BSOD Opening Itunes, Error 0x3B


  1. Lol Froob
    Posts : 24
    Windows 7 Ultimate x64
       New #1

    BSOD Opening Itunes, Error 0x3B


    Hey guys, I desperately need help with this BSOD. I'll start off first by giving you some facts about my computer. Everything else should be in my 'system specs' page.

    - x86 (32-bit) or x64 ?     x64
    - the original installed OS on the system? yes
    - an OEM or full retail version?     retail
    - What is the age of system (hardware)? 1 year 9 months
    - What is the age of OS installation? 1 year 9 months

    Well, I first experienced this BSOD after messing around with iTunes. I was on the computer moving my music files to the location of where I wanted them to be. I figured it would be a good time to plug in my iPod and delete all the songs on it. So, I do that, and I also deleted all the songs in my iTunes library so I could 'start fresh'. I exit out of iTunes; everything is still fine at this point.

    Little do I know that after I finally finish moving my music files to 'my music', I try to open up iTunes so I could drag my files there. It gets a BSOD after 3 seconds of iTunes being open.

    I already have 'who crashed' downloaded so I analyzed the dump files. Here are the results; it gave me two possibilities.
    Code:
    On Fri 12/23/2011  3:09:34 AM GMT your computer crashed
crash dump file:  C:\Windows\Minidump\122211-40544-01.dmp
This was probably caused by the  following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x3B  (0xC0000005, 0xFFFFF80002ED6B65, 0xFFFFF880085C6970, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path:  C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel &  System
Bug check description: This indicates that an exception happened while  executing a routine that transitions from non-privileged code to privileged  code. 
This appears to be a typical software driver bug and is not likely to  be caused by a hardware problem. 
The crash took place in the Windows kernel.  Possibly this problem is caused by another driver which cannot be identified at  this time. 


On Fri 12/23/2011 3:09:34 AM GMT your computer  crashed
crash dump file: C:\Windows\memory.dmp
This was probably  caused by the following module: diskpt.sys (diskpt+0x17CAC) 
Bugcheck code: 0x3B  (0xC0000005, 0xFFFFF80002ED6B65, 0xFFFFF880085C6970, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path:  C:\Windows\system32\drivers\diskpt.sys
product: Shadow Defender
company: SHADOWDEFENDER.COM
description: Shadow Defender  Filter Driver
Bug check description: This indicates that an exception  happened while executing a routine that transitions from non-privileged code to  privileged code. 
This appears to be a typical software driver bug and is not  likely to be caused by a hardware problem. 
A third party driver was  identified as the probable root cause of this system error. It is suggested you  look for an update for the following driver: diskpt.sys (Shadow Defender Filter  Driver, SHADOWDEFENDER.COM). 
Google query: diskpt.sys SHADOWDEFENDER.COM  SYSTEM_SERVICE_EXCEPTION
    I have no idea how this could have anything to do with shadow defender, as I did not use it the entire week.

    NOTE: I uninstalled and reinstalled iTunes and it didn't work. I also renamed diskpt.sys to diskpt.old. I uninstalled my antivirus after the BSOD crashes because the trial period was over.

    The perfmon and other files are in documents.rar file.
    Last edited by Lol Froob; 23 Dec 2011 at 15:34.
      My Computer
    Quote Quote

  3. Lol Froob
    Posts : 24
    Windows 7 Ultimate x64
    Thread Starter
       New #2

    Bump, still having the problem. Need to get songs on iPod soon! :)
      My Computer
    Quote Quote

  4. writhziden
    Posts : 11,269
    Windows 7 Home Premium 64 Bit
       New #3

    Code:
    1. BugCheck 3B, {c0000005, fffff80002ec5b65, fffff88008833ef0, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ec5b65, Address of the instruction which caused the bugcheck
Arg3: fffff88008833ef0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ec5b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff88008833ef0 -- (.cxr 0xfffff88008833ef0)
rax=00000012ea220001 rbx=fffff88008834930 rcx=fffff88000c77680
rdx=92fff8a005c41151 rsi=0000000000000000 rdi=fffff8a005cbdac0
rip=fffff80002ec5b65 rsp=fffff880088348d0 rbp=fffffa80053b9890
 r8=92fff8a005c41150  r9=fffff8a00037fbd0 r10=fffff88000c77680
r11=0000000000000006 r12=fffffa80053b9898 r13=fffff88008834a28
r14=fffffa8004154f20 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ec5b65 498b08          mov     rcx,qword ptr [r8] ds:002b:92fff8a0`05c41150=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ec5b65

STACK_TEXT:  
fffff880`088348d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ec5b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff88008833ef0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    2. BugCheck 3B, {c0000005, fffff80002e77b65, fffff8800726d9e0, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e77b65, Address of the instruction which caused the bugcheck
Arg3: fffff8800726d9e0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e77b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff8800726d9e0 -- (.cxr 0xfffff8800726d9e0)
rax=0000001c08530001 rbx=fffff8800726e438 rcx=fffff88000e9a680
rdx=84fff8a013b373c1 rsi=fffff8a002f8c5d0 rdi=fffffa8007a81010
rip=fffff80002e77b65 rsp=fffff8800726e3c0 rbp=fffffa80052a8d60
 r8=84fff8a013b373c0  r9=0000000000000727 r10=fffff88000e9a680
r11=0000000000000000 r12=0000000080000000 r13=fffff8a0035a6140
r14=0000000000000001 r15=fffffa8007a81440
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e77b65 498b08          mov     rcx,qword ptr [r8] ds:002b:84fff8a0`13b373c0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  wmpnetwk.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002e77b65

STACK_TEXT:  
fffff880`0726e3c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e77b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff8800726d9e0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    3. BugCheck 3B, {c0000005, fffff80002e80b65, fffff88006a64a60, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e80b65, Address of the instruction which caused the bugcheck
Arg3: fffff88006a64a60, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e80b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff88006a64a60 -- (.cxr 0xfffff88006a64a60)
rax=00000018cff00001 rbx=fffff88006a654a0 rcx=fffff88000dcc680
rdx=aefff8a00b2c6711 rsi=0000000000000000 rdi=fffff8a00b7f28c0
rip=fffff80002e80b65 rsp=fffff88006a65440 rbp=fffffa8005664d60
 r8=aefff8a00b2c6710  r9=fffff8a0000944d0 r10=fffff88000dcc680
r11=0000000000000006 r12=fffffa8005664d68 r13=fffff88006a65598
r14=fffffa800463ba90 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e80b65 498b08          mov     rcx,qword ptr [r8] ds:002b:aefff8a0`0b2c6710=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002e80b65

STACK_TEXT:  
fffff880`06a65440 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e80b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff88006a64a60 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    4. BugCheck 3B, {c0000005, fffff80002ed8b65, fffff880087ebf10, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ed8b65, Address of the instruction which caused the bugcheck
Arg3: fffff880087ebf10, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed8b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff880087ebf10 -- (.cxr 0xfffff880087ebf10)
rax=000000060a300001 rbx=fffff880087ec950 rcx=fffff88000c1b680
rdx=84fff8a00c858ac1 rsi=0000000000000000 rdi=fffff8a00ea6c5f0
rip=fffff80002ed8b65 rsp=fffff880087ec8f0 rbp=fffffa80056bf190
 r8=84fff8a00c858ac0  r9=fffff8a0001e7410 r10=fffff88000c1b680
r11=0000000000000006 r12=fffffa80056bf198 r13=fffff880087eca48
r14=fffffa8005893cc0 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ed8b65 498b08          mov     rcx,qword ptr [r8] ds:002b:84fff8a0`0c858ac0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ed8b65

STACK_TEXT:  
fffff880`087ec8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed8b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff880087ebf10 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    5. BugCheck 3B, {c0000005, fffff80002ed6b65, fffff880085c6970, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ed6b65, Address of the instruction which caused the bugcheck
Arg3: fffff880085c6970, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed6b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff880085c6970 -- (.cxr 0xfffff880085c6970)
rax=0000000eeeb8000b rbx=fffff880085c73b0 rcx=fffff88000e9a680
rdx=32fff8a00d8f0ab1 rsi=0000000000000000 rdi=fffff8a00e872860
rip=fffff80002ed6b65 rsp=fffff880085c7350 rbp=fffffa800521dd60
 r8=32fff8a00d8f0ab0  r9=fffff8a0000ac6d0 r10=fffff88000e9a680
r11=0000000000000006 r12=fffffa800521dd68 r13=fffff880085c74a8
r14=fffffa8005e35960 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ed6b65 498b08          mov     rcx,qword ptr [r8] ds:002b:32fff8a0`0d8f0ab0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ed6b65

STACK_TEXT:  
fffff880`085c7350 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed6b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff880085c6970 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    These all seem fairly random with iTunes being the only program named twice. ntkrnlmp.exe is a main system file and shows up as a blue screen error for a lot of people/problems for that reason, so it most likely isn't the cause of the issue.

    When you uninstalled iTunes, did you follow the steps outlined in Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7 to do the uninstalls in the correct order?

    A few things to check, as well:

    Run SFC /SCANNOW Command - System File Checker (you may need to run it three times to fix all issues).

    Also, run Disk Check with "Automatically fix file system errors" checked.
    If it finds problems and your issues persist, run Disk Check with "Scan for and attempt recovery of bad sectors" checked.

    Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete.

    If none of the above help, run Driver Verifier to see if there is a driver causing issues:
    1. Backup your system and user files
    2. Create a system restore point
    3. If you do not have a Windows 7 DVD, Create a system repair disc
    4. Run Driver Verifier

    If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using System Restore OPTION TWO.

    Thanks to zigzag3143 for contributing to the above steps.
      My Computer
    Quote Quote

  6. writhziden
    Posts : 11,269
    Windows 7 Home Premium 64 Bit
       New #4

    I also noticed Avira installed on your system. Uninstall Avira through Start Menu->Control Panel->Uninstall a Program and then use Avira RegistryCleaner - Download to remove Avira entries from the registry.
      My Computer
    Quote Quote

  7. Lol Froob
    Posts : 24
    Windows 7 Ultimate x64
    Thread Starter
       New #5

    writhziden said:
    Code:
    1. BugCheck 3B, {c0000005, fffff80002ec5b65, fffff88008833ef0, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ec5b65, Address of the instruction which caused the bugcheck
Arg3: fffff88008833ef0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ec5b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff88008833ef0 -- (.cxr 0xfffff88008833ef0)
rax=00000012ea220001 rbx=fffff88008834930 rcx=fffff88000c77680
rdx=92fff8a005c41151 rsi=0000000000000000 rdi=fffff8a005cbdac0
rip=fffff80002ec5b65 rsp=fffff880088348d0 rbp=fffffa80053b9890
 r8=92fff8a005c41150  r9=fffff8a00037fbd0 r10=fffff88000c77680
r11=0000000000000006 r12=fffffa80053b9898 r13=fffff88008834a28
r14=fffffa8004154f20 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ec5b65 498b08          mov     rcx,qword ptr [r8] ds:002b:92fff8a0`05c41150=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ec5b65

STACK_TEXT:  
fffff880`088348d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ec5b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff88008833ef0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    2. BugCheck 3B, {c0000005, fffff80002e77b65, fffff8800726d9e0, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e77b65, Address of the instruction which caused the bugcheck
Arg3: fffff8800726d9e0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e77b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff8800726d9e0 -- (.cxr 0xfffff8800726d9e0)
rax=0000001c08530001 rbx=fffff8800726e438 rcx=fffff88000e9a680
rdx=84fff8a013b373c1 rsi=fffff8a002f8c5d0 rdi=fffffa8007a81010
rip=fffff80002e77b65 rsp=fffff8800726e3c0 rbp=fffffa80052a8d60
 r8=84fff8a013b373c0  r9=0000000000000727 r10=fffff88000e9a680
r11=0000000000000000 r12=0000000080000000 r13=fffff8a0035a6140
r14=0000000000000001 r15=fffffa8007a81440
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e77b65 498b08          mov     rcx,qword ptr [r8] ds:002b:84fff8a0`13b373c0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  wmpnetwk.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002e77b65

STACK_TEXT:  
fffff880`0726e3c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e77b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff8800726d9e0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    3. BugCheck 3B, {c0000005, fffff80002e80b65, fffff88006a64a60, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e80b65, Address of the instruction which caused the bugcheck
Arg3: fffff88006a64a60, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e80b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff88006a64a60 -- (.cxr 0xfffff88006a64a60)
rax=00000018cff00001 rbx=fffff88006a654a0 rcx=fffff88000dcc680
rdx=aefff8a00b2c6711 rsi=0000000000000000 rdi=fffff8a00b7f28c0
rip=fffff80002e80b65 rsp=fffff88006a65440 rbp=fffffa8005664d60
 r8=aefff8a00b2c6710  r9=fffff8a0000944d0 r10=fffff88000dcc680
r11=0000000000000006 r12=fffffa8005664d68 r13=fffff88006a65598
r14=fffffa800463ba90 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e80b65 498b08          mov     rcx,qword ptr [r8] ds:002b:aefff8a0`0b2c6710=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002e80b65

STACK_TEXT:  
fffff880`06a65440 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e80b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff88006a64a60 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    4. BugCheck 3B, {c0000005, fffff80002ed8b65, fffff880087ebf10, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ed8b65, Address of the instruction which caused the bugcheck
Arg3: fffff880087ebf10, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed8b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff880087ebf10 -- (.cxr 0xfffff880087ebf10)
rax=000000060a300001 rbx=fffff880087ec950 rcx=fffff88000c1b680
rdx=84fff8a00c858ac1 rsi=0000000000000000 rdi=fffff8a00ea6c5f0
rip=fffff80002ed8b65 rsp=fffff880087ec8f0 rbp=fffffa80056bf190
 r8=84fff8a00c858ac0  r9=fffff8a0001e7410 r10=fffff88000c1b680
r11=0000000000000006 r12=fffffa80056bf198 r13=fffff880087eca48
r14=fffffa8005893cc0 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ed8b65 498b08          mov     rcx,qword ptr [r8] ds:002b:84fff8a0`0c858ac0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ed8b65

STACK_TEXT:  
fffff880`087ec8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed8b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff880087ebf10 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    5. BugCheck 3B, {c0000005, fffff80002ed6b65, fffff880085c6970, 0}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ed6b65, Address of the instruction which caused the bugcheck
Arg3: fffff880085c6970, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed6b65 498b08          mov     rcx,qword ptr [r8]

CONTEXT:  fffff880085c6970 -- (.cxr 0xfffff880085c6970)
rax=0000000eeeb8000b rbx=fffff880085c73b0 rcx=fffff88000e9a680
rdx=32fff8a00d8f0ab1 rsi=0000000000000000 rdi=fffff8a00e872860
rip=fffff80002ed6b65 rsp=fffff880085c7350 rbp=fffffa800521dd60
 r8=32fff8a00d8f0ab0  r9=fffff8a0000ac6d0 r10=fffff88000e9a680
r11=0000000000000006 r12=fffffa800521dd68 r13=fffff880085c74a8
r14=fffffa8005e35960 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ed6b65 498b08          mov     rcx,qword ptr [r8] ds:002b:32fff8a0`0d8f0ab0=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iTunes.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80002ed6b65

STACK_TEXT:  
fffff880`085c7350 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16


FOLLOWUP_IP: 
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed6b65 498b08          mov     rcx,qword ptr [r8]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!ExpInterlockedPopEntrySListFault16+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4e02aaa3

STACK_COMMAND:  .cxr 0xfffff880085c6970 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

BUCKET_ID:  X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0

Followup: MachineOwner
---------
    These all seem fairly random with iTunes being the only program named twice. ntkrnlmp.exe is a main system file and shows up as a blue screen error for a lot of people/problems for that reason, so it most likely isn't the cause of the issue.

    When you uninstalled iTunes, did you follow the steps outlined in Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7 to do the uninstalls in the correct order?

    A few things to check, as well:

    Run SFC /SCANNOW Command - System File Checker (you may need to run it three times to fix all issues).

    Also, run Disk Check with "Automatically fix file system errors" checked.
    If it finds problems and your issues persist, run Disk Check with "Scan for and attempt recovery of bad sectors" checked.

    Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete.

    If none of the above help, run Driver Verifier to see if there is a driver causing issues:
    1. Backup your system and user files
    2. Create a system restore point
    3. If you do not have a Windows 7 DVD, Create a system repair disc
    4. Run Driver Verifier

    If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using System Restore OPTION TWO.

    Thanks to zigzag3143 for contributing to the above steps.
    Thanks, I am sure I fixed the BSOD now. I knew it had something to do with itunes so I followed your steps removing every last thing that had the word apple or itunes in it. (Used a great tool called 'Everything' to find everything =p) Also used 'your uninstaller'. I then reinstalled itunes and it worked.

    It took me a helluva long time because I somehow thought I was removing itunes from the computer with the msicuu2.exe but it was just a program that added a registry key
    to block itunes from showing up in the add/remove programs list. =/

    Thanks for everybody's help and Merry Christmas/Happy Holidays!
      My Computer
    Quote Quote

 

  Related Discussions
BSOD error 0x3B
in BSOD Help and Support

Hi, Having lots of issues with BSOD errors. Have tried a number of fixes but can't find anything that works. I'm hoping that the very nice people here might be able to help. I'm also pretty PC illiterate so please don't hold that against me. I've posted what info I have but let me know...
BSOD playing BF4 , error 0x3B
in BSOD Help and Support

hi every one i have formatted my pc and installed windows 7 because a lot of bsod in windows 8 i have bsod when i was playing bf4 so please if any one can help me to know what is the reason of bsod i upload the minidump files in attachment
BSOD error 0x3b
in BSOD Help and Support

I have been getting BSOD 0x3b's nearly everyday for the past few days. I downloaded a hotfix from Microsoft that seems to have have stopped the win32k.sys+c47b3 driver error. The 0x3b I just had shows mrxsmb20.sys as the driver error.
BSOD 3ds Max render, error 0x3B
in BSOD Help and Support

Hello everyone! My first post here. I had a BSOD while rendering some animation on 3ds Max. My computer is freshly installed, because previously the BSOD is quite often but I choose to ignore it. I don't install any driver except for the graphics card to minimize the driver conflict as they say....
Three day old computer, started getting blue screen'd after I left it on overnight the first day. Now it's happened one time each day and I'm a bit worried I may have a hardware problem. Attached is the diagnostic file, thanks for the help in advanced!
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 06:08.
Find Us