locked
Kernel-Power event ID 41, new machine RRS feed

  • Question

  • Hello. I got a new PC recently, and I'm having alot of random crashes. Checked Event Viewer to see Kernel-Power event ID 41 critical errors.

    My GPU and Audio drivers are up to date.

     

    XML view of copied event viewer details:

    - < Event xmlns =" http://schemas.microsoft.com/win/2004/08/events/event " >
    - < System >
      < Provider Name =" Microsoft-Windows-Kernel-Power " Guid =" {331C3B3A-2005-44C2-AC5E-77220C37D6B4} " />
      < EventID > 41 </ EventID >
      < Version > 2 </ Version >
      < Level > 1 </ Level >
      < Task > 63 </ Task >
      < Opcode > 0 </ Opcode >
      < Keywords > 0x8000000000000002 </ Keywords >
      < TimeCreated SystemTime =" 2011-02-11T14:29:31.290424300Z " />
      < EventRecordID > 5162 </ EventRecordID >
      < Correlation />
      < Execution ProcessID =" 4 " ThreadID =" 8 " />
      < Channel > System </ Channel >
      < Computer > God-PC </ Computer >
      < Security UserID =" S-1-5-18 " />
      </ System >
    - < EventData >
      < Data Name =" BugcheckCode " > 0 </ Data >
      < Data Name =" BugcheckParameter1 " > 0x0 </ Data >
      < Data Name =" BugcheckParameter2 " > 0x0 </ Data >
      < Data Name =" BugcheckParameter3 " > 0x0 </ Data >
      < Data Name =" BugcheckParameter4 " > 0x0 </ Data >
      < Data Name =" SleepInProgress " > false </ Data >
      < Data Name =" PowerButtonTimestamp " > 0 </ Data >
      </ EventData >
      </ Event >
    Friday, February 11, 2011 2:37 PM

Answers

  • ok, wininit.exe was killed by Symantec:

    EXCEPTION_CODE: (Win32) 0xff (255) - Die erweiterten Attribute sind inkonsistent.

    BUGCHECK_STR:  0xF4_FF

    82e3f0e0  "Terminating critical process 0x%"
    82e3f100  "p (%s)."
    8881069c  "wininit.exe "

    STACK_TEXT: 
    8211bc18 82ef251f 000000f4 00000003 88810530 nt!KeBugCheckEx+0x1e
    8211bc3c 82e76322 82e3f0e0 8881069c 888107a0 nt!PspCatchCriticalBreak+0x71
    8211bc6c 82e781bf 88810530 88971d48 000000ff nt!PspTerminateAllThreads+0x2d
    8211bca0 91c4f529 00000088 000000ff 875ad048 nt!NtTerminateProcess+0x1a2
    WARNING: Stack unwind information not available. Following frames may be wrong.
    8211bd24 82c5943a 00000088 000000ff 0019e650 SYMEVENT +0x14529
    8211bd24 0019f3d4 00000088 000000ff 0019e650 nt!KiFastCallEntry+0x12a
    8211bd94 00000000 76e66344 0000001b 00000246 0x19f3d4

    FAILURE_BUCKET_ID:  0xF4_FF_IMAGE_wininit .exe

        Image path: \??\C:\Windows\system32\Drivers\SYMEVENT.SYS
        Image name: SYMEVENT.SYS
        Timestamp:        Fri Aug 14 00:22:41 2009

    Your version is from 2009. Update Norton/Symantec please!

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Andre.Ziegler Saturday, February 12, 2011 12:19 AM
    • Marked as answer by Miya Yao Friday, February 18, 2011 6:35 AM
    Saturday, February 12, 2011 12:19 AM
  • Do you run the RAM with Command Rate 1? If yes, change it in the BIOS to 2.
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by Miya Yao Friday, February 18, 2011 6:35 AM
    Saturday, February 12, 2011 1:39 PM

All replies

  • check the 5 steps here under scenario 3:

    http://support.microsoft.com/kb/2028504


    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 11, 2011 2:48 PM
  • Checked everything prior to asking my question.

    No overclocking that I know of, no overheating [at BIOS shows 33o], power supply should be enough [500 watts], used the memory check, everything cleared OK.

    Got nothing external except mouse and keyboard.

    I think I should add, it's extremely random. PC can stay on and stable for anywhere between 5 mins and 5 hours after turning it on.

    Should I post BIOS info and system specs ? if so, please let me know how to do it.

    Friday, February 11, 2011 2:53 PM
  • update the BIOS, load the default BIOS settings.

    Which hardware do you use? Which PSU do you have?


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 11, 2011 3:06 PM
  • I apologize, I don't know how to copy/paste my specs, and what PSU means.

    If you could tell me how, I'll gladly do it, as this problem is really frustrating.

    Friday, February 11, 2011 3:09 PM
  • PSU = Power supply unit. What's the name? What are the technical data of it?

    You can make pictures of Everest/SIW and upload them to your SkyDrive [1] and include the pictures here.

    André

    [1] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 11, 2011 3:19 PM
  • https://arny1g.bay.livefilestore.com/y1pUR9PcdBiFSfKBXVWrFo64sbGWROFAKaZpB2kX3lUN9IN_JhYseJIqJqQkHx_xUQsMs1h1sr40XPMfJ8SFFCzflSJRypk6slW/Report.txt?psid=1

    or

    https://cid-116202ba2e0ff9a0.office.live.com/self.aspx/Specs/Report.txt

    Used AIDA to make that report, general system summery. Let me know if you need more. [Or if it does not work]

    On the side of my PSU it says: CHIEFTEC, Model CTF-500-12G

    Friday, February 11, 2011 3:41 PM
  • the link doesn't work. I don't have the permission to see the report.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 11, 2011 5:03 PM
  • Try again please, I changed the permissions to "public".
    Friday, February 11, 2011 5:15 PM
  • Another Kernel Power event ID 41

    This time, log looks a bit different:

    - < Event xmlns =" http://schemas.microsoft.com/win/2004/08/events/event " >
    - < System >
      < Provider Name =" Microsoft-Windows-Kernel-Power " Guid =" {331C3B3A-2005-44C2-AC5E-77220C37D6B4} " />
      < EventID > 41 </ EventID >
      < Version > 2 </ Version >
      < Level > 1 </ Level >
      < Task > 63 </ Task >
      < Opcode > 0 </ Opcode >
      < Keywords > 0x8000000000000002 </ Keywords >
      < TimeCreated SystemTime =" 2011-02-11T23:18:34.756826800Z " />
      < EventRecordID > 6598 </ EventRecordID >
      < Correlation />
      < Execution ProcessID =" 4 " ThreadID =" 8 " />
      < Channel > System </ Channel >
      < Computer > God-PC </ Computer >
      < Security UserID =" S-1-5-18 " />
      </ System >
    - < EventData >
      < Data Name =" BugcheckCode " > 244 </ Data >
      < Data Name =" BugcheckParameter1 " > 0x3 </ Data >
      < Data Name =" BugcheckParameter2 " > 0x88810530 </ Data >
      < Data Name =" BugcheckParameter3 " > 0x8881069c </ Data >
      < Data Name =" BugcheckParameter4 " > 0x82e3f0e0 </ Data >
      < Data Name =" SleepInProgress " > false </ Data >
      < Data Name =" PowerButtonTimestamp " > 0 </ Data >
      </ EventData >
      </ Event >
    Friday, February 11, 2011 11:32 PM
  • 244 = 0xF4 = Bug Check 0xF4: CRITICAL_OBJECT_TERMINATION

    This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.

    http://msdn.microsoft.com/en-us/library/ff560372%28VS.85%29.aspx

    Cause

    Several processes and threads are necessary for the operation of the system. When they are terminated for any reason, the system can no longer function.


    To see the cause I have to take a look at the dumps with the Debugging Tools for Windows.

    Please start the Windows Explorer and go to the folder C:\Windows\Minidump. Next, copy the dmp files to your desktop, zip all dmp into 1 zip file and upload the zip file to your public Skydrive [1] folder and post a link here.

    André

    [1] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 11, 2011 11:52 PM
  • Only 1 dump file.

    http://cid-116202ba2e0ff9a0.office.live.com/self.aspx/Specs/021211-33041-01.zip

    I appreciate everything you've done so far, please help me see this problem solved.

    Saturday, February 12, 2011 12:07 AM
  • ok, wininit.exe was killed by Symantec:

    EXCEPTION_CODE: (Win32) 0xff (255) - Die erweiterten Attribute sind inkonsistent.

    BUGCHECK_STR:  0xF4_FF

    82e3f0e0  "Terminating critical process 0x%"
    82e3f100  "p (%s)."
    8881069c  "wininit.exe "

    STACK_TEXT: 
    8211bc18 82ef251f 000000f4 00000003 88810530 nt!KeBugCheckEx+0x1e
    8211bc3c 82e76322 82e3f0e0 8881069c 888107a0 nt!PspCatchCriticalBreak+0x71
    8211bc6c 82e781bf 88810530 88971d48 000000ff nt!PspTerminateAllThreads+0x2d
    8211bca0 91c4f529 00000088 000000ff 875ad048 nt!NtTerminateProcess+0x1a2
    WARNING: Stack unwind information not available. Following frames may be wrong.
    8211bd24 82c5943a 00000088 000000ff 0019e650 SYMEVENT +0x14529
    8211bd24 0019f3d4 00000088 000000ff 0019e650 nt!KiFastCallEntry+0x12a
    8211bd94 00000000 76e66344 0000001b 00000246 0x19f3d4

    FAILURE_BUCKET_ID:  0xF4_FF_IMAGE_wininit .exe

        Image path: \??\C:\Windows\system32\Drivers\SYMEVENT.SYS
        Image name: SYMEVENT.SYS
        Timestamp:        Fri Aug 14 00:22:41 2009

    Your version is from 2009. Update Norton/Symantec please!

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Proposed as answer by Andre.Ziegler Saturday, February 12, 2011 12:19 AM
    • Marked as answer by Miya Yao Friday, February 18, 2011 6:35 AM
    Saturday, February 12, 2011 12:19 AM
  • Thank you, but the thing is, the problems with the kernel crushing started happening even before I had anything on my PC except for windows.

    Also, when rebooting and pressing F8 and choosing memory test, the test itself passes but it says below that I have hardware issues. Any idea to check specifically what those issues are ?

    Saturday, February 12, 2011 11:22 AM
  • Do you run the RAM with Command Rate 1? If yes, change it in the BIOS to 2.
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by Miya Yao Friday, February 18, 2011 6:35 AM
    Saturday, February 12, 2011 1:39 PM
  • Can you explain how do I do that ?

    I don't really know my way around the BIOS too much.

    Saturday, February 12, 2011 1:49 PM
  • go into the BIOS and look at the chipset options You should find an option about RAM Timings.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Saturday, February 12, 2011 2:40 PM