Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD: IRQL_GT_ZERO_AT_SYSTEM_SERVICE (0x4A)

28 Jul 2013   #1
Lebon14

Windows 7 Home Premium x64 SP1
 
 
BSOD: IRQL_GT_ZERO_AT_SYSTEM_SERVICE (0x4A)

Hey guys.
So, starting last night, I started to get some BSODs with this error:
IRQL_GT_ZERO_AT_SYSTEM_SERVICE

The first of the two BSOD didn't dump correctly because the dumping was set on a drive that didn't exist. I fixed that. The second one around, I was able to retrieve the minidump.

I did a bit by myself. Using BlueScreenView, I saw those two problematic files:
cdrom.sys
ntoskrnl.exe

So, first things first, I did a SFC /scannow which returned no errors
After, I did a chkdsk c: /f and this is the log as shown in the event viewer:

Code:
Une vérification de disque a été planifiée.
Windows va maintenant vérifier le disque.                

CHKDSK est en train de vérifier les fichiers (étape 1 sur 3)...
Nettoyage en cours des balises d’instance pour le fichier 0x23216.
Nettoyage en cours des balises d’instance pour le fichier 0x32fae.
  253184 enregistrements de fichier traités.                              La vérification des fichiers est terminée.
  629 enregistrements de grand fichier traités.                          0 enregistrements de fichier incorrect traités.                      0 enregistrements EA traités.                                        82 enregistrements d’analyse traités.                               CHKDSK est en train de vérifier les index (étape 2 sur 3)...
  327930 entrées d’index traitées.                                         La vérification des index est terminée.
  0 fichiers non indexés analysés.                                      0 fichiers non indéxés récupérés.                                       CHKDSK est en train de vérifier les descripteurs de sécurité (étape 3 sur 3)
  253184 SD/SID de fichiers traités.                                         Nettoyage en cours de 958 entrées d’index inutilisées à partir de l’index $SII
du fichier 0x9.
Nettoyage en cours de 958 entrées d’index inutilisées à partir de l’index $SDH
du fichier 0x9.
Nettoyage en cours de 958 descripteurs de sécurité non utilisés.
CHKDSK compacte le flux de descripteur de sécurité
  37374 fichiers de données traités.                                     CHKDSK vérifie le journal USN...
  35881696 octets USN traités.                                                Vérification du journal USN terminée.
CHKDSK a découvert de l’espace libre marqué alloué dans la
bitmap de la table de fichiers maîtres (MFT).
Correction des erreurs dans le carte du volume.
Windows a effectué des corrections sur le système de fichiers.

  87915519 Ko d’espace disque au total.
  63149764 Ko dans 195734 fichiers.
    111540 Ko dans 37377 index.
         0 Ko dans des secteurs défectueux.
    358191 Ko utilisés par le système.
     65536 Ko occupés par le fichier journal.
  24296024 Ko disponibles sur le disque.

      4096 octets dans chaque unité d’allocation.
  21978879 unités d’allocation au total sur le disque.
   6074006 unités d’allocation disponibles sur le disque.

Informations internes :
00 dd 03 00 9c 8e 03 00 e0 77 06 00 00 00 00 00  .........w......
6e 0c 00 00 52 00 00 00 00 00 00 00 00 00 00 00  n...R...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows a terminé la vérification de votre disque.
Veuillez patienter pendant le redémarrage de votre ordinateur.
So, yeah, I've attached everything below using the SF Analyzing tool.

It seems to be random. If I have another BSOD of the same, I'll be sure to post the minidump. Also, my PC has been trouble free for over a year.

So, hum, help?


My System SpecsSystem Spec
.
28 Jul 2013   #2
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Hello Lebon14.

The BSOD is caused by bdfwfpf.sys (c:\program files\common files\bitdefender\bitdefender firewall\bdfwfpf.sys)
Code:
fffff880`09aff978  fffff880`00dd6a9aUnable to load image bdfwfpf.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for bdfwfpf.sys
*** ERROR: Module load completed but symbols could not be loaded for bdfwfpf.sys
 bdfwfpf+0xca9a
Description here: Driver Reference Table - bdfwfpf.sys

I would suggest you to uninstall BitDefender using Uninstall Bitdefender , following the method described in Support
Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.
  1. Click on the Start button
  2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
  3. Select the “Startup” tab.
  4. Deselect all items other than the antivirus.
  5. Apply > OK
  6. Accept then restart.
Then, Let us know how it is running. It appears that there might be some display related issue, but the main issue is to be removed at first.
______________________________________________________________________
BSOD ANALYSIS:
Code:
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {775e138a, 2, 0, fffff88009affca0}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

7: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 00000000775e138a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff88009affca0, 0

Debugging Details:
------------------


PROCESS_NAME:  vsserv.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+0
00000000`775e138a c3              ret

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002e931a9 to fffff80002e93c00

STACK_TEXT:  
fffff880`09affa68 fffff800`02e931a9 : 00000000`0000004a 00000000`775e138a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09affa70 fffff800`02e930e0 : 00000000`00000844 fffff880`09affca0 00000000`00000000 fffff800`0317ef33 : nt!KiBugCheckDispatch+0x69
fffff880`09affbb0 00000000`775e138a : 000007fe`fd756cf6 00000000`00000000 00000000`1f0183c8 00000000`2a574950 : nt!KiSystemServiceExit+0x245
00000000`1fd3fcc8 000007fe`fd756cf6 : 00000000`00000000 00000000`1f0183c8 00000000`2a574950 000007fe`fd7310dc : 0x775e138a
00000000`1fd3fcd0 00000000`00000000 : 00000000`1f0183c8 00000000`2a574950 000007fe`fd7310dc 00000000`1bfef0a0 : 0x000007fe`fd756cf6


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`02e930e0 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------
My System SpecsSystem Spec
28 Jul 2013   #3
Lebon14

Windows 7 Home Premium x64 SP1
 
 

Bitdefender, eh. That was my first thought when I searched about the BSOD except that the faulty file was "vsserve.exe" and not "bdfwfpf.sys".

I'm going to forward this to the bitdefender forums to try to find a solution. I don't want to waste the subscription. Funny thing is that I've been running the AV with no problems for two months. If I am not able to figure out the problem with the bitdefender team, I'll gladly give the Bitdefender the boot and hopefully, someday when I'll be able to pay, go back to NOD32.

I'll give you further news on that. And thanks for the analysis, that'll be helpful.
My System SpecsSystem Spec
.

29 Jul 2013   #4
Lebon14

Windows 7 Home Premium x64 SP1
 
 

UPDATE
I didn't receive another BSOD yet.
I scanned my PC with MBAM, only a prtially downloaded PUP (name.exe.part) was detected.
BitDefender forums didn't give a single f* about my BSOD problem.

If this BSOD comes back one more time, I'll give BitDefender the boot.

P.S This is my 1337 post! YAY!
My System SpecsSystem Spec
Reply

 BSOD: IRQL_GT_ZERO_AT_SYSTEM_SERVICE (0x4A)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
BSOD with different errors like 0x1E; 0x3B; 0x4A; 0xD1; 0x7E; 0x0A
Hi I've problem with Win 7 Ultimate 64 bit. I have got a lot of BSOD every day but each time with a different errors like in the thread title. I tried to repair my pc and registry with CCleaner, Uniblue's Powersuite, WinZip System Utilities Suite and Enigma Software Group's RegHunter and...
BSOD Help and Support
Bsod (irql_gt_zero_at_system_service )
Hi My desktop running Windows 7 64bits with SP1 crashed 3 times with a beautiful blue screenwith the message IRQL_GT_ZERO_AT_SYSTEM_SERVICE. You will find enclosed the messages given by whocrashed. Any information ? Thanks by advance ...
BSOD Help and Support
Bsod IRQL_GT_ZERO_AT_SYSTEM_SERVICE
Hey guys so i had a BSOD a couple days ago and then i just experienced 1 about 10 minutes ago (the first one happened while i was sleeping and windows had said it recovered from a crash) so i don't know the Name of that BSOD but i have a picture of this 1 ...
BSOD Help and Support
BSOD: irql_gt_zero_at_system_service
Hello Can you help me what is causing this randomly ocurring BSOD? I don't know how I can provide crash dumps. In the event viewer I can see the critical incidents. An example below: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped...
BSOD Help and Support
Bsod: Irql_gt_zero_at_system_service
Hey all, Not sure what started it but i've gotten 3 in 48hrs now, usually a few hours after starting to browse or work. Recent stuff: a couple days of several windows updates and MS word updates, prior to that installed photoshop CS6, prior to that(at least 3 weeks ago) installed my new...
BSOD Help and Support
Bsod - irql_gt_zero_at_system_service
I've been getting BSOD's while watching online streams, specifically from veetle.com. They are all IRQL_GT_ZERO_AT_SYSTEM_SERVICE's. Attached are my crash dumps. Please help... thanks in advance! Edit: I would like to add that I haven't had any problems with this configuration until...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:31.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App