Win7 Pro x64 IRQL related BSOD
Hey,
I've been having a blue screen problem which lately has been related to IRQL. I have to dmp files uploaded to my skydrive. The first 6 digits refer to MMDDYY and the next 5 digits tend to be higher the later in the day the .dmp was created (exception is
14305 and 14398, where 14398 happened 6 minutes earlier). The blue screens have started occurring since January 31st, and seem to occur randomly.
Here's what WinDDK is saying for the latest dmp file (020212-17144-01.dmp)
*******************************************************************************
*
*
* Bugcheck Analysis *
*
*
*******************************************************************************
IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 000000007740164a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff880070e7ca0, 0
Debugging Details:
------------------
PROCESS_NAME: taskhost.exe
BUGCHECK_STR: RAISED_IRQL_FAULT
FAULTING_IP:
+6536306135303264
00000000`7740164a ?? ???
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80001ce31e9 to fffff80001ce3c40
STACK_TEXT:
fffff880`070e7a68 fffff800`01ce31e9 : 00000000`0000004a 00000000`7740164a 000000
00`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`070e7a70 fffff800`01ce3120 : 00000000`00000000 00000000`00000000 000000
00`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`070e7bb0 00000000`7740164a : 00000000`00000000 00000000`00000000 000000
00`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`027af3d8 00000000`00000000 : 00000000`00000000 00000000`00000000 000000
00`00000000 00000000`00000000 : 0x7740164a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiSystemServiceExit+245
fffff800`01ce3120 4883ec50 sub rsp,50h
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiSystemServiceExit+245
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
FAILURE_BUCKET_ID: X64_RAISED_IRQL_FAULT_taskhost.exe_nt!KiSystemServiceExit+24
5
BUCKET_ID: X64_RAISED_IRQL_FAULT_taskhost.exe_nt!KiSystemServiceExit+245
Followup: MachineOwner
---------
Thanks in advance
February 5th, 2012 12:28am
Edit: *I have the dmp files uploaded to my skydrive.
https://skydrive.live.com/?cid=180a771344995bc8#cid=180A771344995BC8&id=180A771344995BC8%21115
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2012 12:36am
*******************************************************************************
*
*
* Bugcheck Analysis *
*
*
*******************************************************************************
IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 000000007740164a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff880070e7ca0, 0
Debugging Details:
------------------
PROCESS_NAME: taskhost.exe
BUGCHECK_STR: RAISED_IRQL_FAULT
FAULTING_IP:
+6536306135303264
00000000`7740164a ?? ???
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80001ce31e9 to fffff80001ce3c40
STACK_TEXT:
fffff880`070e7a68 fffff800`01ce31e9 : 00000000`0000004a 00000000`7740164a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`070e7a70 fffff800`01ce3120 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`070e7bb0 00000000`7740164a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`027af3d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7740164a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiSystemServiceExit+245
fffff800`01ce3120 4883ec50 sub rsp,50h
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiSystemServiceExit+245
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
FAILURE_BUCKET_ID: X64_RAISED_IRQL_FAULT_taskhost.exe_nt!KiSystemServiceExit+245
BUCKET_ID: X64_RAISED_IRQL_FAULT_taskhost.exe_nt!KiSystemServiceExit+245
Followup: MachineOwner
---------
---------------------------------------------------------------------------
Bug Check Code 0x4A: http://msdn.microsoft.com/en-us/library/windows/hardware/ff559001(v=vs.85).aspx
This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL.
Please start by that:
Update all possible drivers you have Uninstall all unused programs Disable all security softwares that you have Run msconfig and disable all startup items / services except Microsoft ones Run memtest86+ to check if all is okay with your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support
If this does not help then upload c:\windows\MEMORY.DMP file after zipping it. Once done, post a link here.
You can also contact Microsoft CSS for assistance.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft Student
Partner 2010 / 2011
Microsoft Certified
Professional
Microsoft Certified
Systems Administrator: Security
Microsoft Certified
Systems Engineer: Security
Microsoft Certified
Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft
Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft Certified
IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer
February 5th, 2012 3:32pm
*******************************************************************************
*
*
* Bugcheck Analysis *
*
*
*******************************************************************************
IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 000000007740164a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff880070e7ca0, 0
Debugging Details:
------------------
PROCESS_NAME: taskhost.exe
BUGCHECK_STR: RAISED_IRQL_FAULT
FAULTING_IP:
+6536306135303264
00000000`7740164a ?? ???
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80001ce31e9 to fffff80001ce3c40
STACK_TEXT:
fffff880`070e7a68 fffff800`01ce31e9 : 00000000`0000004a 00000000`7740164a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`070e7a70 fffff800`01ce3120 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`070e7bb0 00000000`7740164a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`027af3d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7740164a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiSystemServiceExit+245
fffff800`01ce3120 4883ec50 sub rsp,50h
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiSystemServiceExit+245
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
FAILURE_BUCKET_ID: X64_RAISED_IRQL_FAULT_taskhost.exe_nt!KiSystemServiceExit+245
BUCKET_ID: X64_RAISED_IRQL_FAULT_taskhost.exe_nt!KiSystemServiceExit+245
Followup: MachineOwner
---------
---------------------------------------------------------------------------
Bug Check Code 0x4A: http://msdn.microsoft.com/en-us/library/windows/hardware/ff559001(v=vs.85).aspx
This indicates that a thread is returning to user mode from a system call when its IRQL is still above PASSIVE_LEVEL.
Please start by that:
Update all possible drivers you have Uninstall all unused programs Disable all security softwares that you have Run msconfig and disable all startup items / services except Microsoft ones Run memtest86+ to check if all is okay with your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support
If this does not help then upload c:\windows\MEMORY.DMP file after zipping it. Once done, post a link here.
You can also contact Microsoft CSS for assistance.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft Student
Partner 2010 / 2011
Microsoft Certified
Professional
Microsoft Certified
Systems Administrator: Security
Microsoft Certified
Systems Engineer: Security
Microsoft Certified
Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft
Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft Certified
IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer
Free Windows Admin Tool Kit Click here and download it now
February 6th, 2012 7:15am