BSOD Windows XP

Hello My Desktop started crashing after my kids got ahold of it.

The computer goes into the BSOD mode 0x0000008E (0xC0000005, 0x8054A168, 0xF766D9A4, 0x00000000) whenever I try running a program or after 5 minutes of sitting.

I also tried going into Safe Mode to see if the BSOD still occurs and it happens in Safe Mode too.

I re-seated all the cable wires inside my machine as well as the ram to see if that would fix the problem. It didn't.

I un-hooked everything inside my computer and left only the the essentials to run ram, mb, hd, Monitor and power supply still goes into Blue Screen in Safe/Regular Mode.

I have atatched a picture of the Blue Screen.

Please help.

My Desktop is a Dell Dimension E310 2.80GHz Processor 1 gig ram.

The computer goes into the BSOD mode 0x0000008E (0xC0000005, , , ) ... after my kids got ahold of it.

Have you noticed any sign that the system may be infected with malware?

• That is my prime suspect based on what you have reported and without doing further investigation.

It would be a good idea to run a full scan with your antivirus application, but I suspect you are not able to do that.

I'm not able to run any programs.

I thought that might be the case.

Are you able to get me the minidumps to examine?

• You may need to copy the Minidump folder to a flashdrive and then transfer to another working machine to zip them up and attach the zip file to a post.

Please zip up the minidumps and attach the resultant zip file to your next reply so I can have a closer look. There's a chance I might get some more useful info from them.

• Navigate to C:\Windows\Minidump <<< folder
• Click on the first minidump file to select it.
• Hold down the <Shift> key, and click on the last minidump file to select all of the files.
• Release the <Shift> key.
• Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
  The zip file will be located in the same place (the Minidump folder).
• Attach the zip file to your next reply.
  When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.

 Mini071312-02.zip   289.18K   3 downloadsHere is the minidump file.

The size is too big for all of it due to upload limits.

Thank you: That will do just fine!

Thirteen recent minidumps will give me some info to work with. I will get back to you when I have debugged a few of them.

While AustrAlien checks your dump files,please uninstall Norton antivirus.If there are still crashes upload the new dump file

While AustrAlien checks your dump files,please uninstall Norton antivirus.If there are still crashes upload the new dump file

Spot on! Thank you narenxp.

It is quite possible that ultimate responsibility for the current problem lies with the Windows XP system being outdated, running Service Pack 2 only. However, the chief cause of the BSODs is that memory is being corrupted by one or more drivers. Examination of the WinDbg output reveals that drivers belonging to the Norton/Symantec security software are directly implicated as likely causes in 5 of the 13 crashes. If you can remove Norton/Symantec from the system, that is likely to stop the current BSOD problem.

List of Norton/Symantec drivers loading on the the system:

BHDrvx86.sys Thu May 17 11:41:23 2012 ... Symantec Heuristics Driver
ccSetx86.sys Sat Nov 05 08:52:52 2011 ... Symantec/ Norton Common Client Settings Driver
eeCtrl.sys   Wed May 16 10:33:04 2012 ... Symantec /Norton
IDSxpx86.sys Fri May 25 10:08:07 2012 ... Symantec Intrusion Detection
Ironx86.SYS  Tue Nov 15 13:00:13 2011 ... Symantec Iron Driver
NAVENG.SYS   Wed Apr 25 18:38:43 2012 ... Norton/Symantec
NAVEX15.SYS  Wed Apr 25 18:36:43 2012 ... Norton/Symantec
SRTSP.SYS    Fri Mar 16 05:05:33 2012 ... Norton/Symantec AutoProtect
SRTSPX.SYS   Fri Mar 16 05:05:40 2012 ... Norton/Symantec AutoProtect
SYMDS.SYS    Tue May 17 08:14:26 2011 ... Symantec Data Store
SYMEFA.SYS   Wed Nov 23 11:48:14 2011 ... Symantec Extended File Attributes
SYMEVENT.SYS Wed Nov 23 05:30:26 2011 ... Norton/Symantec Event Library
SYMTDI.SYS   Sun Nov 13 07:50:42 2011 ... Norton/Symantec Network Dispatch Driver

Please confirm what I think we already know, whether or not you are able to load Windows normally and then proceed to uninstall the Norton/Symantec software. Meantime, I will consult with colleagues as to the best way to disable Norton/Symantec on startup and thereby allow you to start Windows normally. If we can do that successfully, then we can work out the best way to go about removing Norton/Symantec from the system and then deal with any other matters necessary.

Summary of the 13 available minidumps:

Mini080812-09.dmp BugCheck 1000007E, {c0000005, 805ac2e1, f7a1dac8, f7a1d7c4} Probably caused by : SRTSP.SYS
Mini080812-08.dmp BugCheck 100000BE, {c0002000, 34486025, a90c49e8, b       } Probably caused by : ntkrpamp.exe
Mini080812-07.dmp BugCheck 1000008E, {c0000005, 8054a168, a9c2b020, 0       } Probably caused by : Pool_Corruption
Mini080812-06.dmp BugCheck 1000008E, {c0000005, 8054a10d, a9d0e788, 0       } Probably caused by : Pool_Corruption
Mini080812-05.dmp BugCheck 1000007F, {8,        80042000, 0,        0       } Probably caused by : USBPORT.SYS
Mini080812-04.dmp BugCheck 1000008E, {c0000005, 8054a168, f766d9a4, 0       } Probably caused by : Pool_Corruption
Mini080812-03.dmp BugCheck 1000008E, {c0000005, 8054afcb, a9eb3824, 0       } Probably caused by : ntkrpamp.exe
Mini080812-02.dmp BugCheck 1000008E, {c0000005, 8054a168, a9966bbc, 0       } Probably caused by : Pool_Corruption
Mini080812-01.dmp BugCheck 1000007E, {c0000005, a85f305a, f7a11a08, f7a11704} Probably caused by : hardware
Mini071612-01.dmp BugCheck 1000008E, {c0000005, 8054a168, a912b80c, 0       } Probably caused by : Pool_Corruption
Mini071312-03.dmp BugCheck 1000008E, {c0000005, 8054a16a, f77fdaa4, 0       } Probably caused by : Pool_Corruption
Mini071312-02.dmp BugCheck 1000008E, {c0000005, bf8011c7, a9d22c38, 0       } Probably caused by : win32k.sys
Mini071312-01.dmp BugCheck 1000008E, {c0000005, a9f1157f, a8e2990c, 0       } Probably caused by : BHDrvx86.sys

Another summary of the 13 minidumps:

9 x Bugcheck code 1000008E (c0000005, , , )
2 x Bugcheck code 1000007E (c0000005, , , )
1 x Bugcheck code 100000BE 
1 x Bugcheck code 1000007F (00000008, , , )

=======================
BSOD BUGCHECK SUMMARY: 9 mindumps all dated August 8th, 2012.
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-09.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 09:30:16.234 2012 (UTC + 10:00)
System Uptime: 0 days 0:06:36.913
Unable to load image SRTSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
Probably caused by : SRTSP.SYS ( SRTSP+88f08 )
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 00670760
BUGCHECK_STR: 0x7E
STACK_TEXT:
f7a1dbb0 805ad107 804d7000 e35a3440 8052e560 nt!MiFindExportedRoutineByName+0x51
f7a1dbec a8ba2f08 f7a1dc04 8512f000 00000000 nt!MmGetSystemRoutineAddress+0xab
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a1dc20 a8ba20ea 00000000 a8ba24a4 85c0bae0 SRTSP+0x88f08
f7a1dc84 80580214 85c0bae0 8512f000 00000000 SRTSP+0x880ea
f7a1dd54 80580323 000011f4 00000001 00000000 nt!IopLoadDriver+0x66c
f7a1dd7c 80538553 000011f4 00000000 865c1020 nt!IopLoadUnloadDriver+0x45
f7a1ddac 805cecc4 f7abdc78 00000000 00000000 nt!ExpWorkerThread+0xef
f7a1dddc 80545eee 80538464 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FAILURE_BUCKET_ID: 0x7E_SRTSP+88f08
Bugcheck code 1000007E
Arguments c0000005 805ac2e1 f7a1dac8 f7a1d7c4
BiosVersion = A03
BiosReleaseDate = 10/08/2005
SystemManufacturer = Dell Inc.
SystemProductName = Dell DV051
BaseBoardManufacturer = Dell Inc.
BaseBoardProduct = 0JC474
CPUID: " Intel® Pentium® 4 CPU 2.80GHz"
MaxSpeed: 2800
CurrentSpeed: 2793
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-08.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:38:12.812 2012 (UTC + 10:00)
System Uptime: 0 days 0:01:36.500
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+d0 )
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0xBE
PROCESS_NAME: iexplore.exe
FAILURE_BUCKET_ID: 0xBE_nt!KiTrap0E+d0
Bugcheck code 100000BE
Arguments c0002000 34486025 a90c49e8 0000000b
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-07.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:35:47.312 2012 (UTC + 10:00)
System Uptime: 0 days 0:01:42.996
*** WARNING: Unable to verify timestamp for BHDrvx86.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx86.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+162 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: svchost.exe
STACK_TEXT:
a9c2b0d4 8054a75f 00000001 865ba568 86056488 nt!ExDeferredFreePool+0x162
a9c2b114 805bec30 865eda4c 00000000 a9c2b150 nt!ExFreePoolWithTag+0x47f
a9c2b124 805bf01f 865eda4c a9c2b101 00000000 nt!ObReleaseObjectSecurity+0x1a
a9c2b150 8062d287 e3d74448 86056488 00000001 nt!ObCheckObjectAccess+0xd3
a9c2b19c 8062df28 e18efb60 009faef0 00000000 nt!CmpDoOpen+0x2d5
a9c2b39c 805be190 009faef0 00000000 86056488 nt!CmpParseKey+0x5a6
a9c2b414 805ba818 00000000 a9c2b454 00000240 nt!ObpLookupObjectName+0x53c
a9c2b468 80623b28 00000000 865ba528 804f8700 nt!ObOpenObjectByName+0xea
a9c2b564 8054140c a9c2b638 80000000 a9c2b600 nt!NtOpenKey+0x1c8
a9c2b564 80500669 a9c2b638 80000000 a9c2b600 nt!KiFastCallEntry+0xfc
a9c2b5e8 aa12efd4 a9c2b638 80000000 a9c2b600 nt!ZwOpenKey+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
a9c2b618 aa0e6a9d aa155ca0 80000000 a9c2b6e4 BHDrvx86+0x7efd4
a9c2b66c aa0e6d64 aa155ca0 aa155cb8 a9c2b68c BHDrvx86+0x36a9d
a9c2b694 aa0ebf5a 0005842c a9c2b6e4 e105842c BHDrvx86+0x36d64
a9c2b6b4 aa0d2781 e105842c e1bf3868 a9c2b6e4 BHDrvx86+0x3bf5a
a9c2b6d8 aa0d2898 e2c352b0 00000000 a9c2b718 BHDrvx86+0x22781
a9c2b6f0 aa12c24f 00000000 e2c352b0 00000000 BHDrvx86+0x22898
a9c2b71c aa14322a a9c2b730 aa1459e2 00000015 BHDrvx86+0x7c24f
a9c2b724 aa1459e2 00000015 a9c2b764 aa146167 BHDrvx86+0x9322a
a9c2b730 aa146167 e3e81dd0 00000015 e16dd074 BHDrvx86+0x959e2
a9c2b764 aa145c87 a9c2b878 e16dd008 ffffffff BHDrvx86+0x96167
a9c2b78c aa145e41 a9c2b878 e16dd008 ffffffff BHDrvx86+0x95c87
a9c2b7bc aa11ff52 00000001 a9c2b878 e2822000 BHDrvx86+0x95e41
a9c2b820 aa111a44 e2c352b0 e2c352b0 aa111a44 BHDrvx86+0x6ff52
a9c2b854 aa0b4110 a9c2b8f4 a9c2b878 85bb0678 BHDrvx86+0x61a44
a9c2b8a4 aa0b4a98 00c2b8f4 e2c352b0 00000014 BHDrvx86+0x4110
a9c2b8c0 aa106a5c e2c352b0 85b5a948 a9c2ba34 BHDrvx86+0x4a98
a9c2b8d8 aa10bdf5 a9c2b8f4 00000001 85b5a98c BHDrvx86+0x56a5c
a9c2b9f8 aa107e7d 850dc70c a9c2ba34 85bae720 BHDrvx86+0x5bdf5
a9c2ba14 f7402888 850dc70c a9c2ba34 a9c2ba64 BHDrvx86+0x57e7d
a9c2ba74 f740443e 00c2ba88 a9c2bb20 a9c2baec fltMgr!FltpPerformPreCallbacks+0x2d4
a9c2baa0 804ed2f9 a9c2baec a9c2bb28 86561020 fltMgr!FltpPreFsFilterOperation+0x7c
a9c2bac8 8056b165 01c2baec 00000001 00000001 nt!FsFilterPerformCallbacks+0xa5
a9c2bc20 8056c08e 860b7d48 00000001 00000010 nt!FsRtlAcquireFileExclusiveCommon+0x173
a9c2bc34 8050c918 860b7d48 00000010 00000000 nt!FsRtlAcquireToCreateMappedSection+0x12
a9c2bcd0 805aa38d a9c2bd1c 0000000f 00000000 nt!MmCreateSection+0x26e
a9c2bd40 8054140c 0075c9b4 0000000f 00000000 nt!NtCreateSection+0x12f
a9c2bd40 7c90e514 0075c9b4 0000000f 00000000 nt!KiFastCallEntry+0xfc
0075c8f4 00000000 00000000 00000000 00000000 0x7c90e514
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+162
Bugcheck code 1000008E
Arguments c0000005 8054a168 a9c2b020 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-06.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:32:07.546 2012 (UTC + 10:00)
System Uptime: 0 days 0:03:17.222
Unable to load image SYMEVENT.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT.SYS
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+107 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: svchost.exe
STACK_TEXT:
a9d0e83c 8054a75f 00000001 a9d0e974 8000000b nt!ExDeferredFreePool+0x107
a9d0e87c 805e437a e16ed008 00000000 a9d0e8f8 nt!ExFreePoolWithTag+0x47f
a9d0e8a0 805e4839 00000000 00000000 00000000 nt!RtlpInheritAcl+0x76
a9d0e97c 805efb53 00000000 e2f0e128 a9d0e9d4 nt!RtlpNewSecurityObject+0x485
a9d0e9a8 805beccf 00000000 00000000 a9d0e9d4 nt!SeAssignSecurity+0x4f
a9d0e9d8 805c210d a9d0eaec 00000000 84c079e0 nt!ObAssignSecurity+0x35
a9d0eac0 805cf3fa 84c079e0 a9d0eaec 00000000 nt!ObInsertObject+0x47d
a9d0ec10 805cfe30 0160fa94 001f03ff 00000000 nt!PspCreateThread+0x5d0
a9d0ec88 aa4da139 0160fa94 001f03ff 00000000 nt!NtCreateThread+0xfc
WARNING: Stack unwind information not available. Following frames may be wrong.
a9d0ed3c 8054140c 0160fa94 001f03ff 00000000 SYMEVENT+0x17139
a9d0ed3c 7c917719 0160fa94 001f03ff 00000000 nt!KiFastCallEntry+0xfc
00000023 00000000 00000000 00000000 00000000 0x7c917719
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+107
Bugcheck code 1000008E
Arguments c0000005 8054a10d a9d0e788 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-05.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:19:32.906 2012 (UTC + 10:00)
System Uptime: 0 days 0:03:12.585
Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_WorkerThread+3c )
UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
BUGCHECK_STR: 0x7f_8
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: System
STACK_TEXT:
f6862d24 805457ab f6862d6c 860fe4c0 ffdff120 nt!SwapContext+0xc7
f6862d38 80503818 860fe530 860fe4c0 804fb042 nt!KiSwapContext+0x2f
f6862d44 804fb042 804f7e5c 860c20e0 00000000 nt!KiSwapThread+0x8a
f6862d6c f5f30ed2 00000000 00000005 00000000 nt!KeWaitForSingleObject+0x1c2
f6862dac 805cecc4 860c2028 00000000 00000000 USBPORT!USBPORT_WorkerThread+0x3c
f6862ddc 80545eee f5f30e96 860c2028 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FAILURE_BUCKET_ID: 0x7f_8_USBPORT!USBPORT_WorkerThread+3c
Bugcheck code 1000007F
Arguments 00000008 80042000 00000000 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-04.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:12:43.156 2012 (UTC + 10:00)
System Uptime: 0 days 0:03:08.839
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+162 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: lsass.exe
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+162
Bugcheck code 1000008E
Arguments c0000005 8054a168 f766d9a4 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-03.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 06:09:00.078 2012 (UTC + 10:00)
System Uptime: 0 days 0:01:53.757
Probably caused by : ntkrpamp.exe ( nt!ExAllocatePoolWithTag+663 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: IERA.exe
FAILURE_BUCKET_ID: 0x8E_nt!ExAllocatePoolWithTag+663
Bugcheck code 1000008E
Arguments c0000005 8054afcb a9eb3824 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-02.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 05:43:38.234 2012 (UTC + 10:00)
System Uptime: 0 days 0:02:30.909
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+162 )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: explorer.exe
FAILURE_BUCKET_ID: 0x8E_nt!ExDeferredFreePool+162
Bugcheck code 1000008E
Arguments c0000005 8054a168 a9966bbc 00000000
................................................................
Loading Dump File [C:\CactusIsland\Eric56 _BC\Mini071312-02\Mini080812-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp2_qfe.100216-2016
Debug session time: Thu Aug 9 05:39:12.062 2012 (UTC + 10:00)
System Uptime: 0 days 0:04:51.742
Unable to load image NAVEX15.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NAVEX15.SYS
*** ERROR: Module load completed but symbols could not be loaded for NAVEX15.SYS
Unable to load image SRTSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SRTSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for SRTSP.SYS
Probably caused by : hardware ( NAVEX15+3305a )
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 0003f8b2
BUGCHECK_STR: 0x7E
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
f7a11ad0 a87aaccb 00000bb9 f7a11b20 5fd765e6 NAVEX15+0x3305a
f7a11b4c a87ab5af e111f760 e111f760 e4370008 SRTSP+0x67ccb
f7a11b68 a87a5642 e4324948 e111f760 00000003 SRTSP+0x685af
f7a11b94 a8771fa8 e4370008 e45cb938 00000003 SRTSP+0x62642
f7a11bf4 a87ca7fd 00000005 85e56e98 00000000 SRTSP+0x2efa8
f7a11c1c a87cb16b 00000000 00000000 a87cb678 SRTSP+0x877fd
f7a11c84 80580214 85e56e98 85316000 00000000 SRTSP+0x8816b
f7a11d54 80580323 000005fc 00000001 00000000 nt!IopLoadDriver+0x66c
f7a11d7c 80538553 000005fc 00000000 865c28b8 nt!IopLoadUnloadDriver+0x45
f7a11dac 805cecc4 f7aa1c78 00000000 00000000 nt!ExpWorkerThread+0xef
f7a11ddc 80545eee 80538464 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
FAILURE_BUCKET_ID: IP_MISALIGNED_NAVEX15.SYS
Bugcheck code 1000007E
Arguments c0000005 a85f305a f7a11a08 f7a11704
................................................................

Ok I just tried something....I tried each memory module seperatley and it happened to be one faulty memory module.

I also uninstalled Norton as requested.

I'm downloading the SP3 as I'm typing this.

Almost there.

System is working better.

... it happened to be one faulty memory module

Well done! Thank you for letting us know about your discovery.

I did wonder about the memory and considered the value of testing after reading a post that I found during my research (the following taken from my notes):

Glen Bodie
In my case, I had this error on a Windows XP Pro SP3 system, new load, crash/blue screen several times a day, no pattern in terms of which application. Error codes included 00000019, 000000FC, 1000000A, 10000050, 1000007E, 1000007F, 1000008E, 100000BE, 100000D1 ... total of 40 codes all within 3 days! System was scanned for virus and trojans. All Windows patches applied. All drivers were updated. Unnecessary hardware removed. All boards / pins / cables were carefully reseated to make good contact. No improvement. Ran the Windows Memory Diagnostic (see EV100088) and found that one of the 2 DIMMs was marginal. Replaced the DIMM and no more crashes.
Source: http://www.eventid.net/display-eventid-1003-source-System-eventno-1274-phase-1.htm
>>>>> CHECK MEMORY <<<< ****

You would be well advised to run the Norton removal tool if applicable to your Norton version:

• Download and run the Norton Removal Tool to uninstall your Norton product

If you wish/need an alternative antivirus for the time being, or the long term, try one of the following free applications:

• MSE (Microsoft Security Essentials) <<< I recommend that you try this!
• Avira
• avast!
• AVG Free
  (Choose to download either the 32-bit or 64-bit application, depending on whether Windows on your system is 32-bit or 64-bit.)

Ensure that the Windows firewall is enabled.

Thanks for all the help! System is super fast now. I doubled the ram.