New
#1
Random BSOD Caused by win32k.sys
Hi.
I hope you can help, This BSOD appeared to have started after installing APC software to manage my UPS. I have since uninstalled this software, and have ensured that no services are running.
BSOD Error: SYSTEM_SERVICE_EXCEPTION
I have attached a copy of the minidump.
This is the first time I have attempted to analyse a minidump, and I would attach the symnbols, but the folder is 44.5 meg in size...
I receive the BSOD at what appears random occurances. sometimes the PC will be on for a few days, and no BSOD. Sometimes it will BSOD overnight when not in use (idle), or during the day (idle), or while I am internet browsing, or playing games. reviewing the muiltiple dumps, I receive the same info as below.
I have not yet performed a memtest
chkdsk came back with no errors
sfc /scannow also came back with no errors
According to the bugcheck analysys:
Then when using !analyze -vCode:Probably caused by : win32k.sys ( win32k!NtUserEnumDisplayDevices+8b )
I can provide output of lmnt if required.Code:EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s. FAULTING_IP: win32k!NtUserEnumDisplayDevices+8b fffff960`001943d3 488b5278 mov rdx,qword ptr [rdx+78h] CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT BUGCHECK_STR: 0x3B PROCESS_NAME: winlogon.exe CURRENT_IRQL: 0 ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre LAST_CONTROL_TRANSFER: from fffff80003881ed3 to fffff960001943d3 STACK_TEXT: fffff880`0a8e3a90 fffff800`03881ed3 : fffffa80`23a0b7c0 fffff880`0a8e3b60 00000000`00000000 00000000`00000020 : win32k!NtUserEnumDisplayDevices+0x8b fffff880`0a8e3ae0 00000000`7747a49a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`0029ea38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7747a49a FOLLOWUP_IP: win32k!NtUserEnumDisplayDevices+8b fffff960`001943d3 488b5278 mov rdx,qword ptr [rdx+78h] SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: win32k!NtUserEnumDisplayDevices+8b FOLLOWUP_NAME: MachineOwner MODULE_NAME: win32k IMAGE_NAME: win32k.sys DEBUG_FLR_IMAGE_TIMESTAMP: 56422d98 IMAGE_VERSION: 6.1.7601.19061 STACK_COMMAND: .cxr 0xfffff8800a8e30b0 ; kb FAILURE_BUCKET_ID: X64_0x3B_win32k!NtUserEnumDisplayDevices+8b BUCKET_ID: X64_0x3B_win32k!NtUserEnumDisplayDevices+8b ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:x64_0x3b_win32k!ntuserenumdisplaydevices+8b FAILURE_ID_HASH: {06d313b2-f313-e69a-dae3-f52edc77d0cd}
I hope you can help! Thank you!!