Win XP: BlueScreen

Hallo,

ich habe ein kleines Problem mit dem System, dass ich meiner Schwester aus Teilen älterer, bis vor 3 Tagen noch stabil laufender PCs, zusammengeschraubt habe.
Und zwar erhalte ich in unterschiedlichen Intervallen Bluescreens. Diese treten immer wieder spontan unter Windows auf, können aber quasi gewollt herbeigeführt werden, indem ich z.B. die Siedler 2 next. Gen. starte, AntiVir durchlaufen lasse oder aber Titan Quest spielen will -stürzt bei TQ beim laden des Menüs ab. Das sicherlich anspruchsvollere Doom 3 macht komischerweise keine Probleme.

Das System:
Mainboard: AsRock K7S41GX mit C-Media AC97 onboard sound (Neuware)
CPU: AMD Athlon XP 2400+
Arbeitsspeicher: 2x 512MB DDR Infeneon PC(3200) derzeit @ 400MHz, allerdings kamen die Blues auch @ 333Mhz
Grafikkarte: Sapphire ATI X1600 PRO 512MB
Festplatten: 1x Western Digital 80 GB 1x Western Digital 60 GB
Laufwerke: 1x DvD-Rom und 1x CD Brenner
Netzteil: 420 Watt
Gehäuselüfter: 2x 120er
Betriebsystem: Win XP Professional SP2
Virenschutz: AntiVir

Memtest86 ist duchrgelaufen Areitspeicher scheint demnach ok.
System wurde bereits 2x neu aufgespielt mit dem immer gleichen Problem. Allerdings wurde die Platte 2 nicht formatiert, da hier Daten gesichert sind, ein Virus könnte sich also eingeschlichen haben, auch wenn ich nichts finden kann.
Onboard Sound wurde testweise mal abgeschaltet und die Treiber deinstalliert, die neuesten Treiber wurden versucht und als das auch nichts geholfen hat, habe ich die Windows Standard Treiber aufgespielt.

Debugg Report:

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini032908-05.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a620
Debug session time: Sat Mar 29 16:25:04.906 2008 (GMT+1)
System Uptime: 0 days 0:00:56.478
Loading Kernel Symbols
..................................................................... ...............................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007F, {d, 0, 0, 0}



Probably caused by : win32k.sys ( win32k!xxxMsgWaitForMultipleObjects+b0 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000d, EXCEPTION_GP_FAULT
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------




BUGCHECK_STR:  0x7f_d

CUSTOMER_CRASH_COUNT:  5

DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT

PROCESS_NAME:  csrss.exe

LAST_CONTROL_TRANSFER:  from 806ee2e7 to 804df0ab

STACK_TEXT: 
f795e928 806ee2e7 badb0d00 36fc0021 f795e984 nt!KiExceptionExit+0x4f
f795e998 804efb44 00000100 806ee2d0 860609f0 hal!KfLowerIrql+0x17
f795e9d4 804eeed9 00000000 00000000 00000000 nt!KiDeliverApc+0x118
f795e9ec 804e3b7d 804e3a0d e14a08e0 00000000 nt!KiSwapThread+0x64
f795ea24 bf807c70 00000003 86143308 00000001 nt!KeWaitForMultipleObjects+0x284
f795ea5c bf88964e 00000002 86143308 bf88c5dd win32k!xxxMsgWaitForMultipleObjects+0xb0
f795ed30 bf87264d bf9aa5a0 00000001 f795ed54 win32k!xxxDesktopThread+0x333
f795ed40 bf80109a bf9aa5a0 f795ed64 0071fff4 win32k!xxxCreateSystemThreads+0x6a
f795ed54 804de7ec 00000000 00000022 00000000 win32k!NtUserCallOneParam+0x23
f795ed54 7c91eb94 00000000 00000022 00000000 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 00000000 00000000 00000000 0x7c91eb94


STACK_COMMAND:  kb

FOLLOWUP_IP:
win32k!xxxMsgWaitForMultipleObjects+b0
bf807c70 8945fc          mov     dword ptr [ebp-4],eax

SYMBOL_STACK_INDEX:  5

SYMBOL_NAME:  win32k!xxxMsgWaitForMultipleObjects+b0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  45f013f6

FAILURE_BUCKET_ID:  0x7f_d_win32k!xxxMsgWaitForMultipleObjects+b0

BUCKET_ID:  0x7f_d_win32k!xxxMsgWaitForMultipleObjects+b0

Followup: MachineOwner
---------

kd> lmvm win32k
start    end        module name
bf800000 bf9c2200   win32k     (pdb symbols)          C:\Symbols\win32k.pdb\0D7F2AA78FCB4657914E6E65375BE5012\win32k.pdb
    Loaded symbol image file: win32k.sys
    Mapped memory image file: C:\Symbols\win32k.sys\45F013F61c2200\win32k.sys
    Image path: win32k.sys
    Image name: win32k.sys
    Timestamp:        Thu Mar 08 14:47:34 2007 (45F013F6)
    CheckSum:         001D056F
    ImageSize:        001C2200
    File version:     5.1.2600.3099
    Product version:  5.1.2600.3099
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0416.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Sistema operacional Microsoft® Windows®
    InternalName:     win32k.sys
    OriginalFilename: win32k.sys
    ProductVersion:   5.1.2600.3099
    FileVersion:      5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)
    FileDescription:  Driver Win32 multiusuário
    LegalCopyright:   © Microsoft Corporation. Todos os direitos reservados.