Windows 7-64 blue screen shutdown and restarts

Lenovo t520, windows 7-64 getting blue screen shutdowns and restarts.  Please assist in trouble shooting
Unexpected-shutdown.txt
Unexpected-shutdown.txt
rwhIIAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
First go to Computer, right click, Properties, then advanced system settings. Go to Advanced and click on Startup and Recovery settings and uncheck Automatically Restart.  This will let you see the error.

 Second, install Real Temp (please google for real temp as it was long ago). Check the CPU temperature.

 Third, consider lifting the keyboard and palm rest (need the hardware maintenance manual) and check for dirt and dust. Clean it.

 Fourth, check for root kit viruses as they cause this issue to occur. Use TDS Killer to find and remove root kits.
0
JohnBusiness Consultant (Owner)Commented:
Another thing you can do is post the mini dumps here so people can take a look.
0
Seth SimmonsSr. Systems AdministratorCommented:
please post the mini dump
the attachment show a stop 0xD1 which is DRIVER_IRQL_NOT_LESS_OR_EQUAL
i would make sure you have the updated drivers for your system; the mini dump should show the specific driver causing the problem
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

nobusCommented:
yes - plse post the dmp files you refoerred to in your txt files
0
rwhIIAuthor Commented:
There are fourteen of the mini-dump files.  I've tryed to download and install the "Real
Temp" program but so far haven't been able ot get it installed.
080115-61682-01.dmp
080315-67532-01.dmp
080315-58453-01.dmp
0
JohnBusiness Consultant (Owner)Commented:
The first dump implicates TeeDriverx.sys and Wdf1000.sys .  You have something installed on these systems I have not seen. Do you recognize this software?
0
rwhIIAuthor Commented:
There are fourteen of the .dmp files in the system.  I've found and downloaded the "Real Temp" program but have not been able to get it installed.  Something about a WinRing0.dll file is missing form the system.  The system is now not re-starting after the failure.

BTW, I do not feel much ventilation air being expelled from the laptop but the air exiting is only warm and not hot.
0
JohnBusiness Consultant (Owner)Commented:
Go to NIRSOFT.NET and download Blue Screen View. See how it works, and go to its Advanced Options where you can pick out a dmp file. You have to do this one at a time. But it should shed some light (like the first file I looked at). It will take a while and this is something you should attempt to do.
0
nobusCommented:
TeeDriverx64.sys is part of Intel(R) Management Engine Interface and developed by Intel Corporation according to the TeeDriverx64.sys version information.

TeeDriverx64.sys's description is "Intel(R) Management Engine Interface"

>>>>you can uninstall that and see if it helps

it also mentions SetupHost.exe - does that ring a bell ?
0
rwhIIAuthor Commented:
Sorry for the delayed response.  Issues came up.

1.  I need help with the correct procedures to open and read these .dmp files.  
2.  Have had no success installing "Real Temp".
3.  In the "unexpected Shutdown.txt note, attached,  Under "Files that help describe the problem", I cannot find a file "WER-3082330-0.sysdata.xml .
I tried backing up to an earlier restore point, earliest back was but three days.  Machine ran for a day and a half with out any glitches and then began the blue screen shut down again.  I've attached the  three most recent mini-dump files.

I have the Windows 7-64 Ultimate DVD on hand.  Could I use that the attempt a repair?

Than you all for your patience and support.
080515-67283-01.dmp
080515-60715-01.dmp
080515-77532-01.dmp
teeDriver64.txt
Unexpected-shutdown.txt
0
JohnBusiness Consultant (Owner)Commented:
It takes time to work through DMP files and the results are not always conclusive depending on the chain of events in the DMP.

You should help here.

Go Nirsoft.net  ( http://www.nirsoft.net/  ) . Get Blue Screen View. Put the DMP files in the sample folder, browse (one at a time) in Advanced Options and look at the first view lines in Blue Screen view.

What jumps out?

I can look at some later but you should help also.
0
rwhIIAuthor Commented:
Thank you John:

What stands out:?

1.  All six current mini.dump files tell us that:
a.  Cause was by Driver Wdf01000.sys
b. bug checking string was:   Driver_IRQL_Not_Less_OR_EQUAL for all six.
c.  Filename was ntoskrnl.exe
d.  Bug Check code was 0x000000d1

Wdf01000.sys is a windows driver.  Sounds like I need to scan my registry for any corruption in this file.  The first suggestion offered by the Google searched web site got a "not Safe" warning from Norton Internet security.

Not sure where to go from here?
0
JohnBusiness Consultant (Owner)Commented:
The best references I can find is that it is driver corruption.

Go to Lenovo Support for your machine model, download the newest drivers (ALL) and especially BIOS and Chipset and install them.

You can try using Lenovo's Software Update tool, but I prefer downloading and installing.
0
nobusCommented:
i found a reference to teedriver -which is the intel management engine
try updating that -or uninstall it

the wdf .sys  can be caused by a lot of devices; look here for some causes :  http://www.file.net/process/wdf01000.sys.html

it maybe best to run a Ram test first; i use memtest86+ from the ubcd for this,
Hardware diagnostic CD    UBCD

go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD and make the cd   <<==on a WORKING PC, and boot the problem PC from it
Here 2 links, one to the general site, and a direct link to the download

since the downloaded file is an ISO file, eg ubcd527.iso - so you need to use an ISO burning tool
if you don't have that software, install cdburnerXP : http://cdburnerxp.se/

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
 
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section -  long or advanced diag !  (runs at least for30 minutes)

http://www.ultimatebootcd.com/                        ultimate boot cd
http://www.ultimatebootcd.com/download.html             download page

**  you can make a bootable cd - or bootable usb stick

for completeness -here's how i handle disk problems : http://www.experts-exchange.com/Storage/Hard_Drives/A_3000-The-bad-hard-disk-problem.html
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rwhIIAuthor Commented:
Not sure about how to divide the assistance points.  2/3 to John 1/3 to nobus

RWHII
0
nobusCommented:
you may redistribute the points if you like, since i got all
0
rwhIIAuthor Commented:
I have redistributed the points for my question/problem.  300 for John and 200 for nobus.

We are still getting sporadic "blue Screens"  Some of the Intel Chip-set Driver updates would not successfully install.

Getting them from the intel website via download or by Driver detective did not seem to help or make a difference..

I'll disassemble the laptop and clean the fan and ducting and see if that helps.

Thank you all  for you inputs and suggestions.
0
rwhIIAuthor Commented:
Follow up on this "Blue Screen" issue:

Still getting the "Blue Screen" shut downs.  I'll be checking out the cooling fan when replacement part arrives this coming week.  Wanted a replacement unit on hand prior to the dis-assembly of the T520.

We have had a rash of Mal-wear/virus  warnings on the three machines on our network.  We have been using Norton Internet Security on all three machines.

The machines have not been professionally inspected and/or checked out in several years.  Could someone please comment on a safe/through approach to checking the machines for overall health?  Is there a proven approach to cleaning the disk drives prior to an operating system reload?  Should we consider upgrading to Windows 10 from our Windows7-64-Ultimate?

It is important that we can depend on and trust our systems.  I am concerned we may have waited too long to get them thoroughly checked out and tuned up.

This is a very broad and general question.  Some guidance will be sincerely appreciated.
0
JohnBusiness Consultant (Owner)Commented:
You might wish to ask another question if you want to upgrade to Windows 10. The machine is new enough that it should work. Uninstall Norton before upgrading. I have a couple of articles in upgrading to Windows 10. Look in Articles under Windows 10.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.