Hi, I'm getting frequent BSOD on Windows 7, and got the following info: Problem signature: Problem Event Name: BlueScreen OS Version: 6.1.7600.2.0.0.25648 Locale ID: 2057 The BFCodes were: 000000000000007F 0000000000000008 0000000080050031 FFFFF80002C89DA2 And the dumps were: Dump Files: C:\Windows\Minidump\032211-18657-01.dmp C:\User\AppData\Local\Temp\WER-27253-0.sysdata.xml Links above to the files! Thanks in advance for your help, Susan

Please use Microsoft Skydrive to upload C:\Windows\Minidump\032211-18657-01.dmp dump files. Once done, post a link here so that I download it and analyze it to determine the cause of your BSOD. If you want to read dump files without my helpn use Windbg and refer to this Microsoft article: http://support.microsoft.com/kb/315263 Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Hi Thanks so much for your help. Hope this is what you meant! http://cid-42f38373c51efd63.office.live.com/self.aspx/.Documents/032211-18657-01.dmp Thanks very much Susan

Hello Susan, ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* UNEXPECTED_KERNEL_MODE_TRAP (7f) This means a trap occurred in kernel mode, and it's a trap of a kind that the kernel isn't allowed to have/catch (bound trap) or that is always instant death (double fault). The first number in the bugcheck params is the number of the trap (8 = double fault, etc) Consult an Intel x86 family manual to learn more about what these traps are. Here is a *portion* of those codes: If kv shows a taskGate use .tss on the part before the colon, then kv. Else if kv shows a trapframe use .trap on that value Else .trap on the appropriate frame will show where the trap was taken (on x86, this will be the ebp that goes with the procedure KiTrap) Endif kb will then show the corrected stack. Arguments: Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT Arg2: 0000000080050031 Arg3: 00000000000006f8 Arg4: fffff80002c76da2 Debugging Details: ------------------ BUGCHECK_STR: 0x7f_8 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: csrss.exe CURRENT_IRQL: 2 LAST_CONTROL_TRANSFER: from fffff80002c70ca9 to fffff80002c71740 STACK_TEXT: fffff880`02f6ace8 fffff800`02c70ca9 : 00000000`0000007f 00000000`00000008 00000000`80050031 00000000`000006f8 : nt!KeBugCheckEx fffff880`02f6acf0 fffff800`02c6f172 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69 fffff880`02f6ae30 fffff800`02c76da2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2 fffff880`02f8dff0 fffff800`02c39f5a : fffffa80`0a85a8f0 00000000`00000001 00000000`00000000 fffffa80`076ed7c8 : nt!SeAccessCheckWithHint+0x312 fffff880`02f8e0d0 fffff880`01591c5a : 3fb3f722`f373362f 99fff8d9`cf6fbd77 bb95dfbf`b5e7be77 69333b53`baba79fa : nt!SeAccessCheckFromState+0x102 fffff880`02f8e7c0 fffff880`0158f94f : 54fef172`c0000022 203bff23`00000000 d3f273fe`f71779df b776b9bb`b6fcbeb5 : NETIO!CompareSecurityContexts+0x6a fffff880`02f8e830 fffff880`015919b5 : 007335ff`539adf79 696bf7fc`9a7fedb7 2a7f35bd`134f5b01 42abbbe7`17d7b37f : NETIO!MatchValues+0xef fffff880`02f8e880 fffff880`01591845 : fffffa80`08c0a090 fffffa80`0951c860 fffff880`02f8eaa8 fffff880`02f8f1e0 : NETIO!FilterMatch+0x95 fffff880`02f8e8d0 fffff880`01592ccb : 00000000`00000000 00000000`00000000 fffff880`02f8f1e0 fffff880`02f8ea90 : NETIO!IndexListClassify+0x69 fffff880`02f8e950 fffff880`0163f417 : fffff880`02f8ee28 fffff880`02f8ee28 fffff880`02f8fb60 fffffa80`06e5f030 : NETIO!KfdClassify+0xa4e fffff880`02f8ecc0 fffff880`0163883e : fffff880`01747690 00000000`00000000 fffffa80`09c289b0 00000000`00000000 : tcpip!WfpAleClassify+0x57 fffff880`02f8ed00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpAlepAuthorizeSend+0x94e STACK_COMMAND: kb FOLLOWUP_IP: NETIO!CompareSecurityContexts+6a fffff880`01591c5a 448b442470 mov r8d,dword ptr [rsp+70h] SYMBOL_STACK_INDEX: 5 SYMBOL_NAME: NETIO!CompareSecurityContexts+6a FOLLOWUP_NAME: MachineOwner MODULE_NAME: NETIO IMAGE_NAME: NETIO.SYS DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc18a FAILURE_BUCKET_ID: X64_0x7f_8_NETIO!CompareSecurityContexts+6a BUCKET_ID: X64_0x7f_8_NETIO!CompareSecurityContexts+6a Followup: MachineOwner --------- --------------------------------------------------------------------------------- Your BSOD is caused by netio.sys driver. Try this Micrsoft hotfix and check if it solves the problem. http://support.microsoft.com/kb/979278/en This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Your BSOD is caused by netio.sys driver. Try this Micrsoft hotfix and check if it solves the problem. http://support.microsoft.com/kb/979278/en it is not caused by the NetIO driver, the fault occurs earlier. That's why it is a double fault. Susan, do you use ZoneAlarm? if yes update the network card drivers and try this hotfix (or install the Sp1 which includes the fix): Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F" http://support.microsoft.com/kb/981180/en-us If this doesn't solve it, uninstall ZoneAlarm."A programmer is just a tool which converts caffeine into code" Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221

Thanks for your reply, it's great to have people able to help! I will see what I can do with the information. Thanks very much! Susan

I am not sure, it's a friend's PC I'm trying to fix. I will check tomorrow! Thanks very much! Susan

Hi, Results verified by WinDBG, DumpCHK, and BlueScreenView. The Bug_Check was 7F CAUSE netio.sys which is a Windows component which means something else drove it into Fault. BugCheck 7F, {8, 80050031, 6f8, fffff80002c76da2} Probably caused by : NETIO.SYS ( NETIO!CompareSecurityContexts+6a ) 1. Update the network driver you are using - NIC or WiFi - check the System Maker's Site (Motherboard Maker for custom systems) and/or the actual device maker's site. 2. Check with System Maker for updates to BIOS, low level chipset drivers and the major device drivers. 3. Norton/Symantec is known for causing strange issues and aggravating others. Best to uninstall it to test as merely disabling it will still allow pieces of it to install. Uninstall it and run the Norton Removal Tool to prevent trouble causing remnants from being left behind. Below are recommendations to use while testing, even better permanently. Norton Removal Tool http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN&ln=en_US List of anti-malware program cleanup/uninstall tools http://social.answers.microsoft.com/Forums/en-US/msestart/thread/407bf6da-c05d-4546-8788-0aa4c25a1f91/ ------------------------------ Here is what I use and recommend : (These are all Free versions and very effective.) Avast and Prevx have proven extremely reliable and compatible with everything I have thrown at them. Microsoft Security Essentials and Prevx have also proven to be very reliable and compatible. Use MSE and Prevx or Avast and Prevx however not all 3. Avast Home Free - stop any shields you do not need except leave Standard, Web, and Network running. Prevx - Home - Free Windows Firewall Windows Defender (not needed if using MSE) IE - Protected Mode IE 8 - SmartScreen Filter ON (IE 7 Phishing Filter) I also have IE to always start with InPrivate Filter active if IE 8. (You occasionally have to turn it temporarily off with the little Icon on LEFT of the + bottom right of IE) Two versions of Avast are available 5.x and 4.8x Avast 5.x - Home - Free - Stop the Shields you do not use (except File, Web, Network, & Behavior) - double click the Orange Icon in Notification Area - Real Time Shields - click the Shield you want to stop - STOP. To stop the Orange Icon from showing an error indicator - click the Orange Icon - Upper Right - Settings - click Status Bar - uncheck the Shields you disabled - click OK http://www.avast.com/free-antivirus-download Avast 4.8x - Home - Free - stop any shields you do not need except leave Standard, Web, and Network running. (Double Click Blue icon - details next to OK. - upper left Shields - Terminate those you do not use.) http://www.avast.com/free-antivirus-download#tab4 Or use Microsoft Security Essentials - Free http://www.microsoft.com/Security_Essentials/ Prevx works well along side Avast or MSE Prevx - Home - Free small, fast, exceptional CLOUD protection, works with other security programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back here or use Google to see how to remove. http://www.prevx.com/ <-- information http://info.prevx.com/downloadcsi.asp <-- download PCmag - Prevx - Editor'a Choice http://www.pcmag.com/article2/0,2817,2346862,00.asp Also get Malwarebytes - free - use as scanner only. If you ever suspect malware, and that would be unsual with Avast and Prevx running except for an occasional low level cookie (no big deal), UPDATE it and then run it as a scanner. I have many scanners and they never find anything of note since I started using this setup. http://www.malwarebytes.org/ ================================================================ ================================================================ Do you have ZoneAlarm or any 3rd party firewall installed? If so that could be the cause. Other antivirus/security programs could be at least partially responsible. This Hotfix "Might" apply however do not use unless you are fairly sure. Using two Windows Filtering Platform (WFP) drivers causes a computer to crash when the computer is running Windows Vista, Windows 7, or Windows Server 2008 http://support.microsoft.com/kb/979278 Also check these : Stop error message when you run an application that transfers data by using the UDP protocol in Windows Server 2008 R2 or in Windows 7: "STOP 0x0000007F http://support.microsoft.com/kb/981180/ General causes of "STOP 0x0000007F" errors (applies to Vista and Windows 7 as well) http://support.microsoft.com/kb/137539 =========================================================== For BlueScreen troubleshooting methods using BlueScreenView and MyEventViewer see my replies if this thread - top 3 answers (+1 other). http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/c675b7b8-795f-474d-a1c4-6b77b3fcd990 We can analyze the minidumps if you make them available from the SkyDrive or other file sharing sites. Zip or upload the contents of C:\Windows\minidump Use SkyDrive to upload collected files and post screen shot/picture. http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65 ------------------------------------------------------------------------------------------------------------------------ References to Vista also apply to Windows 7. BCCode: 7f 0x0000007f with the 00000008 parameter usually means a hardware issue. Have you added hardware or updated drivers recently? Check Control Panel - Windows Updates to see if any drivers have been updated there just before this started happening. For 7f - this could be a hardware issue such as poorly seated cards or memory, though there are other causes. Weak powersupply could also lead to this. Use the troubleshooters above and below and when you get to the drivers and memory sections refer to my next message below and then return to the troubleshooters if needed If a PC remove ALL power. Open case, remove and reseat ALL cards, memory chips, and ALL cables (do not just try to snug) on both ends if they can be reached and on the device ends if not (removing the cables and reseating them helps to eliminate minor corrosion). Notice the 08 (double fault) as 1st parameter means there are likely two causes. Be sure to Update your drivers manually as using Windows Updates only finds certified drivers and Microsoft and the Device makers are far behind in that proces. Update NIC, WiFi, BIOS and Video/Display and other major drivers If a Laptop or a PC you might have to take to a shop (not BestBuy or other BigBox Stores) or your System maker's Support. ---------------------------------------------------------------------- BCCode: 7F 0x0000007F which is the same as 0x1000007F The UNEXPECTED_KERNEL_MODE_TRAP bug check has a value of 0x0000007F. This bug check indicates that the Intel CPU generated a trap and the kernel failed to catch this trap. This trap could be a bound trap (a trap the kernel is not permitted to catch) or adouble fault(a fault that occurred while processing an earlier fault, which always results in a system failure). Parameters The first parameter that appears on the blue screen specifies the trap number. The most common trap codes include the following: 0x00000000, or Divide by Zero Error, indicates that a DIV instruction is executed and the divisor is zero. Memory corruption, other hardware problems, or software failures can cause this error. 0x00000004, or Overflow, occurs when the processor executes a call to an interrupt handler when the overflow (OF) flag is set. 0x00000005, or Bounds Check Fault, indicates that the processor, while executing a BOUND instruction, finds that the operand exceeds the specified limits. A BOUND instruction ensures that a signed array index is within a certain range. 0x00000006, or Invalid Opcode, indicates that the processor tries to execute an invalid instruction. This error typically occurs when the instruction pointer has become corrupted and is pointing to the wrong location. The most common cause of this error is hardware memory corruption. 0x00000008, or Double Fault, indicates that an exception occurs during a call to the handler for a prior exception. Typically, the two exceptions are handled serially. However, there are several exceptions that cannot be handled serially, and in this situation the processor signals a double fault. There are two common causes of a double fault CAUSE Bug check 0x7F typically occurs after you install a faulty or mismatched hardware (especially memory) or if installed hardware fails. A double fault can occur when the kernel stack overflows. This overflow occurs if multiple drivers are attached to the same stack. For example, if two file system filter drivers are attached to the same stack and then the file system recurses back in, the stack overflows. Resolving the Problem Troubleshooting: If you recently added hardware to the computer, remove it to see if the error recurs. If existing hardware has failed, remove or replace the faulty component. Run hardware diagnostics that the system manufacturer supplies to determine which hardware component failed. The memory scanner is especially important. Faulty or mismatched memory can cause this bug check. For more informaiton about these procedures, see the owner's manual for your computer. Check that all adapter cards in the computer are properly seated. Use an ink eraser or an electrical contact treatment, available at electronics supply stores, to ensure adapter card contacts are clean. If the error appears on a newly installed system, check the availability of updates for the BIOS, the SCSI controller, or network cards. These kind of updates are typically available on the Web site or BBS of the hardware manufacturer. Confirm that all hard disk drives, hard disk controllers, and SCSI adapters are listed in the Microsoft Windows Marketplace Tested Products List. If the error occurred after the installation of a new or updated device driver, you should remove or replace the driver. If, under this circumstance, the error occurs during the startup sequence and the system partition is formatted with NTFS, you might be able to use Safe Mode to rename or delete the faulty driver. If the driver is used as part of the system startup process in Safe Mode, you have to start the computer by using the Recovery Console in order to access the file. Also restart your computer, and then press F8 at the character-based menu that displays the operating system choices. At theAdvanced Options menu, select theLast Known Good Configuration option. This option is most effective when you add only one driver or service at a time. Overclocking (setting the CPU to run at speeds above the rated specification) can cause this error. If you have overclocked the computer that is experiencing the error, return the CPU to the default clock speed setting. Check the System Log in Event Viewer for additional error messages that might help identify the device or driver that is causing the error. You can also disable memory caching of the BIOS to try to resolve the problem. If you encountered this error while upgrading to a new version of the Windows operating system, the error might be caused by a device driver, a system service, a virus scanner, or a backup tool that is incompatible with the new version. If possible, remove all third-party device drivers and system services and disable any virus scanners before you upgrade. Contact the software manufacturer to obtain updates of these tools. Also make sure that you have installed the latest Windows Service Pack. Finally, if all the above steps do not resolve the error, take the system motherboard to a repair facility for diagnostic testing. A crack, a scratched trace, or a defective component on the motherboard can also cause this error. BCCode: 7F 0x0000007F which is the same as 0x1000007F <-- read this link http://www.faultwire.com/solutions-fatal_error/Run-a-system-diagnostic-utility-supplied-by-your-0x1000007F-*1304.html ========================================== Look in the Event Viewer to see if anything is reported about those. http://www.computerperformance.co.uk/vista/vista_event_viewer.htm MyEventViewer - Free - a simple alternative to the standard event viewer of Windows. TIP - Options - Advanced Filter allows you to see a time frame instead of the whole file. http://www.nirsoft.net/utils/my_event_viewer.html ------------------------------------------------------------------------- Here are some methods to possibly fix the blue screen issue. If you could give the Blue Screen info that would help. Such as the BCC and the other 4 entries on the lower left. And any other error information such as STOP codes and info such as IRQL_NOT_LESS_OR_EQUAL or PAGE_FAULT_IN_NONPAGED_AREA and similar messages. As examples : BCCode: 116 BCP1: 87BC9510 BCP2: 8C013D80 BCP3: 00000000 BCP4: 00000002 or in this format : Stop: 0x00000000 (oxoooooooo oxoooooooo oxooooooooo oxoooooooo) tcpip.sys - Address 0x00000000 base at 0x000000000 DateStamp 0x000000000 This is an excellent tool for posting Blue Screen Error Information BlueScreenView scans all your minidump files created during 'blue screen of death' crashes, and displays the information about all crashes in one table - Free http://www.nirsoft.net/utils/blue_screen_view.html Many BlueScreens are caused by old or corrupted drivers, especially video drivers however there are other causes. You can do these in Safe Mode if needed or from Command Prompt from Vista DVD or Recovery Options if your system has that installed by the maker. How to Boot to the System Recovery Options in Windows 7 http://www.sevenforums.com/tutorials/668-system-recovery-options.html You can try a System Restore back to a point before the problem started if there is one. How to Do a System Restore in Windows 7 http://www.sevenforums.com/tutorials/700-system-restore.html ------------------------------------------------------------------------- Start - type this in Search Box -> COMMAND find at top and RIGHT CLICK - RUN AS ADMIN Enter this at the prompt - sfc /scannow How to Repair Windows 7 System Files with System File Checker http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program generates in Windows Vista cbs.log (and Windows 7) http://support.microsoft.com/kb/928228 The log might give you the answer if there was a corrupted driver. (Does not tell all the possible driver issues). Also run CheckDisk so we can rule out corruption as much as possible. How to Run Check Disk at Startup in Windows 7 http://www.sevenforums.com/tutorials/433-disk-check.html ------------------------------------------------------------------------- Often updating drivers will help, usually Video, Sound, Network Card (NIC), WiFi, 3rd party keyboard and mouse, as well as other major device drivers. Manually look at manufacturer's sites for drivers - and Device Maker's sites. http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm Installing and updating drivers in 7 (updating drivers manually using the methods above is preferred to ensure the latest drivers from System maker and Device makers are found) http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html How To Disable Automatic Driver Installation In Windows Vista - Drivers http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/ http://technet.microsoft.com/en-us/library/cc730606(WS.10).aspx ------------------------------------------------------------------------- How to fix BlueScreen (STOP) errors that cause Windows Vista to shut down or restart unexpectedly http://support.microsoft.com/kb/958233 Troubleshooting Vista Blue Screen, STOP Errors (and Windows 7) http://www.chicagotech.net/vista/vistabluescreen.htm Understanding and Decoding BSOD (blue screen of death) Messages http://www.taranfx.com/blog/?p=692 Windows - Troubleshooting Blue Screen Errors http://kb.wisc.edu/page.php?id=7033 ------------------------------------------------------------------------- In some cases this might be required. StartUp Repair from Recovery Options or Windows 7 disk How to Run a Startup Repair in Windows 7 http://www.sevenforums.com/tutorials/681-startup-repair.html How to Boot to the System Recovery Options in Windows 7 http://www.sevenforums.com/tutorials/668-system-recovery-options.html How to Create a Windows 7 System Repair Disc http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html How to Do a Repair Install to Fix Windows 7 http://www.sevenforums.com/tutorials/3413-repair-install.html Hope this helps. Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

Hi, References to Vista also apply to Windows 7. This is my generic how to for proper driver updates : This utility makes it easy to see which versions are loaded : DriverView - Free - utility displays the list of all device drivers currently loaded on your system. For each driver in the list, additional useful information is displayed: load address of the driver, description, version, product name, company that created the driver, and more. http://www.nirsoft.net/utils/driverview.html For Drivers check System Maker as fallbacks and Device Maker's which are the most current. Control Panel - Device Manager - Display Adapter - write down the make and complete model of your video adapter - double click - Driver's tab - write down the version info. Now click UPdate Driver (this may not do anything as MS is far behind certifying drivers) - then Right Click - Uninstall - REBOOT this will refresh the driver stack. Repeat that for Network - Network Card (NIC), Wifi, Sound, Mouse and Keyboard if 3rd party with their own software and drivers and any other major device drivers you have. Now go to System Maker's site (Dell, HP, Toshiba as examples) (as rollback) and then Device Maker's site (Realtek, Intel, Nvidia, ATI as examples) and get their latest versions. (Look for BIOS, Chipset and software updates at System Maker's site while there.) Download - SAVE - go to where you put them - Right Click - RUN AD ADMIN - REBOOT after each installation. Always check in Device Manager - Drivers tab to be sure the version you are installing actually shows up. This is because some drivers rollback before the latest is installed (sound drivers particularly do this) so install a driver - reboot - check to be sure it is installed and repeat as needed. Repeat at Device Makers - BTW at Device Makers DO NOT RUN THEIR SCANNER - check manually by model. Manually look at manufacturer's sites for drivers - and Device Maker's sites. http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm Installing and updating drivers in 7 (updating drivers manually using the methods above is preferred to ensure the latest drivers from System maker and Device makers are found) http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html If you update drivers manually then it is a good idea to disable Driver Installations in Windows Updates, this leaves Windows Updates ON however it will not install drivers which will usually be older and cause issues. If Updates suggests a new driver then HIDE it (Right Click on it) and then go look for new ones manually if you wish. How To Disable Automatic Driver Installation In Windows Vista - Drivers http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/ http://technet.microsoft.com/en-us/library/cc730606(WS.10).aspx ========================================== Memory tests do not catch all errors such as mismatched memory (possible even for sticks that appear to be identical) and when faster memory is placed in system behind slower memory. So it is best to also swap sticks in and out to check for those even if all memory tests fail to show a problem. To test RAM check here - let it run 4+ hours or so. <-- best method www.memtest.org For the Windows Memory Diagnostic Tool. Start - type in Search box -> Memory - find Memory Diagnostics tool at top of list - Right Click - RUN AS ADMIN follow the instructions Windows Vista: How to Scan / Test your RAM or Memory with Windows Vista Memory Diagnostic Tool http://www.shivaranjan.com/2007/11/01/windows-vista-how-to-scan-test-your-ram-or-memory-with-windows-vista-memory-diagnostic-tool/ How to Run the Memory Diagnostics Tool in Windows 7 http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html Test Your Computer’s Memory Using Windows Vista Memory Diagnostic Tool http://www.howtogeek.com/howto/windows-vista/test-your-computers-memory-using-windows-vista-memory-diagnostic-tool/ Hope this helps.Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.

Hi SpiritX, Thanks for all the info, looks like it may take me a while to go through it all! The PC does have norton so could be the culprit. Will have to see how it goes! Kind regards Susan

Does the PC have ZoneAlarm? Have you tried the hotfixes? The minidumps are not useful for UNEXPECTED_KERNEL_MODE_TRAP bug checks. Configure your Windows to create a kernel dump [1] and upload the zipped dump (C:\Windows\memory.dmp) to your SkyDrive and post a link here. André [1] http://www.brighthub.com/computing/windows-platform/articles/81867.aspx"A programmer is just a tool which converts caffeine into code" Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221

The PC doesn't have zone alarm, it had norton so I uninstalled and replaced with Avast, am waiting to hear if the problem is fixed but as it was intermittent I think it will be wise to wait a couple weeks! THanks for your help! Susan