Solved BSOD and now have to sys restore when rebooting occasionally

[douglassaunders]

I have a new Dell desktop PC that bluescreened and now it will randomly cause me to system restore on turning off and on the PC. I have attached the SF diagnostic zip.
Thanks

 

[YoYo155]

Welcome to SF .

A single dump is not much to go on but try this for me.
Navigate to you Fonts library;

1. rb:
2. Type - Fonts and press the Enter key.
3. Right Click a font called ACASLONPRO-BOLDITALIC.OTF
4. Choose Delete.

Now just go about using the PC normally and let us know how it goes.

BugCheck 50, {fffff901c0658eac, 0, fffff9600014ccc3, 5}


Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!bLoadFontFile+1f3 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff901c0658eac, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff9600014ccc3, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cb5100
GetUlongFromAddress: unable to read from fffff80002cb51c0
 fffff901c0658eac 

FAULTING_IP: 
win32k!bLoadFontFile+1f3
fffff960`0014ccc3 448b82a4000000  mov     r8d,dword ptr [rdx+0A4h]

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

TRAP_FRAME:  fffff88006bbd640 -- (.trap 0xfffff88006bbd640)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff900bfc69514 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff901c0658e08 rsi=0000000000000000 rdi=0000000000000000
rip=fffff9600014ccc3 rsp=fffff88006bbd7d0 rbp=fffff900c1cd4480
 r8=0000000000000001  r9=000000000000000c r10=fffff900c1cd4448
r11=fffff900c1cd444c r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
win32k!bLoadFontFile+0x1f3:
fffff960`0014ccc3 448b82a4000000  mov     r8d,dword ptr [rdx+0A4h] ds:fffff901`c0658eac=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002afa5b3 to fffff80002a7dbc0

STACK_TEXT:  
fffff880`06bbd4d8 fffff800`02afa5b3 : 00000000`00000050 fffff901`c0658eac 00000000`00000000 fffff880`06bbd640 : nt!KeBugCheckEx
fffff880`06bbd4e0 fffff800`02a7bcee : 00000000`00000000 fffff901`c0658eac 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x43801
fffff880`06bbd640 fffff960`0014ccc3 : 00000000`00000000 00000000`00000001 fffff900`c1cd4480 00000000`00000001 : nt!KiPageFault+0x16e
fffff880`06bbd7d0 fffff960`0014ca87 : fffff900`c1cd4488 00000000`00000001 00000000`000296b4 fffff900`c01b0409 : win32k!bLoadFontFile+0x1f3
fffff880`06bbd8c0 fffff960`0014b5f6 : 00000000`00000000 fffff960`0014ca1c fffff900`c01bbc00 fffff900`c1cd4480 : win32k!ttfdSemLoadFontFile+0x6b
fffff880`06bbd920 fffff960`0014b4e3 : 00000000`00000001 fffff900`c1cd4488 fffff900`c1cd4480 fffff900`c008a010 : win32k!PDEVOBJ::LoadFontFile+0x7e
fffff880`06bbd9b0 fffff960`0014bc9c : fffff880`06bbdcf0 fffffa80`0a39bc30 ffffffff`fe4e7780 00000000`00000001 : win32k!vLoadFontFileView+0x45b
fffff880`06bbda40 fffff960`0014e96a : fffff880`06bbdbf0 fffff880`06bbdcf0 fffff880`0000004e 00000000`00000001 : win32k!PUBLIC_PFTOBJ::bLoadFonts+0x668
fffff880`06bbdb90 fffff960`0014e794 : 00000000`00000000 00000000`00000001 fffff880`06bbded0 00000000`00000000 : win32k!GreAddFontResourceWInternal+0x18e
fffff880`06bbdc30 fffff800`02a7ce53 : ffffffff`ffffffff 00000000`00000000 00000000`0271e7c0 00000000`00000024 : win32k!NtGdiAddFontResourceW+0x174
fffff880`06bbdde0 000007fe`fde1a86a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0271f5d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007fe`fde1a86a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!bLoadFontFile+1f3
fffff960`0014ccc3 448b82a4000000  mov     r8d,dword ptr [rdx+0A4h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  win32k!bLoadFontFile+1f3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  53bc9414

IMAGE_VERSION:  6.1.7601.18528

FAILURE_BUCKET_ID:  X64_0x50_win32k!bLoadFontFile+1f3

BUCKET_ID:  X64_0x50_win32k!bLoadFontFile+1f3

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x50_win32k!bloadfontfile+1f3

FAILURE_ID_HASH:  {19f3da62-c2b1-c11c-88fb-6749cf510d59}

Followup: MachineOwner
---------

0: kd> !dpx
Start memory scan  : 0xfffff88006bbd4d8 ($csp)
End memory scan    : 0xfffff88006bbf000 (Stack Base)

0xfffff88006bbd5a8 : 0xfffff80002aa5a26 : nt!PsChargeProcessNonPagedPoolQuota+0x22
0xfffff88006bbd5d8 : 0xfffff80002d91c15 : nt!MiInsertVadCharges+0x1b5
0xfffff88006bbd638 : 0xfffff80002a7bcee : nt!KiPageFault+0x16e
0xfffff88006bbd640 : 0x0000000000000000 :  Trap @ fffff88006bbd640
0xfffff88006bbd6a8 : 0xfffff80002bb2560 : nt!ExAllocatePoolWithTag+0x950
0xfffff88006bbd738 : 0xfffff80002a86d42 : nt!ExReleaseResourceAndLeaveCriticalRegion+0x12
0xfffff88006bbd758 : 0xfffff80002a86d42 : nt!ExReleaseResourceAndLeaveCriticalRegion+0x12
0xfffff88006bbd768 : 0xfffff96000149c7f : win32k!MultiUserGreTrackAddEngResource+0x6f
0xfffff88006bbd7a8 : 0xfffff9600014ccc3 : win32k!bLoadFontFile+0x1f3
0xfffff88006bbd858 : 0xfffff80002a86a8b : nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x1b
0xfffff88006bbd8b8 : 0xfffff9600014ca87 : win32k!ttfdSemLoadFontFile+0x6b
0xfffff88006bbd918 : 0xfffff9600014b5f6 : win32k!PDEVOBJ::LoadFontFile+0x7e
0xfffff88006bbd928 : 0xfffff9600014ca1c : win32k!ttfdSemLoadFontFile
0xfffff88006bbd978 : 0xfffff80002a86d42 : nt!ExReleaseResourceAndLeaveCriticalRegion+0x12
0xfffff88006bbd9a8 : 0xfffff9600014b4e3 : win32k!vLoadFontFileView+0x45b
0xfffff88006bbda38 : 0xfffff9600014bc9c : win32k!PUBLIC_PFTOBJ::bLoadFonts+0x668
0xfffff88006bbda40 : 0xfffff88006bbdcf0 :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdae8 : 0xfffff80002d7acc1 : nt!ObOpenObjectByName+0x531
0xfffff88006bbdb28 : 0xfffff88006bbdcf0 :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdb78 : 0xfffff88006bbdcf0 :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdb88 : 0xfffff9600014e96a : win32k!GreAddFontResourceWInternal+0x18e
0xfffff88006bbdb98 : 0xfffff88006bbdcf0 :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdc20 : 0xfffff88006bbdcf0 :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdc28 : 0xfffff9600014e794 : win32k!NtGdiAddFontResourceW+0x174
0xfffff88006bbdc80 : 0xfffff88006bbdcf0 :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdcf0 : 0x005c003f003f005c :  !du ""\??\C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdcf8 : 0x0050005c003a0043 :  !du ""C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd00 : 0x00520047004f0052 :  !du ""ROGRAM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd08 : 0x00460020004d0041 :  !du ""AM FILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd10 : 0x00530045004c0049 :  !du ""ILES (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd18 : 0x0038005800280020 :  !du "" (X86)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd20 : 0x0043005c00290036 :  !du ""6)\COMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd28 : 0x004f004d004d004f :  !du ""OMMON FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd30 : 0x004900460020004e :  !du ""N FILES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF""
0xfffff88006bbdd38 : 0x005c00530045004c :  !du "LES\ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF"
0xfffff88006bbdd40 : 0x0042004f00440041 :  !du "ADOBE\FONTS\ACASLONPRO-BOLDITALIC.OTF"
0xfffff88006bbdd48 : 0x004f0046005c0045 :  !du "E\FONTS\ACASLONPRO-BOLDITALIC.OTF"
0xfffff88006bbdd50 : 0x005c00530054004e :  !du "NTS\ACASLONPRO-BOLDITALIC.OTF"
0xfffff88006bbdd58 : 0x0053004100430041 :  !du "ACASLONPRO-BOLDITALIC.OTF"
0xfffff88006bbdd60 : 0x0050004e004f004c :  !du "LONPRO-BOLDITALIC.OTF"
0xfffff88006bbdd68 : 0x0042002d004f0052 :  !du "RO-BOLDITALIC.OTF"
0xfffff88006bbdd70 : 0x00490044004c004f :  !du "OLDITALIC.OTF"
0xfffff88006bbdd78 : 0x0049004c00410054 :  !du "TALIC.OTF"
0xfffff88006bbdd80 : 0x0054004f002e0043 :  !du "C.OTF"
0xfffff88006bbddd8 : 0xfffff80002a7ce53 : nt!KiSystemServiceCopyEnd+0x13
0xfffff88006bbde48 : 0xfffff80002a7ce53 : nt!KiSystemServiceCopyEnd+0x13
0xfffff88006bbde50 : 0x0000000000000000 :  Trap @ fffff88006bbde50
0xfffff88006bbdee8 : 0xfffff80002d54eb7 : nt!CmpGetValueData+0x73
0xfffff88006bbdf68 : 0xfffff80002d55058 : nt!CmpGetValueDataFromCache+0x6c

 

[douglassaunders]

Removed that font. Fingers crossed.
Thank you for the fast response

 

[YoYo155]

My pleasure .

Just as an extra step I would consider rebuilding the font cache.

1. Press and hold the "Windows" key (located between the left "Ctrl" and "Alt" keys), then tap the "E" key to open Windows Explorer.
2. Double-click on your local hard drive, where the operating system is installed in the left pane, then double-click to expand the "Windows" directory. Double-click on the "System32" folder.
3. Right-click on "Fntcache.dat" in the right pane of the Windows Explorer window and choose "Delete." Click the "Yes" button to confirm the deletion.
4. Close the Windows Explorer window and restart your computer.

 

[douglassaunders]

Two weeks later and its not crashing
Thanks a bunch Yoyo155

 

[YoYo155]

Great to hear!
Thank you for reporting back, enjoy your stay .