BSOD when a users logs off the system

Hello:

When ever this user logs off this specific PC, a BCOD comes up.  Win32k.sys Page_Fault_In_NonPaged area.  I do not see this problem on other PC's.  I have run virus scan (Forticlient & HitMan Pro) and that did not stop it.  I have to see if the problem happens when any other user logs off of the same PC.  But any ideas?

win7_BSOD
Windows 7 Professional - 64 bit, 12 GB RAM.
The users is an administrator on the PC.

The PC requires a restart and then the PC is fine.  If the users locks the PC in the evening there is not problem.  It is only when the user initiates a log off.
LVL 1
PkafkasNetwork EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dbruntonCommented:
Create another account for the user on the PC.  Copy all of the data across.  If the fault doesn't occur then use the new account and wipe the old one.
0
nobusCommented:
plse post the dmp file here - it may have more info on the cause
you find it in windows\minidumps
0
Gerald NegrotaIT ManagerCommented:
Hi !

1) Remove/uninstall KB2982791 and mark it as hidden in Windows Update ( never install again).
2) Boot from an external support ( DVD/USB ) and delete c:\Windows\System32\FNTCACHE.DAT

Reboot and test .
0
ON-DEMAND: 10 Easy Ways to Lose a Password

Learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees in this on-demand webinar. We cover the importance of multi-factor authentication and how these solutions can better protect your business!

PkafkasNetwork EngineerAuthor Commented:
I will try the un-install and try another user account tomorrow.
0
nobusCommented:
why not post the dmp file??
0
PkafkasNetwork EngineerAuthor Commented:
How can I find the dump file?
0
Scott CSenior EngineerCommented:
Look in the Windows/minidumps folder.

And here's a procedure to change the location of the dumps files, it may make it easier for you.

http://www.sevenforums.com/tutorials/204214-dump-file-change-default-location.html
0
nobusCommented:
>>  How can I find the dump file?   <<  i posted that in my very first comment!!
0
PkafkasNetwork EngineerAuthor Commented:
OK, I will take a look tomorrow.
0
PkafkasNetwork EngineerAuthor Commented:
How can Read the dump file?
0
nobusCommented:
if you take training for using windbg -  you can read it
why don't you post the file ?  i can't help much without it
0
PkafkasNetwork EngineerAuthor Commented:
Sure I will do that today.
0
PkafkasNetwork EngineerAuthor Commented:
Here is the .dmp file from that PC.
071415-25584-01.dmp
0
nobusCommented:
could not find anything for sure, but it says "could not read from" - so maybe it is a ram problem
you can always test it with memtest86+   - which i run from the UBCD
Hardware diagnostic CD    UBCD

go to the download page, scroll down to the mirror section, and  click on a mirror to start the download
Download the UBCD and make the cd   <<==on a WORKING PC, and boot the problem PC from it
Here 2 links, one to the general site, and a direct link to the download

since the downloaded file is an ISO file, eg ubcd527.iso - so you need to use an ISO burning tool
if you don't have that software, install cdburnerXP : http://cdburnerxp.se/

If you want also the Ram tested - run memtest86+ at least 1 full pass,  - you should have NO errors!
 
For disk Diagnostics run the disk diag for your disk brand (eg seagate diag for seagate drive)  from the HDD section -  long or advanced diag !  (runs at least for30 minutes)

http://www.ultimatebootcd.com/                        ultimate boot cd
http://www.ultimatebootcd.com/download.html             download page

**  you can make a bootable cd - or bootable usb stick

for completeness -here's how i handle disk problems : http://www.experts-exchange.com/Storage/Hard_Drives/A_3000-The-bad-hard-disk-problem.html


****if the above does not help  -can you try a system restore to a date it was ok?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
PkafkasNetwork EngineerAuthor Commented:
The problem has went away and I did nothing to fix it.  But the problem is gone.  Thanks for our help.
0
nobusCommented:
thats nice - but keep an eye on it - it can return sooner than you think -but for your sake, i hope it does not
0
Gerald NegrotaIT ManagerCommented:
ref. http://www.winstonavalon.com/2014/08/microsoft-aug-patch-tue-could-cause-bsod.html  Usually, MS are build from time to time "patch for patch" .
Beside this, the error from your dump means one of the following: storage error ( bad blocks, double accessing pagefile - rare ! ) and/or:  bad memory location or bad paging management from one program o another. In your case, cl.dll looks that are trying to do something in the kernel memory zone. But could be a deeper problem. If your system are doing a self heal task ( NTFS defrag, free zone check and wipe, System File check, etc.) the problem, after a while, disappeared.
Glad to hear that your system are ok ! ;)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.