Results 1 to 6 of 6
  1. #1
    3 Star Lounger
    Join Date
    Jan 2010
    Location
    Michigan
    Posts
    384
    Thanks
    1
    Thanked 4 Times in 4 Posts

    Still Can't Figure out this BSOD Problem

    I’m trying to revisit this problem. My computer has Windows7 Home. Looking for fresh ideas. Every so often, I get the BSOD. I then get the option to reboot normally or do a repair. If I reboot normally, sometimes I get a repeat BSOD. Eventually, it reboots and all is good except I cannot get on the internet. There is a red cross where the WLAN Adapter appears (lower right hand corner of screen). If I go into Control Panel/Network and Internet/Network Connections it does not list my wireless adapter. If I shut down the computer and wait a few minutes and reboot, it seems to suddenly work. It then might work fine for 10-40 days but then the problem repeats. I cannot think of anything I am doing that triggers the problem. All scans (A-V and Malware) are clear.

    When I check Event Viewer, I get the critical error, kernel power, event ID #41, “The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly”

    This is generally preceeded by the Warning: Event ID 1530, User Profile Service “Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

    DETAIL -
    5 user registry handles leaked from \Registry\User\S-1-5-21-2527946468-2287944044-1333985061-1001:
    Process 600 (\Device\HarddiskVolume2\Windows\System32\lsass.ex e) has opened key \REGISTRY\USER\S-1-5-21-2527946468-2287944044-1333985061-1001
    Process 600 (\Device\HarddiskVolume2\Windows\System32\lsass.ex e) has opened key \REGISTRY\USER\S-1-5-21-2527946468-2287944044-1333985061-1001
    Process 600 (\Device\HarddiskVolume2\Windows\System32\lsass.ex e) has opened key \REGISTRY\USER\S-1-5-21-2527946468-2287944044-1333985061-1001\Software\Microsoft\SystemCertificates\My
    Process 600 (\Device\HarddiskVolume2\Windows\System32\lsass.ex e) has opened key \REGISTRY\USER\S-1-5-21-2527946468-2287944044-1333985061-1001\Software\Microsoft\SystemCertificates\CA
    Process 600 (\Device\HarddiskVolume2\Windows\System32\lsass.ex e) has opened key \REGISTRY\USER\S-1-5-21-2527946468-2287944044-1333985061-1001\Software\Microsoft\SystemCertificates\Disallo wed

    Note that the details are not always the same, but it is always the same warning.

    I then ran Blue Screen View, which analyzes the dump files, and it specifies the following “driver error”:
    ntoskrnl.exe

    I am not sure how to proceed here.

    Oh, chkdsk finds no problems.

    Mel

  2. #2
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,486
    Thanks
    284
    Thanked 574 Times in 478 Posts
    Check for any power saving/Green settings in the BIOS, if there are any, disable them. In Control Panel, set the Power settings to High Performance.

    C:\Windows\Minidump <--- copy any *dmp files from here to the Desktop, zip and attach the zip file here, I'll try to analyse them later.

  3. #3
    3 Star Lounger
    Join Date
    Jan 2010
    Location
    Michigan
    Posts
    384
    Thanks
    1
    Thanked 4 Times in 4 Posts
    Satrow:

    My power setting right now is on Balanced.

    Should I instead check the High Performance? I kind of like getting the longer battery life, but if that is the source of the problem, I would do it.

    I am attaching the .zip files; there are 4 dumps, and I think they are pretty much the same.
    Attached Files Attached Files

  4. #4
    Gold Lounger Maudibe's Avatar
    Join Date
    Aug 2010
    Location
    Pa, USA
    Posts
    2,634
    Thanks
    115
    Thanked 649 Times in 592 Posts
    Worrisome when the kernal crashed. Have you tied a system restore to a point prior to experiencing the porblem?

  5. #5
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,486
    Thanks
    284
    Thanked 574 Times in 478 Posts
    All 4 dumps are almost identical:
    STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL
    Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility
    SYSTEM UP-TIME ~ 13 seconds every time:
    Code:
    System Uptime: 0 days 0:00:13.088
    System Uptime: 0 days 0:00:13.416
    System Uptime: 0 days 0:00:12.854
    System Uptime: 0 days 0:00:13.260
    The same running process every time - csrss.exe - a crucial Windows process:
    BSOD BUGCHECK SUMMARY
    Code:
    
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Thu Oct  4 12:23:58.042 2012 (UTC + 1:00)
    System Uptime: 0 days 0:00:13.088
    BugCheck A, {0, 2, 0, fffff800030a7ff5}
    Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
    BUGCHECK_STR:  0xA
    PROCESS_NAME:  csrss.exe
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Thu Oct  4 12:18:49.370 2012 (UTC + 1:00)
    System Uptime: 0 days 0:00:13.416
    BugCheck A, {0, 2, 0, fffff8000309aff5}
    Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
    BUGCHECK_STR:  0xA
    PROCESS_NAME:  csrss.exe
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Sat Sep 29 00:27:54.808 2012 (UTC + 1:00)
    System Uptime: 0 days 0:00:12.854
    BugCheck A, {0, 2, 0, fffff800030b3174}
    Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
    BUGCHECK_STR:  0xA
    PROCESS_NAME:  csrss.exe
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
    Debug session time: Thu Sep 27 18:04:31.214 2012 (UTC + 1:00)
    System Uptime: 0 days 0:00:13.260
    BugCheck A, {0, 2, 0, fffff800030e5174}
    Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
    BUGCHECK_STR:  0xA
    PROCESS_NAME:  csrss.exe
    จจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจจ``
    In Device Manager, go to the Properties sheet for your WLAN adapter, Power management tab and deselect the "Allow the computer to switch this off to save power". If you update the software for this, you'll need to check and adjust it again.

    Uninstall Norton/Symantec completely for the duration of testing: https://www-secure.symantec.com/nort...home&version=1 Install MSE and check that the built-in Windows firewall is active: http://windows.microsoft.com/mse/

    Uninstall EaseUS for testing purposes.

    Fully updating your hardware drivers from Toshiba's support page for your laptop would be the next step, also check for a BIOS update there.

    Try to trigger the circumstances that lead to the BSOD's again once you've done the above, change the sleep/hibernate settings to a shorter period might help, if it crashes and there's a new dump created, please upload it, or (preferred) carefully follow the instructions here to collect the dumps and other useful data and attach the required zip back in this topic.

  6. #6
    Star Lounger
    Join Date
    Dec 2009
    Location
    Estill Springs,TN
    Posts
    72
    Thanks
    4
    Thanked 1 Time in 1 Post
    Just a thought, try replacing the motherboard battery and see if things don't go back to normal

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •