yet another: IRQL driver not less or equal AND page fault in nonpaged area + minidump

JSkye · Nov 10, 2010

Hi there,

A few weeks ago I suddenly got a crash with a blue screen on my Vista Home Premium 32 bit machine. It's now about 2 1/2 years old and has never had any problems of that kind.
2 weeks of permanent use (and no problems whatsoever) the same happened again.

Both times, I didn't have enough time to properly read the error messages as the pc quickly rebooted.

Now the porblem has gotten worse and no day passes where it doesn't crash at least once.

Trying to fix an internet problem I since the installed a file which may have been contaminated by a virus. But I think that is another story...

Anyway... I have tried everything I could imagine... bought register cleaning softwares (which found ober 800 errors!!!) and updated all my drivers. I ran a virus scan which seems to be stuck at 61 % and couldn't fix one of the probably contaminated files (it is a windows file?).

After I had to stop the scan at 61% I fixed all the problems that had occurred til then and now it says my pc is protected (but is it really?)

I even had uninstalled and re-installed vista service pack 2.

I have run Memtest as well as the windows memory diagnostic tools - both have NOT come across any errors.

The problem is, I have lost all faith in my computer and as it is my work computer, it is really important that I can resolve this issue and have a computer I can trust (again).

I have the minidump file attached. Funnily enough, there was only one in my minidumo folder (I assume that the othes have been deleted when I ran cclean and registrybooster this morning?).

I appreciate all the help I can get; I really need a working computer as it runs my business! No computer, no income, losing customers, etc...

If it is of any interest: I have had problems with my wifi connection lately (but all the other computers in the office didn't); that problem is about as old as the blue screen. No idea if its connected at all... I updated my ethernet drivers yesterday but I have had several test running on my pc, so I am not sure if the internetproblem is resolved. Basically what happened was, that the connection cut out every few minutes.

Sorry, I forgot to mention, that the computer runs for several hours sometimes, before it crashes with the blue screen and I have come across two error messages:

(1). which appeared more common was:
IRQL driver not less or equal

(2) just seen once, last night:
page fault in nonpaged area

I have also had "geebv.sys" in connected with error (1), no idea what that means?

Thanks in advance!

Julia

richc46 · Nov 10, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Code:

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Mini111010-01[1].zip\Mini111010-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x8341a000 PsLoadedModuleList = 0x83531c70
Debug session time: Wed Nov 10 12:02:39.288 2010 (GMT-5)
System Uptime: 0 days 3:26:44.050
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {82a5b000, 2, 0, 80725c89}
Unable to load image \SystemRoot\System32\Drivers\yrpzh.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for yrpzh.sys
*** ERROR: Module load completed but symbols could not be loaded for yrpzh.sys
Probably caused by : yrpzh.sys ( yrpzh+4c89 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 82a5b000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 80725c89, address which referenced memory
Debugging Details:
------------------
 
READ_ADDRESS: GetPointerFromAddress: unable to read from 83551868
Unable to read MiSystemVaType memory at 83531420
 82a5b000 
CURRENT_IRQL:  2
FAULTING_IP: 
yrpzh+4c89
80725c89 ??              ???
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  avp.exe
TRAP_FRAME:  afb95350 -- (.trap 0xffffffffafb95350)
ErrCode = 00000000
eax=82a5b000 ebx=000000f9 ecx=82a5afff edx=82a5afff esi=82a5afff edi=82a59000
eip=80725c89 esp=afb953c4 ebp=afb953d4 iopl=0         nv up ei ng nz na pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010287
yrpzh+0x4c89:
80725c89 ??              ???
Resetting default scope
LAST_CONTROL_TRANSFER:  from 80725c89 to 83467fd9
STACK_TEXT:  
afb95350 80725c89 badb0d00 82a5afff 00002000 nt!KiTrap0E+0x2e1
WARNING: Stack unwind information not available. Following frames may be wrong.
afb953c0 00000000 82a59000 afb954f8 00002000 yrpzh+0x4c89
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
yrpzh+4c89
80725c89 ??              ???
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  yrpzh+4c89
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: yrpzh
IMAGE_NAME:  yrpzh.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4cac4840
FAILURE_BUCKET_ID:  0xD1_yrpzh+4c89
BUCKET_ID:  0xD1_yrpzh+4c89
Followup: MachineOwner
---------
1: kd> lmtsmn
start    end        module name
80606000 8064c000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
8ff7a000 8ff82000   Afc      Afc.sys      Wed Feb 23 01:58:55 2005 (421C29AF)
91620000 91668000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
84343000 84384000   ahcix86s ahcix86s.sys Fri Mar 07 08:15:58 2008 (47D1400E)
83a6e000 83a75000   amdide   amdide.sys   Thu Oct 11 21:40:06 2007 (470ED076)
83a85000 83a8d000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
83a8d000 83aab000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
8f80e000 8fe89000   atikmdag atikmdag.sys Tue Sep 28 21:37:54 2010 (4CA29872)
83b73000 83bb0000   atikmpag atikmpag.sys Tue Sep 28 21:14:29 2010 (4CA292F5)
84332000 8433a000   AtiPcie  AtiPcie.sys  Mon Oct 30 14:23:10 2006 (4546430E)
9c2e0000 9c32c000   ATMFD    ATMFD.DLL    unavailable (00000000)
805c6000 805d0000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
915dc000 915e3000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
8041e000 80426000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
9e5b0000 9e5c9000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
9c2d0000 9c2de000   cdd      cdd.dll      unavailable (00000000)
843c5000 843db000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
8ff82000 8ff9a000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
80467000 80547000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
84311000 84332000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80426000 80467000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
8b000000 8b003780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
807f4000 807f6900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
917be000 917cb000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
8433a000 84343000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
91766000 9177d000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
8b1ed000 8b1fe000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
90f3d000 90f62000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
84177000 841b8000   dump_ahcix86s dump_ahcix86s.sys Fri Mar 07 08:15:58 2008 (47D1400E)
917cb000 917d5000   dump_diskdump dump_diskdump.sys Sat Apr 11 00:39:11 2009 (49E01EEF)
917d5000 917df000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8fe89000 8ff28000   dxgkrnl  dxgkrnl.sys  Sat Apr 11 00:23:43 2009 (49E01B4F)
8b1c6000 8b1ed000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
83ae7000 83af7000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
83ab5000 83ae7000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
915cc000 915d5000   Fs_Rec   Fs_Rec.SYS   unavailable (00000000)
843f0000 843f8000   FwLnk    FwLnk.sys    Sun Nov 19 09:11:12 2006 (45606600)
842f6000 84311000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
8ff9a000 8ff9f280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
80684000 80712000   geebv    geebv.sys    Mon Oct 04 05:59:23 2010 (4CA9A57B)
837d3000 83806000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
8f205000 8f292000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
915ec000 915f2380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
9150a000 915bf000   HSX_CNXT HSX_CNXT.sys Thu Nov 01 20:46:56 2007 (472A7380)
91407000 9150a000   HSX_DPV  HSX_DPV.sys  Thu Nov 01 20:50:39 2007 (472A745F)
90f62000 90fa0000   HSXHWAZL HSXHWAZL.sys Thu Nov 01 20:47:51 2007 (472A73B7)
9e526000 9e593000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
8f292000 8f2a5000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
8f2a5000 8f2b0000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
80406000 8040d000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
805df000 805fc000   kl1      kl1.sys      Wed Apr 16 06:21:59 2008 (4805D347)
83af7000 83b02000   klbg     klbg.sys     Mon Dec 15 11:41:09 2008 (494688A5)
90fa0000 90fdc000   klif     klif.sys     Thu Jan 29 08:06:59 2009 (4981A9F3)
916ba000 916c1000   klim6    klim6.sys    Wed Mar 26 05:09:59 2008 (47EA12E7)
8f384000 8f3ae000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
83b02000 83b73000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
9e4cf000 9e4df000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
9e404000 9e41f000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
a1cfd000 a1d00180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:26:59 2006 (449716A3)
915bf000 915cc000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
917df000 917ee000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8f2b0000 8f2bb000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
83a75000 83a85000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
9e5c9000 9e5de000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
9e5de000 9e5ff000   mrxdav   mrxdav.sys   Sat Apr 11 00:14:39 2009 (49E0192F)
a1c02000 a1c21000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
a1c21000 a1c5a000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
a1c5a000 a1c72000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
83aab000 83ab5000   msahci   msahci.sys   Sat Apr 11 00:39:11 2009 (49E01EEF)
8f800000 8f80b000   Msfs     Msfs.SYS     unavailable (00000000)
80655000 8065d000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
8f2bb000 8f2ea000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
84111000 8413c000   msrpc    msrpc.sys    unavailable (00000000)
8f3ae000 8f3b8000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
8b1b7000 8b1c6000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
84006000 84111000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
8f30c000 8f317000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
9e509000 9e513000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
8f317000 8f33a000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
841c7000 841d8000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
916c1000 916cf000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
91668000 9169a000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
8413c000 84177000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
841d8000 841e6000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
9175c000 91766000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
8341a000 837d3000   nt       ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
8b006000 8b116000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
915d5000 915dc000   Null     Null.SYS     unavailable (00000000)
9e4df000 9e509000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
9169a000 916b0000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
80712000 80721000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
8065d000 80684000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
83a59000 83a60000   pciide   pciide.sys   Sat Apr 11 00:39:10 2009 (49E01EEE)
83a60000 83a6e000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
a1d01000 a1ddf000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
90f10000 90f3d000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
841b8000 841c7000   processr processr.sys Sat Jan 19 00:27:20 2008 (47918A38)
8040d000 8041e000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
91754000 9175b300   RapportCerberus_19917 RapportCerberus_19917.sys Tue Sep 21 07:48:59 2010 (4C989BAB)
8b1a7000 8b1b4280   RapportKELL RapportKELL.sys Sun Oct 03 17:39:52 2010 (4CA8F828)
9172b000 91753080   RapportPG RapportPG.sys Sun Oct 03 17:39:40 2010 (4CA8F81C)
84200000 84209000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8f2f5000 8f30c000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
8f33a000 8f349000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
8f349000 8f35d000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8f35d000 8f372000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
916ef000 9172b000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
915e3000 915eb000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8fff7000 8ffff000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
9e513000 9e526000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
90c01000 90f0f640   RTKVHDA  RTKVHDA.sys  Tue Oct 05 05:28:18 2010 (4CAAEFB2)
83bb0000 83c00000   RTL8187B RTL8187B.sys Tue Dec 25 21:20:33 2007 (4771BA71)
8ff34000 8ff76000   Rtlh86   Rtlh86.sys   Wed Aug 25 03:39:24 2010 (4C74C8AC)
916b0000 916ba000   rtlprot  rtlprot.sys  Fri Apr 20 05:16:46 2007 (462884FE)
916e2000 916ef000   SCDEmu   SCDEmu.SYS   Sun Nov 02 03:44:10 2008 (490D685A)
a1ddf000 a1de9000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
a1ce8000 a1cfd000   SENTINEL SENTINEL.SYS Mon Jun 02 02:13:52 2008 (48438FA0)
9160c000 91620000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
8b19f000 8b1a7000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
9e41f000 9e4cf000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
a1c9a000 a1ce8000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
a1c72000 a1c9a000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
9e593000 9e5b0000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
84384000 843c5000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
8f382000 8f383380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8420c000 842f6000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
a1de9000 a1df5000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
8ff76000 8ff79f00   tdcmdpst tdcmdpst.sys Tue Oct 17 22:50:02 2006 (4535965A)
8f2ea000 8f2f5000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
841e6000 841fc000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
8f372000 8f382000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
8b154000 8b19f000   tos_sps32 tos_sps32.sys Thu Oct 26 04:52:11 2006 (4540773B)
9c2b0000 9c2b9000   TSDDD    TSDDD.dll    unavailable (00000000)
843e7000 843f0000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
843dc000 843e7000   tunnel   tunnel.sys   Thu Feb 18 06:28:13 2010 (4B7D244D)
8b14f000 8b153180   TVALZ_O  TVALZ_O.SYS  Thu Nov 08 22:07:46 2007 (4733CF02)
8f3b8000 8f3c5000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
9177d000 91794000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
8b1b5000 8b1b6700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8ffe8000 8fff7000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8f3c5000 8f3fa000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8ffa0000 8ffaa000   usbohci  usbohci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8ffaa000 8ffe8000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
9179d000 917bdb80   usbvideo usbvideo.sys Sat Jan 19 00:53:38 2008 (47919062)
91794000 9179d000   UVCFTR_S UVCFTR_S.SYS Tue Nov 27 05:38:34 2007 (474BF3AA)
915f3000 915ff000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
90fdc000 90ffd000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
805d0000 805df000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
83a0f000 83a59000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
8b116000 8b14f000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
916cf000 916e2000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8ff28000 8ff34000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
80547000 805b8000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
805b8000 805c6000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
9c090000 9c293000   win32k   win32k.sys   unavailable (00000000)
8064c000 80655000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
a1df5000 a1dfd000   xaudio   xaudio.sys   Thu Oct 18 18:36:53 2007 (4717E005)
80721000 807f4000   yrpzh    [B]yrpzh.sys    Wed Oct 06 05:58:24 2010 (4CAC4840)[/B]

Before I go into a detail analysis, this is what I found
yrpzh.sys, no record for this or
geebv.sys
yzpzh.sys was just installed. Not good signs

A driver problem
No record of such a driver in my extensive collection of names and no mention on Google. May mean problems.
Make a full anti virus scan
Download and run a full scan with malwarebytes.

If negative come back and I will give a full analyisis. Yes, Ccleaner destroyed a lot of valuable information that I could have used to help you.

I will look quickly at your report and give you any other salient information that I uncover.

JSkye · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Hi there,

thank you very much for your quick reply. I have downloaded the free version of malwarebytes and run a scan and (hopfeully) fixed the problems. As it was the free version, I couldn't do the flash scan or what it was.

I will give my pc now something to do (probably defrag my hdd) and let you know as soon as another crash happens.

I have lost all my trust in that machine though and it would be too good to be true, if the problems were resolved after just a malware scan. Don't you think?

Best wishes

Julia

JSkye · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Hi there,

Thank you very much for your speedy reply!
I have downloaded and run the free version of malware bytes last night and (hopefully) resolved all the problems it came up with. I'm not sure, but I don't think geebv.sys or the other thing were amongst it (or maybe it didn't show me the actual names but the trojan it contained).
I will give my pc something to do now (probably defrag my hdd or so) and get back at you if the problem happens again.

Would it not be too good to be true if it all was solved by running a malware prog???

Best wishes

Julia

richc46 · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Hi Julia
Not to build your hopes, I must be honest. I do not think that is the cure. I am not even sure that the drivers in question are malware. But that was the most important thing to do first. If you get another BSOD post it and I will give you the usual analysis
In the mean time, go to search and type cmd. In cmd type driverquery.
Tell me if those two drivers are still there.
Then run malwarebytes again and see what it comes up with now.

JSkye · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Okay, will do later! Thanks!

richc46 · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Take you time Julia, I will be ready when you are.

JSkye · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Right, I have used the cmd for a driverquery and I couldn't find these two in there (so that's a good sign, eh?).

Additionally, I have also run the malware prog again and it didn't report any problems.

What shall we do next? Just wait and see? Knock on wood, it hasn't crashed again so far (and it even defragmented my HD), but that doesn't have to mean anything (as I have said in my original post, there was a two week gap between the first and second crash...).

Thanks a lot for your help!!

Kind regards
Julia

P.s.: Kaspersky Anti-Virus has been switched off now all day - I don't assume it is the cause of the problem though, as I just installed it the other day. However, when I try to upgrade my 2009 version to 2010 (yes, I am a little behind

it says that I still have McAfee installed (which I don't! and this wasn't a problem during the inital installation of Kaspersky 2009...)

richc46 · Nov 11, 2010

Re: yet another: IRQL driver not less or equal AND page fault in nonpaged area + mini

Yes the drivers are gone. You are doing fine.
It could have been caused by any of the things that we mentioned. Why not, just go and enjoy and if it happens again, repost.

If they are gone, they were Malware.

yet another: IRQL driver not less or equal AND page fault in nonpaged area + minidump

JSkye

Attachments

My Computer

System One

richc46

My Computer

System One

JSkye

My Computer

System One

JSkye

My Computer

System One

richc46

My Computer

System One

JSkye

My Computer

System One

richc46

My Computer

System One

JSkye

My Computer

System One

richc46

My Computer

System One