BSOD on t400/t500/x301/x200 on Vista 32

[locker2]

Hi, first time post so thanks ahead of time

Getting random BSOD on shutdown on 4 models of lenovo laptops. Trying to stabalize these images and each of them throw up a error related to what appears to be the Ethernet driver. BSOD is on shutdown, and happens only sporadically, maybe once every 7 or 8 shutdowns which is terrible in terms of troubleshooting.

I'm having issues trying to include the dmp file details, says I must remove links from my message but i don't have any links in it?

 

[B00kWyrm]

Try zipping up to five of your most recent minidumps.
Then using the paperclip icon at the top of the reply tools (next to the emoticon button).
This should allow you to make the attachment.

 

[Route44]

Is the ethernet card/drivers the only thing these have in common?

 

[locker2]

Here's the dump...any help would be so appreciated..


Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: C:\Windows\Symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18005.x86fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0x82217000 PsLoadedModuleList = 0x8232ec70
Debug session time: Wed Jul 15 04:30:14.734 2009 (GMT-7)
System Uptime: 0 days 0:03:45.329
Loading Kernel Symbols
...............................................................
................................................................
................................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 7E, {c0000005, 8903799d, b3ed9b88, b3ed9884}
Probably caused by : e1y6032.sys ( e1y6032+16e27 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8903799d, The address that the exception occurred at
Arg3: b3ed9b88, Exception Record Address
Arg4: b3ed9884, Context Record Address
Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
ndis!NdisCancelTimerObject+36
8903799d f6410e02 test byte ptr [ecx+0Eh],2
EXCEPTION_RECORD: b3ed9b88 -- (.exr 0xffffffffb3ed9b88)
ExceptionAddress: 8903799d (ndis!NdisCancelTimerObject+0x00000036)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 7b40e90f
Attempt to read from address 7b40e90f
CONTEXT: b3ed9884 -- (.cxr 0xffffffffb3ed9884)
eax=00650000 ebx=825dd106 ecx=7b40e901 edx=00000000 esi=865e8770 edi=89037967
eip=8903799d esp=b3ed9c50 ebp=b3ed9c54 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
ndis!NdisCancelTimerObject+0x36:
8903799d f6410e02 test byte ptr [ecx+0Eh],2 ds:0023:7b40e90f=??
Resetting default scope
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 7b40e90f
READ_ADDRESS: 7b40e90f
FOLLOWUP_IP:
e1y6032+16e27
8936de27 5f pop edi
BUGCHECK_STR: 0x7E
LAST_CONTROL_TRANSFER: from 8936de27 to 8903799d
STACK_TEXT:
b3ed9c54 8936de27 005e8770 00000000 8626f000 ndis!NdisCancelTimerObject+0x36
WARNING: Stack unwind information not available. Following frames may be wrong.
b3ed9c68 893680af 8626f000 b3915c60 89040000 e1y6032+0x16e27
b3ed9c90 89361815 8626f000 861b80e8 b3ed9cb8 e1y6032+0x110af
b3ed9ca0 890f2758 000004d2 00000000 00000000 e1y6032+0xa815
b3ed9cb8 890f4ad0 001b80e8 89040000 8903ea38 ndis!ndisMShutdownMiniport+0xa8
b3ed9cf8 890f4fc2 b3915c60 b3915d18 00000006 ndis!ndisSetPower+0x541
b3ed9d20 8221c7c2 b3915d18 847a3588 00000000 ndis!ndisPowerDispatch+0x1a3
b3ed9d7c 823ecc42 8799f090 c3d3d88b 00000000 nt!PopIrpWorker+0x40f
b3ed9dc0 82255efe 8221c3af 8799f090 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16

SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: e1y6032+16e27
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: e1y6032
IMAGE_NAME: e1y6032.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4926f50c
STACK_COMMAND: .cxr 0xffffffffb3ed9884 ; kb
FAILURE_BUCKET_ID: 0x7E_e1y6032+16e27
BUCKET_ID: 0x7E_e1y6032+

 

[Route44]

I did a search for the driver e1y6032.sys for that was cited as your probable cause. See this link for further information:

http://www-307.ibm.com/pc/support/site.wss/MIGR-70199.html

 

[B00kWyrm]

As a quick followup on Route44... Lenovo offers two versions of the driver...
e1y6032.sys 9.52.20.0 (180422) Windows Vista 32-bit
e1y60x64.sys 9.52.20.0 (180422) Windows Vista 64-bit
Be sure to use the right one for your system.

 

[locker2]

Right, thanks guys for the reply. We've verified we're using the correct version of the driver for Vista 32 bit, and uninstalled and reinstalled the driver with no success. the aggrivating part is it's so sporadic. it occurs at shutdown, but only I would say about once every 10 shutdowns, not every time.

any other thoughts?

 

[B00kWyrm]

Have you changed NIC cards?
If so, is it possible that there are remnants of the old drivers still on your system?

 

[locker2]

Book..these were all factory built lenovos. We did not change any hardware, all we did was apply windows updates, when to lenovo to update anything via system updater. I will look however to see if there are any old drivers by chance, thanks.

 

[LookinAround]

Book..these were all factory built lenovos. We did not change any hardware, all we did was apply windows updates, when to lenovo to update anything via system updater. I will look however to see if there are any old drivers by chance, thanks.

I noticed the driver version on the website is
Version: 9.52.20.0
Release Date: 2009/06/10

So this driver was just released a month ago?! Are your computers all that new?! Did these problems start to occur after the new driver was applied?

This might be the only driver version for T400 (i can't tell from web site release notes) but you might try on each computer, go to Dev Manager, find the network adapter
>> Rt click Properties, click Driver tab
>> Click the Roll Back Driver button

If you can't rollback you might try uninstalling that one month old version and looking for the prior version (if one exists) and see if the older version runs better