Blue Screen Crash

[omergen]

Hi all,

Can you please help with a blue screen issue. It happened under Vista and now I upgraded to Windows7 and it just crashed again. I have a suspision that it has something to do with a USB port but I'm not sure.

Thanks!

 

[zigzag3143]

Hi all,

Can you please help with a blue screen issue. It happened under Vista and now I upgraded to Windows7 and it just crashed again. I have a suspision that it has something to do with a USB port but I'm not sure.

Thanks!

This crash was probably caused by KS.sys which is an ms sound driver (i think). I would delete it and reboot. Win 7 will re-install a fresh copy.

Also I would do a system file check to verify and repair your system files
to do that type cmd in search>right click and run as admin>sfc /scannow (note the space between sfc and /)

let us know if you need help with any of this

Ken

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\031910-25927-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*F:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02e14000 PsLoadedModuleList = 0xfffff800`03051e50
Debug session time: Fri Mar 19 00:32:40.726 2010 (GMT-4)
System Uptime: 0 days 1:25:39.334
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
..................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 1097, 40b0016, fffffa8004a3f170}

Unable to load image \SystemRoot\system32\drivers\zl88avs64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for zl88avs64.sys
*** ERROR: Module load completed but symbols could not be loaded for zl88avs64.sys
GetPointerFromAddress: unable to read from fffff800030bc0e0
Probably caused by : ks.sys ( ks!CKsQueue::FreeStreamPointer+6b )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001097, (reserved)
Arg3: 00000000040b0016, Memory contents of the pool block
Arg4: fffffa8004a3f170, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  fffffa8004a3f170 

FREED_POOL_TAG:  KSsp

BUGCHECK_STR:  0xc2_7_KSsp

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  ehrecvr.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002fb760e to fffff80002e85f00

STACK_TEXT:  
fffff880`085faf38 fffff800`02fb760e : 00000000`000000c2 00000000`00000007 00000000`00001097 00000000`040b0016 : nt!KeBugCheckEx
fffff880`085faf40 fffff880`03f786c7 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExFreePool+0xccb
fffff880`085faff0 fffff880`03f78607 : fffffa80`04a3f170 00000000`00000000 fffffa80`07f57010 fffffa80`04a3f170 : ks!CKsQueue::FreeStreamPointer+0x6b
fffff880`085fb020 fffff880`10b67ac6 : fffffa80`03e49c70 fffffa80`08030e18 00000000`00000000 00000000`00000000 : ks!CKsQueue::DeleteStreamPointer+0x147
fffff880`085fb060 fffffa80`03e49c70 : fffffa80`08030e18 00000000`00000000 00000000`00000000 fffffa80`051b16ac : zl88avs64+0x4ac6
fffff880`085fb068 fffffa80`08030e18 : 00000000`00000000 00000000`00000000 fffffa80`051b16ac fffff8a0`0f0d9ee8 : 0xfffffa80`03e49c70
fffff880`085fb070 00000000`00000000 : 00000000`00000000 fffffa80`051b16ac fffff8a0`0f0d9ee8 fffffa80`053a5380 : 0xfffffa80`08030e18


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ks!CKsQueue::FreeStreamPointer+6b
fffff880`03f786c7 f08383d0000000ff lock add dword ptr [rbx+0D0h],0FFFFFFFFh

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  ks!CKsQueue::FreeStreamPointer+6b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ks

IMAGE_NAME:  ks.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bca9f

FAILURE_BUCKET_ID:  X64_0xc2_7_KSsp_ks!CKsQueue::FreeStreamPointer+6b

BUCKET_ID:  X64_0xc2_7_KSsp_ks!CKsQueue::FreeStreamPointer+6b

Followup: MachineOwner
---------

 

[omergen]

Thanks for that zigzag.

I did the scannow but I couldn't delete the ks.sys - it didn't let me even through a dos window.

I now removed my DVICO tv tuner card and it has been stable now today. Do you think log could relate somehow to that card??

 

[zigzag3143]

Thanks for that zigzag.

I did the scannow but I couldn't delete the ks.sys - it didn't let me even through a dos window.

I now removed my DVICO tv tuner card and it has been stable now today. Do you think log could relate somehow to that card??

Have you tried deleting it in safe mode (F8)

Ken

 

[omergen]

No, I haven't tried that yet. Do you think I still should even though it seems stable now??