none
BSOD after Windows 10 1809 in place upgrade SYSTEM_SERVICE_EXCEPTION RRS feed

  • Question

  • One user have been getting the BSOD after inplace upgrade, I have ran check disk, online image cleanup and disabled audio display driver, no success. I have attached the minidump to this 

    https://1drv.ms/u/s!AkV_KjsvtSqRiiM508c0D9CGDouV

    Monday, July 8, 2019 6:54 PM

Answers

  • Unfortunately could not get the system working as it could not allow me get the system upddated, other system that had same issue, once we install the security patches it fixed the BSOD 
    • Marked as answer by Sovrano Monday, July 22, 2019 7:56 PM
    Monday, July 22, 2019 7:56 PM

All replies

  • To evaluate the BSOD please post logs for troubleshooting.

    Using administrative command prompt copy and paste this whole command.

    Make sure the default language is English so that the logs can be scanned and read.

    https://www.tenforums.com/tutorials/3813-language-add-remove-change-windows-10-a.html

    The command will automatically collect the computer files and place them on the desktop.

    Then use 7zip to organize the files and one drive, drop box, or google drive to place share links into the thread for troubleshooting.

    https://support.office.com/en-us/article/Share-OneDrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

    This command will automatically collect these files:  msinfo32, mini dumps, drivers, hosts, install, uninstall, services, startup, event viewer files, etc.

    Open administrative command prompt and copy and paste the whole command:

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    There are two files for you to find manually:

    a) C:\Windows\MEMORY.DMP

    Use file explorer > this PC > local C: drive > right upper corner search enter the above to find results.

    b) dxdiag:  

    In the left lower corner search type:  dxdiag > When the DirectX Diagnostic Tool opens click on the next page button so that each tab is opened > click on save all information > save to desktop > post one drive or drop box share link into the thread

    .

    .

    .

    Uninstall Hitman / Sophos using the applicable uninstall tool:

    https://community.sophos.com/kb/en-us/122126

    .

    Make sure Windows defender is on.

    .

    Third party antivirus software can be reinstalled after one week of computer stability ( no BSOD or unexpected shutdowns / restarts)

    .

    Upgrade the BIOS:  1.19 > 1.24

    .

    .

    .

    hmpalert.sys Tue Feb 12 04:34:54 2019 (5C62A14E)

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.
    .
    .
    .
    .
    .


    Monday, July 8, 2019 8:51 PM
  • Here is the link to the files you requested for, note I had to get it through safe mode as I cant do anything from normal startup as system restarts every 2 mins or less 

    https://1drv.ms/u/s!AkV_KjsvtSqRiiQZHvJAQyqTS-PC?e=0KEowY

    Monday, July 8, 2019 10:06 PM
  • Please run the administrative command prompt command to collect logs > post a share link into the newest post

    The memory dump was corrupt.

    For any bsod:

    post separate share links for the administrative command prompt command results and the memory dump if the file size is < 1.5 GB

    Monday, July 8, 2019 10:34 PM
  • Admin command result  log 

    https://1drv.ms/u/s!AkV_KjsvtSqRiiaI4B0HhCcznmo9?e=dLH56L

    Memory dump

    https://1drv.ms/u/s!AkV_KjsvtSqRiieXPOHzbAfUNk-4?e=HXFtG0

    Dxdiag

    https://1drv.ms/u/s!AkV_KjsvtSqRiieXPOHzbAfUNk-4?e=VRqIgE

    Monday, July 8, 2019 11:27 PM
  • The log files were not yet collected:

    msinfo32

    hosts

    drivers

    uninstall

    install

    events

    etc.

    Were the Hitman / Sophos software uninstalled?

    Microsoft supplies/ updates the symbols for the windbg software.

    Unfortunately there were multiple dump files displaying corruption:

    ***** Debugger could not find nt in module list, module list might be corrupt, error 0x80070057.

    Some files were not corrupt.

    Multiple memory dump files are needed along with the above files.

    Tuesday, July 9, 2019 12:03 AM
  • Hi,

    Could you please tell me, do you use some Disk Controller, for example LSI or Adaptec?

    Avis de non-responsabilité:
    Mon opinion ne peut pas coïncider avec la position officielle de Microsoft.

    Bien cordialement, Andrei ...

    MCP

    Tuesday, July 9, 2019 1:27 AM
  • Hi,

     

    Open Device Manager and check if you see any devices are marked with the yellow exclamation mark. If new device drivers or system services have been added recently, try removing or updating them.

     

    If you recently added new hardware to the system, remove it and see. Also, check with the manufacturer and see if any updates are available for the firmware.

     

    Best Regards,

    Farena


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, July 9, 2019 6:43 AM
  • Nope I dont 
    Wednesday, July 10, 2019 8:09 PM
  • At this time I can only boot into safe mode,to do anything cos if I boot the computer the normal way it stays up at most one minute before it crashes and reboots. 

    There was no recent Hardware attached just in place upgrade deployed via SCCM. We have had 3 cases of this. 

    Thanks 

    Wednesday, July 10, 2019 8:11 PM
  • Find a flash drive to save files and move to a normally working computer.

    1) Please open safe mode with command prompt

    2) type:

    3) sfc /scannow
    4) dism /online /cleanup-image /restorehealth
    5) chkdsk /scan
    6) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

    7) Copy and paste:

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    8) Look on the desktop for the new file > zip > post a share link into the thread

    9) Type:  msinfo32 > save as NFO > zip > post a share link into the thread

    10) For any BSOD > find C:\windows\memory.dmp > zip > post share links into the thread
    Wednesday, July 10, 2019 11:18 PM
  • Hi,

     

    Any update? Please let us know if you need more help.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, July 18, 2019 7:34 AM
  • Unfortunately could not get the system working as it could not allow me get the system upddated, other system that had same issue, once we install the security patches it fixed the BSOD 
    • Marked as answer by Sovrano Monday, July 22, 2019 7:56 PM
    Monday, July 22, 2019 7:56 PM