none
Windows 7 64bit BSOD 0X4A IRQL_GT_ZERO_AT_SYSTEM_SERVICE

    Question

  • Hi all,

    I'm getting this BSOD alot and cant find the cause of it. Is there anybody who can help me find out the cause of the bluescreen?
    I have all minidump files on my skydrive. Below is what i could find out but from that i cant make out where i have to look to find the problem! I already checked all of my harddrives with Seatools no errors found and i also ran memory test to see if my memory would be failing but nothing there!

    https://skydrive.live.com/?cid=3CEB2D9AE0364E67&id=3CEB2D9AE0364E67%21121

    System Information (local)


    windows version: Windows 7 Service Pack 1, 6.1, build: 7601
    windows dir: C:\Windows
    CPU: GenuineIntel Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz Intel586, level: 6
    8 logical processors, active mask: 255
    RAM: 17162420224 total
    VM: 2147352576, free: 1948950528

    Crash Dump Analysis


    Crash dump directory: C:\Windows\Minidump

    Crash dumps are enabled on your computer.


    On Fri 7/09/2012 18:52:23 GMT your computer crashed
    crash dump file: C:\Windows\Minidump\090812-18657-01.dmp
    uptime: 05:58:07
    This was probably caused by the following module: ntoskrnl.exe (nt+0x7F1C0)
    Bugcheck code: 0x4A (0x770C138A, 0x2, 0x0, 0xFFFFF8800C889B60)
    Error: IRQL_GT_ZERO_AT_SYSTEM_SERVICE
    file path: C:\Windows\system32\ntoskrnl.exe
    product: Microsoft® Windows® Operating System
    company: Microsoft Corporation
    description: NT Kernel & System
    Bug check description: This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL.
    The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


    • Edited by ystrobbe Saturday, September 08, 2012 11:05 AM
    Saturday, September 08, 2012 11:03 AM

Answers

  • Hi,

     

    After checking the dump file, I found this error code 0x4A was received, you can refer to Bug Check 0x4A: IRQL_GT_ZERO_AT_SYSTEM_SERVICE. The process name is vsserv.exe, which is related to Bitdefender product.

     

    I suggest you update your Bitdefender program or uninstall it to check the result.

     

    Hope this helps.


    Vincent Wang

    TechNet Community Support

    • Proposed as answer by this is winner Tuesday, September 11, 2012 1:26 AM
    • Marked as answer by ystrobbe Wednesday, September 12, 2012 4:52 PM
    Monday, September 10, 2012 5:36 AM

All replies

  • I just found out how to open dumpfiles with windows debug tools and this what came out of it!

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 4A, {770c138a, 2, 0, fffff8800c889b60}

    Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
    Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
    Arguments:
    Arg1: 00000000770c138a, Address of system function (system call routine)
    Arg2: 0000000000000002, Current IRQL
    Arg3: 0000000000000000, 0
    Arg4: fffff8800c889b60, 0

    Debugging Details:
    ------------------


    PROCESS_NAME:  vsserv.exe

    BUGCHECK_STR:  RAISED_IRQL_FAULT

    FAULTING_IP:
    +3739316361303932
    00000000`770c138a ??              ???

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    CURRENT_IRQL:  2

    LAST_CONTROL_TRANSFER:  from fffff80002ed6769 to fffff80002ed71c0

    STACK_TEXT: 
    fffff880`0c889928 fffff800`02ed6769 : 00000000`0000004a 00000000`770c138a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`0c889930 fffff800`02ed66a0 : 00000000`00000dcc fffff880`0c889b60 00000000`00000000 fffff800`031bcc83 : nt!KiBugCheckDispatch+0x69
    fffff880`0c889a70 00000000`770c138a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
    00000000`1a96fce8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x770c138a


    STACK_COMMAND:  kb

    FOLLOWUP_IP:
    nt!KiSystemServiceExit+245
    fffff800`02ed66a0 4883ec50        sub     rsp,50h

    SYMBOL_STACK_INDEX:  2

    SYMBOL_NAME:  nt!KiSystemServiceExit+245

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME:  ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP:  4fa390f3

    FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

    BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

    Followup: MachineOwner
    ---------

    Saturday, September 08, 2012 8:26 PM
  • We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

    If you are overclocking STOP

    You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

    Please follow these instructions to collect data from the crashes and upload them here, to your Skydrive or a file sharing service like Rapidshare.

    http://www.sysnative.com/forums/showthread.php/68-Blue-Screen-of-Death-%28BSOD%29-Posting-Instructions-Windows-8-7-amp-Vista?p=303&viewfull=1#post303

    http://sysnative.com/0x8/BSOD_Windows7_Vista_v2.64_jcgriff2_.exe


    To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

    The procedure:

    * Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
    * Zip up the contents of that folder
    Please upload them to skydrive or a file sharing service and put a link to them in your next post.

    Please also go to start>search/run>cmd>msinfo32 and include it in the upload

    To ensure minidumps are enabled:

    * Go to Start, in the Search Box type: sysdm.cpl, press Enter.
    * Under the Advanced tab, click on the Startup and Recovery Settings... button.
    * Ensure that Automatically restart is unchecked.
    * Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
    * Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
    * OK your way out.
    * Reboot if changes have been made.


    http://www.sysnative.com/forums/showthread.php/325-BSODs-but-no-Dump-Files

    http://www.osronline.com/article.cfm?article=545

    Please also go to start>run>msinfo32 and save the results.  Upload it with the DMP files, thanks.



    MS-MVP 2010, 2011, 2012 Sysnative.com Team ZigZag

    Sunday, September 09, 2012 10:58 PM
  • Hi,

     

    After checking the dump file, I found this error code 0x4A was received, you can refer to Bug Check 0x4A: IRQL_GT_ZERO_AT_SYSTEM_SERVICE. The process name is vsserv.exe, which is related to Bitdefender product.

     

    I suggest you update your Bitdefender program or uninstall it to check the result.

     

    Hope this helps.


    Vincent Wang

    TechNet Community Support

    • Proposed as answer by this is winner Tuesday, September 11, 2012 1:26 AM
    • Marked as answer by ystrobbe Wednesday, September 12, 2012 4:52 PM
    Monday, September 10, 2012 5:36 AM
  • Hi,

    After checking the dump file, I found this error code 0x4A was received, you can refer to Bug Check 0x4A: IRQL_GT_ZERO_AT_SYSTEM_SERVICE. The process name is vsserv.exe, which is related to Bitdefender product.

    I suggest you update your Bitdefender program or uninstall it to check the result.

    Hope this helps.


    Vincent Wang

    TechNet Community Support


    Bitdefender was uptodate and the latest version 2012 Plus but it looks like that was indeed the problem. I uninstalled BitDefender for 2 days now and haven't got any BSOD untill now! To bad that the problem because i just bought it! Now up to the bitdefender support to report it and let them get a solution !!!


    • Edited by ystrobbe Monday, September 10, 2012 8:30 PM
    • Marked as answer by ystrobbe Monday, September 10, 2012 8:30 PM
    • Unmarked as answer by ystrobbe Tuesday, September 11, 2012 6:41 AM
    Monday, September 10, 2012 8:29 PM
  • My daughter's laptop is experiencing the same problem, and we use Bitdefender. I'd really like to know if Bitdefender is the cause!

    Rod

    22 hours 29 minutes ago