Resolved system crashes - BSOD x 5 - is it SP3?

I spoke too soon. the BSOD is back @ 16.13.

Well, at least Broni has declared my PC clean so its not an infection/malware etc and its NOT overclocking the RAM.

Going back to the start of this thread and will re-post the BSOD view shortly.

 

Here we go - fresh as can be:

Opened log file 'c:debuglog.txt'

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini121610-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 3) MP (4 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp3_gdr.100427-1636
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Thu Dec 16 16:10:34.906 2010 (UTC + 0:00)
System Uptime: 0 days 0:28:51.869
Loading Kernel Symbols
...............................................................
................................................................
.........
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 8054bfd2, a81f5b5c, 0}

Probably caused by : ntkrpamp.exe ( nt!ExAllocatePoolWithTag+66a )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 8054bfd2, The address that the exception occurred at
Arg3: a81f5b5c, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx ". The memory could not be "%s ".

FAULTING_IP:
nt!ExAllocatePoolWithTag+66a
8054bfd2 894804 mov dword ptr [eax+4],ecx

TRAP_FRAME: a81f5b5c -- (.trap 0xffffffffa81f5b5c)
.trap 0xffffffffa81f5b5c
Unable to read trap frame at a81f5b5c
.trap

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

LAST_CONTROL_TRANSFER: from 805c0d8c to 8054bfd2

STACK_TEXT:
a81f5c24 805c0d8c 00000001 00000001 e56b6f54 nt!ExAllocatePoolWithTag+0x66a
a81f5c48 805c148a 89938b20 a81f5d01 00000000 nt!ObpAllocateObject+0xc8
a81f5c7c 805ec5f3 a81f5d01 8b093150 013ae66c nt!ObCreateObject+0x12a
a81f5cc0 805ecea8 e3f56aa0 013ae66c 00000000 nt!SepDuplicateToken+0xff
a81f5d44 8054164c 000002c0 0000000c 013ae66c nt!NtDuplicateToken+0x13c
a81f5d44 7c90e514 000002c0 0000000c 013ae66c nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
013ae690 00000000 00000000 00000000 00000000 0x7c90e514


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExAllocatePoolWithTag+66a
8054bfd2 894804 mov dword ptr [eax+4],ecx

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!ExAllocatePoolWithTag+66a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4bd6e0e8

FAILURE_BUCKET_ID: 0x8E_nt!ExAllocatePoolWithTag+66a

BUCKET_ID: 0x8E_nt!ExAllocatePoolWithTag+66a

Followup: MachineOwner
---------

eax=658ebcd0 ebx=8b0980a0 ecx=8b0983f8 edx=0000004a esi=e59cfab8 edi=000001ff
eip=8054bfd2 esp=a81f5bd0 ebp=a81f5c24 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!ExAllocatePoolWithTag+0x66a:
8054bfd2 894804 mov dword ptr [eax+4],ecx ds:0023:658ebcd4=????????
ChildEBP RetAddr Args to Child
a81f5c24 805c0d8c 00000001 00000001 e56b6f54 nt!ExAllocatePoolWithTag+0x66a (FPO: [Non-Fpo])
a81f5c48 805c148a 89938b20 a81f5d01 00000000 nt!ObpAllocateObject+0xc8 (FPO: [Non-Fpo])
a81f5c7c 805ec5f3 a81f5d01 8b093150 013ae66c nt!ObCreateObject+0x12a (FPO: [Non-Fpo])
a81f5cc0 805ecea8 e3f56aa0 013ae66c 00000000 nt!SepDuplicateToken+0xff (FPO: [Non-Fpo])
a81f5d44 8054164c 000002c0 0000000c 013ae66c nt!NtDuplicateToken+0x13c (FPO: [Non-Fpo])
a81f5d44 7c90e514 000002c0 0000000c 013ae66c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ a81f5d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
013ae690 00000000 00000000 00000000 00000000 0x7c90e514
start end module name
804d7000 806e4000 nt ntkrpamp.exe Tue Apr 27 14:04:40 2010 (4BD6E0E8)
806e4000 80704d00 hal halmacpi.dll Sun Apr 13 19:31:27 2008 (4802517F)
a7aa2000 a7ac5180 Fastfat Fastfat.SYS Sun Apr 13 20:14:28 2008 (48025B94)
a826e000 a82aee00 HTTP HTTP.sys Tue Oct 20 17:20:15 2009 (4ADDE33F)
a83c7000 a83e0000 av5flt av5flt.sys unavailable (00000000)
a88c4000 a88c66c0 gdrv gdrv.sys Fri Mar 13 03:17:32 2009 (49B9D04C)
a8c6a000 a8c6d000 PavSRK PavSRK.sys unavailable (00000000)
a8cd6000 a8cfd000 PavProc PavProc.sys unavailable (00000000)
a8cfd000 a8d54380 srv srv.sys Thu Aug 26 14:39:48 2010 (4C766EA4)
a8e6d000 a8e99180 mrxdav mrxdav.sys Sun Apr 13 19:32:42 2008 (480251CA)
a9192000 a91a5000 pavdrv51 pavdrv51.sys unavailable (00000000)
a91a5000 a91a8900 ndisuio ndisuio.sys Sun Apr 13 19:55:57 2008 (4802573D)
abcf6000 abd0d900 dump_atapi dump_atapi.sys Sun Apr 13 19:40:29 2008 (4802539D)
abd0e000 abd89000 Wdf01000 Wdf01000.sys Thu Nov 02 08:54:18 2006 (4549B23A)
abdc9000 abdcf000 AODDriver AODDriver.sys Mon Oct 13 05:42:32 2008 (48F2D1B8)
abe01000 abe12000 APPFLT APPFLT.SYS unavailable (00000000)
abe12000 abe40000 IDSFLT IDSFLT.SYS unavailable (00000000)
abe40000 abeaf400 mrxsmb mrxsmb.sys Wed Feb 24 13:11:05 2010 (4B852569)
abee4000 abee6900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
abef8000 abefaf80 mouhid mouhid.sys Fri Aug 17 21:47:57 2001 (3B7D82FD)
abf00000 abf2ae80 rdbss rdbss.sys Sun Apr 13 20:28:38 2008 (48025EE6)
abf5b000 abf68000 PavTPK PavTPK.sys Tue Sep 29 10:29:23 2009 (4AC1D373)
abfcb000 abfecd00 afd afd.sys Thu Aug 14 11:04:35 2008 (48A40333)
abfed000 ac014c00 netbt netbt.sys Sun Apr 13 20:20:59 2008 (48025D1B)
ac019000 ac01c900 kbdhid kbdhid.sys Sun Apr 13 19:39:47 2008 (48025373)
ac025000 ac027880 hidusb hidusb.sys Sun Apr 13 19:45:27 2008 (480254C7)
ac02d000 ac030b00 usbscan usbscan.sys Sun Apr 13 19:45:34 2008 (480254CE)
ac03d000 ac062500 ipnat ipnat.sys Sun Apr 13 19:57:10 2008 (48025786)
ac083000 ac087000 fnetmon fnetmon.SYS unavailable (00000000)
ac08b000 ac0b1000 NETFLTDI NETFLTDI.SYS unavailable (00000000)
ac0b1000 ac109480 tcpip tcpip.sys Fri Jun 20 12:51:09 2008 (485B99AD)
ac10a000 ac11c600 ipsec ipsec.sys Sun Apr 13 20:19:42 2008 (48025CCE)
b92e9000 b9346f00 update update.sys Sun Apr 13 19:39:46 2008 (48025372)
b9347000 b9377000 neti1639 neti1639.sys unavailable (00000000)
b9417000 b9427e00 psched psched.sys Sun Apr 13 19:56:36 2008 (48025764)
b9428000 b943e580 ndiswan ndiswan.sys Sun Apr 13 20:20:41 2008 (48025D09)
b943f000 b9474000 Rtenicxp Rtenicxp.sys unavailable (00000000)
b9474000 b9496700 ks ks.sys Sun Apr 13 20:16:34 2008 (48025C12)
b9497000 b94ba200 USBPORT USBPORT.SYS Sun Apr 13 19:45:34 2008 (480254CE)
b94bb000 b94e3000 HDAudBus HDAudBus.sys Thu May 26 16:46:29 2005 (4295EF55)
b94e3000 b94f6f00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 19:44:39 2008 (48025497)
b94f7000 b99ad000 ati2mtag ati2mtag.sys Wed Feb 03 03:39:21 2010 (4B68EFE9)
b9de4000 b9de7c80 mssmbios mssmbios.sys Sun Apr 13 19:36:45 2008 (480252BD)
b9e14000 b9e2db80 Mup Mup.sys Sun Apr 13 20:17:05 2008 (48025C31)
b9e2e000 b9e5a980 NDIS NDIS.sys Sun Apr 13 20:20:35 2008 (48025D03)
b9e5b000 b9ee7600 Ntfs Ntfs.sys Sun Apr 13 20:15:49 2008 (48025BE5)
b9ee8000 b9efeb00 KSecDD KSecDD.sys Wed Jun 24 12:18:40 2009 (4A420B90)
b9eff000 b9f10f00 sr sr.sys Sun Apr 13 19:36:50 2008 (480252C2)
b9f11000 b9f30b00 fltmgr fltmgr.sys Sun Apr 13 19:32:58 2008 (480251DA)
b9f31000 b9f48900 atapi atapi.sys Sun Apr 13 19:40:29 2008 (4802539D)
b9f49000 b9f67880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
b9f68000 b9f78a80 pci pci.sys Sun Apr 13 19:36:43 2008 (480252BB)
b9f79000 b9fa6d80 ACPI ACPI.sys Sun Apr 13 19:36:33 2008 (480252B1)
ba0a8000 ba0b1180 isapnp isapnp.sys Sun Apr 13 19:36:40 2008 (480252B8)
ba0b8000 ba0c2580 MountMgr MountMgr.sys Sun Apr 13 19:39:45 2008 (48025371)
ba0c8000 ba0d4c80 VolSnap VolSnap.sys Sun Apr 13 19:41:00 2008 (480253BC)
ba0d8000 ba0e0e00 disk disk.sys Sun Apr 13 19:40:46 2008 (480253AE)
ba0e8000 ba0f4180 CLASSPNP CLASSPNP.SYS Sun Apr 13 20:16:21 2008 (48025C05)
ba0f8000 ba101200 PxHelp20 PxHelp20.sys Thu Mar 13 01:57:44 2008 (47D88A18)
ba108000 ba117100 ohci1394 ohci1394.sys Sun Apr 13 19:46:18 2008 (480254FA)
ba118000 ba125080 1394BUS 1394BUS.SYS Sun Apr 13 19:46:18 2008 (480254FA)
ba148000 ba157c00 serial serial.sys Sun Apr 13 20:15:44 2008 (48025BE0)
ba158000 ba164d00 i8042prt i8042prt.sys Sun Apr 13 20:17:59 2008 (48025C67)
ba168000 ba174880 rasl2tp rasl2tp.sys Sun Apr 13 20:19:43 2008 (48025CCF)
ba178000 ba182200 raspppoe raspppoe.sys Sun Apr 13 19:57:31 2008 (4802579B)
ba188000 ba193d00 raspptp raspptp.sys Sun Apr 13 20:19:47 2008 (48025CD3)
ba198000 ba1a0900 msgpc msgpc.sys Sun Apr 13 19:56:32 2008 (48025760)
ba1a8000 ba1b1f00 termdd termdd.sys Sun Apr 13 19:38:36 2008 (4802532C)
ba1b8000 ba1c2000 NDProxy NDProxy.SYS Tue Nov 02 15:17:02 2010 (4CD02B6E)
ba1d8000 ba1e6880 usbhub usbhub.sys Sun Apr 13 19:45:36 2008 (480254D0)
ba1f8000 ba200700 wanarp wanarp.sys Sun Apr 13 19:57:20 2008 (48025790)
ba208000 ba216d80 arp1394 arp1394.sys Sun Apr 13 19:51:22 2008 (4802562A)
ba218000 ba220780 netbios netbios.sys Sun Apr 13 19:56:01 2008 (48025741)
ba228000 ba237180 nic1394 nic1394.sys Sun Apr 13 19:51:22 2008 (4802562A)
ba238000 ba242000 WNMFLT WNMFLT.SYS unavailable (00000000)
ba248000 ba251000 ShlDrv51 ShlDrv51.sys unavailable (00000000)
ba258000 ba261000 PSFileDsk PSFileDsk.SYS Sat Oct 20 18:42:41 2007 (471A3E11)
ba268000 ba272e00 Fips Fips.SYS Sun Apr 13 19:33:27 2008 (480251F7)
ba278000 ba284000 DSAFLT DSAFLT.SYS unavailable (00000000)
ba2a8000 ba2b1000 HIDCLASS HIDCLASS.SYS Sun Apr 13 19:45:25 2008 (480254C5)
ba2b8000 ba2c5000 WDFLDR WDFLDR.SYS Thu Nov 02 08:54:05 2006 (4549B22D)
ba2c8000 ba2d7900 Cdfs Cdfs.SYS Sun Apr 13 20:14:21 2008 (48025B8D)
ba2e8000 ba2f0e00 intelppm intelppm.sys Sun Apr 13 19:31:31 2008 (48025183)
ba2f8000 ba302480 imapi imapi.sys Sun Apr 13 19:40:57 2008 (480253B9)
ba308000 ba317600 cdrom cdrom.sys Sun Apr 13 19:40:45 2008 (480253AD)
ba318000 ba326100 redbook redbook.sys Sun Apr 13 19:40:27 2008 (4802539B)
ba328000 ba32e180 PCIIDEX PCIIDEX.SYS Sun Apr 13 19:40:29 2008 (4802539D)
ba330000 ba334d00 PartMgr PartMgr.sys Sun Apr 13 19:40:48 2008 (480253B0)
ba338000 ba33e000 pavboot pavboot.sys unavailable (00000000)
ba340000 ba347000 pssnap pssnap.sys Sat Oct 20 18:42:36 2007 (471A3E0C)
ba360000 ba366000 RtNdPt5x RtNdPt5x.sys unavailable (00000000)
ba3a0000 ba3a7d80 usbccgp usbccgp.sys Sun Apr 13 19:45:38 2008 (480254D2)
ba3b0000 ba3b6700 USBSTOR USBSTOR.SYS Sun Apr 13 19:45:37 2008 (480254D1)
ba3b8000 ba3bf000 NuidFltr NuidFltr.sys Fri May 08 09:35:42 2009 (4A03EEDE)
ba3e0000 ba3e4500 watchdog watchdog.sys Sun Apr 13 19:44:59 2008 (480254AB)
ba440000 ba445080 usbuhci usbuhci.sys Sun Apr 13 19:45:34 2008 (480254CE)
ba448000 ba44f600 usbehci usbehci.sys Sun Apr 13 19:45:34 2008 (480254CE)
ba450000 ba456b00 fdc fdc.sys Sun Apr 13 19:40:25 2008 (48025399)
ba458000 ba45da00 mouclass mouclass.sys Sun Apr 13 19:39:47 2008 (48025373)
ba460000 ba464a80 TDI TDI.SYS Sun Apr 13 20:00:04 2008 (48025834)
ba468000 ba46c580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
ba470000 ba474080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
ba478000 ba47e000 kbdclass kbdclass.sys Sun Apr 13 19:39:46 2008 (48025372)
ba480000 ba485000 flpydisk flpydisk.sys Sun Apr 13 19:40:24 2008 (48025398)
ba490000 ba496180 HIDPARSE HIDPARSE.SYS Sun Apr 13 19:45:22 2008 (480254C2)
ba498000 ba49d200 vga vga.sys Sun Apr 13 19:44:40 2008 (48025498)
ba4a0000 ba4a4a80 Msfs Msfs.SYS Sun Apr 13 19:32:38 2008 (480251C6)
ba4a8000 ba4af880 Npfs Npfs.SYS Sun Apr 13 19:32:38 2008 (480251C6)
ba4b0000 ba4b6500 usbprint usbprint.sys Sun Apr 13 19:47:37 2008 (48025549)
ba4b8000 ba4bb000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
ba554000 ba556280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
ba5a0000 ba5a3d80 serenum serenum.sys Sun Apr 13 19:40:12 2008 (4802538C)
ba5a4000 ba5a6780 ndistapi ndistapi.sys Sun Apr 13 19:57:27 2008 (48025797)
ba5a8000 ba5a9b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
ba5aa000 ba5ab100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
ba5dc000 ba5dd100 swenum swenum.sys Sun Apr 13 19:39:52 2008 (48025378)
ba5e4000 ba5e5280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
ba5e8000 ba5e9f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
ba5ea000 ba5eb080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
ba5ec000 ba5ed080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
ba5ee000 ba5ef080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
ba5f4000 ba5f5100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
ba64a000 ba64b400 atidgllk atidgllk.sys Fri Mar 11 19:34:53 2005 (4231F2DD)
ba670000 ba670d00 pciide pciide.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
ba6f6000 ba6f6d00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)
ba731000 ba731c00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
ba7d4000 ba7d4b80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)
ba7ec000 ba7eca80 PQNTDrv PQNTDrv.SYS Thu May 06 04:48:39 2004 (4099B597)
bf000000 bf011600 dxg dxg.sys Sun Apr 13 19:38:27 2008 (48025323)
bf012000 bf060000 ati2dvag ati2dvag.dll Wed Feb 03 03:39:39 2010 (4B68EFFB)
bf060000 bf0fc000 ati2cqag ati2cqag.dll Wed Feb 03 03:06:07 2010 (4B68E81F)
bf0fc000 bf196000 atikvmag atikvmag.dll Wed Feb 03 03:15:06 2010 (4B68EA3A)
bf196000 bf1fc000 atiok3x2 atiok3x2.dll Wed Feb 03 03:32:50 2010 (4B68EE62)
bf1fc000 bf5629e0 ati3duag ati3duag.dll Wed Feb 03 03:50:38 2010 (4B68F28E)
bf563000 bf776680 ativvaxx ativvaxx.dll Wed Feb 03 03:35:13 2010 (4B68EEF1)
bf800000 bf9c4780 win32k win32k.sys Tue Oct 26 14:24:50 2010 (4CC6D6A2)
bffa0000 bffe6d00 ATMFD ATMFD.DLL Thu Oct 28 14:13:22 2010 (4CC976F2)

Unloaded modules:
a8b56000 a8b59000 RkPavproc1.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00003000
a87b8000 a87bb000 RkPavproc1.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00003000
a80a6000 a80aa000 GVTDrv.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00004000
a8e31000 a8e45000 Parport.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00014000
b99ad000 b99b1000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00004000
ba488000 ba48d000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00005000
b99b1000 b99b4000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00003000
Closing open log file c:debuglog.txt

 

Really? I am not trying to question your advice (and I have done the format & reinstall job more than a few times), but would you mind a bit further explanation or your suggestion please?

 

Ok thanks for this. I am in the process of updating my drivers. Then I'll do the memory test. Might not be this side of Xmas though, just got a bit too much to do.

Will update as soon as I get any results.

Merry Christmas One and All