Hmmm...
The names you mention are names of some of the .dll that get removed from the c:\windows\system32 directory during the <steps for help desk> stage, and are then restored from 'good' verisions. Therefore they are probably what's causing the the stack to overflow. I'll try to increase the stack size - I'm hunting through the knowledge base at Microsoft in another window at the moment.
The computer in question does not have Nortons AV installed on it, nor does it have any Symantec software on it. It's completely standalone - has never been connected to another computer and never intended to be. So all the software and upgrades for drivers and alike are downloaded onto this computer, scanned, transfered onto a thumbdrive, and then transfered onto his computer as needed.
I've also gone back into the event log and must extend my appologies, for I failed to mention something that might have helped. For the first two times the system had a BSOD, (and the first two times only) the event log has the following entry very close to the save dump entry:
Code:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 13/02/2007
Time: 9:38:17 AM
User: N/A
Computer: WARRENS
Description:
Error code 1000007f, parameter1 00000008, parameter2 80042000,
parameter3 00000000, parameter4 00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 37 1000007
0020: 66 20 20 50 61 72 61 6d f Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 38 2c 20 000008,
0038: 38 30 30 34 32 30 30 30 80042000
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 30 30 30 0000
Code:
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 13/02/2007
Time: 9:39:09 AM
User: N/A
Computer: WARRENS
Description:
Error code 1000007f, parameter1 00000008, parameter2 80042000,
parameter3 00000000, parameter4 00000000.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 37 1000007
0020: 66 20 20 50 61 72 61 6d f Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 38 2c 20 000008,
0038: 38 30 30 34 32 30 30 30 80042000
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 30 30 30 0000
I'm still a little concerned though about the errors that the two different benchmarkers that I've run so far as outlined above.