System info:





After various durations of using my laptop it will stop and show the BSoD. Sometimes after 6 hours sometimes after 3 minutes. And usually when i'm on the internet.

My brother recently fitted a wireless network, ''Intel® PRO/Wireless 2200BG'' is what it says.

I mention the wireless because it is the only new hardware i have installed recently.

However my computer worked fine after installing the wireless for 5 days than i got this problem so i'm not sure if they're connected.

This is the stop messsage i get:







And than once and only once so far i had this one:






It only said that one once and now it has continued to display the first one over and over again.

I sent the microsoft error report and it said that it is a Realtek driver. So went to realtek and downloaded the driver windows suggested.

I still get the problem.

I ran the ''driver verifier'' and choose automatically find unsigned drivers, it has made no difference.


Thank You for your help.

Ive had this issue before installing my Vista x64 on my rig. But the issue was that it might be the memory of Ram thats causing the BSOD.

Two things I would do:

I would do this:

http://www.redhour.info/rhforums/showthread.php?t=2287

And run this:

http://www.memtest.org/

Thank you.

I got this far:




Microsoft ® Windows Debugger Version 6.9.0003.113 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini070908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Wed Jul 9 00:59:53.725 2008 (GMT+1)
System Uptime: 0 days 0:42:22.291
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
........................................................................................................................
.................................................
Loading User Symbols
Loading unloaded module list
....
Unable to load image Ntfs.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Ntfs.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000C5, {4, 2, 1, 8054bbb4}

*** WARNING: Unable to verify timestamp for sr.sys
*** WARNING: Unable to verify timestamp for fltmgr.sys
Unable to load image aswMon2.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMon2.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswMon2.SYS
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : aswMon2.SYS ( aswMon2+6a14 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8054bbb4, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExAllocatePoolWithTag+673
8054bbb4 897104 mov dword ptr [ecx+4],esi

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: ashWebSv.exe

LAST_CONTROL_TRANSFER: from bae1aa62 to 8054bbb4

STACK_TEXT:
ef1e58f8 bae1aa62 00000010 00000001 6966744e nt!ExAllocatePoolWithTag+0x673
ef1e5910 bae185c4 bae38020 ef1e5950 82941f08 Ntfs!ExAllocateFromPagedLookasideList+0x27
ef1e5930 bae3d3d1 831a0e00 00000000 021e59a0 Ntfs!NtfsInitializeIrpContext+0x8b
ef1e59bc 804e37f7 82a0b5f8 831a0e00 806ef2a4 Ntfs!NtfsFsdClose+0x122
ef1e59cc 8066bec5 82a0b020 82a301e8 82938100 nt!IopfCallDriver+0x31
ef1e59f0 baebc459 ef1e5a2c 804e37f7 82a0b020 nt!IovCallDriver+0xa0
ef1e59f8 804e37f7 82a0b020 831a0e00 806ef2a4 sr!SrPassThrough+0x31
ef1e5a08 8066bec5 8276d3a0 831a0e00 82938158 nt!IopfCallDriver+0x31
ef1e5a2c baed209e 831a0e00 82a30e40 8276d3a0 nt!IovCallDriver+0xa0
ef1e5a58 804e37f7 8276d3a0 831a0e00 806ef2a4 fltmgr!FltpDispatch+0x152
ef1e5a68 8066bec5 831a0fd8 00000000 831a0e00 nt!IopfCallDriver+0x31
ef1e5a8c ef5fba14 81c5bc50 8297c248 82941f00 nt!IovCallDriver+0xa0
WARNING: Stack unwind information not available. Following frames may be wrong.
ef1e5ab0 ef5f583c 81c5bc50 001a0e00 804e37f7 aswMon2+0x6a14
ef1e5af0 8056bf74 82941ef0 82941ee0 00000000 aswMon2+0x83c
ef1e5b28 80564777 00941f08 82941ef0 00000000 nt!IopDeleteFile+0x132
ef1e5b44 804e36d5 82941f08 00000000 0000067c nt!ObpRemoveObjectRoutine+0xe0
ef1e5b68 80567847 81b47da0 e2679568 ffba6b30 nt!ObfDereferenceObject+0x5f
ef1e5b80 805678b0 e2679568 82941f08 0000067c nt!ObpCloseHandleTableEntry+0x155
ef1e5bc8 805678fa 0000067c 00000000 00000000 nt!ObpCloseHandle+0x87
ef1e5bdc 804de7ec 0000067c 0000002e 804dc8c1 nt!NtClose+0x1d
ef1e5bdc 804dc8c1 0000067c 0000002e 804dc8c1 nt!KiFastCallEntry+0xf8
ef1e5c58 efbaa188 0000067c 81b59d98 ef1e5d04 nt!ZwClose+0x11
ef1e5c60 81b59d98 ef1e5d04 00000000 045cf4d4 vsdatant+0x18188
ef1e5c64 ef1e5d04 00000000 045cf4d4 00000006 0x81b59d98
ef1e5c68 00000000 045cf4d4 00000006 81b50002 0xef1e5d04


STACK_COMMAND: kb

FOLLOWUP_IP:
aswMon2+6a14
ef5fba14 ?? ???

SYMBOL_STACK_INDEX: c

SYMBOL_NAME: aswMon2+6a14

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: aswMon2

IMAGE_NAME: aswMon2.SYS

DEBUG_FLR_IMAGE_TIMESTAMP: 482c3a50

FAILURE_BUCKET_ID: 0xC5_2_aswMon2+6a14

BUCKET_ID: 0xC5_2_aswMon2+6a14

Followup: MachineOwner
---------

kd> lmvm aswMon2
start end module name
ef5f5000 ef60a680 aswMon2 T (no symbols)
Loaded symbol image file: aswMon2.SYS
Image path: aswMon2.SYS
Image name: aswMon2.SYS
Timestamp: Thu May 15 14:27:44 2008 (482C3A50)
CheckSum: 0001EB54
ImageSize: 00015680
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0







So what is the problem?

I downloaded memtest86 and it asked me to insert a floppy disk. I don't have a floppy disk drive.

I looked up this ''aswMon2.SYS'' and found this:

http://forum.avast.com/index.php?board=2%3...3Bthreadid=1165

but i don't understand. I used to use AVG anti virus but it stopped my internet from connecting so i now use Avast!

I turned my computer on this morning and went to Imeem.com than in a few seconds i got BSoD again.

So i did the bug check again and it gave a different code:





Microsoft ® Windows Debugger Version 6.9.0003.113 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini070908-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\WINDOWS\Symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Wed Jul 9 12:31:53.283 2008 (GMT+1)
System Uptime: 0 days 0:04:40.850
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Loading Kernel Symbols
........................................................................................................................
.................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000C5, {4, 2, 1, 8054bbb4}

Probably caused by : ntoskrnl.exe ( nt!ExAllocatePoolWithTag+673 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00000004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8054bbb4, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExAllocatePoolWithTag+673
8054bbb4 897104 mov dword ptr [ecx+4],esi

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: iexplore.exe

LAST_CONTROL_TRANSFER: from 804e6bec to 8054bbb4

STACK_TEXT:
ef5fec44 804e6bec 0000000c 00000001 20206f49 nt!ExAllocatePoolWithTag+0x673
ef5fec68 8057aaf9 00000004 00000154 20206f49 nt!ExAllocatePoolWithQuotaTag+0x46
ef5fed00 8058efd7 000002d0 000002c4 00000000 nt!IopXxxControlFile+0x554
ef5fed34 804de7ec 000002d0 000002c4 00000000 nt!NtDeviceIoControlFile+0x2a
ef5fed34 7c90e4f4 000002d0 000002c4 00000000 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
019dfc00 00000000 00000000 00000000 00000000 0x7c90e4f4


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ExAllocatePoolWithTag+673
8054bbb4 897104 mov dword ptr [ecx+4],esi

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!ExAllocatePoolWithTag+673

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 48025eab

FAILURE_BUCKET_ID: 0xC5_2_nt!ExAllocatePoolWithTag+673

BUCKET_ID: 0xC5_2_nt!ExAllocatePoolWithTag+673

Followup: MachineOwner
---------

kd> lmvm nt
start end module name
804d7000 806ed680 nt M (pdb symbols) C:\WINDOWS\Symbols\exe\ntoskrnl.pdb
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Sun Apr 13 20:27:39 2008 (48025EAB)
CheckSum: 002247C2
ImageSize: 00216680
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0






Is this a curropt driver? How do i go about fixing this?

Thank You all for your help.

I reformated my computer yesterday and now everything works fine and faster.