BSOD win 7 help


Windows Forum Admin
Staff member
Premium Supporter
Microsoft MVP
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An exception happened while executing a system service routine.
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8000317167c, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff880084acd10, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

fffff800`0317167c 8b4610          mov     eax,dword ptr [rsi+10h]

CONTEXT:  fffff880084acd10 -- (.cxr 0xfffff880084acd10)
rax=fffff880084ad718 rbx=0000000000000000 rcx=0400000000000000
rdx=0000000000000001 rsi=03ffffffffffffe0 rdi=0000000000000000
rip=fffff8000317167c rsp=fffff880084ad6f0 rbp=fffffa8006561fe0
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=fffff880084ad7c8 r12=0000000000000001 r13=fffffa8007a34060
r14=fffffa8007a34100 r15=fffff8a003da9f90
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
fffff800`0317167c 8b4610          mov     eax,dword ptr [rsi+10h] ds:002b:03ffffff`fffffff0=????????
Resetting default scope




PROCESS_NAME:  nba2k12.exe


LAST_CONTROL_TRANSFER:  from fffff8000313cbf8 to fffff8000317167c

fffff880`084ad6f0 fffff800`0313cbf8 : 00000000`00000000 fffffa80`06561fe0 fffffa80`03cd3570 00000000`00000000 : nt!ObDereferenceSecurityDescriptor+0x20
fffff880`084ad720 fffff800`02e7d0ee : 00000000`00000000 fffff8a0`03da9f90 fffffa80`03cd3570 fffffa80`03cd3570 : nt!SeDefaultObjectMethod+0xa8
fffff880`084ad770 fffff800`0318b194 : fffff8a0`03da9f90 00000000`00000000 fffffa80`049df060 00000000`00000000 : nt!ObfDereferenceObject+0x10e
fffff880`084ad7d0 fffff800`03134870 : 00000000`00000e50 fffff8a0`03da9f90 fffff8a0`11b5c940 00000000`00000e50 : nt!ObpCloseHandleTableEntry+0xc4
fffff880`084ad860 fffff800`031347e4 : 00000000`00000c04 00000000`00000000 fffffa80`07a34060 fffff800`0311df21 : nt!ObpCloseHandleProcedure+0x30
fffff880`084ad8a0 fffff800`031336ae : fffff8a0`0e66ba01 fffff880`084adbe0 fffffa80`07a34060 fffffa80`07a34101 : nt!ExSweepHandleTable+0x74
fffff880`084ad8e0 fffff800`0315a724 : fffff8a0`0e66ba90 00000000`00000000 00000000`00000000 fffffa80`055ea8a0 : nt!ObKillProcess+0x62
fffff880`084ad920 fffff800`03134b3d : 00000000`00000000 00000000`00000001 00000000`fff74000 fffffa80`0401ab60 : nt!PspExitThread+0x3f4
fffff880`084ad9f0 fffff800`02e54a43 : 00000000`00000100 fffffa80`049df120 00000000`00000001 fffff800`02e7f25d : nt!PsExitSpecialApc+0x1d
fffff880`084ada20 fffff800`02e54e80 : 00000000`02139d50 fffff880`084adaa0 fffff800`03135710 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`084adaa0 fffff800`02e771f7 : fffffa80`049df060 00000000`7fffffff fffff880`084adbb8 fffffa80`047bf060 : nt!KiInitiateUserApc+0x70
fffff880`084adbe0 00000000`75172dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`252bf0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75172dd9

fffff800`0317167c 8b4610          mov     eax,dword ptr [rsi+10h]


SYMBOL_NAME:  nt!ObDereferenceSecurityDescriptor+20

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  ntkrnlmp.exe


STACK_COMMAND:  .cxr 0xfffff880084acd10 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!ObDereferenceSecurityDescriptor+20

BUCKET_ID:  X64_0x3B_nt!ObDereferenceSecurityDescriptor+20

Followup: MachineOwner
The SYSTEM_SERVICE_EXCEPTION bug check has a value of 0x0000003B. This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.

[h=3]Cause[/h]This error has been linked to excessive paged pool usage and may occur due to user-mode graphics drivers crossing over and passing bad data to the kernel code.


Please update your bios:
BiosVersion = V17.1
BiosReleaseDate = 04/11/2011

MSI Global ? Mainboard - H61M-P23 (B3)

Looks like your missing a Service pack. Please run windows update or download the standalone:

Learn how to install Windows 7 Service Pack 1 (SP1)

Tools for SP1 (if needed:

Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2

I also notice your using Avast. Please un-install and use MSE:

Microsoft Security Essentials - Free Antivirus for Windows

Please use your motherboard web site as a guide and update all drivers.


how do i update the bios of my motherboard? i dont know how to do it :/ and why should i uninstall my avast? anyway thank you for your help!

Last edited:


Noob Whisperer
how do i update the bios of my motherboard? i dont know how to do it :/ and why should i uninstall my avast? anyway thank you for your help!
Your motherboard manual and your motherboard manufacturer's website (which I believe kemical has already linked to) should contain information with respect to updating your BIOS so please avail yourself of those resources as every motherboard may have it's own unique methods (I believe some MSI boards have an auto-updater and other utilities like M-Flash which may help)

Regarding uninstalling Avast. It's just a means or method of reducing the overall general confusion of analyzing these types of crashes. We have seen various third party security suites (including Avast) associated sometimes with Blue Screen issues. Conversely we have not seen MSE so involved. If you love Avast..... then once your computer is stable and BSOD free you can always reinstall it. In the mean time we can perhaps advance the diagnostic process by removing it from the larger equation.


Windows Forum Admin
Staff member
Premium Supporter
Microsoft MVP
Couldn't have said it better myself.. :)

thank you guys! i'll let you know if something happens. thank you!

Last edited:


Windows Forum Admin
Staff member
Premium Supporter
Microsoft MVP
Your very welcome.. :)

i'll download service pack 1 later. i'm too scared to update my bios. i don't want to destroy it. i still have 2 months left in my warranty so maybe i could ask them to update my bios


Windows Forum Admin
Staff member
Premium Supporter
Microsoft MVP
'They' might want to charge you for that but if your under warranty I'd hand it over to them anyway..


Windows Forum Admin
Staff member
Premium Supporter
Microsoft MVP
Hmm.. I notice you've still not updated your bios. Until you've completed the tasks asked of you above it's a little pointless going through the dmp files again as you will only be told the same thing. As i said above, if the machine is still under warranty I'd take it back and let them sort it out or get them to at least bring your system up to date regarding firmware/bios updates.

This website is not affiliated, owned, or endorsed by Microsoft Corporation. It is a member of the Microsoft Partner Program.