Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

IRQL NOT LESS OR EQUAL error


  • This topic is locked This topic is locked
10 replies to this topic

#1 Schack

Schack

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 02 February 2011 - 06:37 PM

I'll start off by admitting that I was an idiot, and tried to use a keygen that I shouldn't have. Huge mistake, as it has knocked out my PC with the IRQL NOT LESS OR EQUAL error. The error screen I get has this to say

"Technical Information:

*** STOP: 0x0000000A (0xFFFFFa82c4281ab0, 0x0000000000000002, 0x0000000000000000, 0xFFFFF80002411557"

I have tried installing clean up programs in Safe mode, but when I do, it throws up the error screen and reboots again. I have .dmp files as well as an error event log, but it seems I can't attach them here. Can anyone give me some advice on how to proceed?

BC AdBot (Login to Remove)

 


#2 Zuhl3156

Zuhl3156

  • Members
  • 309 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bensalem, Pa.
  • Local time:08:33 PM

Posted 02 February 2011 - 06:40 PM

A keygen is used to pirate software, isn't it? I can't help you with this.

#3 Schack

Schack
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 02 February 2011 - 06:48 PM

I have admitted I was wrong, I would take it back if I could. I can't be the first person to have done something stupid, and then gotten in over their head. Can someone please help me out?

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,734 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:33 PM

Posted 03 February 2011 - 09:32 AM

STOP OA errors...are very general, as you will see by going to the following link, http://www.aumha.org/a/stop.htm . In short, it could be any number of items which caused it, including malware. Malware can utilize or infect or masquerade as legitimate files on a system, with many problems which appear to be "driver problems" actually being caused by some form of malware.

Windows doesn't have a technique for identifying a "malware problem" but it can detect a problem which is malware-related...as a "driver problem."

That's one reason why AV programs and other malware-defense programs are essential to a system.

Since you seem to be in a reboot loop that may be caused by malware...I will ask one of the BC malware personnel to take a look and see if they can assist you.

Louis

#5 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,707 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:02:33 AM

Posted 03 February 2011 - 12:39 PM

Hi Schack,

I am going to assist you with your problem.

Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. In case of making changes I shall assume my assistance is not needed any more. Thank you.

Please tell me two things then we can start with removing the malware from your computer:
  • You can't stay enough in Safe Mode to run any scanner isn't it?
  • Tell me your Windows 7 edition and if it is a x86 system or a x64 system.


#6 Schack

Schack
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 03 February 2011 - 11:43 PM

I have tried to use combofix as it has worked for me before in malware removal, but yeah, it rebooted before I got a chance to do anything. I am running Windows 7 Home Premium on 64 bit. I have minidump files, and some error event logs that I could e-mail to you. They are too big to attach to any message here.

#7 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,707 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:02:33 AM

Posted 04 February 2011 - 06:46 AM

Should I assume from your answer that you can not boot into Safe Mode?

In that case:

  • Download Farbar Recovery Scan Tool x64 and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options.

    To enter System Recovery Options from the Boot Menu:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    On the System Recovery Options menu you will get the following options:
    Startup Repair
    System Restore
    Windows Complete PC Restore
    Windows Memory Diagnostic Tool
    Scan your computer's memory for errors.
    Command Prompt
  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe and press Enter.
    Note: Replace letter e with the drive letter of your flash drive.
  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.


[*]I would like to take a look at those minidump files.
Please zip and upload them.
If you don't have a third party archiving software do the following.
To zip the files:
  • Select one of them.
  • Hold down Ctrl key and select all of them.
  • Right-click and from the context menu select Sent to.
  • Select Compressed (zipped) Folder.
To submit the file, you can upload it to this channel:[/list]

#8 Schack

Schack
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 04 February 2011 - 11:38 PM

I uploaded the error files I have. Thank you for your support, I will try what you suggested in the morning, and report back what's happened.

Edited by Schack, 04 February 2011 - 11:38 PM.


#9 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,707 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:02:33 AM

Posted 05 February 2011 - 05:31 AM

I received the files, thank you. Please post the log when ready. :thumbup2:

#10 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,707 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:02:33 AM

Posted 10 February 2011 - 02:09 AM

Are you still there?

#11 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,707 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:02:33 AM

Posted 15 February 2011 - 07:01 AM

This thread will now be closed due to lack of activity.

If you need this topic reopened, please send me a PM within two days and I will reopen it for you.

If you should have a new issue, please start a new topic.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users