[SOLVED] Bsod system_service_expiration followed by error code: 0xc0000001

James Noscoper

Distinguished
Aug 23, 2014
226
9
18,615
Hi,

Im recently getting this bsod after hours of gaming. Only happened when I cloned my hard drive to an m.2 SSD. Not sure if this has any issues
My cpu and gpu are both overclocked.
I have enough storage, all drivers are up to date.


CPU: i7-8700k w/ Corsair H115i AIO liquid cooler
GPU: Aorus RX 580
MOBO: Aorus Gaming 7
RAM: Corsair Dominator 32GB (4x8) 3200mhz
PSU: Corsair tx750m
FANS: 4x120mm(2 in, 1 out)
SSD: 2 SSD 120gb, 250gb, m.2 1tb
HDD: 2TB Seagate
 
Solution
Heat? that can cause it to crash. can cause errors.

could run hwinfo and log the sensor recordings while you play a game/wait for a crash in game
when you open program, click on sensors only and click run
in next window, down bottom are a row of icons,
click on the one to right of the clock, it will show "Logging start" if you hover over it.
this opens File explorer, lets you create a file to record the results in.
run it each time you expect to crash. It might give us a clue - it often gives too much info
it creates a csv file.

upload to a file sharing website and show link here (you can read the output in excel or google docs)
remove CPU oc until we figure out problems
Can you follow option one on the following link - here - and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD - that creates a file in c windows/minidump after the next BSOD

  1. copy that file to documents
  2. upload the copy from documents to a file sharing web site,
  3. and share the link in your thread so we can help fix the problem
system service exception. I know that error, the one you thought you got was new to me :)
 
Hi, I ran the dump file through the debugger and got the following information: https://jsfiddle.net/ocnL150e/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:010221-10828-01.dmp (Jan 1 2021 - 20:56:14)
Bugcheck:SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:memory_corruption (Process: RocketLeague.exe)
Uptime:0 Day(s), 2 Hour(s), 52 Min(s), and 29 Sec(s)

Comment: The overclocking driver "RTCore64.sys" was found on your system. (MSI Afterburner)

Possible Motherboard page: https://www.gigabyte.com/us/Motherboard/Z370-AORUS-Gaming-7-rev-10#kf
You have the latest BIOS already installed, version F15a.

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.
 
I can't tell exactly so we update drivers.

its a long time since i seen these
Sep 20 2018e2xw10x64.sysKiller PCI-E Gigabit Ethernet Controller driver
newer versions on https://www.gigabyte.com/au/Motherboard/Z370-AORUS-Gaming-7-rev-10/support#support-dl-driver-lan
your intel lan is more up to date
update razer if you can
update intel management engine interface - https://www.gigabyte.com/au/Motherboard/Z370-AORUS-Gaming-7-rev-10/support#support-dl-driver-chipset
should be newer version of Icue
 
So I just need to update my lan driver, razer synapses, intel and icue?

Just checked and icue is already up to date

in confused as I had an issue a month ago and clean wiped my pc and updated everything to go it working and the only thing I’ve done is clone my drive to a bigger st
 
I've tried updating my realtek and killer net and it's completely broken it. I've got no sound to my headset, but comes out of monitors (yes I've checked the properties etc), seems like it's not able to install or something. and the same with killer ethernet it installs drivers but then doesn't install the program as it cant find it. I feel like cloning my drive has create permissions errors
 
On Sat 02/01/2021 23:39:07 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-11000-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0x3B (0xC000001D, 0xFFFFF80075408060, 0xFFFFB402F1DCFE80, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 22:04:25 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-11671-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0xA (0x28E57E60, 0xFF, 0xA0, 0xFFFFF8044FC08A12)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above. This is a software bug.
This bug check belongs to the crash dump test that you have performed with WhoCrashed or other software. It means that a crash dump file was properly written out.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 19:34:32 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-10718-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF802335FE180, 0xFFFFA70CE08FC8E0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 19:33:06 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-10765-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0xA (0x0, 0x2, 0x0, 0xFFFFF80505235711)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above. This is a software bug.
This bug check belongs to the crash dump test that you have performed with WhoCrashed or other software. It means that a crash dump file was properly written out.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 01:56:14 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-10828-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8035DC650BC, 0xFFFFD5019B486920, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

Above is the report I got from WhoCrashed and I'm having an issue with ntoskrnl.exe
 
Hi,

Im recently getting this bsod after hours of gaming. Only happened when I cloned my hard drive to an m.2 SSD. Not sure if this has any issues
My cpu and gpu are both overclocked.
I have enough storage, all drivers are up to date.


CPU: i7-8700k w/ Corsair H115i AIO liquid cooler
GPU: Aorus RX 580
MOBO: Aorus Gaming 7
RAM: Corsair Dominator 32GB (4x8) 3200mhz
PSU: Corsair tx750m
FANS: 4x120mm(2 in, 1 out)
SSD: 2 SSD 120gb, 250gb, m.2 1tb
HDD: 2TB Seagate

REPORT:
Crash dumps are enabled on your computer.

Crash dump directories:
C:\Windows
C:\Windows\Minidump

On Sat 02/01/2021 23:39:07 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-11000-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0x3B (0xC000001D, 0xFFFFF80075408060, 0xFFFFB402F1DCFE80, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 22:04:25 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-11671-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0xA (0x28E57E60, 0xFF, 0xA0, 0xFFFFF8044FC08A12)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above. This is a software bug.
This bug check belongs to the crash dump test that you have performed with WhoCrashed or other software. It means that a crash dump file was properly written out.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 19:34:32 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-10718-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF802335FE180, 0xFFFFA70CE08FC8E0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 19:33:06 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-10765-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0xA (0x0, 0x2, 0x0, 0xFFFFF80505235711)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above. This is a software bug.
This bug check belongs to the crash dump test that you have performed with WhoCrashed or other software. It means that a crash dump file was properly written out.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 02/01/2021 01:56:14 your computer crashed or a problem was reported
crash dump file: C:\Windows\Minidump\010221-10828-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x3F5780)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8035DC650BC, 0xFFFFD5019B486920, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.
 
can't uninstall ntoskrnl. At least, not if you want windows to work.

NTOSKRNL = windows kernel. It handles all driver requests, power management, and memory management. It sits between Hardware and Applications. It got blamed but its not the cause. It is so essential to windows working that if it crashes, so does windows.

Whocrashed almost always points at it. it is what crashed but as I said, its not the problem. It is very rare for whocrashed to show a driver name, before Gardenman came along it was all I had.

in confused as I had an issue a month ago
what was the problem a month ago?
 
I have two ram sticks of different speeds, that I completely forgot about which caused the bsod

How do I pin point the issue?
Only things that I've done recently is clone my SSD with windows to my m.2 which must be the issue
 
i will see if the bsod report from last one shows me a driver name or an idea of what might have caused error. Many errors don't show driver names but the processes that were running at time might give me an idea of what might cause them.

your ram sticks may be same speeds but they are 2 different sets. That is all it takes to not work exactly right together. Try removing 1 set of sticks and see if errors go away. If you wanted 32gb of dom plat, you should have bought 1 set - https://www.corsair.com/us/en/Categories/Products/Memory/DOMINATOR®-PLATINUM-16GB-(2-x-8GB)-DDR4-DRAM-3200MHz-C16-Memory-Kit/p/CMD16GX4M2B3200C16

i merged your new thread in here as its same topic
 
Last edited:
How did you do the clone? What software? What steps did you take? Did you have any issues?

I ran the dump new file through the debugger and got the following information: https://jsfiddle.net/6qu2thfs/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:010221-11671-01.dmp (Jan 2 2021 - 17:04:25)
Bugcheck:IRQL_NOT_LESS_OR_EQUAL (A)
Probably caused by:memory_corruption (Process: GTA5.exe)
Uptime:0 Day(s), 1 Hour(s), 00 Min(s), and 41 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.
 
He has two sets of ram in PC. they are same kind but we know mixing sticks can cause problems, even if same sticks. Sets are tested to work with each other, its pretty easy to get 2 sticks to work but 4? 4 set sticks are tested to work, no guarantees mixing 2 sets. It can work fine, it might not be cause but it needs to be looked at.

thats the sort of dump file that doesn't show me a lot. it happened in virtual memory, but then almost everything does :)
 
Well I've had two sets for a while and never had an issue, so I'm doubting that is the problem now.
I've always had an issue with my gpu, having to clean install drivers, reset windows etc. as I kept getting black screens from no input. after replacing the thermal paste on the gpu it seemed to have stopped it.
Are there any background programs I can run to see where the issue is coming from?
 
Heres the result for the 3 new dumps that were in the ZIP: https://jsfiddle.net/xrcgjhd1/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.
File information:010221-11000-01.dmp (Jan 2 2021 - 18:39:07)
Bugcheck:SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:memory_corruption (Process: AMDRSServ.exe)
Uptime:0 Day(s), 1 Hour(s), 34 Min(s), and 21 Sec(s)

File information:010221-10765-01.dmp (Jan 2 2021 - 14:33:06)
Bugcheck:IRQL_NOT_LESS_OR_EQUAL (A)
Probably caused by:memory_corruption (Process: RocketLeague.exe)
Uptime:0 Day(s), 17 Hour(s), 36 Min(s), and 30 Sec(s)

File information:010221-10718-01.dmp (Jan 2 2021 - 14:34:32)
Bugcheck:SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:memory_corruption (Process: TwitchAgent.exe)
Uptime:0 Day(s), 0 Hour(s), 01 Min(s), and 04 Sec(s)
This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.
 
you have so many app crashes in the last few months, it only goes back to 28th November...
audiodg.exe - used by windows to talk to Audio drivers - updating sound drivers might fix this
i see other audio related programs crashing like blender and Microsoft Audio playback diagnostic

etocfile.exe - Easytune Gigabyte
etinit.exe - Easytune Gigabyte
ocbuttonservice - easytune again - Are you overclocking?. DO you use this?

Dualbiosrescue.exe - I would guess Gigabyte. Not sure you need this? is it for GPU or motherboard? I see this crashing at same time as 2 of the BSOD, I can't link it to all of them though.
It is crashing due to a CLR20r3 error, this might fix it - https://windowsreport.com/clr20r3-error-windows-10/ - might also fix the other audio problems.

AMDSServ.exe - AMD Startup Services

those are the repeat offenders. they aren't BSOD but when i see the same files crashing all the time I wonder. very few of your errors are bsod actually.

i also see corsair.service.display.adapter crashing but that happens on my almost daily so I blame corsair for that one.
 
I think my gpu could be failing as crashes always happen when under high load. Temps are all good. I’ll give the error one u sent a go. I’m not sure what dualbiosrecuse is, I have aorus gpu and motherboard.
Is it honestly better to wipe my pc? And how do I keep certain files but still do a clean install if you get what I mean
 
I think my gpu could be failing as crashes always happen when under high load.
other thing to look at if they all happen under heavy load is the PSU
PSU: Corsair tx750m
how old is it? I would get PC looked at by a repair store before randomly replacing parts.

dualbiosrescue. I can't see it on https://www.gigabyte.com/au/Motherboard/Z370-AORUS-Gaming-7-rev-10/support#support-dl-utility or on https://www.gigabyte.com/au/Graphics-Card/GV-RX580AORUS-8GD-rev-10-11/support#support-dl-utility so I guess I need to figure out what its part of. It could be motherboard since you have dual bios (I wish i had bought better board to get that feature but really, its not 2 bios, its just 1 backup bios that never runs but is only there to fix the corrupted one)

what Gigabyte utilities are you running?


reinstall might help. I see it as using a hammer to fix the problem but if it is just software, it might help
you seem to have a few drives there, I would copy anything off C you want to save onto another ssd/hdd
you can move your library folders there now - library folders are Documents, Pictures, Videos, Music
create a new folder on hdd called Music (for example) and then move the library contents there - https://www.dummies.com/computers/o...e-the-location-of-user-folders-in-windows-10/ (I always suggest this site as instructions are clear)
Once everything copied off C you want to save, unplug the other drives from power and only have the boot drive attached
follow this guide: https://forums.tomshardware.com/faq/how-to-do-a-clean-installation-of-windows-10.3170366/
 
I had this issue on another post about the PSU but I bought it brand new, literally a month old. So it surely can't be that. I've done userbenchmarks and the gpu say's it performs less that 50% of others which is bad.

my computer bsod on rendering on After Effects every time I render something more than 4 seconds long. I'm not sure why

And how do I see what dualbiosrecue is, https://forum.giga-byte.co.uk/index.php?topic=4016.0 says it is a backup

I'm currently running RGBFusion and Aorus app center, also AMD radeon doesn't actually boot up anymore on startup, I'm not sure why



I'll most likely do the reset when I go back home on 18th
 
Dual bios is a physical feature of your motherboard. You have 2 bios chips, one is active and in use, and the other is a backup only used if the active one fails to boot. What is meant to happen is if the active is corrupted, the pc will restart, flash the active bios with the backup and boot again using active bios.

dualbiosrecue is software that I guess I need to identify. It appears to be a software bios update. Gigabyte Firmware update utility, although I don't see that listed on your board. Did you download the app centre? all it includes is utility updates, before i got a gigabyte board I had hoped it included driver updates but that would be too useful.
it might be part of @ bios or BIOS Setup, both of which are on your motherboard website https://www.gigabyte.com/au/Motherboard/Z370-AORUS-Gaming-7-rev-10/support#support-dl-utility

most of the results for file name are blocked by my antivirus. In other words, not safe.