Bsod (irql_gt_zero_at_system_service )

[paris75015]

Hi

My desktop running Windows 7 64bits with SP1 crashed 3 times with a beautiful blue screenwith the message IRQL_GT_ZERO_AT_SYSTEM_SERVICE. You will find enclosed the messages given by whocrashed.
Any information ?

Thanks by advance

-------------------------------------------------------------------------------- 
Crash Dump Analysis 
-------------------------------------------------------------------------------- 
 
Crash dump directory: C:\Windows\Minidump 
 
Crash dumps are enabled on your computer. 
 
On Sat 23/08/2014 05:42:16 GMT your computer crashed 
crash dump file: C:\Windows\Minidump\082314-77719-01.dmp 
This was probably caused by the following module: ntoskrnl.exe (nt+0x75BC0) 
Bugcheck code: 0x4A (0x76D5132A, 0x2, 0x0, 0xFFFFF88005D51B60) 
Error: IRQL_GT_ZERO_AT_SYSTEM_SERVICE 
file path: C:\Windows\system32\ntoskrnl.exe 
product: Microsoft® Windows® Operating System 
company: Microsoft Corporation 
description: NT Kernel & System 
Bug check description: This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time. 
 
 
 
On Fri 22/08/2014 13:51:11 GMT your computer crashed 
crash dump file: C:\Windows\Minidump\082214-57642-01.dmp 
This was probably caused by the following module: ntoskrnl.exe (nt+0x75BC0) 
Bugcheck code: 0x4A (0x7729132A, 0x2, 0x0, 0xFFFFF88009C58B60) 
Error: IRQL_GT_ZERO_AT_SYSTEM_SERVICE 
file path: C:\Windows\system32\ntoskrnl.exe 
product: Microsoft® Windows® Operating System 
company: Microsoft Corporation 
description: NT Kernel & System 
Bug check description: This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time. 
 
 
 
On Thu 21/08/2014 23:39:17 GMT your computer crashed 
crash dump file: C:\Windows\Minidump\082214-29359-01.dmp 
This was probably caused by the following module: ntoskrnl.exe (nt+0x75BC0) 
Bugcheck code: 0x4A (0x7729132A, 0x2, 0x0, 0xFFFFF8800CFCBB60) 
Error: IRQL_GT_ZERO_AT_SYSTEM_SERVICE 
file path: C:\Windows\system32\ntoskrnl.exe 
product: Microsoft® Windows® Operating System 
company: Microsoft Corporation 
description: NT Kernel & System 
Bug check description: This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time. 
 
 
 
 
-------------------------------------------------------------------------------- 
Conclusion 
--------------------------------------------------------------------------------

3 crash dumps have been found and analyzed. No offending third party drivers have been found. Consider configuring your system to produce a full memory dump for better analysis.

 

[paris75015]

with log files attached

 

[koolkat77]

Welcome.

Perform a Clean boot:

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

• How to Change, Add, or Remove Startup Programs in Windows 7

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Please remove McAfee and Bit Defender and use Microsoft Security Essentials.

Microsoft Security Essentials is recommended from a strict BSOD perspective, compatibility & stability
compared to other antivirus or internet security software. It is free and lightweight:-

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes: Removes malware including viruses, spyware, worms and trojans, plus it protects your computer
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

   Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Make scans with the following:

Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

ESET online scanner:

• Free Online Virus Scanner | ESET

cdrbsdrv.SYS Mon Feb 20 16:15:35 2006 (43F996C7)
CD-ROM Filter Driver for B's Recorder GOLD by B.H.A. Corporation
Driver Reference Table - cdrbsdrv.SYS

pcouffin.sys Tue Dec 5 20:39:30 2006 (457584A2)
low level access layer for CD devices (A part of many different CD/DVD burning programs)
Driver Reference Table - pcouffin.sys

TVALZFL.sys Fri Jun 19 16:05:44 2009 (4A3B62F8)
TVALZ Filter Driver - Toshiba
Driver Reference Table - TVALZFL.sys

Sometimes drivers remain, not completely uninstalled. Follow this tutorial for complete removal of drivers of the particular program: How to Clean Left Over Driver Files with Driver Sweeper

• http://www.sevenforums.com/tutorials/83814-drivers-clean-left-over-files-after-uninstalling.html

[FONT="Lucida Console"]Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Debug session time: Sat Aug 23 12:50:28.582 2014 (UTC + 6:00)
System Uptime: 0 days 1:07:22.049
BugCheck 4A, {772d132a, 2, 0, fffff8800de7cb60}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )
BUGCHECK_STR:  RAISED_IRQL_FAULT
PROCESS_NAME:  vsserv.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Debug session time: Sat Aug 23 11:42:16.704 2014 (UTC + 6:00)
System Uptime: 0 days 0:12:46.781
BugCheck 4A, {76d5132a, 2, 0, fffff88005d51b60}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )
BUGCHECK_STR:  RAISED_IRQL_FAULT
PROCESS_NAME:  vsserv.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Debug session time: Fri Aug 22 19:51:11.194 2014 (UTC + 6:00)
System Uptime: 0 days 7:03:56.661
BugCheck 4A, {7729132a, 2, 0, fffff88009c58b60}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )
BUGCHECK_STR:  RAISED_IRQL_FAULT
PROCESS_NAME:  vsserv.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Debug session time: Fri Aug 22 05:39:17.383 2014 (UTC + 6:00)
System Uptime: 0 days 0:47:44.460
BugCheck 4A, {7729132a, 2, 0, fffff8800cfcbb60}
Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )
BUGCHECK_STR:  RAISED_IRQL_FAULT
PROCESS_NAME:  vsserv.exe
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

[/FONT]

Check for heating issues using Speccy or HWMonitor. Upload a screen shot with either of the tools:

• Speccy - System Information - Free Download
• HWMonitor CPUID - System & hardware benchmark, monitoring, reporting
• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html