BSOD on Win 7 startup- trying to pinpoint cause

Hi guys/girls,

I am at my wits end with this thing. I have tried a number of approaches following instructions on the net but unable to pin point the error. I am considering using the tower to practise my shotput. I am in no way an expert but Im not a caveman with a keyboard either.

Before it is suggested, I tried to follow the steps on the "Blue Screen of Death (BSOD) Posting Instructions " thread but when I attempted to download the exe file it threw out this:

Malware Detected
The transferred file contained a virus and was therefore blocked.
URL: jcgriff2.com/0x2/Windows_NT6_BSOD_v3.03_jcgriff2_.exe
Media Type: application/executable
Virus Name: McAfeeGW: Artemis!566F01BB4EF2
generated 2011-09-24 11:26:26 by McAfee Web Gateway

So I left that well alone.


Brief desription of problem:
About 1/5 cold boots results on a blue screen. It usually has a ntdll.dll error but there has been others such as win32k and "process1_fail_to_initialise". A restart comes to the "start normally or windows repair" screen. Starting normally results in the windows loading screen, followed by black desktop. Curiously the mouse pointer is there and responds but nothing else (eg. alt+ctrl+del) responds. Windows repair just loops with a few more blue screens and eventually it comes good.

I've found if I just turn the whole sytem off at the first blue screen, it works fine on the next cold boot when I select "start windows normally".

I suspect its a driver issue. I have the latest drivers for my ATI Radeon HD 5550 card and its never missed a beat playing games like Fallout 3 etc. It might be something on the ASUS M4A89GTD Pro/usb3 mb but I have the most updated drivers for that too. I have had crashes to desktop on Adobe Premiere CS4 but I understand that program has more holes than swiss cheese, so I don't give it too much thought. All other programs/games are rock-solid stable.

I am using on-board sound, but have noticed two occasions where windows starts up with no sound. I checked the device manager and saw there were two "windows standard audio devices". I suspect one of these was the onboard HD audio so I disabled one of these (the one that didn't shut off my sound) but that hasn't worked.

Ive had this PC for about 18 months now. I have attempted upgrading drivers, disabling different periphials, running without the cheapo wireless network card. I've tried memtest86 with no problems, prime95 for about 4 hours with no issue. I've got no virus scanning software, and Ive checked out everything with malwarebytes. I don't overclock, don't use google chrome (firefox all the way baby!) and don't want to cry!

Specs:
AMD Phenom 2 x4 955 3.5Ghz quad core
AT Radeon HD 5550
Asus M4A89GTD Pro/Usb3
x4 GB DDR3
Win 7 x32 bit (think Ultimate) retail
1tb HDD

Minidumps:
I got hold of the windows debugger tool and pasted the results for my last few crashes.

Code:

 
11/09/11 
 
Loading Dump File [C:\Windows\Minidump\091111-16785-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x83456000 PsLoadedModuleList = 0x835a0850
Debug session time: Sun Sep 11 14:31:37.387 2011 (GMT+8)
System Uptime: 0 days 0:00:13.620
Loading Kernel Symbols
...............................................................
.....................
Loading User Symbols
0: kd> !analyze -v 
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
PROCESS1_INITIALIZATION_FAILED (6b)
Arguments:
Arg1: 00000000, Indicates the NT status code that caused the failure.
Arg2: 00000000, (reserved)
Arg3: 00000000
Arg4: 00000000
 
Debugging Details:
------------------
 
 
CUSTOMER_CRASH_COUNT: 1
 
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
 
BUGCHECK_STR: 0x6B
 
PROCESS_NAME: System
 
CURRENT_IRQL: 0
 
LAST_CONTROL_TRANSFER: from 8380a583 to 83534ef7
 
STACK_TEXT: 
80786c6c 8380a583 0000006b 85d02af8 85d02788 nt!KeBugCheck+0x14
80786d48 835e3440 80786d90 8365ff5e 8080a500 nt!Phase1InitializationDiscard+0x4e
80786d50 8365ff5e 8080a500 ac3b0ca2 00000000 nt!Phase1Initialization+0xd
80786d90 83507219 835e3433 8080a500 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP: 
nt!Phase1InitializationDiscard+4e
8380a583 cc int 3
 
SYMBOL_STACK_INDEX: 1
 
SYMBOL_NAME: nt!Phase1InitializationDiscard+4e
 
FOLLOWUP_NAME: MachineOwner
 
MODULE_NAME: nt
 
IMAGE_NAME: ntkrpamp.exe
 
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce78a09
 
FAILURE_BUCKET_ID: 0x6B_nt!Phase1InitializationDiscard+4e
 
BUCKET_ID: 0x6B_nt!Phase1InitializationDiscard+4e
 
Followup: MachineOwner
---------
 
 
12/09/11 
 
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [C:\Windows\Minidump\091211-27471-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x83437000 PsLoadedModuleList = 0x83581850
Debug session time: Mon Sep 12 15:01:29.244 2011 (GMT+8)
System Uptime: 0 days 0:00:23.852
Loading Kernel Symbols
...............................................................
................................................................
...
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
Use !analyze -v to get detailed debugging information.
 
BugCheck 1000008E, {c0000005, 82b69ceb, 82354af4, 0}
 
Probably caused by : memory_corruption
 
Followup: memory_corruption
---------
 
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82b69ceb, The address that the exception occurred at
Arg3: 82354af4, Trap Frame
Arg4: 00000000
 
Debugging Details:
------------------
 
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
 
FAULTING_IP: 
win32k!zzzBltValidBits+49
82b69ceb 0300 add eax,dword ptr [eax]
 
TRAP_FRAME: 82354af4 -- (.trap 0xffffffff82354af4)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=00010004 edx=000000cd esi=ffbbd198 edi=82cff560
eip=82b69ceb esp=82354b68 ebp=82354bd4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k!zzzBltValidBits+0x49:
82b69ceb 0300 add eax,dword ptr [eax] ds:0023:00000000=????????
Resetting default scope
 
CUSTOMER_CRASH_COUNT: 1
 
DEFAULT_BUCKET_ID: CODE_CORRUPTION
 
BUGCHECK_STR: 0x8E
 
PROCESS_NAME: csrss.exe
 
CURRENT_IRQL: 0
 
LAST_CONTROL_TRANSFER: from 82b7e1a3 to 82b69ceb
 
STACK_TEXT: 
82354bd4 82b7e1a3 82cff560 00000000 ff660618 win32k!zzzBltValidBits+0x49
82354c2c 82b7e56a ffbbd478 ff660618 00000001 win32k!xxxEndDeferWindowPosEx+0x14e
82354c4c 82b00789 ff660618 00000000 00000000 win32k!xxxSetWindowPos+0xf6
82354cbc 82aed1ee 00000000 87f5fd48 00000000 win32k!xxxSwitchDesktop+0x309
82354d04 82afd7c7 82322400 00000002 82322400 win32k!RawInputThread+0x3fe
82354d18 82bb2b5d 00000004 00befdf8 82354d34 win32k!xxxCreateSystemThreads+0x4a
82354d28 834751ea 00000004 00befe38 76eb70b4 win32k!NtUserCallNoParam+0x1b
82354d28 76eb70b4 00000004 00befe38 76eb70b4 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
00befe38 00000000 00000000 00000000 00000000 0x76eb70b4
 
 
STACK_COMMAND: kb
 
CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32k
82b69ce8 - win32k!zzzBltValidBits+46
[ e8:ec ]
1 error : !win32k (82b69ce8)
 
MODULE_NAME: memory_corruption
 
IMAGE_NAME: memory_corruption
 
FOLLOWUP_NAME: memory_corruption
 
DEBUG_FLR_IMAGE_TIMESTAMP: 0
 
MEMORY_CORRUPTOR: ONE_BIT
 
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
 
BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
 
Followup: memory_corruption
 
 
12/09/11 
 
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [C:\Windows\Minidump\091211-15678-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x83439000 PsLoadedModuleList = 0x83583850
Debug session time: Mon Sep 12 19:00:40.580 2011 (GMT+8)
System Uptime: 0 days 0:00:09.188
Loading Kernel Symbols
.....................................................
Loading User Symbols
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
Unknown bugcheck code (c0000221)
Unknown bugcheck description
Arguments:
Arg1: 8d0645f0
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
 
Debugging Details:
------------------
 
 
BUGCHECK_STR: 0xc0000221
 
ERROR_CODE: (NTSTATUS) 0xc0000221 - {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000221 - {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
 
EXCEPTION_PARAMETER1: 8d0645f0
 
EXCEPTION_PARAMETER2: 00000000
 
EXCEPTION_PARAMETER3: 00000000
 
EXCEPTION_PARAMETER4: 0
 
MODULE_NAME: nt
 
IMAGE_NAME: ntkrpamp.exe
 
CUSTOMER_CRASH_COUNT: 1
 
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
 
PROCESS_NAME: System
 
CURRENT_IRQL: 0
 
LAST_CONTROL_TRANSFER: from 8376492f to 83517f20
 
STACK_TEXT: 
807866f4 8376492f 0000004c c0000221 80786728 nt!KeBugCheckEx+0x1e
807868b0 83612d2e c0000221 00000001 00000001 nt!ExpSystemErrorHandler+0x56c
80786a60 8373e2b3 c0000221 00000001 00000001 nt!ExpRaiseHardError+0xbf
80786ae8 8361221d c0000221 00000001 00000001 nt!ExRaiseHardError+0x151
80786b58 835b4fde c0000221 00000001 00000001 nt!NtRaiseHardError+0x179
80786bc0 835b4f26 00000000 837a4f3c 8080a500 nt!PspLocateSystemDll+0x83
80786be4 837ea14f 00000000 8080f888 8080a500 nt!PsLocateSystemDlls+0x55
80786c6c 837ee224 0080a500 85d02af8 85d02788 nt!IoInitSystem+0x607
80786d48 835c6440 80786d90 83642f5e 8080a500 nt!Phase1InitializationDiscard+0xced
80786d50 83642f5e 8080a500 ac3a7f54 00000000 nt!Phase1Initialization+0xd
80786d90 834ea219 835c6433 8080a500 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP: 
nt!ExRaiseHardError+151
8373e2b3 8bf0 mov esi,eax
 
SYMBOL_STACK_INDEX: 3
 
SYMBOL_NAME: nt!ExRaiseHardError+151
 
FOLLOWUP_NAME: MachineOwner
 
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce78a09
 
FAILURE_BUCKET_ID: 0xc0000221_nt!ExRaiseHardError+151
 
BUCKET_ID: 0xc0000221_nt!ExRaiseHardError+151
 
Followup: MachineOwner
 
 
17/09/11 
 
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [C:\Windows\Minidump\091711-15288-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x8280d000 PsLoadedModuleList = 0x82957850
Debug session time: Sat Sep 17 14:35:55.093 2011 (GMT+8)
System Uptime: 0 days 0:00:19.968
Loading Kernel Symbols
....................................................
Loading User Symbols
Loading unloaded module list
.
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
PROCESS1_INITIALIZATION_FAILED (6b)
Arguments:
Arg1: c0000428, Indicates the NT status code that caused the failure.
Arg2: 00000003, (reserved)
Arg3: 00000000
Arg4: 00000000
 
Debugging Details:
------------------
 
 
CUSTOMER_CRASH_COUNT: 1
 
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
 
BUGCHECK_STR: 0x6B
 
PROCESS_NAME: System
 
CURRENT_IRQL: 0
 
LAST_CONTROL_TRANSFER: from 82989038 to 828ebf20
 
STACK_TEXT: 
80786b5c 82989038 0000006b c0000428 00000003 nt!KeBugCheckEx+0x1e
80786bc0 82988f26 00000000 00000000 8080a4f0 nt!PspLocateSystemDll+0xdd
80786be4 82bbe14f 00000000 80817310 8080a4f0 nt!PsLocateSystemDlls+0x55
80786c6c 82bc2224 0080a4f0 85106b80 85106810 nt!IoInitSystem+0x607
80786d48 8299a440 80786d90 82a16f5e 8080a4f0 nt!Phase1InitializationDiscard+0xced
80786d50 82a16f5e 8080a4f0 acab3c0e 00000000 nt!Phase1Initialization+0xd
80786d90 828be219 8299a433 8080a4f0 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP: 
nt!PspLocateSystemDll+dd
82989038 cc int 3
 
SYMBOL_STACK_INDEX: 1
 
SYMBOL_NAME: nt!PspLocateSystemDll+dd
 
FOLLOWUP_NAME: MachineOwner
 
MODULE_NAME: nt
 
IMAGE_NAME: ntkrpamp.exe
 
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce78a09
 
FAILURE_BUCKET_ID: 0x6B_nt!PspLocateSystemDll+dd
 
BUCKET_ID: 0x6B_nt!PspLocateSystemDll+dd
 
Followup: MachineOwner
---------
 
 
22/09/11 
 
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x83441000 PsLoadedModuleList = 0x8358b850
Debug session time: Thu Sep 22 19:34:04.251 2011 (GMT+8)
System Uptime: 0 days 0:00:09.859
Loading Kernel Symbols
.....................................................
Loading User Symbols
 
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
Unknown bugcheck code (c0000221)
Unknown bugcheck description
Arguments:
Arg1: 8d0667b0
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
 
Debugging Details:
------------------
 
 
BUGCHECK_STR: 0xc0000221
 
ERROR_CODE: (NTSTATUS) 0xc0000221 - {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000221 - {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
 
EXCEPTION_PARAMETER1: 8d0667b0
 
EXCEPTION_PARAMETER2: 00000000
 
EXCEPTION_PARAMETER3: 00000000
 
EXCEPTION_PARAMETER4: 0
 
MODULE_NAME: nt
 
IMAGE_NAME: ntkrpamp.exe
 
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
 
PROCESS_NAME: System
 
CURRENT_IRQL: 0
 
LAST_CONTROL_TRANSFER: from 8376c92f to 8351ff20
 
STACK_TEXT: 
807866f4 8376c92f 0000004c c0000221 80786728 nt!KeBugCheckEx+0x1e
807868b0 8361ad2e c0000221 00000001 00000001 nt!ExpSystemErrorHandler+0x56c
80786a60 837462b3 c0000221 00000001 00000001 nt!ExpRaiseHardError+0xbf
80786ae8 8361a21d c0000221 00000001 00000001 nt!ExRaiseHardError+0x151
80786b58 835bcfde c0000221 00000001 00000001 nt!NtRaiseHardError+0x179
80786bc0 835bcf26 00000000 837acf3c 8080a500 nt!PspLocateSystemDll+0x83
80786be4 837f214f 00000000 8080f888 8080a500 nt!PsLocateSystemDlls+0x55
80786c6c 837f6224 0080a500 85d02af8 85d02788 nt!IoInitSystem+0x607
80786d48 835ce440 80786d90 8364af5e 8080a500 nt!Phase1InitializationDiscard+0xced
80786d50 8364af5e 8080a500 ac34f33b 00000000 nt!Phase1Initialization+0xd
80786d90 834f2219 835ce433 8080a500 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP: 
nt!ExRaiseHardError+151
837462b3 8bf0 mov esi,eax
 
SYMBOL_STACK_INDEX: 3
 
SYMBOL_NAME: nt!ExRaiseHardError+151
 
FOLLOWUP_NAME: MachineOwner
 
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce78a09
 
FAILURE_BUCKET_ID: 0xc0000221_nt!ExRaiseHardError+151
 
BUCKET_ID: 0xc0000221_nt!ExRaiseHardError+151
 
Followup: MachineOwner
 
 
 
 
 
23/09/11 
 
(****1935 fail to boot
restarted to windows loading screen, then black screen instead of desktop, however cursor is present and responsive
 
Bluescreen was c0000221 Unknown hard error = ntdll.dll*******
 

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
 
 
Loading Dump File [C:\Windows\Minidump\092311-17628-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
 
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x83412000 PsLoadedModuleList = 0x8355c850
Debug session time: Fri Sep 23 19:06:16.468 2011 (GMT+8)
System Uptime: 0 days 0:00:11.701
Loading Kernel Symbols
.....................................................
Loading User Symbols
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
 
Unknown bugcheck code (c0000221)
Unknown bugcheck description
Arguments:
Arg1: 8d15a538
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
 
Debugging Details:
------------------
 
 
BUGCHECK_STR: 0xc0000221
 
ERROR_CODE: (NTSTATUS) 0xc0000221 - {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000221 - {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
 
EXCEPTION_PARAMETER1: 8d15a538
 
EXCEPTION_PARAMETER2: 00000000
 
EXCEPTION_PARAMETER3: 00000000
 
EXCEPTION_PARAMETER4: 0
 
MODULE_NAME: nt
 
IMAGE_NAME: ntkrpamp.exe
 
CUSTOMER_CRASH_COUNT: 1
 
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
 
PROCESS_NAME: System
 
CURRENT_IRQL: 0
 
LAST_CONTROL_TRANSFER: from 8373d92f to 834f0f20
 
STACK_TEXT: 
807866f4 8373d92f 0000004c c0000221 80786728 nt!KeBugCheckEx+0x1e
807868b0 835ebd2e c0000221 00000001 00000001 nt!ExpSystemErrorHandler+0x56c
80786a60 837172b3 c0000221 00000001 00000001 nt!ExpRaiseHardError+0xbf
80786ae8 835eb21d c0000221 00000001 00000001 nt!ExRaiseHardError+0x151
80786b58 8358dfde c0000221 00000001 00000001 nt!NtRaiseHardError+0x179
80786bc0 8358df26 00000000 8377df3c 8080a500 nt!PspLocateSystemDll+0x83
80786be4 837c314f 00000000 8080f888 8080a500 nt!PsLocateSystemDlls+0x55
80786c6c 837c7224 0080a500 85d02af8 85d02788 nt!IoInitSystem+0x607
80786d48 8359f440 80786d90 8361bf5e 8080a500 nt!Phase1InitializationDiscard+0xced
80786d50 8361bf5e 8080a500 ac31f37a 00000000 nt!Phase1Initialization+0xd
80786d90 834c3219 8359f433 8080a500 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
 
 
STACK_COMMAND: kb
 
FOLLOWUP_IP: 
nt!ExRaiseHardError+151
837172b3 8bf0 mov esi,eax
 
SYMBOL_STACK_INDEX: 3
 
SYMBOL_NAME: nt!ExRaiseHardError+151
 
FOLLOWUP_NAME: MachineOwner
 
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce78a09
 
FAILURE_BUCKET_ID: 0xc0000221_nt!ExRaiseHardError+151
 
BUCKET_ID: 0xc0000221_nt!ExRaiseHardError+151
 
Followup: MachineOwner
---------

Like I said, I think its a driver fault. "VISTA_DRIVER_FAULT" is a good clue hehe.

Have you any suggestions how I can narrow this down? Want to get it sorted once and for all. Pretty sure windows is starting to get corrupted from it, so once we figure it out might try a reinstall over or clean install and sort the problem from scratch.

Any help you can offer will be appreciated!

Cheers.