BSOD: 0x50 and win32k.sys

[Frostmourne]

Click the !analyze -v link or type it in and press enter.

 

[ComicCajun]

results of !analyze-v link:
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000066ed0, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffa6005572bd0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
win32k!BRUSHMEMOBJ::BRUSHMEMOBJ+0
fffff960`00066ed0 48895c2408 mov qword ptr [rsp+8],rbx

CONTEXT: fffffa6005572bd0 -- (.cxr 0xfffffa6005572bd0)
rax=fffff900c0099630 rbx=fffff900c24d3a70 rcx=fffffa6005573480
rdx=00000000390514b9 rsi=0000000000000000 rdi=0000000000000000
rip=fffff96000066ed0 rsp=fffffa6005573438 rbp=0000000004051470
r8=0000000004051470 r9=0000000000000000 r10=0000000000000000
r11=fffffa6005573430 r12=0000000000000000 r13=000000000020fd20
r14=000000000020dbd0 r15=0000000075a33380
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
win32k!BRUSHMEMOBJ::BRUSHMEMOBJ:
fffff960`00066ed0 48895c2408 mov qword ptr [rsp+8],rbx ss:0018:fffffa60`05573440=0000000000000000
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: firefox.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff96000066e78 to fffff96000066ed0

STACK_TEXT:
fffffa60`05573438 fffff960`00066e78 : 00000000`00000000 fffff900`c24d3a70 00000000`04051470 00000000`00000000 : win32k!BRUSHMEMOBJ::BRUSHMEMOBJ
fffffa60`05573440 fffff800`020bdef3 : 00000000`00000000 fffffa60`05573530 fffff960`0022ae10 00000000`76eb5aef : win32k!GreCreatePatternBrushInternal+0x94
fffffa60`055734b0 00000000`75a33d09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0020dbc8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75a33d09


FOLLOWUP_IP:
win32k!BRUSHMEMOBJ::BRUSHMEMOBJ+0
fffff960`00066ed0 48895c2408 mov qword ptr [rsp+8],rbx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!BRUSHMEMOBJ::BRUSHMEMOBJ+0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 49edb61d

STACK_COMMAND: .cxr 0xfffffa6005572bd0 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!BRUSHMEMOBJ::BRUSHMEMOBJ+0

BUCKET_ID: X64_0x3B_win32k!BRUSHMEMOBJ::BRUSHMEMOBJ+0

Followup: MachineOwner
---------

 

[Frostmourne]

Bugcheck strike 0x3B points to a SYSTEM_SERVICE_EXCEPTION. So if the process was Firefox.exe and it was possibly trying to access something into priveleged code from non-priveleged. Maybe try disabling some firefox add-ons, followed by updating firefox. Were you downloading something at the time?

 

[ComicCajun]

Um when the dump was performed, I believe that the Dell tech support lady was using an openaccess connect type program so she can monitor my computer so perhaps that's why she was unable to access something?

 

[Frostmourne]

What was she trying to access?

 

[ComicCajun]

I have no idea. Also, strange thing, I just tried to copy and paste a file and Windows Explorer restarted. Since I have you two experts here, I was wondering what was causing this problem because before whenever I would right click on the desktop windows explorer kept restarting over and over.

 

[Frostmourne]

Tell her to disconnect, then reboot, did explorer just start restarting?

 

[ComicCajun]

yes it just started. but the right click restart thing has been happening on and off for about a week. But when I restart the computer it goes away. I just wanted to know if there was a more permanent fix then restarting whenever it happened.

 

[Frostmourne]

Do you have any macro software installed that maps key/mouse presses to actions? If not do a full system scan with MalwareByte's. If something comes up then a similar scan in SuperAntiSpyware.

Finally, are all your updates up to date including SP2?

Try this link too, even it applies to XP:

http://forums.techguy.org/windows-nt-2000-xp/607281-right-click-program-icon-explorer.html

 

[ComicCajun]

I ran malware and had 0 errors and I tried using the shell viewer software and it has worked but the random shutting down of windows explorer seems to lead to a different problem. Just not sure what it is. Thanks for your help though.

 

[Frostmourne]

Can you post what you have installed on your laptop? Use the snipping tool built into Vista.

 

[ComicCajun]

Here are my programs.

 

[Frostmourne]

Its the Divx codecs causing the crash. Uninstall them, and any others. Only leave the CCCP pack. They are conflicting. Kill Divx and the others.

 

[ComicCajun]

thanks a million, frostmourne. Hopefully, my PC is all better xD

 

[Frostmourne]

Did it fix it? If not, remove all codecs, then look for manual bits of any leftovers and reinstall CCCP or VLC.

 

[ComicCajun]

it looks good. So far no problems at all