[simon2012]

Hello,

I run a desktop PC running XP Home with 1 (and a bit) GB of RAM and a AMD Athlon XP Processor.

Recently, the PC started to randomly reboot. I disabled auto reboot on an error setting thingumy, and now, I get the BOSD for DRIVER_IRQL_NOT_LESS_OR_EQUAL. The file mentioned was tcpip.sys and there were codes:

0x0...D1
0x0...4C
0x0000000
0xB6524CE
(the ... means more 0s!)

Now, whenever I go on Mozilla Firefox, within a few seconds, the error occurrs.

Please help, because at the moment, I cant use the internet, so I have to use another PC to look at this website!!!

Thanks a lot.

[Advertisements]

0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
The system attempted to access pageable memory using a kernel process IRQL that was too high. The most typical cause is a bad device driver (one that uses improper addresses). It can also be caused or caused by faulty or mismatched RAM, or a damaged pagefile.

For the bad driver I would look at your network card first.


Hope that helps

[Alzeimer]

0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
The system attempted to access pageable memory using a kernel process IRQL that was too high. The most typical cause is a bad device driver (one that uses improper addresses). It can also be caused or caused by faulty or mismatched RAM, or a damaged pagefile.

For the bad driver I would look at your network card first.


Hope that helps

[simon2012]

Thanks for reply,

How would i go about checking the network card driver?

[Broni]

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Vista users:: Right click on SystemLook.exe, click Run As Administrator
• Copy the content of the following box into the main textfield:
  

  :filefind
  tcpip.sys

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[simon2012]

Hi Broni,

Thanks for replying - nice to know I am getting somewhere!! However,for some reason, when trying to use the internet now, all I get is the standard Firefox notice "Server Not Found" etc and when I reset the Local Area Connection, I get "limited or no connectivity", can't be coincidence!

Report

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 18:13 on 17/05/2010 by Simon (Administrator - Elevation successful)

========== filefind ==========

Searching for "tcpip.sys"
C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys --a--c 359936 bytes [01:17 14/03/2005] [19:07 25/05/2005] 63FDFEA54EB53DE2D863EE454937CE1E
C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys --a--c 360448 bytes [20:45 19/02/2006] [17:07 13/01/2006] 5562CC0A47B2AEF06D3417B733F3C195
C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys --a--c 360576 bytes [12:18 20/04/2006] [12:18 20/04/2006] B2220C618B42A2212A59D91EBD6FC4B4
C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys --a--c 360832 bytes [16:53 30/10/2007] [16:53 30/10/2007] 64798ECFA43D78C7178375FCDD16D8C8
C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys --a--c 360960 bytes [10:44 20/06/2008] [10:44 20/06/2008] 744E57C99232201AE98C49168B918F48
C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys --a--c 361600 bytes [11:51 20/06/2008] [11:51 20/06/2008] 9AEFA14BD6B182D61E3119FA5F436D3D
C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys --a--c 361600 bytes [11:59 20/06/2008] [11:59 20/06/2008] AD978A1B783B5719720CFF204B666C8E
C:\WINDOWS\ServicePackFiles\i386\tcpip.sys -----c 361344 bytes [06:14 04/08/2004] [19:20 13/04/2008] 93EA8D04EC73A85DB02EB8805988F733
C:\WINDOWS\system32\dllcache\tcpip.sys -----c 361600 bytes [11:51 20/06/2008] [11:51 20/06/2008] 9AEFA14BD6B182D61E3119FA5F436D3D
C:\WINDOWS\system32\drivers\tcpip.sys --a--- 361600 bytes [12:00 31/03/2003] [11:51 20/06/2008] 9AEFA14BD6B182D61E3119FA5F436D3D

-=End Of File=-

Have attatched as .txt too, thanks!

Attached Files

•  SystemLook.txt   3.07KB   106 downloads

[Broni]

Please download OTM

• Save it to your desktop.
• Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
• Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

:Processes

:Services

:Reg

:Files
C:\WINDOWS\system32\drivers\tcpip.sys|C:\WINDOWS\system32\dllcache\tcpip.sys /replace
	  
:Commands
[purity]
[emptytemp]
[Reboot]

• Return to OTM, right click in the Paste Instructions for Items to be Movedwindow (under the yellow bar) and choose Paste.
• Click the red Moveit! button.
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
• Close OTM and reboot your PC.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

[simon2012]

Hi,

Ran OTM with that code, still unable to access internet , but startup was quicker (something good!!)
Here is report (attatched too)


All processes killed
========== PROCESSES ==========
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File C:\WINDOWS\system32\drivers\tcpip.sys successfully replaced with C:\WINDOWS\system32\dllcache\tcpip.sys
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Clive
->Temp folder emptied: 725707 bytes
->Temporary Internet Files folder emptied: 47790442 bytes
->Java cache emptied: 13428586 bytes
->FireFox cache emptied: 94488740 bytes
->Flash cache emptied: 222436 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 432 bytes

User: Guest
->Temp folder emptied: 49887 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 4487797 bytes
->Flash cache emptied: 405 bytes

User: LocalService
->Temp folder emptied: 2548401 bytes
->Temporary Internet Files folder emptied: 87502 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 7148841 bytes

User: Simon
->Temp folder emptied: 4517846 bytes
->Temporary Internet Files folder emptied: 14767921 bytes
->Java cache emptied: 15431513 bytes
->FireFox cache emptied: 40582712 bytes
->Apple Safari cache emptied: 77796 bytes
->Flash cache emptied: 63495 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 311840 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 78390730 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 499756 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33726 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 311.00 mb


OTM by OldTimer - Version 3.1.12.0 log created on 05172010_190857

Files moved on Reboot...
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ebootloadercompiled[799].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_dashercomp[802].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_delayedcor[804].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_detailsset[806].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_doozercomp[808].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_eventformc[811].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_extrascomp[813].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_offlinecom[816].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631ecalendarjs_searchcomp[818].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631edoozercompiled_offli[819].css not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631eeventpage__en_gb[822].xsl not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\[email protected]_managed[5]#localserver\052bdefe1ad48d4500d469a00299631eoffline_workercompile[825].js not found!
File C:\Documents and Settings\Simon\Local Settings\Application Data\Mozilla\Firefox\Profiles\gq676cd4.default\Google Gears for Firefox\www.google.com\http_80\@login.calendar.google.com_managed[2]#localserver\052bdefe1ad48d4500d469a00299631elocallogin_compiled[798].js not found!
File C:\WINDOWS\temp\_avast5_\Webshlock.txt not found!
File C:\WINDOWS\temp\usgthrsvc\Perflib_Perfdata_974.dat not found!

Registry entries deleted on Reboot...

Thanks again!

Attached Files

•  Result.txt   11.68KB   128 downloads

[Broni]

Right now, my main goal was to see, if by replacing that file we're able to stop restarts and BSODs, so let me know how it goes with those issues.

I have a slight suspicion, that your computer may be infected, but before I send you to malware forum, let me know about restart/BSOD issue and also...

Try some basic steps to see, if you get your connection back...

Make sure, your computer is set to obtain IP address automatically.
1. Go Start>Settings>Control Panel (Vista/7 users: Start>Control Panel)
2. Double click Network Connections (Vista/7 users: Network and Sharing Center)
3. Vista/7 users - From the list of tasks on the left, click Manage network connections.
4. For a wired network connection, right-click Local Area Connection, and then select Properties.
For a wireless network connection, right-click Wireless Network Connection, and then select Properties.
5. From the General tab (Vista/7 users: Networking tab), click Internet Protocol (TCP/IP), make sure it is checked, and then click Properties
6. Click Obtain an IP Address Automatically, and then click OK.

If that doesn't work...
Turn off computer. Disconnect router, and modem from power source for 1 minute. At the same time disconnect ethernet cable as well.
Reconnect everything.
Restart computer.

If that doesn't work, bypass router, and connect computer straight to the modem.

If that doesn't work...
Go Start>Run (Start search in Vista), type in:
cmd
Click OK (in Vista, while holding CTRL, and SHIFT, press Enter).

In Command Prompt window, type in following commands, and hit Enter after each one:
ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew
net stop "dns client"
net start "dns client"


Restart computer.

If that doesn't work...
Go Start>Run (Start search in Vista), type in:
cmd
Click OK (in Vista, while holding CTRL, and SHIFT, press Enter).

At Command Prompt, type in:
netsh int ip reset reset.log
Hit Enter.
Type in:
netsh winsock reset catalog
Hit Enter.

Restart computer.


If that doesn't work...
Download, install, and run WinSockFix: http://www.softpedia...inSockFix.shtml (doesn't work in Vista)
Restart computer, and check again.

If that doesn't work...
Download Dial-A-Fix (DAF) (doesn't work in Vista):
http://wiki.lunarsof...2C_and_articles

Have XP CD available in case DAF needs a file. Likely not!

Check all boxes on the screen (clear any restrictions if it shows any)
Then click GO!

When the entire page is finished click the HammerHead at bottom to go to the second DAF page.

Here, one at a time, do the below:

Reinstall BITS
Reinstall Windows Firewall
Repair Permissions
Reset networking

Watch for any File not found or other errors and make note as this may lead to the fix!

Restart computer.

[simon2012]

Hi Broni,

Did all that you said, no BSODs as yet, but cant use internet, and that was when it happened so...

flush DNS

"Could not flush DNS, Resolver Cache:Function failed during execution

/renew

"Unable to contact DHCP. Request Timed out"

netstop "DNS client"

This service was disabled, so I set it to auto.

None of these resolved the problem!

Dial a fix:

Said at start that cant work out what version of internet explorer I am using

I got several Error 127:

-C:\Windows\System32\iesetup.dll is not registerable or file is corrupted... Version of iesetup.dll is 8.00.6001.18702

-Then it said about the same dll that dll is not DLL install-able.

This happened for others too

imgutil.dll
inseng.dll
mshtml.dll
msrating.dll
occache.dll
pngfilt.dll
webcheck.dll

I am also running a malware scan so can't restart at moment, but will post back to say if Dial a Fix has solved the problem...

[simon2012]

No luck - still no internet!!!

[Broni]

1. Click Start>Run (Start>"Start search" in Vista).

2. Type in (or copy and paste):

cmd /c ping google.com>%temp%\$.$&notepad %temp%\$.$

and press Enter.

3. Notepad will open.

4. Copy all text in Notepad ([Ctrl-A], then [Ctrl-C]), and then post it (paste = [Ctrl-V]) in your next reply.

[simon2012]

Hi,

It came back with:

"Ping request could not find host google.com. Please check the name and try again."

[simon2012]

Hi Broni,

Jsut to let you know that I have done a system restore and it has solved the internet problem. Then i did the Old Timer file replace to make sure the BSODs have gone. Thanks agai for all your help in trying to solve it - if I had gone to a repair place, it would have cost loads!! You should really get paid for this!!

Thanks a lot!

Simon

[Broni]

I'm glad to hear good news