Solved USB Problem. Driving me nuts!

[seavixen32]

As you have a recovery partition you could try a factory restore, but that will involve reinstalling all your applications.

Also, have you created a set of recovery discs yet? If not, you should do.

You may even want to consider a clean install using your OEM product key.

http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html#post1839164

 

[Slartybart]

I think this was already covered, but just in case: Tips for solving problems with USB devices

Are there any events in the event log showing error codes?

Are there any conflicts in Device Manager - you might want to view hidden devices (view menu), although most are legacy drivers. I had some 'ghost' devices once - they'll show up grey. What to do about ghosts? I personally don't believe in ghosts, so I backed up my registry and deleted the extraneous entries in device mgr. Did that fix my problem? Nope, the DVD drive truly was bad and had to be replaced. But the ghost entries were created when I tried to fix the DVD without actually replacing the hardware.

edit: Uninstalling and then reinstalling the drivers for the device is a likely solution to a Code 10 error.

Important: If a USB device is generating the Code 10 error, uninstall every device under the Universal Serial Bus controllers hardware category in Device Manager as part of the driver reinstall. This includes any USB Mass Storage Device, USB Host Controller, and USB Root Hub.

Note: Properly reinstalling a driver is not the same as simply updating a driver. A full driver reinstall involves completely removing the currently installed driver and then letting Windows install it over again from scratch.
​

Peace!

 

[fedupwith72]

I don't fancy doing a factory restore.

Slartybart may have cracked something. I restarted and checked the events log

I had several of these:
Warning-

Log Name: System
Source: Microsoft-Windows-Kernel-PnP
Date: 21/05/2012 17:42:46
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: SYSTEM
Computer: Ken-PC
Description:
The driver \Driver\mpfilt failed to load for the device PCI\VEN_8086&DEV_293C&SUBSYS_02121025&REV_03\3&33fd14ca&0&D7.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-05-21T16:42:46.915918700Z" />
<EventRecordID>151609</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="48" />
<Channel>System</Channel>
<Computer>Ken-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriverNameLength">60</Data>
<Data Name="DriverName">PCI\VEN_8086&DEV_293C&SUBSYS_02121025&REV_03\3&33fd14ca&0&D7</Data>
<Data Name="Status">3221226348</Data>
<Data Name="FailureNameLength">14</Data>
<Data Name="FailureName">\Driver\mpfilt</Data>
<Data Name="Version">0</Data>
</EventData>
</Event>


And also some of these:

Error:

Log Name: System
Source: Application Popup
Date: 21/05/2012 17:42:46
Event ID: 1060
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Ken-PC
Description:
\SystemRoot\SysWow64\Drivers\mpfilt.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
Event Xml:
<Event xmlns="Error">
<System>
<Provider Name="Application Popup" />
<EventID Qualifiers="49152">1060</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-05-21T16:42:46.915918700Z" />
<EventRecordID>151608</EventRecordID>
<Channel>System</Channel>
<Computer>Ken-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\SystemRoot\SysWow64\Drivers\mpfilt.SYS</Data>
<Binary>000000000200300000000000240400C0000000006C0300C000000000000000000000000000000000</Binary>
</EventData>
</Event>

This mpfilt.sys seems to be an antimalware device. I checked it out and it is dated as 5 April 2012, aned that is probably about the time all this started.

All the drivers are in randomly named folders.

Any ideas?

Delete all the drivers? Replace this mpfilt file?

 

[fedupwith72]

Did a search for a downloadable mpfilt replacement and got a solution on social.technet.Microsoft.com/forums translated from a Chinese site

"""""""""""Firstly, You go to the folder \Windows\syswow64\drivers and delete this file mpfilt.sys . then restart the computer.

after that open up the regedit editor (enter 'regedit' in search box) . and then go to HKEY_localmachine\system\currentcontrolset\services\mpfilt , then delete the "mpfilt" folder.

Do the same to these two key also ...HKEY_localmachine\system\controlset001\services\mpfilt and HKEY_localmachine\system\controlset002\services\mpfilt

. then go to this key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000} and delete the value "Lowerfilters " .
do the same to HKEY_LOCAL_MACHINE\SYSTEM\controlset001\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}
and HKEY_LOCAL_MACHINE\SYSTEM\controlset002\Control\Class\{36FC9E60-C465-11CF-8056-444553540000} .
..

then it's finished """"""""""

seems this also works for mouse and other peripheral problems, too.

I will try it and let you know. Thanks for your help, especially Slarty as checking the Events log identified the cause.

 

[Slartybart]

I'm running win7 x64 homeprem - did a search for mpfilt.sys - not found.

you beat me to the registry check - cool!
hope the fix you found works.

edit1: you might want to rename files/folders instead of delete.
although sometimes Windows is too smart and follows a rename.

edit2: controlsets - check for any numbered controlset (001, 002, 010...), as well as current

edit3: I always forget about those handy event logs too. Wish I understood what they said.
​

Peace!

 

[fedupwith72]

This worked like a dream!
The forum thread didn't show up in search results as it was speciifically for clearing the mpfilt.sys events log problem so the "hardware changes....." message wasn't included on the text.
The registry entries weren't in every location it stated, (i.e. did not exist in controlset001) but I checked all the locations it said, and then did a registry serach for mpfilt to make sure it was totally gone. Restarted the computer and all the USB ports are there, as they should be!

Thanks for your help. It got me to the solution in the end. I hope this thread helps others with the same problem in future!

 

[Slartybart]

Glad it worked.

Filters on HW seem to present problems...sometimes. I chased down a "DVD not recognized" issue a while back. MS Mr. Fixit modified upper and lower filters. Unfortunately that did not solve my DVD problem. Each HW issue will be different - some filters are valid, some present problems. Good work on finding the fix, all you needed was to be pointed in the right direction - something we all need from time-to-time.

What state did you leave your USB drivers (and don't say I'm not in the States). You know where I'm headed with that.

Peace!

 

[seavixen32]

A good call, both of you.

The solution will no doubt help others in the future.

Without wishing to rain on your parade I do hope you'll create those recovery discs, you never know when you'll need them.

 

[Slartybart]

Final thoughts.

1. The stick might not be defective, it just has unnecessary install crap on it.
   The capacity well... buyer beware
2. Control Panel ==> Autoplay - change default actions to prevent unexpected installs
   I disable it for all devices, but you can choose what's best for you.
   Disabling autoplay means you will have to manually launch what ever is on the device. Without autoplay, you have the option to explore the device before the system takes action. Big deal, I have to Dblclick audio CDs, or launch a player. Far better than chasing down a device 'error'. The thing is, if you're used to autoplay, you might think "Hey wait-a-minit now my audio CDs won't play". Perhaps you'll remember (6 or even 12 months from now) that you changed autoplay and how to change settings to suit your preference.
3. If you're strong enough ) - disable autoplay and explore the stick - delete what's on it or format it. You should now have a useable, albeit small, stick. If it's not worth the trouble, forget I mentioned it.

---

Thanks dad, I knew we'd make you proud some day!

A good call, both of you.

Peace!

 

[Slartybart]

USB corrupted by filters - polished

1. Navigate to C:\Windows\syswow64\drivers
   • rename mpfilt.sys to mpfilt-USBerror.sys
   • restart your machine
2. Launch RegEdit
   • Start Menu ==> run ==> regedit
     Note: You can also launch RegEdit using the Start Menu Search box ==> regedit,
     then DblClick regedit presented in the search results
   • In RegEdit
     1. Navigate to HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mpfilt
        delete the mpfilt key
     2. Navigate to HKEY_LOCAL_MACHINE\system\controlset001\services\mpfilt
        delete the mpfilt key
        
        Note: mpfilt might exist on additional control sets, check each controlset(002,003,010...)\services\mpfilt
        delete the mpfilt key
     3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}
        delete value "Lowerfilters "
     4. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\controlset001\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}
        delete value "Lowerfilters "
     5. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\controlset002\Control\Class\{36FC9E60-C465-11CF-8056-444553540000} .
        delete value "Lowerfilters "
     6. Navigate to the top of the RegEdit window "Computer" (in regedit)
        Search for mpfilt - it is important to search only for mpfilt - you don't want to find mpflt or mpfilter.
        -> RegEdit Search: regedit edit menu -> select find -> enter mpfilt in the search box.
        -> Mark Checkbox labeled "Match whole string only"
        -> click "Find Next" button until you get the "Finished searching through the registry" message, Click OK
        
        If mpfilt was found when you searched, you probably just missed one. That's why you did the search.
        - make sure that it is mpfilt and the key is a service in a controlset, then delete the key
   • Close RegEdit,
     restart your machine, and you're done

 

[fedupwith72]

Thanks to Slarty for the tidy version.

All through this the USB drivers were reported as up to date and the ports are now all ok, where before they were all "exclamation marked". The drivers did install before via Troubleshooter, or Fixit but took ages.

This thread covered several common pains in the ass
The This Copy of Windows is not Genuine Message can be cured by downloading the WGA Remover from here Ultimate Windows Genuine Advantage (WGA) Remover
This is a newer program than WAT and seems more effective.

Events Log can be accessed just by typing events in Search and if you have a problem at startup, do a restart and this will give you some idea of what is at fault.

To open a Command Line interface press Windows Key and R.

To enter a Command Line as an Admin just type cmd in the search box while holding shift.

In Device Manager go into View and Show Hidden Devices to reveal greyed out "Ghosts".

You can quickly uninstall USB hubs and controllers and the ghosts by highlighting and pressing Del and then confirming.

Thanks to all who took the trouble to help.

As forthe memory stick. The date of the mpfilt.sys file was definitely the same as the date I first used it, so it looked like it caused the file to be rewritten.

I checked it with Chip Genius (MyMPx) and it showed the chip to be a cheap 4gb chip which had been faked to show up as a much larger capacity. the ebay seller conned me (and others) by saying the chips were a genuine but faulty batch that had bad sectors so they would be lower capacity than they were supposed to be. I told him what the chip was and what its actual capacity was and got most of my money back, just paying the value of a 4gb chip.

 

[fedupwith72]

Also, I forgot to say - the Troubleshooter is quite useful. as the Search facility was also trashed by this.
Troubleshooter got it working, and it did get the USB ports working each time when they failed.

easiest way to access it is to open Control Panel and search for 'troubleshoot'

 

[fedupwith72]

Solution to USB Ports not recognizing anything plugged in Windows 7, Message "hardware changes might not have been recognized" on USB Windows 7, USB ports dead Windows 7, "This version of windows might not be genuine" Windows 7, fake memory stick chip identification and check (tip - set Chip Genius to a much smaller capacity than the actual one claimed by the stick so that it IDs the chip quickly and then look the chip up on Google to find what it really is!)
How to use Command line on Windows 7. How to use Events Log on Windows 7. running full disk scan in Windows 7

 

[Slartybart]

nice closure Fed.
Good to hear you were able to recoup most of the money too.