<Dump>, System Error please help me!

Hi, I am currently having some problem with Window Xp pro (Sp 2). The system would randomly crash and restart with one of those blue screen. So I decided to use the program "debugwiz.exe ", as somebody in the forum have referred, to retrieve the dump log file of the crash error. Below are the log details. I'll appreciate any kind help to identify the root causes and solutions.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

Comment: 'Dr. Watson generated MiniDump'
Windows XP Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Debug session time: Fri Feb 16 15:59:40.000 2007 (GMT+8)
System Uptime: not available
Process Uptime: 0 days 0:00:09.000
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
.................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(57c.6cc): Access violation - code c0000005 (first/second chance not available)
eax=00000001 ebx=000003b4 ecx=7c91a06c edx=7c97c0d8 esi=00000001 edi=0015a864
eip=77c01748 esp=00d5ef58 ebp=00d5ef94 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
version!GetFileVersionInfoW+0x1bd:
77c01748 ff75d4 push dword ptr [ebp-2Ch] ss:0023:00d5ef68=00000000
0:002> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*** WARNING: Unable to verify checksum for nvsvc32.exe
*** ERROR: Module load completed but symbols could not be loaded for nvsvc32.exe

FAULTING_IP:
version!GetFileVersionInfoW+1bd
77c01748 ff75d4 push dword ptr [ebp-2Ch]

EXCEPTION_RECORD: ffffffff -- (.exr ffffffffffffffff)
.exr ffffffffffffffff
ExceptionAddress: 77c01748 (version!GetFileVersionInfoW+0x000001bd)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000008
NumberParameters: 2
Parameter[0]: 00000008
Parameter[1]: 77c01748
Attempt to execute non-executable address 77c01748

DEFAULT_BUCKET_ID: SOFTWARE_NX_FAULT

PROCESS_NAME: nvsvc32.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

WRITE_ADDRESS: 77c01748

BUGCHECK_STR: ACCESS_VIOLATION

LAST_CONTROL_TRANSFER: from 76398684 to 77c01748

STACK_TEXT:
00d5ef94 76398684 00d5efc8 00000000 0000076c version!GetFileVersionInfoW+0x1bd
00d5f1d4 76398899 00d5f420 763a6020 00000081 imm32!LoadVersionInfo+0xfd
00d5f40c 763a3b05 04090409 00d5f420 0096abb8 imm32!ImmLoadLayout+0x160
00d5f784 763a4340 00d5f7b0 77d9c2b1 0005005e imm32!LoadCtfIme+0x3e
00d5f78c 77d9c2b1 0005005e 00000081 00000000 imm32!CtfImmDispatchDefImeMessage+0x1c
00d5f7b0 77d9c535 0005005e 00000081 00000000 user32!ImeWndProcWorker+0xc8
00d5f7cc 77d48734 0005005e 00000081 00000000 user32!ImeWndProcW+0x22
00d5f7f8 77d4d05b 77d9c513 0005005e 00000081 user32!InternalCallWinProc+0x28
00d5f860 77d4b4c0 00000000 77d9c513 0005005e user32!UserCallWinProcCheckWow+0xea
00d5f8b4 77d4fd29 0096abb8 00000081 00000000 user32!DispatchClientMessage+0xa3
00d5f8e4 7c90eae3 00d5f8f4 0000007c 0000007c user32!__fnINLPCREATESTRUCT+0x8b
00d5f96c 77d5013e 77d50104 00000000 00d5fe94 ntdll!KiUserCallbackDispatcher+0x13
00d5fe10 77d501f7 00000000 00d5fe94 00d5fea8 user32!NtUserCreateWindowEx+0xc
00d5febc 77d4ff83 00000000 0042155c 00d5fea8 user32!_CreateWindowEx+0x1ed
00d5fef8 00408bdc 00000000 0042155c 0042155c user32!CreateWindowExW+0x33
WARNING: Stack unwind information not available. Following frames may be wrong.
00d5ffb4 7c80b683 00000000 0015b9d0 0015b848 nvsvc32+0x8bdc
00d5ffec 00000000 00408af0 00000000 00000000 kernel32!BaseThreadStart+0x37


STACK_COMMAND: ~2s; .ecxr ; kb

PRIMARY_PROBLEM_CLASS: SOFTWARE_NX_FAULT

FAULTING_THREAD: 000006cc

FOLLOWUP_IP:
version!GetFileVersionInfoW+1bd
77c01748 ff75d4 push dword ptr [ebp-2Ch]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: version!GetFileVersionInfoW+1bd

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: version

IMAGE_NAME: version.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 411096b7

FAILURE_BUCKET_ID: ACCESS_VIOLATION_version!GetFileVersionInfoW+1bd

BUCKET_ID: ACCESS_VIOLATION_version!GetFileVersionInfoW+1bd

Followup: MachineOwner
---------

eax=00000001 ebx=000003b4 ecx=7c91a06c edx=7c97c0d8 esi=00000001 edi=0015a864
eip=77c01748 esp=00d5ef58 ebp=00d5ef94 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
version!GetFileVersionInfoW+0x1bd:
77c01748 ff75d4 push dword ptr [ebp-2Ch] ss:0023:00d5ef68=00000000
ChildEBP RetAddr Args to Child
00d5ef94 76398684 00d5efc8 00000000 0000076c version!GetFileVersionInfoW+0x1bd (FPO: [Non-Fpo])
00d5f1d4 76398899 00d5f420 763a6020 00000081 imm32!LoadVersionInfo+0xfd (FPO: [Non-Fpo])
00d5f40c 763a3b05 04090409 00d5f420 0096abb8 imm32!ImmLoadLayout+0x160 (FPO: [Non-Fpo])
00d5f784 763a4340 00d5f7b0 77d9c2b1 0005005e imm32!LoadCtfIme+0x3e (FPO: [Non-Fpo])
00d5f78c 77d9c2b1 0005005e 00000081 00000000 imm32!CtfImmDispatchDefImeMessage+0x1c (FPO: [Non-Fpo])
00d5f7b0 77d9c535 0005005e 00000081 00000000 user32!ImeWndProcWorker+0xc8 (FPO: [Non-Fpo])
00d5f7cc 77d48734 0005005e 00000081 00000000 user32!ImeWndProcW+0x22 (FPO: [Non-Fpo])
00d5f7f8 77d4d05b 77d9c513 0005005e 00000081 user32!InternalCallWinProc+0x28
00d5f860 77d4b4c0 00000000 77d9c513 0005005e user32!UserCallWinProcCheckWow+0xea (FPO: [Non-Fpo])
00d5f8b4 77d4fd29 0096abb8 00000081 00000000 user32!DispatchClientMessage+0xa3 (FPO: [Non-Fpo])
00d5f8e4 7c90eae3 00d5f8f4 0000007c 0000007c user32!__fnINLPCREATESTRUCT+0x8b (FPO: [Non-Fpo])
00d5f96c 77d5013e 77d50104 00000000 00d5fe94 ntdll!KiUserCallbackDispatcher+0x13 (FPO: [0,0,0])
00d5fe10 77d501f7 00000000 00d5fe94 00d5fea8 user32!NtUserCreateWindowEx+0xc
00d5febc 77d4ff83 00000000 0042155c 00d5fea8 user32!_CreateWindowEx+0x1ed (FPO: [Non-Fpo])
00d5fef8 00408bdc 00000000 0042155c 0042155c user32!CreateWindowExW+0x33 (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
00d5ffb4 7c80b683 00000000 0015b9d0 0015b848 nvsvc32+0x8bdc
00d5ffec 00000000 00408af0 00000000 00000000 kernel32!BaseThreadStart+0x37 (FPO: [Non-Fpo])
start end module name
00400000 0042c000 nvsvc32 nvsvc32.exe Sat Nov 18 11:40:01 2006 (455E8091)
008f0000 00926000 nvapi nvapi.dll Sat Nov 18 11:42:39 2006 (455E812F)
5ad70000 5ada8000 uxtheme uxtheme.dll Wed Aug 04 15:56:43 2004 (411096BB)
5b860000 5b8b4000 netapi32 netapi32.dll Thu Aug 17 20:28:27 2006 (44E460EB)
5d090000 5d12a000 comctl32 comctl32.dll Fri Aug 25 23:45:58 2006 (44EF1B36)
629c0000 629c9000 lpk lpk.dll Wed Aug 04 15:56:26 2004 (411096AA)
71aa0000 71aa8000 ws2help ws2help.dll Wed Aug 04 15:57:39 2004 (411096F3)
71ab0000 71ac7000 ws2_32 ws2_32.dll Wed Aug 04 15:57:38 2004 (411096F2)
71bf0000 71c03000 samlib samlib.dll Wed Aug 04 15:56:29 2004 (411096AD)
74ad0000 74ad8000 powrprof powrprof.dll Wed Aug 04 15:56:53 2004 (411096C5)
74d90000 74dfb000 usp10 usp10.dll Wed Aug 04 15:56:42 2004 (411096BA)
76360000 76370000 winsta winsta.dll Wed Aug 04 15:56:40 2004 (411096B8)
76390000 763ad000 imm32 imm32.dll Wed Aug 04 15:56:30 2004 (411096AE)
769c0000 76a73000 userenv userenv.dll Wed Aug 04 15:56:41 2004 (411096B9)
76d60000 76d79000 iphlpapi iphlpapi.dll Fri May 19 20:59:41 2006 (446DC13D)
76f50000 76f58000 wtsapi32 wtsapi32.dll Wed Aug 04 15:57:55 2004 (41109703)
76f60000 76f8c000 wldap32 wldap32.dll Wed Aug 04 15:56:43 2004 (411096BB)
77120000 771ac000 oleaut32 oleaut32.dll Wed Aug 04 15:57:39 2004 (411096F3)
773d0000 774d3000 comctl32_773d0000 comctl32.dll Fri Aug 25 23:45:55 2006 (44EF1B33)
774e0000 7761d000 ole32 ole32.dll Tue Jul 26 12:39:47 2005 (42E5BE93)
77690000 776b1000 ntmarta ntmarta.dll Wed Aug 04 15:57:02 2004 (411096CE)
77b40000 77b62000 apphelp apphelp.dll Wed Aug 04 15:56:36 2004 (411096B4)
77c00000 77c08000 version version.dll Wed Aug 04 15:56:39 2004 (411096B7)
77c10000 77c68000 msvcrt msvcrt.dll Wed Aug 04 15:59:14 2004 (41109752)
77c70000 77c93000 msv1_0 msv1_0.dll Wed Aug 04 15:59:11 2004 (4110974F)
77d40000 77dd0000 user32 user32.dll Thu Mar 03 02:09:29 2005 (42260159)
77dd0000 77e6b000 advapi32 advapi32.dll Wed Aug 04 15:56:23 2004 (411096A7)
77e70000 77f01000 rpcrt4 rpcrt4.dll Wed Aug 04 15:56:30 2004 (411096AE)
77f10000 77f57000 gdi32 gdi32.dll Thu Dec 29 10:54:35 2005 (43B34FEB)
77f60000 77fd6000 shlwapi shlwapi.dll Thu Jan 04 22:05:30 2007 (459D09AA)
77fe0000 77ff1000 secur32 secur32.dll Wed Aug 04 15:56:49 2004 (411096C1)
7c800000 7c8f4000 kernel32 kernel32.dll Wed Jul 05 18:55:00 2006 (44AB9A84)
7c900000 7c9b0000 ntdll ntdll.dll Wed Aug 04 15:56:36 2004 (411096B4)
Closing open log file c:\debuglog.txt

 

Random failures are usually caused by faulty RAM. Run a RAM test software and see what it reports.
http://oca.microsoft.com/en/windiag.asp

 

Yeah I tried running the memory tester. No error showed up, could be some other faults.