BSOD - WinXP DRIVER_FAULT? [DUMP DATA]

Hey there,

My desktop has been operating well for the last 5 months or so, but started getting crashes and BSODs. I started getting random BSOD crashes, a problem with the windows login process and then the safe mode bootup generated a PFN_LIST_CORRUPT BSOD screen. However, I am not seeing these problems anymore and can get into safe mode, but now I am getting a rather consistent (DRIVER_FAULT I think) BSOD crash soon after logging (clicking on the user name in the log in screen) into normal windows boot. I have attached a minidumps (since I can't see any attachment option).

Is this really a driver fault problem (and if so, which driver?), or is there something more at fault in the OS installation? Also, can I uninstall software/drivers while in the Windows safe mode, it doesn't seem let me while in safe mode. Any help will be most apprepriated.

Regards,
Phil

Windows XP Pro, SP2
Shuttle XPC ST20G5 (Socket 939)
AMD Athlon 64 3700+ San Diego
ATI Radeon X800 XL
Seagate Barracuda 7200.8 NCQ 300GB
Mitsumi FA 404M 7in1 USB 2.0 Floppy & Media Drive
Crucial 1GB (2x512MB) DDR PC3200 Ballistix Dual Channel Kit

Minidump:

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000d, EXCEPTION_GP_FAULT
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_d

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

MISALIGNED_IP:
nt!CcPfPrefetchSections+134
80614ad6 c429 les ebp,[ecx]

LAST_CONTROL_TRANSFER: from 00000000 to 80614ad6

STACK_TEXT:
017a7255 00000000 00000000 00000000 00000000 nt!CcPfPrefetchSections+0x134


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!CcPfPrefetchSections+134
80614ad6 c429 les ebp,[ecx]

FAULTING_SOURCE_CODE:


SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!CcPfPrefetchSections+134

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: hardware

FAILURE_BUCKET_ID: IP_MISALIGNED

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

eax=80614ad5 ebx=8400002b ecx=00cbf538 edx=018954f7 esi=00cbf560 edi=8690f800
eip=80614ad6 esp=a813cbdc ebp=017a7255 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!CcPfPrefetchSections+0x134:
80614ad6 c429 les ebp,[ecx] ds:0023:00cbf538=54f7017a7256
ChildEBP RetAddr Args to Child
017a7255 00000000 00000000 00000000 00000000 nt!CcPfPrefetchSections+0x134 (FPO: [Non-Fpo])
start end module name
804d7000 806cd280 nt ntkrnlpa.exe Wed Aug 04 06:58:36 2004 (41107B0C)
806ce000 806ee380 hal halaacpi.dll Wed Aug 04 06:59:05 2004 (41107B29)
a809a000 a80ec180 srv srv.sys Wed Aug 04 07:14:44 2004 (41107ED4)
a81c9000 a81cbe80 secdrv secdrv.sys Fri Jan 16 13:16:04 2004 (4007E414)
a81dd000 a8218000 PGPdisk PGPdisk.SYS Wed Jul 27 22:27:03 2005 (42E7FC27)
a8240000 a826c400 mrxdav mrxdav.sys Wed Aug 04 07:00:49 2004 (41107B91)
a8335000 a835da40 vsdatant vsdatant.sys Sat Dec 07 21:14:48 2002 (3DF264C8)
a84d6000 a84d9280 ndisuio ndisuio.sys Wed Aug 04 07:03:10 2004 (41107C1E)
aa53e000 aa552f80 dump_m5287 dump_m5287.sys Fri Feb 04 23:00:09 2005 (4203FE79)
aa57b000 aa59e000 Fastfat Fastfat.SYS Wed Aug 04 07:14:15 2004 (41107EB7)
aa59e000 aa6586e0 avg7core avg7core.sys Tue Feb 21 07:57:50 2006 (43FAC7FE)
aa659000 aa65b900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
aa679000 aa67c780 dump_scsiport dump_scsiport.sys Wed Aug 04 06:59:51 2004 (41107B57)
aa681000 aa6a1f00 ipnat ipnat.sys Wed Sep 29 23:28:36 2004 (415B3714)
aa6b8000 aa726400 mrxsmb mrxsmb.sys Wed Jan 19 04:26:50 2005 (41EDE18A)
aa727000 aa751a00 rdbss rdbss.sys Thu Oct 28 02:13:57 2004 (418047D5)
aa752000 aa773d00 afd afd.sys Wed Aug 04 07:14:13 2004 (41107EB5)
aa774000 aa79bc00 netbt netbt.sys Wed Aug 04 07:14:36 2004 (41107ECC)
aa79c000 aa7f3d80 tcpip tcpip.sys Fri Jan 13 02:28:12 2006 (43C7103C)
aa7f4000 aa806400 ipsec ipsec.sys Wed Aug 04 07:14:27 2004 (41107EC3)
aa84f000 aa872980 portcls portcls.sys Wed Aug 04 07:15:47 2004 (41107F13)
aa873000 aaad8e80 RtkHDAud RtkHDAud.sys Tue Feb 01 05:40:41 2005 (41FF1659)
aaae1000 aaae7f00 avg7rsxp avg7rsxp.sys Wed Feb 22 23:39:36 2006 (43FCF638)
aab01000 aab07780 USBSTOR USBSTOR.SYS Wed Aug 04 07:08:44 2004 (41107D6C)
aad64000 aad72d80 arp1394 arp1394.sys Wed Aug 04 06:58:28 2004 (41107B04)
aad74000 aad7c700 wanarp wanarp.sys Wed Aug 04 07:04:57 2004 (41107C89)
aadc4000 aadccd80 HIDCLASS HIDCLASS.SYS Wed Aug 04 07:08:18 2004 (41107D52)
aaedb000 aaee9b80 drmk drmk.sys Wed Aug 04 07:07:54 2004 (41107D3A)
aaeeb000 aaef3880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
aaefb000 aaf03700 netbios netbios.sys Wed Aug 04 07:03:19 2004 (41107C27)
aafab000 aafaea00 kbdhid kbdhid.sys Wed Aug 04 06:58:33 2004 (41107B09)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 01:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 07:00:51 2004 (41107B93)
bf9d4000 bfa11000 ati2dvag ati2dvag.dll Wed Jun 29 04:02:16 2005 (42C20F38)
bfa11000 bfa44000 ati2cqag ati2cqag.dll Wed Jun 29 02:57:37 2005 (42C20011)
bfa44000 bfa78000 atikvmag atikvmag.dll Wed Jun 29 03:30:09 2005 (42C207B1)
bfa78000 bfcb85a0 ati3duag ati3duag.dll Wed Jun 29 03:47:50 2005 (42C20BD6)
bfcb9000 bfd57340 ativvaxx ativvaxx.dll Wed Jun 29 03:41:41 2005 (42C20A65)
f68a7000 f68da200 update update.sys Wed Aug 04 06:58:32 2004 (41107B08)
f6901000 f6931100 rdpdr rdpdr.sys Wed Aug 04 07:01:10 2004 (41107BA6)
f6932000 f6942e00 psched psched.sys Wed Aug 04 07:04:16 2004 (41107C60)
f6943000 f6959680 ndiswan ndiswan.sys Wed Aug 04 07:14:30 2004 (41107EC6)
f695a000 f696d900 parport parport.sys Wed Aug 04 06:59:04 2004 (41107B28)
f696e000 f6990680 ks ks.sys Wed Aug 04 07:15:20 2004 (41107EF8)
f69c8000 f69ec000 HDAudBus HDAudBus.sys Wed Mar 17 23:12:09 2004 (4058DB49)
f69ec000 f6a0ee80 USBPORT USBPORT.SYS Wed Aug 04 07:08:34 2004 (41107D62)
f6a0f000 f6a4a600 RT2500 RT2500.sys Wed Sep 07 08:49:55 2005 (431E9BA3)
f6a4b000 f6a69f00 b57xp32 b57xp32.sys Tue Dec 07 01:55:18 2004 (41B50D86)
f6a6a000 f6a7d780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 07:07:04 2004 (41107D08)
f6a7e000 f6bbe000 ati2mtag ati2mtag.sys Wed Jun 29 04:01:56 2005 (42C20F24)
f6bce000 f6bdb000 PGPsdk PGPsdk.sys Wed Jul 27 22:23:10 2005 (42E7FB3E)
f722c000 f722fc80 mssmbios mssmbios.sys Wed Aug 04 07:07:47 2004 (41107D33)
f7270000 f728a580 Mup Mup.sys Wed Aug 04 07:15:20 2004 (41107EF8)
f728b000 f72b7a80 NDIS NDIS.sys Wed Aug 04 07:14:27 2004 (41107EC3)
f72b8000 f7344480 Ntfs Ntfs.sys Wed Aug 04 07:15:06 2004 (41107EEA)
f7345000 f735b780 KSecDD KSecDD.sys Wed Aug 04 06:59:45 2004 (41107B51)
f735c000 f7381000 PGPwded PGPwded.sys Wed Jul 27 22:23:33 2005 (42E7FB55)
f7381000 f739f780 fltmgr fltmgr.sys Wed Aug 04 07:01:17 2004 (41107BAD)
f73a0000 f73b7800 SCSIPORT SCSIPORT.SYS Wed Aug 04 06:59:39 2004 (41107B4B)
f73b8000 f73ccf80 m5287 m5287.sys Fri Feb 04 23:00:09 2005 (4203FE79)
f73cd000 f73e4480 atapi atapi.sys Wed Aug 04 06:59:41 2004 (41107B4D)
f73e5000 f740a700 dmio dmio.sys Wed Aug 04 07:07:13 2004 (41107D11)
f740b000 f7429880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f742a000 f743aa80 pci pci.sys Wed Aug 04 07:07:45 2004 (41107D31)
f743b000 f7468d80 ACPI ACPI.sys Wed Aug 04 07:07:35 2004 (41107D27)
f7469000 f748ee00 d347bus d347bus.sys Sun Aug 22 14:31:09 2004 (4128A01D)
f7590000 f7598c00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f75a0000 f75aee80 ohci1394 ohci1394.sys Wed Aug 04 07:10:05 2004 (41107DBD)
f75b0000 f75bd000 1394BUS 1394BUS.SYS Wed Aug 04 07:10:03 2004 (41107DBB)
f75c0000 f75ca500 MountMgr MountMgr.sys Wed Aug 04 06:58:29 2004 (41107B05)
f75d0000 f75dcc80 VolSnap VolSnap.sys Wed Aug 04 07:00:14 2004 (41107B6E)
f75e0000 f75e8e00 disk disk.sys Wed Aug 04 06:59:53 2004 (41107B59)
f75f0000 f75fc200 CLASSPNP CLASSPNP.SYS Wed Aug 04 07:14:26 2004 (41107EC2)
f7600000 f760a880 sbp2port sbp2port.sys Wed Aug 04 06:59:54 2004 (41107B5A)
f7650000 f765e100 usbhub usbhub.sys Wed Aug 04 07:08:40 2004 (41107D68)
f76f0000 f76ff180 nic1394 nic1394.sys Wed Aug 04 06:58:28 2004 (41107B04)
f7700000 f7708a00 processr processr.sys Wed Aug 04 06:59:14 2004 (41107B32)
f7710000 f771a380 imapi imapi.sys Wed Aug 04 07:00:12 2004 (41107B6C)
f7730000 f773c180 cdrom cdrom.sys Wed Aug 04 06:59:52 2004 (41107B58)
f7740000 f774e080 redbook redbook.sys Wed Aug 04 06:59:34 2004 (41107B46)
f7750000 f775c880 rasl2tp rasl2tp.sys Wed Aug 04 07:14:21 2004 (41107EBD)
f7760000 f776a200 raspppoe raspppoe.sys Wed Aug 04 07:05:06 2004 (41107C92)
f7770000 f777bd00 raspptp raspptp.sys Wed Aug 04 07:14:26 2004 (41107EC2)
f7780000 f7788900 msgpc msgpc.sys Wed Aug 04 07:04:11 2004 (41107C5B)
f77a0000 f77a9f00 termdd termdd.sys Wed Aug 04 06:58:52 2004 (41107B1C)
f77f0000 f77f9480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f7810000 f7816200 PCIIDEX PCIIDEX.SYS Wed Aug 04 06:59:40 2004 (41107B4C)
f7818000 f781c900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f7858000 f785c500 watchdog watchdog.sys Wed Aug 04 07:07:32 2004 (41107D24)
f78a0000 f78a7b80 usbccgp usbccgp.sys Wed Aug 04 07:08:45 2004 (41107D6D)
f78b8000 f78be180 HIDPARSE HIDPARSE.SYS Wed Aug 04 07:08:15 2004 (41107D4F)
f78c0000 f78c5200 vga vga.sys Wed Aug 04 07:07:06 2004 (41107D0A)
f78c8000 f78cca80 Msfs Msfs.SYS Wed Aug 04 07:00:37 2004 (41107B85)
f78d0000 f78d7880 Npfs Npfs.SYS Wed Aug 04 07:00:38 2004 (41107B86)
f7920000 f7924920 AegisP AegisP.sys Tue May 17 21:22:56 2005 (428A52A0)
f7938000 f793c280 usbohci usbohci.sys Wed Aug 04 07:08:34 2004 (41107D62)
f7940000 f7946800 usbehci usbehci.sys Wed Aug 04 07:08:34 2004 (41107D62)
f7948000 f794f000 GEARAspiWDM GEARAspiWDM.sys Wed Feb 02 05:19:49 2005 (420062F5)
f7950000 f7951000 fdc fdc.sys unavailable (00000000)
f7958000 f795c880 TDI TDI.SYS Wed Aug 04 07:07:47 2004 (41107D33)
f7960000 f7964580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f7968000 f796c080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f7970000 f7976000 kbdclass kbdclass.sys Wed Aug 04 06:58:32 2004 (41107B08)
f7978000 f797da00 mouclass mouclass.sys Wed Aug 04 06:58:32 2004 (41107B08)
f7990000 f7995000 flpydisk flpydisk.sys Wed Aug 04 06:59:24 2004 (41107B3C)
f79a0000 f79a3000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
f7a54000 f7a56f80 mouhid mouhid.sys Fri Aug 17 21:47:57 2001 (3B7D82FD)
f7a58000 f7a5a580 hidusb hidusb.sys Fri Aug 17 22:02:16 2001 (3B7D8658)
f7a78000 f7a7a280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
f7a80000 f7a82f00 ws2ifsl ws2ifsl.sys Fri Aug 17 21:55:58 2001 (3B7D84DE)
f7a8c000 f7a8e580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f7a90000 f7a91b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
f7a92000 f7a93100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f7a94000 f7a95480 aliide aliide.sys Fri Aug 17 21:51:54 2001 (3B7D83EA)
f7a96000 f7a97700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
f7a98000 f7a99480 d347prt d347prt.sys Sun Aug 22 14:31:48 2004 (4128A044)
f7abe000 f7abfa80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
f7ac2000 f7ac3360 avgtdi avgtdi.sys Thu Aug 25 10:59:58 2005 (430D969E)
f7af2000 f7af3080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
f7af4000 f7af5f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
f7af6000 f7af7080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
f7af8000 f7af9080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
f7afa000 f7afb080 avg7rsw avg7rsw.sys Tue Jul 26 13:10:51 2005 (42E6284B)
f7b34000 f7b35100 swenum swenum.sys Wed Aug 04 06:58:41 2004 (41107B11)
f7b54000 f7b55280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
f7bf8000 f7bf8c00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
f7cc3000 f7cc3d00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)
f7cca000 f7ccab80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)

Unloaded modules:
aad84000 aad94000 Serial.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a6c000 f7a70000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f78b0000 f78b5000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a70000 f7a73000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

 

Thanks for that, I will try changing the startup and recovery settings, but I have a feeling that have most of the error in the minidump...

I find this a good resource for Stop Messages: http://aumha.org/win5/kbestop.php, which seems the same as the link in the explanation link you provided me above (although does not go into too much detail on my error ).

 

Hi,

Bugcheck code 7F with BP1 parameter D is usually related to hardware such as CPU, RAM or Motherboard. A few cases maybe related to device drivers.
Refer the following cases, they maybe useful to solve your problem.

Motherboard
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21481556.html
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21236265.html

CPU
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21248130.html#12889767
http://www.techspot.com/vb/topic8913-pg4.html&pp=20
http://www.techspot.com/vb/showthread.php?p=227221#post227221
RAM
http://www.techspot.com/vb/showthread.php?p=176513#post176513
http://www.techspot.com/vb/topic16994-pg11.html&pp=20
http://www.techspot.com/vb/topic35422.html
http://www.techspot.com/vb/showthread.php?p=193142#post193142
http://www.techspot.com/vb/showthread.php?p=200212#post200212
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21505124.html
http://www.techspot.com/vb/topic46136.html
http://www.techspot.com/vb/topic45825.html
http://dearwandy.com/printthread.php?t=2621
ZoneAlarm
http://www.techspot.com/vb/topic16994-pg12.html&pp=20
dlink modem
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21620440.html#15319946
boot.ini
http://computing.net/windowsxp/wwwboard/forum/132441.html
Ethernal Driver
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21740597.html

 

cpc2004, thanks for the links. I see that you are the local BSOD expert over in techspot

I tested the RAM with memtest and got no errors. I didn't think that there was anything related to heat or bloated/leaky capacitors... so I looked at what I installed recently - ZoneAlarm (and I had the windows firewall already up - don't ask). I managed to uninstall this in safe mode, and restarted and I got no BSOD (yet). If this was caused by software it may make a little sense as windows did crash consistently around 5 secs after getting to the login screen, when some services/software may be loading up. Sit tight and hope I don't start getting system crashes again...

Cheers,
Phil

 

Hi,

Your version of ZA is at 2002 which almost 4 years behind. According to my record, several version of ZA is 2005 cause blue screen. Probably your version of ZA conflicts with other device drivers.

 

Hi there,

I am getting the PFN_LIST_CORRUPT exception again (dump) and the following application errors:

[SIZE= "1"]Faulting application , version 0.0.0.0, faulting module ntlanman.dll, version 5.1.2600.2180, fault address 0x000024f6.

Faulting application winlogon.exe, version 0.0.0.0, faulting module ntlanman.dll, version 5.1.2600.2180, fault address 0x000024f6.

Faulting application rundll32.exe, version 5.1.2600.2180, faulting module appwiz.cpl, version 5.1.2600.2180, fault address 0x00026a95.[/SIZE]

I tested the RAM and did get 3 errors (). Is it almost certain that the RAM is the cause of my errors? I have two sticks of 512 RAM, which one is causing the errors, or will I have to replace both?

Cheers,
Phil

 

Hi,

With refer to my first post, over 40% of bugcheck 7F and BP1 0x'0d' is related to faulty ram. Bugcheck code 4E with BP1 0x'00000099' maybe related to bad memory slot or your motherboard is incompatible to the memory.

bad memory slot
http://www.techspot.com/vb/showthread.php?p=198468#post198468

dual channel mode
http://www.techspot.com/vb/topic40720.html

Suggestion
1. Reseat the memory stick to another memory slot
2. Take out a memory stick and diagnostic which memory stick is faulty