BSOD IRQL_NOT_LESS_OR_EQUAL and random freezes

[essenbe]

Slartybart, I'm not familiar with Magic ISO, if it uses SPTD I have a tool to get rid of it. Programs like Dameon tools and Alcohol 120 use it and it is almost impossible to get rid of. It is an SCSI pass through direct which will often cause trouble. 7 ZIP is a very good program, I use it quite often. I'm not sure, but I believe ImgBurn will do about the same as Magic ISO.

 

[Nisym]

I actually use 7zip as my zip/rar manager. But I didn't know you can use it for iso as well! Thank you for the great tip, Slartybart. I will look through the list of free great programs, thank you for the link.

 

[Slartybart]

You're most welcome, Nisym.

I think I mentioned this before, but I should re-empathize it.

Since you're battling an issue with BSOds, do not install anything new until you reach a resolution. Uninstalling removes things from the equation and helps trouble shoot the original issue. Installing new software while your machine is still experiencing the issue might muddy the water by adding a new driver or software.

So keep the system as it is, sans removing suspect or identified software, and run for a while after each change. How long? Until another new BSOD or no new BSODs. This might take some time because it isn't clear what is causing the issue. By process of elimination, the culprit might be identified.

@essenbe: Imgburn - that's the pgm I couldn't think of - thanks.

I don't know about SPTD and MagicISO either. I recall there is a way to spot SPTD though, but I don't recall where to look. It might be worthwhile to run the tool anyway, unless there is a caveat.

Bill
.

 

[essenbe]

It is usually associated with Dameon tools and Alcohol 120, but it is just a SPTD remover and won't hurt. The tool, as I understand it, won't work unless you have SPTD in the system.

Daemon Tools, Alcohol 120% and Power Archiver Pro uses SCSI Pass Through Direct (SPTD), which is a well known cause of BSOD's.

1. Uninstall Daemon Tools.
2. Download the SPTD standalone installer and follow these steps:
- Double click the executable to open it
- Click the button shown below



If the button it is grayed out, as shown in the image, there is no more SPTD installation on your system, and you can just close the window.

 

[Arc]

MagicISO or MagicDisc does not use SPTD. But still it is equally problematic, because of the MagicISO SCSI Host Controller, mcdbus.sys.

I would never suggest to use a disc emaluator of any sort. It emaluates hardware based on software. So it needs to start before windows; and problems occur.

My take is to use either 7-zip (free) or winrar (with a little cost) to manage the iso or any other sort of disc images. Those two can extract them all, so the basic job is equally done. You may miss the autorun at most, and nothing else.

 

[Slartybart]

.....
1. Uninstall Daemon Tools.

That's what I remember - the standalone uninstaller. A picture really is worth a thousand words.

Just a note on the list items. I'm not sure Nisym has Deamon tools installed, but if it is it should be removed.

@Arc: Thanks for the information re: SPTD & MagicISO. I agree completely on NOT using drive emulators.

 

[essenbe]

Thanks Arc. Great suggestions, as always.

 

[Nisym]

I don't have Daemon tools installed. Honestly, I don't even know what it is, sounds like the name of a malware of some sort, hehe.

I will keep that in mind, Slartybart, no installations for awhile.

 

[Slartybart]

Daemon Tools is like MagicISO, and it does sound demonic :devil: - Unix uses the term a lot for behind the scene services.

You're doing a great job Nisym, it's a pleasure helping you solve the issue.

Bill is easier to type than Slartybart - and you don't get the spelling "error" highlights if you use IE 10 or 11

Bill
.

 

[Nisym]

Bill is it? Well thank you, Bill, for your patience and help, it is most appreciated.

At this point, I think rather than looking for a MagicISO replacement, I'll just use 7zip should the occasion arises.

I actually don't mind those spelling error highlights. I'd like to think that I'm a much more proficient typist thanks to those highlights.

Oh, and I'm Olanka.

 

[Slartybart]

lol - you should see my highlighted spelling errors - almost every other word

I think 7-zip will serve your needs well.

Very good then, I will write Olanka from now on (please forgive me any spelling errors)

So, Magic ISO is no longer installed and I haven't seen a BSOD post yet. It hasn't been that long since you removed MagicISO, so use the machine as you normally would and we'll hope that the issue is resolved.

If there was a particular activity (watching a video or running a certain application) that caused the BSOD, try running those to see if a new BSOD occurs.

Bill
.

 

[Nisym]

Bill,

I was curious, is it possible for Memtest86+ to not pick up any errors but still have some sort of memory problem? The screen of my laptop went blank and there was white noise was emitted from the speakers. When I pulled the ac adapter out and replugged it back in to turn the laptop back on, the laptop made a beep and the cap locks flashed three times. According to HP's LED code, three times = "Memory - Module error not functional".

Hehe—then, you might not be the best speller, but you're quite helpful!


Edit: I've reseated the rams. Strangely, my taskbar clock was 7 hours late from the current time. Hm, computer problems are quite troublesome. Anyways, I'll continue to monitor and try testing out various things that makes my computer act up.

 

[Slartybart]

Anything is possible, but if the test was long enough and all memory was tested then it's unlikely something was missed.

Please describe what, if anything, the machine was doing when the screen went blank & speakers produced the white noise.

There are indications that there are hardware issues - the system clock could be the CMOS battery (small round button battery), or it could be something else.

The beep and LED codes - hmm. Could you enter the model number of your HP in your system specs
http://www.sevenforums.com/profile.php?do=extra

View attachment 322553

For example, mine is a Pavilion dv6-c610us. That might make it easier for SF members to reference HP information if needed. I'd like to be certain I provided good information on the LED codes before saying "it's memory"

Let's try the easy stuff first.

Scan the machine to identify or rule out malware. I don't know if there's anything on your machine or not - the scan will tell me. Why scan for malware? The clock being off and odd behavior of the monitor and sound are either hardware or malware.

Download the Farbar Recovery Scan Tool (FRST) Click here

1. Select the version that applies to your system: 32-bit OR 64-bit
   .
2. Click the Save button
   Default save location is your Downloads folder
   :note: If the SmartFilter bar is presented, click the Actions button and click Don't Run (saves FRST but does not run it)
   .
3. Double-click FRST or FRST64 to launch the utility
   :info: FRST is the 32-bit version / FRST64 is the 64-bit version
   • Click the Yes button to confirm UAC
     .
   • Click the Yes button on the Warranty disclaimer window.
     .
   • Tick [[FONT=Webdings, serif]a[/FONT]] all Whitelist checkboxes
     .
   • Tick [[FONT=Webdings, serif]a[/FONT]] Addition.txt in the Optional scan list
     .
4. Click the Scan button to begin scanning.
   .
5. FRST creates two logs when the scan has finished, they are located in the same folder where FRST was launched
   • FRST.txt and
   • Addition.txt
   • Attach both logs to a post on your thread and a SevenForums member will analyze the output.
     See: http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Thanks

I'll look at the logs tomorrow.

Bill
.

 

[Nisym]

My laptop model is HP DV7 2270us.

The Memtest86+ was completed with no errors, or so the test had said.

I was streaming a video when my computer's screen suddenly went black (as if it was turned off or lost power) and a static white noise could be heard from the speakers before the laptop would attempt to restart itself. Sometimes it is successful, other times I have to pull the plug or press and hold the power button. The issue seems to appear mostly after my computer had froze or if I had a BSOD.

I will attach the logs upon their completion.

 

[Slartybart]

Thank you for all the things in post #74.

I will look at the logs and see what I see

Bill
.

 

[Slartybart]

First take: The addition.txt log actually looks fairly good.

There are a few notations:
The tablet stuff on your machine is throwing errors. Do you use any of those features?
I'd like you to turn off the PC Tablet features, particularly Pen tablet.
This is for trouble shooting only, you can turn them back on later if needed

==================
Error: (06/19/2014 09:28:06 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )
Description: Prefs: Failed to get user path

Error: (06/19/2014 08:29:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Pen_Tablet.exe, version: 5.3.3.3, time stamp: 0x52d4123e
Faulting module name: Pen_Tablet.exe, version: 5.3.3.3, time stamp: 0x52d4123e
Exception code: 0xc0000005
Fault offset: 0x00000000002732d6
Faulting process id: 0x8c4
Faulting application start time: 0xPen_Tablet.exe0
Faulting application path: Pen_Tablet.exe1
Faulting module path: Pen_Tablet.exe2
Report Id: Pen_Tablet.exe3​

I think you have to go to Control Panel > Programs and Features > Turn Windows features on or off

View attachment 322579​

Scroll down the list looking for PC tablet or Tablet.

I'm currently test driving Win8 and it doesn't show on my machine, so I can't be exact.

The other thing I recommend is removing Catalyst Control Center (CCC). This is part of the AMD drivers, but is only useful if you overclock your machine.

Again in Control Panel > Programs and Features
Change the AMD installation - custom uninstall, not express - only tick CCC for removal.

The choice is yours, it's your machine - please let me know what was done or not done.
I don't need a reason, I just need to keep track of changes

You should restart your machine.

I'll read the FRST.txt log and post any findings later.

Bill
.

 

[Slartybart]

There are a few things in the FRST log that might need to be addressed, but I'm not the person best suited to address them.

I'll ask for help from the Security team. I'm not sure there's anything 'bad' on your system, that's why I need to ask.

They are busy people , so please be patient.

We can continue the steps you're taking until one of the team shows up. Then I'll sit out and let them drive.

edit: I put looking for specific dv7 information on the back burner for now. Let's see what the other team member(s) have to say about the FRST.txt

Bill
.

 

[Nisym]

Bill,

Tablet PC Components is already turned off, I do; however, have a bamboo wacom driver installed as it is something I frequently used for digital painting.

I've uninstalled CCC.

Thank you for your help.

 

[Slartybart]

Thanks Olanka,

I checked the version on Wacom and it looks as though your driver is up-to-date.

View attachment 322592

Error: (06/19/2014 08:29:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Pen_Tablet.exe, version: 5.3.3.3, time stamp: 0x52d4123e​

The event log entries require further investigation. I'll be back....

edit: The error is related to user path... I don't know if there's a setting in Bamboo, or if it's more generic and is a PATH or other Windows variable setting.

Please post a screen shot of the following:

Open a command prompt and enter the two commands

path
set​

--> grab the screen and then type exit in Command Prompt

You aren't changing anything - just showing what the variables reference.

Bill
.

 

[Slartybart]

A quick check on EventID 1000 points to DNS, not sure why Bamboo is concerned with IP settings (wireless ??), but there was another WLAN error in the event log.

We've been all over your machine, quite the journey.

So another Command Prompt widow and file attach will help, this time I'm looking for the IP configuration.
type

pconfig /all > ipCfg.txt
exit​

Then attach ipCfg.txt from your User folder to a post
(use the paper clip icon on the thread's post menu to attach a file)

This keeps getting more interesting as we go along.

Bill
.