3G USB Modem and a Driver_IRQL error message

[Closertohabbit]

Hey everyone...

Still stuck with this so I thought I'd post it here as well...

I've been having this problem for a week now and it's driving me crazy. I work in IT, do network set-up/network administration/troubleshooting, pc repair and web design so I like to think that I know my way around computers but this has me pulling out my hair.

I got a 3G USB Modem and when I connect it to my laptop, I get the dreaded BSOD after a while. Sometimes it takes 5 minutes, sometimes it takes 3 hours but I get the BSOD. The Modem is a iCon 225 model from the company "Option".

The modem works fine in my desktop pc and my colleague at work also used it 3 days straight in his laptop and desktop without a problem (meaning that the problem is most likely with my laptop).

I have an Acer Aspire 3000, 1 Gig of Ram, Windows Xp Pro Service pack 3 (slipstreamed) with all the latest updates and drivers). My video card, sound card, WLAN and Bios are all updated with the latest drivers and I keep my laptop running as smooth as possible.

I installed this XP freshly last week, so I'm pretty sure I don't have a virus or malware and scans with Bitdefender, Avast, Clamwin, Ad-Aware and SpyBot found nothing.

The BSOD gives the Driver_IRQL_Not less Or Equal message and it refers to a file "gt72ubus.sys".

Now, I know that it's one of the drivers of the 3g Modem but if the driver is bad, it should have also created problems on those other 3 pc's. It's the latest version of the driver and it seems to be creating a problem on my laptop specifically.

I have tested my ram (which is still pretty new), I have uninstalled other devices (like my WLAN card) and it's gotten to the point where i'm getting hopeless.

I've increased my page file and now I'm running out of ideas. Searching gt72ubus.sys in Google doesn't return much and I've even tried with an older version of the file.

I still get the BSOD.

Please, does anyone have a clue or an idea. Maybe I'm missing something. If I need to give more info, please let me know.

Thank You

[-pops-]

Is there an error number in the IRQL message?

[Irene]

Did your search find THIS or THIS?

As -pops- mentioned, you don't give any error numbers, so the above is a 'shot in the dark'. :)

[ɹəuəllıʍ ʇɐb]

IRQL_NOT_LESS_OR_EQUAL is 10 (0x0000000A).

What is your Windows version and SP level?

Do you have the latest available drivers for that device?

Last but not least, is your system free of malware?

See also http://support.microsoft.com/kb/314063 if you are on Windows XP.

[Closertohabbit]

pops : The error number is DRIVER_IRQL_NOT_LESS_OR_EQUAL (0x000000D etc etc)

If you need the entire number, I'll have to let it Blue Screena gain and post it for you.

I do know that the Driver IRQL message with the 0x00000000D number means that it's usually a driver that is using improper addresses.

Irene : Yes, I came across both those pages. The funny thing is, the runscanner page suddenly changed. The first time I searched for gt72ubus.sys, that runscanner page said that it was a trusty file. A few days later, it became like that, saying that it might not be a digitally signed file.

Pat : Windows XP Service pack 3, with all the latest updates. I have the latest drivers for that device (drivers released in February of '08.) I even tried with the older drivers.

And if my system is free of malware... Well, like I said, scans with Bitdefender, Avast, Clamwin, Ad-Aware and Spybot found nothing. But I still have to do Hijack This.

[Closertohabbit]

Hijackthis gives the following...

Logfile of HijackThis v1.99.1

Scan saved at 1:05:13 PM, on 6/9/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\wltrysvc.exe

C:\WINDOWS\System32\bcmwltry.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\WLTRAY.exe

C:\WINDOWS\system32\Rundll32.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Softwin\BitDefender10\bdmcon.exe

C:\Program Files\Softwin\BitDefender10\bdagent.exe

C:\WINDOWS\system32\keyhook.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Option\GlobeTrotter Connect\GlobeTrotter Connect.exe

C:\Acer\eManager\anbmServ.exe

C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe

C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe

C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe

C:\Program Files\Softwin\BitDefender10\vsserv.exe

C:\WINDOWS\System32\svchost.exe

D:\Utilities\ClamWinPortable\ClamWinPortable.exe

D:\Utilities\ClamWinPortable\App\clamwin\bin\ClamWin.exe

D:\Utilities\ClamWinPortable\App\clamwin\bin\clamscan.exe

D:\Utilities\Malware\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [bDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"

O4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Global Startup: GlobeTrotter Connect.lnk = C:\Program Files\Option\GlobeTrotter Connect\GlobeTrotter Connect.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O11 - Options group: [iNTERNATIONAL] International*

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe

O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)

O23 - Service: GtDetectSc - OptionNV - C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe

O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)

O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)

O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

[ɹəuəllıʍ ʇɐb]

We do not have the personally anymore to do HJT analysis, I'm sorry. You will have to do this on another place. If you do, please use the latest version of HJT.

Now regarding your error code, you say you have

DRIVER_IRQL_NOT_LESS_OR_EQUAL (0x000000D etc etc)

That cannot quite be true; it is either

• 0x0000000A: IRQL_NOT_LESS_OR_EQUAL
  or
  
• 0x0000000D: MUTEX_LEVEL_NUMBER_VIOLATION
  

[Closertohabbit]

Yeah, should have been a bit more precise with the stop message..

DRIVER_IRQL_NOT_LESS_OR_EQUAL

*** STOP : 0x000000D1 (0x00000000, 0x00000002, 0x00000000, 0xF1C080DC)

*** gt72ubus.sys - Address F1C080DC base at F1BFF000, Datestamp 470b6bab

[Irene]

THIS looks as if it might deal with your problem. :)

[Closertohabbit]

Thank you Irene :)

I'm going to try that. I have nothing to lose at this point.

Only thing is, with me, the Error doesn't happen when I try to shut down, just when the modem is connected. I might be surfing, the laptop might be idle...doesn't matter, it will eventually get the BSOD.

But thanks again, I'll try that and see if it helps

[Irene]

To be on the safe side, take a backup of your PC as it is.

Alternatively, create a restore point.

[Closertohabbit]

after some more searching...I found the Windows Xp (KB 916595)

"On a Microsoft Windows XP-based computer that is using certain network adapter drivers and certain host firewall software, you may receive a Stop 0xD1 error message that resembles the following

STOP 0x000000D1(parameter1, parameter2, parameter3, parameter4)

DRIVER_IRQL_NOT_LESS_OR_EQUAL

HTTP.SYS"

I'm going to give that fix a shot first...

[Closertohabbit]

Nevemind...

Since I have SP3, it tells me there's no reason to install the update. Sigh.....

[ɹəuəllıʍ ʇɐb]

THIS looks as if it might deal with your problem. :)

"THIS" seems to have been fixed in XP-SP1.

Have a look at the list of articles under 0x000000D1 at http://aumha.org/a/stop.htm