Sign in with
Sign up | Sign in
Your question

Windows XP 64 constant Blue Screens

Last response: in Windows XP
Share
November 2, 2007 7:54:10 PM


I've installed a fresh copy of XP x64 recently but am being constantly interupted by blue screen errors.

I've used driver agent to check for updated drivers, and all (according to this site) are current. there is no pattern to the blue screens. happens with one program open, sometimes no programs (at night). sometimes after 10 minutes, sometimes after several hours.

Stage2URL=/dw/bluetwo.asp?BCCode=3b&BCP1=00000000C0000005&BCP2=FFFFF97FFF0D6BAD&BCP3=FFFFFADF8A801420&BCP4=0000000000000000&OSVer=5_2_3790&SP=2_0&Product=256_1

this is the error message. consistant.

Can anyone tell me where to look?
November 2, 2007 8:47:49 PM

what virus or firewall program what are you using, what is your system,soundcard,videocard,ram,psu,motherboard.Specks please,
http://aumha.org/a/stop.htm
November 2, 2007 9:05:18 PM

OS Name Microsoft(R) Windows(R) XP Professional x64 Edition
Version 5.2.3790 Service Pack 2 Build 3790
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name GLHAMD64
System Manufacturer VIAK8T
System Model AWRDACPI
System Type x64-based PC
Processor AMD64 Family 15 Model 15 Stepping 0 AuthenticAMD ~2452 Mhz
BIOS Version/Date Phoenix Technologies, LTD 6.00 PG, 1/19/2005
SMBIOS Version 2.3
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"
User Name HEDRICK\garyh
Time Zone Pacific Daylight Time
Total Physical Memory 4,095.26 MB
Available Physical Memory 3.09 GB
Total Virtual Memory 5.76 GB
Available Virtual Memory 5.14 GB
Page File Space 2.00 GB
Page File C:\pagefile.sys

Motherboar, Abit, i think an8
Related resources
November 2, 2007 9:10:43 PM

Ok read the link I posted there are many things that can cause this, bad memory, incompatiable drivers, try a different sound driver for your card.
What are you doing when this happens, have you noticed if before or after a sound this happens or closing opening an application, or anytime when using a app.
in the run type
eventVwr.msc see if an app is causing this and what app
ok I see there is no pattern so now this say that something in momery my be causing this or a bug of somesort
November 2, 2007 9:47:31 PM

Also, i was having these problems for a couple of months. i reformatted the drive on the 29th, and started reloading everything a new. looking at the system event log,
10/30 2:05 p.m.:
Source: System error:

Error code 000000000000001e, parameter1 ffffffffc0000005, parameter2 fffff8000103a53b, parameter3 0000000000000000, parameter4 ffffffffffffffff.

Immediately before that:
Source W32time

The time service is now synchronizing the system time with the time source hedcogaserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.5:123).

10/30 2:43 p.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff80001058325, parameter3 fffffadf8b4c9060, parameter4 0000000000000000.

Immediately before that:
Source W32time

The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


10/30 6:50 p.m.
Source: System error:

Error code 000000000000001a, parameter1 0000000000041284, parameter2 fffff980acc44001, parameter3 0000000000018c6f, parameter4 fffff78000001000.

Immediately before that:
Source W32time

The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


10/31 9:36 a.m.
Source: System error:

Error code 00000000000000d3, parameter1 fffff97fff404370, parameter2 0000000000000002, parameter3 0000000000000000, parameter4 fffff80001059c81.

Immediately before that:
The IMAPI CD-Burning COM Service service was successfully sent a start control.


10/31 12:43 a.m.
Source: System error:

Error code 000000000000001a, parameter1 0000000000041284, parameter2 fffff97ffd749001, parameter3 00000000000042ff, parameter4 fffff97ffe000000.

Immediately before that:
Source W32time

The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


10/31 5:36 a.m.
Source: System error:

Error code 000000000000001a, parameter1 0000000000041284, parameter2 fffff97ffa661001, parameter3 00000000000031f7, parameter4 fffff97ffe000000.

Immediately before that:
Source W32time

The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).



11/01 8:59 a.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff8000103c48e, parameter3 fffffadf8a536350, parameter4 0000000000000000.

Windows shut down at 4:54 a.m. after:

The WinHTTP Web Proxy Auto-Discovery Service has been idle for 15 minutes, it will be shut down.



11/01 9:43 a.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff8000103c48e, parameter3 fffffadf90bf9350, parameter4 0000000000000000.

Immediately before that:
The Plug and Play operation cannot be completed because a device driver is preventing the device from stopping. The name of the device driver is listed as the vetoing service name below.

Vetoed device: STORAGE\REMOVABLEMEDIA\8&F5F4DBD&0&RM
Vetoing device: STORAGE\RemovableMedia\8&f5f4dbd&0&RM
Vetoing service name: FileSystem\RAW
Veto type 6: PNP_VetoDevice

When Windows attempts to install, upgrade, remove, or reconfigure a device, it queries the driver responsible for that device to confirm that the operation can be performed. If any of these drivers denies permission (query-removal veto), then the computer must be restarted in order to complete the operation.

User Action
Restart your computer.


The time service is now synchronizing the system time with the time source hedcogaserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.5:123).



11/01 9:52 a.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff8000103c48e, parameter3 fffffadf90bf9350, parameter4 0000000000000000.

Immediately before that:

Source W32time
The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


11/01 11:46 a.m.
Source: System error:

Error code 000000000000001e, parameter1 ffffffffc0000005, parameter2 fffff8000103c5d7, parameter3 0000000000000000, parameter4 ffffffffffffffff.

Immediately before that:
The IMAPI CD-Burning COM Service service entered the stopped state.


11/01 3:25 p.m.
Source: System error:

Error code 00000000000000d3, parameter1 fffff97fff3f1a88, parameter2 0000000000000002, parameter3 0000000000000000, parameter4 fffff80001059c81.

Immediately before that:

Source W32time
The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


11/01 3:31 p.m.
Source: System error:

Error code 0000000000000024, parameter1 000000000019033d, parameter2 fffffadf8b19dbc0, parameter3 fffffadf8b19d5d0, parameter4 fffff8000102914d.

Immediately before that:

Source W32time
The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


11/02 10:18 a.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff80001055c7e, parameter3 fffffadf8a1ca0a0, parameter4 0000000000000000.

Immediately before that:

Source W32time
The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


11/02 11:54 a.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff97fff0d6bad, parameter3 fffffadf8a801420, parameter4 0000000000000000.

Immediately before that:

Source W32time
The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).


11/02 1:20 p.m.
Source: System error:

Error code 000000000000003b, parameter1 00000000c0000005, parameter2 fffff97fff0d6bad, parameter3 fffffadf8a801420, parameter4 0000000000000000.

Immediately before that:

Source W32time
The time service is now synchronizing the system time with the time source hedcodserver.hedrick.local (ntp.d|192.168.1.107:123->192.168.1.6:123).



11/02 1:24 p.m.
Source: System error:

Error code 00000000000000d3, parameter1 fffff97fff404370, parameter2 0000000000000002, parameter3 0000000000000000, parameter4 fffff80001059c81.

Immediately before that:

The Application Management service was successfully sent a start control.

is this a pattern with the W32time?
November 2, 2007 9:56:36 PM

in response to your questions.

sound card:
Name Creative X-Fi Audio Processor (WDM)
Manufacturer Creative Technology, Ltd.
Status OK
PNP Device ID PCI\VEN_1102&DEV_0005&SUBSYS_00211102&REV_00\3&13C0B0C5&0&50
I/O Port 0x0000B400-0x0000B41F
Memory Address 0xEF000000-0xEF1FFFFF
Memory Address 0xE8000000-0xEBFFFFFF
IRQ Channel IRQ 18
Driver c:\windows\system32\drivers\ctaud2k.sys (5.12.01.1201-2.10.0760, 833.75 KB (853,760 bytes), 8/17/2006 1:18 PM)

Name Realtek AC'97 Audio for VIA (R) Audio Controller
Manufacturer Realtek
Status OK
PNP Device ID PCI\VEN_1106&DEV_3059&SUBSYS_1415147B&REV_60\3&13C0B0C5&0&8D
I/O Port 0x0000E800-0x0000E8FF
IRQ Channel IRQ 22
Driver c:\windows\system32\drivers\alcwdm64.sys (5.10.00.6260 built by: WinDDK, 3.40 MB (3,566,592 bytes), 10/29/2007 11:53 AM)


no sounds or anything prior to the crash.
November 2, 2007 9:57:22 PM

I think so I'm thinking if anyone has a topof the hat know please help
http://support.microsoft.com/kb/223184
manual set read this ok I'm working on it
ok I'm sick and need to lay down for a bit I'll be back sry flu
November 2, 2007 10:23:29 PM

ok I see you have a creative sound card plus you have the realtek
disable onboard sound
uninstal those drivers
that just may fix you
November 2, 2007 10:25:04 PM

OK, i'll do that right away.

Hope you are feeling better.

i'll note any improvement.
November 2, 2007 10:25:52 PM

glhglh said:
in response to your questions.

sound card:
Name Creative X-Fi Audio Processor (WDM)
Manufacturer Creative Technology, Ltd.
Status OK
PNP Device ID PCI\VEN_1102&DEV_0005&SUBSYS_00211102&REV_00\3&13C0B0C5&0&50
I/O Port 0x0000B400-0x0000B41F
Memory Address 0xEF000000-0xEF1FFFFF
Memory Address 0xE8000000-0xEBFFFFFF
IRQ Channel IRQ 18
Driver c:\windows\system32\drivers\ctaud2k.sys (5.12.01.1201-2.10.0760, 833.75 KB (853,760 bytes), 8/17/2006 1:18 PM)

Name Realtek AC'97 Audio for VIA (R) Audio Controller
Manufacturer Realtek
Status OK
PNP Device ID PCI\VEN_1106&DEV_3059&SUBSYS_1415147B&REV_60\3&13C0B0C5&0&8D
I/O Port 0x0000E800-0x0000E8FF
IRQ Channel IRQ 22
Driver c:\windows\system32\drivers\alcwdm64.sys (5.10.00.6260 built by: WinDDK, 3.40 MB (3,566,592 bytes), 10/29/2007 11:53 AM)


no sounds or anything prior to the crash.
ok I see you have a creative sound card plus you have the realtek
disable onboard sound
uninstal those drivers
that just may fix you


:bounce: 
November 2, 2007 10:29:19 PM

i disabled the RealTech in the Device manager, and uninstalled the realtec software. where would i find the drivers to uninstall?
November 2, 2007 10:33:00 PM

in control panel add and remove programs if not in there then don't worry the disable fixed the remove I hope
try to get speedupmypc by uniblue that is a good program to use to fix errors
that creative the music or what, the drivers are touchy
disable also in bios
November 2, 2007 11:22:12 PM

Gomerpile

Thanks for the help. i disabled the ON Chip Audio in the Bios, deleted the software and disabled the RealTech in the device manager.

it will probably take a day or so to tell if there is another crash. it does make some sense, after reinstalling xp64, it took a day or so to get all the microsoft updates, install drivers. i'm not sure when i loaded the Creative, or the Realtech.

i have been using CrapCleaner for some cleanup duties. went to the Speedupmypc site and downloaded the program, but alas, it does not support 64bit systems.
November 3, 2007 5:22:46 PM

middle of the night, the same blue screen. this error message.

BCCode : a
BCP1 : FFFFF8000143DE16
BCP2 : 0000000000000002
BCP3 : 0000000000000000
BCP4 : FFFFF8000105A046
OSVer : 5_2_3790
SP : 2_0 Product : 256_1
November 5, 2007 8:25:13 AM

glhglh said:
middle of the night, the same blue screen. this error message.

BCCode : a
BCP1 : FFFFF8000143DE16
BCP2 : 0000000000000002
BCP3 : 0000000000000000
BCP4 : FFFFF8000105A046
OSVer : 5_2_3790
SP : 2_0 Product : 256_1


Looking at the timeservice might have caused the error I'm giving you a snap of my registry entry so you can compare it, maybe change yours to what I have but save your registry entry incase you need to inport it back.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters


Shot at 2007-11-05

By the looks of this code some app or driver is causing the error, however I can not be absolutely sure if its because of failing memory,CPU addressing. Maybe disable synchronizing of time service explained in the link http://support.microsoft.com/kb/223184 about timeservice
http://oca.microsoft.com/en/welcome.aspx Report error
Have you gone into administrative tools and look in the eventlog look under system, upon investigating my log I noticed how timeservice has a warning stating unsynchronized timeservice. If it is reporting an error in there you can go to the proprieties of the error and then click yes and this will bring you to microsoft answers to solve the error.
November 5, 2007 4:26:38 PM

mytype is set to nt5ds.

the microsoft web site says this:

W32Time service registry values
• AvoidTimeSyncOnWan : REG_DWORD (optional)
Prevents the computer from synchronizing with a computer that is in another site.
0 = the site of the time source is ignored [default]
1 = the computer does not synchronize with a time source that is in a different site
• GetDcBackoffMaxTimes : REG_DWORD (optional)
The maximum number of times to double the backoff interval when successive attempts to find a domain controller do not succeed. An event is logged every time a wait of the maximum length occurs.
0 = the wait between successive attempts is always the minimum and no event is logged
7 = [default]
• GetDcBackoffMinutes : REG_DWORD (optional)
The initial number of minutes to wait before looking for a domain controller if the last attempt did not succeed.
15 = [default]
• LocalNTP : REG_DWORD
Used to start the SNTP server.
0 = do not start the SNTP server unless this computer is a domain controller[default]
1 = always start the SNTP server
• NtpServer : REG_SZ (optional)
NtpServer : REG_SZ (optional) Used to manually configure the time source. Set this to the DNS name or IP address of the NTP server to synchronize from. You can modify this from the command line by using the net time command. Value is blank by default

Note If you enter multiple NTP entries you must separate the entries with a space. For example, if you enter two different IP addresses for two distinct NTP servers, you must separate the entries with a space. Do not use a comma to separate multiple IP addresses or multiple fully qualified domain names (FQDNs).
• Period : REG_DWORD or REG_SZ
Used to control how often the time service synchronizes. If a string value is specified, it must be one of special ones listed below. If you specify the string value by using the numbers (65535 for example), then create the value as a REG_DWORD. If you use the word to specify the string value (BiDaily for example), then the entry should be created as a REG_SZ.
0 = once a day
65535, "BiDaily" = once every 2 days
65534, "Tridaily" = once every 3 days
65533, "Weekly" = once every week (7 days)
65532, "SpecialSkew" = once every 45 minutes until 3 good synchronizations occur, then once every 8 hours (3 per day) [default]
65531, "DailySpecialSkew" = once every 45 minutes until 1 good synchronization occurs, then once every day
freq = freq times per day
• ReliableTimeSource : REG_DWORD (optional)
Used to indicate that this computer has reliable time.
0 = do not mark this computer as having reliable time [default]
1 = mark this computer as having reliable time (this is only useful on a domain controller)
• Type : REG_SZ
Used to control how a computer synchronizes.
Nt5DS = synchronize to domain hierarchy [default]
NTP = synchronize to manually configured source
NoSync = do not synchronize time

The Nt5DS setting may not use a manual configured source.

Note When you join a Microsoft Windows Server 2003-based computer to a domain, the computer may not synchronize its time setting with the time setting of the domain controller if the Automatically synchronize with an Internet time server check box in the Date and Time Properties dialog box is not selected. The default option (NTP) for Windows Server 2003 workgroup computers is disabled if the Automatically synchronize with an Internet time server check box is not selected. When you join the computer to a domain that has this setting, the default synchronization type (Nt5DS) for computers that are joined to a domain is not set and the time service does not synchronize from the domain hierarchy.
The Adj and msSkewPerDay values are used to preserve information about the computer's clock between restarts. Do not manually edit these values. For additional information about the Windows Time service, click the following article number to view the article in the Microsoft Knowledge Base:
224799 (http://support.microsoft.com/kb/224799/) Basic operation of the Windows Time service

should i try to not joine a domain, but make it a workgroup?
November 5, 2007 4:35:07 PM

Note When you join a Microsoft Windows Server 2003-based computer to a domain, the computer may not synchronize its time setting with the time setting of the domain controller if the Automatically synchronize with an Internet time server check box in the Date and Time Properties dialog box is not selected

to make the last message shorter, my dialoge box for date and time does not have an "automaticly syncronize" spot. i remember this on other operating systems. any idea?

i think you can see, i'm not very good technically.
November 5, 2007 7:04:33 PM

You have to do that through the registry the key I showed you compair your key to what I have shown. the pic is larger if you click on it then at the bottom
November 5, 2007 7:05:40 PM

are you coneccted to a domain, or a workgroup?
November 5, 2007 7:06:33 PM

would it help if i conected to the network as a workgroup?
November 5, 2007 7:08:31 PM

also, i note that the Microsoft info says to "automaticly syncronize". i don't have this option.
November 5, 2007 9:19:17 PM

in control panel date and time you can enable also while there see what the internet time is and switch it to time.windows.com
November 5, 2007 9:30:50 PM

there is no switch there, but looking in the windows time properties under administrative tools, windows time. there is a path:

NT AUTHORITY\LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
November 6, 2007 4:42:56 AM

glhglh said:
there is no switch there, but looking in the windows time properties under administrative tools, windows time. there is a path:

NT AUTHORITY\LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
the snap shot is showing you I'm in control panel, as you can see the date and time properties
click on the image to get it larger

November 6, 2007 4:35:58 PM

Thanks for all your help. as you can see, this operating system in the control panel does not have the third tab for the date time.

I can't figure out how to do upload or copy the screen shot, but the third tab is missing. i have had it on many compters, but not this one. don't know why.
November 6, 2007 8:18:51 PM

maybe we are on the wrong trail.

here is the information in the dump file:

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff97fff0d6bad, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffadf8a54b420, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------




EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!GetDCEx+394
fffff97f`ff0d6bad ?? ???

CONTEXT: fffffadf8a54b420 -- (.cxr 0xfffffadf8a54b420)
rax=0000000000000001 rbx=fffffadf9b8a9bf0 rcx=fffff97ff7d64100
rdx=0000000004939c30 rsi=000000000dc43ab0 rdi=0000000000000020
rip=fffff97fff0d6bad rsp=fffffadf8a54bc38 rbp=fffffadf8a54bcf0
r8=fffffadf98876af0 r9=fffffadf9b8a9bf0 r10=fffff80001175180
r11=fffffadf9b8a9bf0 r12=000000007ef80000 r13=000000000ec9fd00
r14=000000000ec9f110 r15=0000000078b83980
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!GetDCEx+0x394:
fffff97f`ff0d6bad ?? ???
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: iexplore.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff97fff0d6bad

STACK_TEXT:
fffffadf`8a54bc38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GetDCEx+0x394


FOLLOWUP_IP:
win32k!GetDCEx+394
fffff97f`ff0d6bad ?? ???

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!GetDCEx+394

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310

STACK_COMMAND: .cxr 0xfffffadf8a54b420 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!GetDCEx+394

BUCKET_ID: X64_0x3B_win32k!GetDCEx+394

Followup: MachineOwner
---------

kd> .cxr 0xfffffadf8a54b420
rax=0000000000000001 rbx=fffffadf9b8a9bf0 rcx=fffff97ff7d64100
rdx=0000000004939c30 rsi=000000000dc43ab0 rdi=0000000000000020
rip=fffff97fff0d6bad rsp=fffffadf8a54bc38 rbp=fffffadf8a54bcf0
r8=fffffadf98876af0 r9=fffffadf9b8a9bf0 r10=fffff80001175180
r11=fffffadf9b8a9bf0 r12=000000007ef80000 r13=000000000ec9fd00
r14=000000000ec9f110 r15=0000000078b83980
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!GetDCEx+0x394:
fffff97f`ff0d6bad ?? ???


I thank you for all your diligence in helping me. can you read this?
November 6, 2007 11:05:11 PM

glhglh said:
maybe we are on the wrong trail.

here is the information in the dump file:

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff97fff0d6bad, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffadf8a54b420, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------
I dont have a clue, maybe xp64bit dont like your system, seems like quite a few people have the same problem and errors, maybe microsoft might be able to sort it out. I've read some stuff where others have.



EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

FAULTING_IP:
win32k!GetDCEx+394
fffff97f`ff0d6bad ?? ???

CONTEXT: fffffadf8a54b420 -- (.cxr 0xfffffadf8a54b420)
rax=0000000000000001 rbx=fffffadf9b8a9bf0 rcx=fffff97ff7d64100
rdx=0000000004939c30 rsi=000000000dc43ab0 rdi=0000000000000020
rip=fffff97fff0d6bad rsp=fffffadf8a54bc38 rbp=fffffadf8a54bcf0
r8=fffffadf98876af0 r9=fffffadf9b8a9bf0 r10=fffff80001175180
r11=fffffadf9b8a9bf0 r12=000000007ef80000 r13=000000000ec9fd00
r14=000000000ec9f110 r15=0000000078b83980
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!GetDCEx+0x394:
fffff97f`ff0d6bad ?? ???
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULTBUGCHECK_STR: 0x3B

PROCESS_NAME: iexplore.exe

CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff97fff0d6bad

STACK_TEXT:
fffffadf`8a54bc38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GetDCEx+0x394


FOLLOWUP_IP:
win32k!GetDCEx+394
fffff97f`ff0d6bad ?? ???

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!GetDCEx+394

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 45e6f310

STACK_COMMAND: .cxr 0xfffffadf8a54b420 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!GetDCEx+394

BUCKET_ID: X64_0x3B_win32k!GetDCEx+394

Followup: MachineOwner
---------

kd> .cxr 0xfffffadf8a54b420
rax=0000000000000001 rbx=fffffadf9b8a9bf0 rcx=fffff97ff7d64100
rdx=0000000004939c30 rsi=000000000dc43ab0 rdi=0000000000000020
rip=fffff97fff0d6bad rsp=fffffadf8a54bc38 rbp=fffffadf8a54bcf0
r8=fffffadf98876af0 r9=fffffadf9b8a9bf0 r10=fffff80001175180
r11=fffffadf9b8a9bf0 r12=000000007ef80000 r13=000000000ec9fd00
r14=000000000ec9f110 r15=0000000078b83980
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
win32k!GetDCEx+0x394:
fffff97f`ff0d6bad ?? ???


I thank you for all your diligence in helping me. can you read this?
I do understand this much in red and irq 0 that is a new to me the meaning and why I dont know
!