Possible hidden virus, no safe mode, what to do? (coprocessor?)

Technical support and purchasing advice for laptops, netbooks, tablets, and e-readers - from Chromebooks and MacBooks, to iPads and Kindles.

Announcements Posted on
TSR launches Learn Together! - Our new subscription to help improve your learning 16-05-2013
Sign in to Reply
  1. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    Hi,
    Take a look at the following:
    http://msdn.microsoft.com/en-us/libr...(v=vs.85).aspx
    Is that the Stop code you got? If so, try going into safe mode, into the device manager and see what device has a yellow/red mark there, just remove that and restart it, it (hopefully) should fix it automatically. If not, we'll have to change the IRQL value manually.
    I didn't get a look at the stop code . Is there any way to retrieve it?
  2. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)
    I didn't get a look at the stop code . Is there any way to retrieve it?
    There are two files, in your spoiler from your earlier post.
    Problem signature:
    Problem Event Name: BlueScreen
    OS Version: 6.1.7601.2.1.0.256.48
    Locale ID: 2057

    Additional information about the problem:
    BCCode: d1
    BCP1: 00000030
    BCP2: 00000002
    BCP3: 00000000
    BCP4: 8F6778A5
    OS Version: 6_1_7601
    Service Pack: 1_0
    Product: 256_1

    Files that help describe the problem:
    C:\Windows\Minidump\040112-27315-01.dmp
    C:\Users\Tom\AppData\Local\Temp\ WER-47471-0.sysdata.xml


    Read our privacy statement online:
    http://go.microsoft.com/fwlink/?link...8&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
    C:\Windows\system32\en-US\erofflps.txt
    So, log into Safe mode, use this tool and locate the dmp file:
    http://www.nirsoft.net/utils/blue_screen_view.html
  3. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    There are two files, in your spoiler from your earlier post.


    So, log into Safe mode, use this tool and locate the dmp file:
    http://www.nirsoft.net/utils/blue_screen_view.html


    Viewing the device manager in safe mode as yielded no results.

    New BSOD, slight variance in code:

    Problem signature:
    Problem Event Name: BlueScreen
    OS Version: 6.1.7601.2.1.0.256.48
    Locale ID: 2057

    Additional information about the problem:
    BCCode: d1
    BCP1: 00000030
    BCP2: 00000002
    BCP3: 00000000
    BCP4: 8EE558A5
    OS Version: 6_1_7601
    Service Pack: 1_0
    Product: 256_1

    Files that help describe the problem:
    C:\Windows\Minidump\040312-19219-01.dmp
    C:\Users\Tom\AppData\Local\Temp\ WER-46878-0.sysdata.xml


    Read our privacy statement online:
    http://go.microsoft.com/fwlink/?link...8&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
    C:\Windows\system32\en-US\erofflps.txt
    Stop code was many 0's (between 6 and 10 I think) ending in a 1.
    If there is a normal amount of 0's then it'll be that.


    Downloading your suggestion now .

    Edit: The bold bits are differences from the original BSOD posted.



    The information for the original one is first, the information for the one in this post is second:

    Clean up edits to come, information for the first:

    040312-19219-01.dmp 03/04/2012 17:27:55 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 0x00000030 0x00000002 0x00000000 0x8ee558a5 athr.sys athr.sys+428a5 Atheros Extensible Wireless LAN device driver Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter Atheros Communications, Inc. 2.0.0.75 built by: WinDDK 32-bit ntkrnlpa.exe+4166b athr.sys+428a5 athr.sys+42647 athr.sys+41c52 C:\Windows\Minidump\040312-19219-01.dmp 2 15 7601 159,152

    Stop code:
    0x000000D1











    Information for the second:
    040112-27315-01.dmp 01/04/2012 03:54:08 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 0x00000030 0x00000002 0x00000000 0x8f6778a5 athr.sys athr.sys+428a5 Atheros Extensible Wireless LAN device driver Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter Atheros Communications, Inc. 2.0.0.75 built by: WinDDK 32-bit ntkrnlpa.exe+4166b athr.sys+428a5 athr.sys+42647 athr.sys+41c52 C:\Windows\Minidump\040112-27315-01.dmp 2 15 7601 159,152



    Stop code:
    0x000000D1
    Last edited by there's too much love; 03-04-2012 at 17:55.
  4. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)

    Clean up edits to come, information for the first:

    040312-19219-01.dmp 03/04/2012 17:27:55 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 0x00000030 0x00000002 0x00000000 0x8ee558a5 athr.sys athr.sys+428a5 Atheros Extensible Wireless LAN device driver Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter Atheros Communications, Inc. 2.0.0.75 built by: WinDDK 32-bit ntkrnlpa.exe+4166b athr.sys+428a5 athr.sys+42647 athr.sys+41c52 C:\Windows\Minidump\040312-19219-01.dmp 2 15 7601 159,152

    Stop code:
    0x000000D1

    Information for the second:
    040112-27315-01.dmp 01/04/2012 03:54:08 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 0x00000030 0x00000002 0x00000000 0x8f6778a5 athr.sys athr.sys+428a5 Atheros Extensible Wireless LAN device driver Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter Atheros Communications, Inc. 2.0.0.75 built by: WinDDK 32-bit ntkrnlpa.exe+4166b athr.sys+428a5 athr.sys+42647 athr.sys+41c52 C:\Windows\Minidump\040112-27315-01.dmp 2 15 7601 159,152

    Stop code:
    0x000000D1
    So, there seems to be a problem with your Wireless LAN driver/configuration, go into Safe mode, into device manager and remove all occurrences of it, then restart.
    If the problem persists, re-install the driver, if its still persists, then we'll need to manually change the IRQL values.
  5. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    So, there seems to be a problem with your Wireless LAN driver/configuration, go into Safe mode, into device manager and remove all occurrences of it, then restart.
    If the problem persists, re-install the driver, if its still persists, then we'll need to manually change the IRQL values.
    Erm hang on, if I remove those things won't that stop the wireless from working? :s Or will all those things be fixed with a reinstall of the driver?

    Would it not be quicker to just reinstall the driver?
  6. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)
    Erm hang on, if I remove those things won't that stop the wireless from working? :s Or will all those things be fixed with a reinstall of the driver?

    Would it not be quicker to just reinstall the driver?
    Normally upon removal of a device from the device manager, Windows will either install it again straight away (if its plugged in or is available) or it will install it after a restart or upon clicking the "detect button" (4th icon from right)



    If you just reinstall the driver, it will probably not alter the IRQL values which seem to be incorrect and therefore cause that BSOD again. Since the Wireless driver will be re-installed, wireless will work again.
  7. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    Normally upon removal of a device from the device manager, Windows will either install it again straight away (if its plugged in or is available) or it will install it after a restart or upon clicking the "detect button" (4th icon from right)



    If you just reinstall the driver, it will probably not alter the IRQL values which seem to be incorrect and therefore cause that BSOD again. Since the Wireless driver will be re-installed, wireless will work again.
    Okay so I went into safe mode and uninstalled the driver, and am resetting the computer now...*fingers crossed*.

    Edit: and it's now installing itself back on to the system. It said that it hadn't done it properly, but it is working. Not really sure what's going on with it :s .
    Last edited by there's too much love; 03-04-2012 at 19:46.
  8. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    Should this mean no more BSOD (unless another problem occurs)?

    Thanks a lot for all your help. I'll leave those programs installed I think.

    By the way The BSOD one I downloaded from Cnet, as that's a renowned downloading site for safe software :P .
  9. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)
    Okay so I went into safe mode and uninstalled the driver, and am resetting the computer now...*fingers crossed*.

    Edit: and it's now installing itself back on to the system. It said that it hadn't done it properly, but it is working. Not really sure what's going on with it :s .
    That happens sometimes, check the device manager to see if there are any problems. Right-click on the Wireless LAN device -> Properties -> Resources, then check each property for conflicts (will appear below) and change its value accordingly to a value that does not cause conflict.

    Here are instructions from Microsoft on how to do that:

    http://technet.microsoft.com/en-us/l.../cc730702.aspx

    Note: If "Use automatic settings" is not checked, then check it, that might resolve the problems. Also if there are no conflicts, then don't change anything!

    (Original post by there's too much love)
    Should this mean no more BSOD (unless another problem occurs)?

    Thanks a lot for all your help. I'll leave those programs installed I think.

    By the way The BSOD one I downloaded from Cnet, as that's a renowned downloading site for safe software :P .
    Yes, if you could just do the above final checks. If you are experiencing any problems with the Wireless Driver, then I'd recommend you to re-install the driver, if everything is fine, then obviously you don't need to.
    You're welcome!
    Last edited by TheHuman; 03-04-2012 at 21:12.
  10. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    That happens sometimes, check the device manager to see if there are any problems. Right-click on the Wireless LAN device -> Properties -> Resources, then check each property for conflicts (will appear below) and change its value accordingly to a value that does not cause conflict.

    Here are instructions from Microsoft on how to do that:

    http://technet.microsoft.com/en-us/l.../cc730702.aspx

    Note: If "Use automatic settings" is not checked, then check it, that might resolve the problems. Also if there are no conflicts, then don't change anything!



    Yes, if you could just do the above final checks. If you are experiencing any problems with the Wireless Driver, then I'd recommend you to re-install the driver, if everything is fine, then obviously you don't need to.
    You're welcome!


    I clicked on resources, and i can't un-tick the use automatic settings (not that I want to, but I just can't) and I can't click on the resources either.

    But it doesn't say there are any conflicts.
  11. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)
    I clicked on resources, and i can't un-tick the use automatic settings (not that I want to, but I just can't) and I can't click on the resources either.

    But it doesn't say there are any conflicts.
    I think we can safely assume that this BSOD problem, should be fixed now (unless we get another one ).
    Have fun!
  12. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    I think we can safely assume that this BSOD problem, should be fixed now (unless we get another one ).
    Have fun!
    I'm so very happy .

    Thank you!
    And hopefully I can sort some out myself now that I know all of that. I'll close the thread now.

    God, I can't believe how much better I feel!

    Edit: I'd rep you but I can't rep you again yet . But know that the intention is there .
  13. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    It just happened again, same problem again.

    It happened after I installed spotify (around an hour after I did it).

    I'm wondering if installing certain software is what causes it :s .

    It's been 2 weeks since it happened, and it was being much more frequent than that before.

    *off to safemode*
  14. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)
    It just happened again, same problem again.

    It happened after I installed spotify (around an hour after I did it).

    I'm wondering if installing certain software is what causes it :s .

    It's been 2 weeks since it happened, and it was being much more frequent than that before.

    *off to safemode*
    Do you mean the BSOD? If so, what's the error message? That's the most important thing!
  15. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    Do you mean the BSOD? If so, what's the error message? That's the most important thing!

    041812-22651-01.dmp 18/04/2012 21:11:52 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 0x00000030 0x00000002 0x00000000 0x93e428a5 athr.sys athr.sys+428a5 Atheros Extensible Wireless LAN device driver Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter Atheros Communications, Inc. 2.0.0.75 built by: WinDDK 32-bit ntkrnlpa.exe+415eb athr.sys+428a5 athr.sys+42647 athr.sys+41c52 C:\Windows\Minidump\041812-22651-01.dmp 2 15 7601 159,152


    See, wireless driver again. Did the safe mode uninstall again.
  16. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    And again.

    Details will be posted in the edit.
  17. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    Have you tried re-installing the wireless driver?
    You'd then have to remove it in the device manager, restart and wait for it to reinstall itself, like last time.
  18. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    Have you tried re-installing the wireless driver?
    You'd then have to remove it in the device manager, restart and wait for it to reinstall itself, like last time.

    041912-19936-01.dmp 19/04/2012 02:26:04 DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 0x00000030 0x00000002 0x00000000 0xa125b8a5 athr.sys athr.sys+428a5 Atheros Extensible Wireless LAN device driver Driver for Atheros CB42/CB43/MB42/MB43 Network Adapter Atheros Communications, Inc. 2.0.0.75 built by: WinDDK 32-bit ntkrnlpa.exe+415eb athr.sys+428a5 athr.sys+42647 athr.sys+41c52 C:\Windows\Minidump\041912-19936-01.dmp 2 15 7601 159,152




    I don't think I understand.

    I went into safemode.
    I uninstalled it.
    I restarted the computer.

    That removed it from device manager.









    In the picture there are two wifi drivers to remove.

    If I remove the first, they both disappear.
    If I remove the second, when the device manger refreshes, they're both still there.

    I only attempted to remove the second one this time. Not sure if that will make any difference.

    Click image for larger version. 

Name:	device manager.png 
Views:	12 
Size:	45.4 KB 
ID:	142786
    Last edited by there's too much love; 19-04-2012 at 02:46.
  19. TheHuman's Avatar
    • Exalted Member
    • Posts: 289
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by there's too much love)
    x
    OK.
    Download the wireless drivers, but do not install them yet!
    In safe-mode:
    Go into Control Panel -> Programs & Features, then look for the Wireless driver(s), if you find it (them), uninstall it (them).

    Restart your computer into safe-mode again and install the downloaded drivers, then go into the device manager and delete any devices that have a yellow/red symbol on them, then restart the computer again.

    Let's see how that works out.
  20. there's too much love's Avatar
    • TSR Legend
    • Location: I don't love anyone
    • Posts: 14,694
    Re: Possible hidden virus, no safe mode, what to do? (coprocessor?)
    (Original post by TheHuman)
    OK.
    Download the wireless drivers, but do not install them yet!
    In safe-mode:
    Go into Control Panel -> Programs & Features, then look for the Wireless driver(s), if you find it (them), uninstall it (them).

    Restart your computer into safe-mode again and install the downloaded drivers, then go into the device manager and delete any devices that have a yellow/red symbol on them, then restart the computer again.

    Let's see how that works out.
    I'm unsure if I'll need this one or not, shall I just try without for now?

    http://h10025.www1.hp.com/ewfrf/wc/s...52686&sw_lang=
Sign in to Reply
Share this discussion:  
Useful resources
Article updates
Moderators

We have a brilliant team of more than 60 volunteers looking after discussions on The Student Room, helping to make it a fun, safe and useful place to hang out.

Reputation gems:
The Reputation gems seen here indicate how well reputed the user is, red gem indicate negative reputation and green indicates a good rep.
Post rating score:
These scores show if a post has been positively or negatively rated by our members.