IRQL_NOT_LESS_OR_EQUAL

[aldin39]

Last Night while we were watching Madagascar 2 which i copied from a USB Flashdisk, my PC seized up then restarted.

 

When it did restart, a BSOD appeared which says that nv4_disp.dll is corrupted or something like that. I then have to restart it. A BSOD appeared again with this

====> Driver IRQL_not_less_or_equal

STOP: 0x000000D1 (0xE8703e68, .... blah, blah)

ACPI.sys

Win32k.sys

Nv4_disp.dll

 

I can boot into safe mode but the eventlog does not say anything unusual. I had a full scan with AVAST free edition and a chkdsk /f also but nothing showed up.

What could be the problem?

 

I had helped in this forum before and now I am back again after 4 months, which means that my PC has had no problems after FreePCHelp helped me previously..

 

My SPECS:

 

Intel P4 3.0 gig processor

ECS p4m800-m3 MOBO

NVIDIA geforce4 m4000 32MB Video Adapter

512 MB generic RAM(think its NCP..)

Windows SP2 prof. edition

[BeeCeeBee]

Last Night while we were watching Madagascar 2 which i copied from a USB Flashdisk

Looking back on some of your posts, Aldin, it does seem that you have run into your fair share of possible infection issues. I am not going to even try to guess what the initial source of the movie may have been, but, it certainly did not originate on a flash drive. Did you scan the drive before your began the movie?

 

I would suggest that you do a compete disinfection of the pc using then process described below. If you have issues with a normal boot or internet access read this first. http://extremetechsupport.com/forum/malware-removal-av-firewalls-etc/5629-malware-disinfection-limited-no-internet-access.html

 

Once you have completed this process please come back and let us know what, if any, problems need to be sorted.

Your computer appears to be infected with Malware. Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a combination of the words malicious and software. The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

 

It is in your best interest to note the following:

1. Please disable your resident security applications (such as AVG, Spybot, WinPatrol, etc.) before performing the below procedure so that they do not interfere with the process.
   
2. Perform all the steps in the order listed to avoid any conflicts.
   
3. If unsure, please stop and voice your doubts.
   
4. You might be required to go offline during the disinfection process. Therefore, it is recommended to print off the instructions below for ease of reference.
   

If you stick to the above guidelines, all should go smoothly.

 

================================================

STEP 1

1. Download ATF-Cleaner by Atribune.
   
2. Save the file to your Desktop.
   
3. Double-click on the file to run the program.
   
4. On the Main tab, check the Select All button.
   
5. Next, click on the Firefox tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Firefox, then click No at the corresponding prompt.
   
6. Now, click on the Opera tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Opera, then click No at the corresponding prompt.
   
7. Press the Empty Selected button and click OK to acknowledge the corresponding prompt.
   
8. Click on the Exit button to quit the program.
   

================================================

STEP 2

1. Please click here to download Malwarebytes' Anti-Malware.
   
2. Save the file to your Desktop.
   
3. Double-click mbam-setup.exe and follow the prompts to install the program.
   
4. At the end, make sure a check mark is placed next to:
   
   1. 
      
   2. Update Malwarebytes' Anti-Malware
      
   3. Launch Malwarebytes' Anti-Malware
      

 

[*] Click Finish.

[*] The program will download and update itself if it finds the necessity to do so. Please allow this.

[*] Once the program has loaded, select Perform full scan, then click Scan.

 

Note: Depending on your computer specifications, the scan may take some time to complete. Please wait patiently and do not interrupt the process.

[*] When the scan is complete, click OK, and then Show Results to view the results.

[*] Make sure that every entry is selected, and click Remove Selected.

[*] Restart your computer.

================================================

STEP 3

1. Please click here to download SUPERAntiSpyware (Free Version).
   
2. Save the file to your Desktop.
   
3. Double-click SUPERAntiSpyware.exe and follow the prompts to install the program.
   
4. Open SUPERAntiSpyware.
   
5. Under Configuration and Preferences, click the Preferences button.
   
6. Click the Scanning Control tab.
   
7. Under Scanner Options make sure the following fields checked:
   

    

   [*] Click the Close button to leave the control center screen.

   [*] On the main screen, under Scan for Harmful Software click Scan your computer.

   [*] On the left, make sure you check mark C:\Fixed Drive.

   [*] On the right, under Complete Scan, choose Perform Complete Scan.

   [*] Click Next to start the scan. Please be patient while it scans your computer.

   [*] After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.

   [*] Make sure every entry has a check mark next to it and click Next.

   [*] A notification will appear that Quarantine and Removal is Complete. Click OK and then Finish to return to the main menu.

   [*] Restart your computer.

   ================================================

   STEP 4
   1. Please visit the ESET Online Scanner, using Internet Explorer to initiate the scan.
       
      Note: If you are running Windows Vista, then you will need Administrative privileges to complete the latter part of the procedure. To do so, right-click on the Internet Explorer icon in the Start Menu and select the Run As Administrator option in the shell context menu.
      
   2. Check mark the YES, I accept the Terms of Use box.
      
   3. Click the Start button.
      
   4. Click the Install button on the following screen.
      
   5. Click Start. This will will initialize and update the scanner engine.
      
   6. Check mark the box beside Remove found threats.
      
   7. Click the Scan button. This will start the scan. Please be patient while it is in progress.
      
   8. Restart your computer.
      

   ================================================

   STEP 5
   1. Click on Start > Programs > Accessories > System Tools and select System Restore.
      
   2. Choose the radio button marked Create a Restore Point on the first screen and click Next. Give the restore point a name then click Create. The new point will be stamped with the current date and time. Keep a note of this so you can find it easily should you need to use System Restore.
      
   3. Next, click on Start > Run, type Cleanmgr and click on OK.
      
   4. Click on the More Options tab.
      
   5. Click the Clean Up button in the System Restore section to remove all previous restore points except the most recent one.
      

   This will remove any infected files that have been backed up by Windows. The files in "System Restore" are protected to prevent any programs changing those files. This is the only foolproof way to ensure the deletion of those files.

    

   Note: Please don't use it on a regular basis as this will clear all previous restore points. The feature might be very useful to revert your computer to working condition if something goes wrong.

    

   Re-enable all your security applications and please return here and tell us how the computer seems to be operating.

    

   Happy Safe Computing! http://extremetechsupport.com/forum/../images/additional-smilies/thumb.gif

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining

[RandyL]

It could be just a coincidence that this happened while watching a movie that is dubious or it might be that it was infected or worse still. Without knowing all the details of the movie, file types or programs or the source of it it's impossible to even guess.

 

Of course our rules will not allow us to help with such a movie or software as it is considered to be pirated.

 

All I can suggest at this time is to reinstall the nvidia graphics drivers or update them and hope for the best.

[Tootech]

This is the description of your stop error:

 

The system attempted to access pageable memory using a kernel process IRQL that was too high. Drivers that have used improper addresses typically cause this error.

 

Not 100% sure, but it looks like a driver issue.

 

Have you updated a driver recently, or installed a new device?

 

It's worth running MSCONFIG from Safe Mode, disabling any drivers in the Startup tab and having another go.

 

If you don't know how to do that, come back and we'll talk you through it

[aldin39]

RE:

 

I booted to safe-mode fine this morning, ran antivirus scans and updated my video drivers and everything seems fine. I am still crossing my fingers though as I still haven't ran malwarebytes and superantispyware, due to my busy schedule.

 

After I have checked my PC with those programs then I'll inform you.. My guess is, my video drivers seems to be outdated or else it is the memory.

 

BTW, could you tell me the step by step procedure to disable a specific driver during start-up using msconfig? Who knows, maybe I will find some use of it.

 

THX!

[Dalo Harkin]

The error is from the NVIDIA driver - did you uninstall the old driver and then reboot and then install the new one ??

[Dalo Harkin]

BTW, could you tell me the step by step procedure to disable a specific driver during start-up using msconfig? Who knows, maybe I will find some use of it.

 

This is not something that you want to do unless you have to really - you type msconfig into the run command - and at the very end under the startup tab - is a list of everything that runs when windows loads - you untick any that you do not want to run. then save and reboot.

[aldin39]

Guys I know how to do the msconfig thing. :):)..

 

I did reinstall my NVidia Driver after a BSOD that said " nv4_disp.dll is corrupted" appeared. I also reseated and cleaned my RAM and GPU's contacts. And BTW, my pc is nearing two years old come april..

 

Now whenever I boot my computer, BSOD's like "Page fault in a nonpaged area" or "irgl not less or equal" would alternately appear. I also noticed that my PC is taking too LONG to boot.

 

I managed to run memtest during a safemode session but it did not find any errors. MBAM and SASW did not find any infections.

 

Hope I can solve this case, or else i'm taking it to the PC shop..

[Dalo Harkin]

It sounds like the HDD is dying to me.

As a precaution, I would urge you to back up all your data ASAP.

And invest in another HDD - and install your OS to it.

[aldin39]

Whoo... I hate to lose that Adobe Photoshop which I saved up for so long, and so were my python scripts which I made..

 

Is there no other way? OR i really do have to go to the PC shop and replace it??? :o:o

[RandyL]

I agree with Dalo. Backup your data. It could be the drive.

 

Although memory might produce an error code a slow booting computer usually means a major infection or a failing drive.

 

If it was the memory it likely wouldn't boot at all and the errors do look like a driver issue most likely caused by not being able to read correctly from the drive.

 

Combine all the factors and it makes me wonder if file corruption on a failing drive might be the real issue.

 

You could try running some tests on the drive but you risk losing your data every time you boot up so backup now as Dalo said.

[aldin39]

Guys, It was the video driver.

 

I managed to get a trial tuneup utilities 2009 and found that the NVIDIA driver was corrupted. I then installed the 61.77 NVIDIA driver and all is working well now. I don't get BSODs now!

 

And I believe that the registry cleaner of tune-up did much help..

 

Thanks for the help...

[Dalo Harkin]

I'm glad for your sake it was something simple - be VERY wary of tuneup utilities