Random BSOD Caused by win32k.sys

[pinkbunny]

Hi.

I hope you can help, This BSOD appeared to have started after installing APC software to manage my UPS. I have since uninstalled this software, and have ensured that no services are running.

BSOD Error: SYSTEM_SERVICE_EXCEPTION

I have attached a copy of the minidump.

This is the first time I have attempted to analyse a minidump, and I would attach the symnbols, but the folder is 44.5 meg in size...

I receive the BSOD at what appears random occurances. sometimes the PC will be on for a few days, and no BSOD. Sometimes it will BSOD overnight when not in use (idle), or during the day (idle), or while I am internet browsing, or playing games. reviewing the muiltiple dumps, I receive the same info as below.

I have not yet performed a memtest
chkdsk came back with no errors
sfc /scannow also came back with no errors

According to the bugcheck analysys:

Probably caused by : win32k.sys ( win32k!NtUserEnumDisplayDevices+8b )

Then when using !analyze -v

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
win32k!NtUserEnumDisplayDevices+8b
fffff960`001943d3 488b5278        mov     rdx,qword ptr [rdx+78h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  winlogon.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

LAST_CONTROL_TRANSFER:  from fffff80003881ed3 to fffff960001943d3

STACK_TEXT:  
fffff880`0a8e3a90 fffff800`03881ed3 : fffffa80`23a0b7c0 fffff880`0a8e3b60 00000000`00000000 00000000`00000020 : win32k!NtUserEnumDisplayDevices+0x8b
fffff880`0a8e3ae0 00000000`7747a49a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0029ea38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7747a49a


FOLLOWUP_IP: 
win32k!NtUserEnumDisplayDevices+8b
fffff960`001943d3 488b5278        mov     rdx,qword ptr [rdx+78h]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  win32k!NtUserEnumDisplayDevices+8b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  56422d98

IMAGE_VERSION:  6.1.7601.19061

STACK_COMMAND:  .cxr 0xfffff8800a8e30b0 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_win32k!NtUserEnumDisplayDevices+8b

BUCKET_ID:  X64_0x3B_win32k!NtUserEnumDisplayDevices+8b

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x3b_win32k!ntuserenumdisplaydevices+8b

FAILURE_ID_HASH:  {06d313b2-f313-e69a-dae3-f52edc77d0cd}

I can provide output of lmnt if required.
I hope you can help! Thank you!!

 

[pinkbunny]

Memtest is now running.
Runtime 23 mins, pass 1 of 4, 59%, test 7. Zero errors - using default autostarted configs.

I will supply update of memtest results in about 19 hours after i get home from work. Ill monitor this thread throughout the day.

Thanks!

 

[pinkbunny]

Memtest completed 4 passes.
Zero errors
1 note: RAM may be vulnerable to high frequency row hammer bit flips.

So, anybody know what i can do to resolve my BSOD issue?

 

[axe0]

http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html