Windows 10: BSOD/crashes occur when computer sleeps

New laptop with Windows 10. After about a week I noticed system crashing. Seemed to occur after the computer had gone to sleep. Possibly related to Malwarebytes scan being run as it occurred a few times right after the scan had finished and then the computer went to sleep. Would have to restart the computer and I could see that Windows had not shut down properly/had stopped working. Problem details showed "The computer has rebooted from a bugcheck. The bugcheck was: 0x0000009f etc." Happened several times over the next few days. Googling led me to believe it was a driver issue so I updated some drivers (Wi-Fi adapter, Audio) but the problem persisted. Did a complete Refresh and ran the system pretty much untouched and things were good for 3 days until today when the crash again occurred.

The DM Log Collector file is attached. I appreciate the help.

:)

 

BSOD: System_Service_Exception .DMP file included

Rarely ever put the computer in sleep mode, the crashes occur when i'm using the computer

 

Blue Screen die (BSOD), Windows 10 Professional Laptop Machine

I can confirm that this problem would occur every time I wake the computer up from sleep mode.

After a few seconds waking up from sleep mode, the computer will freeze and then BSOD occurs

Very annoying.

 

Hello Bruce.

I looked at the dump file and it points out that you have an issue with the Wi-Fi adapter. Even though you say you've tried to update I'd still like for you to head to HP support and download the drivers for your WiFi adapter, in your case it will be the Realtek RTL8188EE:
HP Notebook - 15-f337wm

Oh and by the way please update your "My System Specs" tab!

Cheers, Boris *Smile

 

Would the dump file/log show anything related to the Malwarebytes scan causing an issue? I believe I have isolated the problem to occurring either during or after a Malwarebytes scan is run. Today after the scan completed and probably when the computer would go to sleep the computer would not respond. Had to do a hard restart. The behavior was slightly different then before and the event log only showed "Windows was not properly shut down". Previously it also showed "Windows stopped working" and "Shut down unexpectedly".

I ran the tool again and am attaching the .zip file but I don't think a dump file was created so it may still be the one from yesterday. I have not yet updated the Wi-Fi adapter. As I mentioned in my OP I did update it from HP's site and the crashes still occurred. I then did the Refresh. I wonder if I should get it direct from Realtek?

 

Hello Bruce, sorry for the late reply.

Well if it was Malwarebytes that caused the crash then there should have been a driver from MB in the dump but considering that the BSOD you got was a DRIVER_POWER_STATE_FAILURE, maybe when running MB it would scan the driver of the WiFi adapter and cause this crash.

This is the closest I've come to find your driver:
RTL8188CE

Cheers, Boris *Smile

 

There is only a sudden shutdown event logged, any bugchecks haven't been saved at all.

Boris and mine thoughts about that are opposite, I wouldn't recommend it.

Possibly, unfortunately I can't look up the dates of the drivers so I have a few straight suggestions.
1. Remove Malwarebytes and reinstall it, https://support.malwarebytes.org/cus...5311?b_id=6438
2. Update Malwarebytes manually, download from Malwarebytes | Free Anti-Malware & Internet Security Software and install overtop to see if that helps. Installing overtop normally doesn't affect the program, but a reboot after overtop installation should fix problems that have occured due to overtop installation (a reboot is always recommended after overtop installation even if you didn't notice any problems). If you experience problems after reboot a removal and installation is required.

Code: fffff801`5dbd0000 fffff801`5dbe1000 vwifimp.sys fffff801`5dbb0000 fffff801`5dbc1000 vwifimp.sys fffff801`5db30000 fffff801`5db41000 vwifimp.sys fffff801`5db10000 fffff801`5db23000 mwac.sys fffff801`5dad0000 fffff801`5db03000 MBAMSwissArm fffff801`5dab0000 fffff801`5dac1000 vwifimp.sys fffff801`5da90000 fffff801`5daa3000 mwac.sys fffff801`5da50000 fffff801`5da83000 MBAMSwissArm fffff801`5d9d0000 fffff801`5d9e1000 vwifimp.sys fffff801`5da30000 fffff801`5da43000 mwac.sys fffff801`5d9f0000 fffff801`5da23000 MBAMSwissArm fffff801`5d9b0000 fffff801`5d9c3000 mwac.sys fffff801`5d970000 fffff801`5d9a3000 MBAMSwissArm fffff801`5d8f0000 fffff801`5d901000 vwifimp.sys fffff801`5d950000 fffff801`5d963000 mwac.sys fffff801`5d910000 fffff801`5d943000 MBAMSwissArm fffff801`5d880000 fffff801`5d893000 mwac.sys fffff801`5d840000 fffff801`5d873000 MBAMSwissArm fffff801`5d8a0000 fffff801`5d8b1000 vwifimp.sys fffff801`5d7f0000 fffff801`5d801000 hidusb.sys fffff801`5d810000 fffff801`5d81c000 MTConfig.sys fffff801`5d820000 fffff801`5d831000 vwifimp.sys fffff801`5d7d0000 fffff801`5d7e3000 mwac.sys fffff801`5d750000 fffff801`5d783000 MBAMSwissArm fffff801`5d7b0000 fffff801`5d7c1000 vwifimp.sys fffff801`5d680000 fffff801`5d691000 hidusb.sys fffff801`5d6a0000 fffff801`5d6ac000 MTConfig.sys fffff801`5d790000 fffff801`5d7a3000 mwac.sys fffff801`5d6d0000 fffff801`5d6e1000 vwifimp.sys fffff801`5d730000 fffff801`5d743000 mwac.sys fffff801`5d6f0000 fffff801`5d723000 MBAMSwissArm fffff801`5d660000 fffff801`5d673000 mwac.sys fffff801`5d620000 fffff801`5d653000 MBAMSwissArm fffff801`5d6b0000 fffff801`5d6c1000 vwifimp.sys fffff801`5d600000 fffff801`5d611000 vwifimp.sys fffff801`5d5d0000 fffff801`5d5e1000 hidusb.sys fffff801`5d5f0000 fffff801`5d5fc000 MTConfig.sys fffff801`5d5b0000 fffff801`5d5c3000 mwac.sys fffff801`5d570000 fffff801`5d5a3000 MBAMSwissArm fffff801`59cd0000 fffff801`59ce1000 hidusb.sys fffff801`59cf0000 fffff801`59cfc000 MTConfig.sys fffff801`5d4d0000 fffff801`5d4e1000 vwifimp.sys fffff801`5aa20000 fffff801`5aa33000 mwac.sys fffff801`5aa40000 fffff801`5aa73000 MBAMSwissArm fffff801`5d560000 fffff801`5d567000 ActiveHealth fffff801`5d550000 fffff801`5d55c000 MSPQM.sys fffff801`5a9c0000 fffff801`5a9cc000 MSPQM.sys fffff801`5a9f0000 fffff801`5aa12000 WdNisDrv.sys fffff801`593d0000 fffff801`593df000 dump_storpor fffff801`58600000 fffff801`5861f000 dump_amdsata[/quote]

 

No worries. We have a seven hour time difference. I appreciate your help with this.

I did some more troubleshooting and while its possible it is related to Malwarebytes I wonder if it could be related to Automatic Maintenance. Here is what I did: I ran a MBAM scan and when finished I manually put the computer to sleep and all was fine. I then ran another MBAM scan but this time let the computer sit and go to sleep on its own. As it was trying to sleep it crashed. As it has done before. Event details showed all three typical messages as I have previously seen. When I checked Security and Maintenance I noticed that Automatic Maintenance ran four minutes before Windows was not properly shutdown/stopped working/shut down unexpectedly. So the maintenance ran after the MBAM scan was finished and before the computer attempted to sleep. Perhaps this was a coincidence.

I believe there is a new Dump File related to the latest crash and I have attached the .zip file from the tool.

Since I am not reading these files I would ask when you see "DRIVER_POWER_STATE FAILURE" does that specifically refer to the Wi-Fi driver? I have seen some dump files where it looks as if the driver is identified by name (e.g. Wi-Fi, Audio etc.), perhaps you didn't mention it.

 

Thank you for your reply. I was responding to Boris when I saw it so some of my response to him may apply to your thoughts as well. In the code you posted (which I did not copy here) I see several instances of Malwarebytes, so is it your feeling that the crashes are related to the program somehow? That is what I am thinking although the Automatic Maintenance aspect I mentioned may be playing a part. I did attach a new .zip file in my reply above which I think has the latest dump file. Curious if you still see the same instances of Malwarebytes causing issues.

I do plan to uninstall and reinstall the program though I will say that after doing a Refresh where the OS was reinstalled I did have to reinstall Malwarebytes and it seemed to again cause the issue. Coincidentally or not there is a new version of MBAM available so I think I will install that version after I uninstall/clean out the current version. Its all curious to me as I have run MBAM for years on many different computers and never had an issue like this, if indeed it is causing the crashes.

My final question would be do you then not think it is related to the Wi-Fi driver? As I had mentioned I did update the driver and I still had the crash issue. This was before I Refreshed the computer. Since the Refresh I have not updated the driver yet. I appreciate your help with this.

 

Possibly, can't say with much certainty but I believe so.

The newest dump looks pretty much the same as the other, but less Malwarebytes drivers.

Many users expected a new release of MBAM for quite some time, including myself. I wouldn't call it coincidence.
Unfortunately such things can happen at anytime for no clear reason to the user, although Windows 10 is less than a year old thus still new, I don't think it is fair to compare other OS with Windows 10 due to their stability. I've had recently a BSOD, looked a bit like yours although the bugcheck was different and the why was of course also different, it blamed the network drivers but I decided to clean reinstall malwarebytes because I saw a few things about it. Since updating to the newest version I have not yet had any problems anywhere on my system.

I've often seen it happen that security programs are the root cause when network drivers are being marked as the cause.

 

I was about to say this sounds promising when I realized that I am already running the new version of MBAM on this computer. Now I am really stumped. I did a Refresh of the OS and reinstalled the new version of MBAM and I still am having this issue.

 

Configure your settings to never go into sleep by itself, or don't scan your pc before it goes to sleep.

Let us know how it goes with either of them *Smile

 

I would like you to run the following Bruce:

Right click on Windows start key in left bottom corner -> Select Command Prompt(Admin) -> type this: sfc /scannow

Just noticed that the dumps are complaining about the Windows native WiFi driver.

 

It just crashed as it tried to sleep and this was 12 hours after the last MBAM scan had run and after the computer had been asleep for nine hours before I woke it up and used it for a little while. As it tried to sleep it crashed. I attached the .zip file which will include the latest dump file but I am sure it will be the same as the others.

I am not sure if it is MBAM itself, a MBAM scan or something else causing the crashes but I have never experienced anything like this and with the way I use my computer I need it to go to sleep. To have to contantly restart the computer and see the reliability of the computer plummet is disappointing. If someone has some other thoughts I will gladly listen.

edit: Since the restart after the crash the computer has successfully gone to sleep two times. It will sleep successfully until it doesn't and crashes. What is the trigger for this is the question.

 

An update for the Realtek RT8188EE network drivers is available since yesterday.
HP Software and Driver Downloads for HP Printers, Laptops, Desktops and More | HP® Customer Support

Code: 0: kd> !irp ffffe000`595cd3c0 Irp is active with 5 stacks 3 is current (= 0xffffe000595cd520) No Mdl: No System Buffer: Thread 00000000: Irp stack trace. cmd flg cl Device File Completion-Context [N/A(0), N/A(0)] 0 0 00000000 00000000 00000000-00000000 Args: 00000000 00000000 00000000 00000000 [N/A(0), N/A(0)] 0 0 00000000 00000000 00000000-00000000 Args: 00000000 00000000 00000000 00000000 >[IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)] 0 0 ffffe0005aa97050 00000000 00000000-00000000 Unable to load image \SystemRoot\system32\DRIVERS\rtwlane.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for rtwlane.sys *** ERROR: Module load completed but symbols could not be loaded for rtwlane.sys \Driver\RTWlanE Args: 00014400 00000000 00000004 00000002 [IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)] 0 e1 ffffe0005aa84040 00000000 fffff8032182af8c-ffffe00058caac60 Success Error Cancel pending \Driver\vwifibus nt!PopSystemIrpCompletion Args: 00014400 00000000 00000004 00000002 [N/A(0), N/A(0)] 0 0 00000000 00000000 00000000-ffffe00058caac60 Args: 00000000 00000000 00000000 00000000 0: kd> !devobj ffffe0005aa97050 Device object (ffffe0005aa97050) is for: InfoMask field not found for _OBJECT_HEADER at ffffe0005aa97020 \Driver\RTWlanE DriverObject ffffe0005ab0ae60 Current Irp 00000000 RefCount 0 Type 00000017 Flags 00002050 Dacl ffffc102d3052f51 DevExt ffffe0005aa971a0 DevObjExt ffffe0005aa98798 ExtensionFlags (0x00000800) DOE_DEFAULT_SD_PRESENT Characteristics (0x00000100) FILE_DEVICE_SECURE_OPEN AttachedDevice (Upper) ffffe0005aa84040 \Driver\vwifibus AttachedTo (Lower) ffffe0005a252cf0 \Driver\ACPI Device queue is not busy. 0: kd> lmvm rtwlane Browse full module list start end module name fffff800`23eb0000 fffff800`24334000 rtwlane T (no symbols) Loaded symbol image file: rtwlane.sys Image path: \SystemRoot\system32\DRIVERS\rtwlane.sys Image name: rtwlane.sys Browse all global symbols functions data Timestamp: Tue Jul 21 15:28:46 2015 (55AE490E) CheckSum: 00471091 ImageSize: 00484000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/quote]