Help with "Windows has recovered from unexpected shutdown"

Texas_guy · 07-20-2008, 06:30 AM

I am having a probelm very similar to this post:

http://www.techsupportforum.com/microsoft-support/windows-vista-support/228258-help-windows-has-recovered-unexpected-shutdown.html

I recently did a fresh install (new hard drive) of Vista Ultimate 32 bit onto my3 year old HP desktop. Everything works fine except....Several times per day I come to the computer to find it has shutdown (restarted). It gives me this message:

Windows has recovered from an unexpected shutdown.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: 9f
BCP1: 00000003
BCP2: 86A7C028
BCP3: 86A63540
BCP4: 86122B78
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\Mini072008-01.dmp
C:\Users\RBCKDC\AppData\Local\Temp\WER-15765062-0.sysdata.xml
C:\Users\RBCKDC\AppData\Local\Temp\WEREC25.tmp.version.txt

Read our privacy statement:
http://go.microsoft.com/fwlink/?link...3&clcid=0x0409

I am attaching my Belarc Info and Minidump files. Please help! This is very annoying. Thanks!

**jcgriff2** · 07-20-2008, 05:42 PM

Hi Texas Guy. . .

The BSOD bugcheck (STOP error code) per your post is:

0x0000009f (0x00000003, 0x86a7c028, 0x86a63540, 0x86122b78).

The 0x9f indicates that a device driver is having an issue with power management. The other parameters should be memory addresses and will hopefully lead me to the device/driver causing the problem.

Two items, please - there was one lone mini dump in the zip file - do you have more? Also, please run msinfo32 and save as an NFO (system info file - important). Zip up any other dump files and the msinfo32 NFO file and attach to your next post.

To run msinfo32 - START | type msinfo32 into the start search box | right-click on msinfo32 above | run as admin | save as NFO file - you'll see the default option.

Any ? - please let me know.

Regards. . .

jcgriff2

.

Texas_guy · 07-20-2008, 05:54 PM

Here's the info you requested. I had a feeling it had to do with power management - it always shutdown after we hadn't used the computer in a while.

Thanks again!

Texas_guy

**jcgriff2** · 07-20-2008, 06:32 PM

Downloading now.

I am going through the first dump now.

JC

.

**jcgriff2** · 07-20-2008, 09:46 PM

Hi. . .

The dump file mini072008-01.dmp confirms the BSOD bugcheck as 0x0000009f (0x00000003, 0x86a7c028, 0x86a63540, 0x86122b78) with the probable cause listed as sbp2port.sys, the Microsoft SBP-2 Protocol Driver for your 500gb Maxtor OneTouch IEEE 1394 SBP2 Device (drive g: - NTFS format). 0x9f = DRIVER_POWER_STATE_FAILURE. It failed with an IRP (I/O Request Packet) of 0x03 (the first parameter in the bugcheck) = READ.

What role, if any, does this drive play within the Vista OS? Is it used strictly for back-ups? To note, besides the 320gb c: drive, you also have another 500gb Maxtor 7H500F0 ATA Device (drive m: - NTFS format). I also see a HP psc 2510 USB Device - but it appears not to be plugged in (at the time of running Belarc, anyway).

A Microsoft hotfix - kb929762 - was last reviewed on May 20, 2008, and does appear to apply here. Take a look at it and I'll continue with the dumps tomorrow.

Have a good night in the Lone Star state.

Regards. . .

jcgriff2

.
The dbug output:

Code:

Microsoft (R) Windows Debugger Version 6.9.0003.113 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\#Dumps\Texas Guy - Vista - 07-20-08 -- 0x9f\Mini072008-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18063.x86fre.vistasp1_gdr.080425-1930
Kernel base = 0x81c11000 PsLoadedModuleList = 0x81d28c70
Debug session time: Sun Jul 20 04:29:34.982 2008 (GMT-4)
System Uptime: 0 days 10:44:21.211
Loading Kernel Symbols
.................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, 86a7c028, 86a63540, 86122b78}

Probably caused by : sbp2port.sys

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;kb;lmtn
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 00000003, A device object has been blocking an Irp for too long a time
Arg2: 86a7c028, Physical Device Object of the stack
Arg3: 86a63540, Functional Device Object of the stack
Arg4: 86122b78, The blocked IRP

Debugging Details:
------------------


DRVPOWERSTATE_SUBCODE:  3

IRP_ADDRESS:  86122b78

DEVICE_OBJECT: 86a7c028

DRIVER_OBJECT: 85106828

IMAGE_NAME:  sbp2port.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  47918f7f

MODULE_NAME: sbp2port

FAULTING_MODULE: 8a156000 sbp2port

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 81c44b6c to 81cde163

STACK_TEXT:  
81d06acc 81c44b6c 0000009f 00000003 86a7c028 nt!KeBugCheckEx+0x1e
81d06b28 81c446bc 81d06b94 81d06c50 00000001 nt!PopCheckIrpWatchdog+0x1ad
81d06b68 81cc7d00 81d1f4e0 00000000 bd9a9e35 nt!PopCheckForIdleness+0x343
81d06c88 81cc7936 81d06cd0 ffffff02 81d06cd8 nt!KiTimerListExpire+0x367
81d06ce8 81cc7483 00000000 00000000 0025c14d nt!KiTimerExpiration+0x2a0
81d06d50 81cc5f9d 00000000 0000000e 00000000 nt!KiRetireDpcList+0xba
81d06d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  0x9F_disk.sys_CNVIRP_IMAGE_sbp2port.sys

BUCKET_ID:  0x9F_disk.sys_CNVIRP_IMAGE_sbp2port.sys

Followup: MachineOwner
---------

eax=81d09920 ebx=86a7c028 ecx=81d111f8 edx=0000014e esi=81d0993c edi=81d06740
eip=81cde163 esp=81d06ab0 ebp=81d06acc iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000202
nt!KeBugCheckEx+0x1e:
81cde163 8be5            mov     esp,ebp
ChildEBP RetAddr  Args to Child              
81d06acc 81c44b6c 0000009f 00000003 86a7c028 nt!KeBugCheckEx+0x1e
81d06b28 81c446bc 81d06b94 81d06c50 00000001 nt!PopCheckIrpWatchdog+0x1ad
81d06b68 81cc7d00 81d1f4e0 00000000 bd9a9e35 nt!PopCheckForIdleness+0x343
81d06c88 81cc7936 81d06cd0 ffffff02 81d06cd8 nt!KiTimerListExpire+0x367
81d06ce8 81cc7483 00000000 00000000 0025c14d nt!KiTimerExpiration+0x2a0
81d06d50 81cc5f9d 00000000 0000000e 00000000 nt!KiRetireDpcList+0xba
81d06d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49 (FPO: [0,0,0])
ChildEBP RetAddr  Args to Child              
81d06acc 81c44b6c 0000009f 00000003 86a7c028 nt!KeBugCheckEx+0x1e
81d06b28 81c446bc 81d06b94 81d06c50 00000001 nt!PopCheckIrpWatchdog+0x1ad
81d06b68 81cc7d00 81d1f4e0 00000000 bd9a9e35 nt!PopCheckForIdleness+0x343
81d06c88 81cc7936 81d06cd0 ffffff02 81d06cd8 nt!KiTimerListExpire+0x367
81d06ce8 81cc7483 00000000 00000000 0025c14d nt!KiTimerExpiration+0x2a0
81d06d50 81cc5f9d 00000000 0000000e 00000000 nt!KiRetireDpcList+0xba
81d06d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x49
start    end        module name
80409000 80411000   kdcom    kdcom.dll    Sat Jan 19 02:31:53 2008 (4791A769)
80411000 80422000   PSHED    PSHED.dll    Sat Jan 19 02:31:21 2008 (4791A749)
80422000 8042a000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
8042a000 8046b000   CLFS     CLFS.SYS     Sat Jan 19 00:28:01 2008 (47918A61)
8046b000 8054b000   CI       CI.dll       Fri Feb 22 00:00:56 2008 (47BE5708)
8054b000 805c7000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
805c7000 805d4000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
805d4000 805ec000   parport  parport.sys  Sat Jan 19 00:49:32 2008 (47918F6C)
805ec000 80600000   smb      smb.sys      Sat Jan 19 00:55:27 2008 (479190CF)
80607000 8064d000   acpi     acpi.sys     Sat Jan 19 00:32:48 2008 (47918B80)
8064d000 80656000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
80656000 8065e000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
8065e000 80685000   pci      pci.sys      Sat Jan 19 00:32:57 2008 (47918B89)
80685000 80694000   partmgr  partmgr.sys  Sat Jan 19 00:49:54 2008 (47918F82)
80694000 806a3000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
806a3000 806ed000   volmgrx  volmgrx.sys  Sat Jan 19 00:50:00 2008 (47918F88)
806ed000 806f4000   pciide   pciide.sys   Sat Jan 19 00:49:42 2008 (47918F76)
806f4000 80702000   PCIIDEX  PCIIDEX.SYS  Sat Jan 19 00:49:40 2008 (47918F74)
80702000 80712000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
80712000 8071a000   atapi    atapi.sys    Sat Jan 19 00:49:40 2008 (47918F74)
8071a000 80738000   ataport  ataport.SYS  Sat Jan 19 00:49:40 2008 (47918F74)
80738000 8076a000   fltmgr   fltmgr.sys   Sat Jan 19 00:28:10 2008 (47918A6A)
8076a000 8077a000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
8077a000 80782de0   PxHelp20 PxHelp20.sys Wed Jun 20 18:26:00 2007 (4679A978)
80783000 807f4000   ksecdd   ksecdd.sys   Sat Jan 19 00:41:20 2008 (47918D80)
81c11000 81fca000   nt       ntkrpamp.exe Sat Apr 26 01:28:17 2008 (4812BD71)
81fca000 81ffd000   hal      halmacpi.dll Sat Jan 19 00:27:20 2008 (47918A38)
82208000 82313000   ndis     ndis.sys     Sat Jan 19 00:55:51 2008 (479190E7)
82313000 8233e000   msrpc    msrpc.sys    Sat Jan 19 00:48:15 2008 (47918F1F)
8233e000 82378000   NETIO    NETIO.SYS    Sat Jan 19 00:56:19 2008 (47919103)
82378000 8239d000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
8239d000 823c7000   ks       ks.sys       Sat Jan 19 00:49:21 2008 (47918F61)
823c7000 823fb000   ctoss2k  ctoss2k.sys  Mon Apr 09 08:21:48 2007 (461A2FDC)
89e09000 89ef0000   tcpip    tcpip.sys    Sat Apr 26 02:00:17 2008 (4812C4F1)
89ef0000 89f0b000   fwpkclnt fwpkclnt.sys Sat Jan 19 00:55:44 2008 (479190E0)
89f0b000 89f14000   crcdisk  crcdisk.sys  Thu Nov 02 04:52:27 2006 (4549B1CB)
89f45000 89f50000   tunnel   tunnel.sys   Sat Jan 19 00:55:50 2008 (479190E6)
89f50000 89f59000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
89f59000 89f69000   amdk8    amdk8.sys    Sat Jan 19 00:27:20 2008 (47918A38)
89f69000 89fa7000   USBPORT  USBPORT.SYS  Sat Jan 19 00:53:23 2008 (47919053)
89fa7000 89fb6000   usbehci  usbehci.sys  Sat Jan 19 00:53:21 2008 (47919051)
89fb6000 89fce000   cdrom    cdrom.sys    Sat Jan 19 00:49:50 2008 (47918F7E)
89fce000 89fdf000   Rtnicxp  Rtnicxp.sys  Wed Feb 13 00:04:10 2008 (47B27A4A)
89fdf000 89fee200   ohci1394 ohci1394.sys Sat Jan 19 00:53:33 2008 (4791905D)
89fef000 89ffc080   1394BUS  1394BUS.SYS  Sat Jan 19 00:53:27 2008 (47919057)
8a006000 8a115000   Ntfs     Ntfs.sys     Sat Jan 19 00:28:54 2008 (47918A96)
8a115000 8a14e000   volsnap  volsnap.sys  Sat Jan 19 00:50:10 2008 (47918F92)
8a14e000 8a156000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
8a156000 8a16c000   sbp2port sbp2port.sys Sat Jan 19 00:49:51 2008 (47918F7F)
8a16c000 8a17b000   mup      mup.sys      Sat Jan 19 00:28:20 2008 (47918A74)
8a17b000 8a1a2000   ecache   ecache.sys   Sat Jan 19 00:50:47 2008 (47918FB7)
8a1a2000 8a1c6000   fvevol   fvevol.sys   Sat Jan 19 00:27:09 2008 (47918A2D)
8a1c6000 8a1d7000   disk     disk.sys     Sat Jan 19 00:49:47 2008 (47918F7B)
8a1d7000 8a1f8000   CLASSPNP CLASSPNP.SYS Sat Jan 19 00:49:36 2008 (47918F70)
8a1f8000 8a1f9880   avgrkx86 avgrkx86.sys Mon May 05 20:21:58 2008 (481FA4A6)
8e40a000 8e52f5e0   AGRSM    AGRSM.sys    Tue Oct 30 15:53:59 2007 (47278BD7)
8e530000 8e531700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8e532000 8e53f000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
8e53f000 8e5bc600   ctaud2k  ctaud2k.sys  Mon Apr 09 08:22:04 2007 (461A2FEC)
8e5bd000 8e5ea000   portcls  portcls.sys  Sat Jan 19 00:53:17 2008 (4791904D)
8e5ea000 8e5f2000   ctprxy2k ctprxy2k.sys Mon Apr 09 08:22:05 2007 (461A2FED)
8e800000 8ef45520   nvlddmkm nvlddmkm.sys Wed Sep 12 02:07:35 2007 (46E78227)
8ef46000 8efe5000   dxgkrnl  dxgkrnl.sys  Sat Jan 19 00:36:36 2008 (47918C64)
8efe5000 8eff2000   watchdog watchdog.sys Sat Jan 19 00:35:29 2008 (47918C21)
8eff2000 8effc000   usbohci  usbohci.sys  Sat Jan 19 00:53:21 2008 (47919051)
8effc000 8effe500   GEARAspiWDM GEARAspiWDM.sys Tue Jan 29 12:00:57 2008 (479F5BC9)
8f006000 8f034000   msiscsi  msiscsi.sys  Sat Jan 19 00:50:44 2008 (47918FB4)
8f034000 8f075000   storport storport.sys Sat Jan 19 00:49:49 2008 (47918F7D)
8f075000 8f080000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
8f080000 8f097000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
8f097000 8f0a2000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
8f0a2000 8f0c5000   ndiswan  ndiswan.sys  Sat Jan 19 00:56:32 2008 (47919110)
8f0c5000 8f0d4000   raspppoe raspppoe.sys Sat Jan 19 00:56:33 2008 (47919111)
8f0d4000 8f0e8000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8f0e8000 8f0fd000   rassstp  rassstp.sys  Sat Jan 19 00:56:43 2008 (4791911B)
8f0fd000 8f186000   rdpdr    rdpdr.sys    Sat Jan 19 01:02:27 2008 (47919273)
8f186000 8f196000   termdd   termdd.sys   Sat Jan 19 01:01:06 2008 (47919222)
8f196000 8f1a1000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8f1a1000 8f1ac000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8f1ac000 8f1ad380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8f1ae000 8f1b8000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8f1b8000 8f1c5000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
8f1c5000 8f1f9000   usbhub   usbhub.sys   Sat Jan 19 00:53:40 2008 (47919064)
8f40c000 8f437000   hap16v2k hap16v2k.sys Mon Apr 09 08:21:52 2007 (461A2FE0)
8f437000 8f541000   ha10kx2k ha10kx2k.sys Mon Apr 09 08:21:50 2007 (461A2FDE)
8f541000 8f552000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
8f552000 8f581000   emupia2k emupia2k.sys Mon Apr 09 08:21:43 2007 (461A2FD7)
8f581000 8f5aa000   ctsfm2k  ctsfm2k.sys  Mon Apr 09 08:21:44 2007 (461A2FD8)
8f5aa000 8f5c5000   COMMONFX COMMONFX.DLL Mon Apr 09 08:23:31 2007 (461A3043)
8f5c5000 8f5e6000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
8f5e6000 8f5fc000   tdx      tdx.sys      Sat Jan 19 00:55:58 2008 (479190EE)
8f80a000 8f898000   CTSBLFX  CTSBLFX.DLL  Mon Apr 09 08:23:53 2007 (461A3059)
8f898000 8f923000   CTAUDFX  CTAUDFX.DLL  Mon Apr 09 08:23:41 2007 (461A304D)
8f923000 8f93a000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
8f93a000 8f947000   usbscan  usbscan.sys  Sat Jan 19 01:14:09 2008 (47919531)
8f947000 8f951000   usbprint usbprint.sys Sat Jan 19 01:14:40 2008 (47919550)
8f951000 8f95e000   dot4usb  dot4usb.sys  Sat Jan 19 00:49:09 2008 (47918F55)
8f95e000 8f983000   Dot4     Dot4.sys     Sat Jan 19 00:49:12 2008 (47918F58)
8f983000 8f995000   USBSTOR  USBSTOR.SYS  Sat Jan 19 00:53:22 2008 (47919052)
8f995000 8f99e000   Dot4Prt  Dot4Prt.sys  Sat Jan 19 00:49:09 2008 (47918F55)
8f99e000 8f9a7000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
8f9a7000 8f9ae000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
8f9ae000 8f9b5000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
8f9b5000 8f9c3000   Npfs     Npfs.SYS     Sat Jan 19 00:28:09 2008 (47918A69)
8f9c3000 8f9cc000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8f9d1000 8f9d7380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
8f9d8000 8f9e4000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
8f9e4000 8f9ec000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8f9ec000 8f9f4000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
8f9f4000 8f9ff000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
8fa05000 8fa4d000   afd      afd.sys      Sat Jan 19 00:57:00 2008 (4791912C)
8fa4d000 8fa7f000   netbt    netbt.sys    Sat Jan 19 00:55:33 2008 (479190D5)
8fa7f000 8fa95000   pacer    pacer.sys    Fri Apr 04 21:21:42 2008 (47F6D426)
8fa95000 8faa3000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
8faa3000 8fab6000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8fab6000 8faf2000   rdbss    rdbss.sys    Sat Jan 19 00:28:34 2008 (47918A82)
8faf2000 8fafc000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
8fafc000 8fb56000   csc      csc.sys      Sat Jan 19 00:28:54 2008 (47918A96)
8fb56000 8fb6d000   dfsc     dfsc.sys     Sat Jan 19 00:28:20 2008 (47918A74)
8fb6d000 8fb71ec0   avgmfx86 avgmfx86.sys Thu Jun 26 11:19:13 2008 (4863B371)
8fb72000 8fb87f00   avgldx86 avgldx86.sys Tue Jun 03 09:18:21 2008 (4845449D)
8fb88000 8fb9e660   P0630Vid P0630Vid.sys Sun Jun 05 21:44:04 2005 (42A3AA64)
8fb9f000 8fbabf00   STREAM   STREAM.SYS   Sat Jan 19 00:53:16 2008 (4791904C)
8fbac000 8fbe5000   mrxsmb10 mrxsmb10.sys Sat Jan 19 00:28:40 2008 (47918A88)
9020e000 90320c00   P0630EVX P0630EVX.SYS Mon Mar 29 23:20:22 2004 (4068E776)
90321000 9032a000   hidusb   hidusb.sys   Sat Jan 19 00:53:17 2008 (4791904D)
9032a000 9033a000   HIDCLASS HIDCLASS.SYS Sat Jan 19 00:53:16 2008 (4791904C)
9033a000 90343000   kbdhid   kbdhid.sys   Sat Jan 19 00:49:17 2008 (47918F5D)
90343000 9034b000   NuidFltr NuidFltr.sys Mon Jan 15 20:18:28 2007 (45AC27E4)
9034b000 90353000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
90353000 9035e000   point32k point32k.sys Wed Nov 08 02:02:38 2006 (4551810E)
9035e000 9036b000   crashdmp crashdmp.sys Sat Jan 19 00:49:43 2008 (47918F77)
9036b000 90376000   dump_dumpata dump_dumpata.sys Sat Jan 19 00:49:40 2008 (47918F74)
90376000 9037e000   dump_atapi dump_atapi.sys Sat Jan 19 00:49:40 2008 (47918F74)
9037e000 9038f000   dump_dumpfve dump_dumpfve.sys Sat Jan 19 00:27:05 2008 (47918A29)
9038f000 90399000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
90399000 903a8000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
903a8000 903c3000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
903cb000 903f2000   srv2     srv2.sys     Sat Jan 19 00:29:14 2008 (47918AAA)
95e40000 96041000   win32k   win32k.sys   unavailable (00000000)
96060000 96069000   TSDDD    TSDDD.dll    unavailable (00000000)
96080000 9608e000   cdd      cdd.dll      unavailable (00000000)
9c203000 9c2b2000   spsys    spsys.sys    Thu Jun 21 20:33:02 2007 (467B18BE)
9c2b2000 9c2c2000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
9c2c2000 9c2d5000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
9c2d5000 9c2de000   asyncmac asyncmac.sys Sat Jan 19 00:56:29 2008 (4791910D)
9c2de000 9c349000   HTTP     HTTP.sys     Sat Jan 19 00:55:21 2008 (479190C9)
9c349000 9c366000   srvnet   srvnet.sys   Sat Jan 19 00:29:11 2008 (47918AA7)
9c366000 9c37f000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
9c37f000 9c394000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
9c394000 9c3b4000   mrxdav   mrxdav.sys   Sat Jan 19 00:28:44 2008 (47918A8C)
9c3b4000 9c3d3000   mrxsmb   mrxsmb.sys   Sat Jan 19 00:28:33 2008 (47918A81)
9c3d3000 9c3eb000   mrxsmb20 mrxsmb20.sys Sat Jan 19 00:28:35 2008 (47918A83)
9d007000 9d053000   srv      srv.sys      Sat Jan 19 00:29:25 2008 (47918AB5)
9d053000 9d05a000   parvdm   parvdm.sys   Sat Jan 19 00:49:28 2008 (47918F68)
9d05a000 9d138000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
9d138000 9d142000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
9d142000 9d14e000   tcpipreg tcpipreg.sys Sat Jan 19 00:56:07 2008 (479190F7)
9d14e000 9d162580   WUDFRd   WUDFRd.sys   Sat Jan 19 00:53:04 2008 (47919040)
9d163000 9d175000   WUDFPf   WUDFPf.sys   Sat Jan 19 00:52:49 2008 (47919031)
9d175000 9d189000   avgwfpx  avgwfpx.sys  Fri May 16 03:57:55 2008 (482D3E83)
9d189000 9d19f000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)

Unloaded modules:
903c3000 903cb000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
89f14000 89f21000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
89f21000 89f2c000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
89f2c000 89f34000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
89f34000 89f45000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f9c8000 8f9d1000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f9b5000 8f9c8000   i8042prt.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8f60c000 8f6a8000   ctac32k.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
0: kd> !drvobj ffffffff85106828 f
81d20524: Unable to get value of ObpRootDirectoryObject
81d20524: Unable to get value of ObpRootDirectoryObject
Driver object (85106828) is for:
 \Driver\sbp2port
Driver Extension List: (id , addr)

Device Object list:
86a7c028  86a62028: Could not read device object


DriverEntry:   8a169005	sbp2port!GsDriverEntry
DriverStartIo: 8a161a8a	sbp2port!Sbp2StartIo
DriverUnload:  8a157e02	sbp2port!Sbp2Unload
AddDevice:     00000000	

Dispatch routines:
[00] IRP_MJ_CREATE                      8a15852e	sbp2port!Sbp2CreateClose
[01] IRP_MJ_CREATE_NAMED_PIPE           81c36fef	nt!IopInvalidDeviceRequest
[02] IRP_MJ_CLOSE                       8a15852e	sbp2port!Sbp2CreateClose
[03] IRP_MJ_READ                        81c36fef	nt!IopInvalidDeviceRequest
[04] IRP_MJ_WRITE                       81c36fef	nt!IopInvalidDeviceRequest
[05] IRP_MJ_QUERY_INFORMATION           81c36fef	nt!IopInvalidDeviceRequest
[06] IRP_MJ_SET_INFORMATION             81c36fef	nt!IopInvalidDeviceRequest
[07] IRP_MJ_QUERY_EA                    81c36fef	nt!IopInvalidDeviceRequest
[08] IRP_MJ_SET_EA                      81c36fef	nt!IopInvalidDeviceRequest
[09] IRP_MJ_FLUSH_BUFFERS               81c36fef	nt!IopInvalidDeviceRequest
[0a] IRP_MJ_QUERY_VOLUME_INFORMATION    81c36fef	nt!IopInvalidDeviceRequest
[0b] IRP_MJ_SET_VOLUME_INFORMATION      81c36fef	nt!IopInvalidDeviceRequest
[0c] IRP_MJ_DIRECTORY_CONTROL           81c36fef	nt!IopInvalidDeviceRequest
[0d] IRP_MJ_FILE_SYSTEM_CONTROL         81c36fef	nt!IopInvalidDeviceRequest
[0e] IRP_MJ_DEVICE_CONTROL              8a16660e	sbp2port!Sbp2DeviceControl
[0f] IRP_MJ_INTERNAL_DEVICE_CONTROL     8a16207c	sbp2port!Sbp2ScsiRequests
[10] IRP_MJ_SHUTDOWN                    81c36fef	nt!IopInvalidDeviceRequest
[11] IRP_MJ_LOCK_CONTROL                81c36fef	nt!IopInvalidDeviceRequest
[12] IRP_MJ_CLEANUP                     81c36fef	nt!IopInvalidDeviceRequest
[13] IRP_MJ_CREATE_MAILSLOT             81c36fef	nt!IopInvalidDeviceRequest
[14] IRP_MJ_QUERY_SECURITY              81c36fef	nt!IopInvalidDeviceRequest
[15] IRP_MJ_SET_SECURITY                81c36fef	nt!IopInvalidDeviceRequest
[16] IRP_MJ_POWER                       8a159ea0	sbp2port!Sbp2PowerControl
[17] IRP_MJ_SYSTEM_CONTROL              8a166340	sbp2port!Sbp2SystemControl
[18] IRP_MJ_DEVICE_CHANGE               81c36fef	nt!IopInvalidDeviceRequest
[19] IRP_MJ_QUERY_QUOTA                 81c36fef	nt!IopInvalidDeviceRequest
[1a] IRP_MJ_SET_QUOTA                   81c36fef	nt!IopInvalidDeviceRequest
[1b] IRP_MJ_PNP                         8a15aa9a	sbp2port!Sbp2PnpDeviceControl

0: kd> !devobj ffffffff86a7c028 f
81d20524: Unable to get value of ObpRootDirectoryObject
Device object (86a7c028) is for:
 <?} \Driver\sbp2port DriverObject 85106828
Current Irp 00000000 RefCount 0 Type 00000007 Flags 00001050
DevExt 86a7c0e0 DevObjExt 86a7d540 
AttachedDevice (Upper) 86a63540 \Driver\disk
Device queue is busy - Queue flink = blink

0: kd> !devstack 86a63540
  !DevObj   !DrvObj            !DevExt   ObjectName
  86a7d6d8  \Driver\partmgr    86a7d790  
Could not read nt!_DEVOBJ_EXTENSION.AttachedTo @ 86a7d978

If 'dt -ev nt!_DEVOBJ_EXTENSION*' shows multiple matches, do '.typeopt +8' and retry

0: kd> .typeopt +8
Type options : (0x8)  size
  0x00000008 - TYPEOPTS_MATCH_MAXSIZE

 kd> lmvm sbp2port
start    end        module name
8a156000 8a16c000   sbp2port   (pdb symbols)          c:\symbols\sbp2port.pdb\8EB3CD6A030D4759875C0EB542B952991\sbp2port.pdb
    Loaded symbol image file: sbp2port.sys
    Mapped memory image file: c:\symbols\sbp2port.sys\47918F7F16000\sbp2port.sys
    Image path: \SystemRoot\system32\DRIVERS\sbp2port.sys
    Image name: sbp2port.sys
    Timestamp:        Sat Jan 19 00:49:51 2008 (47918F7F)
    CheckSum:         0001E62A
    ImageSize:        00016000
    File version:     6.0.6001.18000
    Product version:  6.0.6001.18000
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0000.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     sbp2port.sys
    OriginalFilename: sbp2port.sys
    ProductVersion:   6.0.6001.18000
    FileVersion:      6.0.6001.18000 (longhorn_rtm.080118-1840)
    FileDescription:  SBP-2 Protocol Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> !devobj ffffffff86a7c028 f
81d20524: Unable to get value of ObpRootDirectoryObject
Device object (86a7c028) is for:
 <?} \Driver\sbp2port DriverObject 85106828
Current Irp 00000000 RefCount 0 Type 00000007 Flags 00001050
DevExt 86a7c0e0 DevObjExt 86a7d540 
AttachedDevice (Upper) 86a63540 \Driver\disk
Device queue is busy - Queue flink = blink
0: kd> !drvobj ffffffff85106828 f
81d20524: Unable to get value of ObpRootDirectoryObject
81d20524: Unable to get value of ObpRootDirectoryObject
Driver object (85106828) is for:
 \Driver\sbp2port
Driver Extension List: (id , addr)

Device Object list:
86a7c028  86a62028: Could not read device object


DriverEntry:   8a169005	sbp2port!GsDriverEntry
DriverStartIo: 8a161a8a	sbp2port!Sbp2StartIo
DriverUnload:  8a157e02	sbp2port!Sbp2Unload
AddDevice:     00000000	

Dispatch routines:
[00] IRP_MJ_CREATE                      8a15852e	sbp2port!Sbp2CreateClose
[01] IRP_MJ_CREATE_NAMED_PIPE           81c36fef	nt!IopInvalidDeviceRequest
[02] IRP_MJ_CLOSE                       8a15852e	sbp2port!Sbp2CreateClose
[03] IRP_MJ_READ                        81c36fef	nt!IopInvalidDeviceRequest
[04] IRP_MJ_WRITE                       81c36fef	nt!IopInvalidDeviceRequest
[05] IRP_MJ_QUERY_INFORMATION           81c36fef	nt!IopInvalidDeviceRequest
[06] IRP_MJ_SET_INFORMATION             81c36fef	nt!IopInvalidDeviceRequest
[07] IRP_MJ_QUERY_EA                    81c36fef	nt!IopInvalidDeviceRequest
[08] IRP_MJ_SET_EA                      81c36fef	nt!IopInvalidDeviceRequest
[09] IRP_MJ_FLUSH_BUFFERS               81c36fef	nt!IopInvalidDeviceRequest
[0a] IRP_MJ_QUERY_VOLUME_INFORMATION    81c36fef	nt!IopInvalidDeviceRequest
[0b] IRP_MJ_SET_VOLUME_INFORMATION      81c36fef	nt!IopInvalidDeviceRequest
[0c] IRP_MJ_DIRECTORY_CONTROL           81c36fef	nt!IopInvalidDeviceRequest
[0d] IRP_MJ_FILE_SYSTEM_CONTROL         81c36fef	nt!IopInvalidDeviceRequest
[0e] IRP_MJ_DEVICE_CONTROL              8a16660e	sbp2port!Sbp2DeviceControl
[0f] IRP_MJ_INTERNAL_DEVICE_CONTROL     8a16207c	sbp2port!Sbp2ScsiRequests
[10] IRP_MJ_SHUTDOWN                    81c36fef	nt!IopInvalidDeviceRequest
[11] IRP_MJ_LOCK_CONTROL                81c36fef	nt!IopInvalidDeviceRequest
[12] IRP_MJ_CLEANUP                     81c36fef	nt!IopInvalidDeviceRequest
[13] IRP_MJ_CREATE_MAILSLOT             81c36fef	nt!IopInvalidDeviceRequest
[14] IRP_MJ_QUERY_SECURITY              81c36fef	nt!IopInvalidDeviceRequest
[15] IRP_MJ_SET_SECURITY                81c36fef	nt!IopInvalidDeviceRequest
[16] IRP_MJ_POWER                       8a159ea0	sbp2port!Sbp2PowerControl
[17] IRP_MJ_SYSTEM_CONTROL              8a166340	sbp2port!Sbp2SystemControl
[18] IRP_MJ_DEVICE_CHANGE               81c36fef	nt!IopInvalidDeviceRequest
[19] IRP_MJ_QUERY_QUOTA                 81c36fef	nt!IopInvalidDeviceRequest
[1a] IRP_MJ_SET_QUOTA                   81c36fef	nt!IopInvalidDeviceRequest
[1b] IRP_MJ_PNP                         8a15aa9a	sbp2port!Sbp2PnpDeviceControl

.

Texas_guy · 07-21-2008, 04:46 AM

Good Work!

The Maxtor One Touch drive is just for backups. I'll un-plug it for a few days and see if I have any problems. I wish it had a power switch.

The HP psc 2510 USB Device is the printer - it has several memory card slots on it but I never use them.

When I try to install the service pack I get a message: "update does not apply to your system." Thoughts?

Thanks again.

Texas_guy

**jcgriff2** · 07-21-2008, 06:22 AM

Hi. . .

So far, the other mini kernel dumps have come up with the same 0x9f bugcheck w/ the 0x3 exception and do point at the sbp2port.sys driver. But I don't believe it is the driver at all causing problems.

When did you start getting BSODs? Were any pre-SP1?

Also... I am most interested in any updates (windows or manufacturer) that were applied between 7-18 and 7-20, as the first dump dated 7-18 and so far the 1st on the 19th are having symbol issues with the dbugger for the NT kernel module ntkrnlpa.exe meaning that the timestamp or signature is somehow not quite right. Please take note that the 1st dump processed was from 7-20 and all appears fine regarding the Vista NT modules.

Regards. . .

JC

.

ntkrpamp.pdb
81fca000 81ffd000 hal (deferred)

**jcgriff2** · 07-22-2008, 09:56 PM

Hi again...

I have the answer to one question that I had... there was an update to the Microsoft NT module - but during the various BSODs:

This from the 7-18-08-01 dump file:

Code:

81c00000 81fb9000   nt       T (no symbols)           
    Loaded symbol image file: ntkrnlpa.exe
    Image path: \SystemRoot\system32\ntkrnlpa.exe
    Image name: ntkrnlpa.exe
    Timestamp:        Sat Jan 19 00:30:58 2008 (47918B12)
    CheckSum:         00372038
    ImageSize:        003B9000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0

This from the 07-20-08-03 dump:

Code:

81c0b000 81fc4000   nt         (pdb symbols)          c:\symbols\ntkrpamp.pdb\BA057DABC623462B9EF1D336E0F6BDAD2\ntkrpamp.pdb
    Loaded symbol image file: ntkrpamp.exe
    Mapped memory image file: c:\symbols\ntkrnlpa.exe\4812BD713b9000\ntkrnlpa.exe
    Image path: ntkrpamp.exe
    Image name: ntkrpamp.exe
    Timestamp:        Sat Apr 26 01:28:17 2008 (4812BD71)
    CheckSum:         003772A9
    ImageSize:        003B9000
    File version:     6.0.6001.18063
    Product version:  6.0.6001.18063
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     ntkrpamp.exe
    OriginalFilename: ntkrpamp.exe
    ProductVersion:   6.0.6001.18063
    FileVersion:      6.0.6001.18063 (vistasp1_gdr.080425-1930)
    FileDescription:  NT Kernel & System
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

Regards. . .

jcgriff2

.

07-20-2008, 06:30 AM	#1 (permalink)
Texas_guy Registered User Join Date: Jul 2008 Posts: 3 OS: Vista Ultimate 32bit	Help with "Windows has recovered from unexpected shutdown" I am having a probelm very similar to this post: http://www.techsupportforum.com/microsoft-support/windows-vista-support/228258-help-windows-has-recovered-unexpected-shutdown.html I recently did a fresh install (new hard drive) of Vista Ultimate 32 bit onto my3 year old HP desktop. Everything works fine except....Several times per day I come to the computer to find it has shutdown (restarted). It gives me this message: Windows has recovered from an unexpected shutdown. Problem signature: Problem Event Name: BlueScreen OS Version: 6.0.6001.2.1.0.256.1 Locale ID: 1033 Additional information about the problem: BCCode: 9f BCP1: 00000003 BCP2: 86A7C028 BCP3: 86A63540 BCP4: 86122B78 OS Version: 6_0_6001 Service Pack: 1_0 Product: 256_1 Files that help describe the problem: C:\Windows\Minidump\Mini072008-01.dmp C:\Users\RBCKDC\AppData\Local\Temp\WER-15765062-0.sysdata.xml C:\Users\RBCKDC\AppData\Local\Temp\WEREC25.tmp.version.txt Read our privacy statement: http://go.microsoft.com/fwlink/?link...3&clcid=0x0409 I am attaching my Belarc Info and Minidump files. Please help! This is very annoying. Thanks! Last edited by jcgriff2 : 07-20-2008 at 07:29 AM. Reason: Removed attachment - contained Belarc

07-20-2008, 05:42 PM	#2 (permalink)
jcgriff2 Moderator, Microsoft Support Join Date: Sep 2007 Location: New Jersey, USA Posts: 4,643 OS: Vista SP1 x64, x86 / XP SP3 Pro, Media, Home, / Win 95 / DOS / IBM 390 TSO/ISPF My System	Re: Help with "Windows has recovered from unexpected shutdown" Hi Texas Guy. . . The BSOD bugcheck (STOP error code) per your post is: 0x0000009f (0x00000003, 0x86a7c028, 0x86a63540, 0x86122b78). The 0x9f indicates that a device driver is having an issue with power management. The other parameters should be memory addresses and will hopefully lead me to the device/driver causing the problem. Two items, please - there was one lone mini dump in the zip file - do you have more? Also, please run msinfo32 and save as an NFO (system info file - important). Zip up any other dump files and the msinfo32 NFO file and attach to your next post. To run msinfo32 - START \| type msinfo32 into the start search box \| right-click on msinfo32 above \| run as admin \| save as NFO file - you'll see the default option. Any ? - please let me know. Regards. . . jcgriff2 . __________________ SysInternals Suite • BSOD Bugchecks • Media Fire • Belarc Advisor • MS TechNet • MS NTDE/CPR MSDN Err Cds • Everest Home v2.20 • CCleaner • Memtest86+ • MS Help & Support Live SysInternals AutoRuns • Auslogics Defrag • McAfee RT • Norton RT • Kaspersky RT • MS One Care RT If you were expecting a reply from me and I have not yet done so, please send me a PM with a link to your thread.

07-20-2008, 06:32 PM	#4 (permalink)
jcgriff2 Moderator, Microsoft Support Join Date: Sep 2007 Location: New Jersey, USA Posts: 4,643 OS: Vista SP1 x64, x86 / XP SP3 Pro, Media, Home, / Win 95 / DOS / IBM 390 TSO/ISPF My System	Re: Help with "Windows has recovered from unexpected shutdown" Downloading now. I am going through the first dump now. JC . __________________ SysInternals Suite • BSOD Bugchecks • Media Fire • Belarc Advisor • MS TechNet • MS NTDE/CPR MSDN Err Cds • Everest Home v2.20 • CCleaner • Memtest86+ • MS Help & Support Live SysInternals AutoRuns • Auslogics Defrag • McAfee RT • Norton RT • Kaspersky RT • MS One Care RT If you were expecting a reply from me and I have not yet done so, please send me a PM with a link to your thread.

07-21-2008, 04:46 AM	#6 (permalink)
Texas_guy Registered User Join Date: Jul 2008 Posts: 3 OS: Vista Ultimate 32bit	Re: Help with "Windows has recovered from unexpected shutdown" Good Work! The Maxtor One Touch drive is just for backups. I'll un-plug it for a few days and see if I have any problems. I wish it had a power switch. The HP psc 2510 USB Device is the printer - it has several memory card slots on it but I never use them. When I try to install the service pack I get a message: "update does not apply to your system." Thoughts? Thanks again. Texas_guy Last edited by Texas_guy : 07-21-2008 at 04:56 AM.

07-21-2008, 06:22 AM	#7 (permalink)
jcgriff2 Moderator, Microsoft Support Join Date: Sep 2007 Location: New Jersey, USA Posts: 4,643 OS: Vista SP1 x64, x86 / XP SP3 Pro, Media, Home, / Win 95 / DOS / IBM 390 TSO/ISPF My System	Re: Help with "Windows has recovered from unexpected shutdown" Hi. . . So far, the other mini kernel dumps have come up with the same 0x9f bugcheck w/ the 0x3 exception and do point at the sbp2port.sys driver. But I don't believe it is the driver at all causing problems. When did you start getting BSODs? Were any pre-SP1? Also... I am most interested in any updates (windows or manufacturer) that were applied between 7-18 and 7-20, as the first dump dated 7-18 and so far the 1st on the 19th are having symbol issues with the dbugger for the NT kernel module ntkrnlpa.exe meaning that the timestamp or signature is somehow not quite right. Please take note that the 1st dump processed was from 7-20 and all appears fine regarding the Vista NT modules. Regards. . . JC . ntkrpamp.pdb 81fca000 81ffd000 hal (deferred) __________________ SysInternals Suite • BSOD Bugchecks • Media Fire • Belarc Advisor • MS TechNet • MS NTDE/CPR MSDN Err Cds • Everest Home v2.20 • CCleaner • Memtest86+ • MS Help & Support Live SysInternals AutoRuns • Auslogics Defrag • McAfee RT • Norton RT • Kaspersky RT • MS One Care RT If you were expecting a reply from me and I have not yet done so, please send me a PM with a link to your thread.