El Pc se me reinicia frecuentemente

Hago crossposting a microsoft.public.es.windwsxp porque me parece que
los dos grupos son adecuados.

Tengo Windows 2000 + SP4, actualizado con los parches para el sasser,
blaster y zotob, y utilizo el AVG antivirus.
Ultimamente se reinicia solo, todos los días. Guiándome por el artículo
de Jose Manuel Tella Llop
( www.multingles.net/docs/jmt/bsod.htm ),
he intentado analizar el volcado de memoria. Al analizar el minidump,
dice que parece un problema de win32k.sys. Se que esto puede ser un
problema de memoria, pero le he pasado el memtest86 durante unas horas y
no ha dado error. Lo pasaré más tiempo posteriormente. Cuando cambié el
tipo de volcado a kernel dump, cuando me dio el pantallazo, como tarda
más vi que ponía lo de win32k.sys. Al abrirlo con el WINDBG muestra lo
siguiente:


*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: a00645af, The address that the exception occurred at
Arg3: 00000000, Parameter 0 of the exception
Arg4: 245c8b00, Parameter 1 of the exception

Debugging Details:


*** ERROR: Symbol file could not be found. Defaulted to export symbols
for SHELL32.dll -
*** WARNING: Unable to verify checksum for persfw.exe
*** ERROR: Module load completed but symbols could not be loaded for
persfw.exe
Page 368 not present in the dump file. Type ".hh dbgerr004" for details
Page 368 not present in the dump file. Type ".hh dbgerr004" for details
Page b550 not present in the dump file. Type ".hh dbgerr004" for details
Page b550 not present in the dump file. Type ".hh dbgerr004" for details
Page 5f88 not present in the dump file. Type ".hh dbgerr004" for details
Page 5f88 not present in the dump file. Type ".hh dbgerr004" for details
Page 1a841 too large to be in the dump file.
Page 1a841 too large to be in the dump file.
Page b000 not present in the dump file. Type ".hh dbgerr004" for details
Page b000 not present in the dump file. Type ".hh dbgerr004" for details
Page 368 not present in the dump file. Type ".hh dbgerr004" for details
Page 368 not present in the dump file. Type ".hh dbgerr004" for details
Page b550 not present in the dump file. Type ".hh dbgerr004" for details
Page b550 not present in the dump file. Type ".hh dbgerr004" for details
Page 5f88 not present in the dump file. Type ".hh dbgerr004" for details
Page 5f88 not present in the dump file. Type ".hh dbgerr004" for details
Page 1a841 too large to be in the dump file.
Page 1a841 too large to be in the dump file.
Page b000 not present in the dump file. Type ".hh dbgerr004" for details
Page b000 not present in the dump file. Type ".hh dbgerr004" for details
Page 368 not present in the dump file. Type ".hh dbgerr004" for details
Page 368 not present in the dump file. Type ".hh dbgerr004" for details
Page b550 not present in the dump file. Type ".hh dbgerr004" for details
Page b550 not present in the dump file. Type ".hh dbgerr004" for details
Page 5f88 not present in the dump file. Type ".hh dbgerr004" for details
Page 5f88 not present in the dump file. Type ".hh dbgerr004" for details
Page 1a841 too large to be in the dump file.
Page 1a841 too large to be in the dump file.
Page b000 not present in the dump file. Type ".hh dbgerr004" for details
Page b000 not present in the dump file. Type ".hh dbgerr004" for details

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - La instrucci n en "0x%08lx" hace
referencia a la memoria en "0x%08lx". La memoria no se puede "%s".

FAULTING_IP:
win32k!BuildHwndList+f
a00645af a0008b5c24 mov al,[245c8b00]

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 245c8b00

READ_ADDRESS: 245c8b00 Nonpaged pool

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x1E

LAST_CONTROL_TRANSFER: from 80866a1b to 80830999

STACK_TEXT:
bb314ba0 80866a1b bb314bbc 00000000 bb314c10
nt!Ki386CheckDelayedNpxTrap+0x5d
bb314c08 808669cd 01453708 bb314c2c 80856d5f nt!KiTrap0D+0x923
bb314c14 80856d5f 81672f48 e2a4eb58 00000000 nt!KiTrap0D+0x8d5
bb314c2c 80856cfa 808573c5 8162cd68 77592238 nt!RtlpSetSecurityObject+0xdf
bb314c84 a008e327 a039aa28 00000002 00000000 nt!RtlpSetSecurityObject+0x7a
bb314cd4 a008e506 00000000 00000000 77592238 win32k!_FindWindowEx+0x86
bb314d48 80865b91 00000000 00000000 0157f594 win32k!NtUserFindWindowEx+0x119
bb314d48 77e167ec 00000000 00000000 0157f594 nt!Dr_kitb_a+0x51
0157f5a4 77e22564 00000000 00000000 77592238 USER32!NtUserFindWindowEx+0xb
0157f5bc 775a7b4c 77592238 00000000 77c72be3 USER32!FindWindowW+0x12
WARNING: Stack unwind information not available. Following frames may be
wrong.
0157f99c 775cf940 00000001 0157f9b4 00000000 SHELL32!Shell_NotifyIconW+0x21
0157fd5c 0040d6cf 00000001 0157fd6c 000001e8 SHELL32!Shell_NotifyIcon+0xa0
79453a17 03e80824 c2000000 8b550004 565151ec persfw+0xd6cf
79453a1b c2000000 8b550004 565151ec 0875ff57 0x3e80824
79453a1f 8b550004 565151ec 0875ff57 50f8458d 0xc2000000
79453a23 565151ec 0875ff57 50f8458d ffffa0e8 0x8b550004
79453a27 0875ff57 50f8458d ffffa0e8 85f88bff 0x565151ec
79453a2b 50f8458d ffffa0e8 85f88bff 9a840fff 0x875ff57
79453a2f ffffa0e8 85f88bff 9a840fff 8b000345 0x50f8458d
79453a33 85f88bff 9a840fff 8b000345 45143035 0xffffa0e8
79453a37 9a840fff 8b000345 45143035 75ff5779 0x85f88bff
79453a3b 8b000345 45143035 75ff5779 83d6ff0c 0x9a840fff
79453a3f 45143035 75ff5779 83d6ff0c 0f000c7d 0x8b000345
79453a43 75ff5779 83d6ff0c 0f000c7d 03459685 0x45143035
79453a47 83d6ff0c 0f000c7d 03459685 00c0b900 0x75ff5779
79453a4b 0f000c7d 03459685 00c0b900 c13b0000 0x83d6ff0c
83d6ff0c 00000000 00182fa4 02d0000c bf650020 0xf000c7d


STACK_COMMAND: .bugcheck ; kb

FOLLOWUP_IP:
win32k!BuildHwndList+f
a00645af a0008b5c24 mov al,[245c8b00]

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: win32k!BuildHwndList+f

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4047dcd6

FAILURE_BUCKET_ID: 0x1E_win32k!BuildHwndList+f

BUCKET_ID: 0x1E_win32k!BuildHwndList+f

Followup: MachineOwner


Lo de persfw se refiere al kerio personal firewall 2.1.5


¿Alguien tiene alguna idea o sabe lo que puedo hacer?


Gracias y un saludo