BSOD on new W7 Pro x64 system with QBPro2011, Office Small Biz 2007,

jrd53047 · Dec 5, 2013

I'm getting BSOD's on a new PowerSpec B331 running Windows 7 Pro - 64 bit, 4gb mem, 1TB hard drive. It is part of a Workgroup. This is the second PowerSpec B331 that gets the BSOD's. When the BSOD's started on the first PowerSpec after installing QB Pro 2011, Dell 2335dn, Trend Micro, and Office, I took it back to Micro Center and they gave me a replacement unit no questions asked. The replacement unit got the same BSOD errors.

The system has the following applications installed:

QuickBooks Pro 2011;
Dell 2335dn MFS application suite;
Office Small Business 2007;
Trend Micro Titanium Internet Security2014;
Adobe Reader X (10.18);
Adobe Flash Player 10 ActiveX;
Malwarebytes Pro Trial;
TeamViewer 8.

All of the applications except Trend Micro Titanium are running with no issues on an old slow XP Pro desktop that I'm replacing.

QuickBooks is single user but its company files can also be opened by a single desktop in a domain on the network.

It is connected via a KVM to monitor, keyboard, and mouse.

The event viewer shows that system resources get exhausted and services start dying. It usually required a hard power off / on to recover and allow login.

Today no one was using the desktop and it had multiple Bugchecks throughout the day.

I was suspecting an issue with the Dell 2335dn MFS application suite and on 27-Nov-2013 removed their latest Nov 2013 version and installed an older version of it. The system ran until 02-Dec-2013 with no issues and then started with resource exhaustion again and eventually getting BSODs.

I have run the SF Diagnostic Tool and have attached the zip file.

Code:

There have been Bugchecks on:
 
[LIST=1] 
[*]12/2/2013 10:33:45 PM:
[LIST] 
[*]Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 12/2/2013 10:33:45 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Accounting-PC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x0000000000000048, 0x0000000000000002, 0x0000000000000001, 0xfffff8800615d63e). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 120213-16239-01.
Event Xml:
<Event xmlns="[URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL]">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-12-03T06:33:45.000000000Z" />
<EventRecordID>15292</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Accounting-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000d1 (0x0000000000000048, 0x0000000000000002, 0x0000000000000001, 0xfffff8800615d63e)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">120213-16239-01</Data>
</EventData>
</Event>
[/LIST]
 
[*]12/3/2013 4:31:46 PM:
[LIST] 
[*]Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 12/3/2013 4:31:46 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ACCOUNTING-PC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000044, 0xfffff80002eb67fc, 0xfffff88002ba4250, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 120313-14773-01.
Event Xml:
<Event xmlns="[URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL]">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-12-04T00:31:46.000000000Z" />
<EventRecordID>15660</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>ACCOUNTING-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x0000003b (0x00000000c0000044, 0xfffff80002eb67fc, 0xfffff88002ba4250, 0x0000000000000000)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">120313-14773-01</Data>
</EventData>
</Event>
[/LIST]
 
[*]12/4/2013 10:05:24 AM:
[LIST] 
[*]Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 12/4/2013 10:05:24 AM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ACCOUNTING-PC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x0000000000000048, 0x0000000000000002, 0x0000000000000001, 0xfffff88005f4b63e). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 120413-13821-01.
Event Xml:
<Event xmlns="[URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL]">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-12-04T18:05:24.000000000Z" />
<EventRecordID>15804</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>ACCOUNTING-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000d1 (0x0000000000000048, 0x0000000000000002, 0x0000000000000001, 0xfffff88005f4b63e)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">120413-13821-01</Data>
</EventData>
</Event>
[/LIST]
 
[*]12/4/2013 8:34:22 PM:
[LIST] 
[*]Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 12/4/2013 8:34:22 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ACCOUNTING-PC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x0000000000000048, 0x0000000000000002, 0x0000000000000001, 0xfffff8800685f63e). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 120413-14258-01.
Event Xml:
<Event xmlns="[URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL]">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-12-05T04:34:22.000000000Z" />
<EventRecordID>16097</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>ACCOUNTING-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000d1 (0x0000000000000048, 0x0000000000000002, 0x0000000000000001, 0xfffff8800685f63e)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">120413-14258-01</Data>
</EventData>
</Event>
[/LIST]
[/LIST]

Arc · Dec 5, 2013

Hi jrd53047,

Apparently your issue is with ASMedia USB3 drivers.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {48, 2, 1, fffff8800685f63e}

*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=asmthub3.sys"]asmthub3.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=asmthub3.sys"]asmthub3.sys[/URL]
Probably caused by : [URL="http://www.carrona.org/drivers/driver.php?id=asmthub3.sys"]asmthub3.sys[/URL] ( asmthub3+963e )

Followup: MachineOwner
---------

Update the USB3 controllers from Station-Drivers - Asmedia drivers & firmwares.

Let us know the results.

jrd53047 · Dec 5, 2013

ASMedia Drivers Downloaded & Installed

Hello,

Thanks, I downloaded and installed the recommended drivers then rebooted the system.

I will monitor the PC and provide feedback.

Since the longest the PC went without an issue was almost 5 days, the system should run for at least 15 days without issue before it can be considered resolved.

Arc · Dec 5, 2013

OK, take your time. If there is any BSOD in between, let us know as per the posting instructions.

jrd53047 · Dec 10, 2013

BSOD(s) continue

The BSOD(s) have started occurring again.

Today they happened right after I attempted to connect remotely using teamviewer. Tried twice and it happened the same way each time.

The latest zip file is attached.

Arc · Dec 11, 2013

Before the teamviewer operation, there was another BSOD after I checked last time, on 07/12. What is strange there that the Asmedia USB3 driver filed again, despite of the driver update.

Code:

BugCheck C2, {7, 109b, 40f0010, fffffa800831b780}

*** WARNING: Unable to verify timestamp for asmthub3.sys
*** ERROR: Module load completed but symbols could not be loaded for asmthub3.sys
*** WARNING: Unable to verify timestamp for asmtxhci.sys
*** ERROR: Module load completed but symbols could not be loaded for asmtxhci.sys
GetPointerFromAddress: unable to read from fffff80003113100
GetUlongFromAddress: unable to read from fffff800031131c0
[COLOR=Red]Probably caused by : asmthub3.sys[/COLOR] ( asmthub3+3288 )
--------------------------------------------------------------------------------------
    Image name: asmthub3.sys
[COLOR=Red]    Timestamp:        Sat Aug 17 00:58:54 2013[/COLOR] (520E7D76)

And, the latest crash dump, during TeamViewer session, caused due to insufficient system resources.

Code:

BugCheck 3B, {[COLOR=Red]c0000044[/COLOR], fffff80002f0a7fc, fffff88009450250, 0}

Probably caused by : win32k.sys ( win32k!zzzChangeStates+7d2 )

Followup: MachineOwner
---------

The first parameter means ....

Code:

EXCEPTION_CODE: (NTSTATUS) 0xc0000044 - Insufficient quota exists to complete the operation

So it may be either memory or network, apparently.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.
If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Which network connection you actually use, the wireless one, or the wired one?
Apparently it appears that the Atheros device is disabled.

Code:

Qualcomm Atheros AR5BWB222 Wireless Network Adapter:    This device is disabled.

So you are using the wired network I think? The driver is really old.

Code:

fffff880`04652000 fffff880`046bc000   Rt64win7   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
[COLOR=Red]    Image name: Rt64win7.sys
    Timestamp:        Wed Feb 16 14:33:57 2011 [/COLOR](4D5B92FD)
    CheckSum:         000754A7
    ImageSize:        0006A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update it from Realtek. Get the Win7 and WinServer 2008 R2 Auto Installation Program dated 2013/11/26.

Out of curiosity, I am asking two more things ... may not be very essential. But as it is a branded desktop, these are better to know ..
Check if the Power Supply Unit (PSU) supplying adequate power to the computer or not.
eXtreme Power Supply Calculator
Also let us know the wattage of the PSU.

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy. Alternatively, you can publish a Speccy snapshot too: http://www.sevenforums.com/tutorials/311593-speccy-publish-snapshot-your-system-specs.html .

Let us know the results.

jrd53047 · Dec 11, 2013

BSOD - response to last request for information

Remember, this is the second PowerSpec B331 that is exhibiting the exact same symptoms as the first one that MicroCenter swapped out when I took it into them for diagnosis. I had run memtest86 on it with no errors.

1) PSU is 250 watt: Power calculator says minimum of 198 watts and it recommends a 248 watt psu;
2) PC does not run hot at all;
3) The wireless adapter has been purposely deactivated as they do not want any of their PC's connecting to wireless networks;
4) Installed new Realtek Ethernet drivers;
5) Speccy snapshot published at http://speccy.piriform.com/results/Kkzzch4asAZjMtliVWdN2Ti
6) memtest86 is running.

A couple of other items, that I should have included in the last post.
1) As I mentioned before it is connected via a KVM switch:
a) When I checked the system, the LCD screen was jumpy and wavy, no icons, but the mouse pointer moved around the entire screen;
b) The accountant mentioned that when she saw it happen previously, the mouse would only move up and down vertically in the middle of the screen;
2) For the most part, this PC is simply sitting there running with no one directly logged in except on Tuesday and Thursday mornings when the accountant is in;
3) As I mentioned in my original post, the QuickBooks company files are accessed by one other user from his PC on the LAN;
4) The problem was noted yesterday when he could not access the company file on the B331:
a) He checked the B331 saw the BSOD message and power cycled the B331:
b) On reboot, I connected remotely via TeamViewer and after a few minutes the B331 hung and he power cycled it again.

I picked up the B331 from their office and ran it from 8pm last evening to 10am this morning with no issues.

I just remembered that during the 5 day period the B331 ran with no issues after I replaced the first one, we had hooked it up to a spare standalone monitor and keyboard. The KVM was completely out of the picture.

jrd53047 · Dec 11, 2013

Additional info

Forgot to mention that the KVM uses a USB connector.

Arc · Dec 11, 2013

250 watts are not any PSU to have. How minimum the usage may be. Get one at least of 450 watts, depending on your operations.

jrd53047 · Dec 12, 2013

Ref: Power supply recommendation

The PowerSpec B331's that are exhibiting the problem are 5 weeks old and under warranty. This MicroCenter already exchanged the first one and the second B331 has the same issue. I've got almost 20 other B331's installed with no issues. Changing out the power supply would void the warranty.

By the way Memtest86 ran 12 passes with no issues.

I'm taking a spare monitor, keyboard, and mouse along with the B331 back to the accountants office in the morning. I'm going to install the B331 using those instead of the KVM switch.

I didn't mention this earlier but the B331 is a replacement system for a nine year old Dell XP desktop with 512mb of mem that was going to need a hard drive replaced.

jrd53047 · Dec 30, 2013

Still Up and Running after removing KVM

The PowerSpec B331 has been up and running since I pulled it off the KVM switch on 12-Dec-2013 and connected it to a standalone monitor, keyboard, and mouse. No resource exhaustion or BSODs have occurred and the system has not rebooted since I made the change.

I'm going to put a new IOGEAR GCS632U 2-Port USB KVM switch in this week and hopefully there will not be a return of resource exhaustion and BSODs.

BSOD on new W7 Pro x64 system with QBPro2011, Office Small Biz 2007,

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer