New
#1
BSOD related to Device Install Manager - USB Issues
Hi folks,
After some irritating BSODs and a long process of trial and error that followed, I managed to track down the cause: the Device Install Service (C:\Windows\system32\svchost.exe -k DcomLaunch) in Windows or something related to it.
As I understand it, this service manages PnP for the USB drives etc. Every time it is triggered (even if triggered manually via command prompt or through the Services app), I get a BSOD.
Some notes:
1) All USB devices removed except for mouse and keyboard. Problem still occurs.
2) Did a system restore to a point before problems started appearing. Problem still occurs.
3) Leaving the mouse and keyboard in the same USB ports does not trigger the error (Windows seems to remember the mapping before I had problems). Changing the physical USB port for either device or trying to boot with either device in any other port than the port it is currently in will trigger the BSOD. Sometimes the "New Device Found" window will appear on boot before this happens.
4) Plugging in any new USB device will trigger the failure.
5) BSOD happens anytime between 5-30 seconds after the service is triggered.
6) The presence of Driver Verifier running does not alter the dump results. Looks like software rather than hardware.
Can anyone help me in attempting to repair this without doing a reinstallation?
The WinDbg output for the crash dump is given below.
Code:Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\120213-10687-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols Executable search path is: Windows 8 Kernel Version 9200 MP (8 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 9200.16628.amd64fre.win8_gdr.130531-1504 Machine Name: Kernel base = 0xfffff800`9ea6c000 PsLoadedModuleList = 0xfffff800`9ed38a20 Debug session time: Mon Dec 2 02:25:40.499 2013 (UTC + 8:00) System Uptime: 0 days 0:04:12.149 Loading Kernel Symbols ............................................................... ................................................................ .................................................. Loading User Symbols Loading unloaded module list ........... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck C000021A, {fffff8a01089e760, 0, 0, 0} ----- ETW minidump data unavailable----- Probably caused by : ntkrnlmp.exe ( nt!NtSetSystemPowerState+878 ) Followup: MachineOwner --------- 3: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* WINLOGON_FATAL_ERROR (c000021a) The Winlogon process terminated unexpectedly. Arguments: Arg1: fffff8a01089e760, String that identifies the problem. Arg2: 0000000000000000, Error Code. Arg3: 0000000000000000 Arg4: 0000000000000000 Debugging Details: ------------------ ----- ETW minidump data unavailable----- BUGCHECK_STR: 0xc000021a_0 ERROR_CODE: (NTSTATUS) 0xc000021a - {Fatal System Error} The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x). The system has been shut down. EXCEPTION_CODE: (NTSTATUS) 0xc000021a - {Fatal System Error} The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x). The system has been shut down. EXCEPTION_PARAMETER1: fffff8a01089e760 EXCEPTION_PARAMETER2: 0000000000000000 EXCEPTION_PARAMETER3: 0000000000000000 EXCEPTION_PARAMETER4: 0 ADDITIONAL_DEBUG_TEXT: Windows must now restart because the Device Install Service service terminated unexpectedly CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT PROCESS_NAME: services.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff8009eddd37a to fffff8009eac6440 STACK_TEXT: fffff880`02fea6e8 fffff800`9eddd37a : 00000000`0000004c 00000000`c000021a fffff880`0cde2400 fffffa80`13afbe60 : nt!KeBugCheckEx fffff880`02fea6f0 fffff800`9edcea24 : 00000000`00000001 00000000`00000002 ffffffff`80001630 00000000`00000002 : nt!PopGracefulShutdown+0x29a fffff880`02fea730 fffff800`9eac5453 : fffffa80`0cabf640 00000000`00000000 00000000`c0000004 fffff800`9eb9c801 : nt!NtSetSystemPowerState+0x878 fffff880`02fea870 fffff800`9eaca630 : fffff800`9f06e8ef 00000000`00000001 00000000`00000000 00000000`00000007 : nt!KiSystemServiceCopyEnd+0x13 fffff880`02feaa08 fffff800`9f06e8ef : 00000000`00000001 00000000`00000000 00000000`00000007 fffff8a0`1116ed00 : nt!KiServiceLinkage fffff880`02feaa10 fffff800`9ef42bb7 : 00000000`00000000 fffff800`9eba2558 00000000`00000000 fffffa80`0e5facb0 : nt! ?? ::NNGAKEGL::`string'+0x42985 fffff880`02feaad0 fffff800`9ea9b7ac : fffffa80`0cabf640 00000000`00000000 00000000`00000002 fffff800`9eacfcbc : nt!PopPolicyWorkerAction+0x63 fffff880`02feab40 fffff800`9eb042a1 : fffff800`00000002 fffff800`9ea9b6ec fffff800`9ed05560 fffff800`9ed05c00 : nt!PopPolicyWorkerThread+0xc0 fffff880`02feab80 fffff800`9ea98fd9 : 00000000`00000000 00000000`00000080 fffff800`9eb04160 fffffa80`0cabf640 : nt!ExpWorkerThread+0x142 fffff880`02feac10 fffff800`9eb4d7e6 : fffff880`012d8180 fffffa80`0cabf640 fffff880`012e3f40 fffffa80`0ca44200 : nt!PspSystemThreadStartup+0x59 fffff880`02feac60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16 STACK_COMMAND: kb FOLLOWUP_IP: nt!NtSetSystemPowerState+878 fffff800`9edcea24 cc int 3 SYMBOL_STACK_INDEX: 2 SYMBOL_NAME: nt!NtSetSystemPowerState+878 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 51a966cd BUCKET_ID_FUNC_OFFSET: 878 FAILURE_BUCKET_ID: 0xc000021a_0_nt!NtSetSystemPowerState BUCKET_ID: 0xc000021a_0_nt!NtSetSystemPowerState Followup: MachineOwner