Intermittent BSODs after installing XP SP2

I've just found this site and hope that someone can help me. I have read lots of threads and tried lots of different things, but still get random BSODs since upgrading to XP SP2 last November. BSODs are one of three:
MEMORY_MANAGEMENT
IRQ NOT LESS OR EQUAL
PAGE FAULT IN NON PAGED MEMORY
I have upgrade my drivers, the BIOS, and increased my RAM to 1GB from 512MB. My system is a Packard Bell iMedia 5094 Legend PC, P4 2.53, 1GB RAM. I have run memtest86 OK, run chkdsk OK. I have done a Windows repair. I have uninstalled Macafee antivirus, and Zone Alarm, as I had BSODs with naiavf5x.sys and vsdatant.sys. However the BSODs keep coming! How come everything was fine before SP2? I know I could uninstall SP2, but I need it for certain applications (MS Pub 2003 being one). My minidumps show mostly different drivers causing the crash, the most recent being: ssi.sys (Spysweeper, which I have temporarily disabled), mtlstrm.sys, portcls.sys, afd.sys, but I have had lots of others, including ntoskrnl.exe! Could it be a device driver that SP2 doesnt like, but which one??????? Any help greatly appreciated.
Here is the latest minidump:

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Sun Jan 22 09:00:27.796 2006 (GMT+0)
System Uptime: 0 days 0:12:14.359
Loading Kernel Symbols
..............................................................................................................................
Loading unloaded module list
...........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {87b3fed8, 2, 0, f598a76f}

Probably caused by : afd.sys ( afd!AfdGetReceiveBuffer+4f )

Followup: ignore
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 87b3fed8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: f598a76f, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: 87b3fed8

CURRENT_IRQL: 2

FAULTING_IP:
afd!AfdGetReceiveBuffer+4f
f598a76f f6412801 test byte ptr [ecx+0x28],0x1

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

LAST_CONTROL_TRANSFER: from f598a01e to f598a76f

STACK_TEXT:
f3392b2c f598a01e 86f6c6e8 00000020 00000000 afd!AfdGetReceiveBuffer+0x4f
f3392b88 f598a233 86c2e008 86c2e0e4 00000020 afd!AfdBReceive+0xe6
f3392c24 f59882c7 86ea5018 86e8a408 f3392c58 afd!AfdReceive+0x599
f3392c34 804e37f7 86f375b0 86c2e008 806ee2d0 afd!AfdDispatchDeviceControl+0x53
f3392c44 8056a101 86c2e0e4 86e667a0 86c2e008 nt!IopfCallDriver+0x31
f3392c58 80579a8a 86f375b0 86c2e008 86e667a0 nt!IopSynchronousServiceTail+0x60
f3392d00 8057bfa5 000008e8 00000000 71a68159 nt!IopXxxControlFile+0x611
f3392d34 804de7ec 000008e8 00000000 71a68159 nt!NtDeviceIoControlFile+0x2a
f3392d34 7c90eb94 000008e8 00000000 71a68159 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
02e0fdf0 00000000 00000000 00000000 00000000 0x7c90eb94


FOLLOWUP_IP:
afd!AfdGetReceiveBuffer+4f
f598a76f f6412801 test byte ptr [ecx+0x28],0x1

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: ignore

SYMBOL_NAME: afd!AfdGetReceiveBuffer+4f

MODULE_NAME: afd

IMAGE_NAME: afd.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 41107eb5

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0xD1_afd!AfdGetReceiveBuffer+4f

BUCKET_ID: 0xD1_afd!AfdGetReceiveBuffer+4f

Followup: ignore
---------

eax=00000020 ebx=f3392b88 ecx=87b3feb0 edx=86f6c718 esi=00000000 edi=86f6c6e8
eip=f598a76f esp=f3392b24 ebp=f3392b2c iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010212
afd!AfdGetReceiveBuffer+0x4f:
f598a76f f6412801 test byte ptr [ecx+0x28],0x1 ds:0023:87b3fed8=??
ChildEBP RetAddr Args to Child
f3392b2c f598a01e 86f6c6e8 00000020 00000000 afd!AfdGetReceiveBuffer+0x4f (FPO: [Non-Fpo])
f3392b88 f598a233 86c2e008 86c2e0e4 00000020 afd!AfdBReceive+0xe6 (FPO: [Non-Fpo])
f3392c24 f59882c7 86ea5018 86e8a408 f3392c58 afd!AfdReceive+0x599 (FPO: [Non-Fpo])
f3392c34 804e37f7 86f375b0 86c2e008 806ee2d0 afd!AfdDispatchDeviceControl+0x53 (FPO: [Non-Fpo])
f3392c44 8056a101 86c2e0e4 86e667a0 86c2e008 nt!IopfCallDriver+0x31 (FPO: [0,0,0])
f3392c58 80579a8a 86f375b0 86c2e008 86e667a0 nt!IopSynchronousServiceTail+0x60 (FPO: [Non-Fpo])
f3392d00 8057bfa5 000008e8 00000000 71a68159 nt!IopXxxControlFile+0x611 (FPO: [Non-Fpo])
f3392d34 804de7ec 000008e8 00000000 71a68159 nt!NtDeviceIoControlFile+0x2a (FPO: [Non-Fpo])
f3392d34 7c90eb94 000008e8 00000000 71a68159 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f3392d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
02e0fdf0 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806eb100 nt ntoskrnl.exe Wed Mar 02 00:59:37 2005 (42250FF9)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 06:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 07:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Wed Aug 04 08:57:11 2004 (411096D7)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 01:05:44 2005 (43446A58)
f323a000 f327a100 HTTP HTTP.sys Sat Oct 09 00:48:20 2004 (41672744)
f35a0000 f35b4400 wdmaud wdmaud.sys Wed Aug 04 07:15:03 2004 (41107EE7)
f364d000 f365bd80 sysaudio sysaudio.sys Wed Aug 04 07:15:54 2004 (41107F1A)
f39c5000 f39f5d80 RMCast RMCast.sys Fri Aug 17 21:52:22 2001 (3B7D8406)
f3a66000 f3a75900 Cdfs Cdfs.SYS Wed Aug 04 07:14:09 2004 (41107EB1)
f3ab2000 f3ab5c00 WINDDX WINDDX.sys Sun Nov 25 15:08:36 2001 (3C010974)
f3abe000 f3b0f300 srv srv.sys Tue May 10 01:17:49 2005 (427FFDAD)
f3b10000 f3b21d00 mqac mqac.sys Wed Aug 04 06:58:19 2004 (41107AFB)
f3b72000 f3b9e400 mrxdav mrxdav.sys Wed Aug 04 07:00:49 2004 (41107B91)
f458b000 f458ee40 Aspi32 Aspi32.SYS Sat Sep 11 00:46:10 1999 (37D99842)
f4603000 f4606280 ndisuio ndisuio.sys Wed Aug 04 07:03:10 2004 (41107C1E)
f572f000 f5746480 dump_atapi dump_atapi.sys Wed Aug 04 06:59:41 2004 (41107B4D)
f5747000 f576a000 Fastfat Fastfat.SYS Wed Aug 04 07:14:15 2004 (41107EB7)
f576a000 f5821be0 avg7core avg7core.sys Thu Jan 05 10:09:28 2006 (43BCF058)
f58c2000 f58e2f00 ipnat ipnat.sys Wed Sep 29 23:28:36 2004 (415B3714)
f58e3000 f5951400 mrxsmb mrxsmb.sys Wed Jan 19 04:26:50 2005 (41EDE18A)
f5952000 f597ca00 rdbss rdbss.sys Thu Oct 28 02:13:57 2004 (418047D5)
f597d000 f599ed00 afd afd.sys Wed Aug 04 07:14:13 2004 (41107EB5)
f59c7000 f59eec00 netbt netbt.sys Wed Aug 04 07:14:36 2004 (41107ECC)
f59ef000 f5a46d80 tcpip tcpip.sys Wed May 25 20:04:00 2005 (4294CC20)
f5a47000 f5a59400 ipsec ipsec.sys Wed Aug 04 07:14:27 2004 (41107EC3)
f6bed000 f6c20200 update update.sys Wed Aug 04 06:58:32 2004 (41107B08)
f6c21000 f6c51100 rdpdr rdpdr.sys Wed Aug 04 07:01:10 2004 (41107BA6)
f6c52000 f6c62e00 psched psched.sys Wed Aug 04 07:04:16 2004 (41107C60)
f6c63000 f6c79680 ndiswan ndiswan.sys Wed Aug 04 07:14:30 2004 (41107EC6)
f6c7a000 f6c9ce80 USBPORT USBPORT.SYS Wed Aug 04 07:08:34 2004 (41107D62)
f6c9d000 f6cc0980 portcls portcls.sys Wed Aug 04 07:15:47 2004 (41107F13)
f6cc1000 f6d08500 stac97na stac97na.sys Sat Sep 21 00:42:29 2002 (3D8BB265)
f6d09000 f6d401a0 stac97nh stac97nh.sys Sat Sep 21 00:43:16 2002 (3D8BB294)
f6d41000 f6d5fec0 Mtlmnt5 Mtlmnt5.sys Wed Jan 28 12:54:43 2004 (4017B113)
f6d60000 f6dc2de0 slntamr slntamr.sys Wed Jan 28 13:15:32 2004 (4017B5F4)
f6dc3000 f6de5680 ks ks.sys Wed Aug 04 07:15:20 2004 (41107EF8)
f6de6000 f6df9900 parport parport.sys Wed Aug 04 06:59:04 2004 (41107B28)
f6dfa000 f6e0d780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 07:07:04 2004 (41107D08)
f6e0e000 f6fdd3c0 nv4_mini nv4_mini.sys Thu Apr 08 03:30:48 2004 (4074B958)
f702e000 f703cd80 arp1394 arp1394.sys Wed Aug 04 06:58:28 2004 (41107B04)
f703e000 f7046700 wanarp wanarp.sys Wed Aug 04 07:04:57 2004 (41107C89)
f704e000 f7056880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
f706e000 f7076700 netbios netbios.sys Wed Aug 04 07:03:19 2004 (41107C27)
f72a3000 f72a5580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f72af000 f72b2360 SlWdmSup SlWdmSup.sys Wed Jan 28 12:20:42 2004 (4017A91A)
f72bb000 f72bec80 serenum serenum.sys Wed Aug 04 06:59:06 2004 (41107B2A)
f753c000 f753e900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f757c000 f7596580 Mup Mup.sys Wed Aug 04 07:15:20 2004 (41107EF8)
f7597000 f7623480 Ntfs Ntfs.sys Wed Aug 04 07:15:06 2004 (41107EEA)
f7624000 f763a780 KSecDD KSecDD.sys Wed Aug 04 06:59:45 2004 (41107B51)
f763b000 f764cf00 sr sr.sys Wed Aug 04 07:06:22 2004 (41107CDE)
f764d000 f766b780 fltmgr fltmgr.sys Wed Aug 04 07:01:17 2004 (41107BAD)
f766c000 f7683480 atapi atapi.sys Wed Aug 04 06:59:41 2004 (41107B4D)
f7684000 f76b0a80 NDIS NDIS.SYS Wed Aug 04 07:14:27 2004 (41107EC3)
f76b1000 f76c9000 SSI SSI.SYS Thu Dec 15 02:06:46 2005 (43A0CFB6)
f76c9000 f76ee700 dmio dmio.sys Wed Aug 04 07:07:13 2004 (41107D11)
f76ef000 f770d880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f770e000 f771ea80 pci pci.sys Wed Aug 04 07:07:45 2004 (41107D31)
f771f000 f774cd80 ACPI ACPI.sys Wed Aug 04 07:07:35 2004 (41107D27)
f776e000 f7776c00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f777e000 f778ce80 ohci1394 ohci1394.sys Wed Aug 04 07:10:05 2004 (41107DBD)
f778e000 f779b000 1394BUS 1394BUS.SYS Wed Aug 04 07:10:03 2004 (41107DBB)
f779e000 f77a8500 MountMgr MountMgr.sys Wed Aug 04 06:58:29 2004 (41107B05)
f77ae000 f77bac80 VolSnap VolSnap.sys Wed Aug 04 07:00:14 2004 (41107B6E)
f77be000 f77c6e00 disk disk.sys Wed Aug 04 06:59:53 2004 (41107B59)
f77ce000 f77da200 CLASSPNP CLASSPNP.SYS Wed Aug 04 07:14:26 2004 (41107EC2)
f77de000 f77e8080 sisagp sisagp.sys Wed Aug 04 07:07:42 2004 (41107D2E)
f780e000 f781d180 nic1394 nic1394.sys Wed Aug 04 06:58:28 2004 (41107B04)
f782e000 f783c100 usbhub usbhub.sys Wed Aug 04 07:08:40 2004 (41107D68)
f78fe000 f7906d00 intelppm intelppm.sys Wed Aug 04 06:59:19 2004 (41107B37)
f790e000 f791ae00 i8042prt i8042prt.sys Wed Aug 04 07:14:36 2004 (41107ECC)
f791e000 f792dd80 serial serial.sys Wed Aug 04 07:15:51 2004 (41107F17)
f792e000 f7937680 AFS2K AFS2K.SYS Sat Feb 14 23:01:29 2004 (402EA8C9)
f793e000 f794a180 cdrom cdrom.sys Wed Aug 04 06:59:52 2004 (41107B58)
f794e000 f795c080 redbook redbook.sys Wed Aug 04 06:59:34 2004 (41107B46)
f795e000 f7968380 imapi imapi.sys Wed Aug 04 07:00:12 2004 (41107B6C)
f796e000 f797cb80 drmk drmk.sys Wed Aug 04 07:07:54 2004 (41107D3A)
f797e000 f798a880 rasl2tp rasl2tp.sys Wed Aug 04 07:14:21 2004 (41107EBD)
f798e000 f7998200 raspppoe raspppoe.sys Wed Aug 04 07:05:06 2004 (41107C92)
f799e000 f79a9d00 raspptp raspptp.sys Wed Aug 04 07:14:26 2004 (41107EC2)
f79ae000 f79b6900 msgpc msgpc.sys Wed Aug 04 07:04:11 2004 (41107C5B)
f79be000 f79c7f00 termdd termdd.sys Wed Aug 04 06:58:52 2004 (41107B1C)
f79ce000 f79d7480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f79ee000 f79f4200 PCIIDEX PCIIDEX.SYS Wed Aug 04 06:59:40 2004 (41107B4C)
f79f6000 f79fa900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f79fe000 f7a02880 TDI TDI.SYS Wed Aug 04 07:07:47 2004 (41107D33)
f7a06000 f7a0ade0 PxHelp20 PxHelp20.sys Fri Sep 24 01:24:24 2004 (41536938)
f7a1e000 f7a23200 vga vga.sys Wed Aug 04 07:07:06 2004 (41107D0A)
f7a26000 f7a2aa80 Msfs Msfs.SYS Wed Aug 04 07:00:37 2004 (41107B85)
f7a2e000 f7a35880 Npfs Npfs.SYS Wed Aug 04 07:00:38 2004 (41107B86)
f7a3e000 f7a43d80 avg7rsxp avg7rsxp.sys Tue Dec 20 11:19:48 2005 (43A7E8D4)
f7a56000 f7a5a500 watchdog watchdog.sys Wed Aug 04 07:07:32 2004 (41107D24)
f7b1e000 f7b23a00 mouclass mouclass.sys Wed Aug 04 06:58:32 2004 (41107B08)
f7b26000 f7b2c000 kbdclass kbdclass.sys Wed Aug 04 06:58:32 2004 (41107B08)
f7b2e000 f7b2f000 fdc fdc.sys unavailable (00000000)
f7b36000 f7b3d000 GEARAspiWDM GEARAspiWDM.sys Fri Jun 04 18:00:18 2004 (40C0AAA2)
f7b3e000 f7b45580 Modem Modem.SYS Wed Aug 04 07:08:04 2004 (41107D44)
f7b46000 f7b4a280 usbohci usbohci.sys Wed Aug 04 07:08:34 2004 (41107D62)
f7b4e000 f7b54800 usbehci usbehci.sys Wed Aug 04 07:08:34 2004 (41107D62)
f7b56000 f7b5b200 RTL8139 RTL8139.SYS Fri Jun 13 06:29:46 2003 (3EE9614A)
f7b5e000 f7b62580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f7b66000 f7b6a080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f7b6e000 f7b73000 flpydisk flpydisk.sys Wed Aug 04 06:59:24 2004 (41107B3C)
f7b7e000 f7b81000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
f7b82000 f7b85580 RecAgent RecAgent.sys Tue Jan 13 13:03:28 2004 (4003ECA0)
f7c0e000 f7c11c80 mssmbios mssmbios.sys Wed Aug 04 07:07:47 2004 (41107D33)
f7c3a000 f7c3df00 MODEMCSA MODEMCSA.sys Fri Aug 17 21:57:37 2001 (3B7D8541)
f7c4e000 f7c50280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
f7c56000 f7c58f00 ws2ifsl ws2ifsl.sys Fri Aug 17 21:55:58 2001 (3B7D84DE)
f7c6e000 f7c6fb80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
f7c70000 f7c71100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f7c72000 f7c73700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
f7ca6000 f7ca7a80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
f7cbc000 f7cbd100 swenum swenum.sys Wed Aug 04 06:58:41 2004 (41107B11)
f7cc2000 f7cc3280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
f7cc4000 f7cc5f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
f7cc6000 f7cc7080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
f7cc8000 f7cc9080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
f7cca000 f7ccb080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
f7ccc000 f7ccd080 avg7rsw avg7rsw.sys Tue Jul 26 13:10:51 2005 (42E6284B)
f7cd6000 f7cd7100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
f7d36000 f7d36d00 pciide pciide.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
f7e0e000 f7e0ec00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
f7e34000 f7e34940 STEC3 STEC3.sys Thu Mar 06 14:57:33 2003 (3E6761DD)
f7e78000 f7e78d00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)
f7e8c000 f7e8cb80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)

Unloaded modules:
f34b3000 f34dd000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7e16000 f7e17000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f37d5000 f37e2000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f357d000 f35a0000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f38b5000 f38c3000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7ce2000 f7ce4000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f3605000 f3745000 Mtlstrm.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f35ed000 f3605000 Slnthal.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f705e000 f7067000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b76000 f7b7b000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7c4a000 f7c4d000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

I have lots more!

 

Hi Jcapas,

If your minidumps are crashed with different bugcheck code and different modules, they are the signs of faulty hardware. From the failing instruction and the stack trace, the crash maybe caused by faulty ram. Some faulty ram can pass memtest. As you have two memory module, take out the old memory module. Reboot windows with one memory module. If your windows does not crash, the removed memory module is faulty. If it still crashes, swap the memory module and reboot windows. If it still crashes, reseat the memory module to another memory slot. If it still crashes, downclock the ram.


Post the output of another minidumps here. Maybe I can find out new clues.

 

Hi cpc2004,
Thanks for your advice. I have recently installed 2 new RAM chips. I am unable to down clock the RAM - field greyed out in BIOS options!

Here is another minidump:

Loading Dump File [C:\WINDOWS\Minidump\Mini012506-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Wed Jan 25 17:49:45.203 2006 (GMT+0)
System Uptime: 0 days 7:07:51.790
Loading Kernel Symbols
.......................................................................................................................................
Loading unloaded module list
...............................
Loading User Symbols *
* Bugcheck Analysis *
*
Use !analyze -v to get detailed debugging information.

BugCheck 10000050, {87f11072, 0, 8054a832, 0}

Could not read faulting driver name
Probably caused by : ntoskrnl.exe ( nt!ExFreePoolWithTag+237 )

Followup: [nt]
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q

* Bugcheck Analysis *
*
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: 87f11072, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8054a832, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------

Could not read faulting driver name

READ_ADDRESS: 87f11072

FAULTING_IP:
nt!ExFreePoolWithTag+237
8054a832 668b4efa mov cx,[esi-0x6]

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from 804f2dd9 to 8054a832

STACK_TEXT:
f7ba5b40 804f2dd9 87f11078 00000000 00000000 nt!ExFreePoolWithTag+0x237
f7ba5b58 f759d6a2 867a2350 f7ba5bb4 f7ba5b8c nt!ExDeleteResourceLite+0x32
f7ba5b68 f75ca4fd 867a2350 8737f260 e10560d0 Ntfs!NtfsFreeEresource+0x6b
f7ba5b8c f759d57a 866dcc98 f7ba5bb4 f7ba5bbf Ntfs!NtfsDeleteFcb+0x4e
f7ba5bd8 f75bed00 866dcc98 8737f100 e4891008 Ntfs!NtfsTeardownFromLcb+0x1fd
f7ba5c30 f7599759 866dcc98 e48910d0 e4891268 Ntfs!NtfsTeardownStructures+0x125
f7ba5c5c f75bc6eb 866dcc98 018910d0 e4891268 Ntfs!NtfsDecrementCloseCounts+0x9e
f7ba5ce0 f75c4e13 866dcc98 e48910d0 e4891008 Ntfs!NtfsCommonClose+0x397
f7ba5d74 804e426b 00000000 00000000 873c5640 Ntfs!NtfsFspClose+0xe3
f7ba5dac 8057be15 00000000 00000000 00000000 nt!ExpWorkerThread+0x100
f7ba5ddc 804fa4da 804e4196 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FOLLOWUP_IP:
nt!ExFreePoolWithTag+237
8054a832 668b4efa mov cx,[esi-0x6]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: [nt]

SYMBOL_NAME: nt!ExFreePoolWithTag+237

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42250ff9

STACK_COMMAND: kb

FAILURE_BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

BUCKET_ID: 0x50_nt!ExFreePoolWithTag+237

Followup: [nt]
---------
eax=87f11000 ebx=866dcc98 ecx=00000000 edx=868dc698 esi=87f11078 edi=00000000
eip=8054a832 esp=f7ba5b0c ebp=f7ba5b40 iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExFreePoolWithTag+0x237:
8054a832 668b4efa mov cx,[esi-0x6] ds:0023:87f11072=????
ChildEBP RetAddr Args to Child
f7ba5b40 804f2dd9 87f11078 00000000 00000000 nt!ExFreePoolWithTag+0x237 (FPO: [Non-Fpo])
f7ba5b58 f759d6a2 867a2350 f7ba5bb4 f7ba5b8c nt!ExDeleteResourceLite+0x32 (FPO: [Non-Fpo])
f7ba5b68 f75ca4fd 867a2350 8737f260 e10560d0 Ntfs!NtfsFreeEresource+0x6b (FPO: [Non-Fpo])
f7ba5b8c f759d57a 866dcc98 f7ba5bb4 f7ba5bbf Ntfs!NtfsDeleteFcb+0x4e (FPO: [Non-Fpo])
f7ba5bd8 f75bed00 866dcc98 8737f100 e4891008 Ntfs!NtfsTeardownFromLcb+0x1fd (FPO: [Non-Fpo])
f7ba5c30 f7599759 866dcc98 e48910d0 e4891268 Ntfs!NtfsTeardownStructures+0x125 (FPO: [Non-Fpo])
f7ba5c5c f75bc6eb 866dcc98 018910d0 e4891268 Ntfs!NtfsDecrementCloseCounts+0x9e (FPO: [Non-Fpo])
f7ba5ce0 f75c4e13 866dcc98 e48910d0 e4891008 Ntfs!NtfsCommonClose+0x397 (FPO: [Non-Fpo])
f7ba5d74 804e426b 00000000 00000000 873c5640 Ntfs!NtfsFspClose+0xe3 (FPO: [Non-Fpo])
f7ba5dac 8057be15 00000000 00000000 00000000 nt!ExpWorkerThread+0x100 (FPO: [Non-Fpo])
f7ba5ddc 804fa4da 804e4196 00000000 00000000 nt!PspSystemThreadStartup+0x34 (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
804d7000 806eb100 nt ntoskrnl.exe Wed Mar 02 00:59:37 2005 (42250FF9)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 06:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 07:00:51 2004 (41107B93)
bf012000 bf425a80 nv4_disp nv4_disp.dll Wed Aug 04 08:57:11 2004 (411096D7)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 01:05:44 2005 (43446A58)
bff50000 bff52f00 TSDDD TSDDD.dll Wed Aug 04 08:57:02 2004 (411096CE)
f1603000 f162cf00 kmixer kmixer.sys Wed Aug 04 07:07:46 2004 (41107D32)
f2f8f000 f2f92f60 HPZipr12 HPZipr12.sys Thu Mar 18 11:22:43 2004 (40598683)
f30bb000 f30fb100 HTTP HTTP.sys Sat Oct 09 00:48:20 2004 (41672744)
f314c000 f3158680 HPZid412 HPZid412.sys Thu Mar 18 11:22:40 2004 (40598680)
f33f9000 f340d400 wdmaud wdmaud.sys Wed Aug 04 07:15:03 2004 (41107EE7)
f3432000 f3435b00 usbscan usbscan.sys Wed Aug 04 06:58:44 2004 (41107B14)
f349e000 f34acd80 sysaudio sysaudio.sys Wed Aug 04 07:15:54 2004 (41107F1A)
f37ce000 f37fed80 RMCast RMCast.sys Fri Aug 17 21:52:22 2001 (3B7D8406)
f387f000 f388e900 Cdfs Cdfs.SYS Wed Aug 04 07:14:09 2004 (41107EB1)
f38c7000 f3918300 srv srv.sys Tue May 10 01:17:49 2005 (427FFDAD)
f3941000 f3952d00 mqac mqac.sys Wed Aug 04 06:58:19 2004 (41107AFB)
f397b000 f39a7400 mrxdav mrxdav.sys Wed Aug 04 07:00:49 2004 (41107B91)
f3a4c000 f3a4fc00 WINDDX WINDDX.sys Sun Nov 25 15:08:36 2001 (3C010974)
f4390000 f4393e40 Aspi32 Aspi32.SYS Sat Sep 11 00:46:10 1999 (37D99842)
f440c000 f440f280 ndisuio ndisuio.sys Wed Aug 04 07:03:10 2004 (41107C1E)
f5538000 f554f480 dump_atapi dump_atapi.sys Wed Aug 04 06:59:41 2004 (41107B4D)
f5550000 f5573000 Fastfat Fastfat.SYS Wed Aug 04 07:14:15 2004 (41107EB7)
f5573000 f562abe0 avg7core avg7core.sys Thu Jan 05 10:09:28 2006 (43BCF058)
f56cb000 f56ebf00 ipnat ipnat.sys Wed Sep 29 23:28:36 2004 (415B3714)
f56ec000 f575a400 mrxsmb mrxsmb.sys Wed Jan 19 04:26:50 2005 (41EDE18A)
f575b000 f5785a00 rdbss rdbss.sys Thu Oct 28 02:13:57 2004 (418047D5)
f5786000 f57a7d00 afd afd.sys Wed Aug 04 07:14:13 2004 (41107EB5)
f57d0000 f57f7c00 netbt netbt.sys Wed Aug 04 07:14:36 2004 (41107ECC)
f57f8000 f584fd80 tcpip tcpip.sys Wed May 25 20:04:00 2005 (4294CC20)
f5850000 f5862400 ipsec ipsec.sys Wed Aug 04 07:14:27 2004 (41107EC3)
f6987000 f6989900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
f69ab000 f69de200 update update.sys Wed Aug 04 06:58:32 2004 (41107B08)
f69df000 f6a0f100 rdpdr rdpdr.sys Wed Aug 04 07:01:10 2004 (41107BA6)
f6a10000 f6a20e00 psched psched.sys Wed Aug 04 07:04:16 2004 (41107C60)
f6a21000 f6a37680 ndiswan ndiswan.sys Wed Aug 04 07:14:30 2004 (41107EC6)
f6a38000 f6a5ae80 USBPORT USBPORT.SYS Wed Aug 04 07:08:34 2004 (41107D62)
f6a5b000 f6a7e980 portcls portcls.sys Wed Aug 04 07:15:47 2004 (41107F13)
f6a7f000 f6ac6500 stac97na stac97na.sys Sat Sep 21 00:42:29 2002 (3D8BB265)
f6ac7000 f6afe1a0 stac97nh stac97nh.sys Sat Sep 21 00:43:16 2002 (3D8BB294)
f6aff000 f6b1dec0 Mtlmnt5 Mtlmnt5.sys Wed Jan 28 12:54:43 2004 (4017B113)
f6b1e000 f6b80de0 slntamr slntamr.sys Wed Jan 28 13:15:32 2004 (4017B5F4)
f6b81000 f6ba3680 ks ks.sys Wed Aug 04 07:15:20 2004 (41107EF8)
f6ba4000 f6bb7900 parport parport.sys Wed Aug 04 06:59:04 2004 (41107B28)
f6bb8000 f6bcb780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 07:07:04 2004 (41107D08)
f6bcc000 f6d9b3c0 nv4_mini nv4_mini.sys Thu Apr 08 03:30:48 2004 (4074B958)
f6d9c000 f6daa100 usbhub usbhub.sys Wed Aug 04 07:08:40 2004 (41107D68)
f6dcc000 f6dd5480 NDProxy NDProxy.SYS Fri Aug 17 21:55:30 2001 (3B7D84C2)
f6ddc000 f6de5f00 termdd termdd.sys Wed Aug 04 06:58:52 2004 (41107B1C)
f6dec000 f6df4900 msgpc msgpc.sys Wed Aug 04 07:04:11 2004 (41107C5B)
f6dfc000 f6e07d00 raspptp raspptp.sys Wed Aug 04 07:14:26 2004 (41107EC2)
f6e0c000 f6e16200 raspppoe raspppoe.sys Wed Aug 04 07:05:06 2004 (41107C92)
f6e1c000 f6e28880 rasl2tp rasl2tp.sys Wed Aug 04 07:14:21 2004 (41107EBD)
f6e2c000 f6e3ab80 drmk drmk.sys Wed Aug 04 07:07:54 2004 (41107D3A)
f70f4000 f70f7c80 mssmbios mssmbios.sys Wed Aug 04 07:07:47 2004 (41107D33)
f7108000 f710a580 ndistapi ndistapi.sys Fri Aug 17 21:55:29 2001 (3B7D84C1)
f7534000 f7537360 SlWdmSup SlWdmSup.sys Wed Jan 28 12:20:42 2004 (4017A91A)
f7540000 f7543c80 serenum serenum.sys Wed Aug 04 06:59:06 2004 (41107B2A)
f757c000 f7596580 Mup Mup.sys Wed Aug 04 07:15:20 2004 (41107EF8)
f7597000 f7623480 Ntfs Ntfs.sys Wed Aug 04 07:15:06 2004 (41107EEA)
f7624000 f763a780 KSecDD KSecDD.sys Wed Aug 04 06:59:45 2004 (41107B51)
f763b000 f764cf00 sr sr.sys Wed Aug 04 07:06:22 2004 (41107CDE)
f764d000 f766b780 fltmgr fltmgr.sys Wed Aug 04 07:01:17 2004 (41107BAD)
f766c000 f7683480 atapi atapi.sys Wed Aug 04 06:59:41 2004 (41107B4D)
f7684000 f76b0a80 NDIS NDIS.SYS Wed Aug 04 07:14:27 2004 (41107EC3)
f76b1000 f76c9000 SSI SSI.SYS Thu Dec 15 02:06:46 2005 (43A0CFB6)
f76c9000 f76ee700 dmio dmio.sys Wed Aug 04 07:07:13 2004 (41107D11)
f76ef000 f770d880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
f770e000 f771ea80 pci pci.sys Wed Aug 04 07:07:45 2004 (41107D31)
f771f000 f774cd80 ACPI ACPI.sys Wed Aug 04 07:07:35 2004 (41107D27)
f776e000 f7776c00 isapnp isapnp.sys Fri Aug 17 21:58:01 2001 (3B7D8559)
f777e000 f778ce80 ohci1394 ohci1394.sys Wed Aug 04 07:10:05 2004 (41107DBD)
f778e000 f779b000 1394BUS 1394BUS.SYS Wed Aug 04 07:10:03 2004 (41107DBB)
f779e000 f77a8500 MountMgr MountMgr.sys Wed Aug 04 06:58:29 2004 (41107B05)
f77ae000 f77bac80 VolSnap VolSnap.sys Wed Aug 04 07:00:14 2004 (41107B6E)
f77be000 f77c6e00 disk disk.sys Wed Aug 04 06:59:53 2004 (41107B59)
f77ce000 f77da200 CLASSPNP CLASSPNP.SYS Wed Aug 04 07:14:26 2004 (41107EC2)
f77de000 f77e8080 sisagp sisagp.sys Wed Aug 04 07:07:42 2004 (41107D2E)
f780e000 f781d180 nic1394 nic1394.sys Wed Aug 04 06:58:28 2004 (41107B04)
f781e000 f7826700 netbios netbios.sys Wed Aug 04 07:03:19 2004 (41107C27)
f783e000 f7846880 Fips Fips.SYS Sat Aug 18 02:31:49 2001 (3B7DC585)
f784e000 f7856700 wanarp wanarp.sys Wed Aug 04 07:04:57 2004 (41107C89)
f785e000 f786cd80 arp1394 arp1394.sys Wed Aug 04 06:58:28 2004 (41107B04)
f797e000 f7986d00 intelppm intelppm.sys Wed Aug 04 06:59:19 2004 (41107B37)
f798e000 f799ae00 i8042prt i8042prt.sys Wed Aug 04 07:14:36 2004 (41107ECC)
f799e000 f79add80 serial serial.sys Wed Aug 04 07:15:51 2004 (41107F17)
f79ae000 f79b7680 AFS2K AFS2K.SYS Sat Feb 14 23:01:29 2004 (402EA8C9)
f79be000 f79ca180 cdrom cdrom.sys Wed Aug 04 06:59:52 2004 (41107B58)
f79ce000 f79dc080 redbook redbook.sys Wed Aug 04 06:59:34 2004 (41107B46)
f79de000 f79e8380 imapi imapi.sys Wed Aug 04 07:00:12 2004 (41107B6C)
f79ee000 f79f4200 PCIIDEX PCIIDEX.SYS Wed Aug 04 06:59:40 2004 (41107B4C)
f79f6000 f79fa900 PartMgr PartMgr.sys Sat Aug 18 02:32:23 2001 (3B7DC5A7)
f79fe000 f7a02880 TDI TDI.SYS Wed Aug 04 07:07:47 2004 (41107D33)
f7a06000 f7a0ade0 PxHelp20 PxHelp20.sys Fri Sep 24 01:24:24 2004 (41536938)
f7a1e000 f7a22280 usbohci usbohci.sys Wed Aug 04 07:08:34 2004 (41107D62)
f7a26000 f7a2c800 usbehci usbehci.sys Wed Aug 04 07:08:34 2004 (41107D62)
f7a2e000 f7a33200 RTL8139 RTL8139.SYS Fri Jun 13 06:29:46 2003 (3EE9614A)
f7a36000 f7a3a580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
f7a3e000 f7a42080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
f7a46000 f7a4b000 flpydisk flpydisk.sys Wed Aug 04 06:59:24 2004 (41107B3C)
f7a56000 f7a5b200 vga vga.sys Wed Aug 04 07:07:06 2004 (41107D0A)
f7a5e000 f7a62a80 Msfs Msfs.SYS Wed Aug 04 07:00:37 2004 (41107B85)
f7a66000 f7a6d880 Npfs Npfs.SYS Wed Aug 04 07:00:38 2004 (41107B86)
f7a6e000 f7a73d80 avg7rsxp avg7rsxp.sys Tue Dec 20 11:19:48 2005 (43A7E8D4)
f7a96000 f7a9a500 watchdog watchdog.sys Wed Aug 04 07:07:32 2004 (41107D24)
f7b2e000 f7b35b80 usbccgp usbccgp.sys Wed Aug 04 07:08:45 2004 (41107D6D)
f7b36000 f7b3c500 usbprint usbprint.sys Wed Aug 04 07:01:23 2004 (41107BB3)
f7b3e000 f7b433e0 HPZius12 HPZius12.sys Thu Mar 18 11:21:01 2004 (4059861D)
f7b46000 f7b4c780 USBSTOR USBSTOR.SYS Wed Aug 04 07:08:44 2004 (41107D6C)
f7b4e000 f7b53a00 mouclass mouclass.sys Wed Aug 04 06:58:32 2004 (41107B08)
f7b56000 f7b5c000 kbdclass kbdclass.sys Wed Aug 04 06:58:32 2004 (41107B08)

Thanks in advance,
jcapas

 

Hi jcapas,

The stack trace of your second minidumps also related to faulty ram.

f7ba5b40 804f2dd9 87f11078 00000000 00000000 nt!ExFreePoolWithTag+0x237 (FPO: [Non-Fpo])
f7ba5b58 f759d6a2 867a2350 f7ba5bb4 f7ba5b8c nt!ExDeleteResourceLite+0x32 (FPO: [Non-Fpo])
f7ba5b68 f75ca4fd 867a2350 8737f260 e10560d0 Ntfs!NtfsFreeEresource+0x6b (FPO: [Non-Fpo])
f7ba5b8c f759d57a 866dcc98 f7ba5bb4 f7ba5bbf Ntfs!NtfsDeleteFcb+0x4e (FPO: [Non-Fpo])

 

Thanks for your advice cpc2004,
Can you answer one question? How come I had no problems with my PC before installing XP SP2? I recently installed two new RAM chips, same spec but 512GB each (upgrade from 256 GB). They are new so how can it be faulty memory??? I have run memory checks on my old RAM and new RAM, all OK! Grateful for any light you can shed on this problem. Thanks.

 

jcapas, SP2 has something called 'Data Execution Prevention' which is supposed to prevent Buffer Overflows. Perhaps it may be causing problems now. If you want to be sure about that just turn off this feature and see if you still get BSOD.

 

I had already selected "turn on DEP for essential Windows programs and services only" (back in November). There is no option to turn it off altogether!

 

Hi,

Some faulty ram can pass memtest. The problem may be caused by bad memory slot, the ram is incompatible to the m/b or dust within the memory slot. Hardware problem has unpredicable result. Don't assume new ram has no problem. Usually new hardware less than one month has more than problem that hardware which runins for more than three months.