but does not appear to be resolved:
lifeguard tools--cant find DLGLICE - Western Digital Community
The website www.carrona.org suggests running Seagate tools which I did but to no resolve? It is unclear from the website how to get the Western Digital diagnosed properly.

Thanks in advance for the help.
Matt