Code:
- BugCheck 3B, {c0000005, fffff80002ec5b65, fffff88008833ef0, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ec5b65, Address of the instruction which caused the bugcheck
Arg3: fffff88008833ef0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ec5b65 498b08 mov rcx,qword ptr [r8]
CONTEXT: fffff88008833ef0 -- (.cxr 0xfffff88008833ef0)
rax=00000012ea220001 rbx=fffff88008834930 rcx=fffff88000c77680
rdx=92fff8a005c41151 rsi=0000000000000000 rdi=fffff8a005cbdac0
rip=fffff80002ec5b65 rsp=fffff880088348d0 rbp=fffffa80053b9890
r8=92fff8a005c41150 r9=fffff8a00037fbd0 r10=fffff88000c77680
r11=0000000000000006 r12=fffffa80053b9898 r13=fffff88008834a28
r14=fffffa8004154f20 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ec5b65 498b08 mov rcx,qword ptr [r8] ds:002b:92fff8a0`05c41150=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: iTunes.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002ec5b65
STACK_TEXT:
fffff880`088348d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16
FOLLOWUP_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ec5b65 498b08 mov rcx,qword ptr [r8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExpInterlockedPopEntrySListFault16+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
STACK_COMMAND: .cxr 0xfffff88008833ef0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
Followup: MachineOwner
---------
- BugCheck 3B, {c0000005, fffff80002e77b65, fffff8800726d9e0, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e77b65, Address of the instruction which caused the bugcheck
Arg3: fffff8800726d9e0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e77b65 498b08 mov rcx,qword ptr [r8]
CONTEXT: fffff8800726d9e0 -- (.cxr 0xfffff8800726d9e0)
rax=0000001c08530001 rbx=fffff8800726e438 rcx=fffff88000e9a680
rdx=84fff8a013b373c1 rsi=fffff8a002f8c5d0 rdi=fffffa8007a81010
rip=fffff80002e77b65 rsp=fffff8800726e3c0 rbp=fffffa80052a8d60
r8=84fff8a013b373c0 r9=0000000000000727 r10=fffff88000e9a680
r11=0000000000000000 r12=0000000080000000 r13=fffff8a0035a6140
r14=0000000000000001 r15=fffffa8007a81440
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e77b65 498b08 mov rcx,qword ptr [r8] ds:002b:84fff8a0`13b373c0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: wmpnetwk.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002e77b65
STACK_TEXT:
fffff880`0726e3c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16
FOLLOWUP_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e77b65 498b08 mov rcx,qword ptr [r8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExpInterlockedPopEntrySListFault16+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
STACK_COMMAND: .cxr 0xfffff8800726d9e0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
Followup: MachineOwner
---------
- BugCheck 3B, {c0000005, fffff80002e80b65, fffff88006a64a60, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002e80b65, Address of the instruction which caused the bugcheck
Arg3: fffff88006a64a60, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e80b65 498b08 mov rcx,qword ptr [r8]
CONTEXT: fffff88006a64a60 -- (.cxr 0xfffff88006a64a60)
rax=00000018cff00001 rbx=fffff88006a654a0 rcx=fffff88000dcc680
rdx=aefff8a00b2c6711 rsi=0000000000000000 rdi=fffff8a00b7f28c0
rip=fffff80002e80b65 rsp=fffff88006a65440 rbp=fffffa8005664d60
r8=aefff8a00b2c6710 r9=fffff8a0000944d0 r10=fffff88000dcc680
r11=0000000000000006 r12=fffffa8005664d68 r13=fffff88006a65598
r14=fffffa800463ba90 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02e80b65 498b08 mov rcx,qword ptr [r8] ds:002b:aefff8a0`0b2c6710=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002e80b65
STACK_TEXT:
fffff880`06a65440 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16
FOLLOWUP_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02e80b65 498b08 mov rcx,qword ptr [r8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExpInterlockedPopEntrySListFault16+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
STACK_COMMAND: .cxr 0xfffff88006a64a60 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
Followup: MachineOwner
---------
- BugCheck 3B, {c0000005, fffff80002ed8b65, fffff880087ebf10, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ed8b65, Address of the instruction which caused the bugcheck
Arg3: fffff880087ebf10, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed8b65 498b08 mov rcx,qword ptr [r8]
CONTEXT: fffff880087ebf10 -- (.cxr 0xfffff880087ebf10)
rax=000000060a300001 rbx=fffff880087ec950 rcx=fffff88000c1b680
rdx=84fff8a00c858ac1 rsi=0000000000000000 rdi=fffff8a00ea6c5f0
rip=fffff80002ed8b65 rsp=fffff880087ec8f0 rbp=fffffa80056bf190
r8=84fff8a00c858ac0 r9=fffff8a0001e7410 r10=fffff88000c1b680
r11=0000000000000006 r12=fffffa80056bf198 r13=fffff880087eca48
r14=fffffa8005893cc0 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ed8b65 498b08 mov rcx,qword ptr [r8] ds:002b:84fff8a0`0c858ac0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: iTunes.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002ed8b65
STACK_TEXT:
fffff880`087ec8f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16
FOLLOWUP_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed8b65 498b08 mov rcx,qword ptr [r8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExpInterlockedPopEntrySListFault16+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
STACK_COMMAND: .cxr 0xfffff880087ebf10 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
Followup: MachineOwner
---------
- BugCheck 3B, {c0000005, fffff80002ed6b65, fffff880085c6970, 0}
Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002ed6b65, Address of the instruction which caused the bugcheck
Arg3: fffff880085c6970, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed6b65 498b08 mov rcx,qword ptr [r8]
CONTEXT: fffff880085c6970 -- (.cxr 0xfffff880085c6970)
rax=0000000eeeb8000b rbx=fffff880085c73b0 rcx=fffff88000e9a680
rdx=32fff8a00d8f0ab1 rsi=0000000000000000 rdi=fffff8a00e872860
rip=fffff80002ed6b65 rsp=fffff880085c7350 rbp=fffffa800521dd60
r8=32fff8a00d8f0ab0 r9=fffff8a0000ac6d0 r10=fffff88000e9a680
r11=0000000000000006 r12=fffffa800521dd68 r13=fffff880085c74a8
r14=fffffa8005e35960 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202
nt!ExpInterlockedPopEntrySListFault16:
fffff800`02ed6b65 498b08 mov rcx,qword ptr [r8] ds:002b:32fff8a0`0d8f0ab0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: iTunes.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002ed6b65
STACK_TEXT:
fffff880`085c7350 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault16
FOLLOWUP_IP:
nt!ExpInterlockedPopEntrySListFault16+0
fffff800`02ed6b65 498b08 mov rcx,qword ptr [r8]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExpInterlockedPopEntrySListFault16+0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4e02aaa3
STACK_COMMAND: .cxr 0xfffff880085c6970 ; kb
FAILURE_BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
BUCKET_ID: X64_0x3B_nt!ExpInterlockedPopEntrySListFault16+0
Followup: MachineOwner
---------
These all seem fairly random with iTunes being the only program named twice. ntkrnlmp.exe is a main system file and shows up as a blue screen error for a lot of people/problems for that reason, so it most likely isn't the cause of the issue.
When you uninstalled iTunes, did you follow the steps outlined in
Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7 to do the uninstalls in the correct order?
A few things to check, as well:
Run
SFC /SCANNOW Command - System File Checker (you may need to run it three times to fix all issues).
Also, run
Disk Check with "Automatically fix file system errors" checked.
If it finds problems and your issues persist, run
Disk Check with "Scan for and attempt recovery of bad sectors" checked.
Run the boot version of
Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything, run the extended version of
the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete.
If none of the above help, run Driver Verifier to see if there is a driver causing issues:
1.
Backup your system and user files
2.
Create a system restore point
3. If you do not have a Windows 7 DVD,
Create a system repair disc
4. Run
Driver Verifier
If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using
System Restore OPTION TWO.
Thanks to zigzag3143 for contributing to the above steps.