ks.sys BSOD BCCode:3b BCP1:00000000C0000005

[kamhcm]

Hi all,

Have been getting this BSOD lately without any identified reason. Thought it was the fact that I never format the laptop for almost two years and heavy work over it but after restoring it to factory defaults and copying my folders and files I´m still getting the blue screen.

Also tried by uninstalling the NVIDIA and Intel HD video drivers since read that would be the problem but after some days using the basic ones (1024x768 screen!) I´m again with the problem.

So I´m needing help on this, send me some useful information. Find enclose system and dump files.

Thanks,


Alonso

 

[koolkat77]

Welcome to the forum.

Seems like 5U877 UVC driver for Ricoh camera drivers are responsible for the BSOD.

Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Debug session time: Thu Jul 31 07:14:43.232 2014 (UTC + 6:00)
System Uptime: 0 days 0:07:47.106
BugCheck 3B, {c0000005, fffff8800578915a, fffff88009dfe2a0, 0}
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
Probably caused by : ks.sys ( ks!KspPropertyHandler+2ea )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  Skype.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Debug session time: Thu Jul 31 07:06:12.292 2014 (UTC + 6:00)
System Uptime: 0 days 9:11:35.541
BugCheck 3B, {c0000005, fffff88004d8a15a, fffff8800aa5d2a0, 0}
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
Probably caused by : ks.sys ( ks!KspPropertyHandler+2ea )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  Skype.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Debug session time: Wed Jul 30 21:53:37.576 2014 (UTC + 6:00)
System Uptime: 0 days 1:16:15.041
BugCheck 3B, {c0000005, fffff8800481a15a, fffff88003ed72a0, 0}
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
Probably caused by : ks.sys ( ks!KspPropertyHandler+2ea )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  Skype.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Debug session time: Fri Jul 25 23:38:21.051 2014 (UTC + 6:00)
System Uptime: 0 days 0:06:05.815
BugCheck 3B, {c0000005, fffff88005a3e15a, fffff8800b2ed2a0, 0}
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
Probably caused by : ks.sys ( ks!KspPropertyHandler+2ea )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  Skype.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Debug session time: Fri Jul 25 23:31:29.359 2014 (UTC + 6:00)
System Uptime: 0 days 21:57:30.107
BugCheck 3B, {c0000005, fffff88005a1a15a, fffff880099702a0, 0}
*** WARNING: Unable to verify timestamp for 5U877.sys
*** ERROR: Module load completed but symbols could not be loaded for 5U877.sys
Probably caused by : ks.sys ( ks!KspPropertyHandler+2ea )
BUGCHECK_STR:  0x3B
PROCESS_NAME:  Skype.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Please update it.

5U877.sys Fri Mar 4 15:18:41 2011 (4D70AE71)
5U877 UVC driver for Ricoh camera
Driver Reference Table - 5U877.sys

Sometimes drivers remain, not completely uninstalled. Follow this tutorial for complete removal of drivers of the particular program: How to Clean Left Over Driver Files with Driver Sweeper

• http://www.sevenforums.com/tutorials/83814-drivers-clean-left-over-files-after-uninstalling.html

Perform a Clean boot:

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

• How to Change, Add, or Remove Startup Programs in Windows 7

Norton contributes to BSOD's. Remove and replace it with Microsoft Security Essentials is recommended from a strict BSOD perspective, compatibility & stability compared to other antivirus or internet security software. It is free and lightweight:-

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes: Removes malware including viruses, spyware, worms and trojans, plus it protects your computer
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

   Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Make scans with the following:

Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

ESET online scanner:

• Free Online Virus Scanner | ESET

Check for heating issues using Speccy or HWMonitor. Upload a screen shot with either of the tools:

• Speccy - System Information - Free Download
• HWMonitor CPUID - System & hardware benchmark, monitoring, reporting
• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[kamhcm]

Hi koolkat77

Made the update of my ricoh UVC camera driver but originally it seems the same one previously installed. Could not find the camera listed in the Device Manager but anyway followed the setup.exe installation instructions.

Also updated my NVIDIA drivers but I am still getting BSOD, so I have run DM Log Collector again and attached it to this post.

Is there any other thing I need to to to solve this?

Thanks for your help.

Alonso Manrique

 

[koolkat77]

Did you complete the rest of the steps?

 

[kamhcm]

Hi Koolkat77,

Yes, in the last few days I completed the steps:

- Regarding perform a Clean boot, the laptop is starting without Startup Items at all.

- Regarding Norton, already uninstalled it and replaced it with Microsoft Security Essentials

- Also run the System File Checker :SFC /scannow, and get 100% OK result.

- Finally regarding heating issues, installed HWMonitor. Enclosed the screen shot.

After all this, I´m still getting BSODs twice or three times a day, will really appreciate your help, this is starting to affect my productivity. Find enclose DM log files.

Quick question, upgrading to Windows 8 will solve my problem??

Thanks for your time.

Regards,


Alonso Manrique

 

[koolkat77]

Quick question, upgrading to Windows 8 will solve my problem??

Maybe, maybe not.

What devices do you have connected to your USB ports?

Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\admin\Downloads\KAM-THINK-11_08_2014_101021_98\081114-18205-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`02e56000 PsLoadedModuleList = 0xfffff800`030996d0
Debug session time: Mon Aug 11 20:37:23.714 2014 (UTC + 6:00)
System Uptime: 0 days 0:09:49.462
Loading Kernel Symbols
...............................................................
................................................................
.................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck FE, {8, 6, 5, fffffa800a49a7a0}

Probably caused by : usbhub.sys ( usbhub!UsbhHubProcessChangeWorker+ec )

Followup: MachineOwner
---------

 

[kamhcm]

Hi koolkat77,

Nothing is connected to my usb ports, however this reminds me that I constantly get a warning showed up from the right bottom corner saying "USB Device Not Recognized" and in sometimes It is followed by "plug-in and plug-out" sounds that windows play, and usually after some minutes get the BSOD.

So I update my Intel Chipset drivers from Lenovo but still getting BSODs...

You told me that 5U877.sys driver conflict is possibly one of the main reasons of my BSODs, is there any way to disable it or not loading it to the OS, I never use the camera so it´s ok for me if I have to completely disable or "unplugged" it.

Find enclosed tha latest DM Log Collector file.

Thanks for your help,


Alonso

 

[essenbe]

You may try this and see if it helps your USB problem http://www.sevenforums.com/tutorials/165554-usb-driver-general-fix-problems.html Also, just as a test you may try turning off selective suspend of your USB ports. http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html

 

[kamhcm]

Hi Essenbe,

Gone through each step of the USB Driver - General Fix for Problems post, this is created the devmgr_show_nonpresent_devices variable and the uninstall all the faded entries. Also delete the INFCACHE.1 file to let Windows reinstall all the USB devices when detecting them.

Just after doing all this, Windows "detect" a new device, although I did not plugged-in any device. After some seconds it showed the typical notification telling that the device could not be installed. After double-clicking it, I got the list of devices that had this problem. My surprise was that the list referred to my integrated camera! (see attached image). It must be that the integrated camera use an USB port in the inside of my Lenovo T520 laptop.

How can I solve it? Is it really only an "unplugged" connector that I can "plug-in" again? Or is there any way to disable it or not loading it to the OS, I never use the camera so it´s ok for me if I have to completely disable or really "unplugged" it.

Find enclosed the latest DM Log Collector file.

Thanks for your help,


Alonso

 

[essenbe]

This is what the dump file lists

 5U877
start             end                 module name
fffff880`0a039000 fffff880`0a061880   5U877    T (no symbols)           
    Loaded symbol image file: 5U877.sys
    Image path: \SystemRoot\system32\DRIVERS\5U877.sys
    Image name: 5U877.sys
    Timestamp:        Fri Mar 04 03:18:41 2011 (4D70AE71)
    CheckSum:         0002ECFD
    ImageSize:        00028880
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Which is 5U877 UVC driver for Ricoh camera You should be able to find an updated driver at Lenovo web site for your particular computer model. While there I would look for any other drivers that are updated, especially the chipset driver.

Personally, I would download them all and put them in a folder you make frequent backups to an external device, which I hope you do regularly. If you ever need to reinstall, those drivers should be much more current than the driver disk. I never put a driver disk in, I always go get the most current drivers from the Manufacturer's web site. That's just me, but the driver disk is almost always outdated.

 

[essenbe]

Also, most of what you describe about the process is normal. Basically the USB hubs were uninstalled. When Windows restarted it found the 'new hardware' which was the USB hubs and reinstalled them which is what you want. The only problem is the camera couldn't be installed, most likely because Windows could not find a driver for it. So, I don't know if that helps any at all.

I am quickly running out of ideas. So, I hope that works for you.

 

[essenbe]

I went back and looked again at a couple of recent dumps and found this in a couple of them

 PHCORE64
start             end                 module name
fffff880`0f412000 fffff880`105b7000   PHCORE64 T (no symbols)           
    Loaded symbol image file: PHCORE64.SYS
    Image path: \??\C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS
    Image name: PHCORE64.SYS
    Timestamp:        Fri Jul 08 01:02:21 2011 (4E169D6D)
    CheckSum:         00009DD1
    ImageSize:        011A5000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Which is Lenovo RapidBoot Driver
Driver Update Site: Products - Lenovo Support (US)
Your laptop page at Lenovo