Blue screen

D

dyle

New Member
I keep getting a blue screen everytime I boot. I turned off automatic restart to see what it said and I get an error message saying IRQL_not_less_or_equal or something.

this was the stop code: *** stop: 0x0000000A (0x0000000000000008, 0x0000000000000002, 0x0000000000000000,0xFFFFF800020ADD19)

I tried system restore but it says: system restore did not complete successfully. your computer's system files ans settings were not changed.

details: an unspecified error occured during system restore. (0x800700b7)

I did some reading on how to fix this problem and I'm lead to believe its a corrupt registry and I should download a registry cleanup tool. Since even in safe mode my computer crashes immediately, my question is this: how do I run a registry cleanup without being able to access my computer?

Also it tells me to disable caching or shadowing in the BIOS but I didn't see anything like that and I lost my user manual. my menu's are: main, advanced, power, boot, tools, and exit. I'm not sure which menu I should be searching through.

any help on this matter is very much appreciated.
 
Unless you know what you are doing don't mess with the registry. Too often it causes a lot of harm and little good.

0xA errors are caused either by hardware or faulty drivers attempting to address a higher IRQ Level than it is designed to do resulting in system crashes.

I note that this forum provides a Manage Attachments button. See if you can do the following:

My Computer > C Drive > Windows Folder > Minidump Folder > Minidump Files.

Attach to your next post the five most recent dumps. Notice the Manage Attachments button at the bottom when you go to post the next time. Zip up to five files per Zip; if you only have one or two you don’t need to zip them, just attach as is. Please don’t Zip each one individually.

* I'll try to read them for you.
 
Slacker7 said:
Unless you know what you are doing don't mess with the registry. Too often it causes a lot of harm and little good.

0xA errors are caused either by hardware or faulty drivers attempting to address a higher IRQ Level than it is designed to do resulting in system crashes.

I note that this forum provides a Manage Attachments button. See if you can do the following:

My Computer > C Drive > Windows Folder > Minidump Folder > Minidump Files.

Attach to your next post the five most recent dumps. Notice the Manage Attachments button at the bottom when you go to post the next time. Zip up to five files per Zip; if you only have one or two you don’t need to zip them, just attach as is. Please don’t Zip each one individually.

* I'll try to read them for you.
Click to expand...

sorry there was only one file in this folder and when i tried to attach it, it said invalid file so i had to zip it.
 

Attachments

Your blue screen is caused by a bad driver....ataport.sys.

Lets start by scanning your system for malware.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com but DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
 
johnb35 said:
Your blue screen is caused by a bad driver....ataport.sys.

Lets start by scanning your system for malware.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com but DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
Click to expand...

can't install HijackThis. I'm working in safe mode with networking and it says i can't access windows installer in safe mode. can't use my computer any other way. also here's what Malwarebytes says:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6093

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

3/17/2011 9:40:48 PM
mbam-log-2011-03-17 (21-40-48).txt

Scan type: Quick scan
Objects scanned: 175309
Time elapsed: 2 minute(s), 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 1
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\3ETECE6I8G (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\JP595IR86O (Trojan.FakeAlert) -> Value: JP595IR86O -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Windows\Temp\eap3hostb.exe (Trojan.Agent) -> Quarantined and deleted successfully.
 

Attachments

Last edited by a moderator:
Since you had rogue software on your system lets scan deeper and make sure malwarebytes got everything, usually it doesn't. You can run combofix in safe mode with networking. After combofix produces the log, log into regular bootup mode and see if you can install hijackthis and run a scan.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.


In your next reply please post:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running
 
johnb35 said:
Since you had rogue software on your system lets scan deeper and make sure malwarebytes got everything, usually it doesn't. You can run combofix in safe mode with networking. After combofix produces the log, log into regular bootup mode and see if you can install hijackthis and run a scan.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.


In your next reply please post:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running
Click to expand...

so i tried running combofix but it just blue screens when i do it. i would like to understand what is causing this but i think at this point i have to reformat. thank you all for your help.
 
Did you try running it in safe mode? Do you know what error code you got on the blue screen?
 
johnb35 said:
Did you try running it in safe mode? Do you know what error code you got on the blue screen?
Click to expand...

Yeah I was running it in safe mode, and it was the same error code as before. I'll try again, but I have a gut feeling I'll need to reformat.
 
This program may not run either but lets give it a chance shall we. I've had another user with about the same problem where combofix won't run and bluescreens and so does this program.

Download DDS from the following location

DDS Download Link

When you click on the above link you will see be brought to a download page. Please click on the Download Now button and a download prompt similar to Figure 1 below.


dds-savebox.jpg


Click on the Save button. You will now be presented with a screen similar to Figure 2 below asking where you would like to save the file.

dds-savedesktop.jpg


Click once on the Desktop button, designated by the red arrow in the figure above, to save the file to your Desktop and then press the Save button. Your computer will now download the file to your computer and save it on your Desktop. When it is done downloading you will now find an icon on your desktop that looks like Figure 3 below.


icon.jpg


Disable any script-blocking programs and then double-click on the DDS.scr icon to start the program. If you did not disable a script-blocker that may be part of your antimalware program, you may receive a warning from your antimalware product asking if you would like DDS.scr to run. Please allow it to do so.

Once you double-click the icon a Windows security warning may also appear asking if you are sure you would like to run the program. This warning is shown in Figure 4 below.

run-confirm.jpg


Click on the Run button to start DDS. If no warning appeared, as shown above, then you should just continue reading.

DDS will now display a small black window providing information as to what DDS is doing on your computer as shown in Figure 5 below.

dds-information.jpg


DDS will now start scanning your computer and compiling a variety of information about what programs are starting on your computer, what files have been recently created, and the general configuration of your computer. When DDS has finished scanning, all of this information will be compiled and be displayed in two Notepad windows named dds.txt and attach.txt as shown below.

dds-log.jpg


dds-attach.jpg


You will then be shown a small box giving instructions as to what you should do with these files. Feel free to close this message box by pressing the OK button.

We now need to save the two log files that were created. First click on the DDS.txt window and click on the File menu and then select Save As... menu option. You will now be presented with a screen similar to Figure 8 below asking where you would like to save the file.

save-desktop.jpg


Click once on the Desktop button, designated by the red arrow in the figure above, to save the file to your Desktop and then press the Save button. The DDS.txt log will now be saved to your Desktop. Now click on the Attach.txt Notepad window and perform the same steps to save that file to your Desktop as well.

Please copy and paste the contents of the dds.txt log and the attach.txt log in your next reply.
 
You must log in or register to reply here.
Back
Top