Asked by:
Windows 7 BSOD on Shutdown and Restart

Question
-
I'm currently having a number of problems with my computer, but the main part preventing anything from being fixed is a BSOD every time I try to shut down or restart. I grabbed the following error codes
Technical information:
*** STOP: 0X0000001E (0XFFFFFFFFC0000005, 0XFFFFF8000377501A, 0X0000000000000001, 0X0000000000000018
Any ideas?
Friday, June 19, 2020 8:33 PM
All replies
-
The bugcheck was 1E: KMODE_EXCEPTION_NOT_HANDLED
To evaluate the BSOD please post logs for troubleshooting.
Using administrative command prompt copy and paste this whole command.
Make sure the default language is English so that the logs can be scanned and read.
Choose the applicable link for the operating system:
https://www.tenforums.com/tutorials/3813-language-add-remove-change-windows-10-a.html
https://www.eightforums.com/threads/language-add-or-remove-in-windows-8.5849/
https://www.sevenforums.com/tutorials/87317-display-language-change.html
The command will automatically collect the computer files and place them on the desktop.
Then use 7zip to organize the files and one drive, drop box, or google drive to place share links into the thread for troubleshooting.
https://support.office.com/en-us/article/Share-OneDrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07
This command will automatically collect these files: msinfo32, mini dumps, drivers, hosts, install, uninstall, services, startup, event viewer files, etc.
Open administrative command prompt and copy and paste the whole command:
copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt© %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"® export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"® export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"
There are two files for you to find manually:
a) C:\Windows\MEMORY.DMP
Use file explorer > this PC > local C: drive > right upper corner search enter the above to find results.
b) dxdiag:
In the left lower corner search type: dxdiag > When the DirectX Diagnostic Tool opens click on the next page button so that each tab is opened > click on save all information > save to desktop > post one drive or drop box share link into the thread
.
.
.
.
.
Please remember to vote and to mark the replies as answers if they help.
On the bottom of each post there is:
Propose as answer = answered the question
On the left side of each post: Vote = a helpful post
.
.
.
.
.Saturday, June 20, 2020 5:31 AM -
Here's the zip file of all the files
https://drive.google.com/file/d/10n_UjMO3de9etcqFIsj3v6fAbjXSASJt/view?usp=sharingSunday, June 21, 2020 9:07 AM -
1) Open dxdiag > allow each page to load > post a share link into the thread
.
2) Increase the free space on the Windows drive to > 30 GB
.
3) For any BSOD
a) run the administrative command prompt command > post a share link into the newest post
b) post a separate share link for C:\windows\memory.dmp
.
4) Post images or share links for:
a) startup and recovery system failure settings
b) virtual memory / page file settings
c) disk management (widen these columns: status and disk 0) (make sure that all characters within the parenthesis are visible)
.
4) Open administrative command prompt and type or copy and paste: (post an image of the results into the thread)
sfc /scannow.
5) Run HD Tune (free version) (all drives)
https://www.hdtune.com/
Post images into the thread for results on these tabs:
a) Health
b) Benchmark
c) Full error scan.
6) Run Sea Tools for Windows
long generic test
Post an image of the test result into the thread
http://www.seagate.com/support/downloads/seatools/seatools-win-master/
http://knowledge.seagate.com/articles/en_US/FAQ/202435en.
7) Open the website for the computer or motherboard manucturer > support > enter the product or serial number or model > select the operating system >display drivers and BIOD > post a URL or link into the thread
.
8) Update:
WDC_SAM WD SCSI Pass Thru driv WD SCSI Pass Thru driv 4/16/2008 1:39:08 AM C:\Windows\system32\DRIVERS\wdcsam64_prewin8.sys
nvstor 3/19/2010 1:45:11 PM C:\Windows\system32\drivers\nvstor.sys
https://answers.microsoft.com/en-us/windows/wiki/windows_10-update/updating-a-driver/a5e6345e-af9b-4099-bef0-8d22254aa1c1
.
9) Open device manager > click view > click show hidden devices > manually expand all rows > look for any row displaying a yellow triangle with black exclamation mark or unknown device > post images into the thread
.
.
------------------
System Information
------------------
DxDiag Previously: Crashed in system information (stage 1). Re-running DxDiag with "dontskip" command line parameter or choosing not to bypass information gathering when prompted might result in DxDiag successfully obtaining this information.
.
There were multiple log entries displaying possible drive problems.
.
.
The memory dump was partially corrupt:
**************************************************************************
THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************.
.
Event[54215]:
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 2020-06-19T12:57:06.000
Event ID: 1018
Task: N/A
Level: Information
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Matthew-PC
Description:
The dump file at location: C:\Windows\MEMORY.DMP was deleted because the disk volume had less than 25 GB free space..
.
Event[53944]:
Log Name: System
Source: Microsoft-Windows-StartupRepair
Date: 2020-06-19T02:54:51.486
Event ID: 1121
Task: N/A
Level: Information
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Matthew-PC
Description:
The following file necessary for Windows startup was corrupt: e:\windows\system32\kdcom.dll.
.
.
.
.
.
Please remember to vote and to mark the replies as answers if they help.
On the bottom of each post there is:
Propose as answer = answered the question
On the left side of each post: Vote = a helpful post
.
.
.
.
.
- Edited by questionsformicrosoftproducts Sunday, June 21, 2020 5:25 PM
Sunday, June 21, 2020 5:21 PM -
Hi,
Is your problem solved?
If not, please reply and tell us the current situations if you need further assistance.
针对Windows 2008/2008R2的扩展支持将于2020年结束,之后微软将不再为其提供安全更新。点击此处或扫描二维码获取《在 Azure 上运行 Windows Server 的终极指南》,把握良机完成云迁移并实现业务现代化。
- Edited by Cedric ChenMicrosoft contingent staff Wednesday, July 1, 2020 10:24 AM
Wednesday, July 1, 2020 10:22 AM