Shutdown due to DRIVER_POWER_STATE_FAILURE (bugcheck 0x0000009f); BUG in HDAudBus?

I updated my computer to the latest Windows 10 (version 2004) on June 4.

Since then, my computer has twice shutdown, on June 6 and today (June 9).  Each time, first thing in the morning, I wanted to use my computer but it was dead, so I had to restart it.

Both shutdowns fortunately generated dump files in C:\Windows\MEMORY.DMP.  I have saved both files to another location, and have analyzed them using Windbg.

The full results from Windbg may be obtained from these 2 Google Drive links:

There is one commonality between those 2 dump files: Microsoft's HDAudBus.

Altho the precise  failure in each case is slightly different: in the first one it is

FAILURE_BUCKET_ID:  0x9F_3_HDAudBus_IMAGE_pci.sys

while in the second one it is

FAILURE_BUCKET_ID:  0x9F_3_HDAudBus!HdAudBusUpdateS0IdleSettings


I would appreciate it if you could confirm my interpretation that HDAudBus is the culprit.

Second, is there anything that can be done about this?

Is this a known issue, or do I need to file a bug report with Microsoft?

Do I need to roll back my latest Windows update (ugg...)?


Hi DrBlink, I am Rob, an independent and a 14 time and dual award MVP specializing in Windows troubleshooting and Bluescreen analysis. Please remember as independents we are not responsible for the development of Windows or the computer hardware and drivers. If you will work with me I will be here to help until the issue is resolved.

We need the actual DMP files to analyze since we might be able to glean more information from them.

Troubleshoot blue screen errors <-- read this link
http://windows.microsoft.com/en-us/windows-10/t...

Look in C:\Windows for memory.dmp and in C:\Windows\minidump for xxxxxxxxx.dmp files.

We can analyze the minidumps if you make them available from the
OneDrive or other file sharing sites (such as MediaFire). If you have
problems uploading the minidumps copy them to the Desktop or the
Documents folder and upload them from there.

One-Drive - Share files and folders and change permissions
http://windows.microsoft.com/en-us/onedrive/sha...

Upload photos and files
http://windows.microsoft.com/en-us/onedrive/add...

Zip or upload the contents of C:\Windows\minidump

Use OneDrive to upload collected files
http://social.technet.microsoft.com/Forums/en-U...

=====================================================

This "could" be a power supply problem though it is not the most common cause.
9f is likely a driver issue. Antivirus/antispyware/security programs can also cause these issues.

Have you added devices lately or updated drivers - be sure to check in Windows
Updates to see if a driver was updated prior to this occurring. This could also be caused by a loose card or cable and even a weak power supply.

That error means a driver is not handling the power state properly. Check Right
Click Start Button - Device Manager to be sure major drivers are not shut off
during sleep - double click Display Adapter - NIC and WIFI - Sound and others -
Power Management tab - uncheck Allow computer to turn off the power. Maybe only
one has an issue.

(Use RUN instead of Start - Search as used on Vista or Windows 7)

WINKEY + X - RUN - type in MSCONFIG.exe

General Tab - check Diagnostic Start - APPLY / OK - REBOOT

Try it now. If it still blue screens think Video Driver. If not think NIC, Wifi,
Sound, or.....(and it still could be video interacting with something else).
See the troubleshooter link above for my generic driver update methods.

BCCode: 9F 0x0000009F <-- read this link
http://www.faultwire.com/solutions-fatal_error/...*1167.html?order=date OR click here --> https://tinyurl.com/yxzw4yug

----------------------------------------------------------

This is my generic how to for proper driver updates :

This utility makes it easy to see which versions are loaded: Run DriverView -
set VIEW to Hide Microsoft drivers - update those without Dump in their names. (also update the BIOS and low-level chipset drivers)

DriverView - Free - utility displays the list of all device drivers currently loaded on your system. For each driver in the list, additional useful information is displayed: load address of the driver, description, version, product name, company that created the driver, and more.
http://www.nirsoft.net/utils/driverview.html

For Drivers check System Maker as fallbacks and Device Maker's which are the most current. Right Click the Start Button- Device Manager - Display Adapter -
write down the make and complete model of your video adapter - double click - Driver's tab - write down the version info. Now click Update Driver (this may not do anything as MS is far behind certifying drivers) - then Right Click - Uninstall - REBOOT this will refresh the driver stack.

Repeat that for Network - Network Card (NIC), Wifi, Sound, Mouse and
Keyboard if 3rd party with their own software and drivers and any other
major device drivers you have.

Now go to System Maker's site (Dell, HP, Toshiba as examples) (as rollback) and then Device Maker's site (Realtek, Intel, Nvidia, ATI as examples) and get their latest versions. (Look for BIOS, Chipset, and software updates at System Maker's site while there.)

Download - SAVE - go to where you put them - Right Click - RUN AD ADMIN -
REBOOT After each installation.

Always check in Device Manager - Drivers tab to be sure the version you are installing actually shows up. This is because some drivers rollback before the
latest is installed (sound drivers particularly do this) so install a driver - reboot
- check to be sure it is installed and repeat as needed.

Repeat at Device Makers - BTW at Device Makers DO NOT RUN THEIR SCANNER
– Check manually by model.

Manually look at manufacturer's sites for drivers - and Device Maker's sites.
http://pcsupport.about.com/od/driverssupport/ht...

_______________________________________________________

After doing ALL the updates you can, and if the issue continues, then run
Driver Verifier. (Remember to use the Windows 8/8.1 methods posted at the
top of the original reply above.)

Using Driver Verifier to identify issues with Windows drivers for advanced users
http://support.microsoft.com/kb/244617

How To Troubleshoot Driver Problems in Windows Vista or 7. (8/8.1 and 10
are essentially the same).
http://www.winvistaclub.com/t79.html

Using Driver Verifier
https://msdn.microsoft.com/en-us/library/window...

WINKEY + X - RUN - type in -> verifier /reset hit enter to disable

If Driver Verifier creates a minidump upload it and post the link here so we
can analyze it.

Here to help,

Rob

------
Standard Disclaimer: Those may be non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Please let us know the results and if you need further assistance. Feedback definitely helps us help all.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Rob, thanks for the amazingly detailed answer!


> We need the actual DMP files to analyze since we might be able to glean more information from them.

Links to the 2 minidumps:


> Antivirus/antispyware/security programs can also cause these issues.

I am running both the builtin Windows Defender as well as Malwarebytes Premium 4.1.0 (the latest paid for version).


> Have you added devices lately or updated drivers - be sure to check in Windows

I keep my machine extremely up to date.  I apply Windows updates within a day of beign suggested them (I hate auto updates).  As I noted in my original post, I updated to 2004 on June 4.

My hardware is a Dell Precision 7530 workstation laptop, and I run Dell's SupportAssist to update it regularly.  The last time was on June 2:

Drivers & Downloads Installed (Manual) - Error - June 2, 2020 5:00:52 PM Restore System 

- Intel 9560/9260/18265/8265/7265/3165 WiFi Driver - A25 - 53.5 MB - Urgent - Installed 

- STMicroelectronics Free Fall Data Protection Driver - A00 - 40.73 MB - Recommended - Install Error 

- Intel 9560/9260/18265/8265/7265/3165 Bluetooth UWD Driver - A29 - 48.6 MB - Urgent - Installed 

- Dell/Alienware Digital Delivery Application - A17 - 81.01 MB - Optional - Installed


Note that "STMicroelectronics Free Fall Data Protection Driver" failed to install.  Should I execute "Restore System" to remove all the above and retry?


> This "could" be a power supply problem though it is not the most common cause...This could also be caused by a loose card or cable and even a weak power supply.

How do I diagnose that?

I tend to NOT think it is hardware, since the last 2 shutdowns (which you now have the minidumps for) both are fingering HDAudBus.  Hardware problems, in contrast, should cause random shutdowns.



> Check Right Click Start Button - Device Manager to be sure major drivers are not shut off during sleep

I think that you mean that for each major driver's Properties, that I should go to its "Power Management" tab and uncheck the option "Allow the computer to turn off this device to save power", as described here.

Problem: my "Device Manager" Properties have no "Power Management" tab.  This link did not help.


> WINKEY + X - RUN - type in MSCONFIG.exe

Did not bluescreen.  I also could not do much on my machine, so I undid the "Diagnostic Start" and have rebooted back as normal.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

BugCheck 9F, {3, ffff9201a1d2a360, ffff908f4f447ba0, ffff9201ab1a7820}
Probably caused by : pci.sys

BugCheck 9F, {3, ffff808151670cf0, ffffaa866b62f750, ffff808152452050}
Probably caused by : HDAudBus.sys ( HDAudBus!HdAudBusUpdateS0IdleSettings+e1 )

pci.sys and HDAudBus.sys are Windows components which means something else drove them into Fault.

Further detailed analysis did not help a lot.

1. fffff800`2e330000 fffff800`2e339000 MbamElam.sys <-- Malwarebytes

Fully uninstall Malwarebytes which is either involved as the cause or by helping to mask the cause. Use MBAM as an on-demand scanner only and not running resident at all times. Use only Windows Defender which in Windows 8/8.1 & 10 is a full antivirus.

2. fffff805`a4730000 fffff805`a473f000 pcdsrvc_x64..pkms <-- Dell SupportAssist.

Is this Dell system still under warranty? You need to contact Dell Support which as OEM is responsible for both the hardware and Windows during the Warranty period. Also, ask in the Dell forums about any known issues.

BiosVendor = Dell Inc.
BiosVersion = 1.12.1
BiosReleaseDate = 11/11/2019 <-- current BIOS
SystemManufacturer = Dell Inc.
SystemProductName = Precision 7530
SystemFamily = Precision
SystemSKU = 0831
BaseBoardManufacturer = Dell Inc.
BaseBoardProduct = 0C1D71
BaseBoardVersion = A00
CPUID: "Intel(R) Xeon(R) E-2186M CPU @ 2.90GHz"
MaxSpeed: 2900
CurrentSpeed: 2904

Dell Support
http://support.dell.com/

Dell Drivers - Product Manuals & Warranty Info (left side) - Tech Support and more
http://support.dell.com/support/index.aspx?c=us...

Dell Forums
http://en.community.dell.com/forums/

Dell PC Diagnostics
http://www.dell.com/support/Diagnostics/us/en/19/

"STMicroelectronics Free Fall Data Protection Driver" failed to install. <-- Check with Dell Support.

Can't really easily diagnose a PSU problem that is not very evident on a laptop. And I agree this is not at all applicable here.

3. Not all devices will have a Power Management tab and for those that do it will be in Device Manager - Type of Device heading (such as Display Adapters or Mice and other pointing devices) - double click the device to see if there is a Power Management tab.

4. Run Driver Verifier - see the previous post.

5. Since it did not BSOD after running Diagnostic Start the issue seems to be caused by some unknown driver or software.

Be sure all drivers are updated by manually checking - see methods in the previous post. Be sure to update BIOS and chipset drivers.

Also, run the Intel Driver and Support Assistant.

Intel Driver and Support Assistant <-- run this after checking with System/Motherboard Maker
http://www.intel.com/p/en_US/support/detect?red...;

6. Then try the Clean Boot method and a process of elimination.

Try the Clean Boot method to see if a startup program is involved - if so it is a
process of elimination :

Right Click the start button - Command Prompt (Admin) OR Windows PowerShell (Admin) - at the prompt type in

MSCONFIG

and hit enter

How to perform a clean boot in Windows
https://support.microsoft.com/en-us/kb/929135

Other programs to help :

Autoruns - Free - See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings.
http://technet.microsoft.com/en-us/sysinternals...

Process Explorer - Free - Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.
http://technet.microsoft.com/en-us/sysinternals...

Process Monitor - Free - an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.
https://docs.microsoft.com/en-us/sysinternals/d...

==================================================

Troubleshoot blue screen errors <-- read this link
http://windows.microsoft.com/en-us/windows-10/t...

Here to help,

Rob

------
Standard Disclaimer: Those may be non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Please let us know the results and if you need further assistance. Feedback definitely helps us help all.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Rob,

Thanks again for your efforts!

For my own education, I would like to learn how you arrived at some of your latest conclusions:


> 1. fffff800`2e330000 fffff800`2e339000 MbamElam.sys <-- Malwarebytes

You just taught me something: if in Windbg I click on the pci link and then in its results the "Browse full module list" link, I get a ton of results, including:

fffff800`2e330000 fffff800`2e339000   MbamElam.sys

    Timestamp: unavailable (00000000)

    Checksum:  00000000

    ImageSize:  00009000


So, that is where you got the Malwarebytes line above, correct?

If I continue searching the results for "mbam" (case insensitive), I also get:

fffff800`3d100000 fffff800`3d13f000   mbamswissarmy   (deferred)             

    Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys

    Image name: mbamswissarmy.sys

    Browse all global symbols  functions  data

    Timestamp:        Wed Nov 20 09:57:29 2019 (5DD55459)

    CheckSum:         0004C28C

    ImageSize:        0003F000

    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

    Information from resource tables:

fffff800`44090000 fffff800`440c7000   MbamChameleon   (deferred)             

    Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys

    Image name: MbamChameleon.sys

    Browse all global symbols  functions  data

    Timestamp:        Mon Mar 30 10:51:49 2020 (5E820785)

    CheckSum:         0003C061

    ImageSize:        00037000

    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

    Information from resource tables:

fffff800`7d930000 fffff800`7d943000   mbam       (deferred)             

    Image path: \??\C:\WINDOWS\system32\DRIVERS\mbam.sys

    Image name: mbam.sys

    Browse all global symbols  functions  data

    Timestamp:        Fri Apr 17 09:32:29 2020 (5E99AFED)

    CheckSum:         000146E0

    ImageSize:        00013000

    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

    Information from resource tables:


By the way, you too are using Windbg to look at the dump files, correct?  Or is there another tool that you prefer?

>Fully uninstall Malwarebytes which is either involved as the cause or by helping to mask the cause.

What makes you say that?

General experience with Malwarebytes, or something else in the minidump/Windbg results?


> Use MBAM as an on-demand scanner only and not running resident at all times. Use only Windows Defender which in Windows 8/8.1 & 10 is a full antivirus.

Again, is that your general experience, or do you have a more specific reason?

I use both Windows Defender and Malwarebytes Premium, as that has been recommended as the best solution.  In particular, wirecutter used to recommend that combination, altho their latest advice has backed off a bit.

However, this link recommends Malwarebytes as "Best with Windows Defender" and noted that
Malwarebytes’s powerful anti-malware engine detected malware that Defender missed.

Malwarebytes specifically denies that they cause a problem running side by side with Windows Defender; check out exile360's answer here.

My Malwarebytes is NOT configured to register with the Windows Security Center, indeed, that option in my version is greyed out, so I could not activate it if I wanted to.


> 2. fffff805`a4730000 fffff805`a473f000 pcdsrvc_x64..pkms <-- Dell SupportAssist.
> Is this Dell system still under warranty? You need to contact Dell Support which as OEM is responsible for both the hardware and Windows during the Warranty period. Also, ask in the Dell forums about any known issues.

My computer is still under Dell Pro Support warranty.  I already called them first before posting here.  The tech re-installed all Dell drivers.  The tech also recommended that I do a Windows Refresh, but that would mean I have to re-install most of my apps.  Plus I strongly suspect that it would cure nothing.


> "STMicroelectronics Free Fall Data Protection Driver" failed to install. <-- Check with Dell Support.

The tech thought that was ignorable.


> 3. Not all devices will have a Power Management tab and for those that do it will be in Device Manager - Type of Device heading (such as Display Adapters or Mice and other pointing devices) - double click the device to see if there is a Power Management tab.

I went thru every single device just now and unchecked "Allow the computer to turn off this device to save power" for:

Human Interface Devices

Converted Portable Device Control device

I2C HID Device

Intel HID Event Filter

Razor Ornata Chroma

USB Input Device    [there were 4 with the same name]

Network Adaptors

Intel Ethernet Connection

Intel Wireless-AC...

Smart card readers

Microsoft Usbccid...

Universal Serial Bus controllers

Generic USB Hub

Intel USB 3.1    [there were 2 with the same name]

USB Root Hub (USB 3.0)    [there were 2 with the same name]


Altho, I skipped entirely the ~100? devices under "System devices".  Please let me know if that was correct or not.


> 4. Run Driver Verifier - see the previous post.

I set Driver Verifier to only target HDAudBus, and I subsequently saw some strange behavior on my computer.  No mystery shutdown, but my browser seemed to freeze at one point.  I have deactivated Driver Verifier.


Finally, this morning, when I went to use my computer, I saw an entirely blue screen, no messages.  Had to use the power button to shutdown and restart.  This event seems different from my previous shutdowns because there is nothing in Event Viewer nor was a memory dump file created.


Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Windows Update prompted me just now to install KB4557957 (OS Build 19041.329), so I did.

Unfortunately, I see nothing in its release notes that addresses the issue that I am seeing,

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

1. The Unloaded Modules list is just one part of WinDBG's output which has to be considered. You do need to uninstall MBAM to correctly troubleshoot this issue. 3rd party antivirus/security programs are notorious for both causing or masking the causes of BSOD's.

MBAM in particular has been involved in a lot of the BSOD issues I have recently worked on.

I use WinDBG, BlueScreenView (not as accurate as WinDBG however it does provide an excellent driver list and other useful info), and several other utilities (if and as needed) in my analysis. Of course, there is a hierarchy as well as interaction in possible root causes. Note: WInDBG's basic output states "Probably caused by:" and not definitely caused by. Some claim that analyzing DMP files is a mixture or knowledge with art with a hint of magic.

If you want to explore more about Debugging :

Microsoft's MSDN - Windows Desktop Debugging
https://social.msdn.microsoft.com/Forums/window...

MSDN Visual Studio Debugger Forums
https://social.msdn.microsoft.com/Forums/vstudi...
https://social.msdn.microsoft.com/Forums/vstudi...

Another good resource is Microsoft's GitHub.

Microsoft GitHub
https://github.com/microsoft/

2. I would uninstall the Dell Utility until the issue is resolved.

3. OK

4. Please run DV as indicated in the examples given. Don't make assumptions with diagnostic tools right off the bat.... or if you do and the results are not as expected revert back to the basic steps.

Check for memory.DMP files in C:\Windows and for xxxxxxxxx.dmp files in C:\Windows\minidump

Please double check your settings here :

Start - Settings - Type in --> Advanced System Settings
Find at top and click on it - on left side of Advanced System Settings - Advanced tab - Startup and Recovery - Settings - System Failure - check the box to Write an Event to System Log

uncheck Auto Restart

make sure the Write Debugging is set to small minidump

and the default folder should look like %SystemRoot%\Minidump.

How to configure Windows to create MiniDump files on BSOD
http://blog.nirsoft.net/2010/07/27/how-to-confi...

-------

There definitely could be a hardware issue,

Try using the DDU method to remove and re-install the latest video drivers.

Display Driver Uninstaller
https://www.guru3d.com/files-details/display-dr...

-------

Troubleshoot blue screen errors <-- read this link
http://windows.microsoft.com/en-us/windows-10/t...

Running OCCT for Home Use (Free) and the Stress Tests may help indicate a cause.

OCCT - Free for Home use
https://www.ocbase.com/

Running Stress Tests might help indicate a cause - use ALL of these.

PC Stress Test free software for Windows 10
https://www.thewindowsclub.com/pc-stress-test-f...

Review and use all the methods in my previous posts.

Here to help,

Rob

------
Standard Disclaimer: Those may be non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Please let us know the results and if you need further assistance. Feedback definitely helps us help all.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

> The Unloaded Modules list is just one part of WinDBG's output which has to be considered

What are some of your other favorite WinDBG features?  There is a bunch of stuff under WinDBG's View menu that I see but am not sure yet how to use.


> You do need to uninstall MBAM to correctly troubleshoot this issue.

I had another shutdown this morning.  WinDBG analysis indicates that it is the exact same situation as the first dump file you have access to: FAILURE_BUCKET_ID:  0x9F_3_HDAudBus_IMAGE_pci.sys.

So, Microsoft's latest patches have not cleared up this issue.  


> 3rd party antivirus/security programs are notorious for both causing or masking the causes of BSOD's.
> MBAM in particular has been involved in a lot of the BSOD issues I have recently worked on.

In my case, you noted that it was running at the time of the crash, but there was nothing else in the dump files that actually showed that it was the cause, correct?

So, I guess that you just have prior experience that removing Malwarebytes clears up issues like this?

Because this is my 4th issue since June 6, I turned off Malwarebytes's 4 real time protection options this morning.  I am not happy to do this, because it seems to catch malware that Windows Defender misses.  But I must diagnose these shutdowns.

I will see what happens over the next several days.  If I see no crashes in the next week, then that would indicate that Malwarebytes's real time protection is the cause.  I will need to then reach out to Malwarebytes with a bug report.  So, any forensic evidence that you know I should report to them as proof would be great.


> Try using the DDU method to remove and re-install the latest video drivers.

Windows update just prompted me to install "Intel Corporation - Display - 26.20.100.7755", which I did and will next need to reboot.


Thanks much again for all of your help.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

1, The workings of WinDBG are too big of a discussion area for these forums so please use the resources I provided in the reply above.

2. You definitely need to uninstall MBAM and I would not assume that Windows Updates will resolve this issue. You could try uninstalling later updates and/or performing a Clean Installation of Windows.

Have you contacted Dell Support and asked in their forums about known issues?

3. The fact that MBAM was in the unloaded modules indicates it was involved at some level. And I have been seeing quite a few MBAM caused BSOD issues as of late.

Do not merely disable it - uninstall it. MBAM, like most all 3rd party antivirus/security programs, will still load pieces of itself into memory when disabled.

The forensic info you should provide in your description of the problems, the DMP file, and this thread.

I use MBAM as an on-demand scanner. When used as the main antivirus It is not that it catches different possible malware, it is the level of the threats it catches that is most important. MBAM is particularly good at the removal of what it detects. Windows Defender is a true superstar in both protection and compatibility. and It is used on my systems, those I manage, and I highly support its use.

AV-Test MBAM
https://www.av-test.org/en/antivirus/home-windo...

AV-Test Windows Defender
https://www.av-test.org/en/antivirus/business-w...

-----

After uninstalling MBAM and performing all the driver updates you can, then run Driver Verifier to see if it indicates a BSOD. If it produces a DMP file please post it and the link to it so I can analyze it. Of course, post any recent DMP files (up to the latest 5 in a ZIP or RAR).

Here to help,

Rob

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I turned off MBAM's real time protections on 2020-06-11 and my computer ran perfectly for over 6 days without a single shutdown, so I thought that I had nailed this.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Then, late yesterday night, I found that my computer had yet another mystery shutdown around 23:29.

This shutdown failed to create a dump file:

Event Viewer

Windows Logs

System

Level       Date and Time          Source          EventID    Task Category    Description [copied from text area]

Critical    2020-06-18 00:10:29    Kernel-Power    41         (63)             The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Error       2020-06-18 00:10:29    volmgr          161        None             Dump file creation failed due to error during dump creation.

Error       2020-06-18 00:10:44    EventLog        6008       None             The previous system shutdown at 11:29:59 PM on ‎6/‎17/‎2020 was unexpected.


I then uninstalled MBAM completely as per your suggestion.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Unfortunately, my computer shutdown yet again this morning.

This time I was working on it.  A blue screen appeared with some text and a QR code, but that disappeared before I could take a photo.

A full and mini dump file were both created this time.  (Oddly, an Error event was logged at 11:05:46 after I rebooted which says "Dump file creation failed due to error during dump creation."  I am not sure what is referring to, since I definitely have a dump file from this shutdown...)

Here are links to the mini dump and my Windbg processing of it:

https://drive.google.com/file/d/13ZSDF2z5GlPwSU1Db91Bs2Dghlx0YUVb/view?usp=sharing
https://drive.google.com/file/d/1T14IJQSJKc20pf3sQM40g1OBEQbdST_w/view?usp=sharing

My interpretation of this Windbg output is that it seems very different than my previous 3 shutdowns on June 6, 9, 11.

This time, pci and HDAudBus are not even present.  Instead, it has

FAILURE_BUCKET_ID:  0x139_1d_INVALID_BALANCED_TREE_STACKPTR_ERROR_nt!KiFastFailDispatch

Also, using, FullEventLogView, I see no alarming logs right before this shutdown.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Besides uninstalling MBAM, I have had a few other changes to my computer in the last week.

I have applied all updates that Win 10 wanted me to do very soon after being prompted, and I think there were some 2 days ago.

Yesterday, Dell Command Update had 4 new things for me to update, including my BIOS.  A lot of these updates seemed to be critical Intel security fixes.

Finally, this morning, I installed Anaconda as per these instructions (tho I chose to add Anaconda to my PATH, unlike their recommendation).  I did that not too long before the shutdown.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

(This is Rob B. in my other persona.)

For any issues dealing with Anaconda you will to work with its support resources.


BugCheck 139, {1d, ffff99886c83f8b0, ffff99886c83f808, 0}

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )

ntkrnlmp.exe is a Windows component which means something else drove it into Fault.

Further analysis did not help much.

=======

The more troubling issue, though related to the BugCheck, is the ID41 error and the issue as you have described  it sure sounds like a hardware problem and most probably PSU and/or power related. Of course, the PSU may just not be properly working. And there are other possible causes.

If the motherboard and other major devices are still under warranty be sure to contact their support, check their on-line docs and drivers, diagnostics and ask in their forums about any known issues. You may need repairs or RMA/replacements.

BiosVersion = 1.13.1
BiosReleaseDate = 04/28/2020  <-- current BIOS
SystemManufacturer = Dell Inc.
SystemProductName = Precision 7530
SystemFamily = Precision
SystemSKU = 0831
BaseBoardManufacturer = Dell Inc.
BaseBoardProduct = 0C1D71
BaseBoardVersion = A00
CPUID:        "Intel(R) Xeon(R) E-2186M  CPU @ 2.90GHz"
MaxSpeed:     2900
CurrentSpeed: 2904

Dell Support
http://support.dell.com/

Dell Drivers - Product Manuals & Warranty Info (left side) - Tech Support and more
http://support.dell.com/support/index.aspx?c=us&l=en&s=dhs

Dell Forums
http://en.community.dell.com/forums/

Dell PC Diagnostics
http://www.dell.com/support/Diagnostics/us/en/19/

------

ID41 & 141 are essentially the same.

ID41 with no Bug_Check - The main cause of this issue as you have described is hardware related : 

https://support.microsoft.com/en-us/help/2028504/windows-kernel-event-id-41-error-the-system-has-rebooted-without-clean  

1. Over-Clocking -> best to reset ALL to the defaults especially while troubleshooting

2. Memory (check thoroughly as indicated below).

3. Power Supply (see below to ensure you have enough power). Are there ever any brown-out/low power conditions in your area? Try removing everything except the computer from is A/C circuit - the entire circuit and not just the one wall pug the computer is plugged into.

4. Over-heating - even if the overall temps are with-in specs a single component can be too sensitive to even the normal levels of heat and fault at a lower temp. Try adding a fan blowing into the case to reduce the effects of heat even more than the cooler usually does. Of course ensure all built-in fans are running.

------

A. Are you over-clocking anything? If so STOP! OC can not only cause BSOD it can make troubleshooting virtually impossible.

B. Have you installed any performance or OC software such as MSI Afterburner? Those change system settings during installation which are still in effect even when the program is not running. Even iCUE or other RGB hardware and/or software may be involved.

C. After both A. & B. reset the BIOS back to the system/motherboard maker's recommendations.

-------

D. Be sure the SSD's have the latest firmware from their makers.

E. Try removing and reseating all cards, memory, and cables (both ends when possible) - actually remove and replace - do not just snug (on a PC) and clean out the dust bunnies and vents. (Of course remove ALL power prior to opening the case.) <-- Please do this as it is the number cause the issues you are experiencing (by far).

F. Try adding a fan blowing on high onto the motherboard's CPU & GPU areas. The point is to increase airflow to maximize heat dissipation. <-- Please do this no matter how much cooling you have now.

====================================================

After checking determining the wattage of the power supply you will then need to check the requirements of the motherboard and devices. Usually the video card is one of the major power users.

How do I determine how big my power supply is?
http://www.computerhope.com/issues/ch000800.htm

Other good sources of information are the device makers' sites and their forums.

eXtreme Power Supply Calculator
http://extreme.outervision.com/psucalculatorlite.jsp

Power Supply Calculator
https://www.newegg.com/tools/power-supply-calculator/

Choosing the right power supply for your computer
http://en.kioskea.net/faq/588-choosing-the-right-power-supply-for-your-computer

How Do I Test the Power Supply in My Computer?
http://pcsupport.about.com/od/toolsofthetrade/f/powersupplytest.htm

====================================================

Memory tests do not catch all errors such as mismatched memory (possible even
for sticks that appear to be identical) and when faster memory is placed in system
behind slower memory. So it is best to also swap sticks in and out to check for
those even if all memory tests fail to show a problem.

To test RAM check here - let it run 4+ hours or so - over-night is best.  < -- best method
www.memtest.org

MemTestX86 - Test RAM With

http://www.tenforums.com/tutorials/14201-memtest86-test-ram.html

====== 

Running OCCT for Home Use (Free) and these Stress Tests may help indicate a cause.


OCCT - Free for Home use
https://www.ocbase.com/

Running Stress Tests might help indicate a cause - use ALL of these.

PC Stress Test free software for Windows 10
https://www.thewindowsclub.com/pc-stress-test-free-software

=======

Troubleshoot blue screen errors <-- read this link
http://windows.microsoft.com/en-us/windows-10/troubleshoot-blue-screen-errors 

------

Run Driver Verifier.

Hope this helps.
--------------------------------------------------------------------------------------------
Rob Brown - Microsoft MVP <- profile - Windows and Devices for IT : Bicycle - Mark Twain said it right.       

Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated December 7, 2023 Views 4,091 Applies to: