Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue Screen - iastor.sys


  • This topic is locked This topic is locked
18 replies to this topic

#1 xander34

xander34

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 17 December 2010 - 07:37 PM

I have been experiencing a few BSOD's over the past few days and now I cannot reboot- even into Safe Mode. This is a 2004(?) Dell. Here is the error message I receive:

DRIVER_IRQL_NOT_LESS_OR_EQUAL


and at the end ...


Technical information:

*** STOP: 0x000000D1 (0x00000018, 0x00000002, 0x00000000, 0xF738725F)
*** iastor.sys - Address F738725F base at F7378000, DateStamp 42b2bf42

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 17 December 2010 - 09:10 PM

Hi -
The first thing is , have you installed any new programs or hardware at , or about , the time these messages began -
You say "a few days" - Can you remember Anything added or changed at that time - This includes Antivirus , printer , or similar programs -

Thank You -

#3 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 17 December 2010 - 11:40 PM

maybe itunes/quicktime. thats all i can think of. diablo 2 and video drivers over a month ago.

#4 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 18 December 2010 - 08:40 AM

maybe a norton update as well

#5 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:52 PM

Posted 18 December 2010 - 09:46 AM

Hi xander34,

How was the computer running before the BSODs? Were you having any redirects when you were on the web?

Do you have easy access to a working computer with internet access? Do you also have a flash drive we can use? It would need to be empty since we'll have to format it. We'll be able to access your files, but also check the drivers. The driver in the BSOD is a critical one (obviously)...one that malware can often patch.

Thanks!


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#6 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 18 December 2010 - 01:00 PM

i had redirects about a year ago but none recently. you helped me solve that issue. i can access a friends pc to get onlinebut do not have a flash drive. i may be able to borrow one. what would the next step be?

#7 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:52 PM

Posted 18 December 2010 - 03:45 PM

Hello, xander34.

Try this please. You will need a USB drive. This will allow us to look at the drivers that are installed, including the one causing the issue.

Download http://unetbootin.sourceforge.net/unetbootin-xpud-windows-latest.exe & http://noahdfear.net/downloads/bootable/xPUD/xpud-0.9.2.iso to the desktop of your clean computer
  • Insert your USB drive
  • Press Start > My Computer > right click your USB drive > choose Format > Quick format
  • Double click the unetbootin-xpud-windows-387.exe that you just downloaded
  • Press Run then OK
  • Select the DiskImage option then click the browse button located on the right side of the textbox field.
  • Browse to and select the xpud-0.9.2.iso file you downloaded
  • Verify the correct drive letter is selected for your USB device then click OK
  • It will install a little bootable OS on your USB device
  • Once the files have been written to the device you will be prompted to reboot ~ do not reboot and instead just Exit the UNetbootin interface
  • After it has completed do not choose to reboot the clean computer simply close the installer
  • Next download http://noahdfear.net/downloads/driver.sh to your USB
  • Remove the USB and insert it in the sick computer
  • Boot the Sick computer
  • Press F12 and choose to boot from the USB
  • Follow the prompts
  • A Welcome to xPUD screen will appear
  • Press File
  • Expand mnt
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Click on the folder that represents your USB drive (sdb1 ?)
  • Confirm that you see driver.sh that you downloaded there
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh
  • Press Enter
  • After it has finished a report will be located on your USB drive named report.txt
  • Remove the USB drive and insert back in your working computer and navigate to report.txt (usually, you can also post it directly from xPud)

    Please note - all text entries are case sensitive
Copy and paste the report.txt for my review

etavares


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#8 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 18 December 2010 - 10:27 PM

i tried to get in but my friends windows 7 pc and virus protection won't let me in. not comfortable using their pc and not really any other options. i may try the library tomorrow. any other ideas?

#9 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 19 December 2010 - 07:34 AM

going to give it a shot at the library this afternoon and see if i can complete the downloads

#10 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:52 PM

Posted 19 December 2010 - 07:55 AM

OK. What do you mean by "virus protection wouldn't let me in"? To the links? Or to create the USB drive?


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#11 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 19 December 2010 - 03:22 PM

i was able to download to usb, but it won,t boot up.

#12 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:52 PM

Posted 19 December 2010 - 11:00 PM

OK, try to change the boot order of your BIOS to ensure you can boot from USB before any Hard Drives (or 'HDD').


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#13 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:52 PM

Posted 19 December 2010 - 11:01 PM

OK, try to change the boot order of your BIOS to ensure you can boot from USB before any Hard Drives (or 'HDD').


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 


#14 xander34

xander34
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:08:52 PM

Posted 20 December 2010 - 09:53 PM

i changed it butwhen restarting, i only get a black screen with a blinking cursor

#15 etavares

etavares

    Bleepin' Remover


  • Malware Response Team
  • 15,514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:52 PM

Posted 21 December 2010 - 05:49 PM

If you look at the contents of the USB drive, what do you see?

You should see these files in the root of the USB drive:
syslinux.cfg
vesamenu.c32


and these folders:
boot
opt


Do you have those files/folders?


If I don't respond within 2 days, please feel free to PM me.
Please don't ask for help via PM. The forums are there for a reason. Please post in the forums so others may benefit as well.

Posted Image
Unified Network of Instructors and Trusted Eliminators
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users