WinDbg log, I get BSOD and Restart often, who can help me interpretate

[Scorpiono]

Hello guys,

I'm quite desperate that on my new super-desktop I get tons of restarts and BSODs on Windows 7.

I get the following information on WinDBG:

MODULE_NAME: win32k

FAULTING_MODULE: fffff8000280c000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc5e0

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
fffff900c08fdcf0

FAULTING_IP:
win32k!BRUSHOBJ_hGetColorTransform+8a8d1
fffff960`002ec69d 488b4f20 mov rcx,qword ptr [rdi+20h]

MM_INTERNAL_CODE: 0

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x50

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff800028fd1e4 to fffff8000287df00

STACK_TEXT:
fffff880`07c2a778 fffff800`028fd1e4 : 00000000`00000050 fffff900`c08fdcf0 00000000`00000000 fffff880`07c2a8e0 : nt!KeBugCheckEx
fffff880`07c2a780 fffff800`0287bfee : 00000000`00000000 fffff900`c2f33740 fffff8a0`08d7a200 fffff800`028c9793 : nt!wcsncat_s+0x2e9fc
fffff880`07c2a8e0 fffff960`002ec69d : 00000000`00000000 fffff900`c02308e8 fffff900`c02308e8 fffff900`c2f33740 : nt!KeSynchronizeExecution+0x28de
fffff880`07c2aa70 fffff960`002ebbae : fffff900`c2f33740 00000000`00000000 0000205f`00000000 00000000`00000000 : win32k!BRUSHOBJ_hGetColorTransform+0x8a8d1
fffff880`07c2aaa0 fffff960`002ecab3 : 00000000`00000000 00000000`0912205f fffff900`c2f33740 00000000`00000000 : win32k!BRUSHOBJ_hGetColorTransform+0x89de2
fffff880`07c2aae0 fffff960`002495ff : 00000000`00000000 fffff900`c00bf010 fffff900`c2f33740 00000000`00000020 : win32k!BRUSHOBJ_hGetColorTransform+0x8ace7
fffff880`07c2ab20 fffff960`0026a908 : fffff880`00000001 00000000`00000001 fffff880`07c2ac60 00000000`00000000 : win32k!EngSetPointerShape+0x4007
fffff880`07c2ab60 fffff800`0287d153 : fffffa80`07846b60 00000000`00000000 00000000`00000000 fffffa80`07e980e0 : win32k!BRUSHOBJ_hGetColorTransform+0x8b3c
fffff880`07c2abe0 000007fe`fdd74efa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeSynchronizeExecution+0x3a43
00000000`0326f508 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fdd74efa


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!BRUSHOBJ_hGetColorTransform+8a8d1
fffff960`002ec69d 488b4f20 mov rcx,qword ptr [rdi+20h]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: win32k!BRUSHOBJ_hGetColorTransform+8a8d1

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: win32k.sys

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------

2: kd> lmvm win32k
start end module name
fffff960`00070000 fffff960`0037f000 win32k (export symbols) win32k.sys
Loaded symbol image file: win32k.sys
Image path: \SystemRoot\System32\win32k.sys
Image name: win32k.sys
Timestamp: Tue Jul 14 02:40:16 2009 (4A5BC5E0)
CheckSum: 002FE623
ImageSize: 0030F000
File version: 6.1.7600.16385
Product version: 6.1.7600.16385
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.7 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: win32k.sys
OriginalFilename: win32k.sys
ProductVersion: 6.1.7600.16385
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: Multi-User Win32 Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.

I understand it's a problem with multi-user? I tend to keep two users live at once "Office" and "Gaming".
Any more exact interpretations?

 

[Scorpiono]

Oh forgot to say I'll definitely tip a beer in someones paypal if he offers the gold tip. Thanks a million

 

[The_Prophecy]

Bug Check 0x50: PAGE_FAULT_IN_NONPAGED_AREA refers to either bad ram (or ram with improper timings or voltages set in the BIOS), faulty drivers, or a corrupted file system.

For the ram possibility, download and burn a copy of MemTest86+. Let it run through a couple passes (remember - passes, not tests. Each pass is, if memory serves, a set of 7 tests) and see if any errors show up. This one is usually best left to run overnight.

For the driver scenario, check to make sure you are using all of the latest drivers for all of the major devices in your computer. Video, Sound, Network and chipset are the big 4.

For the file system scenario, schedule chkdsk to run on your hard drive(s) and see if it returns and fixes any errors.

 

[Scorpiono]

Thank you so much, I've already run the Windows 7 MEMTEST, everything was okay, I run Corsair 8gb ddr3. Any known issues with it?

Thanks once more, will do the rest as well.

 

[pat mcgroin]

Is this a cracked version of W7?
Using the wrong symbols wont always get you a correct report.

File date: 00000000.00000000
BUCKET_ID: WRONG_SYMBOLS
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd

 

[Scorpiono]

W7 ultimate with school cdkey.

 

[Scorpiono]

Let me update you guys, if anyone helps me out with this I'll buy you a paypal beer, I swear!

MEMTEST in Windows 7 showed no errors.
CHKDISK no errors.

I'm having this tiny problem as EVEREST (known for showing your system info) doesn't show my Intel Motherboard. I have a SGP4510H, it's just not there. I've went on Intel.com and grabbed drivers for MB/Sound/Network, still crashing. Not necessarily a BSOD but will just stop working without restarting and hearing the repeated sound on the background (1ms scratch over and over).

It's not overheating and everything stays under 60 degrees. It's a bit dusty but since it's not overheating in my logs I won't go for the cleaning.

Is there any known issue with Corsair 2x4GB Dual channel DDR3 (I have 2 units fixed in my MB, both 4gb) and Win 7 or my Intel MB?

Again, any help would be highly appreciated.
The best,

 

[Scorpiono]

Here is my memory.dmp

http://www.filehosting.org/file/details/95478/MEMORY2.rar

 

[Scorpiono]

Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\Windows\Minidump

Crash dumps are enabled on your computer.


On Sun 12/27/2009 1:52:07 PM your computer crashed
This was likely caused by the following module: win32k.sys
Bugcheck code: 0x50 (0xFFFFF900C08FDCF0, 0x0, 0xFFFFF960002EC69D, 0x0)
Error: PAGE_FAULT_IN_NONPAGED_AREA
Dump file: C:\Windows\Minidump\122709-18751-01.dmp
file path: C:\Windows\system32\win32k.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Multi-User Win32 Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit may be another driver on your system which cannot be identified at this time.



On Mon 12/21/2009 9:36:01 PM your computer crashed
This was likely caused by the following module: win32k.sys
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF960000D4283, 0xFFFFF880085A6020, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
Dump file: C:\Windows\Minidump\122109-18236-01.dmp
file path: C:\Windows\system32\win32k.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Multi-User Win32 Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit may be another driver on your system which cannot be identified at this time.



On Thu 12/10/2009 8:07:50 PM your computer crashed
This was likely caused by the following module: win32k.sys
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF96000134283, 0xFFFFF88005705020, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
Dump file: C:\Windows\Minidump\121009-16972-01.dmp
file path: C:\Windows\system32\win32k.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Multi-User Win32 Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect, possibly the culprit may be another driver on your system which cannot be identified at this time.