Windows 7 Blue Screen of Death minidump analysis request

Greetings wise wizards of EE:

I am helping a friend with a Dell Windows 7 laptop, which produces the dreaded Blue Screen of Death shortly after the Microsoft Windows "splash" screen, right before the desktop appears.

All methods to restore this machine via the built-in recovery tools (such as System Restore) have failed, so I pulled the hard drive and connected it to a healthy computer via a USB to SATA adapter. I am backing up his data, and I recovered the latest Minidump file from the C:\Windows\Minidump folder.

I am requesting an analysis of the attached Minidump file, so that I may properly tackle his dilemma, once the cause has been determined. Though I am grateful for all assistance, I would ask for a specific analysis of the attached Minidump file, rather than just general security or maintenance advice.

Many thanks in advance,

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

The dump analysis is below...

A link to MS codes related to the dump is here:

Looks  like a bad driver...
Did you try booting into SAFE MODE?

Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (
Online Crash Dump Analysis Service
See for more information
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`03652000 PsLoadedModuleList = 0xfffff800`03895670
Debug session time: Sat Jul  6 00:16:04.634 2013 (UTC - 4:00)
System Uptime: 0 days 18:09:03.680
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
Arg2: 0000000000000258, Timeout in seconds.
Arg3: fffffa8007277040, The thread currently holding on to the Pnp lock.
Arg4: fffff80000b9c510, nt!TRIAGE_9F_PNP on Win7

Debugging Details:

Implicit thread is now fffffa80`07277040
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2


FAULTING_THREAD:  fffffa8007277040






LAST_CONTROL_TRANSFER:  from fffff800036bd612 to fffff800036caa7a

fffff880`033a8580 fffff800`036bd612 : fffffa80`07277040 fffffa80`07277040 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x7a
fffff880`033a86c0 fffff800`036ca0da : fffff8a0`00001910 00000000`00000dec fffff8a0`00000000 00000000`00000200 : nt!KiCommitThreadWait+0x1d2
fffff880`033a8750 fffff800`03935404 : fffffa80`00000003 fffff880`033a8a68 00000000`00000001 fffffa80`00000000 : nt!KeWaitForMultipleObjects+0x272
fffff880`033a8a10 fffff800`03a6a079 : 00000000`00000000 fffffa80`0b00ed90 fffff8a0`0e158010 00000000`00000000 : nt!PnpNotifyUserMode+0x158
fffff880`033a8a90 fffff800`03b450d1 : 00000000`00000000 00000000`00000000 fffff8a0`0e158010 00000000`00000000 : nt!PnpNotifyUserModeDeviceRemoval+0x49
fffff880`033a8ae0 fffff800`03b4580c : fffff880`033a8cb8 00000000`00000000 fffff8a0`04b01900 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0xb51
fffff880`033a8c20 fffff800`03a2e9ae : 00000000`00000000 fffffa80`0df40110 fffff8a0`0e158010 00000000`00000001 : nt!PnpProcessTargetDeviceEvent+0x4c
fffff880`033a8c50 fffff800`036d1251 : fffff800`03934b98 fffff8a0`0e158010 fffff800`0386d2d8 fffffa80`07277040 : nt! ?? ::NNGAKEGL::`string'+0x552ab
fffff880`033a8cb0 fffff800`03965ede : 00000000`00000000 fffffa80`07277040 00000000`00000080 fffffa80`07264740 : nt!ExpWorkerThread+0x111
fffff880`033a8d40 fffff800`036b8906 : fffff880`031d5180 fffffa80`07277040 fffff880`031dffc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`033a8d80 00000000`00000000 : fffff880`033a9000 fffff880`033a3000 fffff880`033a75f0 00000000`00000000 : nt!KiStartSystemThread+0x16

STACK_COMMAND:  .thread 0xfffffa8007277040 ; kb

fffff800`036caa7a 488d8c2400010000 lea     rcx,[rsp+100h]


SYMBOL_NAME:  nt!KiSwapContext+7a

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  ntkrnlmp.exe


FAILURE_BUCKET_ID:  X64_0x9F_4_nt!KiSwapContext+7a

BUCKET_ID:  X64_0x9F_4_nt!KiSwapContext+7a

Followup: MachineOwner

This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Open in new window


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
zovothAuthor Commented:
Greetings n2Fc:

Many thanks for your rapid reply... to answer your question, yes I did try to boot to safe mode, to no avail. The BSOD appears just prior to the desktop appearing...

... any thoughts on which driver is bad?

Many thanks,

Based on the mini-dump you provided it is dying in the kernel...

For further analysis,  you would need to upload a kernel dump (which might not have been taken if the system was not setup to do so)...

If you have it, I can try analyzing further,,,

for info on this type of dump & where it can be found...

Also, see:

for how to enable...
zovothAuthor Commented:
Greetings n2Fc:

Many thanks for your follow-up, it is greatly appreciated.

The data back up for this machine also contained multiple Internet threats, so that combined with the funky driver issue is prompting me to simply cut to the chase & complete a system reformat & reconstruction.

Thanks again for your timely wisdom, and may the wind be at your back.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.