BSoD: Help me understand debuglog, please

Hello everybody,

recently (after complete reinstall of Windows XP Prof) I ve encountered a problem. Shortly after Win startup I got BSoD. I did tests with AVG antivirus, made run with 4 different spyware/adware tools, but found nothing. In the safe mode its working fine but immediately after switching to normal mode Win crashes again.

I tried to play a bit with services and found out, that this error appears only if Automatic updates service starting. When I disable it, it works fine. I did complete memory dump and made analyse of it, but Im not 100% sure what all those strange things mean

Installed system & programs:
Win XP Prof
Kerio Personal Firewall v4 (not sure about exact build - not at home now)
OpenOffice 2.0

Every little help is greatly appreciated.

Thanks!

Debuglog:

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\TEMP\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\windows\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Mon Sep 18 07:49:13.203 2006 (GMT+2)
System Uptime: 0 days 0:03:07.781
Loading Kernel Symbols
....................................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 8E, {c0000005, f6f308b7, f5e6b9f4, 0}

*** ERROR: Module load completed but symbols could not be loaded for fwdrv.sys
Probably caused by : fwdrv.sys ( fwdrv+274e0 )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: f6f308b7, The address that the exception occurred at
Arg3: f5e6b9f4, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukce na adrese 0x%08lx odkazovala na adresu pam

FAULTING_IP:
+fffffffff6f308b7
f6f308b7 8a1401 mov dl,byte ptr [ecx+eax]

TRAP_FRAME: f5e6b9f4 -- (.trap fffffffff5e6b9f4)
.trap fffffffff5e6b9f4
ErrCode = 00000000
eax=00000000 ebx=f6f36859 ecx=0101e000 edx=804dd203 esi=00002000 edi=0101c000
eip=f6f308b7 esp=f5e6ba68 ebp=f5e6ba74 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
f6f308b7 8a1401 mov dl,byte ptr [ecx+eax] ds:0023:0101e000=??
.trap
Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: WindowsXP-KB922

LAST_CONTROL_TRANSFER: from 8051d6a7 to 8053331e

STACK_TEXT:
f5e6b5bc 8051d6a7 0000008e c0000005 f6f308b7 nt!KeBugCheckEx+0x1b
f5e6b984 804df235 f5e6b9a0 00000000 f5e6b9f4 nt!KiDispatchException+0x3b1
f5e6b9ec 804df1e6 f5e6ba74 f6f308b7 badb0d00 nt!CommonDispatchException+0x4d
f5e6ba10 80566ab3 82752d00 f5e6b838 82759998 nt!KiExceptionExit+0x18a
f5e6ba74 f6f32767 0101c000 0000001e f6f36859 nt!ObpCloseHandleTableEntry+0x155
WARNING: Frame IP not in any known module. Following frames may be wrong.
f5e6bb4c 805f9351 000008d4 8274f440 00000001 0xf6f32767
f5e6bb2c f6f32970 8274f440 e14284c0 828d75d0 nt!PspCreateThread+0x3e3
f5e6bb4c 805f9351 000008d4 8274f440 00000001 0xf6f32970
f5e6bc98 8057b2a3 00b6ecbc 001f03ff 00000000 nt!PspCreateThread+0x3e3
f5e6bd10 f6e424e0 00b6ecbc 001f03ff 00000000 nt!NtCreateThread+0x118
f5e6bd3c 804de7ec 00b6ecbc 001f03ff 00000000 fwdrv+0x274e0
f5e6bd3c 7c90eb94 00b6ecbc 001f03ff 00000000 nt!KiFastCallEntry+0xf8
00b6f338 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
fwdrv+274e0
f6e424e0 8945fc mov dword ptr [ebp-4],eax

SYMBOL_STACK_INDEX: a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: fwdrv

IMAGE_NAME: fwdrv.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 44ad33ec

SYMBOL_NAME: fwdrv+274e0

FAILURE_BUCKET_ID: 0x8E_fwdrv+274e0

BUCKET_ID: 0x8E_fwdrv+274e0

Followup: MachineOwner
---------

eax=ffdff13c ebx=f6f308b7 ecx=00000000 edx=00000000 esi=f5e6b9a0 edi=00000000
eip=8053331e esp=f5e6b5a4 ebp=f5e6b5bc iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8053331e 5d pop ebp
ChildEBP RetAddr Args to Child
f5e6b5bc 8051d6a7 0000008e c0000005 f6f308b7 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f5e6b984 804df235 f5e6b9a0 00000000 f5e6b9f4 nt!KiDispatchException+0x3b1 (FPO: [Non-Fpo])
f5e6b9ec 804df1e6 f5e6ba74 f6f308b7 badb0d00 nt!CommonDispatchException+0x4d (FPO: [0,20,0])
f5e6ba10 80566ab3 82752d00 f5e6b838 82759998 nt!KiExceptionExit+0x18a
f5e6ba74 f6f32767 0101c000 0000001e f6f36859 nt!ObpCloseHandleTableEntry+0x155 (FPO: [Non-Fpo])
WARNING: Frame IP not in any known module. Following frames may be wrong.
f5e6bb4c 805f9351 000008d4 8274f440 00000001 0xf6f32767
f5e6bb2c f6f32970 8274f440 e14284c0 828d75d0 nt!PspCreateThread+0x3e3 (FPO: [Non-Fpo])
f5e6bb4c 805f9351 000008d4 8274f440 00000001 0xf6f32970
f5e6bc98 8057b2a3 00b6ecbc 001f03ff 00000000 nt!PspCreateThread+0x3e3 (FPO: [Non-Fpo])
f5e6bd10 f6e424e0 00b6ecbc 001f03ff 00000000 nt!NtCreateThread+0x118 (FPO: [Non-Fpo])
f5e6bd3c 804de7ec 00b6ecbc 001f03ff 00000000 fwdrv+0x274e0
f5e6bd3c 7c90eb94 00b6ecbc 001f03ff 00000000 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @ f5e6bd64)
00b6f338 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806eb980 nt ntoskrnl.exe Wed Mar 02 01:59:37 2005 (42250FF9)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 07:59:05 2004 (41107B29)
bf800000 bf9c1180 win32k win32k.sys Thu Oct 06 02:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 08:00:51 2004 (41107B93)
bff70000 bff72480 framebuf framebuf.dll Wed Aug 18 00:48:39 2004 (41228B47)
f5ef0000 f5f30280 HTTP HTTP.sys Fri Mar 17 01:33:09 2006 (441A03C5)
f6113000 f6164400 srv srv.sys Fri Apr 21 08:12:25 2006 (444877C9)
f62fd000 f630c900 Cdfs Cdfs.SYS Wed Aug 04 08:14:09 2004 (41107EB1)
f657a000 f658e400 wdmaud wdmaud.sys Wed Aug 04 08:15:03 2004 (41107EE7)
f6657000 f6683400 mrxdav mrxdav.sys Wed Aug 04 08:00:49 2004 (41107B91)
f6774000 f67771e0 MLPTDR_C MLPTDR_C.sys Tue Sep 03 12:31:10 2002 (3D748F6E)
f685c000 f686ad80 sysaudio sysaudio.sys Wed Aug 04 08:15:54 2004 (41107F1A)
f68e0000 f68e3280 ndisuio ndisuio.sys Wed Aug 04 08:03:10 2004 (41107C1E)
f6ba4000 f6bbb480 dump_atapi dump_atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f6bbc000 f6bdf000 Fastfat Fastfat.SYS Wed Aug 04 08:14:15 2004 (41107EB7)
f6bdf000 f6c9cd00 avg7core avg7core.sys Tue Jul 04 01:41:42 2006 (44A9AB36)
f6c9d000 f6cb2000 khips khips.sys Thu Jul 06 18:02:00 2006 (44AD33F8)
f6cb2000 f6d20a00 mrxsmb mrxsmb.sys Fri May 05 11:41:42 2006 (445B1DD6)
f6d21000 f6d4ba00 rdbss rdbss.sys Fri May 05 11:47:55 2006 (445B1F4B)
f6d4c000 f6d6dd00 afd afd.sys Wed Aug 04 08:14:13 2004 (41107EB5)
f6d6e000 f6d95c00 netbt netbt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f6d96000 f6dedd80 tcpip tcpip.sys Thu Apr 20 13:51:47 2006 (444775D3)
f6dee000 f6e00400 ipsec ipsec.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f6e01000 f6e1a200 InCDFs InCDFs.sys Tue Aug 22 10:40:45 2006 (44EAC30D)
f6e1b000 f6efa000 fwdrv fwdrv.sys Thu Jul 06 18:01:48 2006 (44AD33EC)
f6f1a000 f6f2d780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 08:07:04 2004 (41107D08)
f6f78000 f6f7a900 Dxapi Dxapi.sys Fri Aug 17 22:53:19 2001 (3B7D843F)
f6fb8000 f6fba280 rasacd rasacd.sys Fri Aug 17 22:55:39 2001 (3B7D84CB)
f6fc0000 f6fc2700 InCDrec InCDrec.SYS Tue Aug 22 10:41:19 2006 (44EAC32F)
f7008000 f703b200 update update.sys Wed Aug 04 07:58:32 2004 (41107B08)
f703c000 f706c100 rdpdr rdpdr.sys Wed Aug 04 08:01:10 2004 (41107BA6)
f7135000 f7145e00 psched psched.sys Wed Aug 04 08:04:16 2004 (41107C60)
f7146000 f715c680 ndiswan ndiswan.sys Wed Aug 04 08:14:30 2004 (41107EC6)
f715d000 f7180980 portcls portcls.sys Wed Aug 04 08:15:47 2004 (41107F13)
f7181000 f7263460 ALCXWDM ALCXWDM.SYS Mon Sep 16 12:24:59 2002 (3D85B17B)
f7264000 f7286680 ks ks.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7287000 f729a880 parport parport.sys Wed Aug 04 07:59:04 2004 (41107B28)
f729b000 f72bd200 e100b325 e100b325.sys Mon Feb 25 16:54:01 2002 (3C7A5E19)
f72be000 f72e0e80 USBPORT USBPORT.SYS Wed Aug 04 08:08:34 2004 (41107D62)
f7329000 f7343580 Mup Mup.sys Wed Aug 04 08:15:20 2004 (41107EF8)
f7344000 f7370a80 NDIS NDIS.sys Wed Aug 04 08:14:27 2004 (41107EC3)
f7371000 f73fd480 Ntfs Ntfs.sys Wed Aug 04 08:15:06 2004 (41107EEA)
f73fe000 f7414780 KSecDD KSecDD.sys Wed Aug 04 07:59:45 2004 (41107B51)
f7415000 f7426e80 sr sr.sys Wed Aug 04 08:06:22 2004 (41107CDE)
f7427000 f7445780 fltmgr fltmgr.sys Wed Aug 04 08:01:17 2004 (41107BAD)
f7446000 f745d480 atapi atapi.sys Wed Aug 04 07:59:41 2004 (41107B4D)
f745e000 f7475800 SCSIPORT SCSIPORT.SYS Wed Aug 04 07:59:39 2004 (41107B4B)
f7476000 f7488060 pnp680r pnp680r.sys Sat Jun 01 01:35:00 2002 (3CF808A4)
f7489000 f74ae900 dmio dmio.sys Wed Aug 04 08:07:13 2004 (41107D11)
f74af000 f74cd900 ftdisk ftdisk.sys Fri Aug 17 22:52:41 2001 (3B7D8419)
f74ce000 f74dec80 pci pci.sys Wed Aug 04 08:07:45 2004 (41107D31)
f74df000 f750cf80 ACPI ACPI.sys Wed Aug 04 08:07:35 2004 (41107D27)
f752e000 f7536c00 isapnp isapnp.sys Fri Aug 17 22:58:01 2001 (3B7D8559)
f753e000 f7548500 MountMgr MountMgr.sys Wed Aug 04 07:58:29 2004 (41107B05)
f754e000 f755ad00 VolSnap VolSnap.sys Wed Aug 04 08:00:14 2004 (41107B6E)
f755e000 f7566e00 disk disk.sys Wed Aug 04 07:59:53 2004 (41107B59)
f756e000 f757a200 CLASSPNP CLASSPNP.SYS Wed Aug 04 08:14:26 2004 (41107EC2)
f757e000 f7589080 PxHelp20 PxHelp20.sys Thu Nov 03 18:56:40 2005 (436A4F58)
f758e000 f7598580 agp440 agp440.sys Wed Aug 04 08:07:40 2004 (41107D2C)
f75be000 f75c7c00 intelppm intelppm.sys Wed Aug 04 07:59:19 2004 (41107B37)
f75ce000 f75dac80 i8042prt i8042prt.sys Wed Aug 04 08:14:36 2004 (41107ECC)
f75de000 f75edc80 serial serial.sys Wed Aug 04 08:15:51 2004 (41107F17)
f75ee000 f75f8380 Imapi Imapi.SYS Wed Aug 04 08:00:12 2004 (41107B6C)
f75fe000 f760a180 cdrom cdrom.sys Wed Aug 04 07:59:52 2004 (41107B58)
f760e000 f761c380 redbook redbook.sys Wed Aug 04 07:59:34 2004 (41107B46)
f761e000 f7626400 InCDRm InCDRm.sys Tue Aug 22 10:41:16 2006 (44EAC32C)
f762e000 f763cb80 drmk drmk.sys Wed Aug 04 08:07:54 2004 (41107D3A)
f763e000 f764a880 rasl2tp rasl2tp.sys Wed Aug 04 08:14:21 2004 (41107EBD)
f764e000 f7658200 raspppoe raspppoe.sys Wed Aug 04 08:05:06 2004 (41107C92)
f765e000 f7669d00 raspptp raspptp.sys Wed Aug 04 08:14:26 2004 (41107EC2)
f766e000 f7676900 msgpc msgpc.sys Wed Aug 04 08:04:11 2004 (41107C5B)
f767e000 f7687f00 termdd termdd.sys Wed Aug 04 07:58:52 2004 (41107B1C)
f768e000 f7697480 NDProxy NDProxy.SYS Fri Aug 17 22:55:30 2001 (3B7D84C2)
f769e000 f76ac100 usbhub usbhub.sys Wed Aug 04 08:08:40 2004 (41107D68)
f76be000 f76c6700 wanarp wanarp.sys Wed Aug 04 08:04:57 2004 (41107C89)
f76ce000 f76d6700 netbios netbios.sys Wed Aug 04 08:03:19 2004 (41107C27)
f76ee000 f76f6880 Fips Fips.SYS Sat Aug 18 03:31:49 2001 (3B7DC585)
f77ae000 f77b4200 PCIIDEX PCIIDEX.SYS Wed Aug 04 07:59:40 2004 (41107B4C)
f77b6000 f77ba900 PartMgr PartMgr.sys Sat Aug 18 03:32:23 2001 (3B7DC5A7)
f77d6000 f77db000 usbuhci usbuhci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f77de000 f77e4800 usbehci usbehci.sys Wed Aug 04 08:08:34 2004 (41107D62)
f77ee000 f77f3a00 mouclass mouclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f77f6000 f77fc000 kbdclass kbdclass.sys Wed Aug 04 07:58:32 2004 (41107B08)
f77fe000 f7802500 watchdog watchdog.sys Wed Aug 04 08:07:32 2004 (41107D24)
f7806000 f780cb00 fdc fdc.sys Wed Aug 04 07:59:25 2004 (41107B3D)
f782e000 f7835380 InCDPass InCDPass.sys Tue Aug 22 10:41:03 2006 (44EAC31F)
f785e000 f7862880 TDI TDI.SYS Wed Aug 04 08:07:47 2004 (41107D33)
f786e000 f7872580 ptilink ptilink.sys Fri Aug 17 22:49:53 2001 (3B7D8371)
f787e000 f7882080 raspti raspti.sys Fri Aug 17 22:55:32 2001 (3B7D84C4)
f788e000 f7893000 flpydisk flpydisk.sys Wed Aug 04 07:59:24 2004 (41107B3C)
f78a6000 f78ab200 vga vga.sys Wed Aug 04 08:07:06 2004 (41107D0A)
f78be000 f78c2a80 Msfs Msfs.SYS Wed Aug 04 08:00:37 2004 (41107B85)
f78ce000 f78d5880 Npfs Npfs.SYS Wed Aug 04 08:00:38 2004 (41107B86)
f791e000 f7924d00 avg7rsxp avg7rsxp.sys Mon Jun 26 01:45:43 2006 (449F2027)
f793e000 f7941000 BOOTVID BOOTVID.dll Fri Aug 17 22:49:09 2001 (3B7D8345)
f79c2000 f79c5c80 serenum serenum.sys Wed Aug 04 07:59:06 2004 (41107B2A)
f79ce000 f79d0980 gameenum gameenum.sys Wed Aug 04 08:08:20 2004 (41107D54)
f79f2000 f79f4580 ndistapi ndistapi.sys Fri Aug 17 22:55:29 2001 (3B7D84C1)
f7a16000 f7a19c80 mssmbios mssmbios.sys Wed Aug 04 08:07:47 2004 (41107D33)
f7a2e000 f7a2fb80 kdcom kdcom.dll Fri Aug 17 22:49:10 2001 (3B7D8346)
f7a30000 f7a31100 WMILIB WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7a32000 f7a33700 dmload dmload.sys Fri Aug 17 22:58:15 2001 (3B7D8567)
f7a38000 f7a39a80 ParVdm ParVdm.SYS Fri Aug 17 22:49:49 2001 (3B7D836D)
f7a3a000 f7a3b100 swenum swenum.sys Wed Aug 04 07:58:41 2004 (41107B11)
f7a40000 f7a41280 USBD USBD.SYS Fri Aug 17 23:02:58 2001 (3B7D8682)
f7a44000 f7a45f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 22:49:37 2001 (3B7D8361)
f7a48000 f7a49080 Beep Beep.SYS Fri Aug 17 22:47:33 2001 (3B7D82E5)
f7a4c000 f7a4d080 mnmdd mnmdd.SYS Fri Aug 17 22:57:28 2001 (3B7D8538)
f7a50000 f7a51080 RDPCDD RDPCDD.sys Fri Aug 17 22:46:56 2001 (3B7D82C0)
f7a5a000 f7a5b0c0 avg7rsw avg7rsw.sys Mon Sep 19 02:09:31 2005 (432E01BB)
f7a5e000 f7a5f100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 23:07:23 2001 (3B7D878B)
f7a88000 f7a89380 avgtdi avgtdi.sys Sun Sep 04 02:38:58 2005 (431A4222)
f7af6000 f7af6d00 pciide pciide.sys Fri Aug 17 22:51:49 2001 (3B7D83E5)
f7b17000 f7b17c00 audstub audstub.sys Fri Aug 17 22:59:40 2001 (3B7D85BC)
f7b62000 f7b62b80 Null Null.SYS Fri Aug 17 22:47:39 2001 (3B7D82EB)
f7b9b000 f7b9bf80 guard guard.sys Fri Jun 16 16:38:53 2006 (4492C27D)
f7baa000 f7baad00 dxgthk dxgthk.sys Fri Aug 17 22:53:12 2001 (3B7D8438)

Unloaded modules:
f6049000 f6073000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f652d000 f6557000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7c4e000 f7c4f000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6744000 f6751000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6557000 f657a000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f6754000 f6762000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7a42000 f7a44000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76de000 f76e8000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f789e000 f78a3000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6fcc000 f6fcf000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Uninstall Kerio/Tiny Firewall.
Use the native XP firewall for a while.

You can experiment with workarounds suggested here:
http://www.dslreports.com/forum/remark,3715873~days=9999

 

I ve digged a bit around network and found that Kerio causes this problem since early versions and no one cares much about solution (from its programming team). I ll try uninstall it and use Windows (or install Sygate) for a while. Thanks for suggestion. Will post a result soon

 

Well, even I ve uninstalled Kerio, system still acts funny. Within 1 minute after startup I got message that windows firewall is disabled and up to 10 seconds later I got BSoD with immediate reboot.

It still looks like some spyware/adware causing problems but I cant find anything suspicious with ad-aware, spybot, cwshredder, avg, ewido nor hijack-this.

Suggestions?

 

Turn off the automatic restart in the event of errors.

Right click My Computer, Properties, Advanced, Startup and Recovery - Settings, and uncheck automaticly restart.

Now you should get a readable blue screen error message. Write down the exact error number and error text and report them back to the forum.

 

Hi, Im back at home again. Did what you asked me for.

Took this from minidump analyse:

BugCheck 1000008E, {c0000005, f6f308b7, f6149a20, 0}
Probably caused by : ntoskrnl.exe

 

0x8e is like an 0x0a error. They indicate a non-specific error with RAM, a hardware driver, or failing-failed hardware.

Disconnect and use Device Manager to disable any new hardware devices. If you installed new device drivers, use Device Manager and the "Driver Rollback" feature to revert the driver changes.

Test RAM, as failing RAM is a common source of the problem. You can try either of these:

http://www.memtest86.com/#download0
http://oca.microsoft.com/en/windiag.asp

Finally, this can be heat related. A too hot processor or a too hot video adapter add-in card are usually to blame if heat is the issue.

 

At work again ... pity we have completely different time zones

At home I ll do mem test (downloaded both utilities). I thought about this eventuality too, but still Im hoping its software based issue. One more additional information - this is issue of XP system freshly installed on drive C. On E drive I have like 2 years old installation of XP which is working fine without bluescreens. I made fresh install because that E system was slow and messy with tons of unneeded software. Thats why I still hope its software based problem.

Results will be posted in about 8 hours from now.

Thanks for your help

 

One more additional info. I doubt its heat based issue, because system falls always exactly at the same moment. In case of insufficient cooling I ll expect random bluescreens and not predictable ones. Still I hope thats some faulty driver than damaged RAM. We ll see after mem test

 

Hi, back again. Did series of mem tests using windows utility ... 52 standard and just for being sure 1 extended test without single failure. So it seems memory is OK. What should I try now?

 

Im going to make fresh install. Hopefully it will help. Wish me luck

We can close this topic now.

Thank for your help and time!