Solved 2x BSOD after updating Windows 8 to 8.1

[MasterChief]

I haven't debugged in a few years, but it's "nice" to see the good old antivirus blues rear its ugly head.

0x24 almost always means antivirus and/or other security software funk, especially on known-well hardware.

1) Uninstall Tune-Up Utilities.

2) Remove Avast with tool they offer (safe mode is best). Replace with MSE to test, or on permanent basis.

3) Very much could be the cause, as noted above:

2: kd> lmvm PxHlpa64
start             end                 module name
fffff880`014e3000 fffff880`014ee380   PxHlpa64   (deferred)             
    Image path: \SystemRoot\System32\Drivers\PxHlpa64.sys
    Image name: PxHlpa64.sys
    Timestamp:        [B]Fri Feb 02 16:24:22 2007 (45C3AC06)[/B]
    CheckSum:         0001320C
    ImageSize:        0000B380
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Boot to safe mode, delete the shown driver file then open Regedit. Delete the driver's key at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services

(If you're lazy and don't have Safe Mode configured, normal mode should be ok.)

Reboot to normal mode. If cd/dvd drive stops working, that's a good thing. We'll fix that next.

 

[usasma]

After 5 pages of posts it's difficult to remember the details that you've posted.
Additionally, I have serious eye problems, so I can't re-read the entire topic before posting (search Google for Toxic Epidermal Necrolysis if you're interested).
Next, I have been experiencing back spasms over the last week and a half - and cannot spend long sitting in a chair without increasing the spasms.
Finally, I do not recall you having posted this information: http://www.eightforums.com/bsod-cra...e-screen-death-bsod-posting-instructions.html Without it I cannot check the specs/operation of your system.
Thank you for bearing with me.

******************************
As I've said, the PxHlpa64.sys driver probably isn't the problem - and I've seen instances where removing the driver makes the system unbootable (this was a year or two ago).

The PxHlpa64.sys driver is used in many different CD/DVD programs - not just Sonic.
If I had the information I requested ( http://www.eightforums.com/bsod-cra...e-screen-death-bsod-posting-instructions.html ) I could suggest some of the programs on your system that might use it.

If you choose to remove the PxHlpa64.sys driver as MasterChief suggests, please be sure to:
1) Rename (not delete) the driver
2) Have recovery disks ready
3) Make a system restore point before doing it.
******************************

SMART status is not a drive test, it's merely a set of indicators that may or may not reveal a problem with the drive. If you wish to test the drives with the Western Digital diagnostics, please use the Extended test. I would expect them to pass (because of the SMART results), but it is not 100% accurate.
******************************

The date on the ICCWDT.sys driver (in the link you gave) is the date the system was looked at (discovered), not the date of the driver itself.
I was able to extract this info from the memory dump:

3: kd> lm vm iccwdt
start             end                 module name
fffff800`05a32000 fffff800`05a3e000   ICCWDT     (deferred)             
    Image path: \SystemRoot\System32\drivers\ICCWDT.sys
    Image name: ICCWDT.sys
    Timestamp:        Wed Aug 18 04:27:45 2010 (4C6B9981)
    CheckSum:         0001100B
    ImageSize:        0000C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

BTW - the link I gave previously says that the driver is Win8 compatible (in v4.2.0.8 of the XTU tool) - I could swear it wasn't there yesterday! Timestamps on the drivers are listed in 2 of the reports that I had requested ( http://www.eightforums.com/bsod-cra...e-screen-death-bsod-posting-instructions.html )
******************************

 

[xyz]

Thanks a lot of your input MasterChief, really appreciate all help!


PxHlpa64 ?????

As far as I know none of the software in the list that use this driver are installed on computer (as in this thread Link below):

Found this thread:

Pxhlpa64.sys event log error - help please Solved - Windows 7 Help Forums

“07 April 2012 from Tekno Venus: Ah wait, I have an idea.

Can you disable it with autoruns? Autoruns for Windows”


This apparently worked on this Windows 7 issue and BSOD

Possibly I could download this software just to disable this one driver???? (and then uninstall this software afterwards)

However, don’t want to start messing about with too many other things I know little about!

Autoruns for Windows

Have put on HOLD my plan to update to 8.1 today!

Windows 8 is running stable now (as far as I can tell as normal user)

Run a regular sfc /scannow check to see if any files are getting corrupted - all good so far

run my installed software to see if anything causes a problem - all good so far

 

[xyz]

First of all really SORRY usasma for the misunderstanding - no critic was intended at all - my fault!

you are right - I too am dizzy from all this (and we posted simultaneously the last Posts - so there is also a cross over confusion).

here is the ZIP (hope it is done right and gives the needed info)

I await your answer before doing anything else

(will leave the PxHlpa64.sys alone - not too keen on messing about anyway unless I am sure - and if I have to remove it then I would prefer using that software as I can just disable it without deleting - can always reactivate it if it is needed later)



***Have just deleted first upload of ZIP wasn't aware that there was info enclosed that should not be given out***

Hope there is no other information in this ZIP File that should not be accessible to everyone - if there is - please warn me!!!!!

 

[MasterChief]

New crash is again an ntfs.sys related one, which of course is a storage sub-system driver. (Hint: So is the px driver -AND- antivirus can easily affect this too.) I recommend following as I've shown about the Px driver. The system will not become unbootable in any way as long as you delete the registry key for the driver as well, as instructed. (Look inside the key for the driver file reference to ensure you've chosen to delete the correct one. It is also a good idea to run Ccleaner's registry cleaner directly after doing this, as well.)

Then when back to Windows, it's a simple operation to delete upper and lower filters to get the optical drive to work well again.

Over the years, hundreds or thousands of machines I've helped fix like this.

That being said, it is only my recommendation. It's your machine, and Usasma has obviously put in a lot of effort here, so all things considered, of course it's your choice what to do.

I recommend removing Avast and TuneUp Utilities as shown above, all the same. If Usasma needs to troubleshoot further, it will in and of itself, go a very long way to aiding him.

Unless specifically asked something, I will leave this thread for Usasma to continue handling as I do not wish to step on toes, so-to-speak.

You're welcome.

 

[xyz]

Thanks a lot MasterChief, I am sure you are not stepping on anyone's toes here! That's the idea of a Forum, to get different ideas, views solutions, etc. And yes, your right, Usasma has put in a hell of a lot of time and work on this - for which I am truly very grateful - and I am still following his leads on this, but that does not exclude other people. I have listened to what you say in both posts - and found this software that disables this driver as reported in a Windows 7 post - and have to admit would feel more comfortable using that. But; I am holding on that for the moment, but does not mean I have rejected this at all - I am listening, taking notice and truly welcome continued input from you. It's not about toes here, it's just about getting this problem fixed - and I am really grateful for the work Usasma puts into this - and for your input too! All's welcome.

 

[xyz]

Windows 8 still running stable - as far as I can tell - and regular sfc /scannow also okay

But what happens when and "if" I update to 8.1 - once again crashes?

 

[MasterChief]

Very glad to hear it.

It's not going to crash if you update. I wouldn't worry at all. Just don't go adding any software with drivers, and if you do, do some research online for 10 minutes to see if people are complaining or not about it.

Worst case scenario: We fix it.

You're welcome.

 

[xyz]

Situation Update
I have just had a very long conversation with one of the Lenovo Support Technicians. The conclusion from this conversation is:

1. You are correct MasterChief in the issue of W8.1 and antivirus. Antivirus programmes can create issues with 8.1
2. If I don’t really need 8.1 then stay with Windows 8 – and maybe try with 8.1 in a few months time if I want, then maybe ???? some of the problems will be resolved by then?
3. If Windows 8 is running stable at the moment – which it is - then do nothing, change nothing, just let it be.
4. When and if I try to update to 8.1 then the following should happen: a) download the latest chips/graphic/audio drivers for 8.1 from Lenovo download driver page – store these somewhere outside the computer. B) download latest drivers from website of manufactures of chips/graphic/audio – store these too. C) Windows 8.1 will also automatically install drivers – but these might not be correct and might cause crashes, so c) in device manager I should try one of the other (downloaded) drivers to see which works best *** Did not quite understand the settings bit for this – I should not allow Device manger to automatically select drivers, but do this myself manually – on phone I thought I understood how/what I should do - but now looking at Device Manager not too sure how to stop the automatic and select the manual!!!!????**
5. But for the moment this is not a concern. I will stay with Windows 8 (for the next couple of months at least) and will change nothing unless I see problems are starting – in which case I will update the windows 8 chips/graphic/audio drivers. But at the moment everything is stable.
6. I will consider ditching avast antivirus and just use Defender – but in Windows 8 – I do not see it causing any problems! But.....? If I update to 8.1 then I will definitely have to uninstall it for the update period and first trial period.

So for the moment I will just wait and continue to monitor Windows 8 – I see no problems and the last sfc /scannow was also problem free.
Still waiting to hear if there was anything significant in my last dmp upload from the Blue Screen of Death (BSOD) Posting Instructions

And of course many many thanks for the help and advice so far - really appreciate it

Will keep you posted

 

[xyz]

Another NTFS_File_System BSOD after sleep

Once again BSOD (Windows Smiley) after waking from sleep = NTFS_File_System (Ntfs.sys)

Will run a sfc /scannow

sfc / scannow was okay ???

 

[MasterChief]

Run this command once from an elevated prompt for each hdd, changing C: for each drive letter you have that is a hdd:

chkdsk /r C:

If I see anything else to say about, I will let you know.


Edit: I see Avast is still installed now. I recommend, same as before, no 3rd party antivirus until sorted, especially because of 0x24 crashes.

Update:

atksgt   atksgt.sys   Sat Jun 04 11:22:26 2011 (4DEA4DB2)
ICCWDT   ICCWDT.sys   Wed Aug 18 04:27:45 2010 (4C6B9981)
lirsgt   lirsgt.sys   Sun May 17 09:06:57 2009 (4A100BF1)

Uninstall FreeRide Games software:

0: kd> lmvm x5xsex_pr148
start             end                 module name
fffff880`18bcf000 fffff880`18be1000   X5XSEx_Pr148   (deferred)             
    Image path: \??\C:\Program Files (x86)\FreeRide Games\[B]X5XSEx_Pr148.Sys[/B]
    Image name: X5XSEx_Pr148.Sys
    Timestamp:        Thu Aug 02 08:51:27 2012 (501A77CF)
    CheckSum:         00017C75
    ImageSize:        00012000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Remove software that you recently installed that owns this CD/DVD driver:

PxHlpa64 [B]PxHlpa64.sys[/B] Fri Feb 02 16:24:22 2007 (45C3AC06)

 

[xyz]

Thanks MasterChief,

Over the weekend I had removed antivirus and just ran on Defender .....but!!!!

Computer is tonight (20 Jan.) on its way to Lenovo!

### Ran chkdsk /r C: and it stayed stuck at 27% ! ###

So now have to wait until they return it with (hopefully) new drive.

I will then uninstall "FreeRide Games"

Don't know what software uses :

PxHlpa64.sys

but it might be my older version of Photoshop elements?????

after this maybe I can finally update to 8.1???

 

[MasterChief]

after this maybe I can finally update to 8.1???

Let's see a new tool run from Brink's thread, and then we will say about it.

 

[xyz]

Let's see a new tool run from Brink's thread, and then we will say about it.

Sorry MasterChief I don't understand this sentence at all?

 

[MasterChief]

Let's see a new tool run from Brink's thread, and then we will say about it.

Sorry MasterChief I don't understand this sentence at all?

The tool here: http://www.eightforums.com/bsod-cra...e-screen-death-bsod-posting-instructions.html

Run it then post the results. Then we can see if the machine is ready to upgrade if you want to.

 

[xyz]

Okay!

I have just received notice that my computer will be sent back in the next hours, so with luck I should have it back by Saturday (maybe even Friday)!

Maybe it is best when I just stick to W8

I am also not really comfortable with having a computer that has no antivirus - and don't feel Defender is good enough (but I am no expert) - although I do only use the free version of AVAST (which I am quite happy with).

Just the other day I got an AVAST warning while on Ebay (was looking for a newer photo editing software to avoid using my older Adobe Elements on W8 - which "might" have been causing some problems) and I was glad that I had Avast running to block this. Avast works okay on W8

 

[MasterChief]

Hopefully machine works well for ya with new hdd, but if not, it should be very obvious what the first thing you need to do is.

 

[xyz]

Update 31/01/14

Computer is back - no new hardware - only new software (defect)

I have read in another Forum thread

Why update to Windows 8.1?

that MS support Windows 8 until October 2015 and then you need to switch so have decided to stay with Windows 8 for the moment - wait for the bugs and problems to be resolved.

at the moment computer is busy with all the many updates

 

[xyz]

CORRECTION
Sent computer back to repairs
Totally Disgusted

Windows updates failed time after time / File corruption / and ?

LENOVO JUNK

 

[xyz]

13 FEB Computer just back

here is the SF Diagnostic