Solved BSOD ks.sys problem

[rlyacht]

I keep getting a BSOD with a message about ks.sys. I ran sfc and it found no problems.

The BSOD occurs sometimes when I unplug from power, and some times when I unplug an ipod from USB.

I'm attaching a zip of the folder produced by running SF Diagnostic Tool.

Thanks for your help!

 

[FredeGail]

Hello rlyacht and welcome to Sevenforums.

Your provided files unfortunately didn't meet the requirements of what we call a 'full report'. Maybe it ran into some errors during the pick-up, make sure that you run SF Diagnostic Tool as Administrator, also known as an elevated window.

As you said something about unplugging your iPod sometimes causes the system to crash -- there's maybe a blocked irp request otherwise it's settled as a Problem Device. When we have the full report, I'm able to see the Problem Devices.

Notice if the Tool doesn't obtain the msinfo (nfo), you can do it yourself --

• How to get the NFO manually

  • To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.

Thanks!

Best Regards,
Frederik.

 

[rlyacht]

Thanks very much for your help! I've attached a zip created per your instructions.

 

[rlyacht]

Frederik, did I post the right file?

 

[FredeGail]

Hello again, yes you did. I'm sorry for the late reply, I don't know - I've maybe missed the thread in my subbox.

Problem Devices

Problem devices can be found in your Device Manager. Search Device Manager in Start, and look for :warn:. Note that if the warning sign isn't there, select View on the top of the window, and end with Show hidden devices.

Virtual Audio Cable	ROOT\MEDIA\0000	This device is disabled.
VMware Virtual Ethernet Adapter for VMnet1	ROOT\VMWARE\0000	This device is disabled.
VMware Virtual Ethernet Adapter for VMnet8	ROOT\VMWARE\0001	This device is disabled.
VirtualBox Host-Only Ethernet Adapter	ROOT\NET\0000	This device is disabled.

Any reason for disabling those?

Best Regards,
Frederik.

 

[rlyacht]

I disabled them because they were confusing various applications I run (e.g. my Tivo was somehow thinking it needed to connect to one of those VM adaptors instead of the real one).

Is it possible that just enabling (or uninstalling) these might fix my problem?

I enabled them and did the update. THe VMs were up to date but the other one did update. I'll see how it goes ...

 

[FredeGail]

I'd enable them and update their drivers to the fullest and see how things turn out to be.

Best Regards,
Frederik.

 

[rlyacht]

Still having problems

Sorry to have dropped this thread. I was "living with" the problem (I did try those things with the drivers), but it now seems to be getting worse. I'm attaching a recent result from SF diagnostic tool. Thanks for your help!

 

[Arc]

It is caused by 5U877 UVC driver for Ricoh camera.

ffff880`061adb28  fffff880`0ac71000Unable to load image \SystemRoot\system32\DRIVERS\5U877.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
 5U877
fffff880`061adb30  fffff880`0ac97f4c 5U877+0x26f4c

It is very old.

lmvm 5U877
start             end                 module name
fffff880`0ac71000 fffff880`0ac99a80   5U877    T (no symbols)           
    Loaded symbol image file: 5U877.sys
    Image path: \SystemRoot\system32\DRIVERS\5U877.sys
    Image name: 5U877.sys
    Timestamp:        Thu Dec 23 09:25:42 2010 (4D12C83E)
    CheckSum:         00036DD3
    ImageSize:        00028A80
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update it from Home | Ricoh Global.

 

[rlyacht]

Thanks!!! I found an updated driver on the Lenovo site (it's a T420s) and just installed it. I verified that the driver now has a newer date. Will report back.

 

[rlyacht]

Unfortunately, I stlil have the problem. Attached is a another set of files. Thanks!

 

[Arc]

Is there any updated driver in the link I supplied in my earlier post?

 

[rlyacht]

I didn't see one at the Ricoh site, but I figured out (I think ) that the Ricoh driver was for the integrated webcam on the machine (Lenovo Thinkpad 420s). So I updated using the driver from the Lenovo site, and it seemed to me from looking at the driver in Device Manager that the date bumped up from 2010 to 2011. Do you still see that driver as being the same old one, i.e. I didn't update the right thing? THanks for your help!

 

[Arc]

Yes, you updated the right one, but its date is now 2011, and still, the last crash indicated that same thing.

You may enable driver verifier.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier. It will make the system a bit slow and laggy, but pick the faulty drivers up in the crashes.

Let us know the results, with the subsequent crash dumps, if any.

 

[rlyacht]

OK,I've got verifier on. Of course now I can't get it to crash

 

[rlyacht]

Got a crash. Attached is a new set of files. Thanks for your help!

 

[Arc]

The situation is just the same, with updated driver, too.

fffff880`081e1b28  fffff880`0ab1a000Unable to load image \SystemRoot\system32\DRIVERS\5U877.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
 5U877
fffff880`081e1b30  fffff880`0ab40d40 5U877+0x26d40
=========================================
lmvm 5U877
start             end                 module name
fffff880`0ab1a000 fffff880`0ab42880   5U877    T (no symbols)           
    Loaded symbol image file: 5U877.sys
    Image path: \SystemRoot\system32\DRIVERS\5U877.sys
    Image name: 5U877.sys
    Timestamp:        Fri Mar 04 14:48:41 2011 (4D70AE71)
    CheckSum:         0002ECFD
    ImageSize:        00028880
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Can you stop using it, and see if it changes anything?

 

[rlyacht]

Sure. Just to be sure, to do this I would disable the device using that driver, using device manager.?

 

[Arc]

Yes. Disable it in Device Manager.

 

[rlyacht]

Since disabling this device, I 've had no problems! I guess that was it. Thanks very much!!

What would you advise if I want to have a webcam on this machine? Should I just buy a cheap webcam? I don't use it a lot, but do like having it. It seems that I'm using the latest driver from Lenovo, and also that the Ricoh component was discontinued by Ricoh, so I'm not sure there will be any updates.