How to fix frequent BSOD SYSTEM_SERVICE_EXCEPTION on my Windows PC?

Question

hi,

For the past few days I have been facing a lost of BSOD

I analyzed the dump through WinDbg and found it was ntkrnlmp.exe

But I have not idea how to solve it

here is the dump files: https://1drv.ms/f/s!AoJysYSb_R3nt1Lwvq44fMXB-Pjo?e=r1tOSF

Below this is the WinDbg output:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the BugCheck
Arg2: fffff8046521fe73, Address of the instruction which caused the BugCheck
Arg3: fffff80461f86900, Address of the context record for the exception that caused the BugCheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

*** WARNING: Check Image - Checksum mismatch - Dump: 0x208038, File: 0x2080c6 - C:\ProgramData\Dbg\sym\BTHport.sys\2AFD096C202000\BTHport.sys

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1374

    Key  : Analysis.Elapsed.mSec
    Value: 9509

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 2

    Key  : Analysis.Init.CPU.mSec
    Value: 234

    Key  : Analysis.Init.Elapsed.mSec
    Value: 3465

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 93

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x3b

    Key  : Bugcheck.Code.TargetModel
    Value: 0x3b

    Key  : Dump.Attributes.AsUlong
    Value: 1008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: AV_nt!SwapContext

    Key  : Failure.Hash
    Value: {47b746a3-60bf-1f5a-5fa5-88903b6a3204}


BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff8046521fe73

BUGCHECK_P3: fffff80461f86900

BUGCHECK_P4: 0

FILE_IN_CAB:  091924-16734-01.dmp

DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffffd782cbf47080

CONTEXT:  fffff80461f86900 -- (.cxr 0xfffff80461f86900)
rax=0000000000000005 rbx=fffff80460776180 rcx=ffff9b008ca47c00
rdx=0000000000000000 rsi=ffffd782cbf47080 rdi=fffff80465b4d700
rip=fffff8046521fe73 rsp=ffff9b008ca47600 rbp=006fe47fbd9bbfff
 r8=0000000000000000  r9=00100410000302ff r10=0000000100000049
r11=0000000000000004 r12=000000000000019a r13=ffffd782b82f1040
r14=ffffd782cb1d70c0 r15=fffff80461f64000
iopl=0         nv up ei pl zr na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050247
nt!SwapContext+0x503:
fffff804`6521fe73 0fc719          xrstors [rcx]
Resetting default scope

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  WeMeetApp.exe

STACK_TEXT:  
ffff9b00`8ca47600 fffff804`6521f906     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!SwapContext+0x503
ffff9b00`8ca47640 fffff804`6505ffa5     : fffff804`60776180 00000000`00000000 fffff804`65b4d700 ffffd782`c41bd080 : nt!KiSwapContext+0x76
ffff9b00`8ca47780 fffff804`650613c7     : ffffd782`cbf47080 00000001`00000000 00000000`00000004 00000000`00000000 : nt!KiSwapThread+0xaa5
ffff9b00`8ca478d0 fffff804`6509342b     : ffffd782`00000000 ffffd782`00000000 ffff9b00`0000001d 00000032`b07617dc : nt!KiCommitThreadWait+0x137
ffff9b00`8ca47980 fffff804`654f7b00     : ffffd782`cbf47080 ffff9b00`8ca47aa0 ffff9b00`8ca47a18 00000000`00000002 : nt!KeWaitForAlertByThreadId+0xd7
ffff9b00`8ca479f0 fffff804`6522b605     : 00000000`00002800 ffff9b00`8ca47a30 ffffffff`fffe7960 ffffd782`00000000 : nt!NtWaitForAlertByThreadId+0x30
ffff9b00`8ca47a20 00007ffe`fc633d24     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
0000002c`1d8ffc88 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`fc633d24


SYMBOL_NAME:  nt!SwapContext+503

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.22621.4169

STACK_COMMAND:  .cxr 0xfffff80461f86900 ; kb

BUCKET_ID_FUNC_OFFSET:  503

FAILURE_BUCKET_ID:  AV_nt!SwapContext

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {47b746a3-60bf-1f5a-5fa5-88903b6a3204}

Followup:     MachineOwner
---------

Any help would be appreciated

Answer 1

Hi,

The crash appears to have been caused by WeMeetApp.exe, which is a part of WeChat.

Could you uninstall it for the time being and let me know if the crashes persist?

Answer 2

Hello,

After reviewing the dump file, it seems that hotfixplatform.sys component of this driver is causing a constant blue screen. This driver file contains processes related to the Lenovo Computer Manager app. You can either uninstall the app or try upgrading the app version to check.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.