Hi,
I recently had severe BSOD crashes which the community helped me trace to my network card. I have since reinstalled the network.sys driver and all is well now. After a couple of weeks, I decided to reinstall McAfee. Periodically after shutdown, while booting the system crashes. Here is an output of the minidump file:
Is this being caused by McAfee or something else?
Microsoft (R) Windows Debugger Version 10.0.22549.1000 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\042122-25796-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Mini Kernel Dump does not have process information
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff804`57208000 PsLoadedModuleList = 0xfffff804`57e32230
Debug session time: Wed Apr 20 18:27:42.288 2022 (UTC - 4:00)
System Uptime: 5 days 6:22:42.956
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
..................................................
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff804`575ff8a0 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff68c`f03d11f0=00000000000000a0
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
INTERNAL_POWER_ERROR (a0)
The power policy manager experienced a fatal error.
Arguments:
Arg1: 000000000000010e, The disk subsystem returned corrupt data while reading from the
hibernation file.
Arg2: 000000000000000a
Arg3: 0000000000005d4b, Incorrect checksum
Arg4: 0000000000009f53, Previous disk read's checksum
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for iaStorAC.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2639
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 4629
Key : Analysis.Init.CPU.mSec
Value: 953
Key : Analysis.Init.Elapsed.mSec
Value: 15673
Key : Analysis.Memory.CommitPeak.Mb
Value: 87
FILE_IN_CAB: 042122-25796-01.dmp
DUMP_FILE_ATTRIBUTES: 0x9
Hiber Crash Dump
Kernel Generated Triage Dump
BUGCHECK_CODE: a0
BUGCHECK_P1: 10e
BUGCHECK_P2: a
BUGCHECK_P3: 5d4b
BUGCHECK_P4: 9f53
ERROR_CODE: (NTSTATUS) 0xa - The environment is incorrect.
IMAGE_NAME: iaStorAC.sys
MODULE_NAME: iaStorAC
FAULTING_MODULE: fffff80458f10000 iaStorAC
CUSTOMER_CRASH_COUNT: 1
STACK_TEXT:
fffff68c`f03d11e8 fffff804`57ba9dd4 : 00000000`000000a0 00000000`0000010e 00000000`0000000a 00000000`00005d4b : nt!KeBugCheckEx
fffff68c`f03d11f0 fffff804`57bb7a11 : 00000000`00000001 ffff838a`daa818b0 00000002`ea855000 ffff838b`250fc000 : nt!PopHiberChecksumHiberFileData+0xfb94
fffff68c`f03d1250 fffff804`57bb73c6 : 00000000`00000000 ffffb082`8d1e9c58 fffff68c`f03d1350 00000000`00000014 : nt!PopRequestRead+0x7d
fffff68c`f03d12c0 fffff804`5758e734 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PopDecompressCallback+0x16
fffff68c`f03d12f0 fffff804`57795df3 : ffff838b`251cc00b ffff9900`06dc0008 00000000`00000000 00000000`00000000 : nt!RtlpMakeXpressCallback+0x24
fffff68c`f03d1320 fffff804`577952f2 : ffff9900`06db1000 ffff9900`06db1000 fffff68c`f03d1500 00000000`00000000 : nt!RtlDecompressBufferXpressLzProgress+0x46b
fffff68c`f03d13a0 fffff804`57baa159 : 00000000`00000001 fffff68c`f03d1500 00000000`00000000 00000000`00010000 : nt!RtlDecompressBufferProgress+0x62
fffff68c`f03d1400 fffff804`57ba93ca : 00000001`8ae82000 ffffb082`8d1e9c58 00000000`00000001 00000000`00000001 : nt!PopDecompressHiberBlocks+0xf8a5
fffff68c`f03d1620 fffff804`57b99331 : 0000be5f`756c64c3 ffffb082`8d1e9c58 fffff68c`f03d1840 00000000`00000000 : nt!PopRestoreHiberContext+0xfeaa
fffff68c`f03d16b0 fffff804`57b99046 : fffff804`57e58420 fffff68c`f03d1830 fffff804`57e58420 00000000`00000100 : nt!PopHandleNextState+0x241
fffff68c`f03d1700 fffff804`57b98dc3 : 00000000`00000100 fffff804`57e58420 00000423`4d529b14 00000000`00989680 : nt!PopIssueNextState+0x1a
fffff68c`f03d1730 fffff804`57b9c389 : fffff68c`f03d1a20 00000000`00000000 00000000`00000000 fffff804`57b9c10f : nt!PopInvokeSystemStateHandler+0x33b
fffff68c`f03d1930 fffff804`57b9be1a : ffffffff`00000000 ffffffff`ffffffff 00000000`00000000 00000000`00000000 : nt!PopEndMirroring+0x1e9
fffff68c`f03d19f0 fffff804`57b9bb05 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000004 : nt!MmDuplicateMemory+0x2be
fffff68c`f03d1a80 fffff804`5755da15 : ffff838a`e0bf9000 ffff838a`e0bf9040 fffff804`57b9b9d0 ffff9900`0577a180 : nt!PopTransitionToSleep+0x135
fffff68c`f03d1b10 fffff804`57606ef8 : fffff804`569c6180 ffff838a`e0bf9040 fffff804`5755d9c0 fffff804`57412248 : nt!PspSystemThreadStartup+0x55
fffff68c`f03d1b60 00000000`00000000 : fffff68c`f03d2000 fffff68c`f03cb000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
STACK_COMMAND: .cxr; .ecxr ; kb
FAILURE_BUCKET_ID: 0xa0_10e_0xa_HIBERSTACK_INIT_FAILED_IMAGE_iaStorAC.sys
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {78caffde-3b0e-e5a8-abe6-79eb701d8ed4}
Followup: MachineOwner
---------
