know anything about GF0012.sys?

[aibo]

Hi,

when I use my pc (do anything; play, surf internet etc.) I sometimes get "blue screen of death" that says DRIVER_IRQL_NOT_LESS_OR_EQUAL something's wrong with my hardware or software. The file GF0012.sys is mentioned. Maybe someone know anything about it, maybe its related with my graphics card or other pc part. I tryed formating, reinstalled windows, updated drivers etc. nothing helped. didn't find anything about GF0012.sys on internet

my pc:

mb: ASUS M2N4-SLI
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4000+, MMX, 3DNow (2 CPUs), ~2.0GHz
Memory: 1024MB RAM
Card name: NVIDIA GeForce 7900 GS 512 MB Integrated RAMDAC
Sound Devices: Realtek AC97 Audio
Cd-drive: Optiarc DVD RW AD-7173A
Device Name: Logic3 PC USB Game Pad

tnx 4 any help =]

 

[ski]

Please post the entire text of the error message. Thanks.

 

[cjelec]

As soon as I read "GF0012" I thought of GeForce...

Try finding out if there is an update for the nVidia drivers, and install it.

http://www.nvidia.com/Download/index.aspx?lang=en-us

As ski said, full error message would be useful.

 

[aibo]

I am thinking about GeForce also =]
I tryed new drivers from NVIDIA, didn't help.
as soon as I get the BSOD I will write it down and post it here

 

[BadBigBen]

I would suggest you do a HiJackThis Scan and Log and paste it here for our screening...

http://www.spywareinfo.com/~merijn/programs.php

or

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[aibo]

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 13:52:11, on 2007.10.01
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\utorrent.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\Desktop\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Sort Start Menu] "sortstart.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\WINDOWS\utorrent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{E33AB631-C37B-4308-82AC-06A3CAB7C4E6}: NameServer = 77.90.89.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

--
End of file - 4868 bytes

 

[aibo]

error looks like this one

http://www.teamapproach.ca/trouble/images/blueScreenXP.bmp

the difference is:

***STOP: 0x000000D1(0xF0D2EE15,0x00000002,0x00000000,0xF792BF1C)

***GF0012.sys - Address F792BF1C base at F792B000, Datestamp 446d5489

 

[ski]

Search your HD for the GF0012.sys file, and check its 'Properties' for the 'Company Name'. Hopefully, that should tell you which hardware device it belongs to. Then, you should be able to determine if you loaded the drivers for that device from a disk that was supplied with the device, or from a driver package that you D/L from the Internet. If it's the latter, then the D/L driver file may be infected with a virus.

 

[aibo]

I know where the file is =]
C:\WINDOWS\system32\drivers\GF0012.sys

there is nothing told about it on "Properties", I checked it earlyer
now I've opened it with notepad and found this line in it:
F:\fullshare\SourceCode\VID_0E8F&PID_0012\DualVibrationWithMacro\GAFilter\objfre_wxp_x86\i386\GF0012.pdb

so I think maybe it's something wrong with my Logic3 PC USB Game Pad drivers.

 

[aibo]

I've found more similar files:

GF0012.Inf
GF0012.Inf
gf0012.PNF
GF0012.sys
GF0012.Inf
GF0012.SYS

info from GF0012.Inf :

; GF0012.Inf
;
; Installation file (.inf) for the HIDUSB Lower Filter Driver.
;
; (c) Copyright 2005 GASIA International Ltd.
;

[Version]
Signature="$CHICAGO$"
Provider=%GASIA%
ClassGUID={745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Class=HIDClass
;CatalogFile=GF0012.cat
DriverVer=07/11/2005

[DestinationDirs]
DefaultDestDir = 12

;
; Driver information
;

[Manufacturer]
%GASIA% = GASIA.Mfg

[GASIA.Mfg]
%GASIA.DeviceDesc1% = GF0012, USB\VID_0E8F&PID_0012


;
; General installation section for win9x
;
[GF0012]
Include=joystick.inf
Needs=HIDGameDevice
CopyFiles = GF0012_CopyFiles
AddReg = GF0012_AddReg

[GF0012.HW]
AddReg = GF0012_AddReg.HW

;
; Registry sections
[GF0012_AddReg]

[GF0012_AddReg.HW]
HKR,,"LowerFilters",0x00010008,"GF0012.sys"

;
; General installation section for NT base system.
;
[GF0012.NT]
CopyFiles=GF0012_CopyFiles
DriverVer=07/11/2005,0.0.10
[GF0012.NT.Services]
AddService = GF0012,0x00000002,GF0012_Service_Inst
AddService = HidUsb,0x00000002,HID_Service_Inst
[GF0012.NT.HW]
AddReg=GF0012.AddReg.NT.HW

[GF0012.AddReg.NT.HW]
HKR,,"LowerFilters",0x00010000,"GF0012"

;
; File sections
;
[GF0012_CopyFiles]
GF0012.sys
__________________________________________________________

so, as I see it's my Logic3 gamepad doing those bad things. am I wright?

 

[aibo]

;
; Service Installation
;
[GF0012_Service_Inst]
DisplayName = %GF0012.SvcDesc%
ServiceType = 1 ; SERVICE_KERNEL_DRIVER
StartType = 2 ; SERVICE_AUTO_START
ErrorControl = 1 ; SERVICE_ERROR_NORMAL
ServiceBinary = %12%\GF0012.sys
LoadOrderGroup = extended base

[HID_Service_Inst]
DisplayName = %HID.SvcDesc%
ServiceType = 1
StartType = 2
ErrorControl = 0
ServiceBinary = %12%\hidusb.sys
LoadOrderGroup = extended base

;
; Source file information
;

[SourceDisksNames.x86]
1 = %DiskId1%,,,""

[SourceDisksFiles]
; Files for disk GASIA International Ltd. Installation Disk #1 (HIDClass)
GF0012.sys = 1,,


[Strings]

HID.SvcDesc = "Microsoft HID Class Driver"

;
; Non-Localizable Strings
;

REG_SZ = 0x00000000
REG_MULTI_SZ = 0x00010000
REG_EXPAND_SZ = 0x00020000
REG_BINARY = 0x00000001
REG_DWORD = 0x00010001
SERVICEROOT = "System\CurrentControlSet\Services"

;
; Localizable Strings
;

DiskId1 = "GASIA Filter Driver Installation Disk #1"
GASIA = "GASIA Electronics Co., Ltd"
GF0012.SvcDesc="GASIA Filter Driver"
GASIA.DeviceDesc1 = "Logic3 PC USB Game Pad"

more info from GF0012.Inf, somehow I didn't paste it all =]

 

[ski]

Nice detective work. Your gamepad, or its driver, definitely appears to be the culprit.

If the gamepad's driver came from the Internet, then do a virus search. If any viruses are found, then see if the system still has the problem after getting rid of them. If the problem is gone, then you should be good to go.

If no viruses are found, or if the gamepad's driver was installed from a disk supplied with the gamepad, then uninstall the gamepad's driver from 'Add/Remove Programs', and reinstall them.
If the problem still happens, then uninstall the gamepad's driver again, disconnect the gamepad(turn off the computer if it's not connected to a USB port). If that solves the problem, then the gamepad may be bad.

 

[aibo]

Nice detective work.
=D
the drive was installed from a disk supplied with the gamepad, anyway, I'll get rid of that gamepad (and drivers also)

tnx 4 helping solve the problem

 

[BadBigBen]

Good work...

LogFile is CLEAN... so no badies there...

greets out to Lithuania...


Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[ski]

You're welcome.