Solved BSOD while Copy-n-Pasting or Printing from Outlook, DRIVER_POWER_STATE

[jbPanama]

Hello, I need a super hero if one out there exists.

My tech guy friend of the family has been stumped for months on this and suggested that I should go here where he gets mentorship. I need relief for this very frustrating long standing issue.

Attached are the files requested as per your BSOD instructions.
I will have my tech guy here to make any steps you give me go as quickly as possible. Thanks in advance for your help.

Here some info about my computer from the program WhoCrashed v3.02

computer name: WORK-PC
windows version: Windows 7 Service Pack 1, 6.1, build: 7601
windows dir: C:\Windows
CPU: GenuineIntel Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz Intel586, level: 6
4 logical processors, active mask: 15
RAM: 8242376704 total
VM: 2147352576, free: 1921241088


_______________________
On Thu 3/15/2012 10:33:05 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\031512-48391-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40)
Bugcheck code: 0x9F (0x3, 0xFFFFFA8009DC6B30, 0xFFFFF8000440C518, 0xFFFFFA80077053B0)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Thu 3/15/2012 10:33:05 AM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x9F (0x3, 0xFFFFFA8009DC6B30, 0xFFFFF8000440C518, 0xFFFFFA80077053B0)
Error: DRIVER_POWER_STATE_FAILURE
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Wed 3/14/2012 2:21:11 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\031412-22339-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40)
Bugcheck code: 0x9F (0x3, 0xFFFFFA8009DD7B30, 0xFFFFF80000BA2748, 0xFFFFFA800B483720)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sat 3/10/2012 4:59:05 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\031012-23868-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40)
Bugcheck code: 0x9F (0x3, 0xFFFFFA8009E40B30, 0xFFFFF80004419748, 0xFFFFFA800B5DE430)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.
_______________

 

[jbPanama]

Attached JB-BSOD Dump & System File Collection.rar

 

[writhziden]

Problem Devices:

Officejet J6400 series	ROOT\MULTIFUNCTION\0000	The drivers for this device are not installed.

Security Software:

egui.exe	c:\program files\eset\eset smart security\egui.exe	4948	8	200	1380	3/16/2012 3:09 PM	4.2.40.0	2.71 MB (2,839,840 bytes)	3/24/2010 8:31 PM
ekrn.exe	c:\program files\eset\eset smart security\x86\ekrn.exe	2028	8	200	1380	3/16/2012 3:08 PM	4.2.40.0	791.13 KB (810,120 bytes)	3/24/2010 8:31 PM

Possible out of date drivers:

lmimirr	fffff880`05df7000	fffff880`05dfe000	Tue Apr 10 16:32:45 2007 (461c108d)	0000a04c		lmimirr.sys
RaInfo	fffff880`06283000	fffff880`0628a000	Fri Jan 04 11:57:14 2008 (477e818a)	0000d903		RaInfo.sys
LMIRfsDriver	fffff880`0628a000	fffff880`0629d000	Mon Jul 14 10:26:56 2008 (487b7e50)	0001e26d		LMIRfsDriver.sys
[B][COLOR="red"]btwl2cap	fffff880`08979000	fffff880`08985000	Fri Apr 03 18:28:45 2009 (49d6a9bd)	00009866		btwl2cap.sys[/COLOR][/B]
CtClsFlt	fffff880`0202f000	fffff880`020592a0	Sun Jun 14 23:06:41 2009 (4a35d6e1)	00037d92		CtClsFlt.sys
PxHlpa64	fffff880`0113b000	fffff880`01146e00	Tue Jun 23 17:16:35 2009 (4a416253)	000111b7		PxHlpa64.sys
[B][COLOR="Red"]btwavdt	fffff880`08878000	fffff880`088f3000	Wed Jun 24 23:50:13 2009 (4a431015)	0002ce2d		btwavdt.sys[/COLOR][/B]
[COLOR="Red"][B]btwrchid	fffff880`08985000	fffff880`08988880	Wed Jun 24 23:51:37 2009 (4a431069)	0000f764		btwrchid.sys[/B][/COLOR]
Acceler	fffff880`0565f000	fffff880`0566b000	Fri Jun 26 14:56:34 2009 (4a453602)	00015106		Acceler.sys
[B][COLOR="Red"]btwaudio	fffff880`088f3000	fffff880`08979000	Wed Jul 01 07:54:56 2009 (4a4b6ab0)	0001c389		btwaudio.sys[/COLOR][/B]

lmimirr.sys
RaInfo.sys
LMIRfsDriver.sys
btwl2cap.sys
CtClsFlt.sys
PxHlpa64.sys
btwavdt.sys
btwrchid.sys
Acceler.sys
btwaudio.sys

[list=1]
[*]
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\jbPanama\Windows_NT6_BSOD_jcgriff2\031512-48391-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?fffff800`0440c500?
Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`03061000 PsLoadedModuleList = 0xfffff800`032a6670
Debug session time: Thu Mar 15 04:33:05.893 2012 (UTC - 6:00)
System Uptime: 0 days 19:50:56.516
Loading Kernel Symbols
...............................................................
................................................................
.............................................................
Loading User Symbols
Loading unloaded module list
.........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa8009dc6b30, fffff8000440c518, fffffa80077053b0}

Probably caused by : hidusb.sys

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver is causing an inconsistent power state.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa8009dc6b30, Physical Device Object of the stack
Arg3: fffff8000440c518, Functional Device Object of the stack
Arg4: fffffa80077053b0, The blocked IRP

Debugging Details:
------------------


DRVPOWERSTATE_SUBCODE:  3

DRIVER_OBJECT: fffffa8009db8e70

IMAGE_NAME:  hidusb.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7a665

MODULE_NAME: hidusb

FAULTING_MODULE: fffff880065dc000 hidusb

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

STACK_TEXT:  
fffff800`0440c4c8 fffff800`0314bcd2 : 00000000`0000009f 00000000`00000003 fffffa80`09dc6b30 fffff800`0440c518 : nt!KeBugCheckEx
fffff800`0440c4d0 fffff800`030e95fc : fffff800`0440c618 fffff800`0440c618 00000000`00000000 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x34a90
fffff800`0440c570 fffff800`030e9496 : fffff800`03288f00 00000000`0045e4a4 00000000`00000000 fffff800`0440c5d0 : nt!KiProcessTimerDpcTable+0x6c
fffff800`0440c5e0 fffff800`030e937e : 000000a6`5f672254 fffff800`0440cc58 00000000`0045e4a4 fffff800`03257708 : nt!KiProcessExpiredTimerList+0xc6
fffff800`0440cc30 fffff800`030e9167 : 00000026`e57df2c2 00000026`0045e4a4 00000026`e57df226 00000000`000000a4 : nt!KiTimerExpiration+0x1be
fffff800`0440ccd0 fffff800`030d596a : fffff800`03253e80 fffff800`03261cc0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff800`0440cd80 00000000`00000000 : fffff800`0440d000 fffff800`04407000 fffff800`0440cd40 00000000`00000000 : nt!KiIdleLoop+0x5a


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_hidusb.sys

BUCKET_ID:  X64_0x9F_3_IMAGE_hidusb.sys

Followup: MachineOwner
---------


[/list]

1. These crashes point to a human interface device (hid).

I suspect that the problem lies in the outdated Bluetooth drivers. Outdated Bluetooth drivers have been known to cause crashes similar to these. See if updating the Bluetooth drivers resolves the crashes. If you continue to crash, continue to the next segment...


The crashes could also be due to your USB devices or USB ports:

• Start with http://www.sevenforums.com/tutorials/165554-usb-driver-general-fix-problems.html to resolve the USB issues. Also, USB ports can sometimes enter a safe power state to protect the system from power surges due to USB devices. To reset the USB ports to a nominal power state, use a hard reset to resolve hardware and software issues which works for all computers, not just HP Pavilions (minus the HP driver update step).

 

[jbPanama]

writhziden, thanks so much for your reply in taking my case.
It took me a while to get home and start on this.

1) When I try to install the updated Bloothdrivers the installation just stops almost immediately. Picture -> 2012-03-18_1953 - ViperMaul's library
So we moved on for now.

Should we just try to uninstall everything bluetooth if we can or is there another course of action we can follow here?


2) There were a great many faded USB entries 30+ and I had to remove them one-by-one. However when I tried to delete the INFCACHE.1 after adding the admin permissions it said I didn't have permission to delete it. Perhaps a locked file... The cache file has a modified date of 1/1/2012 which is interesting. We had this problem for over 6 months but that date seems a bit old.

Now when I try to use any browser FF or IE it hangs before I can type in a URL. Good thing I have this second computer to help matters. Frustrating. I will try a reboot and attempt to finish your instructions you have provided me before my time runs out tonight.

 

[jbPanama]

ok finally got that INFCACHE.1 file deleted.
I had to add the USERS group and give it all permissions. Strange why the Administrators group with full perms didn't work.

I've decided to just uninstall everything Bluetooth since that is rarely used anyway.
For now I just disabled the bluetooth entries in Device Manager.

Also got the printer driver reloaded and printing again.

Ok for now before I do anything else we will let it run. So far twice in a row it shutdown in an orderly fashion this time. In the meantime I will see how far we can get without a hang or BSOD.
If there are any thoughts please share.

 

[writhziden]

Looks like you did good troubleshooting steps beyond what I had given. See how the system continues to respond.

You could also see if you can uninstall all Bluetooth devices through device manager. After right clicking each and clicking uninstall, do not hit OK right away. Check to see if there is an option to delete the driver software for this device and put a tick in the box to do so. Then hit OK to fully uninstall the device. That step may be required to then install the latest drivers for the Bluetooth devices.

It is up to you whether you want to try the uninstall and install step. You can always wait until you need the devices before going that route, or wait and see if disabling them still causes conflicts.

 

[jbPanama]

Thanks again for your reply! This is so annoying.

The results so far are no BSOD on startup for the moment but the browser (Firefox) still hangs while entering various data and queries into craigslist for example. -- unresponsive. I can click the red X to restart Firefox. It came up fine and I can move scroll bars and such but as soon as I click in the URL bar and try to enter a single key it goes unresponsive. So I reboot and this is when it never shuts down. So I have to force a reboot. This is after a complete uninstall and reinstall of Firefox.

The same behavior happened eventually IE. Once it goes unresponsive we had down that path of symptoms. Same thing happens in my PDF fillable form.

Excel there seems to be a different trigger, it happens when I am typically in Print Preview resizing the page to fit on one screen or adjust headers and footers. It heads down this path.

When this happens I would attempt to shutdown the computer. Takes forever, too long so I force a shutdown. When it boots up 50% that is BSODs. The other 50% it just comes up with the recovery screen.

Perhaps I need to go through that list of old drivers you gave us above and try get those updated if possible?

Regarding Bluetooth I did see that check box to delete the driver. I didn't really want to delete it for some reason without your advice. But I now have it. I did that. And I decided to click on the "Scan for hardware changes" button to see if it reinstalled. And it did reinstall...
Bluetooth Driver Software Installation - ViperMaul's library

So I went through and uninstalled and deleted the driver for them again and I did not click the "Scan for hardware changes" button this time.

I re-ran the BSOD report but as expected there were no new dump files.

Your Thoughts?

 

[writhziden]

Event[248]:
  Log Name: Application
  Source: PC-Doctor
  Date: 2012-03-16T10:04:13.000
  Event ID: 1
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Work-PC
  Description: 
(648) Asapi: (10:04:13:0250)(648) enumerator - Error -- 118 pcdrsysinfoperipheral: Module timed out after 130211 milliseconds and was terminated

Remove PC-Doctor. See if the problem persists.


You also have a common error:

Event[935]:
  Log Name: Application
  Source: Microsoft-Windows-CAPI2
  Date: 2012-03-14T07:43:00.435
  Event ID: 4107
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Work-PC
  Description: 
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server should solve that error.

 

[jbPanama]

Ah ok will do.
Also I had a problem with Outlook suddenly not be able to connect to my email server. This is a repeated behavior over many months. The resolution has always been to reboot the machine. Upon reboot the bluetooth devices were reinstalled.

ACTIONS TAKEN:
- I found software in installed programs called WIDCOMM Bluetooth that I missed before. I uninstalled it from there.
- PC-Doctor was actually "Dell Support Center" software. Uninstalled.
- "Remote Control USB Driver". Uninstalled.
- AntiFreeze 101. Uninstalled.
- "Dell WebCam Central" software. Uninstalled.
- "Live! Cam Avatar Creator" Uninstalled.
- GoToAssist 8.0.0.514 (installed on 6/2010) don't use it. Perhaps Dell support used it once. Uninstalled.
- Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server - Performed Microsoft Fix it 50531 - it processed without error.

Will reboot and run it for a while.

 

[writhziden]

Looks like good steps. Bluetooth will probably keep installing upon Windows starting. If it becomes a nuisance, see if you can install the Bluetooth updated drivers after doing the uninstall steps (do not restart after uninstalling since Windows will just install the drivers again on restart).

 

[jbPanama]

Well I already rebooted. But so far after two reboots there is no bluetooth devices loaded in Device Manager. We are feeling a little more optimistic now. I'll just use it and abuse a day or two and see how it goes.

 

[writhziden]

Alright, best of luck! Post back in a few days how the system responds.

 

[jbPanama]

So far so good. Still keeping an eye on it though for a day or so before marking this as resolved.

 

[jbPanama]

Had a couple of BSOD's last night. Both when happened after putting in the password to TruCrypt for mounting.

Before that the worse thing that was happening was the plug in for adobe was crashing in the web browser.

Attached is the BSOD reports.
Thank you for your analysis in advance.

 

[writhziden]

Loading Dump File [D:\Kingston\BSODDmpFiles\jbPanama\Windows_NT6_BSOD_jcgriff2\032112-24788-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17727.amd64fre.win7sp1_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`0324a000 PsLoadedModuleList = 0xfffff800`0348e650
Debug session time: Wed Mar 21 19:55:26.790 2012 (UTC - 6:00)
System Uptime: 0 days 0:43:44.414
Loading Kernel Symbols
...............................................................
................................................................
.....................................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff88002108745, fffff88009a91130, 0}

Unable to load image \SystemRoot\system32\DRIVERS\eamonm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for eamonm.sys
*** ERROR: Module load completed but symbols could not be loaded for eamonm.sys
Probably caused by : eamonm.sys ( eamonm+7745 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88002108745, Address of the instruction which caused the bugcheck
Arg3: fffff88009a91130, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
eamonm+7745
fffff880`02108745 483933          cmp     qword ptr [rbx],rsi

CONTEXT:  fffff88009a91130 -- (.cxr 0xfffff88009a91130)
rax=0000000000000000 rbx=fffde5830f2c433b rcx=fffff88002186778
rdx=fffff88009a91c88 rsi=0000000000000718 rdi=0000000000000000
rip=fffff88002108745 rsp=fffff88009a91b10 rbp=fffffa800bcb53b0
 r8=fffff88009a91c60  r9=0000000000000000 r10=fffffa800bba6010
r11=fffff88009a91c08 r12=0000000000000000 r13=fffff88009a91c88
r14=0000000000000001 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
eamonm+0x7745:
fffff880`02108745 483933          cmp     qword ptr [rbx],rsi ds:002b:fffde583`0f2c433b=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  TrueCrypt.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from 0000000000000718 to fffff88002108745

STACK_TEXT:  
fffff880`09a91b10 00000000`00000718 : 00000000`00000000 00000000`00000000 fffffa80`0bcb5450 fffffa80`0a5eb680 : eamonm+0x7745
fffff880`09a91b18 00000000`00000000 : 00000000`00000000 fffffa80`0bcb5450 fffffa80`0a5eb680 00000000`00000000 : 0x718


FOLLOWUP_IP: 
eamonm+7745
fffff880`02108745 483933          cmp     qword ptr [rbx],rsi

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  eamonm+7745

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: eamonm

IMAGE_NAME:  eamonm.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4baa6584

STACK_COMMAND:  .cxr 0xfffff88009a91130 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_eamonm+7745

BUCKET_ID:  X64_0x3B_eamonm+7745

Followup: MachineOwner
---------

Caused by ESET. Remove ESET and install the latest version (even if you already have the latest version). Your version could be out of date or corrupted. Use the ESET uninstall tool to remove the software. Make sure to get the Windows 7 uninstaller...

 

[jbPanama]

Thank you. I will do that as soon as I return home from work.

 

[jbPanama]

The BSOD usually happens 90% of the time.
I finally got ESET v4 uninstalled and v5 installed.
My first attempt to mount the drive was successful.
I have to go to work now to meet deadlines.

I will do a series of mounts and dismounts to try and break it. I will report back tomorrow. Thanks again Ziden!!

 

[writhziden]

No problem. Best of luck!

 

[jbPanama]

writhziden, you rock!
Thanks so much!!

Everything continues to work great!
You have solved the issues!

 

[writhziden]

That is excellent news! Thank you for posting back. I am very happy I was able to help.