We help IT Professionals succeed at work.

windows 7 shutdown crashes with bsod

TheMetalicOne asked
I have a Lenovo T61 that crashes with the BSOD after about 4 minutes when I shut down. I get the BSOD error:

A problem has been detected and Windows has been shut down to prevent damage
to your computer.

The problem seems to be caused by the following file: ntkrnlpa.exe


If this is the first time you've seen this stop error screen,
restart your computer. If this screen appears again, follow
these steps:

Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows updates you might need.

If problems continue, disable or remove any newly installed hardware
or software. Disable BIOS memory options such as caching or shadowing.
If you need to use safe mode to remove or disable components, restart
your computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.

Technical Information:

*** STOP: 0x0000009f (0x00000004, 0x00000258, 0x84e8aa70, 0x8078adf4)

*** ntkrnlpa.exe - Address 0x82c82966 base at 0x82c1b000 DateStamp 0x4b88cacf

I downloaded a BSOD debugger and it says the following drivers are the culprit:

halmacpi.dll      halmacpi.dll+5b48      0x8302b000      0x83062000      0x00037000      0x4a5bbf07      7/13/2009 7:11:03 PM      Microsoft® Windows® Operating System      Hardware Abstraction Layer DLL      6.1.7600.16385 (win7_rtm.090713-1255)      Microsoft Corporation      C:\Windows\system32\halmacpi.dll      
ntkrnlpa.exe      ntkrnlpa.exe+67966      0x82c1b000      0x8302b000      0x00410000      0x4b88cacf      2/27/2010 3:33:35 AM      Microsoft® Windows® Operating System      NT Kernel & System      6.1.7600.16539 (win7_gdr.100226-1909)      Microsoft Corporation      C:\Windows\system32\ntkrnlpa.exe      
Wdf01000.sys      Wdf01000.sys+35824      0x88a00000      0x88a71000      0x00071000      0x4a5bbf28      7/13/2009 7:11:36 PM      Microsoft® Windows® Operating System      Kernel Mode Driver Framework Runtime      1.9.7600.16385 (win7_rtm.090713-1255)      Microsoft Corporation      C:\Windows\system32\drivers\Wdf01000.sys      

Any advice is much appreciated. Thanks
Watch Question

Is this an upgrade to Win7?

It could be anything from a driver to an installed program. Do you have any network programs like a VPN client?
I wonder if running Who Crashed:
on your Dump File may help figure out what is going on. Give it a shot.
Top Expert 2013

can you test if it runs ok if you boot from a bootable cd, like Knoppix : ftp://ftp.kernel.org/pub/dist/knoppix/KNOPPIX_V5.0.1CD-2006-06-01-EN.iso        


No, this was not an upgrade. It was a fresh install. It's been running fine for 6+ months. This thing started to happen a few weeks back.

I do have a VPN client installed. I'll try deleting it.
Let me know how that goes. While the error code could be any driver I've seen vpn clients installing a network driver that can cause this.