Well, following up on this, I left the system running for the weekend with the WDT, brown out, stack over/underflow, etc. turned off. I'll see on Monday if the system has crashed. I'll try adding some code at the end of flash to see if I'm getting a runaway program causing a PC rollover. It's interesting that this just started happenning on a very few systems out of the thousands that have been built in the past few years. One thing I'm wondering about is chip programming. We're doing ICSP using the ICD-2. I know that the ProMate3 is a "production programmer" while the ICD is not, though the ICD has served me well for several years. I recall previously reading that the ProMate does program verify at a variety of Vdd voltages, while the ICD does not. How can the ProMate do this when the chip is in circuit and the system power supply is powering the PIC? Or does the ProMate power the PIC (and the rest of the system)? Does anyone think we're possibly getting flaky flash programming? How does ICD programming compare with self-programming through a bootloader? We do a lot of field updates through a bootloader. Is its programming of flash reliable? THANKS! Harold -- FCC Rules Updated Daily at http://www.hallikainen.com - Advertising opportunities available! -- http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist