BSOD when waking from sleep

noobitech

Reputable
Sep 22, 2014
14
0
4,510

noobitech

Reputable
Sep 22, 2014
14
0
4,510
I would still say the files are corrupt. But if you havent defragged this for a while if its not SSD defrag it.

I would also remove AIcharger, it can cause crashes

excsd.sys maybe the cause of this crash. It looks like expresscache whatever this is can cause it. This maybe a lenovo based file / program

A similar prob is here. With the same issue

http://answers.microsoft.com/en-us/windows/forum/windows_8-performance/windows-8-cannot-wake-from-sleep-and-gives-driver/1f6e3401-f0cc-4309-97bf-acb443116857 relating to this file down the bottom

But if you defrag it and get nfts stop errors again, you may have to replace the hdd to fix it

NETwbw02.sys is also crashing update the wireless network adapter drivers

 

noobitech

Reputable
Sep 22, 2014
14
0
4,510


Thanks Paul, I have run the tdsskiller without any faults picked up. I have uninstalled expresscache and will be monitoring the status of my laptop to see if the problem surface again.
 
also confirm a malwarbytes scan does not turn up malware.
-------
the memory image is corrupted, but will see what I can figure out.

start by removing this
\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys Thu Jul 02 02:13:26 2009

looks like the memory image was corrupted when it got read back from the hard drive.
I would be updating any drivers from you motherboard vendor. BIOS, chipset, and storage drivers. and test the drive for errors
 
Looks like hiber_iaStorA.sys is crashing with win32k.sys and ntoskrnl.exe.

See if there are any updates for your SATA drivers. Or Intel rapid storage drivers

Theyre crashing the system

Theres a few screwed up files on the hdd with no names

個櫵㯆벪��鞽⩬ᐌ쯰␖䳲紩ጪꔎὖᥝ냚뭵�Ꙓ濍଎≋摮벎쥣➩뭎䠉�〈 is one of them

and 羌㺈フ羌罠륑爫쁛颽ᓿ틋噃袴柏ꩡ཈嵜咿ꌂ�攳⠵ꠅꠥꠅ畎큧苓ꮽ咮轰銯䱸䁅

And Unknown_Module_fffff800`b6fbf000

Theres like 35-40 unknown files, some like the above like Chinese characters

If I were you I would replace the hdd

 

noobitech

Reputable
Sep 22, 2014
14
0
4,510


Just before I send it back to Asus for the problem as a last resort as not having a laptop to use for weeks is really inconvenient, I want to ask if updating the BIOS version provided on the asus support for my laptop model might help?

http://www.asus.com/sg/Notebooks_Ultrabooks/ASUS_ZENBOOK_UX302LG/HelpDesk_Download/

For the windows 8.1 64bit version under bios, the latest BIOS version 210, it had the description of "Disable the SATA Device Sleep in PORT 0/1/2." Is this a possible cause for my BSOD when waking from sleep?

If so, may I ask how I can go about updating the BIOS. I've downloaded the zip file but the file inside cannot be directly opened.

Thanks a lot once again!
 
I dont think so. Because you were getting ntfs stop errors the hdd is probably corrupt. It needs replacing. A BIOS update wont fix a corrupt hdd

I would say Express cache had something to do it crashing when it comes out of sleep. Like what it said in the link I posted about it

I think you have to download the BIOS utility as well. Its under BIOS on the ASUS site. Then run it, you may have to load the BIOS into it
 
update the BIOS, I saw the memory corruption in the debug image. The corruption is most likely only in the memory image not in the actual files on the hard drive. The bug should be in the BIOS, or maybe the cpu chipset drivers (for the sata controller) If the actual files on the hard drive were corrupted, you would be getting a bugcheck on a cold boot rather than on resume from a low power state.




 

noobitech

Reputable
Sep 22, 2014
14
0
4,510


Sorry for the late response. I've been very busy lately.

I have updated my bios. Hopefully it will resolve the issue as I still encountered BSOD after uninstalling expresscache.
 
Sorry, this is not much help but your system is much better with the BIOS update. The fact that asus turned off sleep on the SATA ports may indicate they have some problems in their electronics circuits.
-----------

overall, I would make sure I have all the windows 8.1 updates installed and all the ASUS 8.1 drivers installed. and I would remove the AiCHarger.sys (just because of bugs on other systems I have seen. It may be fine on your system)

if you can please change your memory dump from a minidump to kernel memory dump.
and use verifier.exe to turn on debugging info.

http://www.sevenforums.com/crash-lockup-debug-how/65331-using-driver-verifier-identify-issues-drivers.html



remove this driver
AiCharger.sys Thu Sep 22 19:04:40 2011

- second bugcheck looks like a program was trying to unblank the display and sent bad values and cause a crash. you have a custom asus driver
C:\Program Files\ASUS\P4G\plctrl.sys Wed Jul 10 20:23:44 2013
I would look for a update.

well, the BIOS update turned off sleep mode for your SATA ports and now the memory image is not corrupted on disk. So that is very good progress. I am looking at your bugcheck 24NTFS_FILE_SYSTEM (24)
and it looks like a metro subsystem problem trying at access the filesystem with bad addresses.

I will look at the other bugcheck.




 

noobitech

Reputable
Sep 22, 2014
14
0
4,510
Hi John, thanks for the quick reply. I realized that I actually do have the kernel dump files for the most recent crash and have provided the link to it below. Hopefully this can provide better insight into the cause of the crashes. Thanks!

https://www.dropbox.com/s/xzvn23fll15b5n2/MEMORY.DMP?dl=0




 
new bugcheck 24 indicates AiCharger.sys
\SystemRoot\system32\DRIVERS\AiCharger.sys Thu Sep 22 19:04:40 2011

as the problem.
pick up the 2014 update from the asus site, install reboot and see if your problem goes away.
-------------
you might consider removing Asus instant on program running on your computer
InsOnWMI.exe it does some custom hybrid type of sleep function. It could have bugs
-------------
make sure armsvc.exe is you adobe update service and not a trojan
run malwarebytes scan





--------------------
downloading the new memory dump now.
I looked at the asus site for your system, there is a new aicharger.sys in the utilities section
dated this year. The older version tended to corrupt driver memory. You should remove it or update the driver. Take a list of the utilities and remove any that you don't use or update any that have a update. if you have the power4gear running you should update the drivers or remove it to see if it is the root cause of your problem.
 

noobitech

Reputable
Sep 22, 2014
14
0
4,510
Thanks John. I have uninstalled the Power4Gear and updated the AIcharger driver. Will keep you informed of the performance over the next few days.



 

noobitech

Reputable
Sep 22, 2014
14
0
4,510


The laptop just crashed again. I have uninstalled AICharger since then.

https://onedrive.live.com/redir?resid=25D27474E8ACEF8A!1109&authkey=!AD7SYR7eoi8Vg5Q&ithint=file%2cdmp

----
edit: and again even after AIcharger is uninstalled.

https://onedrive.live.com/redir?resid=25D27474E8ACEF8A!1109&authkey=!AD7SYR7eoi8Vg5Q&ithint=file%2cdmp

---
Edit2: And again... This time is a new error on NETIO.sys or something.

https://onedrive.live.com/redir?resid=25D27474E8ACEF8A!1122&authkey=!AIzzTtttEMi0Yck&ithint=file%2cdmp

---
Edit3: And again... this is starting to get on my nerves..

https://onedrive.live.com/redir?resid=25D27474E8ACEF8A!1123&authkey=!AFCz2eihB6_IV7Q&ithint=file%2cdmp
 
from what I can tell your system is lacking all of the custom Asus driver updates for your system dated after 8/22/2013
go down the list and install them and reboot
http://www.asus.com/Notebooks_Ultrabooks/ASUS_ZENBOOK_UX302LG/HelpDesk_Download/
I think one of the old asus drivers is stomping on some of windows kernel memory structure.
It is more likely a direct root cause of your various failures.
most likely because of the type of failure, it will not be your actual hard drive. (the input output from the drive did not fail, the data stored in memory was corrupted, easy to do with a bad driver)



BugCheck 7A, {1, ffffffffc0000005, ffffe0013530b900, fffff6fac000c000}
KERNEL_DATA_INPAGE_ERROR (7a)

the current process was sdiagnhost.exe (it think it is Microsoft scripted host diagnostics)
basically the system keeps a map of how it maps your physical RAM to your pagefile.sys
and the map was corrupted so the virtual address it got from the table was invalid and the system called a bugcheck.

the system tried to page from address fffff6fac000c000 but could not because it is a invalid pagetable entry



for a error like this you would confirm memtest86 works on its own boot disk.
if it does run without failures then you have to:
run verifier.exe and set global debugging flags
see http://www.sevenforums.com/crash-lockup-debug-how/65331-using-driver-verifier-identify-issues-drivers.html
then set your memory dump from a mini dump to a kernel or full memory dump
reboot and wait for the next bugcheck
with a mini dump the proper debugging info is just not saved to figure out the cause of the bad page table entry.

verifier.exe may catch a process that is corrupting the page table entry (if it is a driver corruption), or it can be faulty hardware

-------------
looking at your driver list you might remove this file
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys Thu Jul 02 02:13:26 2009
it is a asus hot key driver. it is very old. the rest of your drivers have a reasonable file date.

you have the driver
\SystemRoot\system32\drivers\AmPeStor.sys Mon Oct 07 02:18:33 2013
Alocr Micro PCIE Card Reader Driver. there is a update to the driver on the asus website
this driver is not in widespread use. install the 2014 update under card readers
http://www.asus.com/Notebooks_Ultrabooks/ASUS_ZENBOOK_UX302LG/HelpDesk_Download/

also update your asustp.sys (asus touchpad driver) lots of bugchecks caused by the version you are running
\SystemRoot\System32\drivers\AsusTP.sys Tue Sep 17 02:28:40 2013
get the version dated 4/24/2014 on the asus website.

Look through the list of updates on the asus website. your system files are mostly from 2013 but asus has more current driver fixes. Any of these older drivers could corrupt memory of the other drivers and cause your failures.

basically it looks like you need all of the asus updates dated after 8/22/2013







 

noobitech

Reputable
Sep 22, 2014
14
0
4,510
Hi,

Thanks for the detailed explanation. I have updated the drivers for asus trackpad and PCIE card reader.

Pardon my ignorance, but I've just realized the difference between sleep and hibernate. Apparently my laptop has been fluctuating between "sleep" and "hibernation" whenever I put my laptop to "sleep". And the BSOD occurs only when the laptop resumes from "hibernation" mode.

And my laptop comes with 16GB SSD cache drive which I suspect is the one causing the problems when the laptop resumes from hibernation. Is there any diagnostic tests I can do to confirm my suspicion?

Thanks!