driver_irql_not_less_or_equal error

Solved
  1. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    Hello everyone, I hope someone can help me.

    Recently my computer has started to come up with a BSOD and restart. It says driver_irql_not_less_or_equal. This happens when I log in and the desktop loads up, then perhaps 20 seconds later, the BSOD comes up and it restarts. This also happens in safe mode and in safe mode with networking, but safe mode with command prompt still works.

    I have run malwarebytes and done a full scan, run CCleaner, disabled some services and startup programs in MSCONFIG but to no avail.

    I am pretty sure it was started by an infected .exe file which was a trojan horse agent_r that AVG found.

    My operating system is Windows 7 64-Bit.

    The event viewer says that "the following boot-start or systemstart driver(s) failed to load:
    AFD
    AvgLdx64
    AvgMfx64
    AvgTdiA
    DfsC
    discache
    NetBIOS
    NetBT
    nsiproxy
    Psched
    rdbss
    spldr
    sptd
    tdx
    VBoxDrv
    VBoxUSBMon
    vwififlt
    Wanarpv6
    WfpLwf

    If any more information is required please let me know.

    Thank you in advance.
  2. Hengis

    Hengis Proud PCHF'er since 2004 Tech Member Elite Member

    Joined:
    Jan 1, 2004
    Posts:
    41,336
    Likes Received:
    5,628
    Location:
    Southern UK
    Local time:
    08:35
    My System
    Loading...

    Hi and welcome to PCHF

    Thanks for that info, can you please click on the BSOD link, below in my signature and follow the process. Attach the logs back here and one of our BSOD experts will help you further.
  3. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    Thankyou. Here are the required files.

    Attached Files:

  4. zigzag3143

    zigzag3143 Guest

    Joined:
    Jul 26, 2010
    Posts:
    468
    Likes Received:
    0
    Location:
    Upstate NY
    Local time:
    03:35
    My System
    Loading...


    Several problems

    1-sptd.sys used in alcohol120 and daemon tools. remove it as indicated below

    Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%.

    They use a driver, found in your dmp,sptd.sys, that is notorious for causing BSODs.

    Use this SPTD uninstaller DuplexSecure - Downloads

    when you're done you can use this Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) in its place.


    2- Iastor.sys your storage driver. Seems to be the cause of several of these crashes. I would re-install it using the newest version.

    Code:
    
    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\K\Desktop\PCHF\041411-72431-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
    *http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
    Machine Name:
    Kernel base = 0xfffff800`03460000 PsLoadedModuleList = 0xfffff800`0369de50
    Debug session time: Thu Apr 14 00:57:27.324 2011 (GMT-4)
    System Uptime: 0 days 0:05:06.259
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ..............................
    Loading User Symbols
    Loading unloaded module list
    ...
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck 1E, {ffffffffc0000005, fffff880012e1e46, 0, ffffffffffffffff}
    
    Unable to load image \SystemRoot\system32\DRIVERS\iaStor.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for iaStor.sys
    *** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
    Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for sptd.sys
    *** ERROR: Module load completed but symbols could not be loaded for sptd.sys
    Probably caused by : iaStor.sys ( iaStor+71e46 )
    
    Followup: MachineOwner
    ---------
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    KMODE_EXCEPTION_NOT_HANDLED (1e)
    This is a very common bugcheck.  Usually the exception address pinpoints
    the driver/function that caused the problem.  Always note this address
    as well as the link date of the driver/image that contains this address.
    Arguments:
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff880012e1e46, The address that the exception occurred at
    Arg3: 0000000000000000, Parameter 0 of the exception
    Arg4: ffffffffffffffff, Parameter 1 of the exception
    
    Debugging Details:
    ------------------
    
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    iaStor+71e46
    fffff880`012e1e46 8b00            mov     eax,dword ptr [rax]
    
    EXCEPTION_PARAMETER1:  0000000000000000
    
    EXCEPTION_PARAMETER2:  ffffffffffffffff
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800037080e0
     ffffffffffffffff 
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0x1E
    
    PROCESS_NAME:  mscorsvw.exe
    
    CURRENT_IRQL:  2
    
    EXCEPTION_RECORD:  fffff88003122968 -- (.exr 0xfffff88003122968)
    ExceptionAddress: fffff880012e1e46 (iaStor+0x0000000000071e46)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000000
       Parameter[1]: ffffffffffffffff
    Attempt to read from address ffffffffffffffff
    
    TRAP_FRAME:  fffff88003122a10 -- (.trap 0xfffff88003122a10)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffef880033fe140 rbx=0000000000000000 rcx=0000000000000080
    rdx=00000000000000f0 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff880012e1e46 rsp=fffff88003122ba0 rbp=fffff88003122cd0
     r8=00000000000000f0  r9=0000000000000014 r10=fffffa8004503120
    r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei pl nz na pe nc
    iaStor+0x71e46:
    fffff880`012e1e46 8b00            mov     eax,dword ptr [rax] ds:fffef880`033fe140=????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff8000350aa39 to fffff800034d0740
    
    STACK_TEXT:  
    fffff880`03122198 fffff800`0350aa39 : 00000000`0000001e ffffffff`c0000005 fffff880`012e1e46 00000000`00000000 : nt!KeBugCheckEx
    fffff880`031221a0 fffff800`034cfd82 : fffff880`03122968 fffffa80`02722000 fffff880`03122a10 00000000`000000f0 : nt!KiDispatchException+0x1b9
    fffff880`03122830 fffff800`034ce68a : fffffa80`02722000 fffff880`03122a90 fffff880`01116cc0 00000000`00000000 : nt!KiExceptionDispatch+0xc2
    fffff880`03122a10 fffff880`012e1e46 : fffffa80`02714000 fffff880`01116cc0 fffff880`03122ef8 fffff880`0281b660 : nt!KiGeneralProtectionFault+0x10a
    fffff880`03122ba0 fffffa80`02714000 : fffff880`01116cc0 fffff880`03122ef8 fffff880`0281b660 00000000`000000f0 : iaStor+0x71e46
    fffff880`03122ba8 fffff880`01116cc0 : fffff880`03122ef8 fffff880`0281b660 00000000`000000f0 fffff880`012e1968 : 0xfffffa80`02714000
    fffff880`03122bb0 fffff880`03122ef8 : fffff880`0281b660 00000000`000000f0 fffff880`012e1968 fffef880`033fe140 : sptd+0x78cc0
    fffff880`03122bb8 fffff880`0281b660 : 00000000`000000f0 fffff880`012e1968 fffef880`033fe140 fffffa80`02722000 : 0xfffff880`03122ef8
    fffff880`03122bc0 00000000`000000f0 : fffff880`012e1968 fffef880`033fe140 fffffa80`02722000 fffff880`03122cf0 : 0xfffff880`0281b660
    fffff880`03122bc8 fffff880`012e1968 : fffef880`033fe140 fffffa80`02722000 fffff880`03122cf0 fffff880`03122c01 : 0xf0
    fffff880`03122bd0 fffef880`033fe140 : fffffa80`02722000 fffff880`03122cf0 fffff880`03122c01 00000000`00000000 : iaStor+0x71968
    fffff880`03122bd8 fffffa80`02722000 : fffff880`03122cf0 fffff880`03122c01 00000000`00000000 fffffa80`02722320 : 0xfffef880`033fe140
    fffff880`03122be0 fffff880`03122cf0 : fffff880`03122c01 00000000`00000000 fffffa80`02722320 fffff880`03122e02 : 0xfffffa80`02722000
    fffff880`03122be8 fffff880`03122c01 : 00000000`00000000 fffffa80`02722320 fffff880`03122e02 fffff880`0281b660 : 0xfffff880`03122cf0
    fffff880`03122bf0 00000000`00000000 : fffffa80`02722320 fffff880`03122e02 fffff880`0281b660 fffff880`0281b660 : 0xfffff880`03122c01
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    iaStor+71e46
    fffff880`012e1e46 8b00            mov     eax,dword ptr [rax]
    
    SYMBOL_STACK_INDEX:  4
    
    SYMBOL_NAME:  iaStor+71e46
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: iaStor
    
    IMAGE_NAME:  iaStor.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4b2a7b77
    
    FAILURE_BUCKET_ID:  X64_0x1E_iaStor+71e46
    
    BUCKET_ID:  X64_0x1E_iaStor+71e46
    
    Followup: MachineOwner
    ---------
    
    1: kd> lmvm iaStor
    start             end                 module name
    fffff880`01270000 fffff880`01478000   iaStor   T (no symbols)           
        Loaded symbol image file: iaStor.sys
        Image path: \SystemRoot\system32\DRIVERS\iaStor.sys
        Image name: iaStor.sys
        Timestamp:        Thu Dec 17 13:41:59 2009 (4B2A7B77)
        CheckSum:         00091A1B
        ImageSize:        00208000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    
    3-AVG remnants. remove and replace with Microsoft security essentials.

    AVG - Download tools

    http://www.microsoft.com/security_essentials/


    Ken J
    JMH likes this.
  5. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    Thanks for the reply, but there are a couple of problems.

    When trying to install SPTD.exe it says that it is not a valid Win32 application, and how do I reinstall iastor.sys?

    Thank you.
  6. zigzag3143

    zigzag3143 Guest

    Joined:
    Jul 26, 2010
    Posts:
    468
    Likes Received:
    0
    Location:
    Upstate NY
    Local time:
    03:35
    My System
    Loading...

    Stpd.exe is not a valid win 32 app because it probably did not sucessfully download.

    iastor,sys is a storage driver that you get from the computer mfr
  7. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

  8. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    Do I have to get iostor.sys directly from Acer/eMachines because I cannot find a download on their website.
  9. zigzag3143

    zigzag3143 Guest

    Joined:
    Jul 26, 2010
    Posts:
    468
    Likes Received:
    0
    Location:
    Upstate NY
    Local time:
    03:35
    My System
    Loading...


    I dont believe you ever told us the computer make and model for us to know what hardware we are dealing with.


    could you now?
  10. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    Sorry.

    Asus eMachines E527 Laptop
    T3300 2.00 GHz Intel Celeron Processor
    Intel GMA 4500M
    2GB DDR3 RAM
    250GB HD
    DVD-Super Multi DL Drive
    Atheros AR5B95 Wireless Adapter

    Tell me if you need anything else.
  11. zigzag3143

    zigzag3143 Guest

    Joined:
    Jul 26, 2010
    Posts:
    468
    Likes Received:
    0
    Location:
    Upstate NY
    Local time:
    03:35
    My System
    Loading...

    Ryant I am having difficulty in finding a driver for that machine anywhere other than the places that want to charge you for it. Are you running something that requires that storage driver?
  12. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    The only thing that I can think of is Intel Rapid Storage Technology so I disabled all intel processes and startup items but the problem still occurred.
  13. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    What sort of programs would use it?
  14. ryant

    ryant New Member Bronze Member

    Joined:
    Apr 13, 2011
    Posts:
    10
    Likes Received:
    0
    Local time:
    17:35
    My System
    Loading...

    I have noticed that when I open iTunes, I get the same error. Could this be the cause?
  15. Airman24

    Airman24 New Member Elite Member

    Joined:
    Nov 22, 2009
    Posts:
    8,460
    Likes Received:
    216
    Location:
    east-(uk)
    Local time:
    08:35
    My System
    Loading...

    Hello Ryant,


    I must apologize that you have not had a response to your latest post,I have referred your thread to my colleagues and someone will be with you as soon as possible.

    Please Keep in mind that all Staff here are volunteers and also have their normal every day jobs and are located around the globe.If you dont get an answer it is most likely that the person with the expertise is not on line.

    Thank you for your patience.

    Regards,

    Airman24....:)
Similar Threads
Forum Title Date
Win 7/Vista BSOD BSOD HELP: DRIVER_IRQL_NOT_LESS_OR_EQUAL, IRQL_NOT_LESS_OR_EQUAL & MEMORY_MANAGEMENT Nov 4, 2013
Win 7/Vista BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL Jul 2, 2013
Win 7/Vista BSOD BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL caused by ntoskrnl.exe Jun 28, 2013
Win 7/Vista BSOD Crashed "DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)" Jun 27, 2013