System recovered from serious error at logon, no blue screen or restart

I'm having a weird issue here. I first cleaned a system (virus and spyware scans). I then took an older PCI video card out of the PC, installed an AGP card, upgrade to SP2, and joined a domain. After all of this the computer blue-screened and restarted. I examined the minidump and it pointed to nv_agp.sys as the culprit. I updated the video driver files (GeForce 6200) and platform (nForce2) driver files to the latest versions, and the blue screens and restarts stopped. However, every time I log on to windows I get the "system has recovered from a serious error" message and a new minidump file. Every minidump file is identical. I know there is a paging file glitch that can cause that, but the microsoft patch doesn't work for SP2 (or is already included or not necessary), so I turned off page filing to get rid of the error. Didn't work.

Any ideas?

 

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\Owner\Local Settings\Temp\WER2aca.dir00\Mini091606-56.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Sat Sep 16 18:21:24.250 2006 (GMT-5)
System Uptime: 0 days 0:16:32.890
Loading Kernel Symbols
......................................................................................................................
Loading User Symbols
Loading unloaded module list
....
*** WARNING: Unable to verify timestamp for nv_agp.sys
*** ERROR: Module load completed but symbols could not be loaded for nv_agp.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, f789bdab, f75962a4, 0}

Probably caused by : nv_agp.sys ( nv_agp+dab )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: f789bdab, The address that the exception occurred at
Arg3: f75962a4, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


OVERLAPPED_MODULE: Address regions for 'rdbss' and 'ialmsbw.sys' overlap

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nv_agp+dab
f789bdab ?? ???

TRAP_FRAME: f75962a4 -- (.trap fffffffff75962a4)
.trap fffffffff75962a4
Unable to read trap frame at f75962a4
.trap

CUSTOMER_CRASH_COUNT: 56

DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 00000000 to f789bdab

STACK_TEXT:
f7596314 00000000 f7596348 00000000 00000040 nv_agp+0xdab


STACK_COMMAND: kb

FOLLOWUP_IP:
nv_agp+dab
f789bdab ?? ???

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nv_agp

IMAGE_NAME: nv_agp.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 3d7903e1

SYMBOL_NAME: nv_agp+dab

FAILURE_BUCKET_ID: 0x8E_nv_agp+dab

BUCKET_ID: 0x8E_nv_agp+dab

Followup: MachineOwner
---------

eax=00000000 ebx=83e62988 ecx=8429ecb8 edx=00000001 esi=c0000001 edi=8429ed70
eip=f789bdab esp=f7596318 ebp=f759632c iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nv_agp+0xdab:
f789bdab ?? ???
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
f7596314 00000000 f7596348 00000000 00000040 nv_agp+0xdab
start end module name
804d7000 806eb100 nt ntoskrnl.exe Tue Mar 01 18:59:37 2005 (42250FF9)
806ec000 8070c380 hal halaacpi.dll Wed Aug 04 00:59:05 2004 (41107B29)
bf000000 bf011580 dxg dxg.sys Wed Aug 04 01:00:51 2004 (41107B93)
bf012000 bf051000 ati2dvag ati2dvag.dll Tue Aug 30 21:42:53 2005 (4315192D)
bf051000 bf08a000 ati2cqag ati2cqag.dll Tue Aug 30 20:42:49 2005 (43150B19)
bf08a000 bf0bf000 atikvmag atikvmag.dll Tue Aug 30 21:10:36 2005 (4315119C)
bf0bf000 bf310380 ati3duag ati3duag.dll Tue Aug 30 21:28:35 2005 (431515D3)
bf311000 bf3a3a60 ativvaxx ativvaxx.dll Tue Aug 30 21:23:02 2005 (43151486)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 19:05:44 2005 (43446A58)
ee1d1000 ee1f3080 RDPWD RDPWD.SYS Thu Jun 09 18:52:39 2005 (42A8D647)
ee3d4000 ee425400 srv srv.sys Fri Apr 21 01:12:25 2006 (444877C9)
ee516000 ee542400 mrxdav mrxdav.sys Wed Aug 04 01:00:49 2004 (41107B91)
ee6f3000 ee6f6280 ndisuio ndisuio.sys Wed Aug 04 01:03:10 2004 (41107C1E)
ee813000 ee82a480 dump_atapi dump_atapi.sys Wed Aug 04 00:59:41 2004 (41107B4D)
ee82b000 ee84e000 Fastfat Fastfat.SYS Wed Aug 04 01:14:15 2004 (41107EB7)
ee93e000 ee95ef00 ipnat ipnat.sys Wed Sep 29 17:28:36 2004 (415B3714)
ee95f000 ee9cda00 mrxsmb mrxsmb.sys Fri May 05 04:41:42 2006 (445B1DD6)
ee9ce000 ee9f8a00 rdbss rdbss.sys Fri May 05 04:47:55 2006 (445B1F4B)
ee9f9000 eea1ad00 afd afd.sys Wed Aug 04 01:14:13 2004 (41107EB5)
eea1b000 eea42c00 netbt netbt.sys Wed Aug 04 01:14:36 2004 (41107ECC)
eea43000 eea9ad80 tcpip tcpip.sys Thu Apr 20 06:51:47 2006 (444775D3)
eea9b000 eeaad400 ipsec ipsec.sys Wed Aug 04 01:14:27 2004 (41107EC3)
eeaee000 eeaf0900 Dxapi Dxapi.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
f6b96000 f6b98600 FileDisk FileDisk.SYS Sat May 29 08:15:11 2004 (40B88CDF)
f6ba2000 f6bd5200 update update.sys Wed Aug 04 00:58:32 2004 (41107B08)
f6bea000 f6bec280 rasacd rasacd.sys Fri Aug 17 15:55:39 2001 (3B7D84CB)
f6bfe000 f6c2e100 rdpdr rdpdr.sys Wed Aug 04 01:01:10 2004 (41107BA6)
f6c2f000 f6c3fe00 psched psched.sys Wed Aug 04 01:04:16 2004 (41107C60)
f6ce0000 f6cf6680 ndiswan ndiswan.sys Wed Aug 04 01:14:30 2004 (41107EC6)
f6cf7000 f6d8b1c0 ltmdmnt ltmdmnt.sys Mon Mar 31 12:29:40 2003 (3E888914)
f6d8c000 f6d9f780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 01:07:04 2004 (41107D08)
f6da0000 f6ef4000 ati2mtag ati2mtag.sys Tue Aug 30 21:42:34 2005 (4315191A)
f6ef4000 f6f16680 ks ks.sys Wed Aug 04 01:15:20 2004 (41107EF8)
f6f17000 f6f3a980 portcls portcls.sys Wed Aug 04 01:15:47 2004 (41107F13)
f6f3b000 f7168000 ALCXWDM ALCXWDM.SYS unavailable (00000000)
f7168000 f717bc00 NVENET NVENET.sys Mon Sep 23 13:51:57 2002 (3D8F62CD)
f717c000 f719ee80 USBPORT USBPORT.SYS Wed Aug 04 01:08:34 2004 (41107D62)
f719f000 f71b2900 parport parport.sys Wed Aug 04 00:59:04 2004 (41107B28)
f7232000 f724c580 Mup Mup.sys Wed Aug 04 01:15:20 2004 (41107EF8)
f724d000 f7279a80 NDIS NDIS.sys Wed Aug 04 01:14:27 2004 (41107EC3)
f727a000 f7306480 Ntfs Ntfs.sys Wed Aug 04 01:15:06 2004 (41107EEA)
f7307000 f731d780 KSecDD KSecDD.sys Wed Aug 04 00:59:45 2004 (41107B51)
f731e000 f7384000 FSTOPW FSTOPW.SYS unavailable (00000000)
f7384000 f7397b40 drvmcdb drvmcdb.sys Mon Oct 21 16:53:22 2002 (3DB47752)
f7398000 f73a9f00 sr sr.sys Wed Aug 04 01:06:22 2004 (41107CDE)
f73aa000 f73c9780 fltmgr fltmgr.sys Mon Aug 21 04:14:57 2006 (44E97991)
f73ca000 f73e1480 atapi atapi.sys Wed Aug 04 00:59:41 2004 (41107B4D)
f73e2000 f7407700 dmio dmio.sys Wed Aug 04 01:07:13 2004 (41107D11)
f7408000 f7426880 ftdisk ftdisk.sys Fri Aug 17 15:52:41 2001 (3B7D8419)
f7427000 f7437a80 pci pci.sys Wed Aug 04 01:07:45 2004 (41107D31)
f7438000 f7465d80 ACPI ACPI.sys Wed Aug 04 01:07:35 2004 (41107D27)
f7487000 f748fc00 isapnp isapnp.sys Fri Aug 17 15:58:01 2001 (3B7D8559)
f7497000 f74a5e80 ohci1394 ohci1394.sys Wed Aug 04 01:10:05 2004 (41107DBD)
f74a7000 f74b4000 1394BUS 1394BUS.SYS Wed Aug 04 01:10:03 2004 (41107DBB)
f74b7000 f74c1500 MountMgr MountMgr.sys Wed Aug 04 00:58:29 2004 (41107B05)
f74c7000 f74d3c80 VolSnap VolSnap.sys Wed Aug 04 01:00:14 2004 (41107B6E)
f74d7000 f74dfe00 disk disk.sys Wed Aug 04 00:59:53 2004 (41107B59)
f74e7000 f74f3200 CLASSPNP CLASSPNP.SYS Wed Aug 04 01:14:26 2004 (41107EC2)
f7517000 f7526180 nic1394 nic1394.sys Wed Aug 04 00:58:28 2004 (41107B04)
f7557000 f755f700 wanarp wanarp.sys Wed Aug 04 01:04:57 2004 (41107C89)
f7567000 f7575d80 arp1394 arp1394.sys Wed Aug 04 00:58:28 2004 (41107B04)
f75b7000 f75c0200 amdk7 amdk7.sys Wed Aug 04 00:59:19 2004 (41107B37)
f75c7000 f75d3e00 i8042prt i8042prt.sys Wed Aug 04 01:14:36 2004 (41107ECC)
f75d7000 f75e6d80 serial serial.sys Wed Aug 04 01:15:51 2004 (41107F17)
f75e7000 f75f5b80 drmk drmk.sys Wed Aug 04 01:07:54 2004 (41107D3A)
f75f7000 f7601380 imapi imapi.sys Wed Aug 04 01:00:12 2004 (41107B6C)
f7607000 f760fc00 AFS2K AFS2K.SYS Thu Oct 07 20:16:03 2004 (4165EA53)
f7617000 f7623180 cdrom cdrom.sys Wed Aug 04 00:59:52 2004 (41107B58)
f7627000 f7635080 redbook redbook.sys Wed Aug 04 00:59:34 2004 (41107B46)
f7637000 f7643880 rasl2tp rasl2tp.sys Wed Aug 04 01:14:21 2004 (41107EBD)
f7647000 f7651200 raspppoe raspppoe.sys Wed Aug 04 01:05:06 2004 (41107C92)
f7657000 f7662d00 raspptp raspptp.sys Wed Aug 04 01:14:26 2004 (41107EC2)
f7667000 f766f900 msgpc msgpc.sys Wed Aug 04 01:04:11 2004 (41107C5B)
f7677000 f7680f00 termdd termdd.sys Wed Aug 04 00:58:52 2004 (41107B1C)
f7687000 f7690480 NDProxy NDProxy.SYS Fri Aug 17 15:55:30 2001 (3B7D84C2)
f7697000 f76a5100 usbhub usbhub.sys Wed Aug 04 01:08:40 2004 (41107D68)
f76d7000 f76df700 netbios netbios.sys Wed Aug 04 01:03:19 2004 (41107C27)
f76f7000 f76ff880 Fips Fips.SYS Fri Aug 17 20:31:49 2001 (3B7DC585)
f7707000 f770d200 PCIIDEX PCIIDEX.SYS Wed Aug 04 00:59:40 2004 (41107B4C)
f770f000 f7713900 PartMgr PartMgr.sys Fri Aug 17 20:32:23 2001 (3B7DC5A7)
f7717000 f771b0e0 PxHelp20 PxHelp20.sys Wed Nov 27 14:17:12 2002 (3DE52848)
f777f000 f7784500 TDTCP TDTCP.SYS Wed Aug 04 00:58:52 2004 (41107B1C)
f7787000 f778db00 fdc fdc.sys Wed Aug 04 00:59:25 2004 (41107B3D)
f778f000 f7795000 kbdclass kbdclass.sys Wed Aug 04 00:58:32 2004 (41107B08)
f7797000 f779ba80 point32 point32.sys Thu May 15 18:29:51 2003 (3EC422EF)
f779f000 f77a4a00 mouclass mouclass.sys Wed Aug 04 00:58:32 2004 (41107B08)
f77a7000 f77ab280 usbohci usbohci.sys Wed Aug 04 01:08:34 2004 (41107D62)
f77af000 f77b6580 Modem Modem.SYS Wed Aug 04 01:08:04 2004 (41107D44)
f77b7000 f77bd340 MxlW2k MxlW2k.SYS Thu Mar 28 16:13:15 2002 (3CA3957B)
f77bf000 f77c3880 TDI TDI.SYS Wed Aug 04 01:07:47 2004 (41107D33)
f77c7000 f77cb580 ptilink ptilink.sys Fri Aug 17 15:49:53 2001 (3B7D8371)
f77cf000 f77d3080 raspti raspti.sys Fri Aug 17 15:55:32 2001 (3B7D84C4)
f77d7000 f77dc000 flpydisk flpydisk.sys Wed Aug 04 00:59:24 2004 (41107B3C)
f77e7000 f77ec200 vga vga.sys Wed Aug 04 01:07:06 2004 (41107D0A)
f77ef000 f77f3a80 Msfs Msfs.SYS Wed Aug 04 01:00:37 2004 (41107B85)
f77f7000 f77fe880 Npfs Npfs.SYS Wed Aug 04 01:00:38 2004 (41107B86)
f7817000 f781b500 watchdog watchdog.sys Wed Aug 04 01:07:32 2004 (41107D24)
f7897000 f789a000 BOOTVID BOOTVID.dll Fri Aug 17 15:49:09 2001 (3B7D8345)
f789b000 f789e500 nv_agp nv_agp.sys Fri Sep 06 14:37:05 2002 (3D7903E1)
f7943000 f7946720 PS2 PS2.sys Mon Jun 04 08:59:59 2001 (3B1B945F)
f7947000 f794ac80 serenum serenum.sys Wed Aug 04 00:59:06 2004 (41107B2A)
f794b000 f794d680 pfc pfc.sys Fri Sep 27 17:53:07 2002 (3D94E153)
f7957000 f7959580 ndistapi ndistapi.sys Fri Aug 17 15:55:29 2001 (3B7D84C1)
f7973000 f7976c80 mssmbios mssmbios.sys Wed Aug 04 01:07:47 2004 (41107D33)
f7987000 f7988b80 kdcom kdcom.dll Fri Aug 17 15:49:10 2001 (3B7D8346)
f7989000 f798a100 WMILIB WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f798b000 f798c700 dmload dmload.sys Fri Aug 17 15:58:15 2001 (3B7D8567)
f799d000 f799e100 swenum swenum.sys Wed Aug 04 00:58:41 2004 (41107B11)
f799f000 f79a0280 USBD USBD.SYS Fri Aug 17 16:02:58 2001 (3B7D8682)
f79a1000 f79a2f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 15:49:37 2001 (3B7D8361)
f79a3000 f79a4080 Beep Beep.SYS Fri Aug 17 15:47:33 2001 (3B7D82E5)
f79a5000 f79a6080 mnmdd mnmdd.SYS Fri Aug 17 15:57:28 2001 (3B7D8538)
f79a7000 f79a8080 RDPCDD RDPCDD.sys Fri Aug 17 15:46:56 2001 (3B7D82C0)
f79a9000 f79aa100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
f79ed000 f79eea80 ParVdm ParVdm.SYS Fri Aug 17 15:49:49 2001 (3B7D836D)
f7a4f000 f7a4fd00 pciide pciide.sys Fri Aug 17 15:51:49 2001 (3B7D83E5)
f7b59000 f7b59c00 audstub audstub.sys Fri Aug 17 15:59:40 2001 (3B7D85BC)
f7b8e000 f7b8eb80 Null Null.SYS Fri Aug 17 15:47:39 2001 (3B7D82EB)
f7bd9000 f7bd9d00 dxgthk dxgthk.sys Fri Aug 17 15:53:12 2001 (3B7D8438)

Unloaded modules:
ee9e2000 ee9f9000 ialmsbw.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76e7000 f76f0000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77df000 f77e4000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f6bee000 f6bf1000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

I believe what is happening is that you are throwing a critical error during shutdown, and do not know it until you startup again.

The nv_agp.sys driver is the problem; it appears that the installation location for the driver is faulty.

See:

http://support.microsoft.com/kb/885183/en-us

This comment from the Web is typical of the installation directory issue: "Using Device Manager, and setting the "show hidden devices" option from the view menu, you can see the NVIDIA nForce AGP Bus Filter under "Non-Plug and Play drivers ". The original version that was on my PC was 4.12.01.0217. The driver file is C:\windows\system32\drivers\nv_agp.sys. Downloading and installing the latest Platform/nForce Drivers Unified Driver Package for Windows XP from the NVIDIA web site (http://www.nvidia.com), places the new driver in the the c:\nvidia\nforceWinXP\2.00\GART directory, but doesn't update it in the windows system32 drivers directory. By manually copying the driver from the nvidia directory, I got past the compatability problem. The version of the driver that works is 4.12.01.0278. "

There likely are newer versions of the nv_agp.sys driver available now.

 

The version of the driver for the nvidia nForce AGP Bus Filter is version 4.12.01.0436, the same as the file in the nvidia directory. I replaced the file in the system32/drivers folder with the one from the nvidia folder for good measure. No dice.. still get the error message.

BTW, I get the error after every reboot, but also if I log-off and then log-on again. Every time I log-in, regardless of whether or not I reboot, I get the error message.