Repeating restart after my PC shutting down, restart, or downloading anything.

Make sure that you have enable memory dump. Refer to:

http://support.microsoft.com/kb/315263

kindly help me..i m getting error of "Your PC run into a problem and need to restart"

dmp files are attached...

https://skydrive.live.com/redir?resid=7ACCCAABB211BB56!256&authkey=!AIRFHitN8JB49ZI

Hey, me too facing the same issue. PC restarting repeatedly. I'm using Windows 8 Pro Media Center.  Please give me a solution.

Dumps files are attached: https://skydrive.live.com/?cid=48D295E81679B15C&id=48D295E81679B15C%21116

kindly help me..i m getting error of "Your PC run into a problem and need to restart"

dmp files are attached...

https://skydrive.live.com/redir?resid=7ACCCAABB211BB56!256&authkey=!AIRFHitN8JB49ZI

A driver called Lock Folder XP (LFSys.sys) is the cause:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82b1e5ee, The address that the exception occurred at
Arg3: bdc0faf8, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

FAULTING_IP: 
LFSys+15ee
82b1e5ee 8b490c          mov     ecx,dword ptr [ecx+0Ch]

TRAP_FRAME:  bdc0faf8 -- (.trap 0xffffffffbdc0faf8)
ErrCode = 00000000
eax=840875c8 ebx=840873f0 ecx=00000400 edx=840873f0 esi=84ed9d78 edi=00000000
eip=82b1e5ee esp=bdc0fb6c ebp=bdc0fb90 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010206
LFSys+0x15ee:
82b1e5ee 8b490c          mov     ecx,dword ptr [ecx+0Ch] ds:0023:0000040c=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  taskhost.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 82b20930 to 82b1e5ee

STACK_TEXT: 
WARNING: Stack unwind information not available. Following frames may be wrong.
LFSys
LFSys
nt!IofCallDriver
nt!IopSynchronousServiceTail
nt!IopXxxControlFile
nt!NtFsControlFile
nt!KiFastCallEntry
0x0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
LFSys+15ee
82b1e5ee 8b490c          mov     ecx,dword ptr [ecx+0Ch]

MODULE_NAME: LFSys

IMAGE_NAME:  LFSys.sys


0: kd> lmvm LFSys
start    end        module name
82b1d000 82b35000   LFSys    T (no symbols)           
    Loaded symbol image file: LFSys.sys
    Image path: \SystemRoot\System32\Drivers\LFSys.sys
    Image name: LFSys.sys
    Timestamp:        Thu Jul 09 13:41:28 2009

Update the tool or remove it.

Hey, me too facing the same issue. PC restarting repeatedly. I'm using Windows 8 Pro Media Center.  Please give me a solution.

Dumps files are attached: https://skydrive.live.com/?cid=48D295E81679B15C&id=48D295E81679B15C%21116

You get very different bugchecks:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000008, value 0 = read operation, 1 = write operation
Arg4: 00000000, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 81e86470
Unable to read MiSystemVaType memory at 81e5c080
 00000000 

CURRENT_IRQL:  2

FAULTING_IP: 
+0
00000000 ??              ???

PROCESS_NAME:  AppleMobileDev

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

TAG_NOT_DEFINED_c000000f:  FFFFFFFF83017000

TRAP_FRAME:  83016cec -- (.trap 0xffffffff83016cec)
ErrCode = 00000010
eax=00000000 ebx=823f630c ecx=85e7a178 edx=c0000023 esi=856882d8 edi=85e7a178
eip=00000000 esp=83016d60 ebp=83016d68 iopl=0         nv up ei pl nz ac pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010217
00000000 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from 81dcb880 to 81d53788

FAILED_INSTRUCTION_ADDRESS: 
+0
00000000 ??              ???

STACK_TEXT:  
0x0
nvstor32
nvstor32
nvstor32
nvstor32
nvstor32
nvstor32
nvstor32
nvstor32
nvstor32
nt!KiExecuteAllDpcs
nt!KiRetireDpcList
nt!KiDispatchInterrupt
0x0



STACK_COMMAND:  kb

FOLLOWUP_IP: 
nvstor32+44b3
88bc84b3 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nvstor32+44b3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nvstor32

IMAGE_NAME:  nvstor32.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a400357

FAILURE_BUCKET_ID:  AV_CODE_AV_NULL_IP_nvstor32+44b3

BUCKET_ID:  AV_CODE_AV_NULL_IP_nvstor32+44b3

         
    Loaded symbol image file: nvstor32.sys
    Image path: \SystemRoot\system32\DRIVERS\nvstor32.sys
    Image name: nvstor32.sys
    Timestamp:        Tue Jun 23 00:19:03 2009

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory.  The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: 88baac87, Virtual address for the attempted execute.
Arg2: 00aa0963, PTE contents.
Arg3: 88baabb4, (reserved)
Arg4: 00000000, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0xFC

PROCESS_NAME:  System

CURRENT_IRQL:  68

LAST_CONTROL_TRANSFER:  from 8d15b5a7 to 88baac87

STACK_TEXT:  
WARNING: Frame IP not in any known module. Following frames may be wrong.
88baac44 8d15b5a7 8567e858 8d15b4b8 88baac68 0x88baac87
88baac88 8d15a661 85f18778 00000000 85f18778 dxgmms1!VidSchiUpdateNodeRunningTime+0x2f
88baacac 8d159baa 00000001 00000000 845ab008 dxgmms1!VidSchiSelectContext+0x73
88baad54 8d182962 85f18778 85bb1540 00000000 dxgmms1!VidSchiScheduleCommandToRun+0x88
88baad74 8206943e 85f18778 f98563b0 00000000 dxgmms1!VidSchiWorkerThread+0x8c
88baadb0 82175119 8d1828d6 85f18778 00000000 nt!PspSystemThreadStartup+0x4a
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dxgmms1!VidSchiUpdateNodeRunningTime+2f
8d15b5a7 85ff            test    edi,edi

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  dxgmms1!VidSchiUpdateNodeRunningTime+2f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME:  dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  505aa98f

BUCKET_ID_FUNC_OFFSET:  2f

FAILURE_BUCKET_ID:  0xFC_dxgmms1!VidSchiUpdateNodeRunningTime

BUCKET_ID:  0xFC_dxgmms1!VidSchiUpdateNodeRunningTime

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000001ed, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8df63eff, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from 8146a470
Unable to read MiSystemVaType memory at 81440080
 000001ed 

CURRENT_IRQL:  2

FAULTING_IP: 
dxgmms1!VidSchiSelectContextFromThisPriority+31
8df63eff c680f101000001  mov     byte ptr [eax+1F1h],1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  System

LAST_CONTROL_TRANSFER:  from 8df64668 to 8df63eff

STACK_TEXT:  
80337c80 8df64668 85638000 8563f778 8563f778 dxgmms1!VidSchiSelectContextFromThisPriority+0x31
80337cac 8df63baa 00000001 00000000 b07c83a0 dxgmms1!VidSchiSelectContext+0x7a
80337d54 8df8c962 8563f778 8563d7c0 00000000 dxgmms1!VidSchiScheduleCommandToRun+0x88
80337d74 8125b43e 8563f778 ea6f1bf0 00000000 dxgmms1!VidSchiWorkerThread+0x8c
80337db0 81367119 8df8c8d6 8563f778 00000000 nt!PspSystemThreadStartup+0x4a
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
dxgmms1!VidSchiSelectContextFromThisPriority+31
8df63eff c680f101000001  mov     byte ptr [eax+1F1h],1

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  dxgmms1!VidSchiSelectContextFromThisPriority+31

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: dxgmms1

IMAGE_NAME:  dxgmms1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  505aa98f

BUCKET_ID_FUNC_OFFSET:  31

FAILURE_BUCKET_ID:  AV_dxgmms1!VidSchiSelectContextFromThisPriority

His query was not answered.

In a way it was.   A problem driver and module was identified.

Another approach would be to try booting in VGA mode, changing drivers if necessary, and seeing how far that takes you.

---

Same problem. 

bmp in https://skydrive.live.com/#cid=9C39BCF205B9DC71&id=9C39BCF205B9DC71%21230

please help.

Same problem. 

bmp in https://skydrive.live.com/#cid=9C39BCF205B9DC71&id=9C39BCF205B9DC71%21230

please help.

the Atheros WLAN driver is the cause:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88007f54d7c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff803f4364168
GetUlongFromAddress: unable to read from fffff803f43641f8
 0000000000000028 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
athw8x+107d7c
fffff880`07f54d7c 83782801        cmp     dword ptr [rax+28h],1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  System

TRAP_FRAME:  fffff8801b6063e0 -- (.trap 0xfffff8801b6063e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa800a59e030
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88007f54d7c rsp=fffff8801b606570 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000000000 r10=00000000fffffffe
r11=fffff8801b6064b8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
athw8x+0x107d7c:
fffff880`07f54d7c 83782801        cmp     dword ptr [rax+28h],1 ds:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff803f4088369 to fffff803f4089040

STACK_TEXT:  
nt!KeBugCheckEx
nt!KiBugCheckDispatch
nt!KiPageFault
athw8x
athw8x
athw8x
0x0
0x0
athw8x
0x0


    Image path: \SystemRoot\system32\DRIVERS\athw8x.sys
    Image name: athw8x.sys
    Timestamp:        Thu Jun 14 11:41:08 2012

Install the latest driver to fix it:

http://www.atheros.cz/

I am having the same problem... it occurs whenever I am playing games like angry birds or watching a movie...

Here's the link to the dump files : http://sdrv.ms/XsuoAv

Also, I should state that since my pc is rather old it does not have any windows 8 graphics drivers released by intel, so I am using the old win7 driver. (The default win8 built-in driver did not support openGL required for angry birds).

Thanks in advance.

Please Help Me, I have the same Issue with my laptop runing windows 8 :'( Here is my *dmp file...

https://skydrive.live.com/redir?resid=3A365310CB4531BF!144

TIA

Please Help Me, I have the same Issue with my laptop runing windows 8 :'( Here is my *dmp file...

https://skydrive.live.com/redir?resid=3A365310CB4531BF!144

TIA

your issue seams o be caused by the Intel WiFi driver (netwlv64.sys):

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DPC_WATCHDOG_VIOLATION (133)
The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL
or above.
Arguments:
Arg1: 0000000000000000, A single DPC or ISR exceeded its time allotment. The offending
	component can usually be identified with a stack trace.
Arg2: 0000000000000283, The DPC time count (in ticks).
Arg3: 0000000000000282, The DPC time allotment (in ticks).
Arg4: 0000000000000000

Debugging Details:
------------------


DPC_TIMEOUT_TYPE:  SINGLE_DPC_TIMEOUT_EXCEEDED

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x133

PROCESS_NAME:  System

CURRENT_IRQL:  d

TAG_NOT_DEFINED_c000000f:  FFFFF88001822FB0

LAST_CONTROL_TRANSFER:  from fffff802c7a5d143 to fffff802c7904340

STACK_TEXT:  
nt!KeBugCheckEx
nt! ?? ::FNODOBFM::`string'
nt!KeUpdateRunTime
hal!HalpTimerClockInterrupt
nt!KiInterruptDispatchNoLockNoEtw
nt!KeReleaseSpinLock
netwlv64
0x0
0x0
0x0
0x0
0x0
ndis!ndisReferenceRef
0x0
0x0
0x0
0x0
netwlv64
0x0


IMAGE_NAME:  netwlv64.sys

BUCKET_ID:  0x133_DPC_netwlv64+23c04

       
    Loaded symbol image file: netwlv64.sys
    Image path: \SystemRoot\system32\DRIVERS\netwlv64.sys
    Image name: netwlv64.sys
    Timestamp:        Mon Aug 16 16:26:39 2010

Andre.Ziegler or anyone that can help, I'm having the same problem as they are.

Please help! I've been sending the report to Microsoft, to no avail. :\

Here're the DMP files:

http://sdrv.ms/Wq5MGM

I appreciate it! 

Andre.Ziegler or anyone that can help, I'm having the same problem as they are.

Please help! I've been sending the report to Microsoft, to no avail. :\

Here're the DMP files:

http://sdrv.ms/Wq5MGM

I appreciate it! 

uninstall Avast:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00008886, The subtype of the bugcheck.
Arg2: 8340d000
Arg3: 8da4d054
Arg4: 00000405

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_8886

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 81bf2743 to 81b4b76c

STACK_TEXT:  
a405b9cc 81bf2743 0000001a 00008886 8340d000 nt!KeBugCheckEx
a405ba20 81abebbc 01012c00 00000000 97c0cd68 nt! ?? ::FNODOBFM::`string'+0x2a4ed
a405ba3c 81abeb3b 00000002 86558000 a405bb68 nt!MiRelinkStandbyPage+0x19
a405ba7c 81ce5396 86559068 865584e8 4d8a73d5 nt!MmSetPfnListPriorities+0x145
a405bacc 81d86d58 0007a501 a405bb20 4d8a7281 nt!PfpPfnPrioRequest+0x149
a405bb98 81cba49d 00afc8c8 00000014 0007a501 nt!PfSetSuperfetchInformation+0xad
a405bcf8 824cf2fa 0000004f 00afc8c8 00000014 nt!NtSetSystemInformation+0x195
WARNING: Stack unwind information not available. Following frames may be wrong.
a405bd40 81bc033c 0000004f 00afc8c8 00000014 aswSnx+0x172fa
a405bd40 77836954 0000004f 00afc8c8 00000014 nt!KiFastCallEntry+0x12c
00afc890 00000000 00000000 00000000 00000000 0x77836954


STACK_COMMAND:  kb

FOLLOWUP_IP: 
aswSnx+172fa
824cf2fa ??              ???

SYMBOL_STACK_INDEX:  7

SYMBOL_NAME:  aswSnx+172fa

FOLLOWUP_NAME:  wintriag

MODULE_NAME: aswSnx

IMAGE_NAME:  aswSnx.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  5090582a

FAILURE_BUCKET_ID:  0x1a_8886_aswSnx+172fa

BUCKET_ID:  0x1a_8886_aswSnx+172fa

Followup: wintriag
---------

1: kd> lmvm aswSnx
start    end        module name
824b8000 82570000   aswSnx   T (no symbols)           
    Loaded symbol image file: aswSnx.SYS
    Image path: \SystemRoot\System32\Drivers\aswSnx.SYS
    Image name: aswSnx.SYS
    Timestamp:        Tue Oct 30 23:43:54 2012

you have 0x9F dumps, but I can't dump the data. Try to activate driver verifier to get better dumps:

http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-16-WinDbg-Driver-Verifier

http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-17-WinDbg-Driver-Verifier-Part-2

http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-18-WinDbg-Driver-Verifier-Part-3

Here is the link to mine:

THanks a lot in advance!

https://skydrive.live.com/redir?resid=D0ED319B3C37DA8E!168

Here is the link to mine:

THanks a lot in advance!

https://skydrive.live.com/redir?resid=D0ED319B3C37DA8E!168

Please remove Avast from the PC. If you still have issue, you should check the RAM with memtest86+ and your CPU with Prime95, because you get too many different crashes.

here are my files..
please help me...

https://skydrive.live.com/#cid=7F37A8F2D63A8078&id=7F37A8F2D63A8078%21204

here are my files..
please help me...

https://skydrive.live.com/#cid=7F37A8F2D63A8078&id=7F37A8F2D63A8078%21204

Try updating NVidia drivers and checking memory with Memtest86+

You are experiencing memory corruption errors. Obviously, this can be cause either by a ring0 (kernel) driver such as nvlddmkm.sys (which is mentioned), or by "external" issues, read hardware, that is RAM modules.

Nvidia drivers have a flaw in the mentioned driver, see Nvidia Display Driver Service Attack Escalates Privileges On Windows Machines

If you don't want to, I'd wait for Andre Ziegler as he's far more experienced than me.

I would try the following video driver for 64-bit VGA drivers for NVidia adapters, download version 310.90 for Windows 8

Interestingly, you get the following bugcheck code: Bug Check 0x8B:  MBR_CHECKSUM_MISMATCH (code 139)

What if you do the following:

1. Remove current NVidia drivers.

2. Run sfc/scannow at the elevated command prompt.

3. Run chkdsk c: /r.

4. Install new video dr

Hi Andre,

thanks for helping all these users with issues. I also have a problem with my new Windows 8 Sony Viao laptop. Every time I leave my laptop for 5 mins or so, it crashes and turns itself off. When i restart i get a message: "Your PC ran into a problem...This problem caused your PC to restart..." I have sent this error to Microsoft numerous times to no avail.

Here are my files...

https://skydrive.live.com/redir?resid=B52347235C4F51EE!175

This problem always interrupts my work.

Thanks in advance. 

Hi Andre,

thanks for helping all these users with issues. I also have a problem with my new Windows 8 Sony Viao laptop. Every time I leave my laptop for 5 mins or so, it crashes and turns itself off. When i restart i get a message: "Your PC ran into a problem...This problem caused your PC to restart..." I have sent this error to Microsoft numerous times to no avail.

Here are my files...

https://skydrive.live.com/redir?resid=B52347235C4F51EE!175

This problem always interrupts my work.

Thanks in advance. 

Hi,

You seem to have the same problem as mentioned in this thread: Windows 8 Power_Driver_State_Failure message

Check Andre's recommendations over there.

Also, check to see if you can disable power saving settings for your Wi-Fi adapter.

That's what's failing:

2: kd> !devstack fffffa80105c6060
  !DevObj   !DrvObj            !DevExt   ObjectName
  fffffa8010532050  \Driver\vwifimp    fffffa80105321a0  InfoMask field not found for _OBJECT_HEADER at fffffa8010532020

> fffffa80105c6060  \Driver\vwifibus   fffffa80105c3780  Cannot read info offset from nt!ObpInfoMaskToOffset

!DevNode fffffa80105c5010 :
  DeviceInst is "{5d624f94-8850-40c3-a3fa-a4fd2080baf3}\vwifimp_sap\5&21a5059b&0&03"
  ServiceName is "vwifimp"

Well, that's for sure obvious from your description, but the failure goes with sleeping:

6: kd> !poaction
PopAction: fffff803be103b40
  State..........: 3 - Set System State
  Updates........: 0 
  Action.........: Sleep
  Lightest State.: Sleeping3
  Flags..........: 80000004 OverrideApps|Critical
  Irp minor......: SetPower
  System State...: Sleeping3
  Hiber Context..: fffffa800b99d550

Allocated power irps (PopIrpList - fffff803be112960)
  IRP: fffffa8010b89c10 (set/S4), PDO: fffffa80105c0e10, CURRENT: fffffa80104be050, NOTIFY: fffffa80105bdc88

Irp worker threads (PopIrpThreadList - fffff803be111fc0)
  THREAD: fffffa8007002780

Error resolving nt!_POP_CURRENT_BROADCAST...

Please read here how you could disable power managment for your Wi-Fi adapter, and see if it helps: How to disable Power Management settings on your WiFi Adapter

Hi Andre,

thanks for helping all these users with issues. I also have a problem with my new Windows 8 Sony Viao laptop. Every time I leave my laptop for 5 mins or so, it crashes and turns itself off. When i restart i get a message: "Your PC ran into a problem...This problem caused your PC to restart..." I have sent this error to Microsoft numerous times to no avail.

update the Atheros driver:

    Image path: \SystemRoot\system32\DRIVERS\athw8x.sys
    Image name: athw8x.sys
    Timestamp:        Tue Jul 24 17:44:00 2012

http://www.station-drivers.com/page/atheros.htm

http://www.atheros.cz/

If this doesn't fix it, try the recommendation from Exotic.

Hi Andre,

thanks for helping all these users with issues. I also have a problem with my new Windows 8 Sony Viao laptop. Every time I leave my laptop for 5 mins or so, it crashes and turns itself off. When i restart i get a message: "Your PC ran into a problem...This problem caused your PC to restart..." I have sent this error to Microsoft numerous times to no avail.

update the Atheros driver:

    Image path: \SystemRoot\system32\DRIVERS\athw8x.sys
    Image name: athw8x.sys
    Timestamp:        Tue Jul 24 17:44:00 2012

http://www.station-drivers.com/page/atheros.htm

http://www.atheros.cz/

If this doesn't fix it, try the recommendation from Exotic.

I've also checked the IRP and also saw this vwifibus driver. The Virtual WiFi Bus Driver still uses the wifi driver, so I looked which network driver he uses and found this Atheros driv

thanks, i have an 32 bit operating system, x64-based processor. is this a problem??


i have another problem too. sometimes when i start my computer it don't start but "run down" in windows logo! what to do?? :(

thanks, i have an 32 bit operating system, x64-based processor. is this a problem??


i have another problem too. sometimes when i start my computer it don't start but "run down" in windows logo! what to do?? :(

What do you mean by running down? Do you mean to say your PC is continuously showing you the logo but Boot Manger does not show up, correct?

This may be caused by different issues, but if this is before you see the boot manager, it could indicate BIOS issues. Are you using UEFI or BIOS? In other words, I recommend you updating your motherboard's BIOS.

To check what firmware you are using:

1. Press WindowsKey then type 'cmd' (without quotes), click Command Prompt while holding Ctrl+Shift pressed.

2. Confirm UAC elevation.

3. At the command prompt type:

C:\Windows\system32>bcdedit /v /enum

Windows Boot Manager
--------------------
identifier              {c63458a7-5a77-4d98-acb6-da038c7d3dfb}
device                  partition=\Device\HarddiskVolume2
path                    \EFI\Microsoft\Boot\bootmgfw.efi

Check the value of the path parameter. If it contains EFI, you are using UEFI firmware.

The fact you are using 32-bit OS on a 64-bit capable CPU isn't an issue at all. That's all is more firmware or device driver related issue.

By the way, why don't you install 64-bit flavor of Windows 8? WoW64 emulation works like a charm, you wouldn't face any issue nowadays.

Andre, that was exactly my question, how did you get to find the network driver?

Andre, that was exactly my question, how did you get to find the network driver?

I've displayed all loaded modules. Here I found this wifi dr

I'm having the same problem as well!  Here are my DMP files:  http://sdrv.ms/VZj9iN

Can you please tell me what I need to update/remove/uninstall Andre.Zigler?  Thank you!

I'm having the same problem as well!  Here are my DMP files:  http://sdrv.ms/VZj9iN

Can you please tell me what I need to update/remove/uninstall Andre.Zigler?  Thank you!

You get this crash:

Bug Check 0x7A: KERNEL_DATA_INPAGE_ERROR

http://msdn.microsoft.com/en-us/library/ff559211%28v=vs.85%29.aspx

The KERNEL_DATA_INPAGE_ERROR bug check has a value of 0x0000007A. This bug check indicates that the requested page of kernel data from the paging file could not be read into memory.

WinDbg tells me you have a HDD issue:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: 0000000000000004, lock type that was held (value 1,2,3, or PTE address)
Arg2: 0000000000000200, error status (normally i/o status code)
Arg3: fffffa800f903010, current process (virtual address for lock type 3, or PTE)
Arg4: fffff88018a3e000, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0x200 - <Unable to get error code text>

BUGCHECK_STR:  0x7a_200

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

MODULE_NAME: hardware_disk

IMAGE_NAME:  hardware_disk

More specifically, you have called:

0 kd>lm

Correct?

lmo D sm

Hi Andre,

I updated the driver to the lates version. BUt the problem still consists. My PC is still suddenly crashing and then restarting in the same manner.

Here is the latest file:

https://skydrive.live.com/redir?resid=B52347235C4F51EE!182

Thanks.

How do I go about checking my SMART values in HDD?  Would you be kind enough to list the steps to get to it?  Thank you!

Hi, try something like S.M.A.R.T. Monitoring Tools

It's very strange though... Since Windows 7, Windows is capable of checking S.M.A.R.T. data from disk drives and reporting of the issues to the end-user.

Alternatively, you may download a LiveCD with HDD test/repairing tools like Hiren's Live CD and, when booted, run Victoria or MHDD tools from

Hi!

I am experiencing the same problem, many times now.

Here is the link:

https://skydrive.live.com/#cid=6E82E63E9B0508F7&id=6E82E63E9B0508F7%21127.

Please help, thanks!

Hi!

I am experiencing the same problem, many times now.

Here is the link:

https://skydrive.live.com/#cid=6E82E63E9B0508F7&id=6E82E63E9B0508F7%21127.

Please help, thanks!

You are having issues with Avast AV (AvastSvc.exe) trying to interfere with your traffic (it seems to fail with filtering traffic via Windows Filtering Platform).

Try to disable Avast anti-virus, update or completely remove it. Or just disable its network fir

^^^ Thanks so much for the prompt and informative reply!

Will try to fix it now, using the instructions you give above.

Thanks again!

I have experienced this problem several times in the last week. It usually happens when i put my computer in sleep mode.

http://sdrv.ms/WCCveQ

Those are the dump files saved on my skydrive

Please help me

So in other words, do I just download/install the S.M.A.R.T Monitoring tool?  After I run that, would it be fixed?

Any S.M.A.R.T. monitoring tool is just an informer that reads statistical data provided by hardware controller in your hard disk device via Self-Monitoring, Analysis and Reporting Technology protocol. In other words, these tool read values of S.M.A.R.T. parameters from a disk device and report them to you. Based on these values tools make a prognosis of device malfunction.

If this prognosis reports bad values, it *may* (and DOES NOT have to be true), with some level (nobody knows what) of probability, indicate that data should be backed up as soon as possible.

For example, if such a parameter as Reallocated Sectors Count (see the linked article on Wikipedia for more details about other S.M.A.R.T. parameters) has big values, it usually indicates a dramatic problem with your device: it means that device is having problems with sectors that store data. When the disk controller faces issues with reading data (the B.E.R, bit error rate is high, that is it makes multiple attempt to read data from a sector), it marks such sector as bad and copies data to another sector. Such copied sector is called as reallocated sector. So please pay attention to the value of this parameter. Basically, S.M.A.R.T. tools highlight parameters with worse values in red.

Udpate McAfee. The drivers are from May 2012:

    Image path: \SystemRoot\system32\drivers\mfewfpk.sys
    Image name: mfewfpk.sys
    Timestamp:        Wed May 30 17:35:28 2012 

I have experienced this problem several times in the last week. It usually happens when i put my computer in sleep mode.

http://sdrv.ms/WCCveQ

Those are the dump files saved on my skydrive

Please help me

you also have the hotspotshield issue:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 00000000000011c1, (reserved)
Arg3: 000000000444000f, Memory contents of the pool block
Arg4: fffffa8006329bd0, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  fffffa8006329bd0 Nonpaged pool

FREED_POOL_TAG:  aPmI

BUGCHECK_STR:  0xc2_7_aPmI

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800f3675a5a to fffff800f3480340

STACK_TEXT:  
nt!KeBugCheckEx
nt!ExFreePool
ndis!NdisFreeMemory
HssDrv
0x0
0x0
0x0
0x0
HssDrv
0x0
0x0
0x0
0x0



IMAGE_NAME:  HssDrv.sys



    Loaded symbol image file: HssDrv.sys
    Image path: \SystemRoot\system32\DRIVERS\HssDrv.sys
    Image name: HssDrv.sys
    Timestamp:        Thu Sep 02 19:47:07 2010 

The biggest problem for me is that I don't really understand how to run all of these "fixers".  I know most of the basics, but I don't want to mess anything up.  

Do you mind posting a download link for one of the SMART monitor tools that I can run?  Or is it just the one you linked above.  Should I just download the MMHD tool, run it after installation, take a screenshot, and then post it here?

Sorry for all the questions, I just really want this fixed. 

Do you mind posting a download link for one of the SMART monitor tools that I can run?  Or is it just the one you linked above.  Should I just download the MMHD tool, run it after installation, take a screenshot, and then post it here?

Sorry for all the questions, I just really want this fixed. 

Well, I'll quote myself then, all the links have already been posted:

"

Hi, try something like S.M.A.R.T. Monitoring Tools

It's very strange though... Since Windows 7, Windows is capable of checking S.M.A.R.T. data from disk drives and reporting of the issues to the end-user.

Alternatively, you may download a LiveCD with HDD test/repairing tools like Hiren's Live CD and, when booted, run Victoria or MHDD tools from there.

"

Burn the downloaded Hiren's Boot CD onto a CD, start your PC from that CD, launch the MHDD from there and do a complete scan of all hard drives found by that tool. That's all to it. Please don't hesitate to ask for more.

pc.alvin

You are using BIOS. Well, if your power line is stable and there's a little chance of power outage, I would update your BIOS.

Also, I would:

1. Turn on UEFI option if it's supported in new BIOS

2. Turn on AHCI interface for your storage controller (can be done in BIOS)

3. Re-install Windows 8 and choose 64-bit version.

Hi, I need your help too. I am facing the same problem too : "Your PC has ran into a problem and needs to restart" . My computer has restarted 4 times today. These are the dump files. Please help.....

https://skydrive.live.com/#cid=AE4DD6F25F85F8E7&id=AE4DD6F25F85F8E7%21105

UEFI is a PC firmware initiative that has been created to replace the dated BIOS I/O subsystem. Think of it as a compact operating system that resides right in the PC hardware. The UEFI system never starts in real mode (unlike BIOS systems) and then passes control right into protected mode (the OS), see more detail here.

This provides several advantages over BIOS systems including full access to extended memory, multithreaded initialization (?), etc, see Wiki article.

AHCI is a different protocol for disc controller interface (compared to IDE, developed by Western Digital) and provides for optimized performance thanks to support for SCSI multiprocessing of device commands such as NCQ (Native Command Queuing), although it's not compatible with IDE. You have to re-install Windows (or 'hack' its driver stack loaded at startup) for Windows to start with ACHI after changing from IDE without getting 0x7B STOP code on disk access.

In this video you can find out how you could enable AHCI mode without having to re-install Windows. The trick is:

1. Add AHCI-enabled drivers to Windows as it is running in IDE mode; there are two of them

HKLM\System\CurrentControlSet\Services\iaStorV
HKLM\System\CurrentControlSet\Services\msahci

You have to browse to these keys in Windows registry and set the Start value for them to 0 (zero). When set to 0x0 (0 in decimal notation), the Start parameter enables the configured service to run at boot with all the kernel drivers, see CurrentControlSet\Services Subkey Entries

2. Restart the PC and change from IDE to AHCI in BIOS.

3. Start the PC again, Windows will load AHCI driver.

I can say that wouldn't necessary work in all cases, it did NOT work in mine.

By enabling ACHI mode for your storage device, you will gain data reading performance and hence boost Windows startup sli

Hi, I need your help too. I am facing the same problem too : "Your PC has ran into a problem and needs to restart" . My computer has restarted 4 times today. These are the dump files. Please help.....

https://skydrive.live.com/#cid=AE4DD6F25F85F8E7&id=AE4DD6F25F85F8E7%21105

Hi!

I am experiencing the same problem, many times now.

Here is the link:

https://skydrive.live.com/#cid=6E82E63E9B0508F7&id=6E82E63E9B0508F7%21127.

Please help, thanks!

You are having issues with Avast AV (AvastSvc.exe) trying to interfere with your traffic (it seems to fail with filtering traffic via Windows Filtering Platform).

Try to disable Avast anti-virus, update or completely remove it. Or just disable its network fir

@felmarrowell

I am happy to hear the problem solved. I recommend you remove the software that caused such a serious problem; current Windows Defender is pretty good, it provides a very good protection in my view.

current Windows Defender is pretty good, it provides a very good protection in my

current Windows Defender is pretty good, it provides a very good protection in my

Could you please specify why did you cal

Could you please specify why did you cal

The spike 24% on supposedly 4 core CPU isn't a good thing, but it there any AV that wouldn't show almost 100% load on one of the cores when you browse system folders in Windows Explorer?

I'm using nOD32 and have NO issue browsing folders. Everything is fast.

http://www.neowin.net/news/microsoft-security-essentials-fails-av-test-certification-again

Hi all,

Having similar issues myself - repeated BSOD with IRQL_NOT_LESS_OR_EQUAL message. I've uploaded my dmp files here if someone would be kind enough to venture an opinion on what may be causing the issue

https://skydrive.live.com/redir?resid=14807CBA919B4C9B!342&authkey=!AA-KsgidySKpZX8

Many thanks!

Hi all,

Having similar issues myself - repeated BSOD with IRQL_NOT_LESS_OR_EQUAL message. I've uploaded my dmp files here if someone would be kind enough to venture an opinion on what may be causing the issue

https://skydrive.live.com/redir?resid=14807CBA919B4C9B!342&authkey=!AA-KsgidySKpZX8

Many thanks!

The BalanceManager tries to access an invalid memory page.

So, check the RAM with memtest86+.

Hi all,

Having similar issues myself - repeated BSOD with IRQL_NOT_LESS_OR_EQUAL message. I've uploaded my dmp files here if someone would be kind enough to venture an opinion on what may be causing the issue

https://skydrive.live.com/redir?resid=14807CBA919B4C9B!342&authkey=!AA-KsgidySKpZX8

Many thanks!

The BalanceManager tries to access an invalid memory page.

So, check the RAM with memtest86

I have the same problem, please help. here is my dmp files. 

after I installed microsoft office into my new acer PC, and uninstalled the pre-installed version, because the office key not accepted by the pre-installed version, then this messages cames, now I can't use it at all, really frustrated, thanks a lot for help...

https://skydrive.live.com/#cid=8A433C803D5DEFCF&id=8A433C803D5DEFCF%21132

I have the same problem, please help. here is my dmp files. 

after I installed microsoft office into my new acer PC, and uninstalled the pre-installed version, because the office key not accepted by the pre-installed version, then this messages cames, now I can't use it at all, really frustrated, thanks a lot for help...

https://skydrive.live.com/#cid=8A433C803D5DEFCF&id=8A433C803D5DEFCF%21132

Sorry I'm new to this forum. I am coming up with the same error code as everyone else in this thread and it looks like you are doing a great job helping everyone out. I would greatly appreciate it if you could help me. My computer worked fine, shut it down, booted up and BSOD. Restored the system to an old version and worked fine. Shut it down same problem. Restored again fine. The problem I got was Bugcheck c2 and the repair was unable to fix it. Also, failed error code = 0x490. In addition, I have windows 7, but I haven't seen anyone assessing this problem on other forums. I included the link to my dump file. Again, I would greatly appreciated the help.

https://skydrive.live.com/redir?resid=A09F28FDFD7AD393!107

next time ask this in the Win7 forums:

http://social.technet.microsoft.com/Forums/en-US/category/w7itpro

for you the driver btmhsf.sys seams to be the cause:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 000000000000109b, (reserved)
Arg3: 0000000004200002, Memory contents of the pool block
Arg4: fffffa8009f37610, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  fffffa8009f37610 Nonpaged pool

FREED_POOL_TAG:  Mmdi

BUGCHECK_STR:  0xc2_7_Mmdi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800033f9be9 to fffff800032cefc0

STACK_TEXT:  
nt!KeBugCheckEx
nt!ExDeferredFreePool
btmhsf
Wdf01000!FxWmiIrpHandler::m_WmiDispatchTable
0x0
0x0
0x0
0x0
0x0
0x0
0x0
0x0
Wdf01000!FxWmiIrpHandler::m_WmiDispatchTable

IMAGE_NAME:  btmhsf.sys

   
    Loaded symbol image file: btmhsf.sys
    Image path: \SystemRoot\system32\DRIVERS\btmhsf.sys
    Image name: btmhsf.sys
    Timestamp:        Tue Oct 19 16:04:48 2010 

This looks like a  BlueTooth Driver. So install the latest driver version and hope this fixes it.

hi im having the same problem, can you please check and see what the problem is.

Thanks

here is the link to my dmp files.

https://skydrive.live.com/redir?resid=F5B5F9E1A697D36B!737&authkey=!ANFFHS_kkohIdK0

hi im having the same problem, can you please check and see what the problem is.

Thanks

here is the link to my dmp files.

https://skydrive.live.com/redir?resid=F5B5F9E1A697D36B!737&authkey=!ANFFHS_kkohIdK0

Hi, please update the Intel Wireless WiFi Link Driver:

*** WARNING: Unable to verify timestamp for NETwew00.sys*** ERROR: Module load completed but symbols could not be loaded for NETwew00.sys \Driver\NETwNe64

Finally. Here are my dmp files. Can you check what is wrong? I've had a lot of Bsod's recently.

https://skydrive.live.com/redir?resid=9CFE2D2560327DE7!163

Finally. Here are my dmp files. Can you check what is wrong? I've had a lot of Bsod's recently.

https://skydrive.live.com/redir?resid=9CFE2D2560327DE7!163

Hey, Matt, you've uploaded shortcuts, these are not dump files themselves but symbolic links that point to these files and work only within the boundaries of your filesystem.

Please read this instruction and complete the first two steps, upload compressed archive files created by BSOD Collector app BSOD_Windows7_Vista_v2.64_jcgriff2_.exe to your SkyDrive.

Feel free to ask for more assistance when n

Oh Ok thanks

THe bsod file collection app works with windows 8 too right?

Oh Ok thanks

THe bsod file collection app works with windows 8 too right?

Also i need to run both right?

Yep, the tool should work fine on Windows 8. It's not really necessary to run the tool, but when you experiencing issues with packing, you could try the automated solution.

Running both tools would be a plus but the collector tool alone should do the trick.

Update MB bios, find bus type, change from ACHI, to SATA IDE. Setup will work now. Second install your sata raid drivers at setup.

Ok I think I got it this time.

https://skydrive.live.com/redir?resid=9CFE2D2560327DE7!165&authkey=!AGFd-ilkMAYxZEQ

If something is wrong sorry! I'm new to this.

Ok I think I got it this time.

https://skydrive.live.com/redir?resid=9CFE2D2560327DE7!165&authkey=!AGFd-ilkMAYxZEQ

If something is wrong sorry! I'm new to this.

Hi I just ran into another Bosd. This time it said IRQL not less or equal. Could you check to see if there is anything else wrong in my dumpfiles? Thanks

You have multiple failures associated with corrupt memory. Are you sure your memory hasn't been overclocked? Does you CPU run on its regular clocks? I will second Andre and suggest you to check your memory first by downloading a LiveCD such as Hiren CD, booting from there and checking your RAM memory.

This may be caused by an overclocked GPU memory as well, but I will really see into checking RAM at first.
You are also having problems with Atheros driver, could you please update it?

By the way, aren't you using

I haven't overclocked anything. My CPU, GPU, and RAM haven't been overclocked. I will update my Atheros drivers. What is AV?

I haven't overclocked anything. My CPU, GPU, and RAM haven't been overclocked. I will update my Atheros drivers. What is AV?

When i tried updating my atheros drivers, windows said I had the best one already but I'm pretty sure it is not compatible with windows 8 since it is dated 2010.. I'll do a RAM test later on when I have time.

Get the recent drivers from there: http://www.atheros.cz/

Download and unpack driver, point Windows to the unpacked folder and manually select the INF file from there.

If you don't know how, please ask for help, I'll do my best to explain later tomorrow; it's d@mn late here in Russia.

Yeah I think it would be best if you explained 

1. Press WindowsKey+R and type 'devmgmt.msc' (without quotes), then hit Enter.

2. In the Device Manager opened navigate to Network adapters node and expand it.

3. Under the Network adapters node find your Atheros network adapter and double-click it to open its properties dialog box.

4. In the Properties dialog box switch to Details tab.

5. On the Details tab scroll through the Property drop-down list and locate the Hardware Ids item, like in the figure below.

6. Copy the first line in the list by selecting it and pressing Ctrl+C, then paste the copied text into the Google's search bar within your browser.

For example, in the case above the copied line would be:

PCI\VEN_8086&DEV_1502&SUBSYS_047E1028&REV_04

7. Requesting the line with Google you'll get what version of the Atheros hardware you have installed.

For example, for the line above the results show that I have Intel(R) 82579LM Network Interface Card (NIC).

8. When the hardware is found, go to the http://www.atheros.cz/ web site and download the appropriate driver from there.

9. Unpack the downloaded ZIP archive and return back to the properties dialog of the Atheros NIC opened from the Device Manager.

10. In the Properties dialog box switch to the Driver tab and click Update driver.

11. In the Update Driver Software wizard's window click Browse my computer for driver software.

12. On the Browse for driver software for your computer page click Let me pick from a list of device drivers on my computer.

13. On the Select Network Adapter page click Have disk... and past the path to the folder with unpacked driver in the Copy manufacturer's files from edit box, or browse for the path with the Browse button, then click OK.

14. In the Select Network Adapter page where to you have returned select the manufacturer on the left and navigate to your particular NIC on the right then lick Next to proceed with installing the chosen driver. For example,

please help me.. my computer has too many problems.. it restarts itself too many times and doesn't open normally... please here are my files... 


p.s. i have wrote before, but the problem still continues. :(

all dumps show memory related crashes:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 00000099, A PTE or PFN is corrupt
Arg2: 00024472, page frame number
Arg3: 00000001, current page state
Arg4: 080706d2, 0

Debugging Details:
------------------


BUGCHECK_STR:  0x4E_99

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 8113109b to 810f676c

STACK_TEXT:  
88943c38 8113109b 0000004e 00000099 00024472 nt!KeBugCheckEx
88943c54 81074dd6 82ff7c78 ffffffff 0006407b nt!MiBadShareCount+0x2c
88943ca8 8107461b 83939360 00000001 00024472 nt!MiRestoreTransitionPte+0x604
88943cf0 81074450 811ec5b0 8493d940 811ec480 nt!MiRemoveLowestPriorityStandbyPage+0x1a3
88943d0c 810dd166 00000008 810dd152 88943d74 nt!MiPurgeTransitionList+0x65
88943d1c 81054552 00000008 8493d940 00000000 nt!MiFinishResume+0x14
88943d74 810bb095 00020000 550696ce 00000000 nt!ExpWorkerThread+0x111
88943db0 81170079 81054445 00020000 00000000 nt!PspSystemThreadStartup+0x4a
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+2c
8113109b cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+2c

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  0x4E_99_nt!MiBadShareCount

BUCKET_ID:  0x4E_99_nt!MiBadShareCount

i am checking RAMwith memtest86+ and there are 17 errors for the moment. i have run the test before 1 hour and it is not ending . how hours it takes and is my RAM very damaged?? can this program solve the errors or it just test?? :(

Hi Exotic Hadron! I think it has been two weeks now since you diagnosed the crashes in my PC here, and I followed your medication for it (disabling or uninstalling my Avast! anti virus, among similar others). And from the time that I disabled my Avast! anti virus, my PC has not experienced any such system crash any more, and now works seam lessly fine and normal. Thanks much, and thanks big for sharing freely your knowledge here! Thanks big again!

Hello

I'm having a similar problem to others here and would greatly appreciate any help you could give me.

The link to my dmp file: https://skydrive.live.com/redir?resid=C0BE7B2E8972E592!114&authkey=!AO0vkuQ95ZohLmc

Thanks in advance

Hello

I'm having a similar problem to others here and would greatly appreciate any help you could give me.

The link to my dmp file: https://skydrive.live.com/redir?resid=C0BE7B2E8972E592!114&authkey=!AO0vkuQ95ZohLmc

Thanks in advance

Hey Exotic, sorry I'm getting back to you so late.

When i tried updating my atheros driver, on the website the one for me said it didn't support windows 8. What do i do?

Thanks!

Hey Exotic, sorry I'm getting back to you so late.

When i tried updating my atheros driver, on the website the one for me said it didn't support windows 8. What do i do?

Thanks!

Hi, no problem. There's nothing that can be late here.

Could you please specify which one do you use? Please post a link.

Also, are you trying to install the driver using its built-in setup installer? If so, please unpack the setup distribution and install the driver without using its installer.

In either way, post a link to the driver or specify the VID and HID (the vendor ID and Hardware ID) of your NIC so that I could check the specific driver and provide more detailed guidelines.

Cheers.

I am having a similar problem with my computer where it blue screens and restarts with the lovely "Your PC run into a problem and need to restart" message.

I have the dump files here: http://sdrv.ms/12vLjIc 

Any help you can give would be appreciated.

I am having a similar problem with my computer where it blue screens and restarts with the lovely "Your PC run into a problem and need to restart" message.

I have the dump files here: http://sdrv.ms/12vLjIc 

Any help you can give would be appreciated.

Hi, try updating Cisco's driver: Cisco AM10 (valet connector) driver

Also, try temporary disabling your AVG antivirus.

I would also look into updating NVidia's driver and running a memtest86+ because you are experiencing access violation issues with the VGA d

I have the same issue.

Here are the files:

https://skydrive.live.com/?cid=ad782a806de3be97&id=AD782A806DE3BE97%21157&authkey=!AIyIYp0twEJzAfw

I am having a similar problem with my computer where it blue screens and restarts with the lovely "Your PC run into a problem and need to restart" message.

I have the dump files here: http://sdrv.ms/12vLjIc 

Any help you can give would be appreciated.

So now I have a bigger problem. I updated the cisco driver, and the nvidia driver, and disabled avg but this did not help. Next, I ran a memtest86+ which seemed to work fine until my computer randomly shut down. Now my computer will not turn on at all. The lights flash for a second but then nothing. Please help!!!!!

So now I have a bigger problem. I updated the cisco driver, and the nvidia driver, and disabled avg but this did not help. Next, I ran a memtest86+ which seemed to work fine until my computer randomly shut down. Now my computer will not turn on at all. The lights flash for a second but then nothing. Please help!!!!!

So now I have a bigger problem. I updated the cisco driver, and the nvidia driver, and disabled avg but this did not help. Next, I ran a memtest86+ which seemed to work fine until my computer randomly shut down. Now my computer will not turn on at all. The lights flash for a second but then nothing. Please help!!!!!

Just re-image the machine.  Key sections of the OS have been corrupted.  There is really no other way out of this problem.  In any case, none that I have discovered.

I can't re-image because it won't even power on now. After the memtest the computer will not do anything. The fans and lights turn on for about half a second and then shut off. Any advice?

So now I have a bigger problem. I updated the cisco driver, and the nvidia driver, and disabled avg but this did not help. Next, I ran a memtest86+ which seemed to work fine until my computer randomly shut down. Now my computer will not turn on at all. The lights flash for a second but then nothing. Please help!!!!!

Troubleshoot, repair or recovery Windows 8 with Windows 8 Installations DVD!

All of your BSODs are critical and may be cause by a boot driver, corrupt memory module, or faulty BIOS/UEFI firmware.

So now I have a bigger problem. I updated the cisco driver, and the nvidia driver, and disabled avg but this did not help. Next, I ran a memtest86+ which seemed to work fine until my computer randomly shut down. Now my computer will not turn on at all. The lights flash for a second but then nothing. Please help!!!!!

Just re-image the machine.  Key sections of the OS have been corrupted.  There is really no other way out of this problem.  In any case, none that I have discovered.

Additionally, try the following steps, I am quoting from here:

"C:

CHKDSK /R

Please also run the following command:

"

Additionally, try bootsect /nt60 /force c: to apply the boot code to the system partition.

If boot sector, boot manager, and boot record are okay, make sure your partition is active using ACTIVE command of the DISKPART that you can start from the Windows 8 setup disc's console. To start the console from the setup, boot into setup wizard and press Shift+F10 right when you are present with the welcome screen prompting to select languages and time.

Also, check this my thread: How Do I Migrate My VHD Boot x64 System Install to a New Hardware? Enabling AHCI in Windows 8 After OS Install   

There's a post that contains a step-by-step instruction on recovering  boot files for a raw VHD drive with Windows that does not contain any boot files. This also applies to physical drives where you could recover your system if its boot files have been corrupted:

1. Mark the partition with boot files as active.

2. Patch the system partition with a boot code using bootsect.

3. Add the boot manager using bcdboot.

4. Rebuild the Boot Configuration Database using this script: http://reboot.pro/12466/

I CAN'T DO ANY OF THIS BECAUSE THE COMPUTER WON'T EVEN TURN ON!

I can't re-image because it won't even power on now. After the memtest the computer will not do anything. The fans and lights turn on for about half a second and then shut off. Any advice?

I CAN'T DO ANY OF THIS BECAUSE THE COMPUTER WON'T EVEN TURN ON!

Google a troubleshooting flowchart. Personally I'd start by reseating the ram sticks.

Here is mine. Please Help!

https://skydrive.live.com/redir?resid=397301F927B5E084!151&authkey=!AKlBVZtrCL-jDFs

VID: I Can't seem to find it

HID: 

USB\VID_0CF3&PID_9271&REV_0108

I tried to install the driver through the website you gave me, atheros.cz but it said the driver didn't support windows 8.

Another thing, I've been getting other bsod's I don't think related to this driver and ram(I haven't had a chance to run memtest86+ yet). Should i post them after the driver is updated? And if I should, should i use the software you showed me in your previous post?

BSOD_Windows7_Vista_v2.64_jcgriff2_.exe

Thanks for all your help!

VID: I Can't seem to find it

HID: 

USB\VID_0CF3&PID_9271&REV_0108

I tried to install the driver through the website you gave me, atheros.cz but it said the driver didn't support windows 8.

Another thing, I've been getting other bsod's I don't think related to this driver and ram(I haven't had a chance to run memtest86+ yet). Should i post them after the driver is updated? And if I should, should i use the software you showed me in your previous post?

BSOD_Windows7_Vista_v2.64_jcgriff2_.exe

Thanks for all your help!

Hi, could you please try the following driver: Atheros AR7010 WLAN Driver 2.0.0.32 for Windows 7/Windows 8, it seems to provide compatibility with Windows 8.

Or, if you are using a 64-bit Windows 8, download this driver: Atheros AR7010 WLAN Driver 2.0.0.32 for Windows 7 x64/Windows 8 x64.

1. Unpack the downloaded 20328101_77bc0d51cde118a551e425e551427819c45c435e.cab Cabinet File (the file name and the procedure below are written for the 64-bit driver).

C:\Windows\system32\cd %userprofile%\downloads
C:\Users\%username%\Downloads>mkdir 20328101_77bc0d51cde118a551e425e551427819c45c435e
C:\Users\%username%\Downloads>expand 20328101_77bc0d51cde118a551e425e551427819c45c435e.cab .\20328101_77bc0d51cde118a551e425e551427819c45c435e -F:*

2. Now follow the procedure above and install the driver by pointing the Update Driver Software wizard to the folder where you extracted the CAB files.

I can't seem to extract the cabinet file. Can you show me how?

Sorry for all the extra help I need.

I can't seem to extract the cabinet file. Can you show me how?

Sorry for all the extra help I need.

Please provide the filename and location where you downloaded the file, and I will give you the instructions. Otherwise, the procedure in list item 1 in the post above should work fine. What doesn't work for you? What error do you get?

Just copy the commands posted in above line by line and it should work fo

Hi Andre,

Im having exactly the same problem as SonyVoioUser, with "Your PC ran into a problem. This problem caused your PC to restart."

Its frustrating because other than these random restarts Ive found Window 8 to be the best thing since Windows for Work Groups! :)

My dump files are zipped at http://sdrv.ms/YmEr88

Thank you in advance for your help.

Alexis

Wait where do I put the commands above? I'm just confused. I downloaded the file from the site you told me to.

File Name: C:\Users\Matthew\Downloads\20328101_77bc0d51cde118a551e425e551427819c45c435e.cab

I can't extract the file, Windows is not letting me do it.

Wait where do I put the commands above? I'm just confused. I downloaded the file from the site you told me to.

File Name: C:\Users\Matthew\Downloads\20328101_77bc0d51cde118a551e425e551427819c45c435e.cab

I can't extract the file, Windows is not letting me do it.

Hi, try this.

1. Press WindowsKey and type 'cmd' (without quotes), then click Command Prompt.

2. In the command prompt window started run the following sequence of commands (one by one):

C:\Windows\system32\cd %userprofile%\downloads
C:\Users\%username%\Downloads>mkdir 20328101_77bc0d51cde118a551e425e551427819c45c435e
C:\Users\%username%\Downloads>expand 20328101_77bc0d51cde118a551e425e551427819c45c435e.cab .\20328101_77bc0d51cde118a551e425e551427819c45c435e -F:*

Note:

The first command changes current directory from C:\Windows\system32, which is the default command prompt, to C:\Users\Matthew\downloads.

The second one creates a subfolder named 20328101_77bc0d51cde118a551e425e551427819c45c435e under C:\Users\Matthew\downloads

The last third command extracts the 20328101_77bc0d51cde118a551e425e551427819c45c435e.cab that resides under C:\Users\Matthew\downloads to C:\Users\Matthew\downloads\20328101_77bc0d51cde118a551e425e551427819c45c435e.

Copy the commands line by line, paste into the command prompt and press Enter after each of the pasted command to run them.

For example, to change current directory,

in the command prompt window started right-click and choose Paste to paste the copied cd %userprofile%\downloads command at the command prompt, then hit Enter. Current directory will change to C:\Users\Matthew\downloads. Do the same with other two commands, see figure below:

Hi Andre,

Im having exactly the same problem as SonyVoioUser, with "Your PC ran into a problem. This problem caused your PC to restart."

Its frustrating because other than these random restarts Ive found Window 8 to be the best thing since Windows for Work Groups! :)

My dump files are zipped at http://sdrv.ms/YmEr88

Thank you in advance for your help.

Alexis

Hi Exotic Hadron,

Thanks for your help.  I will try updating the AMD driver now.

Alexis

Hey Andre, I've only just recently purchased a brand new HP Laptop, equipped with Windows 8, yet I've received the message numerous times, and hence, my laptop has restarted several times, butt i really can't see what the problem is with such a new laptop.

Here's the link for my dumped files, a reply with any advice/recommendations would be extremely appreciated! 

https://skydrive.live.com/?cid=94e3af01efc5b048&id=94E3AF01EFC5B048%21168&authkey=!ADOxWWF9rZxaWZs

Thank you for your time.

Hey Andre, I've only just recently purchased a brand new HP Laptop, equipped with Windows 8, yet I've received the message numerous times, and hence, my laptop has restarted several times, butt i really can't see what the problem is with such a new laptop.

Here's the link for my dumped files, a reply with any advice/recommendations would be extremely appreciated! 

https://skydrive.live.com/?cid=94e3af01efc5b048&id=94E3AF01EFC5B048%21168&authkey=!ADOxWWF9rZxaWZs

Thank you for your time.

I'm hoping that someone can help. My laptop is new (got it on Thanksgiving) and recently I started getting System Service Exception errors (starts the 16th), I had been fine until tonight when I got another one.

Hopefully I did the skydrive correctly, I'm not really familiar with it, nor am I familiar with the .dmp files.

https://skydrive.live.com/redir?resid=6791660C6BA49415!110&authkey=!AGU1mOscbLkVZ-Y

Thank you.

dmp files attached... pls help.thank you 

https://skydrive.live.com/#cid=DB4CFDFA1B29D749&id=DB4CFDFA1B29D749%21105

dmp files attached... pls help.thank you 

https://skydrive.live.com/#cid=DB4CFDFA1B29D749&id=DB4CFDFA1B29D749%21105

Try this in the direct order:

1. Update ATI/AMD VGA card driver.

2. Temporary disable Avast antivirus.

3. Update Yahoo Messenger.

4. Test computer memory with memtest86+.

Hi Exotic Hadron, i would like to post my dump files into a zipped folder and post it up to get help but it will not allow me. 
What must i do ? 

Hi Ian,

Do you follow these instructions? If yes, what error message/warning do you get? What do you mean by saying it does not allow you to post files?

Cheers,

EH

Thank you for replyin.

I am not even at the stage were I am able to post the files to my SkyDrive. I try to send the dump files to a compressed(zipped) folder but I am told  in a pop-up box that there is no file or read permission.

I am using winrar and that will not even send them to a compressed file.

Thanks,

Ian.

I'm hoping that someone can help. My laptop is new (got it on Thanksgiving) and recently I started getting System Service Exception errors (starts the 16th), I had been fine until tonight when I got another one.

Hopefully I did the skydrive correctly, I'm not really familiar with it, nor am I familiar with the .dmp files.

https://skydrive.live.com/redir?resid=6791660C6BA49415!110&authkey=!AGU1mOscbLkVZ-Y

Thank you.

Hi,

You've uploaded a soft link, the shortcut to the dump file. Shoftcuts aren't dump files themselves but symbolic links that point to these files and work only within the boundaries of your filesystem.

Please read this instruction and complete the first two steps, upload compressed archive files created by BSOD Collector app BSOD_Windows7_Vista_v2.64_jcgriff2_.exe to your SkyDrive.

Feel free to ask for more assistance when needed.

Any help in how to compress these files? 

Hi Ian,

Please read this instruction and complete the first two steps, upload compressed archive files created by BSOD Collector app BSOD_Windows7_Vista_v2.64_jcgriff2_.exe to your SkyDrive.

The tool should automatically prepare a compressed archive with dump files and additional informational data for you.

Feel free to ask for more assistance when n

Any help in how to compress these files? 

BTW, if you're using WinRAR, enable it to open shared files:

and make sure you are saving the target archive to a non-protected folder such as My documents.

Her eis the skydrive link

https://skydrive.live.com/#cid=79C74446C48D74EA&id=79C74446C48D74EA%21187

Hey Andre, or whoever can help me...
I recently got a new Toshiba computer, it's not even a month old, and I've already had this problem a few times, but I can't figure out what's causing it :( Ran the memory test, everything is fine, also I read everything here and did not find anything that could help me. Here are the .dmp files https://skydrive.live.com/redir?resid=52AF00AB80D4B511!178&authkey=!ABYlloYud6E0LJs
I really really hope someone can help me.

Thank you!

Hi

Thank you for all the help that you have been dispensing to everyone. Could you take a look at these dump files too. There is been a recent issue and this restart is occurring more frequently now.

http://sdrv.ms/ZthXFa

Thanks in advance

Regards

Hey Andre, or whoever can help me...
I recently got a new Toshiba computer, it's not even a month old, and I've already had this problem a few times, but I can't figure out what's causing it :( Ran the memory test, everything is fine, also I read everything here and did not find anything that could help me. Here are the .dmp files https://skydrive.live.com/redir?resid=52AF00AB80D4B511!178&authkey=!ABYlloYud6E0LJs
I really really hope someone can help me.

Thank you!

update the AMD GPU driver and install this Update

http://support.microsoft.com/kb/2818604

http://sites.amd.com/us/game/downloads/Pages/downloads.aspx

Hi

Thank you for all the help that you have been dispensing to everyone. Could you take a look at these dump files too. There is been a recent issue and this restart is occurring more frequently now.

Update Avast to fix the crashes.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000000, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800c37d2168
GetUlongFromAddress: unable to read from fffff800c37d21f8
 0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
+0
00000000`00000000 ??              ???

PROCESS_NAME:  AvastSvc.exe

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

TAG_NOT_DEFINED_c000000f:  FFFFF88001495FB0

TRAP_FRAME:  fffff880014957b0 -- (.trap 0xfffff880014957b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8800415c2f0 rbx=0000000000000000 rcx=fffffa80044af0b0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000000 rsp=fffff88001495948 rbp=fffffa80096002b0
 r8=0000000000000001  r9=0000000000001000 r10=fffff78000000320
r11=fffff88001495a50 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
00000000`00000000 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800c34f6369 to fffff800c34f7040

FAILED_INSTRUCTION_ADDRESS: 
+0
00000000`00000000 ??              ???

STACK_TEXT:  
fffff880`01495948 fffff880`041230eb : 00000000`00000000 fffff800`c352220b fffffa80`0572c5e0 ffffffff`fffe7960 : 0x0
fffff880`01495950 00000000`00000000 : fffff800`c352220b fffffa80`0572c5e0 ffffffff`fffe7960 00000091`f7f83207 : aswnet+0x310eb



IMAGE_NAME:  aswnet.sys


     
    Loaded symbol image file: aswnet.sys
    Image path: \SystemRoot\System32\Drivers\aswnet.sys
    Image name: aswnet.sys
    Timestamp:        Sun Nov 04 11:12:57 2012

Hello Andre, I was getting this problem and then had it solved, but recently it has come back.

Here are the dump files in my skydrive. I was getting some trouble getting them into this format with winrar so I hope this is it.

https://skydrive.live.com/#cid=79C74446C48D74EA&id=79C74446C48D74EA%21111

Ian, I would try updating your VGA drivers, the bugcheck code of 0x3B may indicate a fault caused by a video driver.

Download one of these:

• AMD Catalyst Display Driver for Windows Vista/Windows 7/Windows 8 32-bit 

• AMD Catalyst Display Driver for Windows Vista/Windows 7/Windows 8 64-bit

Thankyou for replying Exotic Hadron, I have downloaded the one which works for my computer, what is it actually doing? Sorry for this question,I just have no clue what that program does. I have updated all my drives via device manager.

Thanks.

Hi Andre,

Im having exactly the same problem as SonyVoioUser, with "Your PC ran into a problem. This problem caused your PC to restart."

Its frustrating because other than these random restarts Ive found Window 8 to be the best thing since Windows for Work Groups! :)

My dump files are zipped at http://sdrv.ms/YmEr88

Thank you in advance for your help.

Alexis

Please update ATI/AMD VGA ca

Hello Andre or Exotic Hadron,

I recently purchased a new HP laptop, with Windows 8. I have received the message several times and laptop has restarted several times.

Here's the link for my dumped files, a reply with any advice/recommendations would be extremely appreciated! 

https://skydrive.live.com/redir?resid=C30D740657F4B8C9!110&authkey=!AJ_9owEjyPsdkbc

Thanks for your help.

I recently purchased a new HP laptop, with Windows 8. I have received the message several times and laptop has restarted several times.

Update the driver for your Ralink RT3290 802.11 bgn WIFI/WLAN adapter.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa80045e0880, Physical Device Object of the stack
Arg3: fffff880009c18e0, nt!TRIAGE_9F_POWER on Win7, otherwise the Functional Device Object of the stack
Arg4: fffffa8008405c60, The blocked IRP


> fffffa80075a5050  \Driver\netr28x    fffffa80075a51a0  InfoMask field not found for _OBJECT_HEADER at fffffa80075a5020

  fffffa80045e0880  \Driver\pci        fffffa80045e09d0  Cannot read info offset from nt!ObpInfoMaskToOffset

!DevNode fffffa80040052f0 :
  DeviceInst is "PCI\VEN_1814&DEV_3290&SUBSYS_18EC103C&REV_00\4&2a13ee23&0&00E0"
  ServiceName is "netr28x"
    Image path: \SystemRoot\system32\DRIVERS\netr28x.sys
    Image name: netr28x.sys
    Timestamp:        Wed Aug 08 16:27:28 2012 

Thank you Andre. I have re-installed the mentioned driver. Hopefully this should resolve the issue.

Thanks again.

update the driver to a newer version:

http://www.station-drivers.com/page/ralink.htm

Hi, I'm having issues with my pc and am finding it difficult to complete any task before a big blue screen interrupts me and restarts my pc, if there is anything you can do to help me I would very much appreciate it

below is the link to my dump files if this helps

http://sdrv.ms/14LIROr

Hello there,

I have been running into the same problem and would appreciate your advice. Here are my dump files:

https://skydrive.live.com/redir.aspx?cid=3bb3ce1939599cca&page=self&resid=3BB3CE1939599CCA!705&parid=3BB3CE1939599CCA!105&authkey=!&Bpub=SDX.SkyDrive&Bsrc=Share

Thank you very much!

Hello there,

I have been running into the same problem and would appreciate your advice. Here are my dump files:

https://skydrive.live.com/redir.aspx?cid=3bb3ce1939599cca&page=self&resid=3BB3CE1939599CCA!705&parid=3BB3CE1939599CCA!105&authkey=!&Bpub=SDX.SkyDrive&Bsrc=Share

Thank you very much!

My apologies, my first time using this tool.
https://skydrive.live.com/redir?resid=3BB3CE1939599CCA!705&authkey=!AAjfcfqEd5yYJmM
I hope this one works, and thank you very much again.

Albert

Hi Albert,

Please update/reinstall your Network Interface Card driver for Atheros:

0: kd> !irp fffffa80062a4bd0
Irp is active with 5 stacks 3 is current (= 0xfffffa80062a4d30)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    
			Args: 00000000 00000000 00000000 00000000
 [  0, 0]   0  0 00000000 00000000 00000000-00000000    
			Args: 00000000 00000000 00000000 00000000
>[ 16, 2]   0  0 fffffa80049a7050 00000000 00000000-00000000    
	      Unable to load image \SystemRoot\system32\DRIVERS\athw8x.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athw8x.sys
*** ERROR: Module load completed but symbols could not be loaded for athw8x.sys
 \Driver\athr
0: kd> !devstack fffffa8003e8b880
  !DevObj   !DrvObj            !DevExt   ObjectName
  fffffa8004b5cc70  \Driver\vwifibus   fffffa8004a917c0  InfoMask field not found for _OBJECT_HEADER at fffffa8004b5cc40
  fffffa8004b87050  \Driver\athr       fffffa8004b871a0  InfoMask field not found for _OBJECT_HEADER at fffffa8004b87020
  fffffa8003e8d7a0  \Driver\ACPI       fffffa8003261530  InfoMask field not found for _OBJECT_HEADER at fffffa8003e8d770
> fffffa8003e8b880  \Driver\pci        fffffa8003e8b9d0  Cannot read info offset from nt!ObpInfoMaskToOffset
!DevNode fffffa8003e8aac0 :
  DeviceInst is "PCI\VEN_168C&DEV_0032&SUBSYS_E044105B&REV_01\4&6300427&0&0030"
  ServiceName is "athr"
0: kd> lmvm athw8x
start             end                 module name
fffff880`06a1d000 fffff880`06da0000   athw8x   T (no symbols)           
    Loaded symbol image file: athw8x.sys
    Image path: \SystemRoot\system32\DRIVERS\athw8x.sys
    Image name: athw8x.sys
    Timestamp:        Wed Sep 19 11:15:18 2012 (50597106)
    CheckSum:         00383C8E
    ImageSize:        00383000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> !poaction
PopAction: fffff801f7494d00
  State..........: 3 - Set System State
  Updates........: 0 
  Action.........: Sleep
  Lightest State.: Hibernate
  Flags..........: 8000000c OverrideApps|Critical
  Irp minor......: SetPower
  System State...: Hibernate
  Hiber Context..: fffffa8006098e60
Allocated power irps (PopIrpList - fffff801f74a39c0)
  IRP: fffffa800327e5b0
Irp worker threads (PopIrpThreadList - fffff801f74a3010)
  THREAD: fffffa800320c900
Error resolving nt!_POP_CURRENT_BROADCAST...

You can download drivers from: http://www.atheros.cz

You need a driver for Atheros AR5B125 http://www.atheros.cz/atheros-wireless-drivers.php

Download Windows 8 driver for Atheros AR5B125 

• Windows 8 x86, 32-bit driver
• Windows 8 x86_64 (amd64), 64-bit driver

Details

Your system is failing to go to sleep (the S3 power state). If you cannot update your network card drivers, do the following:

1. Press WindowsKey+R and type 'devmgmt.msc' (without quotes) then press Enter.

2. Navigate to the Network adapters node and double-click your Atheros NIC.

3. In the properties window navigate to the Power Management tab and temporary set all the check boxes off.

Please feel free to ask for more assistance.

EH

P.S.: These Atheros is a complete nightmare. In my experience they are causing like 90 percent of system failures on Windows 8. I think MSFT should think of punishing Atheros for providing faulty driver software because this is going to be serious now. People blame Windows and Microsoft when the issue is the driver

Hi Andre,

Me too. I'm facing this same Windows 8 startup loop nightmare on my Maingear Superstock Shift desktop PC. That update did successfully complete on my Dell desktop XPS All-in-One.  

I work on this every day, scanning the Internet for clues. HOWEVER, one of the biggest obstacles I face while trying to find useful advice online is context. Many experts give instructions that could only be followed if my PC was actually running.

But, I feel certain that the Windows Critical Update on May 8, 2013 at 3:13 PM EST, was what triggered the problem on my PC. When that Update showed onscreen that it was 30 percent loaded, my system started going into this same endless restart loop.

I can't get into safe mode and nothing else has helped so far. System Restore only shows me the single restore point from immediately before that Critical update, so that when System Restore says all of my files were successfully loaded, my PC immediately starts trying to perform that same Critical Update that crashes at 30 percent.

I'm not very tech savvy, so I don't know how to give you better input than this. Can you please, please help me?

Thank you so much for your consideration.

I can't get into safe mode

This screen makes me want to get the old hated BSODs back, which gave you at least an initial hint what was going on.

My laptop seems to restart that way always, if I have an active UMTS connection during hibernating and wake up after (only with Windows 8, not with Windows 7).

BTW wouldn't it be time to split up this thread to reduce the extreme loading times?

Best greetings from Germany
Olaf

Hi Andre,

Me too. I'm facing this same Windows 8 startup loop nightmare on my Maingear Superstock Shift desktop PC. That update did successfully complete on my Dell desktop XPS All-in-One.  

I work on this every day, scanning the Internet for clues. HOWEVER, one of the biggest obstacles I face while trying to find useful advice online is context. Many experts give instructions that could only be followed if my PC was actually running.

But, I feel certain that the Windows Critical Update on May 8, 2013 at 3:13 PM EST, was what triggered the problem on my PC. When that Update showed onscreen that it was 30 percent loaded, my system started going into this same endless restart loop.

I can't get into safe mode and nothing else has helped so far. System Restore only shows me the single restore point from immediately before that Critical update, so that when System Restore says all of my files were successfully loaded, my PC immediately starts trying to perform that same Critical Update that crashes at 30 percent.

I'm not very tech savvy, so I don't know how to give you better input than this. Can you please, please help me?

Thank you so much for your consideration.

Try disabling network interface card in BIOS, then restart the PC and start it with malware protection turned off by pressing SHIFT+F8 during the boot time.

When SHIFT+F8 is not working for you, boot your PC from a Windows 8 setup disc (you can just copy setup files to a USB stick and boot from there) and follow the procedure in this KB2809468 article: How to easily enter safe mode in windows 8? (One-click series)

This screen makes me want to get the old hated BSODs back, which gave you at least an initial hint what was going on.

Are you implying the new "frowny face" diagnostic is not sufficiently detailed? <eg>

C.f.

http://blogs.msdn.com/b/b8/archive/2011/09/20/reengineering-the-windows-boot-experience.aspx

Can you boot to a cmd window?   Presumably then you could use Event viewer?

Unfortunately there are a lot of things that we can't do then which seem natural.  I don't know why the Win/PE is so limited.   I understand why it is limited by time but why functionality?  E.g. we can't even use standalone programs which are installed in the OS partition?

 
HTH

 
Robert
---

i have been running into "Your PC run into a problem and need to restart" quite often for the past week and cant work out what is causing the issue below i have uploaded the last dump file after the restart thanks for your help in advance.

https://docs.google.com/file/d/0Bx0fRBSYFJkGWEp3ODhPck5IMk0/edit?usp=sharing

https://docs.google.com/file/d/0Bx0fRBSYFJkGWEp3ODhPck5IMk0/edit?usp=sharing

[opening .dmp file in windbg shows

BugCheck D1, {b0, 2, 0, fffff88001770d3d}]

http://blogs.msdn.com/b/ndis/archive/2006/11/04/what-causes-a-bug-check-0xd1-irql-not-less-or-equal.aspx

 (Microsoft search for
    bugcheck d1
)

<quote>

This bugcheck can only be fixed by the engineer that developed the driver.  You should check with the manufacturer to see if there is an updated driver to download.

</quote>

So, your only problem now is knowing what is "the driver".   ; }

Try some of the hints that have been left by some of the previous posts?...

Otherwise, first clue would be that 4th parameter which looks like an address

http://msdn.microsoft.com/en-us/library/windows/hardware/ff560244(v=vs.85).aspx

(BING search for
    bugcheck d1  site:msdn.microsoft.com
)

<quote>

</quote>

Good guess!

The analyze command suggests NETIO.

lm command shows that is

fffff880`01737000 fffff880`017a6000   NETIO    T (no symbols)

Compare:             fffff88001770d3d      (it fits between both addresses, beginning and end)

So, that looks consistent with that detail.  

Who owns  NETIO and what else is known about it from the dump?

I think either Andre or Exotic Hadron have hinted that is possible in windbg.

However, on your own system, given this clue, you could do that yourself with more conventional end-user techniques..

PS F:\Windows\System32\Drivers> get-item netio.sys | fl *

So, that shows that the module issuing the bugcheck is probably not the problem module.

Does the analyze report give any more clues?...

Maybe.   Looks like it should from Andre's examples.   But I'm on W7 so I think I may have to wait until I get back to W8.   ; )

HTH

 
Robert
---

update the driver epfwwfpr.sys:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000000000b0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88001770d3d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff802dd56a168
GetUlongFromAddress: unable to read from fffff802dd56a1f8
 00000000000000b0 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!StreamCalloutProcessingLoop+ad
fffff880`01770d3d 483981b0000000  cmp     qword ptr [rcx+0B0h],rax

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  firefox.exe

TRAP_FRAME:  fffff8800e20c340 -- (.trap 0xfffff8800e20c340)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000003 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001770d3d rsp=fffff8800e20c4d0 rbp=fffffa800a46b5f0
 r8=0000000000000000  r9=0000000000000000 r10=fffffffffffffdca
r11=000000000000024f r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!StreamCalloutProcessingLoop+0xad:
fffff880`01770d3d 483981b0000000  cmp     qword ptr [rcx+0B0h],rax ds:00000000`000000b0=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff802dd28e369 to fffff802dd28f040

STACK_TEXT:  
nt!KeBugCheckEx
nt!KiBugCheckDispatch
nt!KiPageFault
NETIO!StreamCalloutProcessingLoop
NETIO!StreamProcessCallout
NETIO! ?? ::FNODOBFM::`string'
NETIO!ArbitrateAndEnforce
NETIO!KfdClassify
NETIO!StreamClassify
NETIO!StreamCommonInspect
NETIO!WfpStreamInspectSend
tcpip!TcpEnqueueTcbSend
tcpip!TcpTlConnectionSendCalloutRoutine
nt!KeExpandKernelStackAndCalloutInternal
nt!KeExpandKernelStackAndCalloutEx
tcpip!TcpTlConnectionSend
afd!AfdFastConnectionSend
afd!AfdFastIoDeviceControl
nt!IopXxxControlFile
nt!NtDeviceIoControlFile
nt!KiSystemServiceCopyEnd
0x0
fffff880`0e20c558  fffff880`0177476f NETIO!StreamProcessCallout+0x31b
fffff880`0e20c560  fffff880`0e20cce0
fffff880`0e20c5c0  fffffa80`06150014
fffff880`0e20c5c8  fffff880`091ebf78Unable to load image \SystemRoot\system32\DRIVERS\epfwwfpr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for epfwwfpr.sys
*** ERROR: Module load completed but symbols could not be loaded for epfwwfpr.sys
 epfwwfpr+0x18f78
fffff880`0e20c5d0  00000000`00000000
fffff880`0e20c5d8  fffff880`0e20cdf0
fffff880`0e20c5e0  fffff880`0e20ce20
fffff880`0e20c5e8  fffffa80`089bf960
fffff880`0e20c5f0  fffffa80`0a6f0710
        
    Loaded symbol image file: epfwwfpr.sys
    Image path: \SystemRoot\system32\DRIVERS\epfwwfpr.sys
    Image name: epfwwfpr.sys
    Timestamp:        Tue Jun 28 09:30:09 2011

update the driver epfwwfpr.sys:

"Windows Filtering Platform"?   What's that?   FWIW I don't even have it--anywhere.   Maybe he doesn't need it too?   (Then disabling it would probably change the symptom.)

http://msdn.microsoft.com/en-us/windows/hardware/gg463267.aspx

Sounds like this could be another victim of an as yet unknown misuser.

update the driver epfwwfpr.sys:

"Windows Filtering Platform"?   What's that?   FWIW I don't even have it--anywhere.   Maybe he doesn't need it too?   (Then disabling it would probably change the symptom.)

same thing happened with windows 7 but MS released a hotfix for it but so far can not find one for windows 8.

In that case check your WinSxS to see if there is an LDR version of it.   Perhaps your Hotfix will be there?

Coincidentally I have been experimenting with PowerShell recently in this area:

PS C:\Windows\WinSxS> dir *xpspr* | foreach-object {dir $_\xpsprint.dll} | sort-object LastWriteTime | select -Property LastWriteTime, @{Name="FileVersion";Expression={$_.VersionInfo.FileVersion}}  | fl *

So, that was with xpsprint.dll.   Modify it how ever you need to to find your epfwwfpr  modules.   Note that the first stage of the pipeline is just an optimizer so we don't have to do a recursion all the way down to the file level for the whole WinSxS archive.

 
Good luck

 
Robert
---

update the driver epfwwfpr.sys:

"Windows Filtering Platform"?   What's that?   FWIW I don't even have it--anywhere.   Maybe he doesn't need it too?   (Then disabling it would probably change the symptom.)

http://msdn.microsoft.com/en-us/windows/hardware/gg463267.aspx

Sounds like this could be another victim of an as yet unknown misuser.

WFP, or Windows Filtering Platform is a set of filters for network stack and shims that choose what filters a necessary to accomplish a specific task, which is a replacement for the Transport Driver Interface (TDI)/Network Driver Interface Specification (NDIS), and Winsock Layered Service Providers (LSP).

What you see is a ESET's implementation of the WFP driver used in NOD32's firewall.

Hi, any chance of some help too please? Been getting this for a few weeks on new XPS. Dumps are on Skydrive:

https://skydrive.live.com/redir?resid=3BEFB3671475121E!144&authkey=!AO9SdGA1gThKC18

Thanks,

Dan

Hi, any chance of some help too please? Been getting this for a few weeks on new XPS. Dumps are on Skydrive:

https://skydrive.live.com/redir?resid=3BEFB3671475121E!144&authkey=!AO9SdGA1gThKC18

Thanks,

Dan

hey andre i too have a problem with my laptop ,plz do bug analysis and do help me

https://skydrive.live.com/#cid=2D0FC980ABC96009&id=2D0FC980ABC96009!105-----my link

hey andre& ian  i too have a problem with my laptop ,plz do bug analysis and do help me

https://skydrive.live.com/#cid=2D0FC980ABC96009&id=2D0FC980ABC96009!105-----my link

Hi,

Can you help me out here please? Im getting the same error, which is bugging me every 10 minutes (many restarts....    ;(  ), so this is a quick post here

mediafire(dot)com/download/tb3q834z8v8tj4f/062713-11093-01.dmp

Thanks in advance, gtg in case it gives up on me now...

Hi,

Can you help me out here please? Im getting the same error, which is bugging me every 10 minutes (many restarts....    ;(  ), so this is a quick post here

your registry is damaged:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

REGISTRY_ERROR (51)
Something has gone badly wrong with the registry.  If a kernel debugger
is available, get a stack trace. It can also indicate that the registry got
an I/O error while trying to read one of its files, so it can be caused by
hardware problems or filesystem corruption.
It may occur due to a failure in a refresh operation, which is used only
in by the security system, and then only when resource limits are encountered.
Arguments:
Arg1: 0000000000000001, (reserved)
Arg2: fffff8a000d19010, (reserved)
Arg3: 00000000d166f74b, depends on where Windows bugchecked, may be pointer to hive
Arg4: 00000000000001c0, depends on where Windows bugchecked, may be return code of
	HvCheckHive if the hive is corrupt.

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x51

PROCESS_NAME:  mcsync.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff802d7a4a9dc to fffff802d74c9440

STACK_TEXT:  
nt!KeBugCheckEx
nt! ?? ::NNGAKEGL::`string'
nt!HvFreeCell
nt!CmpFreeValueData
nt!CmpFreeKeyByCell
nt!CmDeleteKey
nt!NtDeleteKey
nt!KiSystemServiceCopyEnd
0x0



STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::NNGAKEGL::`string'+1249c
fffff802`d7a4a9dc cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::NNGAKEGL::`string'+1249c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5165e551

BUCKET_ID_FUNC_OFFSET:  1249c

FAILURE_BUCKET_ID:  0x51_nt!_??_::NNGAKEGL::_string_

BUCKET_ID:  0x51_nt!_??_::NNGAKEGL::_string_

Followup: MachineOwner
---------

http://msdn.microsoft.com/en-us/library/ff559026%28v=vs.85%29.aspx

use a LiveCD (linux, WinPE) to backup all data if the PC doesn't start any longer and reinstall Windows.

If you can boot windows, try the Refresh:

http://blogs.msdn.com/b/b8/archive/2012/01/04/refresh-and-reset-your-pc.aspx

Please help me! kernel mode exception cant handled here is the dmp files

https://skydrive.live.com/#cid=A5E572BF5C5325A5&id=A5E572BF5C5325A5%21103

Please help me! kernel mode exception cant handled here is the dmp files

https://skydrive.live.com/#cid=A5E572BF5C5325A5&id=A5E572BF5C5325A5%21103

update the Realtek Audio HD driver:

*** WARNING: Unable to verify timestamp for RTKVHDA.sys
*** ERROR: Module load completed but symbols could not be loaded for RTKVHDA.sys
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8ff79899, 9f4ff780, 0}

Probably caused by : RTKVHDA.sys ( RTKVHDA+152899 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8ff79899, The address that the exception occurred at
Arg3: 9f4ff780, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

FAULTING_IP: 
RTKVHDA+152899
8ff79899 3b592c          cmp     ebx,dword ptr [ecx+2Ch]

TRAP_FRAME:  9f4ff780 -- (.trap 0xffffffff9f4ff780)
ErrCode = 00000000
eax=85248000 ebx=852c4008 ecx=00000000 edx=8116882d esi=00000000 edi=0000001f
eip=8ff79899 esp=9f4ff7f4 ebp=9f4ff9a8 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010206
RTKVHDA+0x152899:
8ff79899 3b592c          cmp     ebx,dword ptr [ecx+2Ch] ds:0023:0000002c=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9431.0 (debuggers(dbg).130615-1214) x86fre

DEVICE_OBJECT: 870b7030

LAST_CONTROL_TRANSFER:  from 8ff80662 to 8ff79899

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
RTKVHDA
RTKVHDA
portcls!PcDispatchProperty
portcls!PropertyItemPropertyHandler
ks!KspPropertyHandler
ks!KsPropertyHandler
portcls!PcHandlePropertyWithTable
portcls!CPortFilterWaveRT::DeviceIoControl
portcls!DispatchDeviceIoControl
ks!KsDispatchIrp
portcls!KsoDispatchIrp
portcls!PcDispatchIrp
RTKVHDA
nt!IofCallDriver
nt!IopSynchronousServiceTail
nt!IopXxxControlFile
nt!NtDeviceIoControlFile
nt!KiFastCallEntry
0x0



FOLLOWUP_IP: 
RTKVHDA+152899
8ff79899 3b592c          cmp     ebx,dword ptr [ecx+2Ch]


IMAGE_NAME:  RTKVHDA.sys


FAILURE_ID_HASH_STRING:  km:av_rtkvhda+152899

       
    Loaded symbol image file: RTKVHDA.sys
    Image path: \SystemRoot\system32\drivers\RTKVHDA.sys
    Image name: RTKVHDA.sys
    Timestamp:        Fri Mar 29 14:42:02 2013 

Its says that it is already up to date. what should i do

get the latest driver from the Realtek homepage:

http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=24&PFid=24&Level=4&Conn=3&DownTypeID=3&GetDown=false

Its says that it is already up to date. what should i do

Doesn't look like an essential device.  Why not just disable that one?  Then presumably its suspect driver would not be loaded and therefore could not cause a crash.

BTW I tried all day yesterday to post this idea from W8.   Now on W7 maybe I'll have more luck.   ; ]

FWIW I think it would be great if this thread was locked and users started their own incident reports with their own details.  I (facetiously) made the suggestion that if they need a way to attract Andre's dump shooting service, there should be a new forum created to ensure that happens.  Then monster threads like this would be unnecessary for that reason too.  <eg>

---

Could you check mine too? I am running Win8 (NOT pro).

https://skydrive.live.com/redir?resid=85365678D0038AA6!107&authkey=!AMUAs3o1PzlY3xc

Could you check mine too? I am running Win8 (NOT pro).

https://skydrive.live.com/redir?resid=85365678D0038AA6!107&authkey=!AMUAs3o1PzlY3xc

update the Ralink Wifi driver:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa8010376060, Physical Device Object of the stack
Arg3: fffff88002a5b7f0, nt!TRIAGE_9F_POWER on Win7 and higher, otherwise the Functional Device Object of the stack
Arg4: fffffa8018d6ec10, The blocked IRP

Debugging Details:
------------------


DRVPOWERSTATE_SUBCODE:  3

IMAGE_NAME:  usbhub.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  510cbf5a

MODULE_NAME: usbhub

FAULTING_MODULE: fffff88004162000 usbhub

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9431.0 (debuggers(dbg).130615-1214) amd64fre

DPC_STACK_BASE:  FFFFF88002A62FB0

STACK_TEXT:  
fffff880`02a5b7b8 fffff803`c4e083a2 : 00000000`0000009f 00000000`00000003 fffffa80`10376060 fffff880`02a5b7f0 : nt!KeBugCheckEx
fffff880`02a5b7c0 fffff803`c4e083d5 : fffffa80`0f8189e0 fffff803`c4c22e3b 00000000`00000001 fffff803`c4d96084 : nt!PopIrpWatchdogBugcheck+0xe2
fffff880`02a5b820 fffff803`c4cf51ea : fffffa80`0f818a18 fffff880`02a5b939 00000000`00000001 fffffa80`0cdaf040 : nt!PopIrpWatchdog+0x32
fffff880`02a5b870 fffff803`c4cf3655 : 00000000`00000000 fffff803`c4cf4cff 00000000`00140001 fffff803`c4f6d6e0 : nt!KiProcessExpiredTimerList+0x22a
fffff880`02a5b9a0 fffff803`c4cf5668 : fffff880`015ea180 fffff803`c4f6cf80 00000000`00000002 00000000`00f98813 : nt!KiExpireTimerTable+0xa9
fffff880`02a5ba40 fffff803`c4cf4a06 : fffffa80`00000000 00001f80`005e0080 00000000`00000000 00000000`00000002 : nt!KiTimerExpiration+0xc8
fffff880`02a5baf0 fffff803`c4cf59ba : fffff880`015ea180 fffff880`015ea180 00000000`00000000 fffff880`015f5f40 : nt!KiRetireDpcList+0x1f6
fffff880`02a5bc60 00000000`00000000 : fffff880`02a5c000 fffff880`02a56000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a


BUCKET_ID:  0x9F_3_POWER_DOWN_netr28ux_IMAGE_usbhub.sys

FAILURE_ID_HASH_STRING:  km:0x9f_3_power_down_netr28ux_image_usbhub.sys


  !DevObj           !DrvObj            !DevExt           ObjectName
  fffffa80103ac0d0  \Driver\vwifibus   fffffa80103b7700  InfoMask field not found for _OBJECT_HEADER at fffffa80103ac0a0

  fffffa80103a9050 Unable to load image \SystemRoot\system32\DRIVERS\netr28ux.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for netr28ux.sys
*** ERROR: Module load completed but symbols could not be loaded for netr28ux.sys


!DevNode fffffa80103cfc20 :
  DeviceInst is "USB\VID_0846&PID_9012\1.0"
  ServiceName is "netr28ux"


       
    Loaded symbol image file: netr28ux.sys
    Image path: \SystemRoot\system32\DRIVERS\netr28ux.sys
    Image name: netr28ux.sys
    Timestamp:        Fri Sep 28 12:54:34 2012

http://www.station-drivers.com/page/ralink.htm

I am facing the same issue.

Dump files attached: http://sdrv.ms/12oMMuo

Thank you!

The InternalDoPaint Windows API failed when Internet Explorer invoked it to redraw its window.

1: kd> !thread
GetPointerFromAddress: unable to read from fffff80362bde000
THREAD fffffa8006e237c0  Cid 0228.02a8  Teb: 000000007f4e1000 Win32Thread: fffff901043119c0 RUNNING on processor 1
Not impersonating
GetUlongFromAddress: unable to read from fffff80362afdcf0
Owning Process            fffffa8004851940       Image:         iexplore.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      20847227     
Context Switch Count      37227          IdealProcessor: 0             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x000000006ad3313c
Stack Init fffff880097e2c90 Current fffff880097e2610
Base fffff880097e3000 Limit fffff880097dd000 Call 0
Priority 12 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`097e1508 fffff803`628df769 : 00000000`0000003b 00000000`c0000005 fffff960`0021fdd3 fffff880`097e1e00 : nt!KeBugCheckEx
fffff880`097e1510 fffff803`628df0bc : fffff880`097e25c8 fffff880`097e1e00 fffff960`0013fcc4 fffff880`097e25c8 : nt!KiBugCheckDispatch+0x69
fffff880`097e1650 fffff803`6294c47d : 00000000`00000000 fffff880`097e2a00 fffff880`097e17c0 fffff880`097dd000 : nt!KiSystemServiceHandler+0x7c
fffff880`097e1690 fffff803`62974364 : 00000000`00000000 fffff880`097e17c0 00000000`00025ac4 fffff880`097dd000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`097e16c0 fffff803`6294e1d6 : fffff880`097e25c8 fffff880`097e2300 fffff880`097e25c8 fffff901`043119c0 : nt!RtlDispatchException+0x458
fffff880`097e1dd0 fffff803`628df842 : fffff880`097e2670 00000000`0000002f 00000000`00000000 fffff803`62b0c000 : nt!KiDispatchException+0x455
fffff880`097e2490 fffff803`628ddfba : 00000000`00000001 fffff901`009b6de0 00520054`002f0000 fffff880`097e2670 : nt!KiExceptionDispatch+0xc2
fffff880`097e2670 fffff960`0021fdd3 : fffff901`008290b0 00000000`00000000 fffffa80`06e23900 fffff880`009c0180 : nt!KiPageFault+0x23a (TrapFrame @ fffff880`097e2670)
fffff880`097e2800 fffff960`0021fe02 : fffff901`00800830 fffff901`043119c0 fffff880`097e28f0 fffff803`6292261f : win32k!xxxInternalDoPaint+0x63
fffff880`097e2850 fffff960`0021fb6c : fffff901`043119c0 fffff901`043119c0 00000000`00000000 fffff901`043119c0 : win32k!xxxInternalDoPaint+0x92
fffff880`097e28a0 fffff960`00156df8 : fffff901`043119c0 fffff880`097e2b80 00000000`00000000 00000000`00000220 : win32k!xxxDoPaint+0x4c
fffff880`097e28e0 fffff960`0013fcc4 : fffff880`097e2a48 00000000`00000000 fffff880`00000000 00000000`ffffffff : win32k!xxxRealInternalGetMessage+0x9e8
fffff880`097e2a00 fffff803`628df453 : fffffa80`06e237c0 00000000`02b7e488 fffff880`097e2aa8 00000000`77516308 : win32k!NtUserPeekMessage+0x84
fffff880`097e2a90 00000000`7753ac5a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`097e2b00)
00000000`02b7e468 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7753ac5a

1: kd> kn
 # Child-SP          RetAddr           Call Site
00 fffff880`097e1508 fffff803`628df769 nt!KeBugCheckEx
01 fffff880`097e1510 fffff803`628df0bc nt!KiBugCheckDispatch+0x69
02 fffff880`097e1650 fffff803`6294c47d nt!KiSystemServiceHandler+0x7c
03 fffff880`097e1690 fffff803`62974364 nt!RtlpExecuteHandlerForException+0xd
04 fffff880`097e16c0 fffff803`6294e1d6 nt!RtlDispatchException+0x458
05 fffff880`097e1dd0 fffff803`628df842 nt!KiDispatchException+0x455
06 fffff880`097e2490 fffff803`628ddfba nt!KiExceptionDispatch+0xc2
07 fffff880`097e2670 fffff960`0021fdd3 nt!KiPageFault+0x23a
08 fffff880`097e2800 fffff960`0021fe02 win32k!xxxInternalDoPaint+0x63
09 fffff880`097e2850 fffff960`0021fb6c win32k!xxxInternalDoPaint+0x92
0a fffff880`097e28a0 fffff960`00156df8 win32k!xxxDoPaint+0x4c
0b fffff880`097e28e0 fffff960`0013fcc4 win32k!xxxRealInternalGetMessage+0x9e8
0c fffff880`097e2a00 fffff803`628df453 win32k!NtUserPeekMessage+0x84
0d fffff880`097e2a90 00000000`7753ac5a nt!KiSystemServiceCopyEnd+0x13
0e 00000000`02b7e468 00000000`00000000 0x7753ac5a
1: kd> .frame 0e
0e 00000000`02b7e468 00000000`00000000 0x7753ac5a

kd> ln fffff9600021fdd3
(fffff960`0021fd70)   win32k!xxxInternalDoPaint+0x63   |  (fffff960`0021fec0)   win32k!CreateBitmapStrip

FOLLOWUP_IP: 
win32k!xxxInternalDoPaint+63
fffff960`0021fdd3 ff4308          inc     dword ptr [rbx+8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  win32k!xxxInternalDoPaint+63

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  51637e38

STACK_COMMAND:  .cxr 0xfffff880097e1e00 ; kb

BUCKET_ID_FUNC_OFFSET:  63

FAILURE_BUCKET_ID:  0x3B_win32k!xxxInternalDoPaint

BUCKET_ID:  0x3B_win32k!xxxInternalDoPaint

The second issue is again with directX and Internet Explorer

2: kd> !thread 0xfffffa80054d7b00
GetPointerFromAddress: unable to read from fffff80297558000
THREAD fffffa80054d7b00  Cid 0cd8.0fa8  Teb: 000000007f421000 Win32Thread: fffff90102530010 RUNNING on processor 2
Not impersonating
GetUlongFromAddress: unable to read from fffff80297477cf0
Owning Process            fffffa800629d6c0       Image:         iexplore.exe
Attached Process          N/A            Image:         N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount      446351       
Context Switch Count      7422           IdealProcessor: 0             
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime                  00:00:00.000
KernelTime                00:00:00.000
Win32 Start Address 0x000000005e74313c
Stack Init fffff88009ecefd0 Current fffff88009dea610
Base fffff88009ecf000 Limit fffff88009ec9000 Call 0
Priority 12 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`09ece7e8 fffff802`974721ec : 00000000`00000019 00000000`0000000d fffff8a0`0ce3edb0 2d75bf77`ff910e33 : nt!KeBugCheckEx
fffff880`09ece7f0 fffff802`97471c4c : fffff880`00000000 fffff8a0`0c62db60 fffff8a0`0c62ddc0 00000000`00000000 : nt!ExFreePool+0x60
fffff880`09ece880 fffff880`0393b0ae : fffff8a0`0c62db70 fffff8a0`0c62db70 fffff880`09ecee10 00000000`4b677844 : nt!ExFreePoolWithTag+0xaec
fffff880`09ece960 fffff960`0038320b : 00000000`00000000 fffffa80`054d7b00 00000000`7f421000 00000000`774bf230 : dxgkrnl!DxgkEscape+0x63e
fffff880`09ecedf0 fffff802`97259453 : fffffa80`0000001e fffffa80`054d7b00 00000000`7f421000 00000000`00000020 : win32k!NtGdiDdDDIEscape+0x43
fffff880`09ecee40 00000000`774dc62a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`09ecee40)
00000000`02a6cae8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x774dc62a

I would update video card drivers and check your RAM with memtest86+.

To get more details you may want to turn on full dumps with this registry file (by Andre.Ziegler):

http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full.reg

When the dump is collected, disable full dumps
http://cid-128fc518635be2dc.skydrive.live.com/self.aspx/.Public/MS%20Foren/Registry/WER%5E_Explorer_full_uninstall.reg

Upload the collected dump here.

Please also update your TrendMicro anti-