BSOD - Event View Source: Kernel Power, EventID 41

Hi bilbi,

There seems to be a power issue on the kernel, however this can be caused by many things and is not solely indicative of a power loss. It's a good place to start though. I see by the computer name that this is a laptop?

• Was it running on batteries or power when the issue occured?
• Are there many USB (or other external) deveices plugged in to it?

Head off to your manufacturers website and download the latest drivers (don't use windows update as these may not be the newest available). Update everything! note: For chipset drivers you may want to check with AMD or intel directly.

The bug report suggests that your wireless drivers are the culprit (netw5v64.sys). you may want to start with these first.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Tim\Desktop\011810-19952-01\011810-19952-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02e0f000 PsLoadedModuleList = 0xfffff800`0304ce50
Debug session time: Tue Jan 19 06:04:55.580 2010 (GMT+11)
System Uptime: 0 days 11:17:34.281
Loading Kernel Symbols
...............................................................
................................................................
...........................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 1097, 210005, fffffa8007ed7e00}

Unable to load image \SystemRoot\system32\DRIVERS\netw5v64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for netw5v64.sys
*** ERROR: Module load completed but symbols could not be loaded for netw5v64.sys
GetPointerFromAddress: unable to read from fffff800030b70e0
Probably caused by : netw5v64.sys ( netw5v64+1b8283 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001097, (reserved)
Arg3: 0000000000210005, Memory contents of the pool block
Arg4: fffffa8007ed7e00, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  fffffa8007ed7e00 

FREED_POOL_TAG:  W3Rx

BUGCHECK_STR:  0xc2_7_W3Rx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  IDMan.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002fb260e to fffff80002e80f00

STACK_TEXT:  
fffff880`0bd59008 fffff800`02fb260e : 00000000`000000c2 00000000`00000007 00000000`00001097 00000000`00210005 : nt!KeBugCheckEx
fffff880`0bd59010 fffff880`020a7ad2 : fffffa80`06128ad0 00000000`00000000 00000000`00000100 fffffa80`07ed7e20 : nt!ExFreePool+0xccb
fffff880`0bd590c0 fffff880`05429283 : fffff780`00000014 fffffa80`045e1100 fffffa80`0311efe0 fffff880`05280fd4 : ndis!NdisFreeNetBufferList+0x112
fffff880`0bd590f0 fffff780`00000014 : fffffa80`045e1100 fffffa80`0311efe0 fffff880`05280fd4 00000000`00000000 : netw5v64+0x1b8283
fffff880`0bd590f8 fffffa80`045e1100 : fffffa80`0311efe0 fffff880`05280fd4 00000000`00000000 fffff880`0527efc9 : 0xfffff780`00000014
fffff880`0bd59100 fffffa80`0311efe0 : fffff880`05280fd4 00000000`00000000 fffff880`0527efc9 fffff880`0553e650 : 0xfffffa80`045e1100
fffff880`0bd59108 fffff880`05280fd4 : 00000000`00000000 fffff880`0527efc9 fffff880`0553e650 fffffa80`045e1100 : 0xfffffa80`0311efe0
fffff880`0bd59110 00000000`00000000 : fffff880`0527efc9 fffff880`0553e650 fffffa80`045e1100 fffffa80`045ac760 : netw5v64+0xffd4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
netw5v64+1b8283
fffff880`05429283 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  netw5v64+1b8283

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: netw5v64

IMAGE_NAME:  netw5v64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a688998

FAILURE_BUCKET_ID:  X64_0xc2_7_W3Rx_netw5v64+1b8283

BUCKET_ID:  X64_0xc2_7_W3Rx_netw5v64+1b8283

Followup: MachineOwner
---------

EDIT: I missed in the dump, that IDMAN.exe is also flagged, this can sometimes be a virus so please disable sleep-mode and do a full virus check. Honestly I don't think yours is the virus (just being safe). This process is the windows download manager and it's appearance also supports a problem with the wireless network adapter drivers.

Other thoughts, the same issue can occur if the RAM, paging file, or windows OS is corrupted.

Running checkdisk
1. Press the windows Key+E to open windows explorer
2. Right click on your windows drive and select properties
3. On the tools menu, click check now.
4. Check your drive and repeat for other drives on your system

Checking windows system files
Open an elevated command prompt.
1. Start globe
2. Type in CMD
3. Right click and open as administrator
4. type SFC /SCANNOW and press enter

Purging your pagefile
1. Start globe
2. search for secpol.msc
3. Open it
4. Under local policies / security options
5. Look for Shutdown: clear virtual memory pagefile
6. Enable this
7. Reboot your PC
8. Remember to disable when you are done (unless you always want to clear it

- Tim

bilbi said:

Wow thanks for the quick response!

Yes it's a laptop - the crash happened on both battery/power adapter. But wait! it seems that the crash happened only when I had heavy wireless activity with IDM. so it might be some sort of a problem with IDM compatability under heavy load.

Anyways, before I had IDM - the BSOD have never appeared.

Thanks!

Yep, I also saw that in the bug report and edited my post above (seconds after posting it :) ). Please check it again and let me know how you go after the drivers are updated.

Just an FYI
IDMan.exe is Internet Download Manager

No problem, we can pick this up at any time.
*Fingers crossed*