Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

System_Service_Exception occurring twice in six days.


  • Please log in to reply
3 replies to this topic

#1 Sylar

Sylar

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:10:14 AM

Posted 26 July 2013 - 01:35 PM

I have Windows Vista Home Premium Edition (x64) Service Pack 2.

 

Twice in the past six days I've had a System_Service_Exception occur.  Both have been caused (according to BlueScreenView) by win32k.sys

 

Description of the Crash: 

The information I received from bluescreenview about the latest crash: 

*** STOP: 0x0000003b (0x00000000c0000005, 0xfffff960000cf210, 0xfffffa60089ece10, 
0x0000000000000000)
 
*** win32k.sys - Address 0xfffff960000cf210 base at 0xfffff96000080000 DateStamp 
0x4c1f7191
 
What I have already done: 

 

-I have already tested my memory, and it checks out.

-I have run a quickscan of MalwareBytes

-After the first crash I did a system cleanup to clear up space (currently 402 GB of free space of 454)

 

Other Notes:

-I have not installed any new hardware in the past year.

-I have not installed any new software in the past year

-My computer is 5 years old.

-I had system_service_exception crashes back in March and in November of last year.

 

I figure having a crash once every 4 months or so is somewhat acceptable, and maybe even expected.  But twice in six days has given me reason for concern.  Should I be concerned?  And are there any other steps I should take to try and prevent future crashes?


Edited by Sylar, 26 July 2013 - 01:41 PM.


BC AdBot (Login to Remove)

 


#2 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:14 PM

Posted 26 July 2013 - 02:01 PM

:welcome:

 

win32k.sys <== Sometimes driver related issue, but I have seen malware involved. 

 

 

Run this tools:

  1. MBAM in safe mode.
  2. TDSSKiller
  3. Speccy

 

 

:step1: Rerun MBAM

:step2:  Running TDSSKiller to obtain log

 

Note: Don't cure or delete a threat, but choose skip for all instead.

  • Please download TDSSKiller from here and save it to your Desktop
  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters

tds2.jpg

  • In the Additional options: Check Detect TDLFS file system
  • Click Start Scan and allow the scan process to run

tds4-1.jpg

  • Choose for all threats to Skip for all of them.
  • Click Continue
  • Please post the TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)

===================================================

 

:step3: Publish a snapshot with Speccy:

http://www.bleepingcomputer.com/forums/t/323892/publish-a-snapshot-using-speccy/#entry1797792

 

 


Edited by GodfatherKing, 26 July 2013 - 02:03 PM.

If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#3 Sylar

Sylar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:10:14 AM

Posted 03 August 2013 - 06:59 PM

Nothing turned up, but I do have additional information:

In event viewer, I am getting an error that states:

The device, \Device\Harddisk0\Dr0 has had a bad block

 

And it's appeared multiple times starting yesterday.  I ran chkdsk, but it didn't find anything.  Yesterday when it happened, my computer shutdown.  Today when it happened (so far) it did not.

 

At around the same time, VSS starts (and then stops) Then it successfully creates a scheduled checkpoint after they stop.



#4 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:14 PM

Posted 04 August 2013 - 01:47 AM

Please post the speccy report as suggested.

 

Download MiniToolBox and run the program. Select
List Last 10 Event Viewers, List Installed Programs and List Users, Partitions and Memory Size then click Go.
A notepad will open then copy-paste the report on your next reply.


Tekken
 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users