BSOD everytime - debuglog.txt attached

Yesterday my XP Pro installation at home locked up. Upon restarting I get the XP login screen. The only account is Administrator. When I click on administrator I quickly get a BSOD. Sometimes I see the desktop for a few seconds - usually not.

MemTest didn't find any memory problems.
Safe Mode runs OK.

There are no system restore points or I'd try going back to one.

I managed to get the Minidump folder onto another computer using a bootable CD & memory stick. Below is the output from debugwiz

Any help will be greatly appreciated.

Dan

=====

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\Minidump\Mini101607-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Tue Oct 16 11:19:45.171 2007 (GMT-4)
System Uptime: 0 days 0:00:47.897
Loading Kernel Symbols
.............................................................................................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 806354df, f7a6996c, 0}

Probably caused by : ntkrpamp.exe ( nt!HvpGetCellMapped+5f )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 806354df, The address that the exception occurred at
Arg3: f7a6996c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!HvpGetCellMapped+5f
806354df 8b4304 mov eax,dword ptr [ebx+4]

TRAP_FRAME: f7a6996c -- (.trap fffffffff7a6996c)
.trap fffffffff7a6996c
ErrCode = 00000000
eax=00001500 ebx=00001500 ecx=867ba4f0 edx=0000024a esi=e1037008 edi=00000001
eip=806354df esp=f7a699e0 ebp=f7a69a28 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!HvpGetCellMapped+0x5f:
806354df 8b4304 mov eax,dword ptr [ebx+4] ds:0023:00001504=????????
.trap
Resetting default scope

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: services.exe

LAST_CONTROL_TRANSFER: from 806353f0 to 806354df

STACK_TEXT:
f7a69a28 806353f0 e1037008 49550001 e1037008 nt!HvpGetCellMapped+0x5f
f7a69a3c 80639884 e1037008 49550001 e1037008 nt!HvpGetHCell+0x10
f7a69a58 8062df92 e1037008 49550001 e1037008 nt!HvMarkCellDirty+0x30
f7a69a74 80636d3c e1037008 d4ac2d7c e1037008 nt!CmpMarkValueDataDirty+0xf2
f7a69a90 80636fe1 e1037008 00287078 d3a9ae6c nt!CmpMarkKeyValuesDirty+0xcc
f7a69aac 8063707e e1037008 00287078 d4ac807c nt!CmpFreeKeyValues+0x17
f7a69ae8 806378bc e1037008 00109ab8 d384aabc nt!CmpSyncKeyValues+0x26
f7a69b2c 80637a2f e107a000 00000400 00000003 nt!CmpCopySyncTree2+0x1f4
f7a69b5c 806244e9 e1037008 000001b8 e1037008 nt!CmpCopySyncTree+0x4f
f7a69ccc 8062013a 00010002 f7a69d64 f7a69ce8 nt!CmpSaveBootControlSet+0x2a7
f7a69cdc 8054086c 00000004 f7a69d64 804ff995 nt!NtInitializeRegistry+0x5e
f7a69cdc 804ff995 00000004 f7a69d64 804ff995 nt!KiFastCallEntry+0xfc
f7a69d58 8054086c 00000004 00c6f8b4 7c90eb94 nt!ZwInitializeRegistry+0x11
f7a69d58 7c90eb94 00000004 00c6f8b4 7c90eb94 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
00c6f8b4 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!HvpGetCellMapped+5f
806354df 8b4304 mov eax,dword ptr [ebx+4]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!HvpGetCellMapped+5f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e53f9d

FAILURE_BUCKET_ID: 0x8E_nt!HvpGetCellMapped+5f

BUCKET_ID: 0x8E_nt!HvpGetCellMapped+5f

Followup: MachineOwner
---------

eax=00001500 ebx=00001500 ecx=867ba4f0 edx=0000024a esi=e1037008 edi=00000001
eip=806354df esp=f7a699e0 ebp=f7a69a28 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!HvpGetCellMapped+0x5f:
806354df 8b4304 mov eax,dword ptr [ebx+4] ds:0023:00001504=????????
ChildEBP RetAddr Args to Child
f7a69a28 806353f0 e1037008 49550001 e1037008 nt!HvpGetCellMapped+0x5f (FPO: [Non-Fpo])
f7a69a3c 80639884 e1037008 49550001 e1037008 nt!HvpGetHCell+0x10 (FPO: [Non-Fpo])
f7a69a58 8062df92 e1037008 49550001 e1037008 nt!HvMarkCellDirty+0x30 (FPO: [Non-Fpo])
f7a69a74 80636d3c e1037008 d4ac2d7c e1037008 nt!CmpMarkValueDataDirty+0xf2 (FPO: [Non-Fpo])
f7a69a90 80636fe1 e1037008 00287078 d3a9ae6c nt!CmpMarkKeyValuesDirty+0xcc (FPO: [Non-Fpo])
f7a69aac 8063707e e1037008 00287078 d4ac807c nt!CmpFreeKeyValues+0x17 (FPO: [Non-Fpo])
f7a69ae8 806378bc e1037008 00109ab8 d384aabc nt!CmpSyncKeyValues+0x26 (FPO: [Non-Fpo])
f7a69b2c 80637a2f e107a000 00000400 00000003 nt!CmpCopySyncTree2+0x1f4 (FPO: [Non-Fpo])
f7a69b5c 806244e9 e1037008 000001b8 e1037008 nt!CmpCopySyncTree+0x4f (FPO: [Non-Fpo])
f7a69ccc 8062013a 00010002 f7a69d64 f7a69ce8 nt!CmpSaveBootControlSet+0x2a7 (FPO: [Non-Fpo])
f7a69cdc 8054086c 00000004 f7a69d64 804ff995 nt!NtInitializeRegistry+0x5e (FPO: [Non-Fpo])
f7a69cdc 804ff995 00000004 f7a69d64 804ff995 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f7a69ce8)
f7a69d58 8054086c 00000004 00c6f8b4 7c90eb94 nt!ZwInitializeRegistry+0x11 (FPO: [1,0,0])
f7a69d58 7c90eb94 00000004 00c6f8b4 7c90eb94 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ f7a69d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
00c6f8b4 00000000 00000000 00000000 00000000 0x7c90eb94
start end module name
804d7000 806e2000 nt ntkrpamp.exe Wed Feb 28 03:38:53 2007 (45E53F9D)
806e2000 80702d00 hal halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
b9fb1000 b9fb9d80 HIDCLASS HIDCLASS.SYS Wed Aug 04 02:08:18 2004 (41107D52)
ba121000 ba172480 srv srv.sys Mon Aug 14 06:34:39 2006 (44E051BF)
baa73000 baa75f80 mouhid mouhid.sys Fri Aug 17 16:47:57 2001 (3B7D82FD)
baa77000 baa79580 hidusb hidusb.sys Fri Aug 17 17:02:16 2001 (3B7D8658)
baab3000 baadf400 mrxdav mrxdav.sys Wed Aug 04 02:00:49 2004 (41107B91)
bacdc000 bacdf280 ndisuio ndisuio.sys Wed Aug 04 02:03:10 2004 (41107C1E)
bf800000 bf9c2180 win32k win32k.sys Thu Mar 08 08:47:34 2007 (45F013F6)
bf9c3000 bf9d4580 dxg dxg.sys Wed Aug 04 02:00:51 2004 (41107B93)
bf9d5000 bfe26580 nv4_disp nv4_disp.dll Sun Oct 22 17:02:50 2006 (453BDC7A)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Wed Aug 04 03:56:56 2004 (411096C8)
f428e000 f4362e80 dump_iastor dump_iastor.sys Fri Jun 17 10:33:38 2005 (42B2DF42)
f4363000 f43d1a00 mrxsmb mrxsmb.sys Fri May 05 05:41:42 2006 (445B1DD6)
f43d2000 f43fca00 rdbss rdbss.sys Fri May 05 05:47:55 2006 (445B1F4B)
f43fd000 f441ed00 afd afd.sys Wed Aug 04 02:14:13 2004 (41107EB5)
f441f000 f443ff00 ipnat ipnat.sys Wed Sep 29 18:28:36 2004 (415B3714)
f4440000 f4467c00 netbt netbt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f4468000 f44bfd80 tcpip tcpip.sys Thu Apr 20 07:51:47 2006 (444775D3)
f44c0000 f44d2400 ipsec ipsec.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f45ee000 f4611980 portcls portcls.sys Wed Aug 04 02:15:47 2004 (41107F13)
f4612000 f4724100 sthda sthda.sys Thu Jul 27 14:07:08 2006 (44C900CC)
f6c9d000 f6cf5e80 update update.sys Mon Apr 23 06:32:54 2007 (462C8B56)
f6cf6000 f6d26100 rdpdr rdpdr.sys Wed Aug 04 02:01:10 2004 (41107BA6)
f6d27000 f6d37e00 psched psched.sys Wed Aug 04 02:04:16 2004 (41107C60)
f6d60000 f6d76680 ndiswan ndiswan.sys Wed Aug 04 02:14:30 2004 (41107EC6)
f6d77000 f6d99680 ks ks.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f6d9a000 f6dbce80 USBPORT USBPORT.SYS Wed Aug 04 02:08:34 2004 (41107D62)
f6dbd000 f6de8c00 e1e5132 e1e5132.sys Wed Sep 14 21:24:06 2005 (4328CD36)
f6de9000 f6e0e000 HDAudBus HDAudBus.sys Fri Jan 07 20:07:15 2005 (41DF3243)
f6e0e000 f6e21780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f6e22000 f71f1400 nv4_mini nv4_mini.sys Sun Oct 22 17:08:02 2006 (453BDDB2)
f7212000 f7215c80 mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f723e000 f7240580 ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f7273000 f728d580 Mup Mup.sys Wed Aug 04 02:15:20 2004 (41107EF8)
f728e000 f72baa80 NDIS NDIS.sys Wed Aug 04 02:14:27 2004 (41107EC3)
f72bb000 f7347400 Ntfs Ntfs.sys Fri Feb 09 06:10:31 2007 (45CC56A7)
f7348000 f735e780 KSecDD KSecDD.sys Wed Aug 04 01:59:45 2004 (41107B51)
f735f000 f7370f00 sr sr.sys Wed Aug 04 02:06:22 2004 (41107CDE)
f7371000 f7390780 fltMgr fltMgr.sys Mon Aug 21 05:14:57 2006 (44E97991)
f7391000 f73a8800 SCSIPORT SCSIPORT.SYS Wed Aug 04 01:59:39 2004 (41107B4B)
f73a9000 f747de80 iaStor iaStor.sys Fri Jun 17 10:33:38 2005 (42B2DF42)
f747e000 f7495480 atapi atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f7496000 f74bb700 dmio dmio.sys Wed Aug 04 02:07:13 2004 (41107D11)
f74bc000 f74da880 ftdisk ftdisk.sys Fri Aug 17 16:52:41 2001 (3B7D8419)
f74db000 f74eba80 pci pci.sys Wed Aug 04 02:07:45 2004 (41107D31)
f74ec000 f7519d80 ACPI ACPI.sys Wed Aug 04 02:07:35 2004 (41107D27)
f751a000 f7540f80 Vax347b Vax347b.sys Mon Apr 25 03:43:56 2005 (426C9FBC)
f7642000 f764ac00 isapnp isapnp.sys Fri Aug 17 16:58:01 2001 (3B7D8559)
f7652000 f765c500 MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f7662000 f766ec80 VolSnap VolSnap.sys Wed Aug 04 02:00:14 2004 (41107B6E)
f7672000 f767ae00 disk disk.sys Wed Aug 04 01:59:53 2004 (41107B59)
f7682000 f768e200 CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f76a2000 f76b0100 usbhub usbhub.sys Wed Aug 04 02:08:40 2004 (41107D68)
f76c2000 f76ca700 wanarp wanarp.sys Wed Aug 04 02:04:57 2004 (41107C89)
f76d2000 f76da700 netbios netbios.sys Wed Aug 04 02:03:19 2004 (41107C27)
f76e2000 f76ea880 Fips Fips.SYS Fri Aug 17 21:31:49 2001 (3B7DC585)
f7762000 f7771900 Cdfs Cdfs.SYS Wed Aug 04 02:14:09 2004 (41107EB1)
f77d2000 f77dad00 intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f77e2000 f77eee00 i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f77f2000 f7801d80 serial serial.sys Wed Aug 04 02:15:51 2004 (41107F17)
f7802000 f780c380 imapi imapi.sys Wed Aug 04 02:00:12 2004 (41107B6C)
f7812000 f781e180 cdrom cdrom.sys Wed Aug 04 01:59:52 2004 (41107B58)
f7822000 f7830080 redbook redbook.sys Wed Aug 04 01:59:34 2004 (41107B46)
f7832000 f783e880 rasl2tp rasl2tp.sys Wed Aug 04 02:14:21 2004 (41107EBD)
f7842000 f784c200 raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f7852000 f785dd00 raspptp raspptp.sys Wed Aug 04 02:14:26 2004 (41107EC2)
f7862000 f786a900 msgpc msgpc.sys Wed Aug 04 02:04:11 2004 (41107C5B)
f7872000 f787d900 Pcouffin Pcouffin.sys Tue Dec 05 09:39:53 2006 (457584B9)
f7882000 f788bf00 termdd termdd.sys Wed Aug 04 01:58:52 2004 (41107B1C)
f7892000 f789b480 NDProxy NDProxy.SYS Fri Aug 17 16:55:30 2001 (3B7D84C2)
f78a2000 f78b0b80 drmk drmk.sys Wed Aug 04 02:07:54 2004 (41107D3A)
f78b2000 f78bc300 sfng32 sfng32.sys Fri Dec 02 16:22:25 2005 (4390BB11)
f78c2000 f78c8200 PCIIDEX PCIIDEX.SYS Wed Aug 04 01:59:40 2004 (41107B4C)
f78ca000 f78ce900 PartMgr PartMgr.sys Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f7912000 f7918180 HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
f797a000 f797e880 TDI TDI.SYS Wed Aug 04 02:07:47 2004 (41107D33)
f7992000 f7996500 watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
f79a2000 f79a6580 ptilink ptilink.sys Fri Aug 17 16:49:53 2001 (3B7D8371)
f79b2000 f79b6080 raspti raspti.sys Fri Aug 17 16:55:32 2001 (3B7D84C4)
f79da000 f79df000 usbuhci usbuhci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f79e2000 f79e7200 vga vga.sys Wed Aug 04 02:07:06 2004 (41107D0A)
f79f2000 f79f6a80 Msfs Msfs.SYS Wed Aug 04 02:00:37 2004 (41107B85)
f7a02000 f7a09880 Npfs Npfs.SYS Wed Aug 04 02:00:38 2004 (41107B86)
f7a0a000 f7a10800 usbehci usbehci.sys Wed Aug 04 02:08:34 2004 (41107D62)
f7a12000 f7a17a00 mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7a1a000 f7a20b00 fdc fdc.sys Wed Aug 04 01:59:25 2004 (41107B3D)
f7a32000 f7a38780 USBSTOR USBSTOR.SYS Wed Aug 04 02:08:44 2004 (41107D6C)
f7a3a000 f7a40000 kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f7a52000 f7a55000 BOOTVID BOOTVID.dll Fri Aug 17 16:49:09 2001 (3B7D8345)
f7b26000 f7b29c80 serenum serenum.sys Wed Aug 04 01:59:06 2004 (41107B2A)
f7b2e000 f7b30280 rasacd rasacd.sys Fri Aug 17 16:55:39 2001 (3B7D84CB)
f7b32000 f7b34880 pfc pfc.sys Fri Sep 19 19:47:22 2003 (3F6B958A)
f7b3e000 f7b40900 Dxapi Dxapi.sys Fri Aug 17 16:53:19 2001 (3B7D843F)
f7b42000 f7b43b80 kdcom kdcom.dll Fri Aug 17 16:49:10 2001 (3B7D8346)
f7b44000 f7b45100 WMILIB WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f7b46000 f7b47700 dmload dmload.sys Fri Aug 17 16:58:15 2001 (3B7D8567)
f7b48000 f7b49480 Vax347s Vax347s.sys Fri Apr 30 02:32:58 2004 (4091F31A)
f7b52000 f7b53100 swenum swenum.sys Wed Aug 04 01:58:41 2004 (41107B11)
f7b5c000 f7b5d280 USBD USBD.SYS Fri Aug 17 17:02:58 2001 (3B7D8682)
f7b60000 f7b61f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 16:49:37 2001 (3B7D8361)
f7b64000 f7b65080 Beep Beep.SYS Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7b68000 f7b69080 mnmdd mnmdd.SYS Fri Aug 17 16:57:28 2001 (3B7D8538)
f7b6c000 f7b6d080 RDPCDD RDPCDD.sys Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7b72000 f7b73080 avg7rsw avg7rsw.sys Tue Jul 26 08:10:51 2005 (42E6284B)
f7c0a000 f7c0ad00 pciide pciide.sys Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7cb9000 f7cb9b80 Null Null.SYS Fri Aug 17 16:47:39 2001 (3B7D82EB)
f7cbc000 f7cbcf80 avgclean avgclean.sys Mon Aug 21 18:55:15 2006 (44EA39D3)
f7ced000 f7cedd00 dxgthk dxgthk.sys Fri Aug 17 16:53:12 2001 (3B7D8438)
f7d7a000 f7d7ac00 audstub audstub.sys Fri Aug 17 16:59:40 2001 (3B7D85BC)

Unloaded modules:
baa6f000 baa72000 mouhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
baa77000 baa8b000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7952000 f7959000 avg7rsxp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f429a000 f4363000 avg7core.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f79ca000 f79cf000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7b22000 f7b25000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Hi and welcome to the BBS,
Error message when you try to open files on an NTFS file system volume on a Windows XP-based computer: "Stop 0x0000008E "
http://support.microsoft.com/kb/930916

Matt

 

Another thought along with that, when you get to the desktop, the antivirus will want to start checking files. Look at disabling the antivirus or other checking programs (antispyware, etc) in Safe Mode. You may want to go to msconfig (enter it in Start -> Run) and disable the startup programs, that may at least get you going again in normal mode.

Matt