Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Blue Screen of Death

  • Please log in to reply
1 reply to this topic

#1 Chris Rickert

Chris Rickert

  • Members
  • 1 posts
  • Local time:03:22 AM

Posted 19 December 2008 - 02:56 PM

Hi all, I am new to this group and found you while searching for solutions to my occasional BSOD problem. It happened again today and I decided that I should probably figure out what is going wrong.

My computer information is as follows:
Dell Inspiron - E1705 - Intel CPU T2500 @ 2.00GHz
Microsoft Windows XP Professional - version 2002 - Service pack 2
My computer gets automatic updates from Microsoft.
I am still running IE6.0 for work reasons (I have client sites I must be able to test).

Today, around noon, my computer BSOD. I can say that I had a number of applications open at one time which I can guess was something like this:
SQL Server 2005 Management Studio - connected to a computer over a VPN. (I was engaged in working in this application when BSOD happened).
Microsoft Outlook - In the middle of writing an e-mail.
Internet Explorer - many instances of IE were open at the time. Including one connected via RDC to a remote computer.

I followed the instructions on this site and scanned my system for malware with AD-Aware 2008 free version. It found only some cookies and a couple of privacy related items.

I have McAfee Anti-virus running at all times and have not recieved any messages.

Upon Restart after BSOD, I did see a message from Microsoft stating that my computer had an automatic update. Usually, the automatic updates automatically reboot my computer overnight so I thought this was a little strange to see it at this time.

Also, I have had this problem occasionally over the past couple of months. It seems to always happen while I'm working on things on the computer and just all of a sudden BSOD. The minidump files I see indicate it has done this recently on the following dates: 12/19/08 (dump attached below), 11/20/08, 11/14/08, 11/3/08. So, it's not happening all the time, but enough to start getting me concerned. If more minidump files would be helpful in diagnosing the problem, I can upload them also.

If you can give me any ideas on why this would be happening occasionally, I would greatly appreciate it!


My latest MiniDump file from today contains this:

Microsoft ® Windows Debugger Version 6.10.0003.233 X86
Copyright © Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\Mini121908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_qfe.080814-1242
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c720
Debug session time: Fri Dec 19 12:06:20.430 2008 (GMT-5)
System Uptime: 1 days 4:44:29.142
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* *
* Bugcheck Analysis *
* *

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf8e8541, a7f62868, 0}

Probably caused by : win32k.sys ( win32k!UserGetRedirectedWindowOrigin+28 )

Followup: MachineOwner

1: kd> !analyze -v
* *
* Bugcheck Analysis *
* *

This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
Arg1: c0000005, The exception code that was not handled
Arg2: bf8e8541, The address that the exception occurred at
Arg3: a7f62868, Trap Frame
Arg4: 00000000

Debugging Details:

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

bf8e8541 8b5040 mov edx,dword ptr [eax+40h]

TRAP_FRAME: a7f62868 -- (.trap 0xffffffffa7f62868)
ErrCode = 00000000
eax=00000000 ebx=00000001 ecx=00000b20 edx=0000000b esi=e6cb88e0 edi=00000005
eip=bf8e8541 esp=a7f628dc ebp=a7f628dc iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
bf8e8541 8b5040 mov edx,dword ptr [eax+40h] ds:0023:00000040=????????
Resetting default scope





LAST_CONTROL_TRANSFER: from bf8166e9 to bf8e8541

a7f628dc bf8166e9 ea010d6e a7f62910 0012ea7c win32k!UserGetRedirectedWindowOrigin+0x28
a7f62920 805413fc ea010d6e e6cb88e0 00000004 win32k!GreGetRandomRgn+0xde
a7f62920 7c90eb94 ea010d6e e6cb88e0 00000004 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012ea94 00000000 00000000 00000000 00000000 0x7c90eb94


bf8e8541 8b5040 mov edx,dword ptr [eax+40h]


SYMBOL_NAME: win32k!UserGetRedirectedWindowOrigin+28



IMAGE_NAME: win32k.sys


FAILURE_BUCKET_ID: 0x8E_win32k!UserGetRedirectedWindowOrigin+28

BUCKET_ID: 0x8E_win32k!UserGetRedirectedWindowOrigin+28

Followup: MachineOwner

BC AdBot (Login to Remove)


#2 usasma


    Still visually handicapped (avatar is memory developed by my Dad

  • BSOD Kernel Dump Expert
  • 25,091 posts
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:22 AM

Posted 20 December 2008 - 12:41 PM

As win32k.sys crashed in SqlWb.exe I'd have to suspect the Microsoft SQL Server Management Studio on your system. I'd suggest uninstalling this program, rebooting, updating your system through Windows Update (to include SP3), rebooting, then downloading a fresh copy to install, then updating your system one more time.

But the results from just one dump file may not be enough - could you post the rest of the dump file analysis' so we can have a look at them.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users