TechSpot

BSOD Classpnp.sys

By phexed
Nov 14, 2012
Post New Reply
  1. I'm looking for some help on a BSOD issue I'm having. The computer starts up and logs in fine, but eventually becomes sluggish and freezes/BSODs. Below is the minidump file I have been getting (each ones the same).

    I have tried repair install of Windows XP, running hardware diags from F12 (all clean), changing the mouse and keyboard used as well as the ports they are in (only 2 usb devices), chkdsk and sfc /scannow (which froze the computer).

    Please help.


    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000008E, {c0000005, 8966626e, 99104ab0, 0}

    Probably caused by : CLASSPNP.SYS ( CLASSPNP!SubmitTransferPacket+82 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v
    *******************************************************************************
    * *
    * Bugcheck Analysis *
    * *
    *******************************************************************************

    KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
    This is a very common bugcheck. Usually the exception address pinpoints
    the driver/function that caused the problem. Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003. This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG. This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG. This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: c0000005, The exception code that was not handled
    Arg2: 8966626e, The address that the exception occurred at
    Arg3: 99104ab0, Trap Frame
    Arg4: 00000000

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    FAULTING_IP:
    +82
    8966626e ?? ???

    TRAP_FRAME: 99104ab0 -- (.trap 0xffffffff99104ab0)
    Unable to read trap frame at 99104ab0

    CUSTOMER_CRASH_COUNT: 3
    DEFAULT_BUCKET_ID: DRIVER_FAULT
    BUGCHECK_STR: 0x8E
    LAST_CONTROL_TRANSFER: from 00000000 to 8966626e
    SYMBOL_ON_RAW_STACK: 1
    STACK_ADDR_RAW_STACK_SYMBOL: ffffffff99104b60
    STACK_COMMAND: dds 99104B60-0x20 ; kb
    STACK_TEXT:
    99104b40 899b8e40
    99104b44 00000001
    99104b48 99104b6c
    99104b4c 804ef18f nt!IopfCallDriver+0x31
    99104b50 8a6aa030
    99104b54 89703be0
    99104b58 89703d78
    99104b5c ba0e8fdd CLASSPNP!SubmitTransferPacket+0x82
    99104b60 00b70b50
    99104b64 895ae9e8
    99104b68 89703d78
    99104b6c 99104b9c
    99104b70 ba0e8cdc CLASSPNP!ServiceTransferRequest+0xe4
    99104b74 89703d78
    99104b78 8a6a9980
    99104b7c 895aeaa0
    99104b80 895ae9e8
    99104b84 00006e00
    99104b88 00000000
    99104b8c 89d04008
    99104b90 00000001
    99104b94 00000000
    99104b98 00000001
    99104b9c 99104bc0
    99104ba0 ba0e8dcd CLASSPNP!ClassReadWrite+0xff
    99104ba4 00000200
    99104ba8 00000200
    99104bac 895aeae8
    99104bb0 8a6a9f38
    99104bb4 8a6a9758
    99104bb8 899b8e40
    99104bbc 00000200
    FOLLOWUP_IP:
    CLASSPNP!SubmitTransferPacket+82
    ba0e8fdd 5f pop edi
    SYMBOL_NAME: CLASSPNP!SubmitTransferPacket+82
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: CLASSPNP
    IMAGE_NAME: CLASSPNP.SYS
    DEBUG_FLR_IMAGE_TIMESTAMP: 48025c05
    FAILURE_BUCKET_ID: 0x8E_CLASSPNP!SubmitTransferPacket+82
    BUCKET_ID: 0x8E_CLASSPNP!SubmitTransferPacket+82
    Followup: MachineOwner
     
  2. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,230   +232

    What antivirus program do you have installed?
     
  3. phexed

    phexed TS Rookie Topic Starter

    AVG Free 8.5. I actually just found an odd program starting up with the computer under msconfig. TDSSKiller found a removed a rootkit that got past malwarebytes and AVG. I also just uninstalled AVG and put Security Essentials on. I will let you know if this fixed the issue.
     
  4. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,230   +232

    Okay, good work so far...
     
  5. phexed

    phexed TS Rookie Topic Starter

    It was the rootkit causing the issues. Thanks for the help : )
     
  6. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,230   +232

    You are welcome ;)
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...