"Beginning Dump of Physical Memory"

[FightingAngel]

Each time I restart my pc, a blue screen comes on with :
" BEGINNNING DUMP OF PHYSICAL MEMORY CONTACT YOUR ADMINISTRATOR" then it freezes up,consequently I have to use the reset button to reboot it.Once its rebooted there's a black dialog box that pops up with:C:\WINNT\System32\syscfg32.exe and I also have to reset the desktop. So
With that said (I dont know if its a coincidence or not) however when I downloaded the "debug" from Microsoft this ANNOYING problem started!!How can I get rid of that HIGHLY ANNOYING problem and at the same time GET RID of the DEBUG program which in itself ,has only caused me pain,suffering and FRUSTRATIONS,since I have it on (I tried to uninstalled it, however it doesn't shop up in the add/remove program&quot??

PLS someone HHHEEELLPPPPP !!!

FightingAngel

 

[jrbarnett]

Can you get into the machine in Safe mode?

John

 

[FightingAngel]

Hi John..yes I can!!

 

[jrbarnett]

SYSCFG.EXE is not part of Windows; it is part of the Lolol worm that transmits itself via the Kazaa file sharing network (amongst others).

For removal instructions, take a look at

http://www.viruslist.com/eng/viruslist.html?id=58453

If you can't get them on the net, put another post up here and I will post them in the thread.

I would also ensure you have a good up to date virus checker (if you don't have one, AVG from

http://www.grisoft.com

is free).

John

 

[ntwrkadmn]

In safe mode did you go into device manager and see if there's a driver failing (red X through it) - if so disable it and reboot. You can reinstall the driver later. Also, if you don't see a program in Add/Remove programs it's probably has a uninstaller file located in Start/Programs/then locate the program and look for the uninstaller there. Good luck.

 

[ntwrkadmn]

One other thing, in safe mode, go to the cmd prompt and go down the path C:WINNT\System32\syscfg32.exe and delete the file syscfg32.exe. You'll have to do more work later repairiing the registry (check here

http://www.f-secure.com/v-descs/lolol.shtml

) but this virus shouldn't cause the copmuter to blue screen - that's usually a corrupt driver.

 

[joryweber]

I am having the same problem with the driver_IRQL_not_less_or_equal BEGINNNING DUMP OF PHYSICAL MEMORY. It happens when I try to start any program. The system runs maybe 1 minute and the goes to blue screen with above message. I re-installed Winfows 2000 Pro and still had error. I can hardly keep it running long enough to check anything out.
What should I do?
I have read heat sink fan - is that possible.
How do you flash the BIOS?

Help!!!

 

[ntwrkadmn]

Did you check driver status in safe mode (if not see what I wrote ealrier)? Should be able to download the latest version of the BOIS off the manufactures website (ie - Dell, IBM, etc.). Usually you download it to desktop, click on the file and it will ask to install on a floppy, the floppy is bootable, put it in the drive, make sure your setup to boot from floppy and the BIOS should update automatically then restart. Have you purchased any new peripheals lately, there new drivers mayn not be compatible with your OS - if so unhook them and reboot.

 

[FightingAngel]

First I want to thank Mike and ntwrkadmn for answering my post !!

Hi ntwrkadmn ,I tried to check for a driver failing,in safe mode( controlPanel/Hardware/Device manager )..however ,and this is too weird..the device manager WOULD NOT open, when I clicked on it !!??? what should I do ???

I also found the file : syscfg32.exe, however I DID NOT delete it as yet.U mentionned that "I would have to do more work later repairing the registry". Now what kind of repair does that imply and why??? pls define repair for me!!

Thanks for your patience and your answers(they are truely appreciated)!!


Angel

 

[FightingAngel]

Someone please??

 

[jrbarnett]

Basically repairing the registry is removing references to syscfg32.exe so it won't load at startup. The instructions are in the link on my post of 27 May.

John

 

[FightingAngel]

Hiya Mike..I downloaded the anti virus program you suggested..Ohh M Gawd it detected 11 infected files !!I was shocked to say the least!!

Anyhow here are the Results of the Complete Test:

Date and time 2003-05-30 15:09:17 :

Testing C:\
C:\WINNT\SYSTEM32\IRAQ_OIL.EXE repaired

C:\WINNT\SYSTEM32\RATSOU.EXE repaired

C:\WINNT\SYSTEM32\NEWEXP~1.EXE repaired

C:\WINNT\SYSTEM32\RUNDLL33.EXE:\iiscache.dll Virus identified Worm/Randon still on the disk

C:\WINNT\SYSTEM32\RUNDLL33.EXE:\w32drive.bat Could be infected BAT/Generic still on the disk

C:\WINNT\SYSTEM32\RUNDLL33.EXE:\win32.exe Trojan horse HideWindow still on the disk

C:\WINNT\SYSTEM32\IISCAC~1.DLL repaired

C:\WINNT\SYSTEM32\W32DRI~1.BAT Could be infected BAT/Generic

C:\WINNT\SYSTEM32\WEB.SWF repaired

C:\WINNT\SYSTEM32\WIN32.EXE Trojan horse HideWindow

C:\Documents and Settings\Administratrice.ADMINISTRATOR\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\Administratrice.ADMINISTRATOR\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\Administratrice.ADMINISTRATOR\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\Administratrice.ADMINISTRATOR\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!

Testing D:Testing E:\
E:\Transfert\BLAGUES ET CIE\BLAGUES ET CIE\CUTEWA~1.EXE repaired

Test finished, duration 00:13:20.3 s
22018 objects tested, 11 found infected



As u can see some were removed by healing OK and three are still infected on the drive.Can I manually remove the files that are still infected without creating a major disaster within the system? BTW I rebooted my pc and still have the same problem.

Thank you!

Angel