none
Blue Screen of Death | Windows 7 (64bit) - Locale ID: 1033

    Question

  • I keep getting this blue screen error and it seems to happen averaging around one hour...

    =========================================================================

    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.256.48
      Locale ID:    1033

    Additional information about the problem:
      BCCode:    3b
      BCP1:    00000000C0000005
      BCP2:    FFFFF880071D932D
      BCP3:    FFFFF880091AEE40
      BCP4:    0000000000000000
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    256_1

    Files that help describe the problem:
      C:\Windows\Minidump\010112-10857-01.dmp
      C:\Users\username\AppData\Local\Temp\WER-30810-0.sysdata.xml

    =========================================================================

    It happens when the computer is idle or when I'm doing things within an application and or miscellaneous things on the desktop. It actually just happened right as when I was trying to type this question to you guys! ; \

    1. Downloaded all of the Windows updates I could possibly through Windows update.
    2. Installed and updated all the current divers to the motherboard, video card, etc, that I believe are correct.
    3. Ran the windows memory test that makes you reboot your machine, and brings you in a bios type test - no errors found.

    So far, the only thing I can think of, is that the memory isn't 100% compatible with the motherboard bios version, should I flash the bios?
    Do you think this could be an likely reason for error?

    This is a new machine built from all new parts. (I'm thinking this is just a software issue)
    I'm trying to determine the source of this error and why it's recurring!?

    Please let me know if any other information is needed, thank you.

     
    • Edited by KMAN_101 Wednesday, December 26, 2012 6:45 PM
    Wednesday, December 26, 2012 9:56 AM

Answers

  • Hi,

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff88008ca732d, Address of the instruction which caused the bugcheck
    Arg3: fffff88009fdbe40, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    FAULTING_IP: 
    gdrv+332d
    fffff880`08ca732d 488941e0        mov     qword ptr [rcx-20h],rax

    CONTEXT:  fffff88009fdbe40 -- (.cxr 0xfffff88009fdbe40)
    rax=00100000246c6d24 rbx=fffff88007f5b000 rcx=0000000000000020
    rdx=fffff88007f5b000 rsi=0000000000000020 rdi=fffffa80110147c0
    rip=fffff88008ca732d rsp=fffff88009fdc828 rbp=fffffa800f8ec5f0
     r8=000000000000f000  r9=0000000000000780 r10=00640029005a0010
    r11=0000000000000000 r12=fffffa800f7a61b0 r13=0000000000000020
    r14=fffffa80110147c0 r15=0000000000000000
    iopl=0         nv up ei pl nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
    gdrv+0x332d:
    fffff880`08ca732d 488941e0        mov     qword ptr [rcx-20h],rax ds:002b:00000000`00000000=????????????????
    Resetting default scope

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    BUGCHECK_STR:  0x3B

    PROCESS_NAME:  snmp.exe

    CURRENT_IRQL:  0

    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88008ca732d

    STACK_TEXT:  
    fffff880`09fdc828 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : gdrv+0x332d


    FOLLOWUP_IP: 
    gdrv+332d
    fffff880`08ca732d 488941e0        mov     qword ptr [rcx-20h],rax

    SYMBOL_STACK_INDEX:  0

    SYMBOL_NAME:  gdrv+332d

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: gdrv

    IMAGE_NAME:  gdrv.sys

    DEBUG_FLR_IMAGE_TIMESTAMP:  49b9d175

    STACK_COMMAND:  .cxr 0xfffff88009fdbe40 ; kb

    FAILURE_BUCKET_ID:  X64_0x3B_gdrv+332d

    BUCKET_ID:  X64_0x3B_gdrv+332d

    Followup: MachineOwner

    The culprit is gdrv.sys. The process that appears to be crashing each time is the snmp.exe.

    The snmp.exe is mentioned in the following link:

    http://www.techsupportforum.com/forums/f10/snmp-exe-high-memory-usage-388798.html

    In that link the "Gigabyte Online Management" software was referenced.

    Also, The gdrv.sys is a third party driver that would be from any Gigabyte program you installed such as Gigabyte's Dynamic Energy Saver Advanced program. Do you have such software installed?

    You can cure the issue by renaming the gdrv.sys file or uninstall the Gigabyte program, which should remove the gdrv.systry and see if it stops it. Image path: C:\Windows\gdrv.sys


    Spencer
    TechNet Community Support

    • Marked as answer by KMAN_101 Saturday, December 29, 2012 10:10 PM
    Friday, December 28, 2012 2:57 AM

All replies

  • I want to upload my .dmp file, but how do you upload it?

    Where is the skydrive located?

    I don't see an upfile option any where within my profile.

    Can somebody tell me how to upload this file, so it can be of more use please...

    Wednesday, December 26, 2012 7:28 PM
  • Hi,

    Thank you for the post.

    Please post a copy of your dumpfile as a shared file to your Sky Drive with a link here.
    http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

    For advice on how to configure your system to create dump files please read:

    http://support.microsoft.com/kb/254649


    Spencer
    TechNet Community Support

    Thursday, December 27, 2012 2:57 AM
  • UPDATE:

    Here is a link to my .dmp file
    https://skydrive.live.com/redir?resid=D2A484F9F3D82B97!106

    Also, I've just updated my bio's on my motherboard, hopefully that was actually the trick, it's been only 30 minutes since I've restarted, so I'll wait it out and reply tomorrow and see if that fixed the issue. The motherboard manufacture (Gigabyte | GA-990FXA-UD5) told me I needed to have F10 version to run a 8 core processer, I've just updated to F11 from F9. We'll see what happens.

    I'm going to go play some games here in a bit, do some stress tests and what not if it doesn't restart on it's own.

    Thanks so far for everyone's and anyone's help!

    Friday, December 28, 2012 12:20 AM
  • NEGATIVE:

    Blue screen happened again, around the same timing.
    I thought it was my network driver possible also, so I uninstalled and reinstalled in safe mode with a fresh copy : /

    Here is the .dmp file link:
    https://skydrive.live.com/redir?resid=D2A484F9F3D82B97!111

    Also, the error message:

    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.256.48
      Locale ID:    1033

    Additional information about the problem:
      BCCode:    3b
      BCP1:    00000000C0000005
      BCP2:    FFFFF88008CA732D
      BCP3:    FFFFF88009FDBE40
      BCP4:    0000000000000000
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    256_1

    Files that help describe the problem:
      C:\Windows\Minidump\122712-11544-01.dmp
      C:\Users\username\AppData\Local\Temp\WER-32947-0.sysdata.xml

    Friday, December 28, 2012 2:19 AM
  • Hi,

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffff88008ca732d, Address of the instruction which caused the bugcheck
    Arg3: fffff88009fdbe40, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

    FAULTING_IP: 
    gdrv+332d
    fffff880`08ca732d 488941e0        mov     qword ptr [rcx-20h],rax

    CONTEXT:  fffff88009fdbe40 -- (.cxr 0xfffff88009fdbe40)
    rax=00100000246c6d24 rbx=fffff88007f5b000 rcx=0000000000000020
    rdx=fffff88007f5b000 rsi=0000000000000020 rdi=fffffa80110147c0
    rip=fffff88008ca732d rsp=fffff88009fdc828 rbp=fffffa800f8ec5f0
     r8=000000000000f000  r9=0000000000000780 r10=00640029005a0010
    r11=0000000000000000 r12=fffffa800f7a61b0 r13=0000000000000020
    r14=fffffa80110147c0 r15=0000000000000000
    iopl=0         nv up ei pl nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
    gdrv+0x332d:
    fffff880`08ca732d 488941e0        mov     qword ptr [rcx-20h],rax ds:002b:00000000`00000000=????????????????
    Resetting default scope

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

    BUGCHECK_STR:  0x3B

    PROCESS_NAME:  snmp.exe

    CURRENT_IRQL:  0

    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff88008ca732d

    STACK_TEXT:  
    fffff880`09fdc828 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : gdrv+0x332d


    FOLLOWUP_IP: 
    gdrv+332d
    fffff880`08ca732d 488941e0        mov     qword ptr [rcx-20h],rax

    SYMBOL_STACK_INDEX:  0

    SYMBOL_NAME:  gdrv+332d

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: gdrv

    IMAGE_NAME:  gdrv.sys

    DEBUG_FLR_IMAGE_TIMESTAMP:  49b9d175

    STACK_COMMAND:  .cxr 0xfffff88009fdbe40 ; kb

    FAILURE_BUCKET_ID:  X64_0x3B_gdrv+332d

    BUCKET_ID:  X64_0x3B_gdrv+332d

    Followup: MachineOwner

    The culprit is gdrv.sys. The process that appears to be crashing each time is the snmp.exe.

    The snmp.exe is mentioned in the following link:

    http://www.techsupportforum.com/forums/f10/snmp-exe-high-memory-usage-388798.html

    In that link the "Gigabyte Online Management" software was referenced.

    Also, The gdrv.sys is a third party driver that would be from any Gigabyte program you installed such as Gigabyte's Dynamic Energy Saver Advanced program. Do you have such software installed?

    You can cure the issue by renaming the gdrv.sys file or uninstall the Gigabyte program, which should remove the gdrv.systry and see if it stops it. Image path: C:\Windows\gdrv.sys


    Spencer
    TechNet Community Support

    • Marked as answer by KMAN_101 Saturday, December 29, 2012 10:10 PM
    Friday, December 28, 2012 2:57 AM
  • Interesting...

    So, basically I have to either physically rename the filename  "gdrv.sys", to something like "Bad_gdrv_Bad.sys" ?

    ..or find this software called "Gigabyte's Dynamic Energy Saver Advanced" or something similarly named to it and uninstall it?

    Thanks for the information, I'll have to give both of those a try later on tonight and see what happens.

    I did run my machine in Safe Mode for roughly two hours last night and no blue screen/rebooting by the way.

    Friday, December 28, 2012 2:41 PM
  • Thanks for the information Spencer, I believe your solution has fixed my problem. I've been on my machine for a few hours now and it has not yet blue screened. I uninstalled the "Gigabyte Online Management software" (G.O.M.) in the uninstall programs and software.

    However, I've been looking at the Event Viewer in windows, I'm still seeing some errors coming up right as I at the time I enter windows desktop.

    Here is the as follows error:
    Level | Date and Time | Source | Event ID | Task | Category

    Error    12/29/2012 2:06:29 PM    Service Control Manager    7000    None
    Error    12/29/2012 2:06:29 PM    SNMP    1500    None

    I'm not sure what 1500 or 7000 Event ID's mean or if you might have any suggestions or solutions to these errors...

    Thanks again for all the help!

    Saturday, December 29, 2012 10:09 PM
  • i also got this problem.. pls help me..

    9 Nov 2013
    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.768.3
      Locale ID:    1033

    Additional information about the problem:
      BCCode:    116
      BCP1:    FFFFFA8008FA0010
      BCP2:    FFFFF8800411DE5C
      BCP3:    0000000000000000
      BCP4:    0000000000000002
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    768_1

    Files that help describe the problem:
      C:\Windows\Minidump\110913-18314-01.dmp
      C:\Users\User\AppData\Local\Temp\WER-62119-0.sysdata.xml

    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt



    -------------------------------------------------------------------------------
    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.768.3
      Locale ID:    1033

    Additional information about the problem:
      BCCode:    116
      BCP1:    FFFFFA8003C024E0
      BCP2:    FFFFF88002F62F94
      BCP3:    0000000000000000
      BCP4:    0000000000000002
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    768_1

    Files that help describe the problem:
      C:\Windows\Minidump\092813-17238-01.dmp
      C:\Users\User\AppData\Local\Temp\WER-65863-0.sysdata.xml

    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt


    11/10/2013
    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.768.3
      Locale ID:    1033

    Additional information about the problem:
      BCCode:    116
      BCP1:    FFFFFA8008E40010
      BCP2:    FFFFF880041A1F94
      BCP3:    0000000000000000
      BCP4:    0000000000000002
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    768_1

    Files that help describe the problem:
      C:\Windows\Minidump\101113-23353-01.dmp
      C:\Users\User\AppData\Local\Temp\WER-60247-0.sysdata.xml

    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt
    --------
    13-10-2013

    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7601.2.1.0.768.3
      Locale ID:    1033

    Additional information about the problem:
      BCCode:    116
      BCP1:    FFFFFA8008F05010
      BCP2:    FFFFF880045B9F94
      BCP3:    0000000000000000
      BCP4:    0000000000000002
      OS Version:    6_1_7601
      Service Pack:    1_0
      Product:    768_1

    Files that help describe the problem:
      C:\Windows\Minidump\101313-20092-01.dmp
      C:\Users\User\AppData\Local\Temp\WER-80590-0.sysdata.xml

    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt

    Saturday, November 09, 2013 9:14 AM