Random blue screens after login. Did not occur everytime. Problem
was not memory as verified by CD bootable memory test. Also tried two
differnet sets of memory with no improvement.
Analyzing MEMORY.DMP using windbg showed the offending executable
to be wmpnetwk.exe (main executable for media sharing)
Disabling media sharing in Media player, then stopping the service and then
just
for good measure marking the service as disabled has eliminated the problem.
Further info:
HP Pavillion DV9000 laptop with AMD Turion, Vista Home Premium with all
updates.
BugCheck 8E, {c0000005, 81de8760, 94c95668, 0}

From windbg analysis of dump file:

Debugging Details:
------------------

Page 1c6cd not present in the dump file. Type ".hh dbgerr004" for details

PEB is paged out (Peb.Ldr = 7ffd600c). Type ".hh dbgerr001" for details

PEB is paged out (Peb.Ldr = 7ffd600c). Type ".hh dbgerr001" for details

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx
referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
nt!NtProtectVirtualMemory+21
81de8760 0000 add byte ptr [eax],al

TRAP_FRAME: 94c95668 -- (.trap 0xffffffff94c95668)
ErrCode = 00000002
eax=000000d2 ebx=81de873f ecx=00000000 edx=81de873f esi=94c95780 edi=94c956f4
eip=81de8760 esp=94c956dc ebp=94c956f4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!NtProtectVirtualMemory+0x21:
81de8760 0000 add byte ptr [eax],al
ds:0023:000000d2=??
Resetting default scope

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: wmpnetwk.exe

CURRENT_IRQL: 0

MISALIGNED_IP:
nt!NtProtectVirtualMemory+21
81de8760 0000 add byte ptr [eax],al

LAST_CONTROL_TRANSFER: from 81c2335e to 81cd8681

STACK_TEXT:
94c95228 81c2335e 0000008e c0000005 81de8760 nt!KeBugCheckEx+0x1e
94c955f8 81c8d66a 94c95614 00000000 94c95668 nt!KiDispatchException+0x1a9
94c95660 81c8d61e 94c956f4 81de8760 badb0d00 nt!CommonDispatchException+0x4a
94c956d8 81c8caaa ffffffff 94c957c4 94c957c0 nt!KiExceptionExit+0x186
94c956d8 81c7ed29 ffffffff 94c957c4 94c957c0 nt!KiFastCallEntry+0x12a
94c95764 81e292c2 ffffffff 94c957c4 94c957c0 nt!ZwProtectVirtualMemory+0x11
94c957e0 81e241c2 00000000 00000001 00000000 nt!RtlCreateUserStack+0x1b3
94c9581c 81e248d5 94c95a48 00000000 00000000 nt!PspSetupUserStack+0x2c
94c958bc 81e12353 96e45340 00000000 9bd5d23c nt!PspAllocateThread+0x265
94c9591c 81e23f3e 001ff1c4 001fffff 00000000 nt!PspCreateThread+0x154
94c95d30 81c8caaa 001ff1c4 001fffff 00000000 nt!NtCreateThreadEx+0x13a
94c95d30 77710f34 001ff1c4 001fffff 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
001ff2e8 00000000 00000000 00000000 00000000 0x77710f34


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!NtProtectVirtualMemory+21
81de8760 0000 add byte ptr [eax],al

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!NtProtectVirtualMemory+21

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

MODULE_NAME: hardware

FAILURE_BUCKET_ID: IP_MISALIGNED

BUCKET_ID: IP_MISALIGNED

Followup: MachineOwner
---------

"pbirvin" <pbirvin (AT) discussions (DOT) microsoft.com> wrote

programming group.

To find the group you need:

http://www.microsoft.com/communities...D-2224A4FEB3EA

Select your language from the Tree View on the left, then scroll down to
Windows. In the Windows category, open your version of Windows and find an
applicable
group there.