Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Error code 000000E1

Error code


From a newsgroup post: "In most cases, this kind of blue screen error is caused by the hardware or device drivers. I suggest you unplug all these hardware except the display card, then restart the computer into Safe Mode. Click Start->Run, type devmgmt.msc and press Enter. Delete the unplugged hardware items. Then restart the computer into Normal Mode for a test. If you do not get this problem, please install these hardware cards one by one to narrow down this problem."

From Microsoft (not too helpful for network administrators):
This error indicates that a worker thread completed and returned at IRQL DISPATCH_LEVEL or above.

The following parameters are displayed on the blue screen.

Parameter Description
1 Address of the worker routine
2 IRQL that the worker thread returned at
3 Work item parameter
4 Work item address

A worker thread completed and returned at IRQL DISPATCH_LEVEL or above.

Resolving the Problem
To find the driver that caused the error, use the LN (List Nearest Symbols) debugger command:

kd> ln address

where address is the worker routine address given in Parameter 1.


Keywords: error code 0x000000E1 and Bugcheck: Google - Bing - Microsoft - Yahoo

Keywords: WORKER_THREAD_RETURNED_AT_BAD_IRQL: Google - Bing - Microsoft - Yahoo

If you have additional details about this error code, please send it to us

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.