I have been receiving a lot of blue screens lately saying IRQ not less or equal

Question

I have been receiving a lot of blue screens lately saying IRQ not less or equal - can you assist me in fixing this? Here is the problem info:

Problem signature:

Problem Event Name: BlueScreen

OS Version: 6.0.6001.2.1.0.768.3

Locale ID: 1033

Additional information about the problem:

BCCode: a

BCP1: 00000000

BCP2: 00000002

BCP3: 00000001

BCP4: 829D7FE9

OS Version: 6_0_6001

Service Pack: 1_0

Product: 768_1

Files that help describe the problem:

C:\Windows\Minidump\Mini091613-01.dmp

C:\Users\Brian\AppData\Local\Temp\WER-3087634-0.sysdata.xml

C:\Users\Brian\AppData\Local\Temp\WER4F77.tmp.version.txt

Answer 1

Hi,

The DMP file attached is of the IRQL_NOT_LESS_OR_EQUAL (a) bugcheck.

This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.

This bug check is issued if paged memory (or invalid memory) is accessed when the IRQL is too high. The error that generates this bug check usually occurs after the installation of a faulty device driver, system service, or BIOS.

The culprit is nhcbgkgg.sys. This is NOT a legitimate driver, similar to that of ***giomjken.sys.***I think you have a malware infection that's creating these illegitimate drivers that end up conflicting with fwpkclnt.sys which is the FWP/IPsec Kernel-Mode API . At this point I'd recommend either:

1. Running a scan with Malwarebytes - http://www.malwarebytes.org/ (be sure to uncheck 'use free PRO trial' if this is the route you take.

or

2. Back up any important information you want and do a CLEAN install of Windows to be sure you get rid of whatever malware infection you have, and to save the headache - http://windows.microsoft.com/en-US/windows-vista/Installing-and-reinstalling-Windows-Vista

Regards,

Patrick

Answer 2

Hi Patrick, I just got a blue screen about 20 min ago - here is the minidump file:

http://xportcms.com/siteresources/data/files/minidump.zip

and here is what the "Check for a solution" box has in it:

Problem signature:

  Problem Event Name:    BlueScreen

  OS Version:    6.0.6001.2.1.0.768.3

  Locale ID:    1033

Additional information about the problem:

  BCCode:    a

  BCP1:    00000000

  BCP2:    00000002

  BCP3:    00000001

  BCP4:    829C2FE9

  OS Version:    6_0_6001

  Service Pack:    1_0

  Product:    768_1

Files that help describe the problem:

  C:\Windows\Minidump\Mini092613-01.dmp

  C:\Users\Brian\AppData\Local\Temp\WER-48719-0.sysdata.xml

  C:\Users\Brian\AppData\Local\Temp\WER449D.tmp.version.txt

Answer 3

Hi,

Sounds good, keep us updated.

Regards,

Patrick

Answer 4

Ok guys - I have turned verifier back on and I will post the mini dump in 24 hours unless my system BSOD before then.