BSOD: Event ID 41

emptykaiba · 08 Feb 2010

My laptop frequently shuts down on its own. It usually happens when the system is moderately to very busy. Just before the screen goes black, the fans seems to speed up (or definitely just become louder) and the system shuts down. Note that I don't see a BSOD, the screen just goes black and the power light goes off.

I've been using this program called CoreTemp32 to monitor the temperature of my CPU but haven't noticed any significant overheating related to shut downs.

I've attached my minidump zip. In my searching for information on this problem, I've found that some people believe it has to do with their Realtek audio drivers, but before I go down that path (there is nothing in the dump that leads me to believe the audio driver is the culprit), I wanted to see what the experts on here have to say.

Thanks in advance!

zigzag3143 · 08 Feb 2010

emptykaiba said:

My laptop frequently shuts down on its own. It usually happens when the system is moderately to very busy. Just before the screen goes black, the fans seems to speed up (or definitely just become louder) and the system shuts down. Note that I don't see a BSOD, the screen just goes black and the power light goes off.

I've been using this program called CoreTemp32 to monitor the temperature of my CPU but haven't noticed any significant overheating related to shut downs.

I've attached my minidump zip. In my searching for information on this problem, I've found that some people believe it has to do with their Realtek audio drivers, but before I go down that path (there is nothing in the dump that leads me to believe the audio driver is the culprit), I wanted to see what the experts on here have to say.

Thanks in advance!

Hi and welcome

Memory.

I would
download and run memtestx86 for 5 passes

Run a system file check

Type cmd in search>right click and run as admin>sfc /scannow

let us know the results.

Code:

012910-43430-01.dmp    1/29/2010 7:47:16 PM        0xc000021a    0x8a01ac90    0x00000001    0xc0000001    0x001004bc    ntkrnlpa.exe    ntkrnlpa.exe+dcd10                    32-bit        C:\Users\K\Desktop\New folder\012910-43430-01.dmp    2    15    7600    
020810-52603-01.dmp    2/8/2010 3:19:48 PM        0xc000021a    0x8b0ac4d8    0x00000000    0xc0000001    0x001004ac    ntkrnlpa.exe    ntkrnlpa.exe+dcd10                    32-bit        C:\Users\K\Desktop\New folder\020810-52603-01.dmp    2    15    7600    
102209-34101-01.dmp    10/22/2009 8:44:00 AM    DRIVER_POWER_STATE_FAILURE    0x0000009f    0x00000003    0x85233030    0x82d32ae0    0x944c0888    ntkrnlpa.exe    ntkrnlpa.exe+dcd10                    32-bit        C:\Users\K\Desktop\New folder\102209-34101-01.dmp    2    15    7600    
120909-30139-01.dmp    12/9/2009 10:58:34 PM    DRIVER_POWER_STATE_FAILURE    0x0000009f    0x00000004    0x00000258    0x850c3d48    0x82f38b24    ntkrnlpa.exe    ntkrnlpa.exe+67966                    32-bit        C:\Users\K\Desktop\New folder\120909-30139-01.dmp    2    15    7600    
121609-58890-01.dmp    12/16/2009 10:34:30 PM    IRQL_NOT_LESS_OR_EQUAL    0x0000000a    0x0010014c    0x00000002    0x00000000    0x82e351af    ntkrnlpa.exe    ntkrnlpa.exe+467eb                    32-bit        C:\Users\K\Desktop\New folder\121609-58890-01.dmp    2    15    7600    
013110-42104-01.dmp    1/31/2010 3:43:38 PM    MEMORY_MANAGEMENT    0x0000001a    0x00041201    0xc000a5b8    0x789c3867    0x91ffc780    ntkrnlpa.exe    ntkrnlpa.exe+ac5b0                    32-bit        C:\Users\K\Desktop\New folder\013110-42104-01.dmp    2    15    7600    
121509-32760-01.dmp    12/15/2009 2:29:48 AM    MEMORY_MANAGEMENT    0x0000001a    0x00000403    0xc005caf8    0x1f0df867    0xc04b6a30    halmacpi.dll    halmacpi.dll+5ba9                    32-bit        C:\Users\K\Desktop\New folder\121509-32760-01.dmp    2    15    7600

Old drivers

Code:

tosrfnds.sys        0x981fb000    0x981ff460    0x00004460    0x41dcc1c1    1/5/2005 11:42:41 PM                        
Toshidpt.sys        0x96209000    0x96209e80    0x00000e80    0x42d242de    7/11/2005 4:58:54 AM                        
JGOGO.sys        0x899e9000    0x899eab00    0x00001b00    0x43e88a1a    2/7/2006 6:52:58 AM                        
secdrv.SYS        0xa06be000    0xa06c8000    0x0000a000    0x45080528    9/13/2006 8:18:32 AM                        
tosporte.sys        0x9199b000    0x919a5280    0x0000a280    0x452b76f0    10/10/2006 5:33:20 AM                        
tosrfbnp.sys        0x96200000    0x96208e80    0x00008e80    0x45616d72    11/20/2006 3:55:14 AM                        
ATKACPI.sys        0x91de3000    0x91deb000    0x00008000    0x4580f93d    12/14/2006 2:11:57 AM                        
StkCPipe.sys        0x97600000    0x981cb700    0x00bcb700    0x45a5fda1    1/11/2007 4:04:33 AM                        
rimsptsk.sys        0x91cad000    0x91cc1000    0x00014000    0x45b5bbe3    1/23/2007 2:40:19 AM                        
psd.sys        0x8e4ed000    0x8e4f4d80    0x00007d80    0x45b65cec    1/23/2007 2:07:24 PM                        
avgio.sys        0x8eab5000    0x8eab6800    0x00001800    0x45ddaf5c    2/22/2007 9:57:32 AM                        
rimmptsk.sys        0x91c9e000    0x91cad000    0x0000f000    0x45dfd03d    2/24/2007 12:42:21 AM                        
Tosrfhid.sys        0x963ed000    0x963ff000    0x00012000    0x45e68666    3/1/2007 2:53:10 AM                        
rixdptsk.sys        0x91cc1000    0x91d12000    0x00051000    0x46012cca    3/21/2007 8:02:02 AM                        
jraid.sys        0x89310000    0x8931bb80    0x0000bb80    0x461d0a5a    4/11/2007 11:18:34 AM                        
itecir.sys        0x91d73000    0x91dca000    0x00057000    0x46294956    4/20/2007 6:14:30 PM                        
tosrfbd.sys        0x963d1000    0x963ecd00    0x0001bd00    0x462ca474    4/23/2007 7:20:04 AM                        
iaStor.sys        0x8921c000    0x892da000    0x000be000    0x462f9da3    4/25/2007 1:27:47 PM                        
dump_iaStor.sys        0x8e416000    0x8e4d4000    0x000be000    0x462f9da3    4/25/2007 1:27:47 PM                        
tosrfcom.sys        0x8e400000    0x8e40fa00    0x0000fa00    0x46552240    5/24/2007 12:27:28 AM                        
tosrfusb.sys        0x919f5000    0x919ff380    0x0000a380    0x466cdcc7    6/11/2007 12:25:27 AM                        
averhbtv.sys        0x9622e000    0x96278600    0x0004a600    0x467258b7    6/15/2007 4:15:35 AM                        
SynTP.sys        0x91d37000    0x91d63e00    0x0002ce00    0x46c60dd3    8/17/2007 4:06:27 PM                        
RTKVHDA.sys        0x95a09000    0x95be6280    0x001dd280    0x46f0e7c5    9/19/2007 4:11:33 AM                        
NETw4v32.sys        0x91a24000    0x91c53000    0x0022f000    0x46fa5ab2    9/26/2007 8:12:18 AM                        
StkCSF.sys        0x981cc000    0x981faa00    0x0002ea00    0x475fdbf6    12/12/2007 8:02:46 AM                        
ManyCam.sys        0x91df8000    0x91dfd480    0x00005480    0x478b3428    1/14/2008 5:06:32 AM                        
StkCMini.sys        0x9627c000    0x963d0f80    0x00154f80    0x479471d7    1/21/2008 5:20:07 AM                        
emBDA.sys        0xb6c31000    0xb6cb3080    0x00082080    0x47f56fee    4/3/2008 7:01:50 PM                        
emOEM.sys        0xa07c4000    0xa07cd900    0x00009900    0x47f9bc01    4/7/2008 1:15:29 AM

Jonathan_King · 08 Feb 2010

Welcome!

It does appear as if your Audio Driver is the culprit.

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\minidump\121609-58890-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x82e1f000 PsLoadedModuleList = 0x82f67810
Debug session time: Thu Dec 17 00:32:22.175 2009 (GMT-5)
System Uptime: 0 days 22:03:26.939
Loading Kernel Symbols
...............................................................
................................................................
..........................................................
Loading User Symbols
Loading unloaded module list
...........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {10014c, 2, 0, 82e351af}

Unable to load image \SystemRoot\system32\drivers\emAudio.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for emAudio.sys
*** ERROR: Module load completed but symbols could not be loaded for emAudio.sys
Probably caused by : portcls.sys ( portcls!PnpRemoveDevice+c1 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0010014c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82e351af, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82f87718
Unable to read MiSystemVaType memory at 82f67160
 0010014c 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopInsertRemoveDevice+2c
82e351af 3931            cmp     dword ptr [ecx],esi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  8b313a68 -- (.trap 0xffffffff8b313a68)
ErrCode = 00000000
eax=00000000 ebx=83232900 ecx=0010014c edx=00000000 esi=82784b20 edi=86ca2030
eip=82e351af esp=8b313adc ebp=8b313adc iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!IopInsertRemoveDevice+0x2c:
82e351af 3931            cmp     dword ptr [ecx],esi  ds:0023:0010014c=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82e351af to 82e657eb

STACK_TEXT:  
8b313a68 82e351af badb0d00 00000000 00000003 nt!KiTrap0E+0x2cf
8b313adc 82e353c6 00000000 82784b20 823cb578 nt!IopInsertRemoveDevice+0x2c
8b313b34 82e3556e 82784b20 00000000 87062b00 nt!IopCompleteUnloadOrDelete+0x152
8b313b5c 915a0c8d 82784b20 85816d48 82784bd8 nt!IoDeleteDevice+0xae
8b313b74 9159a750 82784b20 85816d48 85816e90 portcls!PnpRemoveDevice+0xc1
8b313b90 915a0ccf 82784b20 00000000 8b313bb8 portcls!DispatchPnp+0x180
8b313ba0 91cbd157 82784b20 85816d48 85816eb4 portcls!PcDispatchIrp+0x34
WARNING: Stack unwind information not available. Following frames may be wrong.
8b313bb8 82e5b4bc 82784b20 85816d48 8b313c54 emAudio+0x4157
8b313bd0 82ffbedf 87072c68 87cfde78 87072c68 nt!IofCallDriver+0x63
8b313c00 82fd2b3d 87072c68 00000000 87cfde78 nt!IopSynchronousCall+0xc2
8b313c58 82e33c3a 87072c68 00000002 ad1c2ad0 nt!IopRemoveDevice+0xd4
8b313c84 82fd2951 00000000 ad1c2ad0 00000000 nt!PnpRemoveLockedDeviceNode+0x16c
8b313c98 82fd28b7 00000002 00000000 00000000 nt!PnpDeleteLockedDeviceNode+0x2d
8b313cc8 830dd973 8267c030 ad1c2ad0 00000002 nt!PnpDeleteLockedDeviceNodes+0x4c
8b313d00 82e8cf2b 824aa1f0 00000000 852c3d48 nt!PnpDelayedRemoveWorker+0x54
8b313d50 8302d66d 00000001 ae064eeb 00000000 nt!ExpWorkerThread+0x10d
8b313d90 82edf0d9 82e8ce1e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
portcls!PnpRemoveDevice+c1
915a0c8d 5f              pop     edi

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  portcls!PnpRemoveDevice+c1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: portcls

IMAGE_NAME:  portcls.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc864

FAILURE_BUCKET_ID:  0xA_portcls!PnpRemoveDevice+c1

BUCKET_ID:  0xA_portcls!PnpRemoveDevice+c1

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0010014c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82e351af, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82f87718
Unable to read MiSystemVaType memory at 82f67160
 0010014c 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopInsertRemoveDevice+2c
82e351af 3931            cmp     dword ptr [ecx],esi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  8b313a68 -- (.trap 0xffffffff8b313a68)
ErrCode = 00000000
eax=00000000 ebx=83232900 ecx=0010014c edx=00000000 esi=82784b20 edi=86ca2030
eip=82e351af esp=8b313adc ebp=8b313adc iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!IopInsertRemoveDevice+0x2c:
82e351af 3931            cmp     dword ptr [ecx],esi  ds:0023:0010014c=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82e351af to 82e657eb

STACK_TEXT:  
8b313a68 82e351af badb0d00 00000000 00000003 nt!KiTrap0E+0x2cf
8b313adc 82e353c6 00000000 82784b20 823cb578 nt!IopInsertRemoveDevice+0x2c
8b313b34 82e3556e 82784b20 00000000 87062b00 nt!IopCompleteUnloadOrDelete+0x152
8b313b5c 915a0c8d 82784b20 85816d48 82784bd8 nt!IoDeleteDevice+0xae
8b313b74 9159a750 82784b20 85816d48 85816e90 portcls!PnpRemoveDevice+0xc1
8b313b90 915a0ccf 82784b20 00000000 8b313bb8 portcls!DispatchPnp+0x180
8b313ba0 91cbd157 82784b20 85816d48 85816eb4 portcls!PcDispatchIrp+0x34
WARNING: Stack unwind information not available. Following frames may be wrong.
8b313bb8 82e5b4bc 82784b20 85816d48 8b313c54 emAudio+0x4157
8b313bd0 82ffbedf 87072c68 87cfde78 87072c68 nt!IofCallDriver+0x63
8b313c00 82fd2b3d 87072c68 00000000 87cfde78 nt!IopSynchronousCall+0xc2
8b313c58 82e33c3a 87072c68 00000002 ad1c2ad0 nt!IopRemoveDevice+0xd4
8b313c84 82fd2951 00000000 ad1c2ad0 00000000 nt!PnpRemoveLockedDeviceNode+0x16c
8b313c98 82fd28b7 00000002 00000000 00000000 nt!PnpDeleteLockedDeviceNode+0x2d
8b313cc8 830dd973 8267c030 ad1c2ad0 00000002 nt!PnpDeleteLockedDeviceNodes+0x4c
8b313d00 82e8cf2b 824aa1f0 00000000 852c3d48 nt!PnpDelayedRemoveWorker+0x54
8b313d50 8302d66d 00000001 ae064eeb 00000000 nt!ExpWorkerThread+0x10d
8b313d90 82edf0d9 82e8ce1e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
portcls!PnpRemoveDevice+c1
915a0c8d 5f              pop     edi

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  portcls!PnpRemoveDevice+c1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: portcls

IMAGE_NAME:  portcls.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc864

FAILURE_BUCKET_ID:  0xA_portcls!PnpRemoveDevice+c1

BUCKET_ID:  0xA_portcls!PnpRemoveDevice+c1

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0010014c, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82e351af, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82f87718
Unable to read MiSystemVaType memory at 82f67160
 0010014c 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!IopInsertRemoveDevice+2c
82e351af 3931            cmp     dword ptr [ecx],esi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  8b313a68 -- (.trap 0xffffffff8b313a68)
ErrCode = 00000000
eax=00000000 ebx=83232900 ecx=0010014c edx=00000000 esi=82784b20 edi=86ca2030
eip=82e351af esp=8b313adc ebp=8b313adc iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
nt!IopInsertRemoveDevice+0x2c:
82e351af 3931            cmp     dword ptr [ecx],esi  ds:0023:0010014c=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82e351af to 82e657eb

STACK_TEXT:  
8b313a68 82e351af badb0d00 00000000 00000003 nt!KiTrap0E+0x2cf
8b313adc 82e353c6 00000000 82784b20 823cb578 nt!IopInsertRemoveDevice+0x2c
8b313b34 82e3556e 82784b20 00000000 87062b00 nt!IopCompleteUnloadOrDelete+0x152
8b313b5c 915a0c8d 82784b20 85816d48 82784bd8 nt!IoDeleteDevice+0xae
8b313b74 9159a750 82784b20 85816d48 85816e90 portcls!PnpRemoveDevice+0xc1
8b313b90 915a0ccf 82784b20 00000000 8b313bb8 portcls!DispatchPnp+0x180
8b313ba0 91cbd157 82784b20 85816d48 85816eb4 portcls!PcDispatchIrp+0x34
WARNING: Stack unwind information not available. Following frames may be wrong.
8b313bb8 82e5b4bc 82784b20 85816d48 8b313c54 emAudio+0x4157
8b313bd0 82ffbedf 87072c68 87cfde78 87072c68 nt!IofCallDriver+0x63
8b313c00 82fd2b3d 87072c68 00000000 87cfde78 nt!IopSynchronousCall+0xc2
8b313c58 82e33c3a 87072c68 00000002 ad1c2ad0 nt!IopRemoveDevice+0xd4
8b313c84 82fd2951 00000000 ad1c2ad0 00000000 nt!PnpRemoveLockedDeviceNode+0x16c
8b313c98 82fd28b7 00000002 00000000 00000000 nt!PnpDeleteLockedDeviceNode+0x2d
8b313cc8 830dd973 8267c030 ad1c2ad0 00000002 nt!PnpDeleteLockedDeviceNodes+0x4c
8b313d00 82e8cf2b 824aa1f0 00000000 852c3d48 nt!PnpDelayedRemoveWorker+0x54
8b313d50 8302d66d 00000001 ae064eeb 00000000 nt!ExpWorkerThread+0x10d
8b313d90 82edf0d9 82e8ce1e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19


STACK_COMMAND:  kb

FOLLOWUP_IP: 
portcls!PnpRemoveDevice+c1
915a0c8d 5f              pop     edi

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  portcls!PnpRemoveDevice+c1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: portcls

IMAGE_NAME:  portcls.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc864

FAILURE_BUCKET_ID:  0xA_portcls!PnpRemoveDevice+c1

BUCKET_ID:  0xA_portcls!PnpRemoveDevice+c1

Followup: MachineOwner
---------

I recommend removing your sound drivers, rebooting, and letting Windows reinstall them. Make sure they are up-to-date afterwards, by going into Device Manager, finding your card, and selecting Update Driver software from the right-click menu.

Hope this helps,
~JK

Edit: Ken beat me to the post, and he is more experienced than I. Take his suggestion first.

emptykaiba · 11 Feb 2010

Thanks guys. My memory was fine. I've upgrade the Realtek HD audio driver and have not experienced the problem in a few days. It almost always happened at least once a day, usually while I was streaming my gaming videos and was quite a nuisance.