BSOD while browsing the web, IRQL_GT_Zero_At_System_Service

[Leelatt]

Hey all, hoping some of you here will be able to help me, google searches for this BSOD keep coming back saying bitdefender is the culprit but I don't have bitdefender installed.

Attached is the debug.zip as the instructions stated.


Thanks in advance for any help you all can provide!

 

[koolkat77]

Welcome to the forum.

[FONT=Lucida Console]Microsoft (R) Windows Debugger Version 6.3.9600.16384 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\YUSRA\Downloads\debug_LLATT104908-01_17_2015_163202_71\011715-23696-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18700.amd64fre.win7sp1_gdr.141211-1742
Machine Name:
Kernel base = 0xfffff800`0344b000 PsLoadedModuleList = 0xfffff800`0368e890
Debug session time: Sun Jan 18 02:08:28.584 2015 (UTC + 6:00)
System Uptime: 0 days 0:08:42.410
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
........................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {74942e09, 2, 0, fffff880072bcca0}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 0000000074942e09, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff880072bcca0, 0

Debugging Details:
------------------


PROCESS_NAME:  AvastSvc.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+3d17bc474c59359
00000000`74942e09 c3              ret

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) x86fre

LAST_CONTROL_TRANSFER:  from fffff800034c1429 to fffff800034c1e80

STACK_TEXT:  
fffff880`072bca68 fffff800`034c1429 : 00000000`0000004a 00000000`74942e09 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`072bca70 fffff800`034c1360 : 00000000`00000004 e2a00000`a7f95867 00000000`74942450 00000980`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`072bcbb0 00000000`74942e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`0bbfeef8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x74942e09


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`034c1360 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  548a6e28

IMAGE_VERSION:  6.1.7601.18700

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_AvastSvc.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_AvastSvc.exe_nt!KiSystemServiceExit+245

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_raised_irql_fault_avastsvc.exe_nt!kisystemserviceexit+245

FAILURE_ID_HASH:  {eecb07f4-730f-e646-5522-64c95a26c0dd}

Followup: MachineOwner
---------
[/FONT]

 Clean boot

• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:

• How to Change, Add, or Remove Startup Programs in Windows 7

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your Hard Drive for file system errors and bad sectors on it.

 Hard Drive Diagnostics

• Double click and open my computer.
• Right click on desired drive and hit properties.
• Click on tools tab and Check now.

Read complete instructions on the tutorial: http://www.sevenforums.com/tutorials/433-disk-check.html

Other Tests:

 

• Upload a screenshot of your hard disk using Crystal Disk Info.
• Make a hard drive test from the hard drive manufacturers website.
• Test your Hard Drive with SeaTools.