locked
Windows 7 Bug Check 3B, SYSTEM_SERVICE_EXCEPTION RRS feed

  • Question

  • I have been getting a lot of BSOD's recently, so I used WinBG to get this output, can someone please help me with this problem?

    Thanks for any advice and any ideas to what kind of problem this is.

    ----------------------------------------

    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64

    Copyright (c) Microsoft Corporation. All rights reserved.

     

     

    Loading Dump File [C:\Program Files\Debugging Tools for Windows (x64)\sub minidump\122110-29437-01.dmp]

    Mini Kernel Dump File: Only registers and stack trace are available

     

    Symbol search path is: SRV*C:\Program Files\Debugging Tools for Windows (x64)*http://msdl.microsoft.com/download/symbols

    Executable search path is: 

    Windows 7 Kernel Version 7600 MP (4 procs) Free x64

    Product: WinNt, suite: TerminalServer SingleUserTS Personal

    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621

    Machine Name:

    Kernel base = 0xfffff800`03610000 PsLoadedModuleList = 0xfffff800`0384de50

    Debug session time: Tue Dec 21 23:03:51.144 2010 (UTC + 0:00)

    System Uptime: 0 days 3:32:45.315

    Loading Kernel Symbols

    ...............................................................

    ................................................................

    ...............................................

    Loading User Symbols

    Loading unloaded module list

    .........

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    Use !analyze -v to get detailed debugging information.

     

    BugCheck 3B, {c0000005, fffff800037b4000, fffff88008de1e20, 0}

     

    Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+174 )

     

    Followup: Pool_corruption

    ---------

     

    2: kd> !analyze -v

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    SYSTEM_SERVICE_EXCEPTION (3b)

    An exception happened while executing a system service routine.

    Arguments:

    Arg1: 00000000c0000005, Exception code that caused the bugcheck

    Arg2: fffff800037b4000, Address of the instruction which caused the bugcheck

    Arg3: fffff88008de1e20, Address of the context record for the exception that caused the bugcheck

    Arg4: 0000000000000000, zero.

     

    Debugging Details:

    ------------------

     

     

    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

     

    FAULTING_IP: 

    nt!ExDeferredFreePool+174

    fffff800`037b4000 4c395008        cmp     qword ptr [rax+8],r10

     

    CONTEXT:  fffff88008de1e20 -- (.cxr 0xfffff88008de1e20)

    rax=0064007200610048 rbx=0000000000000000 rcx=fffff8000380f9e0

    rdx=fffffa80035119b0 rsi=0000000000000000 rdi=fffffa80089c0d40

    rip=fffff800037b4000 rsp=fffff88008de27f0 rbp=0000000000000000

     r8=fffffa8009211310  r9=fffffa80035118a0 r10=fffffa80035118b0

    r11=0000000000000001 r12=fffff8000380f880 r13=0000000000000000

    r14=0000000000000016 r15=0000000000000001

    iopl=0         nv up ei pl nz na pe nc

    cs=0010  ss=0000  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202

    nt!ExDeferredFreePool+0x174:

    fffff800`037b4000 4c395008        cmp     qword ptr [rax+8],r10 ds:002b:00640072`00610050=????????????????

    Resetting default scope

     

    CUSTOMER_CRASH_COUNT:  1

     

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

     

    BUGCHECK_STR:  0x3B

     

    PROCESS_NAME:  LCDMon.exe

     

    CURRENT_IRQL:  2

     

    LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800037b4000

     

    STACK_TEXT:  

    fffff880`08de27f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExDeferredFreePool+0x174

     

     

    FOLLOWUP_IP: 

    nt!ExDeferredFreePool+174

    fffff800`037b4000 4c395008        cmp     qword ptr [rax+8],r10

     

    SYMBOL_STACK_INDEX:  0

     

    SYMBOL_NAME:  nt!ExDeferredFreePool+174

     

    FOLLOWUP_NAME:  Pool_corruption

     

    IMAGE_NAME:  Pool_Corruption

     

    DEBUG_FLR_IMAGE_TIMESTAMP:  0

     

    MODULE_NAME: Pool_Corruption

     

    STACK_COMMAND:  .cxr 0xfffff88008de1e20 ; kb

     

    FAILURE_BUCKET_ID:  X64_0x3B_nt!ExDeferredFreePool+174

     

    BUCKET_ID:  X64_0x3B_nt!ExDeferredFreePool+174

     

    Followup: Pool_corruption

    Thursday, December 23, 2010 2:35 PM

Answers

  • Bug Check Code 0x3B: The SYSTEM_SERVICE_EXCEPTION bug check has a value of 0x0000003B. This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.

    For more information, refer to this Microsoft link.

    The BSOD is caused by LCDMon.exe (Logitech G-series LCD Monitor). You can uninstall this program in the control panel and check if the problem persists or not.

    Could you please use Skydrive to upload dump files?



    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration


    • Marked as answer by Juke Chou Monday, December 27, 2010 8:03 AM
    Thursday, December 23, 2010 3:07 PM

All replies

  • Check your RAM with memtest86+. If everything is ok, configure your Windows to create a kernel dump [1] and upload the zipped dump (C:\Windows\memory.dmp) to your SkyDrive [2] and post a link here.

    André

    [1] http://www.brighthub.com/computing/windows-platform/articles/81867.aspx
    [2] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, December 23, 2010 2:46 PM
  • Bug Check Code 0x3B: The SYSTEM_SERVICE_EXCEPTION bug check has a value of 0x0000003B. This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.

    For more information, refer to this Microsoft link.

    The BSOD is caused by LCDMon.exe (Logitech G-series LCD Monitor). You can uninstall this program in the control panel and check if the problem persists or not.

    Could you please use Skydrive to upload dump files?



    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration


    • Marked as answer by Juke Chou Monday, December 27, 2010 8:03 AM
    Thursday, December 23, 2010 3:07 PM