BSOD on daily basis - WORKER THREAD RETURNED AT BAD IRQL

win7bosd · 17 May 2013

Hi everybody,

about a week ago Windows 7 started giving me blue screens on a daily basis - enclosed all the relevant info as zip file after running the SF Diagnostic Tool

Thx in advance

koolkat77 · 17 May 2013

McAfee

Code:

Start Menu\Programs\McAfee	Public:Start Menu\Programs\McAfee	Public

We have seen McAfee cause BSOD's on several systems and recommend uninstalling it with the McAfee Removal Tool and replace with Microsoft Security Essentials. Plus you shouldn't be running two antiviruses on your system. How to uninstall McAfee products using the consumer Removal Tool (MCPR)

Q: Is it bad to run multiple antivirus programs?

Microsoft Security Essentials and Malwarebytes, both recommended from a strict BSOD perspective. Microsoft Security Essentials, Free antivirus for windows & Malwarebytes Anti-Malware Free

Information

DO NOT start the free trial of MalwareBytes. Deselect the option when prompted.

Tip

Make full scans with both separately.

Basic checks: Please run these tests and report back the results

1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure

BSOD BUGCHECK SUMMARY

Code:

Debug session time: Fri May 17 20:33:05.592 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\051713-65161-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 7:41:23.059
Probably caused by : ntkrnlmp.exe ( nt!IopProcessWorkItem+0 )
BugCheck E1, {fffff80003fd1d50, 2, fffffa8007f27140, fffffa8007f27140}
BugCheck Info: WORKER_THREAD_RETURNED_AT_BAD_IRQL (e1)
Bugcheck code 000000e1
Arguments: 
Arg1: fffff80003fd1d50, address of worker routine (do ln on this to find guilty driver)
Arg2: 0000000000000002, IRQL returned at (should have been 0, but isn't).
Arg3: fffffa8007f27140, workitem parameter
Arg4: fffffa8007f27140, workitem address
BUGCHECK_STR:  0xE1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE1_nt!IopProcessWorkItem+0
MaxSpeed:     2670
CurrentSpeed: 2660
BiosVersion = 6IET49WW (1.09 )
BiosReleaseDate = 01/07/2010
SystemManufacturer = LENOVO
SystemProductName = 25223FG
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Tue May 14 14:27:29.170 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\051413-22495-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 1:22:16.247
Probably caused by : ntkrnlmp.exe ( nt!IopProcessWorkItem+0 )
BugCheck E1, {fffff80003f77d50, 2, fffffa800866eea0, fffffa800866eea0}
BugCheck Info: WORKER_THREAD_RETURNED_AT_BAD_IRQL (e1)
Bugcheck code 000000e1
Arguments: 
Arg1: fffff80003f77d50, address of worker routine (do ln on this to find guilty driver)
Arg2: 0000000000000002, IRQL returned at (should have been 0, but isn't).
Arg3: fffffa800866eea0, workitem parameter
Arg4: fffffa800866eea0, workitem address
BUGCHECK_STR:  0xE1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE1_nt!IopProcessWorkItem+0
MaxSpeed:     2670
CurrentSpeed: 2660
BiosVersion = 6IET49WW (1.09 )
BiosReleaseDate = 01/07/2010
SystemManufacturer = LENOVO
SystemProductName = 25223FG
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat May 11 16:37:02.926 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\051113-21075-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 0:29:38.393
Probably caused by : ntkrnlmp.exe ( nt!IopProcessWorkItem+0 )
BugCheck E1, {fffff80003f7dd50, 2, fffffa8007e5de20, fffffa8007e5de20}
BugCheck Info: WORKER_THREAD_RETURNED_AT_BAD_IRQL (e1)
Bugcheck code 000000e1
Arguments: 
Arg1: fffff80003f7dd50, address of worker routine (do ln on this to find guilty driver)
Arg2: 0000000000000002, IRQL returned at (should have been 0, but isn't).
Arg3: fffffa8007e5de20, workitem parameter
Arg4: fffffa8007e5de20, workitem address
BUGCHECK_STR:  0xE1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE1_nt!IopProcessWorkItem+0
MaxSpeed:     2670
CurrentSpeed: 2660
BiosVersion = 6IET49WW (1.09 )
BiosReleaseDate = 01/07/2010
SystemManufacturer = LENOVO
SystemProductName = 25223FG
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Mon May  6 13:41:30.185 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\050613-17940-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 0:36:50.654
Probably caused by : ntkrnlmp.exe ( nt!IopProcessWorkItem+0 )
BugCheck E1, {fffff80003fbad50, 2, fffffa8006defb50, fffffa8006defb50}
BugCheck Info: WORKER_THREAD_RETURNED_AT_BAD_IRQL (e1)
Bugcheck code 000000e1
Arguments: 
Arg1: fffff80003fbad50, address of worker routine (do ln on this to find guilty driver)
Arg2: 0000000000000002, IRQL returned at (should have been 0, but isn't).
Arg3: fffffa8006defb50, workitem parameter
Arg4: fffffa8006defb50, workitem address
BUGCHECK_STR:  0xE1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xE1_nt!IopProcessWorkItem+0
MaxSpeed:     2670
CurrentSpeed: 2660
BiosVersion = 6IET49WW (1.09 )
BiosReleaseDate = 01/07/2010
SystemManufacturer = LENOVO
SystemProductName = 25223FG
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Drivers:

Code:

**************************Fri May 17 20:33:05.592 2013 (UTC + 6:00)**************************
5U877.sys                     Mon Dec 14 14:09:07 2009 (4B25F2A3)
amdxata.sys                   Fri Mar 19 22:18:18 2010 (4BA3A3CA)
AMPPAL.sys                    Wed Jul 18 13:48:59 2012 (50066A6B)
ApsHM64.sys                   Mon Jun 14 08:32:19 2010 (4C1594B3)
Apsx64.sys                    Mon Jun 14 08:40:09 2010 (4C159689)
CAX_CNXT.sys                  Wed Jul  1 01:59:52 2009 (4A4A6EB8)
CAX_DPV.sys                   Wed Jul  1 02:05:11 2009 (4A4A6FF7)
CAXHWAZL.sys                  Wed Jul  1 02:01:14 2009 (4A4A6F0A)
cfwids.sys                    Wed Jan 16 00:24:37 2013 (50F59EE5)
CHDRT64.sys                   Thu Aug 26 14:45:24 2010 (4C7629A4)
ctxusbm.sys                   Wed Jun  8 04:53:28 2011 (4DEEABE8)
DzHDD64.sys                   Mon Oct 24 16:10:13 2011 (4EA53985)
e1k62x64.sys                  Thu Feb  2 15:42:59 2012 (4F2A5AA3)
HECIx64.sys                   Fri Sep 18 01:54:16 2009 (4AB293E8)
iaStor.sys                    Sat Nov 21 05:09:41 2009 (4B0721B5)
ibmpmdrv.sys                  Wed Dec  5 09:01:38 2012 (50BEB912)
Impcd.sys                     Tue Oct 27 02:39:41 2009 (4AE6090D)
intelppm.sys                  Tue Jul 14 05:19:25 2009 (4A5BC0FD)
mdmxsdk.sys                   Tue Jun 20 03:27:26 2006 (449716BE)
mfeapfk.sys                   Wed Jan 16 00:21:56 2013 (50F59E44)
mfeavfk.sys                   Wed Jan 16 00:22:16 2013 (50F59E58)
mfefirek.sys                  Wed Jan 16 00:24:04 2013 (50F59EC4)
mfehidk.sys                   Wed Jan 16 00:21:15 2013 (50F59E1B)
mfewfpk.sys                   Wed Jan 16 00:21:30 2013 (50F59E2A)
MpFilter.sys                  Thu Nov  1 04:43:06 2012 (5091A97A)
Netwsw00.sys                  Mon Oct  1 00:24:04 2012 (50688E44)
nvBridge.kmd                  Fri Feb 18 23:47:15 2011 (4D5EB0A3)
nvhda64v.sys                  Tue Jul  3 21:25:04 2012 (4FF30ED0)
nvlddmkm.sys                  Fri Jan 11 01:41:20 2013 (50EF1960)
psadd.sys                     Thu Jul  2 08:17:26 2009 (4A4C18B6)
qcfilterlno2k.sys             Wed Jul  8 05:45:31 2009 (4A53DE1B)
qcusbnetlno2k.sys             Fri Jun  4 06:01:08 2010 (4C084244)
qcusbserlno2k.sys             Wed May 12 06:40:08 2010 (4BE9F8E8)
rimspe64.sys                  Mon Oct 26 11:52:27 2009 (4AE5391B)
smihlp.sys                    Fri Mar 13 18:47:32 2009 (49BA55E4)
smiifx64.sys                  Tue Sep  7 10:38:27 2010 (4C85C1C3)
SSPORT.sys                    Fri Aug 12 05:07:32 2005 (42FBDA34)
SynTP.sys                     Thu Apr 18 09:55:17 2013 (516F6EA5)
Tppwr64v.sys                  Wed Apr 17 18:14:17 2013 (516E9219)
TuneUpUtilitiesDriver64.sys   Thu Sep 17 17:54:52 2009 (4AB2238C)
TurboB.sys                    Wed Sep 30 06:25:28 2009 (4AC2A578)
Tvti2c.sys                    Thu Sep 24 17:56:38 2009 (4ABB5E76)
XAudio64.sys                  Thu Apr 30 00:21:07 2009 (49F89A93)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat May 11 16:37:02.926 2013 (UTC + 6:00)**************************
e1k62x64.sys                  Thu Jul 22 23:39:07 2010 (4C48823B)
ibmpmdrv.sys                  Wed Jan 19 11:08:47 2011 (4D3671DF)
NETwNs64.sys                  Tue Dec 21 23:08:43 2010 (4D10DF1B)
nvhda64v.sys                  Tue Jun 22 04:07:25 2010 (4C1FE29D)
nvlddmkm.sys                  Fri Feb 18 23:53:00 2011 (4D5EB1FC)
SynTP.sys                     Fri Apr 23 05:11:30 2010 (4BD0D7A2)

koolkat77 · 17 May 2013

Also update the drivers below:

Code:

SSPORT.sys                    Fri Aug 12 05:07:32 2005 (42FBDA34)

Samsung printer driver Driver Reference Table - SSPORT.sys

Code:

mdmxsdk.sys                   Tue Jun 20 03:27:26 2006 (449716BE)

Conexant Modem Diagnostic Interface x86 Driver Driver Reference Table - mdmxsdk.sys

Code:

smihlp.sys                    Fri Mar 13 18:47:32 2009 (49BA55E4)

SMI helper driver - Likely part of the UPEK Protector Suite Driver Reference Table - smihlp.sys

Code:

XAudio64.sys                  Thu Apr 30 00:21:07 2009 (49F89A93)

Conexant Modem Audio Driver Reference Table - XAudio64.sys

Code:

CAX_CNXT.sys                  Wed Jul  1 01:59:52 2009 (4A4A6EB8)

Conexant Modem Driver Reference Table - CAX_CNXT.sys

Code:

CAXHWAZL.sys                  Wed Jul  1 02:01:14 2009 (4A4A6F0A)

Conexant Modem Driver Reference Table - CAXHWAZL.sys

Code:

CAX_DPV.sys                   Wed Jul  1 02:05:11 2009 (4A4A6FF7)

Conexant Modem Driver Reference Table - CAX_DPV.sys

Code:

psadd.sys                     Thu Jul  2 08:17:26 2009 (4A4C18B6)

Lenovo Parties Service Access Device Driver (SMBIOS) Driver Reference Table - psadd.sys

Good luck.

win7bosd · 24 May 2013

no bsod in 5 days, so i guess mcafee was the one causing problems.
thx a lot

koolkat77 · 24 May 2013

You're welcome! :)
Post if you have them again.

BSOD on daily basis - WORKER THREAD RETURNED AT BAD IRQL

BSOD on daily basis - WORKER THREAD RETURNED AT BAD IRQL

problem solved