SYSTEM_SERVICE_EXCEPTION Windows 10: Complete Blue Screen Fix Guide (BSOD Stop Code 0x0000003B)
Fix the SYSTEM_SERVICE_EXCEPTION BSOD on Windows 10. Step-by-step guide covering dxgkrnl.sys, nvlddmkm.sys, fltmgr.sys, ntfs.sys causes and proven fixes.
- Root Cause 1: A kernel-mode driver or system service violated memory access rules — most often triggered by corrupt or outdated GPU drivers (nvlddmkm.sys, dxgkrnl.sys), antivirus filter drivers (fltmgr.sys), or network stack components (netio.sys).
- Root Cause 2: Faulty or incompatible hardware — especially RAM, storage controllers, or overclocked components — causes the kernel to encounter an unexpected exception it cannot recover from, resulting in stop code 0x0000003B.
- Root Cause 3: Corrupt Windows system files or a damaged NTFS file system (ntfs.sys) following an abrupt shutdown, failed update, or disk error.
- Quick Fix Summary: Update or roll back the offending driver shown in the BSOD crash dump, run SFC /scannow and DISM to repair system files, test RAM with Windows Memory Diagnostic, and check disk health with chkdsk — most cases resolve within one of these four steps.
| Method | When to Use | Time | Risk |
|---|---|---|---|
| Update / Roll Back GPU Driver (DDU) | BSOD names nvlddmkm.sys or dxgkrnl.sys; recent driver update preceded crashes | 15–30 min | Low |
| SFC + DISM System File Repair | Random BSODs with ntoskrnl.exe or win32kbase.sys; after failed Windows Update | 20–45 min | Very Low |
| Windows Memory Diagnostic / MemTest86 | BSODs occur under load or during boot; no consistent offending .sys file | 1–8 hours | Very Low |
| CHKDSK Disk Scan | BSOD names ntfs.sys; crashes after power loss or sudden shutdown | 30–120 min | Low |
| Uninstall Third-Party Antivirus / Filter Driver | BSOD names fltmgr.sys; crashes coincide with antivirus scans or file operations | 10 min | Low |
| VMware / Virtualization Driver Fix | Blue screen occurs inside or after running VMware Workstation on Windows 10 | 15–20 min | Low |
| Clean Windows 10 Repair Install | All other methods fail; system is heavily corrupt or has persistent BSOD loop | 60–120 min | Medium |
| Hardware Replacement (RAM/SSD) | MemTest86 reports errors; SMART data shows drive failure | Variable | Low (data risk if no backup) |
Understanding the SYSTEM_SERVICE_EXCEPTION Error
When Windows 10 displays the stop code SYSTEM_SERVICE_EXCEPTION (bug check 0x0000003B), it means that kernel-mode code attempted an illegal operation — such as accessing an invalid memory address, executing a privileged instruction from user mode, or triggering an unhandled exception inside a driver or system service. Because the kernel cannot safely continue, Windows halts and displays the familiar blue screen of death (BSOD).
The full error message on screen typically reads:
Your PC ran into a problem and needs to restart.
Stop code: SYSTEM_SERVICE_EXCEPTION
In the crash dump (minidump), you will also see the offending module name — for example:
nvlddmkm.sys— NVIDIA display driver kernel moduledxgkrnl.sys— DirectX Graphics kernelfltmgr.sys— Windows Filter Manager (antivirus/file system drivers hook here)ntfs.sys— NTFS file system drivernetio.sys— Network I/O subsystemwin32kbase.sys/win32kfull.sys— Win32 kernel subsystemntoskrnl.exe— Windows kernel itself (often indicates RAM or system file corruption)
Step 1: Read the Crash Dump to Identify the Offending Driver
Before applying any fix blindly, identify which module caused the crash. Windows writes a minidump to C:\Windows\Minidump\ every time a BSOD occurs.
Option A — WinDbg (Microsoft Debugging Tools)
- Install WinDbg from the Microsoft Store (search "WinDbg Preview").
- Open the most recent
.dmpfile fromC:\Windows\Minidump\. - In the command window, type:
!analyze -v - Look for the IMAGE_NAME and MODULE_NAME fields to identify the guilty driver.
Option B — WhoCrashed (Easier for non-developers) Download WhoCrashed from resplendence.com. It parses minidumps and presents a plain-English summary, including the driver filename and a probable cause.
Option C — Event Viewer
- Press
Win + X→ Event Viewer. - Navigate to Windows Logs → System.
- Filter by Critical events around the time of the crash.
- Look for Event ID 41 (Kernel-Power) and Event ID 1001 (BugCheck).
Step 2: Fix Based on the Offending Module
2A. GPU Driver Issues — nvlddmkm.sys / dxgkrnl.sys
This is the most common cause of SYSTEM_SERVICE_EXCEPTION on Windows 10. A corrupt, outdated, or incompatible NVIDIA or AMD display driver triggers an exception in the graphics kernel.
Fix:
- Boot into Safe Mode: Hold Shift while clicking Restart → Troubleshoot → Advanced Options → Startup Settings → Restart → Press 4.
- Download Display Driver Uninstaller (DDU) from guru3d.com.
- In Safe Mode, run DDU and choose Clean and restart. This removes all GPU driver remnants.
- After reboot, download the latest stable driver from NVIDIA (nvidia.com/drivers) or AMD (amd.com/support) and install it.
- If the crash started after a recent driver update, use DDU to remove it, then install the previous stable version.
For VMware users: If the BSOD occurs while running VMware Workstation, the conflict is often between VMware's SVGA driver and the host GPU driver. Update VMware Workstation to the latest version and ensure VMware Tools is current inside guest VMs. Disabling 3D acceleration in the VM settings often eliminates the crash immediately.
2B. System File Corruption — ntoskrnl.exe / win32kbase.sys / win32kfull.sys
Corrupt Windows system files cause the kernel or Win32 subsystem to raise an unhandled exception.
Fix (run as Administrator in PowerShell or CMD):
sfc /scannow
Dism /Online /Cleanup-Image /RestoreHealth
Reboot after both commands complete. SFC repairs protected system files; DISM restores the Windows component store from Windows Update servers.
2C. Disk or File System Errors — ntfs.sys
A damaged NTFS volume can cause ntfs.sys to encounter an unrecoverable error during normal read/write operations.
Fix:
chkdsk C: /f /r /x
Schedule this on next reboot when prompted. The /f flag fixes errors, /r locates bad sectors, and /x forces the volume to dismount first.
Also check SSD/HDD health:
wmic diskdrive get status
Or use CrystalDiskInfo for detailed SMART data.
2D. Antivirus / Filter Driver Conflicts — fltmgr.sys
Third-party antivirus products (especially older or beta versions) register filter drivers that hook into fltmgr.sys. A bug in those drivers causes SYSTEM_SERVICE_EXCEPTION during file operations.
Fix:
- Boot into Safe Mode (antivirus filter drivers typically don't load in Safe Mode).
- Uninstall the antivirus software completely using its official removal tool (e.g., Norton Remove and Reinstall, ESET Uninstaller).
- Test for stability. If the BSOD stops, reinstall the latest version or switch to Windows Defender.
- You can also use Autoruns (from Sysinternals) to identify and disable suspicious filter drivers without fully uninstalling.
2E. Network Driver Issues — netio.sys
Netio.sys handles network I/O. A buggy VPN driver, NIC driver, or network protocol filter can cause crashes here.
Fix:
- Update your NIC driver from Device Manager or the manufacturer's website.
- Uninstall VPN software temporarily to test.
- Reset the network stack:
netsh winsock reset
netsh int ip reset
ipconfig /flushdns
Reboot after these commands.
2F. RAM Errors — No Consistent .sys File
If crash dumps point to different modules each time and no single driver is consistently implicated, bad RAM is the most likely culprit.
Fix:
- Run Windows Memory Diagnostic: Press
Win + R→ typemdsched.exe→ Restart now and check for problems. - For thorough testing, boot from a MemTest86 USB (memtest86.com) and run at least two full passes. Any errors confirm faulty RAM.
- If you have multiple RAM sticks, remove one at a time and test each slot.
- Disable XMP/EXPO profiles in BIOS temporarily — overclocked RAM profiles are a common hidden cause.
Step 3: If the System Won't Boot (BSOD Loop)
If Windows 10 crashes before reaching the desktop:
- Boot from a Windows 10 USB installation media.
- Choose Repair your computer → Troubleshoot → Advanced Options.
- Use Startup Repair first.
- If that fails, open Command Prompt and run:
bootrec /fixmbr
bootrec /fixboot
bootrec /rebuildbcd
sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows
- As a last resort, use Reset this PC (keep your files option) from the Advanced Options menu.
Step 4: Prevent Future Occurrences
- Enable automatic Windows Update to keep drivers and system files current.
- Create a System Restore point before installing new drivers.
- Use Driver Verifier (
verifier.exe) in a test environment to stress-test drivers and catch bugs before they cause production BSODs. - Monitor system temperatures with HWiNFO64 — thermal throttling and overheating can cause intermittent driver exceptions.
- Avoid beta or WHQL-unsigned drivers unless absolutely necessary.
Frequently Asked Questions
# ============================================================
# SYSTEM_SERVICE_EXCEPTION Diagnostic & Fix Script
# Run PowerShell as Administrator
# ============================================================
Write-Host "=== Step 1: Check for recent BSODs in Event Log ==" -ForegroundColor Cyan
Get-WinEvent -FilterHashtable @{LogName='System'; Id=1001} -MaxEvents 10 |
Select-Object TimeCreated, Message |
Format-List
Write-Host "`n=== Step 2: List minidump files (open in WinDbg for analysis) ===" -ForegroundColor Cyan
Get-ChildItem -Path "C:\Windows\Minidump" -Filter "*.dmp" -ErrorAction SilentlyContinue |
Sort-Object LastWriteTime -Descending |
Select-Object Name, LastWriteTime, @{N='SizeMB';E={[math]::Round($_.Length/1MB,2)}}
Write-Host "`n=== Step 3: Run System File Checker ===" -ForegroundColor Cyan
sfc /scannow
Write-Host "`n=== Step 4: Repair Windows Component Store via DISM ===" -ForegroundColor Cyan
Dism /Online /Cleanup-Image /CheckHealth
Dism /Online /Cleanup-Image /ScanHealth
Dism /Online /Cleanup-Image /RestoreHealth
Write-Host "`n=== Step 5: Schedule CHKDSK on C: drive ===" -ForegroundColor Cyan
# This will run on next reboot
echo Y | chkdsk C: /f /r /x
Write-Host "`n=== Step 6: Check disk SMART status ===" -ForegroundColor Cyan
Get-WmiObject -Class Win32_DiskDrive | Select-Object Model, Status, Size
Write-Host "`n=== Step 7: Reset network stack (fixes netio.sys issues) ===" -ForegroundColor Cyan
netsh winsock reset
netsh int ip reset
ipconfig /flushdns
Write-Host "`n=== Step 8: List third-party kernel drivers (review for suspects) ===" -ForegroundColor Cyan
Get-WmiObject Win32_SystemDriver |
Where-Object { $_.PathName -notlike "*\Windows\system32*" -and $_.State -eq 'Running' } |
Select-Object Name, DisplayName, PathName |
Format-List
Write-Host "`n=== Step 9: Check for driver verifier status ===" -ForegroundColor Cyan
verifier /query
Write-Host "`n=== Step 10: Export list of installed drivers for review ===" -ForegroundColor Cyan
Get-WmiObject Win32_PnPSignedDriver |
Select-Object DeviceName, DriverVersion, DriverDate, IsSigned |
Sort-Object DriverDate -Descending |
Export-Csv -Path "$env:USERPROFILE\Desktop\driver_list.csv" -NoTypeInformation
Write-Host "Driver list saved to Desktop\driver_list.csv" -ForegroundColor Green
Write-Host "`n=== Diagnostic Complete. Review output above for issues. ===" -ForegroundColor Yellow
Write-Host "If SFC found errors, reboot and run 'sfc /scannow' again." -ForegroundColor Yellow
Write-Host "For GPU driver issues, use DDU in Safe Mode before reinstalling." -ForegroundColor YellowError Medic Editorial
The Error Medic Editorial team is composed of senior DevOps engineers, SREs, and Windows systems specialists with a combined 40+ years of experience diagnosing kernel crashes, BSOD stop codes, and system-level failures across enterprise and consumer Windows environments. Our guides are grounded in real crash dump analysis, Microsoft documentation, and hands-on lab testing.
Sources
- https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-0x3b--system-service-exception
- https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/driver-verifier
- https://support.microsoft.com/en-us/windows/using-system-file-checker-in-windows-365e0031-36b1-6031-f804-8fd86e0ef4ca
- https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/chkdsk
- https://stackoverflow.com/questions/tagged/bsod
- https://answers.microsoft.com/en-us/windows/forum/all/blue-screen-system-service-exception/
- https://www.memtest86.com/troubleshooting.htm