BSOD on ks.sys file when trying to capture from Sony digital camcorder

I am trying to capture video from a Sony digital camcorder and get the BSOD, erroring on the ks.sys file everytime I try.

I have reinstalled SP3 and my video and audio drivers. I have a HiJackThis log attached. I read somewhere that it may be a virus so I have included the log.

I am running Windows XP Pro, Dell Dimension E310, 1Gig ram, Pent4 3 GHz hyper thread system.

I have turned off hyperthreading and tried, still BSOD. I have hooked up an external HD with the IEEE and it works fine.

Just blows up on the stupid camera... Help!!!!

Download BlueScreenView:
http://www.nirsoft.net/utils/blue_screen_view.html
unzip downloaded file and double click on BlueScreenView.exe to run the program.
when scanning is done, go to EDIT - Select All
Go to FILE - SAVE Selected Items, and save the report as BSOD.txt
Open BSOD.txt in Notepad, copy all of the content, and paste it into your next reply

Please...do NOT attach a HJT log in this forum. This is not a malware forum...HJT is a malware tool and no one in this forum is authorized to review malware logs.

Your issue hardly seems to involve malware.

Post the entire, exact BSOD message, please...and tell us exactly when it occurs.

Louis

Sorry about the HJT log.. Here is the BSOD text:

EDIT: Removed list of drivers data that is of no value ~ Hamluis.

Edited by hamluis, 17 February 2011 - 07:49 PM.

Sorry...that's just a list of drivers .

You did follow the directions as provided, correct?

Please follow the directions provided exactly...we need to see the causes of the BSODs, which should be reflected in the upper screen after you run BlueScreenView.

If there is no content...that means that either a .dmp file was not generated or your .dmp files are in another location.

Louis

Thanks Luis - also, is it possible to delete that post with the drivers please? it just makes this a VERY long page.

When I open the bluescreenview, it has 2 panes. The top pane shows all of the dmp files. There are 18 of them.

The bottom pane shows the info that i pasted into my last post.

How do I get a log of one of the dmp files? I cannot find anything in the bluescreen program to list the details of the dmp.

I'm trying not to be dense but I cnnot find anything there.. I thought that is not what you wanted but I could not find anything else...

Thoughts? Do you want the dmp file?

Thanks. Brett...

Some additional information regarding Blue Screens and Windows crashes: How to receive help diagnosing Blue Screens and Windows crashes

The needed info is in the top screen, in the .dmp file displayed.

You need to do exactly as stated...

Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content and paste it into your next reply.

I just verified this on my own system, nothing has changed with how this program works .

Louis

OK, I just did what you said and here is the data. I hope it is what you are looking for... Thanks for the help.. Brett..

==================================================
Dump File : Mini021711-02.dmp
Crash Time : 2/17/2011 1:05:33 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf68b8cf4
Parameter 3 : 0xa668bb84
Parameter 4 : 0x00000000
Caused By Driver : ks.sys
Caused By Address : ks.sys+4cf4
File Description : Kernel CSA Library
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.3.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini021711-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 94,208
==================================================

==================================================
Dump File : Mini021711-01.dmp
Crash Time : 2/17/2011 11:53:04 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf6807cf4
Parameter 3 : 0xa6b6ab84
Parameter 4 : 0x00000000
Caused By Driver : ks.sys
Caused By Address : ks.sys+4cf4
File Description : Kernel CSA Library
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.3.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini021711-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 94,208
==================================================

==================================================
Dump File : Mini021611-05.dmp
Crash Time : 2/16/2011 5:41:43 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf70f1cf4
Parameter 3 : 0xa663bb84
Parameter 4 : 0x00000000
Caused By Driver : ks.sys
Caused By Address : ks.sys+4cf4
File Description : Kernel CSA Library
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.3.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini021611-05.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 94,208
==================================================

==================================================
Dump File : Mini021611-04.dmp
Crash Time : 2/16/2011 5:22:45 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf70f1cf4
Parameter 3 : 0xa7184b84
Parameter 4 : 0x00000000
Caused By Driver : ks.sys
Caused By Address : ks.sys+4cf4
File Description : Kernel CSA Library
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.3.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini021611-04.dmp
Processors Count : 1
Major Version : 15
Minor Version : 2600
Dump File Size : 94,208
==================================================

==================================================
Dump File : Mini021611-03.dmp
Crash Time : 2/16/2011 5:08:33 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0xf66f9cf4
Parameter 3 : 0xa5d1cb84
Parameter 4 : 0x00000000
Caused By Driver : ks.sys
Caused By Address : ks.sys+4cf4
File Description : Kernel CSA Library
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.3.2600.5512 (xpsp.080413-2108)
Processor : 32-bit
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini021611-03.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 94,208
==================================================

Hi -
As you can note (and were aware of to an extent) the fault is being caused by a corrupt or altered ks.sys file -
The best repair for this is usually to either uninstall, then reinstall any recent program related to a Sony digital camcorder first -
Then check all drivers in the Video area and update any with a Red or Yellow ! mark -
Next , if you have your XP CD try to run sfc / scannow (Start > Run Box > Type or copy/paste sfc /scannow then click OK ) -
If you do not have the CD here is another way to run the System File Check -
Note ; This method will not necessarily work as well, as when using Windows CD,
because not always ALL system files are backed up on your hard drive. Also, backed up files may be corrupted as well.
Go Start and then Run > type in regedit and click OK
Navigate to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

You will see various entries Values on the right hand side.

The one we want is called: SourcePath

It probably has an entry pointing to your CD-ROM drive, usually D and that is why it is asking for the XP CD.
All we need to do is change it to: C:
Now, double click the SourcePatch setting and a new box will pop up.
Change the drive letter from your CD drive to your root drive, usually C:
Close Registry Editor.

Now restart your computer and try sfc /scannow again!

Thanks to Broni for the instructions
Let us know how this goes as it could solve the problem -

Thank You -

Note: Before attempting any registry edit...always backup your registry. A good tool for doing so, ERUNT Registry Backup Tool - http://www.snapfiles.com/get/erunt.html

Louis

Thanks guys... I just did the regedit and chagned the SourcePath drive, rebooted and ran sfc. It is still asking for a CD to find the files.

Is thre any toher place to chagne the source drive that windows looks for source files?

Thanks... Brett..

OK, I got sfc to run all the way but at the end it started asking for CD disk #2 and I just had to Cancel those.

I rebooted and then tried the camera again and still the same BSOD.....

Any further ideas other than a full OS reload? Thanks all... Brett..

I've seen this before, but I don't remmeber how I solved it.

Take a look at http://support.microsoft.com/kb/897128/ and also take a look at http://www.eggheadcafe.com/software/aspnet/31890860/sfc-asks-for-xp-pro-disc2.aspx .

If this is a Media Center system, the comments in the second link probably apply.

Louis