tweaks_sav
07-18-2006, 08:47 PM
Zip of dump:
http://www.yousendit.com/transfer.php?action=download&ufid=9DDECC3C2AA50185
I've been getting these BSOD for IRQL_NOT_LESS_OR_EQUAL 0x0000000A
I've done an Advanced DFT HD Test and a memtest+. Both passed.
The bugcheck says KSecDD.sys but I'm not sure how to fix it or if that's it.
Repair install?
Any help?
Thanks!!
howard_hopkinso
07-18-2006, 09:18 PM
Hello and welcome to Techspot.
Before we go any further, I`d like to check for viruses/spyware etc.
Go and read this thread Here. (
http://www.techspot.com/vb/topic19133.html)
Post a HJT log as a .txt attachment into this thread.
Regards Howard :wave: :wave:
tweaks_sav
07-18-2006, 09:30 PM
I was trying to use safe mode and I just got
BAD_POOL_CALLER
0x000000C2
howard_hopkinso
07-18-2006, 09:35 PM
Had you any particular reason to try and boot into safe mode?
I need a HJT log from normal mode.
Regards Howard :)
tweaks_sav
07-18-2006, 09:46 PM
I get the original BSOD (IRQL - 0xA) pretty soon in normal mode. I was trying to scan with spybot and adaware and then go into normal mode to se if that helped.
I'll keep trying. Thanks! ;)
tweaks_sav
07-18-2006, 10:21 PM
Windows doesn't stay in normal mode long enough for me to save a HJT logfile.
I was able to scan adaware and spybot in safe mode and remove a few things.
tweaks_sav
07-18-2006, 10:30 PM
Another BSOD, different than before in normal mode:
BugCheck 10000050, {ffffff60, 0, 804e9906, 0}
Could not read faulting driver name
Probably caused by : KSecDD.sys ( KSecDD!GatherRandomKey+2a3 )
http://www.yousendit.com/transfer.php?action=download&ufid=F21CA0D6178B047C
The 03 dump was from a BSOD in safe mode.
I'm thinking of doing a repair install.
howard_hopkinso
07-18-2006, 10:36 PM
I`m fairly certain your system is infected with viruses/spyware etc.
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html
Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html
Now run your antivirus programme and delete whatever it finds.
Reboot into normal mode and turn system restore back on.
See if that helps any.
If you could get a HJT log to me, that`d be great.
Regards Howard :)
tweaks_sav
07-18-2006, 10:49 PM
Ok, I'm doing a boot time scan with Avast.
What makes you think it's a virus?
howard_hopkinso
07-18-2006, 10:54 PM
You have some entries in your minidumps that suggest an infection of some kind.
That`s why I asked for a HJT log, so I could confirm or otherwise my suspicions.
These are the filenames that make me think it`s a possible virus/spyware infection.
~90.tmp.exe
dzoxskewjw.exe
umoxnbq.exe
ihifwbmlcylw.exe
Regards Howard :)
tweaks_sav
07-19-2006, 09:44 AM
Well everything is great now! Thanks!
The boot time scan finished, and it hasn't blue screened yet.
tweaks_sav
07-19-2006, 09:46 AM
Where did you notice those file names. Did you do anything except !analyze -v ?
howard_hopkinso
07-19-2006, 11:56 AM
Where did you notice those file names. Did you do anything except !analyze -v ?
Yes, I used the !thread command to see the owning process.
Hope this helps.
Regards Howard :)