BSOD Event 41, Kernel Power

[Husaberger]

Hi Anak

You still have some drivers that are seriously outdated: hberger drivers.xlsx.zip I would first concentrate on the ones from the Intel at 2005 to 2008 then the ones in 2009, if you don't need them get rid of them.

Have updated all I can with Intel download utility. Where can I find iirsp from 2005 to get rid of it?

 

[Anak]

The main reason You can't find it:

End of Interactive Support Disclaimer
Intel no longer provides email, chat, or phone support for this discontinued product(s). Product support information on the Intel web site is provided for reference and subject to the "Terms of use".

Intel will not provide future software updates to support new operating systems or improve compatibility with third-party devices and software products.


Source: Intel® RAID Controllers — Intel® RAID Controllers & ICP Vortex* RAID Controllers (Halt During POST)

Intel sold the rights to another Company, Adaptec has it now under a different name.

Driver iirsp.sys

iirsp.sys is filename of the driver running on Microsoft Windows operating system. This driver belongs in most cases to product Intel/ICP Raid Storport Driver and is developed by Intel Corp./ICP vortex GmbH company. File version information describes this process as Intel/ICP Raid Storport Driver. Process is loaded from directory C:\Windows\System32\DRIVERS.

This file belongs to the driver category. Drivers are designed to operate in cooperation with system hardware resources and can address the hardware inputs and outputs. An operating system can use drivers for multiple devices : printers, graphics cards, keyboards, pointing devices, memory, hard drives and many others. Drivers can also provide functionality for third-party applications, can be provided as a system drivers designed by Microsoft or be designed by the hardware vendor. Drivers can communicate with the underlying hardware based on settled inputs and outputs.

Source: Driver iirsp.sys | ProcessAdvisory.com

So, iirsp.sys is a Windows system file that Intel created for the Windows OS, it can be found at several different sites if you look hard enough, but, even with the proper MD5: SHA1: and SHA2: hashes it is dicey at best to try and use them. System files should come already packed into the OS as delivered on disk.

If you don't have a server board, an Intel RAID Controller or a ICP Vortex RAID Controller installed I really don't see the point in having the iirsp file installed. There aren't any dependencies: INF-iirsp (Standard 8 Module Reference), but that's not to say it isn't needed somehow.


Go to C:\Windows\System32\drivers and see what your iirsp file says, mine is from 07-13-2009 and is 44KB in size. Also check, C:\Windows\System32\DriverStore\FileRepositor\iirsp.inf_amd64_neutral_

Are they both from 2005, or is one newer?

There may be a way you can go, but I want to wait until you reply with your findings.

 

[Husaberger]

Hi Anak

As you can see, I have removed all drivers older than 2008 (except for secdrv and lmimirr which seem to be the latest version of each) and so far the system is stable

Now if only this solves my Event 41, Kernel Power crashes...

Will report back

 

[Anak]

secdrv:
Can be malicious, It poses a potential security risk because it grants kernel access to the programs it works with.

• Macrovision uses it as a security driver for its games to check for piracy, but it is buggy and can cause optical drive problems. This has been going on since 2007: Update: Buggy game DRM puts Windows users at risk - Computerworld

• Here's what Microsoft says about it: Microsoft Security Advisory (944653): Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege

If you click on the Troj/Pushu-Gen link here: SystemLookup - Global Search | secdrv Sophos has no results, click here: ThreatExpert Report: Trojan.Pandex, Trojan-Dropper.Win32.Mutant.a, Troj/Pushu-Gen, Mal/Behav-116, and: secdrv.sys Windows process - What is it? to find out more.


lmimirr:
Seems legitimate, have you or have you ever had LogMeIn installed on your machine? SystemLookup - Global Search | lmimirr


Keep a copy of the Drivers list in case we have to go back and restore some of them, there is a way even if they are obsolete.

Now if only this solves my Event 41, Kernel Power crashes...

I'm hoping to, "knock on wood". View attachment 291697

 

[Husaberger]

Hi Anak and Arc
Thank you so much for all of your help at the end of last year
I gave up, got a new motherboard+CPU and things have been rock solid stable since
Pretty sure it was the ASUS motherboard
Hope you are both doing well

 

[Anak]

Hi Husaberger,

Your welcome, it's great to hear that you have your problem sorted out, and you explained how. Give it a while and you can come back and mark your thread solved.

Looking back over your thread, it seems obvious now that the problem centered on your motherboard.

• The situation with the BIOS overclocking by itself.
• The USB, JMicron, and Marvell Controllers that run in conjunction with the CPU.
• The daily freezes, but rare BSOD's.

Were you able to RMA those parts?

I don't know 'bout Arc, but the wife and I are doing okay, can't wait till Spring gets here.

May you and yours have a rewarding new year!

Steve

 

[Arc]

I don't know 'bout Arc, but the wife and I are doing okay, can't wait till Spring gets here.

Me too doing ok

 

[Husaberger]

Sigh...
New mb+cpe and system is still unstable

 

[Anak]

Your dumps were the same except for:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

[COLOR=Blue]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/COLOR]
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, [COLOR=Blue][U]but this system was booted
/NODEBUG[/U][/COLOR].  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code...

STACK_TEXT:  
fffff880`03f5b1f8 fffff880`051e7ad6 : 00000000`00000000 fffff880`03f5b280 00000000`00000000 ffffffff`fd050f80 : 0x0
fffff880`03f5b200 00000000`00000000 : fffff880`03f5b280 00000000`00000000 ffffffff`fd050f80 00000000`00000004 : [COLOR=Blue]nusb3hub+0x9ad6[/COLOR]


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  [COLOR=Blue]nusb3hub+9ad6[/COLOR]

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nusb3hub

IMAGE_NAME:  nusb3hub.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  50330ac6

STACK_COMMAND:  .cxr 0xfffff88003f5a810 ; kb

FAILURE_BUCKET_ID:  X64_0x7E_NULL_IP_[COLOR=Blue]nusb3hub+9ad6[/COLOR]

BUCKET_ID:  X64_0x7E_NULL_IP_[COLOR=Blue]nusb3hub+9ad6[/COLOR]

Followup: MachineOwner
---------

About that: but this system was booted /NODEBUG Do you have your machine set to debug? http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html


Unless Arc has something I would try the highlighted #2 resolution bullet below.

Resolution

If you are not equipped to debug this problem, you should use some basic troubleshooting techniques.

• Make sure you have enough disk space.
• If a driver is identified in the bug check message, disable the driver or check with the manufacturer for driver updates.
• Try changing video adapters.
• Check with your hardware vendor for any BIOS updates.
• Disable BIOS memory options such as caching or shadowing.

Source: Bug Check 0x7E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (Windows Debuggers)

More:

Usual causes:
Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control,

Source: STOP 0x0000007E: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED - carrona.org

 

[Husaberger]

Thank you Anak
1. I have machine set to create small memory dump per tutorial. Is that the correct?
2. As far as you can tell there is no driver causing problems, is that correct?
3. With all the recent news about the government injecting malware into machines... what do you think the chances are that I picked up something that is causing this issue by downloading torrents?

 

[Anak]

Your welcome.

1.) That is correct.

2.) Well, there is something going on with the USB3 hub that needs looked into (nusb3hub). Can you check with ASUS to see if there is an updated driver for it or if you know the vendor ASUS used you can try there like Driver Reference Table - nusb3hub.sys (renesas).

3.) The government injects malware?!? :shock: What?!? Just kiddin', maybe not.
Chances? I'd say 50-50. How sure are you about your machine being clean? Have you ran any scans? If not sure you should know the drill on how to check by now.