Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Need help with BSOD Dumpfiles.

  • Please log in to reply
2 replies to this topic

#1 Jbyrd117


  • Members
  • 2 posts
  • Local time:08:54 PM

Posted 26 February 2012 - 05:11 PM

My computer (which runs on windows xp service pack 3) quit to the BSOD (or something like it) yesterday and I used Windows Debugger to read the file but I'm not sure what to make of the results and what I should do now. It also happened a week or so prior to yesterday. In case anyone is wondering I have Microsoft Security Essentials and MBAM on my computer (but I'm afraid that something got past them and made my computer crash). So what does this mean? I don't want to get another crash.

My dumpfile from yesterdays crash:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\WINDOWS\Minidump\Mini022512-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.111025-1629
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b240
Debug session time: Sat Feb 25 18:30:05.503 2012 (GMT-5)
System Uptime: 5 days 21:48:51.479
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, bf955547, aec32c00, 0}

Probably caused by : win32k.sys ( win32k!GreGetGlyphIndicesW+af )

Followup: MachineOwner

kd> !analyze -show
Unknown bugcheck code (0)
Unknown bugcheck description
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
Arg1: c0000005, The exception code that was not handled
Arg2: bf955547, The address that the exception occurred at
Arg3: aec32c00, Trap Frame
Arg4: 00000000

Debugging Details:

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

bf955547 8b4004          mov     eax,dword ptr [eax+4]

TRAP_FRAME:  aec32c00 -- (.trap 0xffffffffaec32c00)
ErrCode = 00000000
eax=00000000 ebx=00000100 ecx=000000ba edx=e7882404 esi=e1d1a000 edi=e7882008
eip=bf955547 esp=aec32c74 ebp=aec32c8c iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
bf955547 8b4004          mov     eax,dword ptr [eax+4] ds:0023:00000004=????????
Resetting default scope




PROCESS_NAME:  chrome.exe

LAST_CONTROL_TRANSFER:  from bf94cbd4 to bf955547

aec32c8c bf94cbd4 e7081008 e1d1a200 e1870008 win32k!GreGetGlyphIndicesW+0xaf
aec32d28 bf94cc50 520102f0 0012e128 00000100 win32k!NtGdiGetGlyphIndicesWInternal+0xf2
aec32d48 804de7ec 520102f0 0012e128 00000100 win32k!NtGdiGetGlyphIndicesW+0x1b
aec32d48 7c90e514 520102f0 0012e128 00000100 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012de14 00000000 00000000 00000000 00000000 0x7c90e514


bf955547 8b4004          mov     eax,dword ptr [eax+4]


SYMBOL_NAME:  win32k!GreGetGlyphIndicesW+af

FOLLOWUP_NAME:  MachineOwner


IMAGE_NAME:  win32k.sys


FAILURE_BUCKET_ID:  0x8E_win32k!GreGetGlyphIndicesW+af

BUCKET_ID:  0x8E_win32k!GreGetGlyphIndicesW+af

Followup: MachineOwner

BC AdBot (Login to Remove)


#2 hamluis



  • Moderator
  • 56,290 posts
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 PM

Posted 26 February 2012 - 05:23 PM

From what I see on Web...it may be a Chrome issue.

I'd try uninstalling it, reinstalling it or using a different browser...and see if there are ensuing BSODs.

Another member previously reported similar issue, no malware involved per his topic, Member Topic.


#3 Jbyrd117

  • Topic Starter

  • Members
  • 2 posts
  • Local time:08:54 PM

Posted 01 March 2012 - 10:14 AM

Thanks for the reply. I'll wait for now and if it happens again I'll try the suggestions in that other thread as well as reinstall Chrome.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users