Solved BSOD at random esp. during startup, error0x0000004a

[gothm]

Hi everyone,
I'm new to this forum and joined only so I could get help with this god forsaken BSOD that i've been getting for over 2 months! I have tried to reinstall windows from a backup I made before the BSOD started and that didn't help, I tried to open the .dmp files with the windbg tool and didn't get to far cos I'm sort of a nube and don't know how to use it properly. All i did was get a "ntoskrnl.exe" thing as the likely cause so I googled it with no luck. Then I also tried looking in the windows event viewer and no luck there either as I'm not sure what I should be looking for, it's kind of funny that I know i've had like 3 bsod in 1 day and the event log thinks there were "0 critical errors"!

I usually get the bsod when I first boot up into Windows, then with in like 30sec or so. Sometimes It can take about 4 attempts to just to boot into Windows! Other times it will happen after the PC has been running for like 3-6 hours while browsing the web or even while gaming. I have gone 8 days without incident and other times I get 4 BSOD in 1 day!

So I ask you guys for help.

Thanks in advance
Gothm

 

[koolkat77]

[FONT=Lucida Console]Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\YUSRA\Downloads\Compressed\GAUTAMSGORAYA-Thu_04_06_2015_103505_81\060415-13400-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18798.amd64fre.win7sp1_gdr.150316-1654
Machine Name:
Kernel base = 0xfffff800`03416000 PsLoadedModuleList = 0xfffff800`0365b890
Debug session time: Thu Jun  4 06:03:08.648 2015 (UTC + 6:00)
System Uptime: 0 days 0:00:29.444
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
...........................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {77c0dc4a, 2, 0, fffff880095d1b60}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 0000000077c0dc4a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff880095d1b60, 0

Debugging Details:
------------------


PROCESS_NAME:  vsserv.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+32ed210
00000000`77c0dc4a ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

LAST_CONTROL_TRANSFER:  from fffff80003487fe9 to fffff80003488a40

STACK_TEXT:  
fffff880`095d1928 fffff800`03487fe9 : 00000000`0000004a 00000000`77c0dc4a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`095d1930 fffff800`03487f20 : 00000000`00000d60 fffff880`095d1b60 00000000`00000000 fffff800`037726db : nt!KiBugCheckDispatch+0x69
fffff880`095d1a70 00000000`77c0dc4a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`25f4fc48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c0dc4a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`03487f20 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5507a73c

IMAGE_VERSION:  6.1.7601.18798

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_raised_irql_fault_vsserv.exe_nt!kisystemserviceexit+245

FAILURE_ID_HASH:  {7e9f2f5a-c8f7-350e-d3b5-490f9ba5e969}

Followup: MachineOwner
---------[/FONT]

Remove BitDefender antivirus and replace with MSE as a test.

Microsoft Security Essentials is recommended from a strict BSOD perspective, compatibility & stability compared to other internet security software. Malwarebytes is a great combo to MSE. They are free and lightweight.

Also uninstall your existing Antivirus software before you install MSE.

http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

   Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

 Clean boot

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

• How to Change, Add, or Remove Startup Programs in Windows 7

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your Hard Drive for file system errors and bad sectors on it.

 Hard Drive Diagnostics

• Double click and open my computer.
• Right click on desired drive and hit properties.
• Click on tools tab and Check now.

Read complete instructions on the tutorial: http://www.sevenforums.com/tutorials/433-disk-check.html

Other Tests:

 

• Upload a screenshot of your hard disk using Crystal Disk Info.
• Make a hard drive test from the hard drive manufacturers website.
• Test your Hard Drive with SeaTools.

 

[gothm]

I have uninstalled Bitdefender and now I'm gonna be using Security essentials like you suggested. I'm pretty sure that the blue screens started back when i was still using AVG though. Oh well can't hurt I suppose, I'll try what you suggested and report back in a few days. BTW thanks for such a quick response.

 

[gothm]

Hi koolkat77,
I did what you suggested and switched to MS Security essentials and so far so good...It's been 4 days n I havnt had a BOSD yet. I have bn able to restart my system without any issues, I think this may have solved it but I'll wait another week before marking this as solved, as before I had gone for 8 day without a BOSD...I'll update you in a week...Thanks for the help...

 

[gothm]

Hi koolkat77,
I think the BSOD issue is sorted, it's been 12 days and I haven't had 1 since it switched to MS SE...thanks for your help...