BSOD after idle on screen wakeup running outlook quickbooks chrome pap

Shotgunsgarage · 23 Feb 2012

I have been experiencing the BSOD about twice or three times per day for about two weeks now. I believe the first time this occured was after a Windows update happened. I have had this computer now for almost a year. Was running AVG, but switched to Viper after this problem started. It found one Trojan on the computer that AVG never caught. I started having driver issues after the automatic update, and suddenly started getting reports that my printers were not installed, and my video drivers were not working correctly. I did notice a flash one time on my display right before this.

On a typical day, I am running Chrome, Paperport, Quickbooks, Outlook, and much of the time Excel, Word, Publisher and a proprietary accounting program. Sometimes I can be running all of these at once, and switching back and forth in them all day. The computer has worked fine for almost a year until a few weeks ago.

I ran a checkdisk a few days ago, which took about 6 hours, and couldn't tell that it did anything for the problem. Obviously, I am still getting the crashes.

This is on 32-bit Windows 7 machine that was built for us about a year ago. I noticed in the report it says that my printers are not installed, or the drivers are not correct, but both printers work just fine, and WERE correctly installed before this problem started.

Let me know what else I can do. Files attached.

writhziden · 24 Feb 2012

Problem Devices:

Code:

HP LaserJet P2055dn	ROOT\MULTIFUNCTION\0002	The drivers for this device are not installed.
HP LaserJet P2055dn	ROOT\MULTIFUNCTION\0003	This device is disabled.
Officejet Pro 8500 A909a	ROOT\MULTIFUNCTION\0004	This device is disabled.
HP LaserJet P2055dn	ROOT\MULTIFUNCTION\0000	The drivers for this device are not installed.
Officejet Pro 8500 A909a	ROOT\MULTIFUNCTION\0001	The drivers for this device are not installed.

Antivirus Software:

Code:

sbamsvc.exe	c:\program files\gfi software\gfiagent\sbamsvc.exe	2720	8	200	1380	2/23/2012 8:56 AM	5.0.4464.0	2.67 MB (2,804,312 bytes)	10/12/2011 1:28 PM
sbamtray.exe	c:\program files\gfi software\gfiagent\sbamtray.exe	4564	8	200	1380	2/23/2012 8:56 AM	5.0.4464.0	1.55 MB (1,627,504 bytes)	10/12/2011 1:31 PM
sbpimsvc.exe	c:\program files\gfi software\gfiagent\sbpimsvc.exe	3836	8	200	1380	2/23/2012 8:56 AM	5.0.4464.0	177.36 KB (181,616 bytes)	10/12/2011 1:28 PM
enterpriseservice.exe	c:\program files\gfi software\vipre business\enterpriseservice.exe	4076	8	33872	33872	2/23/2012 8:56 AM	5.0.4943.0	445.36 KB (456,048 bytes)	11/18/2011 9:08 PM

Possible out of date drivers:

Code:

UltraMonUtility	9a200000	9a202900	Thu Nov 13 18:09:26 2008 (491ccfc6)	00010568		UltraMonUtility.sys

UltraMonUtility.sys

Code:

[list=1][*]
Loading Dump File [D:\Kingston\BSODDmpFiles\Shotgunsgarage\Windows_NT6_BSOD_jcgriff2\022312-13977-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Machine Name:
Kernel base = 0x82e3b000 PsLoadedModuleList = 0x82f844d0
Debug session time: Thu Feb 23 07:54:51.324 2012 (UTC - 7:00)
System Uptime: 0 days 20:47:57.167
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {90374a68, 2, 8, 90374a68}

Unable to load image \SystemRoot\system32\DRIVERS\InputFilter_FlexDef2b.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for InputFilter_FlexDef2b.sys
*** ERROR: Module load completed but symbols could not be loaded for InputFilter_FlexDef2b.sys
Probably caused by : InputFilter_FlexDef2b.sys ( InputFilter_FlexDef2b+5a68 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 90374a68, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000008, value 0 = read operation, 1 = write operation
Arg4: 90374a68, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82fa4848
Unable to read MiSystemVaType memory at 82f83e20
 90374a68 

CURRENT_IRQL:  2

FAULTING_IP: 
InputFilter_FlexDef2b+5a68
90374a68 8bff            mov     edi,edi

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  wmpnetwk.exe

TRAP_FRAME:  8078ad28 -- (.trap 0xffffffff8078ad28)
ErrCode = 00000010
eax=889259f0 ebx=889208f0 ecx=0000000f edx=88935008 esi=88920c40 edi=88935008
eip=90374a68 esp=8078ad9c ebp=8078adb0 iopl=0         nv up ei ng nz na pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010287
InputFilter_FlexDef2b+0x5a68:
90374a68 8bff            mov     edi,edi
Resetting default scope

LAST_CONTROL_TRANSFER:  from 90374a68 to 82e7c5fb

FAILED_INSTRUCTION_ADDRESS: 
InputFilter_FlexDef2b+5a68
90374a68 8bff            mov     edi,edi

STACK_TEXT:  
8078ad28 90374a68 badb0d00 88935008 8078ad64 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
8078ad98 82e7258e 88920c40 88935008 a3be0d78 InputFilter_FlexDef2b+0x5a68
8078adb0 92fda397 88935008 00000000 889208f0 nt!IofCallDriver+0x63
8078add0 92fd97d8 889208f0 888e03c8 8078adf3 hidusb!HumReadReport+0xef
8078adf4 92fe5377 889208f0 88920b8c 8892f718 hidusb!HumInternalIoctl+0xd6
8078ae08 92fe67b0 889208f0 88935008 92fec23c HIDCLASS!HidpCallDriver+0x3f
8078ae24 92fe66be 889209bc 8892f718 8078ae6b HIDCLASS!HidpSubmitInterruptRead+0xa0
8078ae5c 82eb3913 00000000 00935008 889209bc HIDCLASS!HidpInterruptReadComplete+0x286
8078aea0 91b8430d 82e76108 859bacf8 00000000 nt!IopfCompleteRequest+0x128
8078aed0 91b84f55 866c81a0 88935008 8663b008 USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x6e0
8078aefc 91b856f6 871e8028 871e80f0 871e8a98 USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x33b
8078af24 91b819ce 871e8028 871e8a98 871e8002 USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xbc
8078af48 82eb31b5 871e8aa4 871e8002 00000000 USBPORT!USBPORT_Xdpc_Worker+0x173
8078afa4 82eb3018 82f65d20 a3a73c00 00000000 nt!KiExecuteAllDpcs+0xf9
8078aff4 82eb27dc ac0876e4 00000000 00000000 nt!KiRetireDpcList+0xd5
8078aff8 ac0876e4 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
82eb27dc 00000000 0000001a 00d6850f bb830000 0xac0876e4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
InputFilter_FlexDef2b+5a68
90374a68 8bff            mov     edi,edi

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  InputFilter_FlexDef2b+5a68

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: InputFilter_FlexDef2b

IMAGE_NAME:  InputFilter_FlexDef2b.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c005c32

FAILURE_BUCKET_ID:  0xD1_CODE_AV_BAD_IP_InputFilter_FlexDef2b+5a68

BUCKET_ID:  0xD1_CODE_AV_BAD_IP_InputFilter_FlexDef2b+5a68

Followup: MachineOwner
---------[*]
Loading Dump File [D:\Kingston\BSODDmpFiles\Shotgunsgarage\Windows_NT6_BSOD_jcgriff2\021612-35724-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17713.x86fre.win7sp1_gdr.111025-1505
Machine Name:
Kernel base = 0x82e16000 PsLoadedModuleList = 0x82f5f4d0
Debug session time: Thu Feb 16 07:58:49.990 2012 (UTC - 7:00)
System Uptime: 0 days 20:30:17.834
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {8e374a68, 2, 8, 8e374a68}

Unable to load image \SystemRoot\system32\DRIVERS\InputFilter_FlexDef2b.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for InputFilter_FlexDef2b.sys
*** ERROR: Module load completed but symbols could not be loaded for InputFilter_FlexDef2b.sys
Probably caused by : InputFilter_FlexDef2b.sys ( InputFilter_FlexDef2b+5a68 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 8e374a68, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000008, value 0 = read operation, 1 = write operation
Arg4: 8e374a68, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82f7f848
Unable to read MiSystemVaType memory at 82f5ee20
 8e374a68 

CURRENT_IRQL:  2

FAULTING_IP: 
InputFilter_FlexDef2b+5a68
8e374a68 ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  82f3d958 -- (.trap 0xffffffff82f3d958)
ErrCode = 00000010
eax=880f94d0 ebx=880f9d08 ecx=0000000f edx=880f5428 esi=880f9238 edi=880f5428
eip=8e374a68 esp=82f3d9cc ebp=82f3d9e0 iopl=0         nv up ei ng nz na pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010287
InputFilter_FlexDef2b+0x5a68:
8e374a68 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from 8e374a68 to 82e575fb

FAILED_INSTRUCTION_ADDRESS: 
InputFilter_FlexDef2b+5a68
8e374a68 ??              ???

STACK_TEXT:  
82f3d958 8e374a68 badb0d00 880f5428 82f3d994 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
82f3d9c8 82e4d58e 880f9238 880f5428 85b20da0 InputFilter_FlexDef2b+0x5a68
82f3d9e0 919f5397 880f5428 00000000 880f9d08 nt!IofCallDriver+0x63
82f3da00 919f47d8 880f9d08 880bc0e0 82f3da23 hidusb!HumReadReport+0xef
82f3da24 91602377 880f9d08 880f9fa4 880f5900 hidusb!HumInternalIoctl+0xd6
82f3da38 916037b0 880f9d08 880f5428 9160923c HIDCLASS!HidpCallDriver+0x3f
82f3da54 916036be 880f9dd4 880f5900 82f3da9b HIDCLASS!HidpSubmitInterruptRead+0xa0
82f3da8c 82e8e913 00000000 000f5428 880f9dd4 HIDCLASS!HidpInterruptReadComplete+0x286
82f3dad0 90d5f30d 82e51108 868a4cf8 00000000 nt!IopfCompleteRequest+0x128
82f3db00 90d5ff55 84fd4430 880f5428 b31ca358 USBPORT!USBPORT_Core_iCompleteDoneTransfer+0x6e0
82f3db2c 90d606f6 871f0028 871f00f0 871f0a98 USBPORT!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x33b
82f3db54 90d5c9ce 871f0028 871f0a98 871f0002 USBPORT!USBPORT_Core_UsbIocDpc_Worker+0xbc
82f3db78 82e8e1b5 871f0aa4 871f0002 00000000 USBPORT!USBPORT_Xdpc_Worker+0x173
82f3dbd4 82e8e018 82f40d20 82f4a380 00000000 nt!KiExecuteAllDpcs+0xf9
82f3dc20 82e8de38 00000000 0000000e 00000000 nt!KiRetireDpcList+0xd5
82f3dc24 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x38


STACK_COMMAND:  kb

FOLLOWUP_IP: 
InputFilter_FlexDef2b+5a68
8e374a68 ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  InputFilter_FlexDef2b+5a68

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: InputFilter_FlexDef2b

IMAGE_NAME:  InputFilter_FlexDef2b.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c005c32

FAILURE_BUCKET_ID:  0xD1_CODE_AV_BAD_IP_InputFilter_FlexDef2b+5a68

BUCKET_ID:  0xD1_CODE_AV_BAD_IP_InputFilter_FlexDef2b+5a68

Followup: MachineOwner
---------

Possible cause is Drivers... Probably caused by InputFilter_FlexDef2b.sys your Dongguan Siliten Electronic Co. - Flex Define HID Keyboard Driver.
All crashes were the same as 1.

Recommend updating or re-installing your keyboard driver.

Click Start Menu
Right Click My Computer/Computer
Click Manage
Click Device Manager from the list on the left
Expand Keyboards
Right click the device
Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
Restart your computer
Install the latest driver for the device once Windows starts.

Alternatively:

Login as an adminstrative user.
Click Start Menu
Click Control Panel
Click Hardware and Sound
Click Device Manager (the last link under Devices and Printers)
Expand Keyboards
Right click the device
Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
Restart your computer
Install the latest driver for the device once Windows starts.

If the above does not work, it may be a conflict due to an old driver or USB problems. See USB Driver - General Fix for Problems to resolve such issues.

If you still have problems after those two steps, it may also be due to the USB ports entering a power state to protect the system from a power surge. Do the steps outlined in Use Hard Reset to Resolve Hardware and Software Issues HP Pavilion dv5000 Notebook PC series - HP Customer Care (United States - English) (yes it will work for all computers, not just HP Pavilions). This will reset the power state of the USB ports and reset hardware/software connections with the BIOS.