0xd1 "driver_irql_not_less_or_equal" at every boot attempt

bolts · 13 Feb 2013

I'm working on a laptop for somebody that is getting the 0x000000d1, driver_irql_not_less_or_equal BSOD.
It happens every time you try to boot. It won't go into safe mode, but I can get to a command prompt using a Windows PE boot disk. It is Windows 7 Pro 32bit.
I've also hooked the drive up as a slave to another computer, and I see the Minidump folder with just over 100 dmp files dating back almost two years...the most recent just over a week ago.
What files do I need to look for to post on this forum?
Can I use the SF_Diagnostic_Tool and point it to another drive?
What is the best way to go about this?

And a few extra questions while I'm at it...
What is the advantage of checking the "Automatically restart" checkbox on the System Recovery tab?
In one of the intro "How Tos" for this forum, a warning is mentioned when downloading Malwarebytes to NOT download the trial version...why is that?

Thanks,
bolts

Arc · 14 Feb 2013

Boot to System Recovery Options . Try Safe Mode with Command Prompt. In the command prompt .... enter the command ....

start msconfig

It will open the system configuration window, with the "general" tab selected.

Click the "startup" tab. Click "Disable all" > Apply > OK.
Click on "services" tab. Check the "Hide all Microsoft Services"; Click "Disable all" > Apply > OK

Then try to boot again normally. Is it failing still?

If so, boot to System Recovery Options once again. Try Enable Boot Logging. It will create a file named ntbtlog.txt. Collect it and upload it. If you cannot do it within windows, Boot with a live Linux disc and collect it in a USB stick, use the usb stick in another computer and upload it. It is necessary.

Britton30 · 14 Feb 2013

If you install the trail version it stops working after 30 days where the free one does not. There will be a box to check to start a trial, don't do that. :)

bolts · 14 Feb 2013

Thanks for your help.
Here's the ntbtlog, renamed BOLTSntbt.txt

Attachment 255246

Arc · 14 Feb 2013

For security, everything. Sorry for tha sarcastic comment in such a situation, but is not it the best way to keep your computer secured to prevent you from boot it up ?

SbFsLock.sys : McAfee /SafeBoot Endpoint Protection driver
hpdskflt.sys : HP Mobile Data Protection System Disk Filter
SafeBoot.sys : McAfee /SafeBoot Endpoint Protection driver
SYMEFA.SYS : Symantec Extended File Attributes
SYMDS.SYS : Symantec Data Store
SbAlg.sys : McAfee /SafeBoot Endpoint Protection driver

Have you cleaned up the startup and services? Is not even it allowing you to boot?

A lot of these programs are to be changed, and one more, too. But for that, you need to be in windows.

If you cannot, try Programs - Uninstall using Command Prompt in Windows, when you are in safe more with command prompt; uninstall McAfee, HP Mobile Data Protection; Norton; Intel Rapid Storage.

Inform us about the situation.