BSOD at login screen - can't load windows

[ssanbower]

Sony VAIO VPCS111FM
Window 7 x64
Original factory installed OS
Purchased from Best Buy about 1 year ago

Beginning last Friday, 4/8, my Sony laptop will boot to the windows login screen (although slower than normal). After typing in my password and hitting enter the screen goes black for a few seconds then I get the BSOD and the laptop reboots. Same thing happens in safe mode. The error message at the top of the BSOD changes but “driver irql not less or equal” has appeared a few times. The BSOD is only visible for a few seconds before the system reboots so I haven’t been able to write down any other info.

I can’t save the dump file since I can’t get into Windows. I can boot to a command prompt. Is there a way to access the dump file from a command prompt?

I tried hitting F8 when the system reboots to enter the recovery tool. The options are to let the system auto detect and solve any problems it finds, restore to a previous date, recover from a backup, check memory and command prompt. The auto detect ran for about an hour, rebooted and I ended up at the same BSOD. I tried a couple different restore points but they all failed. I got an “unknown error” message each time. I couldn’t recover from a backup because I don’t have any recovery CDs. The memory check didn’t find any problems.

I called Sony support and explained the situation. The support person said my laptop can be restored to factory condition by using a recovery file stored on a hidden partition. She asked me to reboot and hit F10 at the VAIO logo to access the VAIO recovery tool. After hitting F10 the screen went all black accept for a quarter inch thick white ribbon across the top of the screen. The support person then asked me to reseat the memory modules. I did this and tried F10 again and ended up at the same black screen with strange white ribbon at the top. Finally she suggested I try to recover the system using a set of Sony recovery discs I could purchase online for something over $40.

Sorry for the long story. I just wanted to include all the info I had. Any ideas before I go and buy the recovery discs?

Thanks

 

[Jonathan_King]

Hello,

You can check for minidumps through the command prompt; they will be in C:\Windows\minidump. If you can copy those out to a USB drive, you could zip them up and upload them here.

copy c:\windows\minidump *.dmp F:

Substitute F for the letter of your USB drive.

Create a Windows repair disc: http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

Boot to it, and open a command prompt; enter the following:

bootrec /fixboot
bootrec /fixmbr

Run Startup Repair from the disc a few times, see if that helps.

 

[ssanbower]

Thanks for the reply.

I've run startup repair a few times. Still getting BSOD. I was able to use the method you described to save the .dmp files to a usb drive. Strangely, however, c:\windows did not exist. Instead I found the files in d:\windows\minidump. I don't remember my main hard drive being the d drive. At any rate, I've attached the zip file.

Thanks for the help so far.

 

[Jonathan_King]

Yep, looks like that rootkit!

You may try copying the Kaspersky TDSSKiller.exe file to a USB drive, and running it off of the command prompt.

How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)?

...Summary of the dumps:

[font=lucida console]
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Thu Apr 14 21:14:12.909 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:07.345
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+716f1 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x70860002
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x70860002_iaStor+716f1
SystemProductName = VPCS111FM
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 12 20:25:01.938 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:48.812
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+2d5b3 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_iaStor+2d5b3
SystemProductName = VPCS111FM
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 12 20:17:42.682 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:22.744
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+2d5b3 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_iaStor+2d5b3
SystemProductName = VPCS111FM
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 12 20:15:23.334 2011 (UTC - 4:00)
System Uptime: 0 days 0:02:04.396
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+4ff26 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_iaStor+4ff26
SystemProductName = VPCS111FM
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 12 20:11:58.434 2011 (UTC - 4:00)
System Uptime: 0 days 0:01:21.496
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+2d5b3 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_iaStor+2d5b3
SystemProductName = VPCS111FM
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Debug session time: Tue Apr 12 19:29:30.245 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:53.306
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+716f1 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x70860002
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x70860002_iaStor+716f1
SystemProductName = VPCS111FM
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

 

[BrianRussell]

I've had the same issue with my computer. I clicked the "Play" button on a Naruto Shippuden video i found on the internet and now whenever i start my computer and log in it just restarts and gives the Blue Screen Of Death. I can't seem to find the solution... I have windows 7 So i don't know who to call to get it fixed o.o