Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe  (Read 38950 times)

0 Members and 1 Guest are viewing this topic.

SuperDave

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
« Reply #15 on: March 27, 2011, 11:55:09 AM »
Run hard drive diagnostics: tacktech.com
Make sure, you select tool, which is appropriate for the brand of your hard drive.
Depending on the program, it'll create bootable floppy, or bootable CD.
If downloaded file is of .iso type, use ImgBurn: imgburn to burn .iso file to a CD (select "Write image file to disc" option), and make the CD bootable.
For Toshiba hard drives, see here:

Note : If you do not know how to set your computer to boot from CD follow the steps here

Windows 8 and Windows 10 dual boot with two SSD's

Valeras

    Topic Starter


    Rookie

    • Experience: Familiar
    • OS: Windows 7
    Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
    « Reply #16 on: March 28, 2011, 06:53:27 PM »
    The hard drive test run and no errors

    SuperDave

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
    « Reply #17 on: March 29, 2011, 12:01:04 PM »
    Please try the chkdsk as described in Reply # 11
    Windows 8 and Windows 10 dual boot with two SSD's

    Valeras

      Topic Starter


      Rookie

      • Experience: Familiar
      • OS: Windows 7
      Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
      « Reply #18 on: March 29, 2011, 03:06:38 PM »
      tired that, didnt work

      SuperDave

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
      « Reply #19 on: March 30, 2011, 11:55:00 AM »
      Could you please try the OTLPE recovery disk again?
      Windows 8 and Windows 10 dual boot with two SSD's

      Valeras

        Topic Starter


        Rookie

        • Experience: Familiar
        • OS: Windows 7
        Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
        « Reply #20 on: March 30, 2011, 05:37:38 PM »
        the OTLPE cannot work because im using windows 7

        SuperDave

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
        « Reply #21 on: March 31, 2011, 12:01:28 PM »
        the OTLPE cannot work because im using windows 7
        Is that the message that you get when you try to run it?
        Windows 8 and Windows 10 dual boot with two SSD's

        Valeras

          Topic Starter


          Rookie

          • Experience: Familiar
          • OS: Windows 7
          Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
          « Reply #22 on: March 31, 2011, 02:55:14 PM »
          no, just a simple bsod

          SuperDave

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Thanked: 1020
          • Certifications: List
          • Experience: Expert
          • OS: Windows 10
          Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
          « Reply #23 on: March 31, 2011, 04:31:20 PM »
          That's the BSOD stating to run chkdsk?
          Is there any change to your computer? You still cannot boot in Normal Mode?
          Windows 8 and Windows 10 dual boot with two SSD's

          Valeras

            Topic Starter


            Rookie

            • Experience: Familiar
            • OS: Windows 7
            Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
            « Reply #24 on: March 31, 2011, 04:55:25 PM »
            Ok, i founded out that the virus .exe file is from keygenguru. I got the copy from a person but did not request a key. This is the site
            hxxp://keygenguru.com/serial/adobe_photoshop_cs5_extented_12_0.html
            "Download keygen" is what put me here.
            I extracted it and this is why im here.
            I am willing to uninstall anything.
            « Last Edit: March 31, 2011, 07:54:49 PM by SuperDave »

            Valeras

              Topic Starter


              Rookie

              • Experience: Familiar
              • OS: Windows 7
              Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
              « Reply #25 on: March 31, 2011, 05:07:38 PM »
              Finally Fixed: This issue lingered for 1 week, 5 days or 12 days. I would like to thank computerhope for their determination for fixing this. It started from this post http://www.computerhope.com/forum/index.php/topic,117400.0.html And The Solution
              http://support.kaspersky.com/viruses/solutions?qid=208280684&AID=10273799&PID=3865134&SID=42uxrghxi0
              to
              this post. The persons who helped me kudos to you: skillz853, a guy on irc, SuperDave, Allan, lostcoast and others who helped me. I will ask more questions here and will be hearing more from me. The computer is running a bit slow but it can be fixed.

              THANKS FOR YOUR HELP GUYS.  :) :) :) :) :) :) :) :) :) :) :) :)

              SuperDave and Allan were the only persons in malware and they did tremendously.

              Again Thanks and Solved.

              SuperDave

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Thanked: 1020
              • Certifications: List
              • Experience: Expert
              • OS: Windows 10
              Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
              « Reply #26 on: April 01, 2011, 11:15:20 AM »
              It would be wise to continue with the cleaning because I doubt that your computer is clean. You should start by running MBAM and SAS and posting the logs

              SUPERAntiSpyware

              If you already have SUPERAntiSpyware be sure to check for updates before scanning!


              Download SuperAntispyware Free Edition (SAS)
              * Double-click the icon on your desktop to run the installer.
              * When asked to Update the program definitions, click Yes
              * If you encounter any problems while downloading the updates, manually download and unzip them from here
              * Next click the Preferences button.

              •Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
              * Click the Scanning Control tab.
              * Under Scanner Options make sure only the following are checked:

              •Close browsers before scanning
              •Scan for tracking cookies
              •Terminate memory threats before quarantining
              Please leave the others unchecked

              •Click the Close button to leave the control center screen.

              * On the main screen click Scan your computer
              * On the left check the box for the drive you are scanning.
              * On the right choose Perform Complete Scan
              * Click Next to start the scan. Please be patient while it scans your computer.
              * After the scan is complete a summary box will appear. Click OK
              * Make sure everything in the white box has a check next to it, then click Next
              * It will quarantine what it found and if it asks if you want to reboot, click Yes

              •To retrieve the removal information please do the following:
              •After reboot, double-click the SUPERAntiSpyware icon on your desktop.
              •Click Preferences. Click the Statistics/Logs tab.

              •Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

              •It will open in your default text editor (preferably Notepad).
              •Save the notepad file to your desktop by clicking (in notepad) File > Save As...

              * Save the log somewhere you can easily find it. (normally the desktop)
              * Click close and close again to exit the program.
              *Copy and Paste the log in your post.
              ***************************************
              Please download Malwarebytes Anti-Malware from here.
              Double Click mbam-setup.exe to install the application.
              • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
              • If an update is found, it will download and install the latest version.
              • Once the program has loaded, select "Perform Full Scan", then click Scan.
              • The scan may take some time to finish,so please be patient.
              • When the scan is complete, click OK, then Show Results to view the results.
              • Make sure that everything is checked, and click Remove Selected.
              • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
              • Please save the log to a location you will remember.
              • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
              • Copy and paste the entire report in your next reply.
              Extra Note:

              If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
              ***********************************************
              Download DDS from HERE or HERE and save it to your desktop.

              Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

              * XP users Double click on dds to run it.
              * If your antivirus or firewall try to block DDS then please allow it to run.
              * When finished DDS will open two (2) logs.

              1) DDS.txt
              2) Attach.txt

              * Save both logs to your desktop.
              * Please copy and paste the entire contents of both logs in your next reply.

              Note: DDS will instruct you to post the Attach.txt log as an attachment.
              Please just post it as you would any other log by copy and pasting it into the reply.
              Windows 8 and Windows 10 dual boot with two SSD's

              Valeras

                Topic Starter


                Rookie

                • Experience: Familiar
                • OS: Windows 7
                Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
                « Reply #27 on: April 02, 2011, 07:15:00 AM »
                thanks for the tip, i just got a bsod when loading too many pages. i will post logs soon

                Valeras

                  Topic Starter


                  Rookie

                  • Experience: Familiar
                  • OS: Windows 7
                  Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
                  « Reply #28 on: April 10, 2011, 07:38:36 AM »
                  sorry for not posting, i will do the test today

                  Valeras

                    Topic Starter


                    Rookie

                    • Experience: Familiar
                    • OS: Windows 7
                    Re: IRQL_NOT_LESS_OR_EQUAL caused by a virus .exe
                    « Reply #29 on: April 18, 2011, 06:36:05 PM »
                    sorry for the long delay, on super anti spyware, when scanning windows folder, a bsod appears,

                    PAGE_FAULT_IN_NONPAGED_AREA

                    with the error file

                    autegif.sys