USB is Crashing my system

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

jonno112

Thread Starter
Joined
Jun 18, 2004
Messages
100
Everytime i put a usb drive into my USB hub it crashes my system. I did some looking on google and grabbed a program called windump which give you an explanation what could have caused the crash.

I points to a file called CLASSPNP, I'm not to sure what this is.

Heres a copy of the log.

Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 35, {85a8dc08, 0, 0, 0}

*** WARNING: Unable to verify timestamp for ghmon.sys
*** ERROR: Module load completed but symbols could not be loaded for ghmon.sys


Probably caused by : CLASSPNP.SYS ( CLASSPNP!ClassSendSrbAsynchronous+111 )

Followup: MachineOwner
---------

kd> !analyze -v

Has anyone had this sort of problem?

Thanks

System specs
Athlon 2600
2 gig Ram
300 gig HD x 3
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,298
Hiya

Are you still having this problem? If so, when the system crashes, do you get an error message, possibly with the words STOP in, followed by some numbers, e.g:

Stop 0x0000001e, 0xC0000005, 0x00000009

Also, which version of Windows are you using, and the service packs?

Regards

eddie
 

jonno112

Thread Starter
Joined
Jun 18, 2004
Messages
100
Hi Eddie

Actually i was about to enter my usb in and see what happens. See below

Here is the stop message NO-MORE_IRP_STACK_LOCATIONS
Tech info
*** Stop 0x00000035 (0x865DD548,0x000000000, 0x000000000, 0x000000000)

It does create a mini dump, after checking that with Debugging tools. Heres the dump below.
I hope this isn't info overload. Highlighted main issue in red.


Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini110307-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Sat Nov 3 07:26:38.141 2007 (GMT+11)
System Uptime: 0 days 0:35:13.748
Loading Kernel Symbols
..................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..........................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 35, {85a8dc08, 0, 0, 0}

*** WARNING: Unable to verify timestamp for ghmon.sys
*** ERROR: Module load completed but symbols could not be loaded for ghmon.sys


Probably caused by : CLASSPNP.SYS ( CLASSPNP!ClassSendSrbAsynchronous+111 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis Detailed Analysis *
* *
*******************************************************************************

NO_MORE_IRP_STACK_LOCATIONS (35)
A higher level driver has attempted to call a lower level driver through
the IoCallDriver() interface, but there are no more stack locations in the
packet, hence, the lower level driver would not be able to access its
parameters, as there are no parameters for it. This is a disasterous
situation, since the higher level driver "thinks" it has filled in the
parameters for the lower level driver (something it MUST do before it calls
it), but since there is no stack location for the latter driver, the former
has written off of the end of the packet. This means that some other memory
has probably been trashed at this point.
Arguments:
Arg1: 85a8dc08, Address of the IRP
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------




CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x35

PROCESS_NAME: svchost.exe

LAST_CONTROL_TRANSFER: from 8051bbe3 to 8053331e

STACK_TEXT:
f74bd83c 8051bbe3 00000035 85a8dc08 00000000 nt!KeBugCheckEx+0x1b
f74bd854 f7894614 86396e80 86396e40 85a8dc08 nt!IopfCallDriver+0x17
f74bd86c f78936ce 8598b030 86396e40 85a8dc08 CLASSPNP!ClassSendSrbAsynchronous+0x111
f74bd908 f7880402 8598b030 85a8dc08 85a8dc08 CLASSPNP!ClassDeviceControl+0x731
f74bd99c f789047f 8598b030 85a8dc08 85a8dc9c disk!DiskDeviceControl+0xdcc
f74bd9b8 804e37f7 8598b030 85a8dc08 85a8dc08 CLASSPNP!ClassDeviceControlDispatch+0x48
f74bd9c8 f7ab9667 85a8dc94 8670d158 85a8dc08 nt!IopfCallDriver+0x31
f74bd9f4 804e37f7 85c9da10 85a8dc08 85a8dcb8 PartMgr!PmDeviceControl+0x8c
f74bda04 f7891c3a 0007c0d0 859930e8 85a8dc08 nt!IopfCallDriver+0x31
f74bda88 f7880402 85993030 85a8dc08 85a8dc08 CLASSPNP!ClassDeviceControl+0x87e
f74bdb1c f789047f 85993030 85a8dc08 00000000 disk!DiskDeviceControl+0xdcc
f74bdb38 804e37f7 85993030 85a8dc08 85a8dc9c CLASSPNP!ClassDeviceControlDispatch+0x48
f74bdb48 b61f8e5d 804e8a39 85a8dc08 00000000 nt!IopfCallDriver+0x31
f74bdb7c b61f84a9 85afc468 85a91b68 804e8a39 Fastfat!FatCommonDeviceControl+0xe8
f74bdbc0 804e37f7 85a91a70 85a8dc08 8668ae20 Fastfat!FatFsdDeviceControl+0x3e
f74bdbd0 f7d3533f 804e37f7 8639b300 85a8dc08 nt!IopfCallDriver+0x31
WARNING: Stack unwind information not available. Following frames may be wrong.
f74bdc58 80579a8a 863df748 85a8dc08 866dfe58 ghmon+0x33f
f74bdd00 8057bfa5 000017f4 00000000 00000000 nt!IopXxxControlFile+0x611
f74bdd34 804de7ec 000017f4 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
f74bdd34 7c90eb94 000017f4 00000000 00000000 nt!KiFastCallEntry+0xf8
0087fd48 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
CLASSPNP!ClassSendSrbAsynchronous+111
f7894614 b803010000 mov eax,103h

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: CLASSPNP!ClassSendSrbAsynchronous+111

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: CLASSPNP

IMAGE_NAME: CLASSPNP.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 41107ec2

FAILURE_BUCKET_ID: 0x35_CLASSPNP!ClassSendSrbAsynchronous+111

BUCKET_ID: 0x35_CLASSPNP!ClassSendSrbAsynchronous+111

Followup: MachineOwner
---------



I mean is there a fix for this.
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,298
Can you tell me which USB drive you're trying to install, and any version/model numbers that it has?

eddie
 

jonno112

Thread Starter
Joined
Jun 18, 2004
Messages
100
Im a little lost by that question cause it happens with an ipod as well, im not trying to install any drivers i dont have to.

Could you explain?
 

jonno112

Thread Starter
Joined
Jun 18, 2004
Messages
100
That article led me onto another from symantec so im going to try that.

Ghmon.sys which was mentioned in the debugging window above. Not that easy to find.

Thanks for that i will let you know how i go.





XP Pro SP2
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Top