Minidump - KSecDD.sys - 0xA

[tweaks_sav]

Zip of dump:
http://www.yousendit.com/transfer.php?action=download&ufid=9DDECC3C2AA50185

I've been getting these BSOD for IRQL_NOT_LESS_OR_EQUAL 0x0000000A
I've done an Advanced DFT HD Test and a memtest+. Both passed.
The bugcheck says KSecDD.sys but I'm not sure how to fix it or if that's it.
Repair install?
Any help?
Thanks!!

 

[howard_hopkinso]

Hello and welcome to Techspot.

Before we go any further, I`d like to check for viruses/spyware etc.

Go and read this thread Here.

Post a HJT log as a .txt attachment into this thread.

Regards Howard :wave: :wave:

 

[tweaks_sav]

I was trying to use safe mode and I just got
BAD_POOL_CALLER
0x000000C2

 

[howard_hopkinso]

Had you any particular reason to try and boot into safe mode?

I need a HJT log from normal mode.

Regards Howard

 

[tweaks_sav]

I get the original BSOD (IRQL - 0xA) pretty soon in normal mode. I was trying to scan with spybot and adaware and then go into normal mode to se if that helped.
I'll keep trying. Thanks!

 

[tweaks_sav]

Windows doesn't stay in normal mode long enough for me to save a HJT logfile.
I was able to scan adaware and spybot in safe mode and remove a few things.

 

[tweaks_sav]

Another BSOD, different than before in normal mode:

BugCheck 10000050, {ffffff60, 0, 804e9906, 0}


Could not read faulting driver name
Probably caused by : KSecDD.sys ( KSecDD!GatherRandomKey+2a3 )

http://www.yousendit.com/transfer.php?action=download&ufid=F21CA0D6178B047C
The 03 dump was from a BSOD in safe mode.


I'm thinking of doing a repair install.

 

[howard_hopkinso]

I`m fairly certain your system is infected with viruses/spyware etc.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Now run your antivirus programme and delete whatever it finds.

Reboot into normal mode and turn system restore back on.

See if that helps any.

If you could get a HJT log to me, that`d be great.

Regards Howard

 

[tweaks_sav]

Ok, I'm doing a boot time scan with Avast.
What makes you think it's a virus?

 

[howard_hopkinso]

You have some entries in your minidumps that suggest an infection of some kind.

That`s why I asked for a HJT log, so I could confirm or otherwise my suspicions.

These are the filenames that make me think it`s a possible virus/spyware infection.

~90.tmp.exe
dzoxskewjw.exe
umoxnbq.exe
ihifwbmlcylw.exe



Regards Howard

 

[tweaks_sav]

Well everything is great now! Thanks!
The boot time scan finished, and it hasn't blue screened yet.

 

[tweaks_sav]

Where did you notice those file names. Did you do anything except !analyze -v ?

 

[howard_hopkinso]

Where did you notice those file names. Did you do anything except !analyze -v ?

Yes, I used the !thread command to see the owning process.

Hope this helps.

Regards Howard