Help diagnosing a blue screen

[Cosmos_i7]

Hi guys,

I need some help diagnosing a blue screen for a friend of mine. He isn't into PCs and he knew I was so he sent me the picture of the blue screen. No overclocking has been done as far as a I know and I don't believe any RAM has been replaced, although faulty RAM is obviously possible. 

 

He said that it was quite repetitive and not just a one off problem.

 

Here is the picture he sent me: 

 

Thanks guys. 

[Sarcasm]

He happened to cut off the part that actually mattered...

[Cosmos_i7]

He happened to cut off the part that actually mattered...

I'll try and get some more information off him and get the crash dump files.

[Cosmos_i7]

I've managed to get the crash dump files off him:

 

 

minidump.zip

 

[YoYo155]

Hi I went through the dump files and they are all similar.

Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532System Uptime: 0 days 0:16:14.334Probably caused by : ntkrnlmp.exe ( nt!IopProcessWorkItem+0 )BugCheck E1, {fffff800039bd1b0, 2, fffffa80076a0180, fffffa80076a0180}BugCheck Info: WORKER_THREAD_RETURNED_AT_BAD_IRQL (e1)Bugcheck code 000000e1Arguments: Arg1: fffff800039bd1b0, address of worker routine (do ln on this to find guilty driver)Arg2: 0000000000000002, IRQL returned at (should have been 0, but isn't).Arg3: fffffa80076a0180, workitem parameterArg4: fffffa80076a0180, workitem addressBUGCHECK_STR:  0xE1DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULTPROCESS_NAME:  SystemFAILURE_BUCKET_ID:  X64_0xE1_nt!IopProcessWorkItem+0MaxSpeed:     2100CurrentSpeed: 2095BiosVersion = A11BiosReleaseDate = 08/03/2012SystemManufacturer = Dell Inc.SystemProductName = Inspiron N5110

This type of bugcheck doesn't give us a lot of information, what I can say is that it's due to a driver misbehaving.

I see a fair bunch of outdated drivers that can be the cause but if I have to guess I'll blame McAfee personal firewall for these bug checks.

 

The way we can use the PC to help us find the offending driver is by using Driver Verifier.

http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

 

make sure you read the instructions thoroughly !

DV is designed to bug check the machine and it takes up a fair bit of system resources to don't be alarmed as the laptop might be sluggish.

Bug check the machine a couple of time then post the new dumps.

 

Below are the suspect drivers.

 

 

hamachi.sys Thu Feb 19 12:36:41 2009
LogMeIn Hamachi Virtual network interface driver
http://www.carrona.org/drivers/driver.php?id=hamachi.sys

PxHlpa64.sys Tue Oct 20 21:08:42 2009
Sonic CD/DVD driver (used by many different CD/DVD programs)
http://www.carrona.org/drivers/driver.php?id=PxHlpa64.sys

amdxata.sys Fri Mar 19 18:18:18 2010
AMD storage controller driver - usually from the Windows 7 DVD
http://www.carrona.org/drivers/driver.php?id=amdxata.sys

btmaux.sys Thu Oct 14 18:31:34 2010
Intel Bluetooth Auxiliary Service
http://www.carrona.org/drivers/driver.php?id=btmaux.sys

HECIx64.sys Wed Oct 20 02:33:43 2010
Intel Management Engine Interface
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys

iaStor.sys Sat Nov 6 09:44:52 2010
Intel Storage drivers
http://www.carrona.org/drivers/driver.php?id=iaStor.sys

nusb3xhc.sys Fri Dec 10 06:50:35 2010
NEC Electronics USB 3.0 Host Controller Driver (previous BSOD issues with 2010 and earlier versions)
http://www.carrona.org/drivers/driver.php?id=nusb3xhc.sys

nusb3hub.sys Fri Dec 10 06:50:35 2010
NEC Electronics USB 3.0 Host Controller Driver (previous BSOD issues with 2010 and earlier versions)
http://www.carrona.org/drivers/driver.php?id=nusb3hub.sys

iwdbus.sys Thu Mar 10 01:43:23 2011
Intel WIDI Bus Enumerator driver[br]Related to Intel Widi - Wireless Display
http://www.carrona.org/drivers/driver.php?id=iwdbus.sys

speedfan.sys Fri Mar 18 18:08:46 2011
SpeedFan
http://www.carrona.org/drivers/driver.php?id=speedfan.sys

Apfiltr.sys Thu May 12 18:28:31 2011
Alps pointing device
http://www.carrona.org/drivers/driver.php?id=Apfiltr.sys

Rt64win7.sys Fri Jun 10 09:33:15 2011
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys

CtClsFlt.sys Thu Jun 16 09:40:18 2011
Creative Camera Class Upper Filter Driver
http://www.carrona.org/drivers/driver.php?id=CtClsFlt.sys

stwrt64.sys Thu Sep 8 13:48:44 2011
SigmaTel High Definition Audio Codec
http://www.carrona.org/drivers/driver.php?id=stwrt64.sys

btmhsf.sys Wed Nov 2 14:26:12 2011
Intel Proset Bluetooth HighSpeed Filter Driver
http://www.carrona.org/drivers/driver.php?id=btmhsf.sys

iBtFltCoex.sys Fri Dec 9 21:45:13 2011
Intel Centrino Wireless (Bluetooth Adapter driver
http://www.carrona.org/drivers/driver.php?id=iBtFltCoex.sys

GEARAspiWDM.sys Thu May 3 22:56:17 2012
CD-ROM Class Filter Driver by Gear Software.[br]Also comes with iTunes
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys

IntcDAud.sys Tue Jun 19 17:40:51 2012
Intel Graphics Media Accelerator HD Driver
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys

igdkmd64.sys Tue Aug 21 20:08:36 2012
Intel Graphics driver
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys

Netwsw00.sys Thu Dec 6 14:11:36 2012
Intel® Wireless WiFi Link Adapter
http://www.carrona.org/drivers/driver.php?id=Netwsw00.sys

mfehidk.sys Tue Jan 15 20:21:15 2013
McAfee Host Intrusion Detection Link Driver
http://www.carrona.org/drivers/driver.php?id=mfehidk.sys

mfewfpk.sys Tue Jan 15 20:21:30 2013
McAfee
http://www.carrona.org/drivers/driver.php?id=mfewfpk.sys

mfeapfk.sys Tue Jan 15 20:21:56 2013
McAfee
http://www.carrona.org/drivers/driver.php?id=mfeapfk.sys

mfeavfk.sys Tue Jan 15 20:22:16 2013
McAfee Anti-Virus File System Filter Driver
http://www.carrona.org/drivers/driver.php?id=mfeavfk.sys

mfefirek.sys Tue Jan 15 20:24:04 2013
McAfee
http://www.carrona.org/drivers/driver.php?id=mfefirek.sys

cfwids.sys Tue Jan 15 20:24:37 2013
McAfee
http://www.carrona.org/drivers/driver.php?id=cfwids.sys

[Cosmos_i7]

@YoYo155 thanks for the information, I will point him to it. Those application do look familiar to what he is used to using, especially hamachi and Mcafee. Hopefully this can sort the problem out and I will see how it goes.

 

Thanks again!

[YoYo155]

You're welcome, keep updating.

[Cosmos_i7]

You're welcome, keep updating.

He is looking through it and said he will get back to me, thanks again.

[colonel_mortis]

It's apparently a fault with "IopProcessWorkItem" (IOP is an Input-Output operation normally) according to ln <arg 1> so possibly check your drives. Other than that, not got much more to offer than has already been said.