usbport.sys/usbehci.sys BSODs have skyrocketed in last few days

Bilge · 17 Feb 2015

Hey all, I've muddled through with usbport.sys BSODs once every 2-3 weeks since last August, but in the last few days they jumped to nearly 10 just today. I've monkeyed with peripheral configs, run "SFC /scannow" with no report integrity violations, run MS Fixit, completed a clean disk check process, and tried the clean startup process (results pending).

My hardware has been static for quite a while, so nothing has changed in that regard. Not sure exactly the best way to ensure I don't have corrupt or old drivers on the system, since I try to avoid loading bloat/spam/malware posted to some forums.

Definitely interested in what anyone can surmise to be the common thread, but my gut tells me it's driver-related.

Thanks,
Bilge

Arc · 19 Feb 2015

Code:

BugCheck D1, {ffffffff83c70a76, 2, 0, fffff880063b753b}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_TxAcquireLock+13 )

Followup: MachineOwner
---------

Code:

BugCheck D1, {fffff8000497b7b0, 2, 0, fffff880061af090}

Probably caused by : usbehci.sys ( usbehci!EHCI_InterruptDpcEx+318 )

Followup: MachineOwner
---------

Upload the list of all the third party drivers Using NirSoft DriverView :

Download and execute Driverview
View > Hide Microsoft Drivers
Edit > Select all
File > Save Selected Items
In the Save dialog, Set the path to desktop, Put "Driverview" in the name field, and save.
Zip the .txt file and upload it.

We need to see this file in this case.

Bilge · 19 Feb 2015

Arc, much appreciated. Here you go.

I'm also running under the clean startup approach, which is currently only running three non-MS services (ActivIdentity, Carbonite, and Norton 360), with the rest disabled. Hard to tell if it's a fix, but it seems to have reduced the BSOD frequency a bit, so not sure if you those disabled non-MS services are evident in the Driverview output you need.

Bilge

Arc · 19 Feb 2015

These things may cause it.

Product Name : SCR3xx USB Smart Card Reader

Modified Date : 6/5/2013 9:42:06 AM
Created Date : 6/5/2013 9:42:06 AM

Product Name : GIGABYTE On/Off Charge

Modified Date : 1/10/2011 5:16:08 PM
Created Date : 8/20/2011 3:25:06 PM

Product Name : Citrix Receiver (Citrix USB Monitor Driver)

Modified Date : 10/29/2014 5:26:46 PM
Created Date : 10/29/2014 5:26:46 PM

To take precautions against it, the steps will be ....

Citix: Search for possible updates. Search it in Downloads - Citrix
GIGABYTE On/Off Charge: Uninstall all the Gigabyte software. They all are not only unnecessary but also evil.
SCR3xx: Update it: Identive Customer Support Center

Let us know the results.

Bilge · 19 Feb 2015

Thanks, Arc. I went in and removed all the Gigabyte stuff, along with the Citrix receiver, which I don't really use anymore. I also verified that the SCR3xx driver I'm running is the latest. This did give me an excuse to purge my installed programs to trim some more fat, but I tend to keep a pretty lean set of programs.

Otherwise, I've turned back on a few of the services I disabled during the clean start process, and I'll see how this does for a few days. Not entirely sure when to claim victory.

V/r,
Bilge

Arc · 20 Feb 2015

Difficult to say. But if you say that it is a week passed within an issue, that is a positive indication. But BSODs are totally unpredictable. They can happen anytime.

Bilge · 23 Feb 2015

Arc, I was out of town for the weekend so the computer was off for a couple days, but I snagged two more BSODs since the last post. The smart card reader driver is supposedly up to date, but it wasn't plugged in at the time of the last BSOD, so unsure if it contributed.

Not sure if it's relevant, but when I return from a BSOD my Netgear WNDA3100v2 USB-adapter seems to always need to be unplugged and replugged before it can resume operation.

V/r,
Bilge

Arc · 24 Feb 2015

Now, this is a different bugcheck code.

Code:

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : USBPORT.SYS ( USBPORT!MPf_Get32BitFrameNumber+89 )

Followup: MachineOwner
---------

So it is something to do with any USB device driver, again. A deeper search revealed it ....

Code:

fffff800`00b99228  fffff880`05441f1cUnable to load image \SystemRoot\system32\DRIVERS\bcmwlhigh664.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for bcmwlhigh664.sys
*** ERROR: Module load completed but symbols could not be loaded for bcmwlhigh664.sys
 bcmwlhigh664+0x1ff1c

It is the NETGEAR WNDA3100v2 N600 Wireless Dual Band USB Adapter. So apparently we are at the way. The driver is old. So it may not work properly.

Code:

    Image name: bcmwlhigh664.sys
    Timestamp:        Tue Apr 19 12:43:08 2011 (4DAD3604)

Search for any possible update in NETGEAR Support | Downloads

BTW, there is another fold of the issue, too. Symantec Network Security Intermediate Filter Driver is also causing blockage to network which positively contributes to the BSOD.

Code:

fffff800`00b999c8  fffff880`04368a13Unable to load image \SystemRoot\system32\DRIVERS\SymIMv.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SymIMv.sys
*** ERROR: Module load completed but symbols could not be loaded for SymIMv.sys
 SymIMv+0x2a13

Though it is discovered, let us first see what happens after the netgear driver update? If teh issue continues still after doing it, then we will concentrate on the Symantec thing. OK? So not suggesting the precautionary steps for it right now.

But if you want to rectify this too at the same go, let me know. I will suggest the precautionary steps for it too.

Bilge · 25 Feb 2015

Arc, just reinstalled the NETGEAR software/driver. Looks like the timestamp and driver version is the same as the one I'm running, but perhaps the initial install didn't quite take for some reason. I'll try to keep an eye on it and see if there's anything that happens in the next few days.

Thanks,
Bilge

Arc · 26 Feb 2015

Yes, observe the situation, inform us if needed.