Solved

BlueScreen Error 0x0000003b System_Service_Exception

Posted on 2013-12-09
12
1,605 Views
Last Modified: 2014-04-10
Hi,
Running Server 2008 Standard edition (sp2) as a VM in ESXI 4.0
Every reboot is getting the bluescreen error 0x0000003b System_Service_Exception
Then it automatically restarts and am able to logon
I loaded Bluescreenview and it references a different driver with every reboot as a cause.
Another thing to note is that once in a while the print spooler will not start When trying to start it: (Error 0x8001000e: The server (callee) cannot unmarshall the paramerter data -- low memory, etc) and the server needs to be rebooted and the print spooler works fine.
But this blue screen happens on every reboot and I noticed the same error was occurring with Bluescreenviewer for every reboot since last April. And it references a different driver causing the issue everytime  (ws2fsl.sys, usbport.sys, rspndr.sys, mouhid.sys, vmx_svga.sys, vmci.sys, hidparse.sys, etc)
I did notice a file referenced as srvnet.sys in the blue screen message every reboot
Any suggestions?
0
Comment
Question by:electricdad
  • 7
  • 5
12 Comments
 
LVL 38

Expert Comment

by:Philip Elder
ID: 39706493
Re-install the VMware Tools (integration services) with the most recent version and reboot the VM.

Any disk subsystem errors on the host or dedicated storage that should be of concern? Any sudden power outages?

Philip
0
 

Author Comment

by:electricdad
ID: 39706522
I do see a Voltage Alert in Health Status on the VMhost for  System Board 1BB +1.2vtt-Lower Critical  Reading 1.08 Volts
Everything else in Health Status is normal
Ran CHCKDsk and it found problems but this issue persists
Running SFC now
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 39706572
What does that particular voltage drive on the mainboard? In my experience voltage irregularities can cause all sorts of problems especially if connected with a disk subsystem component.

Did you run chkdsk /f?

Is there a virtual disk inspection utility in VMware that can be used on the virtual disk of that VM to test its integrity?

How good are the backups?

Philip
0
 

Author Comment

by:electricdad
ID: 39706586
I ran chkdsk with /f and /r (fixed some problems)
I ran sfc (no problems)
I reinstalled VMware Tools
I don't know about the virtual disk inspection utility in VMware 4.0?
Still the same BSOD on reboot and then reboots normally.
Also, with every reboot after the BSOD-- it takes a long time for the kernel screen to run The windows loading window with the scrolling bar
Thanks
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 39706731
Right click on srvnet.sys and bring up its properties.

Who does the file belong to?

Is there A/V running on the VM?

Philip
0
 

Author Comment

by:electricdad
ID: 39707307
There is a pro edition of AVG that we use from Kaseya-- always have probs with that.
Srvnet.sys has TrustedInstaller as the owner and full control permissions
Admins are Read
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 38

Accepted Solution

by:
Philip Elder earned 500 total points
ID: 39707378
For the file go to the Details tab of Properties and Digital Signatures tab.

Please snip both and paste here.

Option: Remove AVG from the server VM and reboot.

Philip
0
 

Author Comment

by:electricdad
ID: 39708670
Srvnet.sys Properties
0
 

Author Comment

by:electricdad
ID: 39708752
I do not want to remove AVG yet. Will do as a last resort
0
 
LVL 38

Expert Comment

by:Philip Elder
ID: 39709087
Do you have another server identical to this one?

You could copy the srvnet.sys file over from the known good server OS to this one. Make sure the version is the same.

Safe Mode with Command Prompt would probably be the best method.

Suspend AVG?

Philip
0
 

Author Comment

by:electricdad
ID: 39794149
Sorry, for late reply-- do to other problems that have occurred-- we may be rebuilding this VM. Let you know-- thanks for the help everyone
0
 

Author Closing Comment

by:electricdad
ID: 39992639
AVG was the culprit-- thanks for the help
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now