Windows 7 Blue Screen of Death minidump analysis request

Posted on 2014-07-25
Last Modified: 2016-11-23
Greetings wise wizards of EE:

I am helping a friend with a Dell Windows 7 laptop, which produces the dreaded Blue Screen of Death shortly after the Microsoft Windows "splash" screen, right before the desktop appears.

All methods to restore this machine via the built-in recovery tools (such as System Restore) have failed, so I pulled the hard drive and connected it to a healthy computer via a USB to SATA adapter. I am backing up his data, and I recovered the latest Minidump file from the C:\Windows\Minidump folder.

I am requesting an analysis of the attached Minidump file, so that I may properly tackle his dilemma, once the cause has been determined. Though I am grateful for all assistance, I would ask for a specific analysis of the attached Minidump file, rather than just general security or maintenance advice.

Many thanks in advance,

Question by:zovoth
  • 2
  • 2
LVL 20

Accepted Solution

n2fc earned 500 total points
ID: 40220690
The dump analysis is below...

A link to MS codes related to the dump is here:

Looks  like a bad driver...
Did you try booting into SAFE MODE?

Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (
Online Crash Dump Analysis Service
See for more information
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
Machine Name:
Kernel base = 0xfffff800`03652000 PsLoadedModuleList = 0xfffff800`03895670
Debug session time: Sat Jul  6 00:16:04.634 2013 (UTC - 4:00)
System Uptime: 0 days 18:09:03.680
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

A driver has failed to complete a power IRP within a specific time (usually 10 minutes).
Arg1: 0000000000000004, The power transition timed out waiting to synchronize with the Pnp
Arg2: 0000000000000258, Timeout in seconds.
Arg3: fffffa8007277040, The thread currently holding on to the Pnp lock.
Arg4: fffff80000b9c510, nt!TRIAGE_9F_PNP on Win7

Debugging Details:

Implicit thread is now fffffa80`07277040
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2


FAULTING_THREAD:  fffffa8007277040






LAST_CONTROL_TRANSFER:  from fffff800036bd612 to fffff800036caa7a

fffff880`033a8580 fffff800`036bd612 : fffffa80`07277040 fffffa80`07277040 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x7a
fffff880`033a86c0 fffff800`036ca0da : fffff8a0`00001910 00000000`00000dec fffff8a0`00000000 00000000`00000200 : nt!KiCommitThreadWait+0x1d2
fffff880`033a8750 fffff800`03935404 : fffffa80`00000003 fffff880`033a8a68 00000000`00000001 fffffa80`00000000 : nt!KeWaitForMultipleObjects+0x272
fffff880`033a8a10 fffff800`03a6a079 : 00000000`00000000 fffffa80`0b00ed90 fffff8a0`0e158010 00000000`00000000 : nt!PnpNotifyUserMode+0x158
fffff880`033a8a90 fffff800`03b450d1 : 00000000`00000000 00000000`00000000 fffff8a0`0e158010 00000000`00000000 : nt!PnpNotifyUserModeDeviceRemoval+0x49
fffff880`033a8ae0 fffff800`03b4580c : fffff880`033a8cb8 00000000`00000000 fffff8a0`04b01900 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0xb51
fffff880`033a8c20 fffff800`03a2e9ae : 00000000`00000000 fffffa80`0df40110 fffff8a0`0e158010 00000000`00000001 : nt!PnpProcessTargetDeviceEvent+0x4c
fffff880`033a8c50 fffff800`036d1251 : fffff800`03934b98 fffff8a0`0e158010 fffff800`0386d2d8 fffffa80`07277040 : nt! ?? ::NNGAKEGL::`string'+0x552ab
fffff880`033a8cb0 fffff800`03965ede : 00000000`00000000 fffffa80`07277040 00000000`00000080 fffffa80`07264740 : nt!ExpWorkerThread+0x111
fffff880`033a8d40 fffff800`036b8906 : fffff880`031d5180 fffffa80`07277040 fffff880`031dffc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`033a8d80 00000000`00000000 : fffff880`033a9000 fffff880`033a3000 fffff880`033a75f0 00000000`00000000 : nt!KiStartSystemThread+0x16

STACK_COMMAND:  .thread 0xfffffa8007277040 ; kb

fffff800`036caa7a 488d8c2400010000 lea     rcx,[rsp+100h]


SYMBOL_NAME:  nt!KiSwapContext+7a

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  ntkrnlmp.exe


FAILURE_BUCKET_ID:  X64_0x9F_4_nt!KiSwapContext+7a

BUCKET_ID:  X64_0x9F_4_nt!KiSwapContext+7a

Followup: MachineOwner

This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Open in new window


Author Comment

ID: 40220741
Greetings n2Fc:

Many thanks for your rapid reply... to answer your question, yes I did try to boot to safe mode, to no avail. The BSOD appears just prior to the desktop appearing...

... any thoughts on which driver is bad?

Many thanks,

LVL 20

Expert Comment

ID: 40220755
Based on the mini-dump you provided it is dying in the kernel...

For further analysis,  you would need to upload a kernel dump (which might not have been taken if the system was not setup to do so)...

If you have it, I can try analyzing further,,,

for info on this type of dump & where it can be found...

Also, see:

for how to enable...

Author Closing Comment

ID: 40220783
Greetings n2Fc:

Many thanks for your follow-up, it is greatly appreciated.

The data back up for this machine also contained multiple Internet threats, so that combined with the funky driver issue is prompting me to simply cut to the chase & complete a system reformat & reconstruction.

Thanks again for your timely wisdom, and may the wind be at your back.


Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question