1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

System crashes upon waking from sleep

Discussion in 'Windows 7' started by Kotare, 2013/10/01.

  1. 2013/10/01
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    System gave a BSOD about 30 seconds after waking this morning, so I did a search and found this is an old problem going back years. I have not had the problem before, but recently recovered from an infection (Thread: Infected HP Pavilion HPE-180a Resolved) so something may have changed in my system. I checked the event log and found there was a Kernel Power Event 41 (whatever that is) and when I hunted it down on MS TechNet I found the saga of the BSODs after sleep - but no fix. Does anyone know if there has been progress on the matter?
     
  2. 2013/10/01
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,919
    Likes Received:
    511

  3. to hide this advert.

  4. 2013/10/01
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Thank you Evan, working my way through the clean boots now.
     
  5. 2013/10/01
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Ok, tried the clean boot process and shortened the intervals to get the system to sleep (so I could finish the tests). It all operated perfectly and woke up correctly every time regardless of what was or was not operating. I'll restore the previous power options and see if it happens again later this evening.
    As to "What type of BSOD I get..." when the computer awakes, I'm not sure I understand the question.
     
  6. 2013/10/02
    MrBill

    MrBill SuperGeek WindowsBBS Team Member

    Joined:
    2006/01/14
    Messages:
    4,328
    Likes Received:
    270
    What does it say on the BSOD is what he is asking.
     
  7. 2013/10/02
    Evan Omo

    Evan Omo Computer Support Technician Staff

    Joined:
    2006/09/10
    Messages:
    7,919
    Likes Received:
    511
    If the BSOD happens again let me know what the error message is for the blue screen.
     
  8. 2013/10/02
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Darn it! Twice it has started up from sleep perfectly after sleeping for more than an hour, but it has just crashed again about 40 seconds or so after waking up. Regrettably I did not read the Bsod screen before I did the start but I have found the Dump file - which it will not let me open. No idea what to do next, but I reckon it will crash again in the morning when I wake it. I'll take notes on the screen then.
     
  9. 2013/10/02
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Run the dump file through our Dump Data Collection Tool and post the log (copy/paste contents) in your next post here.

    But please be aware of the following ....

    Unfortunately these logs require expert knowledge to analyze and there are currently no members that have the depth of knowledge necessary. Members can only make observations and suggestions as to how you might proceed toward finding the cause ....
     
    Kotare likes this.
  10. 2013/10/02
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Computer was running this morning as it is programmed to do an early antivirus check, so it can self start from sleep without crashing.

    Followed directions but Windows SDK failed to load twice. Checked the log and amongst a lot of other things it said that it failed to load with a return code of 5100. Here is the last line of the log:

    7:05:34 a.m. Thursday, 3 October 2013: [SDKSetup:Error] Config_Products_Install: Windows SDK Setup (failed): Installation of the "Microsoft Windows SDK for Windows 7" product has reported the following error: Please refer to Samples\Setup\HTML\ConfigDetails.htm document for further information. Stack: at SDKSetup.Product.ConfigureNewProduct(ManualResetEvent CancelEvent) at SDKSetup.Product.SetupProduct(TaskMode taskMode, ManualResetEvent CancelEvent) at SDKSetup.ProductCollection.SetupProducts(TaskMode taskMode, DownloadManager downloadManager, ManualResetEvent cancelEvent) at SDKSetup.ConfigProducts.DoCurrentTask(TaskMode Task)
     
  11. 2013/10/02
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Further to my last, researching a 5100 failure indicates that there may be a corrupt or damaged windows file. I have found a repair which involves a restore to an earlier time and use of an Error 5100 repair utility that can be downloaded. The download is from wiki and I'm a bit wary about using it. Advice would be most welcome.
     
  12. 2013/10/02
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Kotare likes this.
  13. 2013/10/02
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Ok, thank you for that - I have both the files that are causing the problem. However, I have a couple of shifts to do soon at Citizens Advice so I'll get back to this as soon as I can later this afternoon. Very much appreciate the ongoing assistance.
     
  14. 2013/10/02
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    That was a real saga getting the Debugging Tools actually installed, but managed it on the fourth attempt after a lot of messing about. Anyway, here is the log:

    Opened log file 'c:debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Windows\MEMORY.DMP]
    Kernel Summary Dump File: Only kernel address space is available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32\drivers
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7601.18229.amd64fre.win7sp1_gdr.130801-1533
    Machine Name:
    Kernel base = 0xfffff800`04068000 PsLoadedModuleList = 0xfffff800`042ab6d0
    Debug session time: Wed Oct 2 21:33:26.330 2013 (UTC + 13:00)
    System Uptime: 0 days 3:36:32.298
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ................................
    Loading User Symbols

    Loading unloaded module list
    ...........
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck A, {0, 2, 1, fffff800040e493c}

    *** ERROR: Module load completed but symbols could not be loaded for AVer888RC_64.sys
    Probably caused by : AVer888RC_64.sys ( AVer888RC_64+3bc5 )

    Followup: MachineOwner
    ---------

    3: kd> !analyze -v;r;kv;lmtn;.logclose;q
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: fffff800040e493c, address which referenced memory

    Debugging Details:
    ------------------


    WRITE_ADDRESS: 0000000000000000

    CURRENT_IRQL: 2

    FAULTING_IP:
    nt!KeWaitForSingleObject+13c
    fffff800`040e493c f00fba2e07 lock bts dword ptr [rsi],7

    DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

    BUGCHECK_STR: 0xA

    PROCESS_NAME: System

    TRAP_FRAME: fffff880033af3f0 -- (.trap 0xfffff880033af3f0)
    .trap 0xfffff880033af3f0
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=00000000000cb542 rbx=0000000000000000 rcx=0000000000000002
    rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff800040e493c rsp=fffff880033af580 rbp=0000000000000000
    r8=fffff78000000008 r9=0000000000000101 r10=0000000000000000
    r11=fffff880031d5180 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0 nv up ei pl zr na po nc
    nt!KeWaitForSingleObject+0x13c:
    fffff800`040e493c f00fba2e07 lock bts dword ptr [rsi],7 ds:f550:0000=????????
    .trap
    Resetting default scope

    LAST_CONTROL_TRANSFER: from fffff800040dd129 to fffff800040ddb80

    STACK_TEXT:
    fffff880`033af2a8 fffff800`040dd129 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
    fffff880`033af2b0 fffff800`040dbda0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`033af3f0 fffff800`040e493c : fffffa80`0a492ed0 00000000`000007ff 00000000`00000000 fffff880`031d5180 : nt!KiPageFault+0x260
    fffff880`033af580 fffff880`0473fbc5 : fffffa80`00000001 fffffa80`00000000 fffffa80`0a492400 fffffa80`000e0001 : nt!KeWaitForSingleObject+0x13c
    fffff880`033af620 fffff880`0473e1fa : fffffa80`0a492900 fffffa80`0e69bee0 fffffa80`0e69bc60 fffffa80`0e69bee0 : AVer888RC_64+0x3bc5
    fffff880`033af670 fffff880`04634664 : fffffa80`00000000 fffffa80`00000001 fffffa80`0e69bc60 00000000`00000000 : AVer888RC_64+0x21fa
    fffff880`033af6a0 fffff880`0461f9c1 : fffff880`04610560 fffffa80`0a492900 fffffa80`0e69bee0 fffffa80`0e69bc60 : ks!CKsDevice::pnpStop+0xac
    fffff880`033af700 fffff880`04647889 : fffffa80`0e69be98 fffffa80`0a31e5e0 fffffa80`0e69bc60 fffff8a0`06729e00 : ks!CKsDevice::DispatchPnp+0x1dd
    fffff880`033af750 fffff800`0434b9e1 : fffffa80`0a492270 fffff880`033af868 00000000`00000000 00000000`c00000bb : ksthunk!CKernelFilterDevice::DispatchIrp+0x181
    fffff880`033af7b0 fffff800`044ca6c1 : fffffa80`07798060 00000000`00000000 fffffa80`077976e0 00000000`00000801 : nt!IopSynchronousCall+0xe1
    fffff880`033af820 fffff800`041e0053 : fffff8a0`06729e00 fffff8a0`06729e00 00000000`00000018 00000000`00000000 : nt!IopRemoveDevice+0x101
    fffff880`033af8e0 fffff800`044ca214 : fffffa80`077976e0 00000000`00000000 00000000`00000002 00000000`00000000 : nt!PnpRemoveLockedDeviceNode+0x1a3
    fffff880`033af930 fffff800`044ca320 : 00000000`00000000 fffffa80`07798000 fffff8a0`002391d0 fffff800`042e1ae0 : nt!PnpDeleteLockedDeviceNode+0x44
    fffff880`033af960 fffff800`044ca419 : fffffa80`0b919902 fffffa80`0b919980 00000000`00000001 00000000`00000000 : nt!PnpDeleteLockedDeviceNodes+0xa0
    fffff880`033af9d0 fffff800`044ca591 : fffffa80`0b919980 00000000`00000000 fffffa80`0b919980 00000000`00000002 : nt!PnpDelayedRemoveWorker+0x79
    fffff880`033afa20 fffff800`041e028a : 00000000`00000001 fffffa80`0c2867b8 00000000`0000000a 00000000`0000000a : nt!PnpChainDereferenceComplete+0x131
    fffff880`033afa60 fffff800`0455b5e0 : 00000000`00000000 fffffa80`077976e0 fffff8a0`042d71f0 00000000`00000001 : nt!PnpIsChainDereferenced+0xda
    fffff880`033afae0 fffff800`0455b87c : fffff880`033afcb8 fffffa80`0e9ba100 fffffa80`06a2eb00 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0xff0
    fffff880`033afc20 fffff800`04444a1e : 00000000`00000000 fffffa80`0e9ba160 fffff8a0`1a718cf0 00000000`00000000 : nt!PnpProcessTargetDeviceEvent+0x4c
    fffff880`033afc50 fffff800`040e7261 : fffff800`0434a868 fffff8a0`042d71f0 fffff800`042832d8 fffffa80`06a2eb50 : nt! ?? ::NNGAKEGL::`string'+0x551ab
    fffff880`033afcb0 fffff800`0437bbae : 00000000`00000000 fffffa80`06a2eb50 00000000`00000080 fffffa80`069e29e0 : nt!ExpWorkerThread+0x111
    fffff880`033afd40 fffff800`040ce8c6 : fffff880`03164180 fffffa80`06a2eb50 fffff880`0316efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`033afd80 00000000`00000000 : fffff880`033b0000 fffff880`033aa000 fffff880`033af310 00000000`00000000 : nt!KiStartSystemThread+0x16


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    AVer888RC_64+3bc5
    fffff880`0473fbc5 4c896308 mov qword ptr [rbx+8],r12

    SYMBOL_STACK_INDEX: 4

    SYMBOL_NAME: AVer888RC_64+3bc5

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: AVer888RC_64

    IMAGE_NAME: AVer888RC_64.sys

    DEBUG_FLR_IMAGE_TIMESTAMP: 4afcfadf

    FAILURE_BUCKET_ID: X64_0xA_AVer888RC_64+3bc5

    BUCKET_ID: X64_0xA_AVer888RC_64+3bc5

    Followup: MachineOwner
    ---------

    rax=fffff880033af3b0 rbx=0000000000000000 rcx=000000000000000a
    rdx=0000000000000000 rsi=0000000000000000 rdi=fffffa8006a2eb50
    rip=fffff800040ddb80 rsp=fffff880033af2a8 rbp=fffff880033af470
    r8=0000000000000002 r9=0000000000000001 r10=fffff800040e493c
    r11=0000000000000001 r12=0000000000000000 r13=0000000000000001
    r14=0000000000000000 r15=fffffa8006a2ec58
    iopl=0 nv up ei ng nz na pe nc
    cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000282
    nt!KeBugCheckEx:
    fffff800`040ddb80 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`033af2b0=000000000000000a
    Child-SP RetAddr : Args to Child : Call Site
    fffff880`033af2a8 fffff800`040dd129 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
    fffff880`033af2b0 fffff800`040dbda0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`033af3f0 fffff800`040e493c : fffffa80`0a492ed0 00000000`000007ff 00000000`00000000 fffff880`031d5180 : nt!KiPageFault+0x260 (TrapFrame @ fffff880`033af3f0)
    fffff880`033af580 fffff880`0473fbc5 : fffffa80`00000001 fffffa80`00000000 fffffa80`0a492400 fffffa80`000e0001 : nt!KeWaitForSingleObject+0x13c
    fffff880`033af620 fffff880`0473e1fa : fffffa80`0a492900 fffffa80`0e69bee0 fffffa80`0e69bc60 fffffa80`0e69bee0 : AVer888RC_64+0x3bc5
    fffff880`033af670 fffff880`04634664 : fffffa80`00000000 fffffa80`00000001 fffffa80`0e69bc60 00000000`00000000 : AVer888RC_64+0x21fa
    fffff880`033af6a0 fffff880`0461f9c1 : fffff880`04610560 fffffa80`0a492900 fffffa80`0e69bee0 fffffa80`0e69bc60 : ks!CKsDevice::pnpStop+0xac
    fffff880`033af700 fffff880`04647889 : fffffa80`0e69be98 fffffa80`0a31e5e0 fffffa80`0e69bc60 fffff8a0`06729e00 : ks!CKsDevice::DispatchPnp+0x1dd
    fffff880`033af750 fffff800`0434b9e1 : fffffa80`0a492270 fffff880`033af868 00000000`00000000 00000000`c00000bb : ksthunk!CKernelFilterDevice::DispatchIrp+0x181
    fffff880`033af7b0 fffff800`044ca6c1 : fffffa80`07798060 00000000`00000000 fffffa80`077976e0 00000000`00000801 : nt!IopSynchronousCall+0xe1
    fffff880`033af820 fffff800`041e0053 : fffff8a0`06729e00 fffff8a0`06729e00 00000000`00000018 00000000`00000000 : nt!IopRemoveDevice+0x101
    fffff880`033af8e0 fffff800`044ca214 : fffffa80`077976e0 00000000`00000000 00000000`00000002 00000000`00000000 : nt!PnpRemoveLockedDeviceNode+0x1a3
    fffff880`033af930 fffff800`044ca320 : 00000000`00000000 fffffa80`07798000 fffff8a0`002391d0 fffff800`042e1ae0 : nt!PnpDeleteLockedDeviceNode+0x44
    fffff880`033af960 fffff800`044ca419 : fffffa80`0b919902 fffffa80`0b919980 00000000`00000001 00000000`00000000 : nt!PnpDeleteLockedDeviceNodes+0xa0
    fffff880`033af9d0 fffff800`044ca591 : fffffa80`0b919980 00000000`00000000 fffffa80`0b919980 00000000`00000002 : nt!PnpDelayedRemoveWorker+0x79
    fffff880`033afa20 fffff800`041e028a : 00000000`00000001 fffffa80`0c2867b8 00000000`0000000a 00000000`0000000a : nt!PnpChainDereferenceComplete+0x131
    fffff880`033afa60 fffff800`0455b5e0 : 00000000`00000000 fffffa80`077976e0 fffff8a0`042d71f0 00000000`00000001 : nt!PnpIsChainDereferenced+0xda
    fffff880`033afae0 fffff800`0455b87c : fffff880`033afcb8 fffffa80`0e9ba100 fffffa80`06a2eb00 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0xff0
    fffff880`033afc20 fffff800`04444a1e : 00000000`00000000 fffffa80`0e9ba160 fffff8a0`1a718cf0 00000000`00000000 : nt!PnpProcessTargetDeviceEvent+0x4c
    fffff880`033afc50 fffff800`040e7261 : fffff800`0434a868 fffff8a0`042d71f0 fffff800`042832d8 fffffa80`06a2eb50 : nt! ?? ::NNGAKEGL::`string'+0x551ab
    fffff880`033afcb0 fffff800`0437bbae : 00000000`00000000 fffffa80`06a2eb50 00000000`00000080 fffffa80`069e29e0 : nt!ExpWorkerThread+0x111
    fffff880`033afd40 fffff800`040ce8c6 : fffff880`03164180 fffffa80`06a2eb50 fffff880`0316efc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
    fffff880`033afd80 00000000`00000000 : fffff880`033b0000 fffff880`033aa000 fffff880`033af310 00000000`00000000 : nt!KiStartSystemThread+0x16
    start end module name
    fffff800`00bb1000 fffff800`00bbb000 kdcom kdcom.dll Sun Feb 06 05:52:49 2011 (4D4D8061)
    fffff800`0401f000 fffff800`04068000 hal hal.dll Sun Nov 21 02:00:25 2010 (4CE7C669)
    fffff800`04068000 fffff800`0464e000 nt ntkrnlmp.exe Fri Aug 02 13:09:33 2013 (51FB06CD)
    fffff880`00c00000 fffff880`00c3f000 Rt64win7 Rt64win7.sys Fri Aug 21 04:05:06 2009 (4A8D7432)
    fffff880`00c47000 fffff880`00c96000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sun Nov 21 02:03:51 2010 (4CE7C737)
    fffff880`00c96000 fffff880`00caa000 PSHED PSHED.dll Tue Jul 14 13:32:23 2009 (4A5BE027)
    fffff880`00caa000 fffff880`00d08000 CLFS CLFS.SYS Tue Jul 14 11:19:57 2009 (4A5BC11D)
    fffff880`00d08000 fffff880`00dc8000 CI CI.dll Sun Nov 21 02:12:36 2010 (4CE7C944)
    fffff880`00e00000 fffff880`00e15000 partmgr partmgr.sys Sat Mar 17 18:06:09 2012 (4F641BC1)
    fffff880`00e15000 fffff880`00e2a000 volmgr volmgr.sys Sat Nov 20 22:19:28 2010 (4CE792A0)
    fffff880`00e2a000 fffff880`00e72000 tmcomm tmcomm.sys Thu Jul 18 16:24:47 2013 (51E76E0F)
    fffff880`00e80000 fffff880`00f42000 Wdf01000 Wdf01000.sys Thu Jul 26 14:25:13 2012 (5010AA89)
    fffff880`00f42000 fffff880`00f52000 WDFLDR WDFLDR.SYS Thu Jul 26 14:29:04 2012 (5010AB70)
    fffff880`00f52000 fffff880`00fa9000 ACPI ACPI.sys Sat Nov 20 22:19:16 2010 (4CE79294)
    fffff880`00fa9000 fffff880`00fb2000 WMILIB WMILIB.SYS Tue Jul 14 11:19:51 2009 (4A5BC117)
    fffff880`00fb2000 fffff880`00fbc000 msisadrv msisadrv.sys Tue Jul 14 11:19:26 2009 (4A5BC0FE)
    fffff880`00fbc000 fffff880`00fef000 pci pci.sys Sat Nov 20 22:19:11 2010 (4CE7928F)
    fffff880`00fef000 fffff880`00ffc000 vdrvroot vdrvroot.sys Tue Jul 14 12:01:31 2009 (4A5BCADB)
    fffff880`01000000 fffff880`01049000 fwpkclnt fwpkclnt.sys Thu Jan 03 16:06:48 2013 (50E4F5C8)
    fffff880`01060000 fffff880`010bc000 volmgrx volmgrx.sys Sat Nov 20 22:20:43 2010 (4CE792EB)
    fffff880`010bc000 fffff880`010d6000 mountmgr mountmgr.sys Sat Nov 20 22:19:21 2010 (4CE79299)
    fffff880`010d6000 fffff880`010e5000 TMEBC64 TMEBC64.sys Tue Jul 02 01:02:09 2013 (51D17DD1)
    fffff880`010e5000 fffff880`011d7000 ndis ndis.sys Thu Aug 23 03:11:46 2012 (5034F6B2)
    fffff880`01204000 fffff880`0140c000 iaStor iaStor.sys Sat Oct 03 08:58:50 2009 (4AC65B7A)
    fffff880`0140c000 fffff880`01417000 amdxata amdxata.sys Sat Mar 20 05:18:18 2010 (4BA3A3CA)
    fffff880`01417000 fffff880`01463000 fltmgr fltmgr.sys Sat Nov 20 22:19:24 2010 (4CE7929C)
    fffff880`01463000 fffff880`01477000 fileinfo fileinfo.sys Tue Jul 14 11:34:25 2009 (4A5BC481)
    fffff880`01477000 fffff880`014d5000 msrpc msrpc.sys Sat Nov 20 22:21:56 2010 (4CE79334)
    fffff880`014d5000 fffff880`01547000 cng cng.sys Sat Aug 25 03:47:16 2012 (5037A204)
    fffff880`01547000 fffff880`015a7000 NETIO NETIO.SYS Thu Aug 23 03:11:28 2012 (5034F6A0)
    fffff880`015a7000 fffff880`015d2000 ksecpkg ksecpkg.sys Sat Aug 25 03:48:29 2012 (5037A24D)
    fffff880`01600000 fffff880`0161b000 ksecdd ksecdd.sys Sat Jun 02 14:50:23 2012 (4FC97F6F)
    fffff880`0161b000 fffff880`0162c000 pcw pcw.sys Tue Jul 14 11:19:27 2009 (4A5BC0FF)
    fffff880`0162c000 fffff880`01636000 Fs_Rec Fs_Rec.sys Thu Mar 01 16:41:06 2012 (4F4EEFD2)
    fffff880`01649000 fffff880`017eb000 Ntfs Ntfs.sys Fri Apr 12 23:54:36 2013 (5167F5FC)
    fffff880`01800000 fffff880`01a00000 tcpip tcpip.sys Sat Jul 06 15:12:44 2013 (51D78B2C)
    fffff880`01a00000 fffff880`01a1c000 tmtdi tmtdi.sys Tue Aug 23 03:21:54 2011 (4E527412)
    fffff880`01a1c000 fffff880`01a30000 termdd termdd.sys Sun Nov 21 00:03:40 2010 (4CE7AB0C)
    fffff880`01a30000 fffff880`01a7c000 volsnap volsnap.sys Sat Nov 20 22:20:08 2010 (4CE792C8)
    fffff880`01a7c000 fffff880`01a84000 spldr spldr.sys Tue May 12 04:56:27 2009 (4A0858BB)
    fffff880`01a84000 fffff880`01abe000 rdyboost rdyboost.sys Sat Nov 20 22:43:10 2010 (4CE7982E)
    fffff880`01abe000 fffff880`01ad0000 mup mup.sys Tue Jul 14 11:23:45 2009 (4A5BC201)
    fffff880`01ad0000 fffff880`01ad9000 hwpolicy hwpolicy.sys Sat Nov 20 22:18:54 2010 (4CE7927E)
    fffff880`01ad9000 fffff880`01b13000 fvevol fvevol.sys Thu Jan 24 16:11:24 2013 (5100A65C)
    fffff880`01b13000 fffff880`01b29000 disk disk.sys Tue Jul 14 11:19:57 2009 (4A5BC11D)
    fffff880`01b29000 fffff880`01b59000 CLASSPNP CLASSPNP.SYS Sat Nov 20 22:19:23 2010 (4CE7929B)
    fffff880`01b67000 fffff880`01b8d000 pacer pacer.sys Sat Nov 20 23:52:18 2010 (4CE7A862)
    fffff880`01b8d000 fffff880`01b9c000 netbios netbios.sys Tue Jul 14 12:09:26 2009 (4A5BCCB6)
    fffff880`01b9c000 fffff880`01bb6000 tmevtmgr tmevtmgr.sys Thu Jul 18 16:24:44 2013 (51E76E0C)
    fffff880`01bb6000 fffff880`01bda000 tmactmon tmactmon.sys Thu Jul 18 16:24:58 2013 (51E76E1A)
    fffff880`01bda000 fffff880`01bf5000 wanarp wanarp.sys Sat Nov 20 23:52:36 2010 (4CE7A874)
    fffff880`02e05000 fffff880`02e56000 rdbss rdbss.sys Sat Nov 20 22:27:51 2010 (4CE79497)
    fffff880`02e56000 fffff880`02e62000 nsiproxy nsiproxy.sys Tue Jul 14 11:21:02 2009 (4A5BC15E)
    fffff880`02e62000 fffff880`02e6d000 mssmbios mssmbios.sys Tue Jul 14 11:31:10 2009 (4A5BC3BE)
    fffff880`02e6d000 fffff880`02e7c000 discache discache.sys Tue Jul 14 11:37:18 2009 (4A5BC52E)
    fffff880`02e7c000 fffff880`02e9a000 dfsc dfsc.sys Sat Nov 20 22:26:31 2010 (4CE79447)
    fffff880`02e9a000 fffff880`02eab000 blbdrive blbdrive.sys Tue Jul 14 11:35:59 2009 (4A5BC4DF)
    fffff880`02eab000 fffff880`02ed1000 tunnel tunnel.sys Sat Nov 20 23:51:50 2010 (4CE7A846)
    fffff880`02ed1000 fffff880`02ee7000 intelppm intelppm.sys Tue Jul 14 11:19:25 2009 (4A5BC0FD)
    fffff880`02ee7000 fffff880`02fdb000 dxgkrnl dxgkrnl.sys Wed Apr 10 15:28:09 2013 (5164DC49)
    fffff880`04200000 fffff880`04289000 afd afd.sys Wed Dec 28 16:59:20 2011 (4EFA9418)
    fffff880`04289000 fffff880`04294000 ws2ifsl ws2ifsl.sys Tue Jul 14 12:10:33 2009 (4A5BCCF9)
    fffff880`04294000 fffff880`0429d000 wfplwf wfplwf.sys Tue Jul 14 12:09:26 2009 (4A5BCCB6)
    fffff880`0429d000 fffff880`042b3000 vwififlt vwififlt.sys Tue Jul 14 12:07:22 2009 (4A5BCC3A)
    fffff880`042b3000 fffff880`044bb000 dump_iaStor dump_iaStor.sys Sat Oct 03 08:58:50 2009 (4AC65B7A)
    fffff880`044ce000 fffff880`044f8000 cdrom cdrom.sys Sat Nov 20 22:19:20 2010 (4CE79298)
    fffff880`044f8000 fffff880`04501000 Null Null.SYS Tue Jul 14 11:19:37 2009 (4A5BC109)
    fffff880`04501000 fffff880`04508000 Beep Beep.SYS Tue Jul 14 12:00:13 2009 (4A5BCA8D)
    fffff880`04508000 fffff880`04516000 vga vga.sys Tue Jul 14 11:38:47 2009 (4A5BC587)
    fffff880`04516000 fffff880`0453b000 VIDEOPRT VIDEOPRT.SYS Tue Jul 14 11:38:51 2009 (4A5BC58B)
    fffff880`0453b000 fffff880`0454b000 watchdog watchdog.sys Tue Jul 14 11:37:35 2009 (4A5BC53F)
    fffff880`0454b000 fffff880`04554000 RDPCDD RDPCDD.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
    fffff880`04554000 fffff880`0455d000 rdpencdd rdpencdd.sys Tue Jul 14 12:16:34 2009 (4A5BCE62)
    fffff880`0455d000 fffff880`04566000 rdprefmp rdprefmp.sys Tue Jul 14 12:16:35 2009 (4A5BCE63)
    fffff880`04566000 fffff880`04571000 Msfs Msfs.SYS Tue Jul 14 11:19:47 2009 (4A5BC113)
    fffff880`04571000 fffff880`04582000 Npfs Npfs.SYS Tue Jul 14 11:19:48 2009 (4A5BC114)
    fffff880`04582000 fffff880`045a4000 tdx tdx.sys Sat Nov 20 22:21:54 2010 (4CE79332)
    fffff880`045a4000 fffff880`045b1000 TDI TDI.SYS Sat Nov 20 22:22:06 2010 (4CE7933E)
    fffff880`045b1000 fffff880`045f6000 netbt netbt.sys Sat Nov 20 22:23:18 2010 (4CE79386)
    fffff880`04600000 fffff880`04643000 ks ks.sys Sat Nov 20 23:33:23 2010 (4CE7A3F3)
    fffff880`04643000 fffff880`04646e80 BdaSup BdaSup.SYS Tue Jul 14 12:06:40 2009 (4A5BCC10)
    fffff880`04647000 fffff880`0464c200 ksthunk ksthunk.sys Tue Jul 14 12:00:19 2009 (4A5BCA93)
    fffff880`0464d000 fffff880`046a7000 usbhub usbhub.sys Fri Mar 25 16:29:25 2011 (4D8C0C15)
    fffff880`046a7000 fffff880`046bc000 NDProxy NDProxy.SYS Sat Nov 20 23:52:20 2010 (4CE7A864)
    fffff880`046fe000 fffff880`0473c000 1394ohci 1394ohci.sys Sat Nov 20 23:44:56 2010 (4CE7A6A8)
    fffff880`0473c000 fffff880`047c0b80 AVer888RC_64 AVer888RC_64.sys Fri Nov 13 19:21:19 2009 (4AFCFADF)
    fffff880`05000000 fffff880`0503d000 portcls portcls.sys Tue Jul 14 12:06:27 2009 (4A5BCC03)
    fffff880`0503d000 fffff880`0505f000 drmk drmk.sys Tue Jul 14 13:01:25 2009 (4A5BD8E5)
    fffff880`0507a000 fffff880`052be000 netr28x netr28x.sys Wed Nov 28 14:32:10 2012 (50B5699A)
    fffff880`052be000 fffff880`052cb000 vwifibus vwifibus.sys Tue Jul 14 12:07:21 2009 (4A5BCC39)
    fffff880`052cb000 fffff880`052d1c00 GEARAspiWDM GEARAspiWDM.sys Fri May 04 07:56:17 2012 (4FA2E2E1)
    fffff880`052d2000 fffff880`052e2000 CompositeBus CompositeBus.sys Sat Nov 20 23:33:17 2010 (4CE7A3ED)
    fffff880`052e2000 fffff880`052f8000 AgileVpn AgileVpn.sys Tue Jul 14 12:10:24 2009 (4A5BCCF0)
    fffff880`052f8000 fffff880`0531c000 rasl2tp rasl2tp.sys Sat Nov 20 23:52:34 2010 (4CE7A872)
    fffff880`0531c000 fffff880`05328000 ndistapi ndistapi.sys Tue Jul 14 12:10:00 2009 (4A5BCCD8)
    fffff880`05328000 fffff880`05357000 ndiswan ndiswan.sys Sat Nov 20 23:52:32 2010 (4CE7A870)
    fffff880`05357000 fffff880`05372000 raspppoe raspppoe.sys Tue Jul 14 12:10:17 2009 (4A5BCCE9)
    fffff880`05372000 fffff880`05393000 raspptp raspptp.sys Sat Nov 20 23:52:31 2010 (4CE7A86F)
    fffff880`05393000 fffff880`053ad000 rassstp rassstp.sys Tue Jul 14 12:10:25 2009 (4A5BCCF1)
    fffff880`053ad000 fffff880`053bc000 kbdclass kbdclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
    fffff880`053bc000 fffff880`053cb000 mouclass mouclass.sys Tue Jul 14 11:19:50 2009 (4A5BC116)
    fffff880`053cb000 fffff880`053cc480 swenum swenum.sys Tue Jul 14 12:00:18 2009 (4A5BCA92)
    fffff880`053cd000 fffff880`053df000 circlass circlass.sys Tue Jul 14 12:06:34 2009 (4A5BCC0A)
    fffff880`053df000 fffff880`053f1000 umbus umbus.sys Sat Nov 20 23:44:37 2010 (4CE7A695)
    fffff880`053f1000 fffff880`053fe000 nvvad64v nvvad64v.sys Tue Aug 20 23:29:10 2013 (52135306)
    fffff880`05600000 fffff880`0564e000 mrxsmb10 mrxsmb10.sys Sat Jul 09 14:46:28 2011 (4E17C104)
    fffff880`0564e000 fffff880`05672000 mrxsmb20 mrxsmb20.sys Wed Apr 27 14:39:37 2011 (4DB781E9)
    fffff880`05672000 fffff880`0567f000 lirsgt lirsgt.sys Mon May 18 01:06:57 2009 (4A100BF1)
    fffff880`056b5000 fffff880`0577e000 HTTP HTTP.sys Sat Nov 20 22:24:30 2010 (4CE793CE)
    fffff880`0577e000 fffff880`0579c000 bowser bowser.sys Wed Feb 23 17:55:04 2011 (4D649328)
    fffff880`0579c000 fffff880`057a6000 vwifimp vwifimp.sys Tue Jul 14 12:07:28 2009 (4A5BCC40)
    fffff880`057a6000 fffff880`057be000 mpsdrv mpsdrv.sys Tue Jul 14 12:08:25 2009 (4A5BCC79)
    fffff880`057be000 fffff880`057eb000 mrxsmb mrxsmb.sys Wed Apr 27 14:40:38 2011 (4DB78226)
    fffff880`05800000 fffff880`05824000 HDAudBus HDAudBus.sys Sat Nov 20 23:43:42 2010 (4CE7A65E)
    fffff880`0584f000 fffff880`06334000 nvlddmkm nvlddmkm.sys Fri Jun 21 21:06:16 2013 (51C41788)
    fffff880`06334000 fffff880`06335180 nvBridge nvBridge.kmd Mon Aug 09 16:06:41 2010 (4C5F7ED1)
    fffff880`06336000 fffff880`0637c000 dxgmms1 dxgmms1.sys Wed Apr 10 15:27:15 2013 (5164DC13)
    fffff880`0638d000 fffff880`0639e000 usbehci usbehci.sys Fri Mar 25 16:29:04 2011 (4D8C0C00)
    fffff880`0639e000 fffff880`063f4000 USBPORT USBPORT.SYS Fri Mar 25 16:29:12 2011 (4D8C0C08)
    fffff880`0746c000 fffff880`076c8d00 RTKVHD64 RTKVHD64.sys Tue Sep 07 23:17:23 2010 (4C861F43)
    fffff880`076c9000 fffff880`076da000 hidir hidir.sys Tue Jul 14 12:06:23 2009 (4A5BCBFF)
    fffff880`076da000 fffff880`076f3000 HIDCLASS HIDCLASS.SYS Sat Nov 20 23:43:49 2010 (4CE7A665)
    fffff880`076f3000 fffff880`076fb080 HIDPARSE HIDPARSE.SYS Tue Jul 14 12:06:17 2009 (4A5BCBF9)
    fffff880`076fc000 fffff880`0770a000 kbdhid kbdhid.sys Sat Nov 20 23:33:25 2010 (4CE7A3F5)
    fffff880`0770a000 fffff880`07717000 mouhid mouhid.sys Tue Jul 14 12:00:20 2009 (4A5BCA94)
    fffff880`07717000 fffff880`07723000 Dxapi Dxapi.sys Tue Jul 14 11:38:28 2009 (4A5BC574)
    fffff880`07723000 fffff880`07731000 crashdmp crashdmp.sys Tue Jul 14 12:01:01 2009 (4A5BCABD)
    fffff880`07731000 fffff880`07744000 dump_dumpfve dump_dumpfve.sys Tue Jul 14 11:21:51 2009 (4A5BC18F)
    fffff880`07744000 fffff880`07752000 monitor monitor.sys Tue Jul 14 11:38:52 2009 (4A5BC58C)
    fffff880`07752000 fffff880`0776f000 usbccgp usbccgp.sys Fri Mar 25 16:29:14 2011 (4D8C0C0A)
    fffff880`0776f000 fffff880`07770f00 USBD USBD.SYS Fri Mar 25 16:28:59 2011 (4D8C0BFB)
    fffff880`07771000 fffff880`07789000 rspndr rspndr.sys Tue Jul 14 12:08:50 2009 (4A5BCC92)
    fffff880`07789000 fffff880`077d8000 atksgt atksgt.sys Mon May 18 01:36:34 2009 (4A1012E2)
    fffff880`09000000 fffff880`09053000 nwifi nwifi.sys Tue Jul 14 12:07:23 2009 (4A5BCC3B)
    fffff880`09057000 fffff880`094f8d00 lvuvc64 lvuvc64.sys Wed Jan 18 19:41:08 2012 (4F166984)
    fffff880`094f9000 fffff880`09513c80 usbaudio usbaudio.sys Sat Nov 20 23:43:52 2010 (4CE7A668)
    fffff880`09514000 fffff880`09567a80 lvrs64 lvrs64.sys Wed Jan 18 19:40:36 2012 (4F166964)
    fffff880`09568000 fffff880`09574000 usbprint usbprint.sys Tue Jul 14 12:38:18 2009 (4A5BD37A)
    fffff880`09574000 fffff880`0958f000 USBSTOR USBSTOR.SYS Fri Mar 11 17:37:16 2011 (4D79A6FC)
    fffff880`0958f000 fffff880`0959d000 hidusb hidusb.sys Sat Nov 20 23:43:49 2010 (4CE7A665)
    fffff880`0959d000 fffff880`095c0000 luafv luafv.sys Tue Jul 14 11:26:13 2009 (4A5BC295)
    fffff880`095c0000 fffff880`095ca000 mbam mbam.sys Fri Mar 01 09:33:07 2013 (512FBF03)
    fffff880`095ca000 fffff880`095df000 lltdio lltdio.sys Tue Jul 14 12:08:50 2009 (4A5BCC92)
    fffff880`095df000 fffff880`095f2000 ndisuio ndisuio.sys Sat Nov 20 23:50:08 2010 (4CE7A7E0)
    fffff880`09648000 fffff880`096ee000 peauth peauth.sys Tue Jul 14 13:01:19 2009 (4A5BD8DF)
    fffff880`096ee000 fffff880`096f9000 secdrv secdrv.SYS Thu Sep 14 01:18:38 2006 (4508052E)
    fffff880`096f9000 fffff880`0972a000 srvnet srvnet.sys Fri Apr 29 15:05:35 2011 (4DBA2AFF)
    fffff880`0972a000 fffff880`0973c000 tcpipreg tcpipreg.sys Thu Oct 04 05:07:26 2012 (506C62BE)
    fffff880`0973c000 fffff880`09767000 000 000.fcl Sat Sep 27 01:11:22 2008 (48DCDF7A)
    fffff880`09767000 fffff880`097d0000 srv2 srv2.sys Fri Apr 29 15:05:46 2011 (4DBA2B0A)
    fffff880`0a04c000 fffff880`0a0e4000 srv srv.sys Fri Apr 29 15:06:06 2011 (4DBA2B1E)
    fffff880`0a11a000 fffff880`0a133000 WudfPf WudfPf.sys Thu Jul 26 14:26:45 2012 (5010AAE5)
    fffff880`0a133000 fffff880`0a169000 WUDFRd WUDFRd.sys Thu Jul 26 14:26:06 2012 (5010AABE)
    fffff880`0a169000 fffff880`0a1bf000 tmnciesc tmnciesc.sys Wed May 15 22:23:21 2013 (51936219)
    fffff880`0a1bf000 fffff880`0a1dc000 tmeevw tmeevw.sys Thu Jun 13 18:25:31 2013 (51B965DB)
    fffff880`0b4c5000 fffff880`0b4da000 kbfilter kbfilter.sys Thu Apr 18 15:54:14 2013 (516F6E66)
    fffff960`00090000 fffff960`003a7000 win32k win32k.sys Thu Aug 08 13:20:19 2013 (5202F253)
    fffff960`00540000 fffff960`0054a000 TSDDD TSDDD.dll Tue Jul 14 12:16:34 2009 (4A5BCE62)
    fffff960`00690000 fffff960`006b7000 cdd cdd.dll Fri Feb 04 00:25:25 2011 (4D4A90A5)
    fffff960`008d0000 fffff960`00931000 ATMFD ATMFD.DLL Mon Dec 17 03:45:03 2012 (50CDDE6F)

    Unloaded modules:
    fffff880`0505f000 fffff880`05070000 AVer888RCIR_64.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00011000
    fffff880`0637c000 fffff880`0638d000 HECIx64.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00011000
    fffff880`0dcfb000 fffff880`0df03000 hiber_iaStor.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00208000
    fffff880`0df03000 fffff880`0df16000 hiber_dumpfve.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00013000
    fffff880`0dad1000 fffff880`0dcd9000 hiber_iaStor.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00208000
    fffff880`0dcd9000 fffff880`0dcec000 hiber_dumpfve.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00013000
    fffff880`0b454000 fffff880`0b4c5000 spsys.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00071000
    fffff880`0a0e4000 fffff880`0a11a000 WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00036000
    fffff880`01b59000 fffff880`01b67000 crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 0000E000
    fffff880`042b3000 fffff880`044bb000 dump_iaStor.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00208000
    fffff880`044bb000 fffff880`044ce000 dump_dumpfve.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ImageSize: 00013000
    Closing open log file c:debuglog.txt

    Again, all assistance very much appreciated.
     
  15. 2013/10/03
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
  16. 2013/10/03
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    No I do not. I do have a number of the AVS programmes developed by Online Media Technologies, but I have had them for quite some time - years - and updated them as necessary.
    I searched for AVerMedia, AVStream etc and variants using the search function but came up with nothing.
     
  17. 2013/10/03
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Wait, wait - I have found AVer888RC_64.sys in Windows System 32 drivers that is the right size (as described in your article) and another, AVer888CIR_64.sys, which is only 39kb. Found them by manually trawling rather than searching. What next?
     
  18. 2013/10/03
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Yes, I was about to reply that the file is listed in the dump data log - screenshot below. It is not a Windows System file and is not present on my system - it is probably a file common to your AVS software.

    What next is a very good question :) File corruption is a possibility and an outside chance of a memory issue. It's difficult to see why that file should be involved in the sleep process unless it runs continuously in the background.

    You can check if any elements of AVS are in the Start up folder using msconfig - Start > All Programs and type msconfig in the search box; it will be listed under Programs in the pane above. Go to the Start-up tab and disable any reference to AVS if present and test.

    I'm not sure if non-Windows System Files are covered by System File Checker, but it would not harm to run it - see here

    On the likely basis that you will see another BSOD post the dump data log here.

    Just a reminder .....

     

    Attached Files:

    Kotare likes this.
  19. 2013/10/03
    Kotare

    Kotare Well-Known Member Thread Starter

    Joined:
    2002/03/19
    Messages:
    65
    Likes Received:
    0
    Thank you for all of that. None of the AVS stuff is in Start up. Presently I have moved the two files from their System32 folder to a document folder and tried all the AVS related programmes - they all seem to work ok. Also, the system woke up this morning without a BSOD so that is encouraging. I read through the system file checker process, but I think I will hold off going down that route for the moment while I see what effect moving the files has had. If no more BSODs, good, otherwise run system file checker and dump log back here.
    Thank you very much for your assistance, regards Rick
     
  20. 2013/11/07
    JackChill420

    JackChill420 Inactive

    Joined:
    2013/11/07
    Messages:
    3
    Likes Received:
    0
    Don't you think that a recently installed program is responsible for frequent crashes? Uninstall any recently installed software applications.

    1. Click Start, select Control Panel.
    2. Click Programs, Uninstall a Program.
    3. Choose any recently installed program; click the Uninstall button.
     
  21. 2013/11/07
    lj50 Lifetime Subscription

    lj50 SuperGeek WindowsBBS Team Member

    Joined:
    2003/07/04
    Messages:
    2,801
    Likes Received:
    137

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.