Error Medic

SYSTEM_SERVICE_EXCEPTION Windows 10: Complete Blue Screen Fix Guide (BSOD Stop Code 0x0000003B)

Fix the SYSTEM_SERVICE_EXCEPTION BSOD on Windows 10. Step-by-step guide covering dxgkrnl.sys, nvlddmkm.sys, fltmgr.sys, ntfs.sys causes and proven fixes.

Last updated:
Last verified:
2,204 words
Key Takeaways
  • Root Cause 1: A kernel-mode driver or system service violated memory access rules — most often triggered by corrupt or outdated GPU drivers (nvlddmkm.sys, dxgkrnl.sys), antivirus filter drivers (fltmgr.sys), or network stack components (netio.sys).
  • Root Cause 2: Faulty or incompatible hardware — especially RAM, storage controllers, or overclocked components — causes the kernel to encounter an unexpected exception it cannot recover from, resulting in stop code 0x0000003B.
  • Root Cause 3: Corrupt Windows system files or a damaged NTFS file system (ntfs.sys) following an abrupt shutdown, failed update, or disk error.
  • Quick Fix Summary: Update or roll back the offending driver shown in the BSOD crash dump, run SFC /scannow and DISM to repair system files, test RAM with Windows Memory Diagnostic, and check disk health with chkdsk — most cases resolve within one of these four steps.
Fix Approaches Compared
MethodWhen to UseTimeRisk
Update / Roll Back GPU Driver (DDU)BSOD names nvlddmkm.sys or dxgkrnl.sys; recent driver update preceded crashes15–30 minLow
SFC + DISM System File RepairRandom BSODs with ntoskrnl.exe or win32kbase.sys; after failed Windows Update20–45 minVery Low
Windows Memory Diagnostic / MemTest86BSODs occur under load or during boot; no consistent offending .sys file1–8 hoursVery Low
CHKDSK Disk ScanBSOD names ntfs.sys; crashes after power loss or sudden shutdown30–120 minLow
Uninstall Third-Party Antivirus / Filter DriverBSOD names fltmgr.sys; crashes coincide with antivirus scans or file operations10 minLow
VMware / Virtualization Driver FixBlue screen occurs inside or after running VMware Workstation on Windows 1015–20 minLow
Clean Windows 10 Repair InstallAll other methods fail; system is heavily corrupt or has persistent BSOD loop60–120 minMedium
Hardware Replacement (RAM/SSD)MemTest86 reports errors; SMART data shows drive failureVariableLow (data risk if no backup)

Understanding the SYSTEM_SERVICE_EXCEPTION Error

When Windows 10 displays the stop code SYSTEM_SERVICE_EXCEPTION (bug check 0x0000003B), it means that kernel-mode code attempted an illegal operation — such as accessing an invalid memory address, executing a privileged instruction from user mode, or triggering an unhandled exception inside a driver or system service. Because the kernel cannot safely continue, Windows halts and displays the familiar blue screen of death (BSOD).

The full error message on screen typically reads:

Your PC ran into a problem and needs to restart.
Stop code: SYSTEM_SERVICE_EXCEPTION

In the crash dump (minidump), you will also see the offending module name — for example:

  • nvlddmkm.sys — NVIDIA display driver kernel module
  • dxgkrnl.sys — DirectX Graphics kernel
  • fltmgr.sys — Windows Filter Manager (antivirus/file system drivers hook here)
  • ntfs.sys — NTFS file system driver
  • netio.sys — Network I/O subsystem
  • win32kbase.sys / win32kfull.sys — Win32 kernel subsystem
  • ntoskrnl.exe — Windows kernel itself (often indicates RAM or system file corruption)

Step 1: Read the Crash Dump to Identify the Offending Driver

Before applying any fix blindly, identify which module caused the crash. Windows writes a minidump to C:\Windows\Minidump\ every time a BSOD occurs.

Option A — WinDbg (Microsoft Debugging Tools)

  1. Install WinDbg from the Microsoft Store (search "WinDbg Preview").
  2. Open the most recent .dmp file from C:\Windows\Minidump\.
  3. In the command window, type: !analyze -v
  4. Look for the IMAGE_NAME and MODULE_NAME fields to identify the guilty driver.

Option B — WhoCrashed (Easier for non-developers) Download WhoCrashed from resplendence.com. It parses minidumps and presents a plain-English summary, including the driver filename and a probable cause.

Option C — Event Viewer

  1. Press Win + X → Event Viewer.
  2. Navigate to Windows Logs → System.
  3. Filter by Critical events around the time of the crash.
  4. Look for Event ID 41 (Kernel-Power) and Event ID 1001 (BugCheck).

Step 2: Fix Based on the Offending Module

2A. GPU Driver Issues — nvlddmkm.sys / dxgkrnl.sys

This is the most common cause of SYSTEM_SERVICE_EXCEPTION on Windows 10. A corrupt, outdated, or incompatible NVIDIA or AMD display driver triggers an exception in the graphics kernel.

Fix:

  1. Boot into Safe Mode: Hold Shift while clicking Restart → Troubleshoot → Advanced Options → Startup Settings → Restart → Press 4.
  2. Download Display Driver Uninstaller (DDU) from guru3d.com.
  3. In Safe Mode, run DDU and choose Clean and restart. This removes all GPU driver remnants.
  4. After reboot, download the latest stable driver from NVIDIA (nvidia.com/drivers) or AMD (amd.com/support) and install it.
  5. If the crash started after a recent driver update, use DDU to remove it, then install the previous stable version.

For VMware users: If the BSOD occurs while running VMware Workstation, the conflict is often between VMware's SVGA driver and the host GPU driver. Update VMware Workstation to the latest version and ensure VMware Tools is current inside guest VMs. Disabling 3D acceleration in the VM settings often eliminates the crash immediately.

2B. System File Corruption — ntoskrnl.exe / win32kbase.sys / win32kfull.sys

Corrupt Windows system files cause the kernel or Win32 subsystem to raise an unhandled exception.

Fix (run as Administrator in PowerShell or CMD):

sfc /scannow
Dism /Online /Cleanup-Image /RestoreHealth

Reboot after both commands complete. SFC repairs protected system files; DISM restores the Windows component store from Windows Update servers.

2C. Disk or File System Errors — ntfs.sys

A damaged NTFS volume can cause ntfs.sys to encounter an unrecoverable error during normal read/write operations.

Fix:

chkdsk C: /f /r /x

Schedule this on next reboot when prompted. The /f flag fixes errors, /r locates bad sectors, and /x forces the volume to dismount first.

Also check SSD/HDD health:

wmic diskdrive get status

Or use CrystalDiskInfo for detailed SMART data.

2D. Antivirus / Filter Driver Conflicts — fltmgr.sys

Third-party antivirus products (especially older or beta versions) register filter drivers that hook into fltmgr.sys. A bug in those drivers causes SYSTEM_SERVICE_EXCEPTION during file operations.

Fix:

  1. Boot into Safe Mode (antivirus filter drivers typically don't load in Safe Mode).
  2. Uninstall the antivirus software completely using its official removal tool (e.g., Norton Remove and Reinstall, ESET Uninstaller).
  3. Test for stability. If the BSOD stops, reinstall the latest version or switch to Windows Defender.
  4. You can also use Autoruns (from Sysinternals) to identify and disable suspicious filter drivers without fully uninstalling.
2E. Network Driver Issues — netio.sys

Netio.sys handles network I/O. A buggy VPN driver, NIC driver, or network protocol filter can cause crashes here.

Fix:

  1. Update your NIC driver from Device Manager or the manufacturer's website.
  2. Uninstall VPN software temporarily to test.
  3. Reset the network stack:
netsh winsock reset
netsh int ip reset
ipconfig /flushdns

Reboot after these commands.

2F. RAM Errors — No Consistent .sys File

If crash dumps point to different modules each time and no single driver is consistently implicated, bad RAM is the most likely culprit.

Fix:

  1. Run Windows Memory Diagnostic: Press Win + R → type mdsched.exe → Restart now and check for problems.
  2. For thorough testing, boot from a MemTest86 USB (memtest86.com) and run at least two full passes. Any errors confirm faulty RAM.
  3. If you have multiple RAM sticks, remove one at a time and test each slot.
  4. Disable XMP/EXPO profiles in BIOS temporarily — overclocked RAM profiles are a common hidden cause.

Step 3: If the System Won't Boot (BSOD Loop)

If Windows 10 crashes before reaching the desktop:

  1. Boot from a Windows 10 USB installation media.
  2. Choose Repair your computer → Troubleshoot → Advanced Options.
  3. Use Startup Repair first.
  4. If that fails, open Command Prompt and run:
bootrec /fixmbr
bootrec /fixboot
bootrec /rebuildbcd
sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows
  1. As a last resort, use Reset this PC (keep your files option) from the Advanced Options menu.

Step 4: Prevent Future Occurrences

  • Enable automatic Windows Update to keep drivers and system files current.
  • Create a System Restore point before installing new drivers.
  • Use Driver Verifier (verifier.exe) in a test environment to stress-test drivers and catch bugs before they cause production BSODs.
  • Monitor system temperatures with HWiNFO64 — thermal throttling and overheating can cause intermittent driver exceptions.
  • Avoid beta or WHQL-unsigned drivers unless absolutely necessary.

Frequently Asked Questions

powershell
# ============================================================
# SYSTEM_SERVICE_EXCEPTION Diagnostic & Fix Script
# Run PowerShell as Administrator
# ============================================================

Write-Host "=== Step 1: Check for recent BSODs in Event Log ==" -ForegroundColor Cyan
Get-WinEvent -FilterHashtable @{LogName='System'; Id=1001} -MaxEvents 10 |
    Select-Object TimeCreated, Message |
    Format-List

Write-Host "`n=== Step 2: List minidump files (open in WinDbg for analysis) ===" -ForegroundColor Cyan
Get-ChildItem -Path "C:\Windows\Minidump" -Filter "*.dmp" -ErrorAction SilentlyContinue |
    Sort-Object LastWriteTime -Descending |
    Select-Object Name, LastWriteTime, @{N='SizeMB';E={[math]::Round($_.Length/1MB,2)}}

Write-Host "`n=== Step 3: Run System File Checker ===" -ForegroundColor Cyan
sfc /scannow

Write-Host "`n=== Step 4: Repair Windows Component Store via DISM ===" -ForegroundColor Cyan
Dism /Online /Cleanup-Image /CheckHealth
Dism /Online /Cleanup-Image /ScanHealth
Dism /Online /Cleanup-Image /RestoreHealth

Write-Host "`n=== Step 5: Schedule CHKDSK on C: drive ===" -ForegroundColor Cyan
# This will run on next reboot
echo Y | chkdsk C: /f /r /x

Write-Host "`n=== Step 6: Check disk SMART status ===" -ForegroundColor Cyan
Get-WmiObject -Class Win32_DiskDrive | Select-Object Model, Status, Size

Write-Host "`n=== Step 7: Reset network stack (fixes netio.sys issues) ===" -ForegroundColor Cyan
netsh winsock reset
netsh int ip reset
ipconfig /flushdns

Write-Host "`n=== Step 8: List third-party kernel drivers (review for suspects) ===" -ForegroundColor Cyan
Get-WmiObject Win32_SystemDriver |
    Where-Object { $_.PathName -notlike "*\Windows\system32*" -and $_.State -eq 'Running' } |
    Select-Object Name, DisplayName, PathName |
    Format-List

Write-Host "`n=== Step 9: Check for driver verifier status ===" -ForegroundColor Cyan
verifier /query

Write-Host "`n=== Step 10: Export list of installed drivers for review ===" -ForegroundColor Cyan
Get-WmiObject Win32_PnPSignedDriver |
    Select-Object DeviceName, DriverVersion, DriverDate, IsSigned |
    Sort-Object DriverDate -Descending |
    Export-Csv -Path "$env:USERPROFILE\Desktop\driver_list.csv" -NoTypeInformation
Write-Host "Driver list saved to Desktop\driver_list.csv" -ForegroundColor Green

Write-Host "`n=== Diagnostic Complete. Review output above for issues. ===" -ForegroundColor Yellow
Write-Host "If SFC found errors, reboot and run 'sfc /scannow' again." -ForegroundColor Yellow
Write-Host "For GPU driver issues, use DDU in Safe Mode before reinstalling." -ForegroundColor Yellow
E

Error Medic Editorial

The Error Medic Editorial team is composed of senior DevOps engineers, SREs, and Windows systems specialists with a combined 40+ years of experience diagnosing kernel crashes, BSOD stop codes, and system-level failures across enterprise and consumer Windows environments. Our guides are grounded in real crash dump analysis, Microsoft documentation, and hands-on lab testing.

Sources

Related Articles in Windows 10 System Service Exception

Explore More windows Guides