1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

USB is Crashing my system

Discussion in 'Hardware' started by jonno112, Nov 2, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. jonno112

    jonno112 Thread Starter

    Joined:
    Jun 18, 2004
    Messages:
    100
    Everytime i put a usb drive into my USB hub it crashes my system. I did some looking on google and grabbed a program called windump which give you an explanation what could have caused the crash.

    I points to a file called CLASSPNP, I'm not to sure what this is.

    Heres a copy of the log.

    Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 35, {85a8dc08, 0, 0, 0}

    *** WARNING: Unable to verify timestamp for ghmon.sys
    *** ERROR: Module load completed but symbols could not be loaded for ghmon.sys


    Probably caused by : CLASSPNP.SYS ( CLASSPNP!ClassSendSrbAsynchronous+111 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v

    Has anyone had this sort of problem?

    Thanks

    System specs
    Athlon 2600
    2 gig Ram
    300 gig HD x 3
     
  2. eddie5659

    eddie5659 Moderator Malware Specialist

    Joined:
    Mar 19, 2001
    Messages:
    36,955
    Hiya

    Are you still having this problem? If so, when the system crashes, do you get an error message, possibly with the words STOP in, followed by some numbers, e.g:

    Stop 0x0000001e, 0xC0000005, 0x00000009

    Also, which version of Windows are you using, and the service packs?

    Regards

    eddie
     
  3. jonno112

    jonno112 Thread Starter

    Joined:
    Jun 18, 2004
    Messages:
    100
    Hi Eddie

    Actually i was about to enter my usb in and see what happens. See below

    Here is the stop message NO-MORE_IRP_STACK_LOCATIONS
    Tech info
    *** Stop 0x00000035 (0x865DD548,0x000000000, 0x000000000, 0x000000000)

    It does create a mini dump, after checking that with Debugging tools. Heres the dump below.
    I hope this isn't info overload. Highlighted main issue in red.


    Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini110307-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_gdr.050301-1519
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
    Debug session time: Sat Nov 3 07:26:38.141 2007 (GMT+11)
    System Uptime: 0 days 0:35:13.748
    Loading Kernel Symbols
    ..................................................................................................................................................
    Loading User Symbols
    Loading unloaded module list
    ..........................................
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 35, {85a8dc08, 0, 0, 0}

    *** WARNING: Unable to verify timestamp for ghmon.sys
    *** ERROR: Module load completed but symbols could not be loaded for ghmon.sys


    Probably caused by : CLASSPNP.SYS ( CLASSPNP!ClassSendSrbAsynchronous+111 )

    Followup: MachineOwner
    ---------

    kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis Detailed Analysis *
    * *
    *******************************************************************************

    NO_MORE_IRP_STACK_LOCATIONS (35)
    A higher level driver has attempted to call a lower level driver through
    the IoCallDriver() interface, but there are no more stack locations in the
    packet, hence, the lower level driver would not be able to access its
    parameters, as there are no parameters for it. This is a disasterous
    situation, since the higher level driver "thinks" it has filled in the
    parameters for the lower level driver (something it MUST do before it calls
    it), but since there is no stack location for the latter driver, the former
    has written off of the end of the packet. This means that some other memory
    has probably been trashed at this point.
    Arguments:
    Arg1: 85a8dc08, Address of the IRP
    Arg2: 00000000
    Arg3: 00000000
    Arg4: 00000000

    Debugging Details:
    ------------------




    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0x35

    PROCESS_NAME: svchost.exe

    LAST_CONTROL_TRANSFER: from 8051bbe3 to 8053331e

    STACK_TEXT:
    f74bd83c 8051bbe3 00000035 85a8dc08 00000000 nt!KeBugCheckEx+0x1b
    f74bd854 f7894614 86396e80 86396e40 85a8dc08 nt!IopfCallDriver+0x17
    f74bd86c f78936ce 8598b030 86396e40 85a8dc08 CLASSPNP!ClassSendSrbAsynchronous+0x111
    f74bd908 f7880402 8598b030 85a8dc08 85a8dc08 CLASSPNP!ClassDeviceControl+0x731
    f74bd99c f789047f 8598b030 85a8dc08 85a8dc9c disk!DiskDeviceControl+0xdcc
    f74bd9b8 804e37f7 8598b030 85a8dc08 85a8dc08 CLASSPNP!ClassDeviceControlDispatch+0x48
    f74bd9c8 f7ab9667 85a8dc94 8670d158 85a8dc08 nt!IopfCallDriver+0x31
    f74bd9f4 804e37f7 85c9da10 85a8dc08 85a8dcb8 PartMgr!PmDeviceControl+0x8c
    f74bda04 f7891c3a 0007c0d0 859930e8 85a8dc08 nt!IopfCallDriver+0x31
    f74bda88 f7880402 85993030 85a8dc08 85a8dc08 CLASSPNP!ClassDeviceControl+0x87e
    f74bdb1c f789047f 85993030 85a8dc08 00000000 disk!DiskDeviceControl+0xdcc
    f74bdb38 804e37f7 85993030 85a8dc08 85a8dc9c CLASSPNP!ClassDeviceControlDispatch+0x48
    f74bdb48 b61f8e5d 804e8a39 85a8dc08 00000000 nt!IopfCallDriver+0x31
    f74bdb7c b61f84a9 85afc468 85a91b68 804e8a39 Fastfat!FatCommonDeviceControl+0xe8
    f74bdbc0 804e37f7 85a91a70 85a8dc08 8668ae20 Fastfat!FatFsdDeviceControl+0x3e
    f74bdbd0 f7d3533f 804e37f7 8639b300 85a8dc08 nt!IopfCallDriver+0x31
    WARNING: Stack unwind information not available. Following frames may be wrong.
    f74bdc58 80579a8a 863df748 85a8dc08 866dfe58 ghmon+0x33f
    f74bdd00 8057bfa5 000017f4 00000000 00000000 nt!IopXxxControlFile+0x611
    f74bdd34 804de7ec 000017f4 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
    f74bdd34 7c90eb94 000017f4 00000000 00000000 nt!KiFastCallEntry+0xf8
    0087fd48 00000000 00000000 00000000 00000000 0x7c90eb94


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    CLASSPNP!ClassSendSrbAsynchronous+111
    f7894614 b803010000 mov eax,103h

    SYMBOL_STACK_INDEX: 2

    SYMBOL_NAME: CLASSPNP!ClassSendSrbAsynchronous+111

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: CLASSPNP

    IMAGE_NAME: CLASSPNP.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 41107ec2

    FAILURE_BUCKET_ID: 0x35_CLASSPNP!ClassSendSrbAsynchronous+111

    BUCKET_ID: 0x35_CLASSPNP!ClassSendSrbAsynchronous+111

    Followup: MachineOwner
    ---------



    I mean is there a fix for this.
     
  4. eddie5659

    eddie5659 Moderator Malware Specialist

    Joined:
    Mar 19, 2001
    Messages:
    36,955
    Can you tell me which USB drive you're trying to install, and any version/model numbers that it has?

    eddie
     
  5. jonno112

    jonno112 Thread Starter

    Joined:
    Jun 18, 2004
    Messages:
    100
    Im a little lost by that question cause it happens with an ipod as well, im not trying to install any drivers i dont have to.

    Could you explain?
     
  6. Hughv

    Hughv

    Joined:
    Jul 22, 2006
    Messages:
    8,450
  7. jonno112

    jonno112 Thread Starter

    Joined:
    Jun 18, 2004
    Messages:
    100
    That article led me onto another from symantec so im going to try that.

    Ghmon.sys which was mentioned in the debugging window above. Not that easy to find.

    Thanks for that i will let you know how i go.





    XP Pro SP2
     
  8. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/647004

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice