Frequent Shutdown

Yagyesh · Jan 3, 2011

Hi,
I have run the "BSOD Dump & System File Collection application" on a Vista Business 32-bit running computer. And have attached the required files with this post.
Request your expert comments on this please.
My observation that I'd like to share with you is that the problem has started after we had replaced the 1 GB RAM (512 x 2) with one 2 GB RAM module. The new module is different from the existing RAM in terms of frequency also. It is 667 MHz while the previous ones were 533 MHz.
I am also attaching the CPU-Z report of the machine, if that could be of any more help in your diagnosis.
Many thanks for your time.
Regards
Yagyesh

Shadowjk · Jan 3, 2011

Please Be advised I am not the Best when it comes to BSOD but we do have BSOD Debuggers at hand,

Could you please write down the Status of a BSOD if it happens again and also the Stop Error

I will Notify a BSOD Debugger to help you with your Situation

Many Thanks,
Josh

richc46 · Jan 3, 2011

Code:

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp12_Windows_NT6_BSOD_jcgriff2[1].zip\Windows_NT6_BSOD_jcgriff2\Mini123110-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81c38000 PsLoadedModuleList = 0x81d4fc70
Debug session time: Fri Dec 31 03:28:51.489 2010 (GMT-5)
System Uptime: 0 days 1:45:23.189
Loading Kernel Symbols
...............................................................
................................................................
................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {c032aef8, 0, 0, 81c9b530}
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
Probably caused by : SYMEVENT.SYS ( SYMEVENT+141f9 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: c032aef8, memory referenced
Arg2: 00000000, IRQL
Arg3: 00000000, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 81c9b530, address which referenced memory
Debugging Details:
------------------
 
READ_ADDRESS: GetPointerFromAddress: unable to read from 81d6f868
Unable to read MiSystemVaType memory at 81d4f420
 c032aef8 
CURRENT_IRQL:  0
FAULTING_IP: 
nt!MiEmptyWorkingSet+133
81c9b530 8b02            mov     eax,dword ptr [edx]
CUSTOMER_CRASH_COUNT:  4
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  lsass.exe
TRAP_FRAME:  b41ce874 -- (.trap 0xffffffffb41ce874)
ErrCode = 00000000
eax=c032aef8 ebx=873ec9c0 ecx=9019cb90 edx=c032aef8 esi=848458c0 edi=000000f2
eip=81c9b530 esp=b41ce8e8 ebp=b41ce990 iopl=0         nv up ei ng nz na po cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010283
nt!MiEmptyWorkingSet+0x133:
81c9b530 8b02            mov     eax,dword ptr [edx]  ds:0023:c032aef8=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from 81c9b530 to 81c85fd9
STACK_TEXT:  
b41ce874 81c9b530 badb0d00 c032aef8 00001000 nt!KiTrap0E+0x2e1
b41ce990 81f0616c 873ec9c0 00000001 848458c0 nt!MiEmptyWorkingSet+0x133
b41ce9cc 81e1ea2f ffffffff ffffffff 00000000 nt!MmAdjustWorkingSetSizeEx+0x4e
b41ceaac 81e4cb5a 00ffffff 01000038 00ce3601 nt!PspSetQuotaLimits+0x24d
b41cecb8 8cfb01f9 ffffffff 00000001 00d6fda4 nt!NtSetInformationProcess+0x5e7
WARNING: Stack unwind information not available. Following frames may be wrong.
b41ced4c 81c82c7a ffffffff 00000001 00d6fda4 SYMEVENT+0x141f9
b41ced4c 0000003b ffffffff 00000001 00d6fda4 nt!KiFastCallEntry+0x12a
00000001 00000000 00000000 00000000 00000000 0x3b
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
SYMEVENT+141f9
8cfb01f9 ??              ???
SYMBOL_STACK_INDEX:  5
SYMBOL_NAME:  SYMEVENT+141f9
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: SYMEVENT
IMAGE_NAME:  SYMEVENT.SYS
DEBUG_FLR_IMAGE_TIMESTAMP:  478bf054
FAILURE_BUCKET_ID:  0xA_SYMEVENT+141f9
BUCKET_ID:  0xA_SYMEVENT+141f9
Followup: MachineOwner
---------
0: kd> lmtsmn
start    end        module name
80689000 806cf000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
94442000 9448a000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
951f4000 951fd000   asyncmac asyncmac.sys Sat Jan 19 00:56:29 2008 (4791910D)
807ce000 807d6000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
807d6000 807f4000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
80719000 80723000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
8cfef000 8cff6000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
80492000 8049a000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
af293000 af2ac000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
81550000 8155e000   cdd      cdd.dll      unavailable (00000000)
b0d03000 b0d19000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
8c747000 8c75f000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
8c963000 8c996000   CHDRT32  CHDRT32.sys  Tue Mar 04 13:31:57 2008 (47CD959D)
804db000 805bb000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
87d9c000 87dbd000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
8049a000 804db000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
8c779000 8c77c780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
80716000 80718900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
8c75f000 8c761400   cpqbttn  cpqbttn.sys  Wed Feb 24 11:47:50 2010 (4B855836)
95097000 950a4000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
87dbd000 87dc6000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
95025000 95080000   csc      csc.sys      Sat Apr 11 00:14:49 2009 (49E01939)
95080000 95097000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
87d8b000 87d9c000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
8c9c3000 8c9e8000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
950a4000 950af000   dump_dumpata dump_dumpata.sys Sat Apr 11 00:39:09 2009 (49E01EED)
950af000 950b9000   dump_msahci dump_msahci.sys Sat Apr 11 00:39:11 2009 (49E01EEF)
950b9000 950c3000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8bec0000 8bf61000   dxgkrnl  dxgkrnl.sys  Thu Sep 24 21:27:14 2009 (4ABC1C72)
8c6c5000 8c6ebc00   e100b325 e100b325.sys Fri Nov 16 13:53:32 2007 (473DE72C)
87d64000 87d8b000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
945a2000 94600000   eeCtrl   eeCtrl.sys   Fri May 21 17:44:53 2010 (4BF6FED5)
95008000 95025000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:53 2010 (4BF6FED5)
b0d3d000 b0d65000   fastfat  fastfat.SYS  Sat Apr 11 00:13:52 2009 (49E01900)
805ed000 805fd000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
805bb000 805ed000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
8cfdf000 8cfe8000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
87aec000 87b07000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
81c05000 81c38000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
8bf6d000 8bffa000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
8c762000 8c772000   HIDCLASS HIDCLASS.SYS Sat Apr 11 00:42:47 2009 (49E01FC7)
8c772000 8c778380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
8cdd0000 8cdd9000   hidusb   hidusb.sys   Sat Apr 11 00:42:48 2009 (49E01FC8)
8cd0e000 8cdc3000   HSX_CNXT HSX_CNXT.sys Wed Jun 20 14:28:20 2007 (467971C4)
8cc0b000 8cd0e000   HSX_DPV  HSX_DPV.sys  Wed Jun 20 14:29:51 2007 (4679721F)
87b93000 87bd1000   HSXHWAZL HSXHWAZL.sys Wed Jun 20 14:28:32 2007 (467971D0)
af209000 af276000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
8c6ec000 8c6ff000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
8b803000 8bec0000   igdkmd32 igdkmd32.sys Wed Jun 18 16:38:16 2008 (48597238)
8077c000 80783000   intelide intelide.sys Sat Jan 19 00:49:42 2008 (47918F76)
87b07000 87b16000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
8c6ff000 8c70a000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8c949000 8c952000   kbdhid   kbdhid.sys   Sat Apr 11 00:38:40 2009 (49E01ED0)
8040a000 80411000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
8c8d3000 8c8fd000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
82207000 82278000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
9519d000 951ad000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
950d2000 950ed000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
80411000 80481000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 02:23:19 2009 (49E03757)
af3db000 af3de180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:26:59 2006 (449716A3)
8cdc3000 8cdd0000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
950c3000 950d2000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8c73c000 8c747000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8cdd9000 8cde1000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
807be000 807ce000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
af2ac000 af2cd000   mrxdav   mrxdav.sys   Sat Apr 11 00:14:39 2009 (49E0192F)
af2cd000 af2ec000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
af2ec000 af325000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
af325000 af33d000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
807f4000 807fe000   msahci   msahci.sys   Sat Apr 11 00:39:11 2009 (49E01EEF)
8cdf5000 8ce00000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
806d8000 806e0000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
8c786000 8c7b5000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
82383000 823ae000   msrpc    msrpc.sys    unavailable (00000000)
8c8fd000 8c907000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
87d55000 87d64000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
8cfc1000 8cfd4580   NAVENG   NAVENG.SYS   Mon Dec 13 20:42:27 2010 (4D06CB83)
8ce51000 8cf9b900   NAVEX15  NAVEX15.SYS  Mon Dec 13 20:51:18 2010 (4D06CD96)
82278000 82383000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
87b2d000 87b38000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
951d7000 951e1000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
87b38000 87b5b000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
8c952000 8c963000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
944d2000 944e0000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
9448a000 944bc000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
823ae000 823e9000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
8c00e000 8c66d000   NETwLv32 NETwLv32.sys Mon Aug 16 10:26:04 2010 (4C694A7C)
8c9e8000 8c9f6000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
94598000 945a2000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
81c38000 81ff1000   nt       ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
87c04000 87d14000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
8cfe8000 8cfef000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
951ad000 951d7000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
944bc000 944d2000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
80707000 80716000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
806e0000 80707000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
80783000 80791000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
80791000 807be000   pcmcia   pcmcia.sys   Sat Apr 11 00:19:14 2009 (49E01A42)
b0c07000 b0ce5000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
8c996000 8c9c3000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
80481000 80492000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
8cc00000 8cc09000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
87b16000 87b2d000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
87b5b000 87b6a000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
87b6a000 87b7e000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
87b7e000 87b93000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
9455c000 94598000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
8cff6000 8cffe000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8c802000 8c88b000   rdpdr    rdpdr.sys    Sat Apr 11 00:52:32 2009 (49E02210)
8cded000 8cdf5000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
951e1000 951f4000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
b0ce5000 b0cef000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
9442e000 94442000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
944f3000 9455c000   SPBBCDrv SPBBCDrv.sys Wed May 14 22:14:28 2008 (482B9C84)
87d4d000 87d55000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
950ed000 9519d000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
8ce07000 8ce51000   SRTSP    SRTSP.SYS    Thu Aug 14 00:51:36 2008 (48A3B9D8)
8cfd5000 8cfde080   SRTSPX   SRTSPX.SYS   Thu Aug 14 00:53:49 2008 (48A3BA5D)
af365000 af3b3000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
af33d000 af365000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
af276000 af293000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
8c7b5000 8c7f6000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
8c8d1000 8c8d2380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8cf9c000 8cfc1000   SYMEVENT SYMEVENT.SYS Mon Jan 14 18:29:24 2008 (478BF054)
b0d19000 b0d1e200   SYMREDRV SYMREDRV.SYS Tue Aug 19 16:18:20 2008 (48AB2A8C)
94400000 9442d200   SYMTDI   SYMTDI.SYS   Tue Aug 19 16:17:48 2008 (48AB2A6C)
8c70a000 8c739100   SynTP    SynTP.sys    Thu Mar 27 21:14:58 2008 (47EC4692)
87a02000 87aec000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
b0cef000 b0cfb000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
8c000000 8c00b000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
823e9000 823ff000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
8c89b000 8c8d1000   teefer2  teefer2.sys  Thu Jul 10 06:57:41 2008 (4875EB25)
8c88b000 8c89b000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
814f0000 814f9000   TSDDD    TSDDD.dll    Sat Jan 19 01:01:09 2008 (47919225)
87df3000 87dfc000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
87de8000 87df3000   tunnel   tunnel.sys   Sat Jan 19 00:55:50 2008 (479190E6)
8c907000 8c914000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
8c73a000 8c73b700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8c6b6000 8c6c5000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8c914000 8c949000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8c678000 8c6b6000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
b0d28000 b0d3d000   USBSTOR  USBSTOR.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
8c66d000 8c678000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
8cde1000 8cded000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
87bd1000 87bf2000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
80723000 80732000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
80732000 8077c000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
87d14000 87d4d000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
944e0000 944f3000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8bf61000 8bf6d000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
80600000 8067c000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
8067c000 80689000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
812d0000 814d3000   win32k   win32k.sys   Mon Oct 18 09:31:09 2010 (4CBC4C1D)
8c77d000 8c786000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
806cf000 806d8000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
87bf2000 87c00000   wpsdrvnt wpsdrvnt.sys Thu Sep 04 18:08:24 2008 (48C05C58)
af3b3000 af3daa80   WpsHelper WpsHelper.sys Thu Sep 02 21:14:42 2010 (4C804C02)
b0d7a000 b0d8c000   WUDFPf   WUDFPf.sys   Sat Jan 19 00:52:49 2008 (47919031)
b0d65000 b0d79580   WUDFRd   WUDFRd.sys   Sat Jan 19 00:53:04 2008 (47919040)
b0cfb000 b0d03000   xaudio   xaudio.sys   Tue Jul 10 17:27:55 2007 (4693F9DB)
Unloaded modules:
b0d1f000 b0d28000   COH_Mon.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87dc6000 87dd3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87dd3000 87dde000   dump_pciidex
    Timestamp: unavailable (00000000)
    Checksum:  00000000
87dde000 87de8000   dump_msahci.
    Timestamp: unavailable (00000000)
    Checksum:  00000000

The reports that you have submitted reveal clues to the cause of your problem. They do not give a definitive answer. The more reports that we receive the more clues are made available improving our chances of finding a solution to your problem. You may have to experience several more BSODs until the final answer is discovered.
The reports that you have submitted indicate problems with one or two areas. The first and most likely is a conflict with your Symantec Products, plese unistall them all with the uninstall tool
The second potential problem is hardware (possibly memory). If you get more BSODS, I will suggest a memory test unless new evidence is presented.

If overclocking restore normal settings

SFC /scannow
System Files - SFC Command

Scan with your Anti Virus

http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN&ln=en_US

:

niemiro · Jan 3, 2011

Hello!

In terms of your drivers, you are actually pretty up to date. However, you might want to focus on these few. If they are Microsoft drivers, then not to worry:

Code:

8c2b7000 8c2ddc00   e100b325 e100b325.sys Fri Nov 16 18:53:32 2007 (473DE72C)
90e000 8c9c3000   HSX_CNXT HSX_CNXT.sys Wed Jun 20 19:28:20 2007 (467971C4)
8c80b000 8c90e000   HSX_DPV  HSX_DPV.sys  Wed Jun 20 19:29:51 2007 (4679721F)
87bad000 87beb000   HSXHWAZL HSXHWAZL.sys Wed Jun 20 19:28:32 2007 (467971D0)
ac053000 ac056180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 22:26:59 2006 (449716A3)
ac135000 ac13f000   secdrv   secdrv.SYS   Wed Sep 13 14:18:32 2006 (45080528)

Good luck!

Richard

richc46 · Jan 3, 2011

They are all from conexant except
secndrv which is a MS driver, forget about that one

I agree with Rich it might be a good idea to update to avoid future problems

Yagyesh · Jan 3, 2011

Thank you guys !
We removed the 2 GB RAM from the machine, and put back the 1 GB (512 x 2), but the BSOD happened again.
I will get you the details again tomorrow. Also, do you think uploading the Memory.DMP may be of any help in your diagnosis ? Please let me know.
On the memory Test, we did that when the 2 GB module was in, but it passed all the tests successfully.
We have Symantec EndPoint Protection installed across our offices; and this model of laptop (HP 520) is used by about 10 other users without any issues ! Would you suggest posting in the Symantec Forums could also be of help ?
I'll try to get the STOP error message for Josh.
Thanks again !
Regards
Yagyesh

niemiro · Jan 3, 2011

Yagyesh said:
Thank you guys !
We removed the 2 GB RAM from the machine, and put back the 1 GB (512 x 2), but the BSOD happened again.
I will get you the details again tomorrow. Also, do you think uploading the Memory.DMP may be of any help in your diagnosis ? Please let me know.
On the memory Test, we did that when the 2 GB module was in, but it passed all the tests successfully.
We have Symantec EndPoint Protection installed across our offices; and this model of laptop (HP 520) is used by about 10 other users without any issues ! Would you suggest posting in the Symantec Forums could also be of help ?
I'll try to get the STOP error message for Josh.
Thanks again !
Regards
Yagyesh

Hello!

Three of your Minidumps pointed to Symantec. However, it sounds like you can't just remove it. As something you can do, update those five drivers, or however many there were.

Thanks!

Richard

richc46 · Jan 3, 2011

The only tool that I have is the mini dmp reports
To me they point to Symantec as the cause.
All I can say is that I have seen that before and removing Symantec and using MSE has solved the problem. Rich has astutely pointed out that there are some aged drivers. Updating them will not hurt, but my feeling is that the problem will remain unless something is done with Symantec. Three dumps give the same conclusion. Posting in the other Forum, cann not hurt, but I dont think it will be much help, either.

Yagyesh · Jan 4, 2011

Hi guys,
> We completed the Windows Update with Optional updates.
> SFC result said, "Verification 100% complete.
Windows resource protection did not find any integrity violations".
> We uninstalled Symantec Endpoint Protection (SEP), restarted the computer, and installed Microsoft Security Essentials.
> The Blue Screen appeared even after the SEP was uninstalled, and read out as follows:-
-------------------------------------------------------------------------------------------
A problem has been detected and windows has been shutdown
to prevent damage to the computer.
Check to be sure you have adequate disk space if a driver
is identified in the stop message. disable the driver or
check with manufacturer for driver updates. try changing
video adapters.
Check with your hardware vendor for any BIOS updates.
disable bios memory options such as cashing or shadowing.
Technical Information :
STOP:0X0000008E (0XC0000005, 0X81E04D34, 0XBA28073C,
0X00000000).
---------------------------------------------------------------------------------------------
> After the above performed steps, we ran the "BSOD Dump & System File Collection application" again. And I am attaching the Output Folder to this post please.
Awaiting your Expert comments !
Regards
Yagyesh

richc46 · Jan 4, 2011

STOP 0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint in startup without having a debugger attached, Hardware incompatibility, Faulty system service, 3rd party remote control, Memory

STOP 0x0000001A: MEMORY_MANAGEMENT Usual causes: Device driver, memory, kernel

STOP 0x000000F4: CRITICAL_OBJECT_TERMINATION Usual causes: None Given

STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA Usual causes: Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
 
Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_Windows_NT6_BSOD_jcgriff2_2[1].zip\Windows_NT6_BSOD_jcgriff2\Mini010311-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81c33000 PsLoadedModuleList = 0x81d4ac70
Debug session time: Mon Jan  3 04:38:22.078 2011 (GMT-5)
System Uptime: 0 days 0:03:28.750
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, 877a9d90, 877a9edc, 81e59710}
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
Probably caused by : csrss.exe
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 877a9d90, Terminating object
Arg3: 877a9edc, Process image file name
Arg4: 81e59710, Explanatory message (ascii)
Debugging Details:
------------------
 
PROCESS_OBJECT: 877a9d90
IMAGE_NAME:  csrss.exe
DEBUG_FLR_IMAGE_TIMESTAMP:  0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000 
PROCESS_NAME:  csrss.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
BUGCHECK_STR:  0xF4_C0000005
CUSTOMER_CRASH_COUNT:  4
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
CURRENT_IRQL:  0
STACK_TEXT:  
8ac9f460 81ec5780 000000f4 00000003 877a9d90 nt!KeBugCheckEx+0x1e
8ac9f484 81e23fbd 81e59710 877a9edc 877a9fb8 nt!PspCatchCriticalBreak+0x73
8ac9f4b4 81e23f64 877a9d90 87833980 c0000005 nt!PspTerminateAllThreads+0x2c
8ac9f4e8 8dfaa1c9 ffffffff c0000005 87520a98 nt!NtTerminateProcess+0x1c1
WARNING: Stack unwind information not available. Following frames may be wrong.
8ac9f56c 81c7dc7a ffffffff c0000005 8ac9f9b0 SYMEVENT+0x141c9
8ac9f56c 00000000 ffffffff c0000005 8ac9f9b0 nt!KiFastCallEntry+0x12a
8ac9f5dc 00000000 81c7cccd 00000008 00000246 0x0
 
STACK_COMMAND:  kb
FOLLOWUP_NAME:  MachineOwner
FAILURE_BUCKET_ID:  0xF4_C0000005_IMAGE_csrss.exe
BUCKET_ID:  0xF4_C0000005_IMAGE_csrss.exe
Followup: MachineOwner
---------
0: kd> lmtsmn
start    end        module name
80694000 806da000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
95859000 958a1000   afd      afd.sys      Sat Apr 11 00:47:01 2009 (49E020C5)
959f3000 959fc000   asyncmac asyncmac.sys Sat Jan 19 00:56:29 2008 (4791910D)
807d9000 807e1000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
807e1000 807ff000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
80724000 8072e000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
8dfe9000 8dff0000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
80492000 8049a000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
b0a8c000 b0aa5000   bowser   bowser.sys   Sat Jan 19 00:28:26 2008 (47918A7A)
81650000 8165e000   cdd      cdd.dll      unavailable (00000000)
b18ff000 b1915000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
8d741000 8d759000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
8db68000 8db9b000   CHDRT32  CHDRT32.sys  Tue Mar 04 13:31:57 2008 (47CD959D)
804db000 805bb000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
88f98000 88fb9000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
8049a000 804db000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
8d773000 8d776780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
80721000 80723900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
8d759000 8d75b400   cpqbttn  cpqbttn.sys  Wed Feb 24 11:47:50 2010 (4B855836)
962ed000 962fa000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
88fb9000 88fc2000   crcdisk  crcdisk.sys  Sat Jan 19 00:50:29 2008 (47918FA5)
9627b000 962d6000   csc      csc.sys      Sat Apr 11 00:14:49 2009 (49E01939)
962d6000 962ed000   dfsc     dfsc.sys     Sat Apr 11 00:14:12 2009 (49E01914)
88f87000 88f98000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
8dbc8000 8dbed000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
962fa000 96305000   dump_dumpata dump_dumpata.sys Sat Apr 11 00:39:09 2009 (49E01EED)
96305000 9630f000   dump_msahci dump_msahci.sys Sat Apr 11 00:39:11 2009 (49E01EEF)
9630f000 96319000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8cec8000 8cf69000   dxgkrnl  dxgkrnl.sys  Thu Sep 24 21:27:14 2009 (4ABC1C72)
8d6bf000 8d6e5c00   e100b325 e100b325.sys Fri Nov 16 13:53:32 2007 (473DE72C)
88f60000 88f87000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
96200000 9625e000   eeCtrl   eeCtrl.sys   Fri May 21 17:44:53 2010 (4BF6FED5)
9625e000 9627b000   EraserUtilRebootDrv EraserUtilRebootDrv.sys Fri May 21 17:44:53 2010 (4BF6FED5)
805ed000 805fd000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
805bb000 805ed000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
8dfd9000 8dfe2000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
88cf6000 88d11000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
81c00000 81c33000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
88d20000 88dad000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
8d75c000 8d76c000   HIDCLASS HIDCLASS.SYS Sat Apr 11 00:42:47 2009 (49E01FC7)
8d76c000 8d772380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
8ddc9000 8ddd2000   hidusb   hidusb.sys   Sat Apr 11 00:42:48 2009 (49E01FC8)
8dd07000 8ddbc000   HSX_CNXT HSX_CNXT.sys Wed Jun 20 14:28:20 2007 (467971C4)
8dc04000 8dd07000   HSX_DPV  HSX_DPV.sys  Wed Jun 20 14:29:51 2007 (4679721F)
88dad000 88deb000   HSXHWAZL HSXHWAZL.sys Wed Jun 20 14:28:32 2007 (467971D0)
b0a02000 b0a6f000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
8d6e6000 8d6f9000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
8c80b000 8cec8000   igdkmd32 igdkmd32.sys Wed Jun 18 16:38:16 2008 (48597238)
80787000 8078e000   intelide intelide.sys Sat Jan 19 00:49:42 2008 (47918F76)
88d11000 88d20000   intelppm intelppm.sys Sat Jan 19 00:27:20 2008 (47918A38)
8d6f9000 8d704000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8db4e000 8db57000   kbdhid   kbdhid.sys   Sat Apr 11 00:38:40 2009 (49E01ED0)
8040a000 80411000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
8dad8000 8db02000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
82203000 82274000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
959b9000 959c9000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
96328000 96343000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
80411000 80481000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Apr 11 02:23:19 2009 (49E03757)
b0bd4000 b0bd7180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:26:59 2006 (449716A3)
8ddbc000 8ddc9000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
96319000 96328000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8d736000 8d741000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8ddd2000 8ddda000   mouhid   mouhid.sys   Sat Jan 19 00:49:16 2008 (47918F5C)
807c9000 807d9000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
b0aa5000 b0ac6000   mrxdav   mrxdav.sys   Sat Apr 11 00:14:39 2009 (49E0192F)
b0ac6000 b0ae5000   mrxsmb   mrxsmb.sys   Tue Feb 23 06:10:12 2010 (4B83B794)
b0ae5000 b0b1e000   mrxsmb10 mrxsmb10.sys Tue Feb 23 06:10:17 2010 (4B83B799)
b0b1e000 b0b36000   mrxsmb20 mrxsmb20.sys Tue Feb 23 06:10:12 2010 (4B83B794)
80600000 8060a000   msahci   msahci.sys   Sat Apr 11 00:39:11 2009 (49E01EEF)
8cff2000 8cffd000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
806e3000 806eb000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
8d780000 8d7af000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
8237f000 823aa000   msrpc    msrpc.sys    Sat Apr 11 00:37:32 2009 (49E01E8C)
8db02000 8db0c000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
88f51000 88f60000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
8dfbb000 8dfce580   NAVENG   NAVENG.SYS   Mon Dec 13 20:42:27 2010 (4D06CB83)
8de4b000 8df95900   NAVEX15  NAVEX15.SYS  Mon Dec 13 20:51:18 2010 (4D06CD96)
82274000 8237f000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
8cf8c000 8cf97000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
963f3000 963fd000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
8cf97000 8cfba000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
8db57000 8db68000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
958e9000 958f7000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
958a1000 958d3000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
823aa000 823e5000   NETIO    NETIO.SYS    Sat Apr 11 00:46:21 2009 (49E0209D)
8d008000 8d667000   NETwLv32 NETwLv32.sys Mon Aug 16 10:26:04 2010 (4C694A7C)
88deb000 88df9000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
959af000 959b9000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
81c33000 81fec000   nt       ntkrpamp.exe Tue Jun 08 10:36:44 2010 (4C0E557C)
88e00000 88f10000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
8dfe2000 8dfe9000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
959c9000 959f3000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
958d3000 958e9000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
80712000 80721000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
806eb000 80712000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
8078e000 8079c000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
8079c000 807c9000   pcmcia   pcmcia.sys   Sat Apr 11 00:19:14 2009 (49E01A42)
b1803000 b18e1000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
8db9b000 8dbc8000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
80481000 80492000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
8c800000 8c809000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8cf75000 8cf8c000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
8cfba000 8cfc9000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
8cfc9000 8cfdd000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8cfdd000 8cff2000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
95973000 959af000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
8dbed000 8dbf5000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
8da07000 8da90000   rdpdr    rdpdr.sys    Sat Apr 11 00:52:32 2009 (49E02210)
8dbf5000 8dbfd000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
88fc2000 88fd5000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
b18e1000 b18eb000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
95845000 95859000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
9590a000 95973000   SPBBCDrv SPBBCDrv.sys Wed May 14 22:14:28 2008 (482B9C84)
88f49000 88f51000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
96343000 963f3000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
8de01000 8de4b000   SRTSP    SRTSP.SYS    Thu Aug 14 00:51:36 2008 (48A3B9D8)
8dfcf000 8dfd8080   SRTSPX   SRTSPX.SYS   Thu Aug 14 00:53:49 2008 (48A3BA5D)
b0b5e000 b0bac000   srv      srv.sys      Mon Sep 06 09:45:36 2010 (4C84F080)
b0b36000 b0b5e000   srv2     srv2.sys     Mon Sep 06 09:45:21 2010 (4C84F071)
b0a6f000 b0a8c000   srvnet   srvnet.sys   Mon Sep 06 09:45:18 2010 (4C84F06E)
8d7af000 8d7f0000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
8dad6000 8dad7380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8df96000 8dfbb000   [B]SYMEVENT SYMEVENT.SYS Mon Jan 14 18:29:24 2008 (478BF054)[/B]
[B]b1915000 b191a200   SYMREDRV SYMREDRV.SYS Tue Aug 19 16:18:20 2008 (48AB2A8C[/B])
95817000 95844200   [B]SYMTDI   SYMTDI.SYS   Tue Aug 19 16:17:48 2008 (48AB2A6C[/B])
8d704000 8d733100   SynTP    SynTP.sys    Thu Mar 27 21:14:58 2008 (47EC4692)
88c0c000 88cf6000   tcpip    tcpip.sys    Wed Jun 16 09:45:41 2010 (4C18D585)
b18eb000 b18f7000   tcpipreg tcpipreg.sys Tue Dec 08 12:26:18 2009 (4B1E8C3A)
8d7f0000 8d7fb000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
823e5000 823fb000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
8daa0000 8dad6000   teefer2  teefer2.sys  Thu Jul 10 06:57:41 2008 (4875EB25)
8da90000 8daa0000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
81630000 81639000   TSDDD    TSDDD.dll    Sat Jan 19 01:01:09 2008 (47919225)
88fef000 88ff8000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
88fe4000 88fef000   tunnel   tunnel.sys   Sat Jan 19 00:55:50 2008 (479190E6)
8db0c000 8db19000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
8d734000 8d735700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
8d6b0000 8d6bf000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8db19000 8db4e000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
8d672000 8d6b0000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
8d667000 8d672000   usbuhci  usbuhci.sys  Sat Jan 19 00:53:20 2008 (47919050)
8dff0000 8dffc000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
8ddda000 8ddfb000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
8072e000 8073d000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
8073d000 80787000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
88f10000 88f49000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
958f7000 9590a000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8cf69000 8cf75000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
8060b000 80687000   Wdf01000 Wdf01000.sys Sat Jan 19 00:52:21 2008 (47919015)
80687000 80694000   WDFLDR   WDFLDR.SYS   Sat Jan 19 00:52:19 2008 (47919013)
81410000 81613000   win32k   win32k.sys   Mon Oct 18 09:31:09 2010 (4CBC4C1D)
8d777000 8d780000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
806da000 806e3000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
95809000 95817000   wpsdrvnt wpsdrvnt.sys Thu Sep 04 18:08:24 2008 (48C05C58)
b0bac000 b0bd3a80   WpsHelper WpsHelper.sys Thu Sep 02 21:14:42 2010 (4C804C02)
b18f7000 b18ff000   xaudio   xaudio.sys   Tue Jul 10 17:27:55 2007 (4693F9DB)

You have given me about 7 dump reports. The reasons given are listed at the top of this post.
I have the following suggestions. One report (shown here still mentions some Symantec Drivers, they must be removed. They are marked in bold above.
Still another report mentions the lead Microsoft Graphics driver. These MS drivers rarely been the cause of a problem, but merely show where the problem may be, it appears to be graphics again.
Another report mentions memory.

May I suggest remove all the Symantec (Norton Drivers). Then go to search type cmd in cmd type driverquery. Make sure that all drivers beginning with sym are gone. If some are still present post and I will let you know if they are Symantec.
Take the memory test.
Download memtest86 and test RAM
www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
Run for 8 passes
If passes try a good stick in each slot for 3 passes
If fails do the same for 8 passes.
Please be sure that prior suggestions regarding the graphics driver were completed.

Yagyesh · Jan 5, 2011

Hi,
> We used the "Cleanwipe" utility to completely remove the Symantec Endpoint Protection.
> Upon running "Driverquery" the following drivers with "sym" showed up: symc8xx, sym_hi, sym_u3.
> We used the "Intel Driver Update Utility," and updated the Graphics driver.
> Sorry, we couldn't run the Memory Tests (though we did, few days back) today, as user could not spare the machine for long.
Please let me know if you'd want me to perform any more steps.
Thanks
Yagyesh

richc46 · Jan 5, 2011

Dont remove those drivers. They do not appear to be part of Symantec.
If you get additional BSODs. Post the reports

Yagyesh · Jan 7, 2011

Hi,
Please find the latest BSOD dumps attached with this post.
Thanks for your help.
Regards
Yagyesh

richc46 · Jan 7, 2011

Sorry no report posted.

Yagyesh · Jan 10, 2011

I am sorry...I remember uploading it. :-( Please find it here.
Regards
Yagyesh

Yagyesh · Jan 12, 2011

Hi Richard, could you understand any more problems ?
Regards
Yagyesh

richc46 · Jan 12, 2011

This one showed 8E
STOP 0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED Usual causes: Insufficient disk space, Device driver, Video card, BIOS, Breakpoint in startup without having a debugger attached, Hardware incompatibility, Faulty system service, 3rd party remote control, Memory

Same as the last time. Did you follow all the instructions?
You mentioned that you did the memory test. Was it done according to the information that I gave. 8 passes and then test the slots with a known good stick?

Yagyesh · Jan 17, 2011

Hi Richard, the user was very upset with us trying to fix the problem for days, as his work was suffering.
So, we downgraded to Windows XP.
The system worked fine for a week or so, and today gave a Blue Screen again !
Would you be able to work with the XP dumps? What would you like me to post here inthat case?
The Blue Screen message though read like this:-
IRQL_NOT_LESS_OR_EQUAL
.
.
.
Technical Information:
STOP: 0x0000000A (0X9D066240,0X00000002, 0X00000000, 0X8050AA52)
Regards
Yagyesh

richc46 · Jan 17, 2011

If you are having them with XP too, sounds like a hardware problem. If you look a the information that I gave you for the last BSOD hardware was mentioned. Give me the report. XP should be the same as Vista.

Yagyesh · Jan 19, 2011

Thank you Richard. I am attaching the minidump files with this posting please.
Regards
Yagyesh

Frequent Shutdown

Attachments

My Computer

Network Enthusiast

My Computer

My Computer

Banned

My Computer

My Computer

My Computer

Banned

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

Attachments

My Computer