help! random bsod for 6 hours

first let me point out this is happening on my gf computer.

got a bsod this morning at around 3 ran the repair option thinking all was good started normal only to be met by another.
thinking it was a hardware issue i started a long process of elimination finally after taking out the first ram stick it seemed to stop but i wanted to make sure that was the problem.
I swapped it for the second spot ram and still no issue after about 30 min (blue screen was happening every 5-6 min after start up)

put all 4 back in and blue screen after clicking chrome.
well now i think its software so i just save everything to the second hd and format the main one problem solved.
nope, got 2 blues while re-installing windows and they continued and now i have no clue what to do so after much searching online i come here.

these (should hopefully) be the last 3 dump files from her pc.
i dont know if posting from my pc will mess something up but her's wont stay on long enough.

ran a memtest and everything was fine.
ran sfc scan and everything wass fine.
did a repair still bsod
2 new dump files

Welcome to the forums xanifer and sorry for the slow reply,

Code:

BugCheck D1, {ffffffffffffffff, 2, 8, ffffffffffffffff}

Probably caused by : CLASSPNP.SYS ( CLASSPNP!TransferPktComplete+1ce )

Code:

Usual causes:  Device driver

This bugcheck indicates that a driver has attempted to access a invalid memory address and then attempted to execute a region of memory, while the IRQL level was too high.

Code:

3: kd> k
Child-SP          RetAddr           Call Site
fffff880`02dfd428 fffff800`02cd1469 nt!KeBugCheckEx
fffff880`02dfd430 fffff800`02cd00e0 nt!KiBugCheckDispatch+0x69
fffff880`02dfd570 ffffffff`ffffffff nt!KiPageFault+0x260
fffff880`02dfd708 fffff800`02cd4516 0xffffffff`ffffffff <-- No symbols?
fffff880`02dfd710 fffff880`010018ee nt!IopfCompleteRequest+0x3a6
fffff880`02dfd7f0 fffff800`02cd4516 CLASSPNP!TransferPktComplete+0x1ce
fffff880`02dfd870 fffff880`00e2c41a nt!IopfCompleteRequest+0x3a6
fffff880`02dfd950 fffff880`00e2c242 ataport!IdeCompleteScsiIrp+0x62
fffff880`02dfd980 fffff880`00e26e32 ataport!IdeCommonCrbCompletion+0x5a
fffff880`02dfd9b0 fffff880`00e2f7ed ataport!IdeTranslateCompletedRequest+0x236
fffff880`02dfdae0 fffff880`00e2f0ec ataport!IdeProcessCompletedRequests+0x4d5
fffff880`02dfdc10 fffff800`02cdd5dc ataport!IdePortCompletionDpc+0x1a8
fffff880`02dfdcd0 fffff800`02cda6fa nt!KiRetireDpcList+0x1bc
fffff880`02dfdd80 00000000`00000000 nt!KiIdleLoop+0x5a

Okay, from what I can interpret from the call stack, is that the I/O Manager has finishing processing all the current IRPs from device drivers, and then something issued a region of memory to be paged, which then lead to the bugcheck since this is a illegal operation.

However, there doesn't seem to be any symbols available for the module which called the page fault to be issued.

I would suggest running full scan with !avast (fully updated) and then running a full scan with Malwarebytes : Free anti-malware download.

   Information

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation.