Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My computer running Windows 7 x64 crushes time to time. Could you please advise tool which could help with analyzing memory dump or point out possible reason and further troubleshooting steps?

The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff96000015de8, 0xfffff88007db9fb0, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 080210-24819-01.

The quotation from the result of WinDbg run

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

...

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: explorer.exe

...

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

Is there any way to understand which particular driver has a problem?

share|improve this question
    
See also - superuser.com/questions/28448/… –  Nick Josevski Feb 13 '12 at 9:49

3 Answers 3

up vote 10 down vote accepted

I would use Microsoft's debugging tool: WinDbg. It can read and automatically analyze memory dumps like yours. (The WinDbg command is aptly named: !analyze)

The tool is powerful, but quite complex. Here is a detailed HOW TO guide.

The same forum suggests BlueScreenView 1.27. I have not tried it; it's probably simpler to use, but does not give as detailed information.


update:

Is there any way to understand which particular driver has a problem?

After !analyze run k or kd. This will show the stack trace right before the crash. The stack trace is the list of function calls made right before the crash, with the most recent one at the top. You should at least be able to learn the filenames of the modules (DLL's) involved.

I suggest sharing the full results of !analyze and/or the memory dump with people who are are skilled at WinDbg and are interested in helping. The previously linked MajorGeeks forum looks like a good place.

share|improve this answer
    
Thanks! Do you have any ideas what is next step? I added results of WinDbg run –  bublegumm Aug 4 '10 at 0:03

This may be causing it http://support.microsoft.com/kb/980932 (Use "View and request hotfix downloads" at the top of the page to request the hotfix, do not apply the Hotfix if it is not a 1394 Firewire issue)

Otherwise its Probably a video driver causing it, seems to be common in W7, but other hardware can cause it also, bad memory modules are also highly suspect.

Bug Check 0x3B: SYSTEM_SERVICE_EXCEPTION

http://msdn.microsoft.com/en-us/library/ff558949(v=VS.85).aspx

The SYSTEM_SERVICE_EXCEPTION bug check has a value of 0x0000003B. This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code. Parameters

The following parameters are displayed on the blue screen. ParameterDescription 1The exception that caused the bug check 2The address of the exception record for the exception that caused the bug check 3The address of the context record for the exception that caused the bug check 40

Cause

This error has been linked to excessive paged pool usage and may occur due to user-mode graphics drivers crossing over and passing bad data to the kernel code.

share|improve this answer

There is a free tool called bluescreenview it will analyze the dump files from c:\windows\minidump and will show a graphical windows ,so user can identify the errors

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.