Xp - Bsod - 8e

I am working on a friends laptop that is blue screening within 30 seconds of boot, every boot.

XP Pro SP2
HP Laptop

[Doesn't BSOD in safe mode] I've tried to use autoruns.exe to disable as many unneeded services and drivers as possible but it still blue screens. In the debugwiz output log (below) it appeared to me that sonypvt2.SYS was the culprit, so I removed the Sony handycam driver (that's all that appeared to be from Sony), and renamed sonypvt2.SYS in system32 but still get BSOD. I'm trying to get a dump after removing these but the last 2 have been corrupted. I'll post it as well as soon as I can get a good one.

Any ideas? Thanks!

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

************************************************************
WARNING: Dump file has been truncated. Data may be missing.
************************************************************
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a420
Debug session time: Thu Sep 21 21:19:03.810 2006 (GMT-4)
System Uptime: 0 days 0:02:26.370
Loading Kernel Symbols
........................................................................................................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffde00c). Type ".hh dbgerr001" for details
Loading unloaded module list
..........
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 8E, {c0000005, eee68928, ede66a20, 0}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

kd> !analyze -v;r;kv;lmtn;.logclose;q
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: eee68928, The address that the exception occurred at
Arg3: ede66a20, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
+ffffffffeee68928
eee68928 8a1401 mov dl,byte ptr [ecx+eax]

TRAP_FRAME: ede66a20 -- (.trap ffffffffede66a20)
.trap ffffffffede66a20
Unable to read trap frame at ede66a20
.trap

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: Windows-KB89083

LAST_CONTROL_TRANSFER: from 00000000 to 8053331e

STACK_TEXT:
ede665e8 00000000 00000000 00000000 00000000 nt!KeBugCheckEx+0x1b


STACK_COMMAND: .trap 0xffffffffede66a20 ; kb

SYMBOL_NAME: ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME: Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP: 0

BUCKET_ID: ZEROED_STACK

Followup: MachineOwner
---------

eax=ffdff13c ebx=eee68928 ecx=00000000 edx=00000000 esi=ede669cc edi=00000000
eip=8053331e esp=ede665d0 ebp=ede665e8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
8053331e 5d pop ebp
ChildEBP RetAddr Args to Child
ede665e8 00000000 00000000 00000000 00000000 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
start end module name
804d7000 806eb100 nt ntoskrnl.exe Tue Mar 01 19:59:37 2005 (42250FF9)
806ec000 806ffd80 hal halacpi.dll Wed Aug 04 01:59:04 2004 (41107B28)
bf800000 bf9c1180 win32k win32k.sys Wed Oct 05 20:05:44 2005 (43446A58)
bf9c2000 bf9d3580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
bf9d4000 bf9e2000 ialmrnt5 ialmrnt5.dll Fri Nov 07 13:46:54 2003 (3FABE89E)
bf9e2000 bfa04000 ialmdnt5 ialmdnt5.dll Fri Nov 07 13:45:42 2003 (3FABE856)
bfa04000 bfa342e0 ialmdev5 ialmdev5.DLL Fri Nov 07 13:45:34 2003 (3FABE84E)
bfa35000 bfab1000 ialmdd5 ialmdd5.DLL Fri Nov 07 13:45:07 2003 (3FABE833)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)
edcd6000 edd17000 HTTP HTTP.sys unavailable (FFFFFFFE)
ee0df000 ee109000 kmixer kmixer.sys unavailable (FFFFFFFE)
ee154000 ee169000 wdmaud wdmaud.sys unavailable (FFFFFFFE)
ee281000 ee2d3000 srv srv.sys unavailable (FFFFFFFE)
ee323000 ee4fd000 tm_cfw tm_cfw.sys unavailable (FFFFFFFE)
ee5c5000 ee5d7000 LxrJD31d LxrJD31d.sys unavailable (FFFFFFFE)
ee627000 ee654000 mrxdav mrxdav.sys unavailable (FFFFFFFE)
ee784000 ee787000 mdmxsdk mdmxsdk.sys unavailable (FFFFFFFE)
ee7c4000 ee7d3000 sysaudio sysaudio.sys unavailable (FFFFFFFE)
ee874000 ee878000 ndisuio ndisuio.sys unavailable (FFFFFFFE)
ee880000 ee884000 mdc8021x mdc8021x.sys unavailable (FFFFFFFE)
ee884000 ee8c3000 TmXPFlt TmXPFlt.sys unavailable (FFFFFFFE)
ee8c3000 ee9c3000 VsapiNT VsapiNT.sys unavailable (FFFFFFFE)
eeb03000 eeb1a480 dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
eeb1b000 eeb89a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
eebb2000 eebdca00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
eebdd000 eebedc00 tmtdi tmtdi.sys Mon Sep 12 08:54:33 2005 (43257A89)
eebee000 eec0fd00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
eec10000 eec37c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
eec38000 eec51a80 SYMEVENT SYMEVENT.SYS Tue Oct 19 17:18:08 2004 (41758490)
eec52000 eec72f00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
eec73000 eecb2da0 SYMTDI SYMTDI.SYS Sat Jan 22 00:55:40 2005 (41F1EADC)
eecb3000 eed0ad80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
eed0b000 eed1d400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
eed46000 eedadbe0 sonypvt2 sonypvt2.SYS Tue Aug 19 21:44:24 2003 (3F42D278)
eedae000 eee45d80 sonypvf2 sonypvf2.SYS Wed Apr 07 22:04:55 2004 (4074B347)
ef1a4000 ef1c17a0 ialmsbw ialmsbw.sys Fri Nov 07 13:46:50 2003 (3FABE89A)
ef1c2000 ef1da240 ialmkchw ialmkchw.sys Fri Nov 07 13:46:42 2003 (3FABE892)
f7283000 f72b6200 update update.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7357000 f7367e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
f7368000 f737e680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
f737f000 f742ab00 HSF_CNXT HSF_CNXT.sys Wed Dec 15 18:18:25 2004 (41C0C641)
f742b000 f7528780 HSF_DP HSF_DP.sys Wed Dec 15 18:18:22 2004 (41C0C63E)
f7529000 f755b980 HSFHWICH HSFHWICH.sys Wed Dec 15 18:18:32 2004 (41C0C648)
f755c000 f757f980 portcls portcls.sys Wed Aug 04 02:15:47 2004 (41107F13)
f7580000 f75c7900 camcaud camcaud.sys Tue Nov 23 17:57:39 2004 (41A3C063)
f75c8000 f760c680 camchal camchal.sys Tue Nov 23 17:58:22 2004 (41A3C08E)
f760d000 f762f680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f7630000 f765d6a0 SynTP SynTP.sys Thu Nov 04 21:26:41 2004 (418AE4E1)
f765e000 f76c5980 bcmwl5 bcmwl5.sys Sat Dec 17 19:41:58 2005 (43A4B056)
f76c6000 f76d6f80 Rtlnic51 Rtlnic51.sys Tue Dec 30 22:58:46 2003 (3FF24976)
f76d7000 f76f9e80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
f76fa000 f770d780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f770e000 f7724f40 ialmnt5 ialmnt5.sys Fri Nov 07 13:45:45 2003 (3FABE859)
f7725000 f7727280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f778f000 f77a9580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f77aa000 f7836480 Ntfs Ntfs.sys Wed Aug 04 02:15:06 2004 (41107EEA)
f7837000 f784d780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
f784e000 f785ff00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
f7860000 f787e780 fltMgr fltMgr.sys Wed Aug 04 02:01:17 2004 (41107BAD)
f787f000 f7896480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f7897000 f78b5880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f78b6000 f78d3480 pcmcia pcmcia.sys Wed Aug 04 02:07:45 2004 (41107D31)
f78d4000 f7900a80 NDIS NDIS.SYS Wed Aug 04 02:14:27 2004 (41107EC3)
f7901000 f7923000 SSIDRV SSIDRV.SYS Fri Jul 07 18:41:40 2006 (44AEE324)
f7923000 f7933a80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
f7934000 f7961d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
f7983000 f798bc00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f7993000 f799c000 SSHRMD SSHRMD.SYS Fri Jul 07 18:41:51 2006 (44AEE32F)
f79a3000 f79ad500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f79b3000 f79bfc80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
f79c3000 f79cbe00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
f79d3000 f79df200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f79e3000 f79f2d80 Serial Serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
f7a03000 f7a0b900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
f7a13000 f7a1cf00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
f7a23000 f7a2c480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f7a43000 f7a51100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
f7a53000 f7a5b700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
f7a63000 f7a6b700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
f7a73000 f7a7b880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f7ab3000 f7ac0000 Tmpreflt Tmpreflt.sys unavailable (FFFFFFFE)
f7b23000 f7b32900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
f7b53000 f7b5bd00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f7b63000 f7b6fe00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f7b73000 f7b7f000 sskbfd sskbfd.sys Fri Jul 07 18:41:48 2006 (44AEE32C)
f7b83000 f7b8d380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
f7b93000 f7b9c680 AFS2K AFS2K.SYS Sat Feb 14 18:01:29 2004 (402EA8C9)
f7ba3000 f7baf180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
f7bb3000 f7bc1080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
f7bc3000 f7bd1b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
f7bd3000 f7bdf880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
f7be3000 f7bed200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f7bf3000 f7bfed00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
f7c03000 f7c0b000 SSFS041A SSFS041A.SYS Fri Jul 07 18:41:44 2006 (44AEE328)
f7c0b000 f7c0f880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
f7c13000 f7c19200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
f7c1b000 f7c1f900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f7c23000 f7c270a0 PxHelp20 PxHelp20.sys Wed Jul 30 21:24:38 2003 (3F286FD6)
f7c2b000 f7c2f6a0 sonypvl2 sonypvl2.sys Fri Jul 25 02:02:39 2003 (3F20C7FF)
f7c8b000 f7c90000 watchdog watchdog.sys unavailable (FFFFFFFE)
f7ccb000 f7cd0000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7cd3000 f7cd9800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7cdb000 f7ce1000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7ce3000 f7ce8a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7ceb000 f7cf2000 GEARAspiWDM GEARAspiWDM.sys Mon Apr 05 18:37:14 2004 (4071DF9A)
f7cf3000 f7cfa580 Modem Modem.SYS Wed Aug 04 02:08:04 2004 (41107D44)
f7cfb000 f7cff580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f7d03000 f7d07080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f7d2b000 f7d30200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
f7d33000 f7d37a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
f7d3b000 f7d42880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
f7d93000 f7d96000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f7d97000 f7d99480 compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)
f7d9b000 f7d9e700 BATTC BATTC.SYS Fri Aug 17 16:57:52 2001 (3B7D8550)
f7d9f000 f7da1d80 ACPIEC ACPIEC.sys Fri Aug 17 16:57:55 2001 (3B7D8553)
f7e47000 f7e4a000 Dxapi Dxapi.sys unavailable (FFFFFFFE)
f7e4b000 f7e4e700 CmBatt CmBatt.sys Wed Aug 04 02:07:39 2004 (41107D2B)
f7e53000 f7e55280 wmiacpi wmiacpi.sys Wed Aug 04 02:07:39 2004 (41107D2B)
f7e57000 f7e59580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7e63000 f7e66c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f7e83000 f7e84b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f7e85000 f7e86100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7e87000 f7e88580 intelide intelide.sys Wed Aug 04 01:59:40 2004 (41107B4C)
f7e95000 f7e96280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f7e97000 f7e98100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
f7eab000 f7eacf00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f7ead000 f7eae080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7eaf000 f7eb0080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f7eb1000 f7eb2080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7eb5000 f7eb6a40 EABFiltr EABFiltr.sys Wed Apr 14 09:36:50 2004 (407D3E72)
f7ef5000 f7ef7000 MASPINT MASPINT.SYS unavailable (FFFFFFFE)
f7f19000 f7f1a100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7f4b000 f7f4bd00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7f4c000 f7f4cd80 OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
f7f71000 f7f71b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f8016000 f8017000 dxgthk dxgthk.sys unavailable (FFFFFFFE)
f808d000 f808dc00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)

Unloaded modules:
f80b8000 f80b9000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee1e9000 ee1f6000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee1f9000 ee207000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee131000 ee154000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7f3f000 f7f41000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ee5eb000 ee5ff000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7d23000 f7d28000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7749000 f774c000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7d1b000 f7d20000 Flpydisk.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7d13000 f7d1a000 Fdc.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

http://msdn.microsoft.com/library/d..._299217d6-98d1-4d1d-8068-883e89933845.xml.asp

gives a few more suggestions (look in system log in event viewer, run memory diagnostics, amongst others).