IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a

[kevvyb]

Hi

Would appreciate some help with this. Have a Windows 7 Pro x64 system that has been running well for a good number of years. Inevitably had been getting a little slower but nothing I couldn't live with, although had started to think about a re-install.

However, a few weeks ago started to get BSOD IRQL_NOT_LESS_OR_EQUAL. Just happens 'randomly' whilst I'm in middle of stuff, never so far at start up. Was having to do a hard reboot each time.

Decided over last weekend to to a complete re-install in the hope that it would sort it, but alas no. Tonight, two days after re-install, got it again. But this time machine gracefully restarting.

• Ran BlueScreenView results from first windows minidump on this install, attached.
• DMLog Collector results, attached
• Machine spec as per profile

Any help greatly appreciated.

Only other things that I can think of are that one of my case fans has been making noises for some while, but only when it it running hard immediately after start up. The it quietens very quickly. I checked my BIOS temps and they seemed ok as far as I can tell. Haven't checked them recently though. Will check them again now.

Also system has been overclocked from when I bought it in 2009. Not a recent change.

 

[kevvyb]

Temps
System Temp 39 degrees C
CPU 37 degrees C
MCH (assuming this is mobo or processor core...?) 42 degrees C

Fanspeeds
CPU 1695
System 633
Power 1092
System 670

Have just enabled fan failure warning in BIOS to identify which fan is on the blink.

Don't think it is necessarily relevant but who knows:
System has been encrypted for years with Trucrypt 7.1a System drive encryption, plus disk encryption of both data disks.

 

[derekimo]

Hi there,

What version of Malwarebytes do you have installed?

The probable cause is one of it's drivers,

BugCheck A, {0, 2, 0, fffff80002c97a55}

Unable to load image \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for MBAMSwissArmy.sys
*** ERROR: Module load completed but symbols could not be loaded for MBAMSwissArmy.sys
Probably caused by : [B][COLOR="Red"]MBAMSwissArmy.sys[/COLOR][/B] ( MBAMSwissArmy+1c330 )

Followup: MachineOwner

Kind of odd, but there were some reports of crashes with one of the BETA versions.

 

[kevvyb]

IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a, malware bytes

Hi

Malwarebytes Anti-Malware 2.0.1.1004

Should I report it to them?

And do you know if it is an uninstall job or if there is still some way of running MBAM?

 

[derekimo]

That does appear to be the latest WHQL version.

Not sure if you want to try the BETA or roll back to 1.75 just to see if it makes a difference for you.

I would report it to them, they seem to be very proactive about fixing things, we have one of their community managers as a member here, but I would go to their forum for the best outcome.

I'm still running the 1.75 version myself so you might want to give that a shot.

 

[kevvyb]

IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a, malware bytes driver?

Hi thanks for that. I'll give it a go. I'll download both and try rolling back first. I don't have the previous version having just purchased premium of current version.

I also can't make head or tail of their website re the beta version. Can you kindly point me in right direction?

 

[kevvyb]

IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a, malware bytes driver

Is it possible that ESET could be interacting with malware bytes and causing this? Been thinking about moving to MSE with MBAM and windows firewall. ESET renewal coming up! Could save £60.

 

[derekimo]

This should help,

http://www.sevenforums.com/system-security/240099-latest-version-malwarebytes.html

I'm not sure if you have to use the uninstaller but it might make things easier,

https://helpdesk.malwarebytes.org/entries/25291497-How-do-I-uninstall-Malwarebytes-Anti-Malware-

You could try getting rid of ESET as a test, we often have to recommend switching to MSE during troubleshooting, it's the only AV that hasn't been seen to cause BSOD's, that's what I use too.

 

[kevvyb]

IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a, malware bytes driver?

Thanks

I just bought MBAM 2.01 premium !! I wonder if anything in that version could be causing this too. Do you use free version?

 

[derekimo]

Yeah, I just use the free version, a lot of people here have the premium though.

There were a couple threads with different problems for some folks after updating to the newer version, they seem to be dwindling off as MBAM fixes things.

 

[kevvyb]

IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a, malware bytes driver?

Now have beta installed. Will have eset installed for now. Will leave machine on overnight as before reinstall that was always giving me this blue screen in the morning.

Will post back on outcome.

Thanks for the help.

BTW can you tell me which diagnostic you found the driver error in?

 

[derekimo]

You're welcome.

I found that in the .dmp file, the only .dmp file you uploaded.

Not sure if you are running any cleaning programs or disk cleanup but they will delete dump files.

 

[kevvyb]

No. Can I view that in BlueScreenViewer somewhere?

 

[derekimo]

I use Windbg to see that, it looks like your output from Bluescreenview was pretty generic.

Here's the output from Windbg,

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Derek\AppData\Local\Temp\Temp1_COSMOS-13_05_2014_202225_83.zip\051314-18703-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`02c0d000 PsLoadedModuleList = 0xfffff800`02e506d0
Debug session time: Tue May 13 11:09:30.750 2014 (UTC - 7:00)
System Uptime: 0 days 0:54:36.656
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
Loading unloaded module list
....................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 0, fffff80002c97a55}

Unable to load image \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for MBAMSwissArmy.sys
*** ERROR: Module load completed but symbols could not be loaded for MBAMSwissArmy.sys
Probably caused by : MBAMSwissArmy.sys ( MBAMSwissArmy+1c330 )

Followup: MachineOwner
---------

 

[kevvyb]

can i load windbg without all the other developer bloat?

 

[derekimo]

Yeah, just select that only,

Then there a process of cmds for associating .dmp files, then your symbol path as well.

 

[kevvyb]

Would you mind assisting with getting it configured?

I have installed this: winsdk_web.exe (choosing only the debugging tools).

I get this window (attached image) when I run "Windows SDK 7.1 Command Prompt". Am I on the right track?

 

[derekimo]

See if this thread helps you out,

http://www.sevenforums.com/crash-lockup-debug-how/310706-crash-dump-files-associate-windbg.html

 

[kevvyb]

IRQL_NOT_LESS_OR_EQUAL, error 0x0000000a, MalwareBytes driver

Hi

Thanks for your help. So far so good. PC has been on all day (once I disabled hibernation!). Got home and so far, no blue screen with MBAM Beta.

Getting this error though with running WinWbg. I think it's to do with the 'symbols' config you mentioned.

Would help if I added the screenshot....

If I try and open from within debugger I get a permissions error.

 

[kevvyb]

windbg error

Found this, thanks

http://www.sevenforums.com/crash-lockup-debug-how/26584-configuring-debugging-tools.html