win32k.sys 0x3b BSOD
Hello. Have some problems with my OS or PC. Symptoms: i want to run 34 copies of the same application, the application process can not be in the system more than once, so copies are run through a sandbox. Normally only 24 runs of the process when i run other processes begin to distort the desktop (desktop items move down relative to each other), from the menus, icons and windows are black and white replacement, at the same time, desktop replacements of these shimmering colors. Running processes are closed, can't to open the console mmc (writes about some error and not an opportunity to create a document (!?)), in task manager falls off resource monitor. Return all to the previous state can be turning all of the window (displaying the desktop), but it is up to the first deployment \ attempts to run the application \ menu - then thus shit begins again. At particularly "successful" cases could catch BSOD win32k.sys 0x0000003B: SYSTEM_SERVICE_EXCEPTION. My config: OS: Win 7 HP x64 CPU: my - Intel(R) Core(TM) i3-2100 CPU @ 3.1GHz (temperature at idle: 42, under usage: 56 ), replacement - Intel(R) Core(TM) i5-2450P CPU @ 3.20GHz (temperature at idle: 38 , under usage: 49) MB: my - TH67B, replacement - TH67+ RAM: 16 Gb DDR3 Patriot (9-9-9-24-1T, 4x4Gb) PSU: my - noname 360 W, replacement - AeroCool VP-650 650 W HDD: my- Seagate Sata-2 200 Gb, replacement - Western Digital 750 Gb VGA: previously been integrated graphics HD 1000 core, replacement - AMD HD 5450 Standard turbobust as OC. sfc / scannow did not find anything. Memory was tested individually and en masse by programs Windows Memory Diagnostic Tools (Advanced Tests) and Memtest86 + for a pass. Bug check: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff9600017ff92, 0xfffff88006c93230, 0x0000000000000000) Dump: http://ifolder.ru/29182273 Mini dumps: http://ifolder.ru/29186497 msinfo32 config: http://ifolder.ru/29186499
March 9th, 2012 2:29pm

Take care of all drivers and make update http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx Regards Milos
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 8:27am

Take care of all drivers and make update http://msdn.microsoft.com/en-us/library/ff558949%28VS.85%29.aspx Regards Milos Already did it, but this problem still exist.
March 10th, 2012 8:41am

Symptoms: i want to run 34 copies of the same application, the application process can not be in the system more than once, so copies are run through a sandbox. Normally only 24 runs of the process when i run other processes begin to distort the desktop (desktop items move down relative to each other), from the menus, icons and windows are black and white replacement, at the same time, desktop replacements of these shimmering colors. Running processes are closed, can't to open the console mmc (writes about some error and not an opportunity to create a document (!?)), in task manager falls off resource monitor. Return all to the previous state can be turning all of the window (displaying the desktop), but it is up to the first deployment \ attempts to run the application \ menu - then thus shit begins again. At particularly "successful" cases could catch BSOD win32k.sys 0x0000003B: SYSTEM_SERVICE_EXCEPTION. Standard turbobust as OC. Memory was tested individually and en masse by programs Windows Memory Diagnostic Tools (Advanced Tests) and Memtest86 + for a pass. Bug check: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff9600017ff92, 0xfffff88006c93230, 0x0000000000000000) Ok, this is not so easy to understand. You need to run 34x the same program, 33x in Sandboxes, yes? When you run 24+, you begin to see graphical bugs, error messages, resource errors, yes? If this is just graphical - not enough video RAM - reduce the Desktop to 16 or 24bpp. Or test with 1GB gfx card. If this is any other Windows resource, 85%+ resources used = crash imminent. There are many limits: http://blogs.technet.com/b/markrussinovich/archive/2008/07/21/3092070.aspx Maybe running some in a VM will make a difference. What is the software? ========================================================================================== Debug session time: Thu Mar 8 12:55:43.627 2012 (UTC + 0:00) System Uptime: 0 days 0:42:30.861 Loading Kernel Symbols ............................................................... ................................................................ .......... Loading User Symbols PEB is paged out (Peb.Ldr = 000007ff`fffdf018). Type ".hh dbgerr001" for details Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 3B, {c0000005, fffff9600020ff92, fffff88007dc0230, 0} Page 3d2587 not present in the dump file. Type ".hh dbgerr004" for details Probably caused by : win32k.sys ( win32k!xxxTrackPopupMenuEx+9ba ) Followup: MachineOwner --------- 2: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_SERVICE_EXCEPTION (3b) An exception happened while executing a system service routine. Arguments: Arg1: 00000000c0000005, Exception code that caused the bugcheck Arg2: fffff9600020ff92, Address of the instruction which caused the bugcheck Arg3: fffff88007dc0230, Address of the context record for the exception that caused the bugcheck Arg4: 0000000000000000, zero. Debugging Details: ------------------ EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: win32k!xxxTrackPopupMenuEx+9ba fffff960`0020ff92 410fba670808 bt dword ptr [r15+8],8 CONTEXT: fffff88007dc0230 -- (.cxr 0xfffff88007dc0230) rax=0000000000000000 rbx=0000000000000001 rcx=fffff900c01fd9f1 rdx=fffff900c682b9f1 rsi=0000000000000182 rdi=fffff900c845dc20 rip=fffff9600020ff92 rsp=fffff88007dc0c10 rbp=fffff900c07b3da0 r8=fffff900c682b9f0 r9=0000000000000080 r10=fffff90000000540 r11=fffff900c01fd9f0 r12=fffff900c2dd3c20 r13=fffff900c07b1c30 r14=fffff900c060e8c0 r15=0000000000000000 iopl=0 nv up ei pl zr na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246 win32k!xxxTrackPopupMenuEx+0x9ba: fffff960`0020ff92 410fba670808 bt dword ptr [r15+8],8 ds:002b:00000000`00000008=???????? Resetting default scope DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: explorer.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff960001bdbce to fffff9600020ff92 STACK_TEXT: fffff880`07dc0c10 fffff960`001bdbce : 00000000`00000000 fffff900`c07b3da0 80010000`00000070 00000000`0000022c : win32k!xxxTrackPopupMenuEx+0x9ba fffff880`07dc0d40 fffff800`0288fed3 : fffffa80`0ce8db60 00000000`0027d278 fffff880`07dc0e08 fffff960`00187c04 : win32k!NtUserTrackPopupMenuEx+0x126 fffff880`07dc0df0 00000000`7757716a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`0027d258 fffff800`02888210 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7757716a fffff880`07dc13b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCallUserMode FOLLOWUP_IP: win32k!xxxTrackPopupMenuEx+9ba fffff960`0020ff92 410fba670808 bt dword ptr [r15+8],8 SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: win32k!xxxTrackPopupMenuEx+9ba FOLLOWUP_NAME: MachineOwner MODULE_NAME: win32k IMAGE_NAME: win32k.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4f10ff24 STACK_COMMAND: .cxr 0xfffff88007dc0230 ; kb FAILURE_BUCKET_ID: X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba BUCKET_ID: X64_0x3B_win32k!xxxTrackPopupMenuEx+9ba Followup: MachineOwner
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 9:20am

Process Explorer and Process Monitor would help to catch the processes in trouble. Perhaps the application is not correctly designed and is prone to behaviour like this one. Regards Milos
March 10th, 2012 9:24am

You need to run 34x the same program, 33x in Sandboxes, yes? - Nope. All of 34x in Sandboxes. When you run 24+, you begin to see graphical bugs, error messages, resource errors - it's look like this shit "Note the Start button on the bottom left where it belongs, but the rest of the task bar at the top of the screen. The desktop has turned black and the sidebar has lost most of its color. Your mileage may vary, but you can see that bizarre things start to happen, potentially making it impossible to interact with the desktop in a reliable way. " http://blogs.technet.com/b/markrussinovich/archive/2010/03/31/3322423.aspx and mmc crashed with resource monitor of task manager. http://xmages.net/i/3410265 But applications didn't load GPU adapter. What is the software? - it's game, running in text client mode and connecting to the server. So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb.
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 10:11am

I guessed it was a game ^^ SRO or what? Performance tab of TaskMan - keep it on top, watch the Handles, Threads, Processes and Commit (low on the right), make notes of how they increase, 5 running, 10 running, 15 running, etc. Report back with the progression numbers please. Have you tried running 1 in a sandbox in VM VirtualBox? GPU-Z will give you the memory usage for the gfx card. The Russinovich articles will be useful, he wrote the tools Process Explorer and Process Monitor (in msg from Milos above), it must be a resource nearing the limit somewhere - which resource ... ?
March 10th, 2012 10:24am

Process Explorer and Process Monitor would help to catch the processes in trouble. Perhaps the application is not correctly designed and is prone to behaviour like this one. Regards Milos How? What i must try ti find?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 10:25am

So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb. I just saw the edit: No, not memory (RAM) - memory is only one of many finite resources that could be responsible (back to Russinovich ^^), what about Commit (GB) in TaskMan (when 10GB RAM used, how big is Commit)?
March 10th, 2012 11:26am

So, just need to add more memory? I have 16 Gb and when it crashed applications use 10-12 Gb. I just saw the edit: No, not memory (RAM) - memory is only one of many finite resources that could be responsible (back to Russinovich ^^), what about Commit (GB) in TaskMan (when 10GB RAM used, how big is Commit)? Need some time for doing tests. I'm at work today. Have you tried running 1 in a sandbox in VM VirtualBox? - Nope, i'm not tried. But i want to run 1x unsandboxed or run 20x in sandbox and others in VM.
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2012 6:18pm

Looks like the lack ofvideo memory. http://xmages.net/i/3414774
March 12th, 2012 10:36pm

Looks like the lack ofvideo memory. http://xmages.net/i/3414774 Yes, looks like it :( A new1GB DDR3 card should enable you to run all of them cheaply, for playing, GDDR5 is a little faster (better for playing) but a little more expensive.
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2012 5:19am

I still can not figure out what caused the problem that I described. I replaced most of the hardware, and IT is still present. With the graphics card AMD HD 6450 512 MB i can't to run 24 processes. With built-in graphics core i3 2100 and 1 Gb video RAM i run all of the 34 process, but the mmc and resorse monitor ( and Real Temp) call the old problem.
March 13th, 2012 6:33am

Please be more descriptive - no gfx errors with 34 bots running now but errors in Windows logs, yes? What problems are showing in Resource Monitor? And Real Temp?
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2012 6:37am

Sorry. Gfx errors with running 34 bots still exist, but now they don't cause BSOD. To avoid gfx bugs should not run other applications. But I'm not sure of the stability. Here is Windows Log errors: Event ID 10010 The server {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} did not register with DCOM within the required timeout. Event ID 36 The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. Event ID 10010 Application 'C:\Windows\System32\mmc.exe' (pid 276) cannot be restarted - Application SID does not match Conductor SID.. Event 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . Event ID 10 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Event ID 512 InitializePrintProvider failed for provider inetpp.dll. This can occur because of system instability or a lack of system resources. Event ID 1 The backing-file for the real-time session "NT Kernel Logger" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers. When i try to run these programs (real temp, resource monitor, process explorer, mmc) graphic distortion are begin. I saw only MMC error: "MMC can not open the file: C:\Windows\system32\compmgmt.msc *bla-bla-bla*"
March 14th, 2012 7:44am

Running 34x bots is obviously creating more than enough stress on the system resources as it is; each time you run another program, it only adds to the drain, bringing it closer to crashing. You must either dedicate the machine to running bots and nothing else or reduce the number of bots running. Event 4107 Event 10 Event 36 = normal behaviour, 15% of disk space is allowed by default http://en.wikipedia.org/wiki/Shadow_Copy. http://www.blackviper.com/windows-services/microsoft-software-shadow-copy-provider/ Event ID 512 InitializePrintProvider failed for provider inetpp.dll. This can occur because of system instability or a lack of system resources. Event ID 10010 The server {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C} = I think this is the Intel trigger for keyboard shortcuts? Try disabling it in MSConfig to test. Event ID 1 yes, there will be a lot of logging, the machine is running close to its' limits. You still haven't said which game and bot ...
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2012 8:32am

You still haven't said which game and bot ... Team Fortress 2 : 1 server and 31 clients. :D Thanks a lot for your help. In the end of the week i get my 8 x 3 gb ram, psu, video card and i can doing some tests again.
March 14th, 2012 8:42am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics