BSOD 0x00000003b SYSTEM_SERVICE_EXCEPTION

Starcasm · 12 Jul 2010

Hello everyone. I appreciate any help I can get with this issue I have. I have spent multiple days troubleshooting and I thought it may be time for assistance from people more knowledgeable (bow). Let me start with the error code:

Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: 3b
BCP1: 00000000C0000005
BCP2: FFFFF80002E8DE51
BCP3: FFFFF88008E2DCC0
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

This occurs when I try to install a driver for a Korg Padkontrol. It used to work a few months ago, when I first purchased it and tested it out. Since then I have tried to install a driver that I did not install when I first purchased it. It worked fine without it but I needed to install it for another music producing application. Now it crashes whenever I plug it in and install the driver automatically, or when I install it from the software Korg supplied.

I have currently ran driver genius, which updated all drivers possible. I also completed a few other troubleshooting techniques I saw for other people experiencing the same error, but no success. I think I have tried everything except a memtest, but that's on a cd ready to run on my downtime.

Attached is the zip file of a mini dump, and a sydata file Windows 7 creates in its crash report.
Once again, any help would be appreciated. Thanks in advance.

ttran · 12 Jul 2010

Hi and welcome to SF

That doesn't sound good to me. Let's start from general view first because based on what you described, we can say that this is problem related to "computer crash while plug in USB etc"..and basically, anything can cause this from device driver, memory, power supply etc..

The stop code is 3B,

STOP 0x0000003B: SYSTEM_SERVICE_EXCEPTION

Usual causes: System service, Device driver, graphics driver, ?memory

In looking through your drivers, I can see that you have some out of date drivers, please update them now.

Code:

TVALZ_O  TVALZ_O.SYS  Fri Nov 09 10:08:41 2007 (4733CF39)

It is TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver
http://www.csd.toshiba.com/cgi-bin/tais/support/jsp/home.jsp#

Code:

Tpkd     Tpkd.sys     Tue Sep 09 03:00:58 2008 (48C5847A)

http://www.paceap.com
Download the latest Tpkd.zip driver, unzip it, and install it, remember to uninstall previous version of it

Code:

fffff880`04a34000 fffff880`04a4b000   rimspx64 rimspx64.sys Tue Feb 27 14:10:37 2007 (45E3D96D)
fffff880`0446a000 fffff880`044c1000   rixdpx64 rixdpx64.sys Mon Mar 26 17:48:23 2007 (4607A4F7)
rimmpx64 rimmpx64.sys Mon Mar 19 10:09:34 2007 (45FDFEEE)

They are your Ricoh Memory Card Reader driver, update them as well.

Code:

RimSerial_AMD64 RimSerial_AMD64.sys Tue Nov 25 00:01:01 2008 (492ADDCD)

It is your Virtual Serial Port driver for Blackberry Research In Motion - Products

Code:

diginet  diginet.sys  Thu Dec 04 14:12:13 2008 (493782CD)

Here is information about it
Product name: Pro Tools
Description: 32-bit Ethernet Packet Driver
Manufacturer: Digidesign, A Division of Avid Technology, Inc.

I'm not sure if it compatible with 32 bit only, however, u must check it out too as I saw you are using 64 bit right?

Another thing is Deamon tool or Alcohol 120% are known for causing BSOD. Please remove them completely then use this tool to remove sptd.sys, component of those Virtual Cd program that not easy removed by normal installation.
DuplexSecure - Downloads

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\TUANTR~1\AppData\Local\Temp\Rar$DI00.721\070610-27565-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*e:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02e1a000 PsLoadedModuleList = 0xfffff800`03057e50
Debug session time: Wed Jul  7 09:41:35.924 2010 (UTC + 7:00)
System Uptime: 0 days 0:57:09.077
Loading Kernel Symbols
...............................................................
................................................................
...........................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80002e8de51, fffff88008e2dcc0, 0}

Probably caused by : ntkrnlmp.exe ( nt!RtlCompareMemory+41 )

Followup: MachineOwner
---------

Hope it's help

Tuan

Starcasm · 12 Jul 2010

Firstly, Thank you for all of the assistance and information. Awesome diagnosis ;D
Furthermore, I have completed all tasks that you have suggested.
I have updated the Ricoh card reader (Ricoh Card Reader for Windows Vista (32/64bit)(v3.54.02; 04-25-2008; 2.9M)), Toshiba ACPI (Toshiba Value Added Package (TVAP) for Windows 7/Vista (64)(v1.2.27_64; 10-20-2009; 44.67M)), and the tpkd driver. The Tpkd had no option of
uninstalling, and when I ran the setup asked if I would like to upgrade, so I chose that instead. I hope removing it first was not critical to this procedure.

Next I removed Alcohol, Pro Tools(with midi drivers), and the BB applications instead of updating, because these were all redundant. I ran the duplexsecure tool to remove the sptd file.

I just attempted to install the driver using the software Korg provided and it stated 'missing filies'. Then I went into the uninstall utility for Korg and removed the midi entries associated with the device. The USB connection sound went off, and then Windows device installer began installing the driver for this automatically. It looked as if it wasn't going to crash, and then it did D; I have attached the new dump file along with the sysdata to verify everything I completed was done properly, and if anything else faulty. Again thank you for the help - much obliged!

ttran · 12 Jul 2010

Do you have any problem installing different device such as webcam, mouse, usb etc...Sorry, I'm not a hardware guy so It's hard for me to make a conclusion about your device. However, it sounds to me that there are some faulty or compatibility issue between your device and the system. Make sure that your device is certified for window 7 64 bit and the drivers support win7 64. I'm not quite clear about the driver that you install, however, you can try to remove old driver completely (everything) before installing new package of driver.

In looking through your driver, I still see that the Ricoh memory card reader are still date from 2007, 2008, make sure that you download and install the latest version of driver.

I just found this out of date driver that I might miss in previous post:

Code:

SynTP    SynTP.sys    Fri Dec 07 08:42:03 2007 (4758A4EB)

It is your Synaptic Touch Pad Driver, please download and install fresh copy of it
Drivers | Synaptics

Also, do a system file check:
SFC /SCANNOW Command - System File Checker

Code:

BugCheck 3B, {c0000005, fffff80002e8be51, fffff88008c37cc0, 0}

Probably caused by : ntkrnlmp.exe ( nt!RtlCompareMemory+41 )

Followup: MachineOwner
---------
PROCESS_NAME:  drvinst.exe <---Driver installation process

Starcasm · 13 Jul 2010

I do not currently have any issues installing any other hardware or devices. I currently own a logitech usb mouse and use a midi keyboard frequently. I have never had an issue installing a hardware device in the past besides this one.

I downloaded the Korg driver from this site.
Korg - Support Results

It clearly states here that the drivers are compatible with both 32/64 bit versions of Windows 7.

I have already attempted reinstalling the application, as well as deleting the registry keys and appdata I could find.
The synaptics latest drivers have been installed.
I have already completed an sfc, but ran again for kicks. No errors were reported.

Lastly, I completed an extensive search for ricoh card drivers and found no updates more current than the version I have(For Toshiba).
I am thinking about removing the ricoh driver entirely to confirm if there was a conflict. Please let me know if you have any other suggestions; thank you for your help!

One thing that occurred recently was when I was using a music production application and switched the audio output to ASIO4ALL v2 driver, it crashed my computer with the same error. I immediately uninstalled the drivers until further notice.

ttran · 14 Jul 2010

It is possible that faulty can be drivers or device (your Korg products)
I usually don't recommend to remove the drivers without knowing exactly it is the cause. If you want to know what drivers are bad to eliminate, please enable Driver Verifier. It will flag bad drivers if there are any. Based on what you just described, the causes can be pretty broad.
Here is the instruction for turning on Driver Verifier:
Using Driver Verifier to identify issues with Drivers

Regard,

Tuan

Starcasm · 14 Jul 2010

I wish I would've documented all of my troubleshooting D;
During my troubleshooting steps, I've enabled Driver Verifier, and reboot - in order for it to operate. Upon Windows booting back up the computer 'Bluescreened' I would say right before the Windows login screen. This happened several times, never being able to get back into the system, and the system repair option became available. I've tried using system repair, however ran into a conflict.

I didn't record what the error was - only tried another technique which was system restore. That completed successfully and logged into Windows with no known issues. I continued forward with the first issue and deemed this as an option I cannot use.
I guess I will give it another shot and see if I run into a roadblock again. I just don't want to render this computer inoperable; lots of things I have to backup that I am procrastinating on!

-EDIT

Woops I've just clicked the link you posted. I guess I should have done that before replying - That is actually very useful information! I actually read that kb article (http://support.microsoft.com/kb/244617)on this problem but not once did it mention giving BSOD's. Didn't know it was supposed to crash on purpose. Well, from reading I can tell my computer crashes before Windows enters its login screen, and I have already system restored. Not sure if I should complete another test or try and retrieve a file. Don't know if one remains after the system restore.

ttran · 14 Jul 2010

Have you fully follow the instruction:

Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.

If you can't get into Windows because it crashes too soon, try it in Safe Mode.

Starcasm · 15 Jul 2010

I have just completed this step twice to ensure I was doing it correctly - but I ran into some issues along the way.
After the computer crashed and I reboot into safe mode, there were no Dmp logs available in the C:\windows\minidump folder. I turned off driver verifier and completed the instructions again. The results were the same; no dmp files.

On a side note I was able to install the Korg drivers in safe mode, without any BSODs. Plug and play worked with no issue, and I used the Korg driver utility to install the driver as well. As soon as I reboot and loaded Windows normally, the computer crashed with a Bluescreen. I removed the Korg device, and then restarted the computer. It loaded normally that time. Attached are the crash reports from Windows crashing before logging into windows with the device plugged in.

Jonathan_King · 15 Jul 2010

Those dmps are corrupted...could you try uploading them again?