c-aff4: Error: StartService(), Cannot start the driver: A device attached to the system is not functioning.
Windows 10 x64 (Insider) Surface Book 2, 16GB RAM VSM enabled: Yes Cred. Guard enabled: Yes HVCI enabled: No
C:\Windows\Temp>winpmem.exe -o c:\Windows\Temp\test.dmp -ddd
2020-05-23 16:19:46 I This is The WinPmem memory imager. version 3.3rc2
2020-05-23 16:19:46 D Creating intermediate directories C:\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\AppData\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\AppData\Local\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\AppData\Local\Temp\
2020-05-23 16:19:46 I Extracted 45368 bytes into C:\Users\USER\AppData\Local\Temp\pme861B.tmp
2020-05-23 16:19:46 I Driver Unloaded.
2020-05-23 16:19:46 E Error: StartService(), Cannot start the driver: A device attached to the system is not functioning.
2020-05-23 16:19:46 I Trying to load non-attestation signed driver.
2020-05-23 16:19:46 D Creating intermediate directories C:\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\AppData\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\AppData\Local\
2020-05-23 16:19:46 D Creating intermediate directories C:\Users\USER\AppData\Local\Temp\
2020-05-23 16:19:46 I Extracted 36176 bytes into C:\Users\USER\AppData\Local\Temp\pme867A.tmp
2020-05-23 16:19:47 I Driver Unloaded.
2020-05-23 16:19:47 E Error: StartService(), Cannot start the driver: A device attached to the system is not functioning.
IO_ERROR: at win_pmem.cc: 695
2020-05-23 16:19:47 E Imaging failed with error: IO_ERROR
2020-05-23 16:19:47 I Removed C:\Users\USER\AppData\Local\Temp\pme861B.tmp
2020-05-23 16:19:47 I Removed C:\Users\USER\AppData\Local\Temp\pme867A.tm
```p
About this issue
- Original URL
- State: open
- Created 4 years ago
- Comments: 20 (1 by maintainers)
There has been a lot of work done on Winpmem by Viviane here https://github.com/Velocidex/WinPmem and it is almost ready for the next release. The new code not only works on all architectures but it is also significantly faster.
Just an update: 4.0rc1 release mentioned above fixes the problem with Win10 2004 update, but it doesn’t support VSM mode yet. So if you have a PC with both Win10 2004 and VSM, there is no solution for that yet.