win32k.sys and SYSTEM_SERVICE_EXCEPTION causing BSOD, tried everything!

Question

win32k.sys and SYSTEM_SERVICE_EXCEPTION causing BSOD, tried everything!

Anonymous

Hello,

I'm so frustrated, I tried posting several times as well no one is answering :(! Please for god's sake, someone help...

DMP file analysis:

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff9600014665c, fffff8800a5277b0, 0}

Probably caused by : win32k.sys ( win32k!InternalRebuildHwndListForIMEClass+94 )

Followup: MachineOwner

0: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the bugcheck

Arg2: fffff9600014665c, Address of the instruction which caused the bugcheck

Arg3: fffff8800a5277b0, Address of the context record for the exception that caused the bugcheck

Arg4: 0000000000000000, zero.

Debugging Details:

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:

win32k!InternalRebuildHwndListForIMEClass+94

fffff960`0014665c 498b8398000000 mov rax,qword ptr [r11+98h]

CONTEXT: fffff8800a5277b0 -- (.cxr 0xfffff8800a5277b0)

rax=fffff900c060b5a0 rbx=fffff900c2046840 rcx=000000000000c026

rdx=0000000000000001 rsi=fffff900c20543a0 rdi=fffff900c2046840

rip=fffff9600014665c rsp=fffff8800a528180 rbp=fffff900c06b4c40

r8=fffff900c0580a70 r9=0000000000000012 r10=fffff8800468fcc8

r11=0000000008000000 r12=fffff900c2046770 r13=fffff900c20543a0

r14=0000000000000000 r15=000007fefb937b04

iopl=0 nv up ei pl nz na po nc

cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206

win32k!InternalRebuildHwndListForIMEClass+0x94:

fffff9600014665c 498b8398000000 mov rax,qword ptr [r11+98h] ds:002b:0000000008000098=????????????????

Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: explorer.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff9600014665c

STACK_TEXT:

fffff8800a528180 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : win32k!InternalRebuildHwndListForIMEClass+0x94

FOLLOWUP_IP:

win32k!InternalRebuildHwndListForIMEClass+94

fffff960`0014665c 498b8398000000 mov rax,qword ptr [r11+98h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!InternalRebuildHwndListForIMEClass+94

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 54163648

STACK_COMMAND: .cxr 0xfffff8800a5277b0 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!InternalRebuildHwndListForIMEClass+94

BUCKET_ID: X64_0x3B_win32k!InternalRebuildHwndListForIMEClass+94

Followup: MachineOwner

I keep getting BSOD, tried ram test, no errors found, tried antivirus, no malware, tried formatting, still same issue, tried everything you can imagine, even updated the drivers, still same problem, any help is highly appreciated.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

1 answer

Answer 1

The bugcheck was 3B.

To evaluate the BSOD please post logs for troubleshooting.

Using administrative command prompt copy and paste this whole command.

Make sure the default language is English so that the logs can be scanned and read.

https://www.tenforums.com/tutorials/3813-language-add-remove-change-windows-10-a.html

The command will automatically collect the computer files and place them on the desktop.

Then use 7zip to organize the files and one drive or drop box to place share links into the thread for troubleshooting.

https://support.office.com/en-us/article/Share-OneDrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

This command will automatically collect these files: msinfo32, mini dumps, drivers, hosts, install, uninstall, services, startup, event viewer files, etc.

Open administrative command prompt and copy and paste the whole command:

copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

There are two files for you to find manually:

a) C:\Windows\MEMORY.DMP

Use file explorer > this PC > local C: drive > right upper corner search enter the above to find results.

b) dxdiag: In the left lower corner search type: dxdiag > When the DirectX Diagnostic Tool opens click on the next page button so that each tab is opened > click on save all information > save to desktop > post one drive or drop box share link into the thread

Share via

win32k.sys and SYSTEM_SERVICE_EXCEPTION causing BSOD, tried everything!

1 answer