TechSpot

BSOD Classpnp.sys

By phexed
Nov 14, 2012
Post New Reply
  1. I'm looking for some help on a BSOD issue I'm having. The computer starts up and logs in fine, but eventually becomes sluggish and freezes/BSODs. Below is the minidump file I have been getting (each ones the same).

    I have tried repair install of Windows XP, running hardware diags from F12 (all clean), changing the mouse and keyboard used as well as the ports they are in (only 2 usb devices), chkdsk and sfc /scannow (which froze the computer).

    Please help.


    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 8966626e, 99104ab0, 0}

    Probably caused by : CLASSPNP.SYS ( CLASSPNP!SubmitTransferPacket+82 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 8966626e, The address that the exception occurred at
    Arg3: 99104ab0, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    FAULTING_IP:
    +82
    8966626e ?? ???

    TRAP_FRAME: 99104ab0 -- (.trap 0xffffffff99104ab0)
    Unable to read trap frame at 99104ab0

    CUSTOMER_CRASH_COUNT: 3
    DEFAULT_BUCKET_ID: DRIVER_FAULT
    BUGCHECK_STR: 0x8E
    LAST_CONTROL_TRANSFER: from 00000000 to 8966626e
    SYMBOL_ON_RAW_STACK: 1
    STACK_ADDR_RAW_STACK_SYMBOL: ffffffff99104b60
    STACK_COMMAND: dds 99104B60-0x20 ; kb
    STACK_TEXT:
    99104b40 899b8e40
    99104b44 00000001
    99104b48 99104b6c
    99104b4c 804ef18f nt!IopfCallDriver+0x31
    99104b50 8a6aa030
    99104b54 89703be0
    99104b58 89703d78
    99104b5c ba0e8fdd CLASSPNP!SubmitTransferPacket+0x82
    99104b60 00b70b50
    99104b64 895ae9e8
    99104b68 89703d78
    99104b6c 99104b9c
    99104b70 ba0e8cdc CLASSPNP!ServiceTransferRequest+0xe4
    99104b74 89703d78
    99104b78 8a6a9980
    99104b7c 895aeaa0
    99104b80 895ae9e8
    99104b84 00006e00
    99104b88 00000000
    99104b8c 89d04008
    99104b90 00000001
    99104b94 00000000
    99104b98 00000001
    99104b9c 99104bc0
    99104ba0 ba0e8dcd CLASSPNP!ClassReadWrite+0xff
    99104ba4 00000200
    99104ba8 00000200
    99104bac 895aeae8
    99104bb0 8a6a9f38
    99104bb4 8a6a9758
    99104bb8 899b8e40
    99104bbc 00000200
    FOLLOWUP_IP:
    CLASSPNP!SubmitTransferPacket+82
    ba0e8fdd 5f pop edi
    SYMBOL_NAME: CLASSPNP!SubmitTransferPacket+82
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: CLASSPNP
    IMAGE_NAME: CLASSPNP.SYS
    DEBUG_FLR_IMAGE_TIMESTAMP: 48025c05
    FAILURE_BUCKET_ID: 0x8E_CLASSPNP!SubmitTransferPacket+82
    BUCKET_ID: 0x8E_CLASSPNP!SubmitTransferPacket+82
    Followup: MachineOwner
     
  2. Tmagic650

    Tmagic650 TS Ambassador Posts: 20,929   +167

    What antivirus program do you have installed?
     
  3. phexed

    phexed TS Rookie Topic Starter

    AVG Free 8.5. I actually just found an odd program starting up with the computer under msconfig. TDSSKiller found a removed a rootkit that got past malwarebytes and AVG. I also just uninstalled AVG and put Security Essentials on. I will let you know if this fixed the issue.
     
  4. Tmagic650

    Tmagic650 TS Ambassador Posts: 20,929   +167

    Okay, good work so far...
     
  5. phexed

    phexed TS Rookie Topic Starter

    It was the rootkit causing the issues. Thanks for the help : )
     
  6. Tmagic650

    Tmagic650 TS Ambassador Posts: 20,929   +167

    You are welcome ;)
     


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.