Guest Astonished John Posted September 14, 2007 Posted September 14, 2007 I keep getting a blue screen error and the computer shuts down immediately I’ve tested all the hardware with a testing program which reports all components are working. I’m now assuming it is a software problem, how do I find out what is causing the problem. My operating system is XP pro and the error happens randomly sometimes I can go the whole day without an occurrence, other times it can happen several times a day.
Guest nass Posted September 14, 2007 Posted September 14, 2007 RE: blue screen error "Astonished John" wrote: > I keep getting a blue screen error and the computer shuts down immediately > I’ve tested all the hardware with a testing program which reports all > components are working. I’m now assuming it is a software problem, how do I > find out what is causing the problem. My operating system is XP pro and the > error happens randomly sometimes I can go the whole day without an > occurrence, other times it can happen several times a day. Could you try the following please: Have a look in the Event Viewer for error messages(X) that can shed some light and post it back in your next post by performing the following and also the System File Checker (SFC) sfc /scannow: Open a Notepad, customize or minimize to the taskbar as you will need it later for this step to copy the error message on it. Open a run command and type in: eventvwr.msc click [OK] you will get the Event viewer control Panel. click on each of these: Application System Security Look in the right Pane/window for error message with red (X) or Yellow exclamation mark /!\ , double click each one to get more info about the causer. On the Event error properties message you will see: Up Arrow Down arrow Two pages Click on the two pages to copy the error message then bring up the Notepad you opened earlier and right click on the first line and select Paste from the list, this will paste the error message on a Notepad. Please don't duplicate the error message one of each kind will be sufficient. HOW TO: View and Manage Event Logs in Event Viewer in Windows XP http://support.microsoft.com/kb/308427/en-us HTH. nass ----- http://www.nasstec.co.uk
Guest John Posted September 14, 2007 Posted September 14, 2007 RE: blue screen error The link below describes how to read dump files when blue screens occur. http://support.microsoft.com/default.aspx/kb/315263 "Astonished John" wrote: > I keep getting a blue screen error and the computer shuts down immediately > I’ve tested all the hardware with a testing program which reports all > components are working. I’m now assuming it is a software problem, how do I > find out what is causing the problem. My operating system is XP pro and the > error happens randomly sometimes I can go the whole day without an > occurrence, other times it can happen several times a day. >
Guest WaIIy Posted September 14, 2007 Posted September 14, 2007 Re: blue screen error On Fri, 14 Sep 2007 02:54:07 -0700, nass <nass@discussions.microsoft.com> wrote: > > >"Astonished John" wrote: > >> I keep getting a blue screen error and the computer shuts down immediately >> I’ve tested all the hardware with a testing program which reports all >> components are working. I’m now assuming it is a software problem, how do I >> find out what is causing the problem. My operating system is XP pro and the >> error happens randomly sometimes I can go the whole day without an >> occurrence, other times it can happen several times a day. > I got one a few days ago for the first time in four years. I finally read the entire blue screen and near the bottom it told me which file was causing the problem and pointed me in the right direction.
Guest Astonished John Posted September 15, 2007 Posted September 15, 2007 RE: blue screen error Hi nass, thankyou for your reponse, I've done as you requested copy and pasting the latest problems and hope you can make some sense of it. System Events Event Type: Error Event Source: System Error Event Category: (102) Event ID: 1003 Date: 9/15/2007 Time: 10:56:46 AM User: N/A Computer: WISEOWL Description: Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3 00054f88, parameter4 00000000. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 53 79 73 74 65 6d 20 45 System E 0008: 72 72 6f 72 20 20 45 72 rror Er 0010: 72 6f 72 20 63 6f 64 65 ror code 0018: 20 30 30 30 30 30 30 34 0000004 0020: 65 20 20 50 61 72 61 6d e Param 0028: 65 74 65 72 73 20 30 30 eters 00 0030: 30 30 30 30 38 66 2c 20 00008f, 0038: 30 30 30 31 61 63 66 30 0001acf0 0040: 2c 20 30 30 30 35 34 66 , 00054f 0048: 38 38 2c 20 30 30 30 30 88, 0000 0050: 30 30 30 30 0000 Event Type: Error Event Source: ipnathlp Event Category: None Event ID: 31008 Date: 9/14/2007 Time: 3:20:55 PM User: N/A Computer: WISEOWL Description: The DNS proxy agent was unable to read the local list of name-resolution servers from the registry. The data is the error code. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 6f 00 00 00 o... Event Type: Error Event Source: Print Event Category: None Event ID: 19 Date: 9/13/2007 Time: 8:36:16 PM User: NT AUTHORITY\SYSTEM Computer: WISEOWL Description: Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: BridgeMP Event Category: None Event ID: 14702 Date: 9/6/2007 Time: 11:37:53 PM User: N/A Computer: WISEOWL Description: Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]: The bridge could not modify the adapter's packet filter. The adapter will not function correctly. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 04 00 02 00 5a 00 ......Z. 0008: 00 00 00 00 6e 39 00 c0 ....n9.À 0010: 00 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 11 00 01 c0 ...À Event Type: Error Event Source: Cdrom Event Category: None Event ID: 11 Date: 9/6/2007 Time: 11:37:52 PM User: N/A Computer: WISEOWL Description: The driver detected a controller error on \Device\CdRom0. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 0f 00 68 00 01 00 b8 00 ..h...¸. 0008: 00 00 00 00 0b 00 04 c0 .......À 0010: 03 01 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 4c 5a 2e 00 00 00 00 00 LZ...... 0030: ff ff ff ff 06 00 00 00 ÿÿÿÿ.... 0038: 40 00 00 00 00 00 00 00 @....... 0040: ff 20 0a 12 48 01 00 10 ÿ ..H... 0048: 08 00 00 00 04 00 00 00 ........ 0050: c0 80 5d 8a c0 c8 1a 8a À�]�ÀÈ.� 0058: 00 00 00 00 c8 a1 17 8a ....È¡.� 0060: 00 00 00 00 00 00 00 00 ........ 0068: 4a 01 00 00 5a 00 00 00 J...Z... 0070: 08 00 00 00 00 00 00 00 ........ 0078: 00 00 00 00 00 00 00 00 ........ 0080: 00 00 00 00 00 00 00 00 ........ 0088: 00 00 00 00 00 00 00 00 ........ Event Type: Warning Event Source: USER32 Event Category: None Event ID: 1073 Date: 9/11/2007 Time: 12:47:25 PM User: WISEOWL\john Computer: WISEOWL Description: The attempt to reboot WISEOWL failed For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 .... Event Type: Warning Event Source: Server Event Category: None Event ID: 2504 Date: 9/11/2007 Time: 10:24:50 AM User: N/A Computer: WISEOWL Description: The server could not bind to the transport \Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: aa 05 00 00 ª... Event Type: Warning Event Source: Tcpip Event Category: None Event ID: 4226 Date: 9/6/2007 Time: 8:17:00 PM User: N/A Computer: WISEOWL Description: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 01 00 54 00 ......T. 0008: 00 00 00 00 82 10 00 80 ....�..� 0010: 01 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ Application Events Event Type: Error Event Source: Application Hang Event Category: None Event ID: 1001 Date: 9/15/2007 Time: 9:50:24 AM User: N/A Computer: WISEOWL Description: Fault bucket 471789395. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 42 75 63 6b 65 74 3a 20 Bucket: 0008: 34 37 31 37 38 39 33 39 47178939 0010: 35 0d 0a 5.. Event Type: Error Event Source: Application Error Event Category: None Event ID: 1000 Date: 9/13/2007 Time: 1:59:17 PM User: N/A Computer: WISEOWL Description: Faulting application fwmanager.exe, version 2.0.0.2, faulting module fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 41 70 70 6c 69 63 61 74 Applicat 0008: 69 6f 6e 20 46 61 69 6c ion Fail 0010: 75 72 65 20 20 66 77 6d ure fwm 0018: 61 6e 61 67 65 72 2e 65 anager.e 0020: 78 65 20 32 2e 30 2e 30 xe 2.0.0 0028: 2e 32 20 69 6e 20 66 77 .2 in fw 0030: 6d 61 6e 61 67 65 72 2e manager. 0038: 65 78 65 20 32 2e 30 2e exe 2.0. 0040: 30 2e 32 20 61 74 20 6f 0.2 at o 0048: 66 66 73 65 74 20 30 30 ffset 00 0050: 30 33 34 61 38 64 0d 0a 034a8d.. I hope you can shine some light on the above so I can get back to learning how to use the computer rather than worrying about fixing it. Thanks John "nass" wrote: > > > "Astonished John" wrote: > > > I keep getting a blue screen error and the computer shuts down immediately > > I’ve tested all the hardware with a testing program which reports all > > components are working. I’m now assuming it is a software problem, how do I > > find out what is causing the problem. My operating system is XP pro and the > > error happens randomly sometimes I can go the whole day without an > > occurrence, other times it can happen several times a day. > > > Could you try the following please: > Have a look in the Event Viewer for error messages(X) that can shed some > light and post it back in your next post by performing the following and also > the System File Checker (SFC) sfc /scannow: > Open a Notepad, customize or minimize to the taskbar as you will need it > later for this step to copy the error message on it. > Open a run command and type in: > eventvwr.msc click [OK] you will get the Event viewer control Panel. > click on each of these: > Application > System > Security > Look in the right Pane/window for error message with red (X) or Yellow > exclamation mark /!\ , double click each one to get more info about the > causer. > On the Event error properties message you will see: > Up Arrow > Down arrow > Two pages > Click on the two pages to copy the error message then bring up the Notepad > you opened earlier and right click on the first line and select Paste from > the list, this will paste the error message on a Notepad. > Please don't duplicate the error message one of each kind will be sufficient. > HOW TO: View and Manage Event Logs in Event Viewer in Windows XP > http://support.microsoft.com/kb/308427/en-us > HTH. > nass > ----- > http://www.nasstec.co.uk >
Guest nass Posted September 15, 2007 Posted September 15, 2007 RE: blue screen error Hi John, My reply in-line: "Astonished John" wrote: > Hi nass, > thankyou for your reponse, I've done as you requested copy and pasting the > latest problems and hope you can make some sense of it. Go through these cleaning steps to see or get a clear opinion on how clean your machine is: = Click Start >> Control Panel>>Network and Internet Connections >> Double click Internet Options. On the IE properties windows you will see these Tabs: General | Security | Privacy | Content | Connections | Programs | Advanced. Under General Tab clear your History, Internet Files and Cookies. Then click on Advanced tab and scroll down to under the Browsing Option: [&] Browsing [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box. [ ] Disable script Debugging (internet Explorer) <= check this box [ ] Disable Script Debugging (Other) <= check this box Then click on Programs Tab and click Manage Add-Ons and Disable all non Verified Add-Ons (You should Renable them later one-by-one and see the culprit and update it or remove it. How to manage Add-Ons: http://support.microsoft.com/kb/883256 2.... And also for malware from here: http://onecare.live.com/site/en-gb/default.htm?s_cid=sah http://onecare.live.com/standard/en-gb/default.htm Run a scan from here on-line: http://www.sophos.com http://www3.ca.com/securityadvisor/virusinfo/scan.aspx http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym Download Avast Cleaner from here: http://www.avast.com/eng/avast-virus-cleaner.html Lots of tools to download and disinfect your machine: http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/ http://free.grisoft.com/doc/5390/lng/us/tpl/v5 Open a run command and type in: ipconfig /flushdns click [OK] ipconfig /renew click [OK] netsh winsock reset click [OK] or you can use this winsock fixer: http://www.nasstec.co.uk/tools.html Execute and t will prompt you to restart, please do so. and see if your issue or part of it will resolve. =How to perform a clean boot procedure to prevent background programs from interfering with a game or a program that you currently use http://support.microsoft.com/kb/331796 Download the FileMon to see the Running Processes in realtime from here: http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx Or Process Explorer : http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx You may have a bad RAM try to test your RAM by running Memory test by downloading this tool and unzip it and make a floppy or CD/DVD and run it on Reboot. http://oca.microsoft.com/en/windiag.asp. You may need to reposition/reset the RAM sticks in their slots. Download the Hijackthis and send the report to one of many forums for analysis and troubleshooting: When all else fails, HijackThis v2.0.2 (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware. Post your log to: http://www.spywareinfo.com/~merijn/downloads.html http://aumha.net/viewforum.php?f=30, http://castlecops.com/forum67.html, http://forums.subratam.org/index.php?showforum=7 http://www.bleepingcomputer.com/tutorials/tutorial42.html Event Type: Error Event Source: System Error Event Category: (102) Event ID: 1003 Date: 9/15/2007 Time: 10:56:46 AM User: N/A Computer: WISEOWL Description: Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3 00054f88, parameter4 00000000. It could be an overheating issue, Bad RAM, Bad Power Supply, Bad drivers for Vids. http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1 Event Type: Error Event Source: ipnathlp Event Category: None Event ID: 31008 Date: 9/14/2007 Time: 3:20:55 PM User: N/A Computer: WISEOWL Description: The DNS proxy agent was unable to read the local list of name-resolution servers from the registry. The data is the error code. If you are using long DNS name, it can cause this problem, also if the ICS sharing service is disabled. Try to make sure the service is running by opening a run command and type in: services.msc click [OK] Locate the Internet Connection sharing and make start Manual or Auto. ipnathlp.dll open this with a Notepad and check the entries there. NOTE: That if you have sharing implemented on your Network, which you have if I'm understanding correctly, hence the Printer!. Chapter 32 - Networking Name Resolution and Registration http://www.microsoft.com/technet/archive/ntwrkstn/reskit/rktcp03.mspx?mfr=true Event Type: Error Event Source: Print Event Category: None Event ID: 19 Date: 9/13/2007 Time: 8:36:16 PM User: NT AUTHORITY\SYSTEM Computer: WISEOWL Description: Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer. Again an application causing this, either the shares mismatched or disabled. Event Type: Error Event Source: BridgeMP Event Category: None Event ID: 14702 Date: 9/6/2007 Time: 11:37:53 PM User: N/A Computer: WISEOWL Description: Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]: The bridge could not modify the adapter's packet filter. The adapter will not function correctly. CHECK YOUR WIRELESS CARD FUNCTIONALITY OR UNINSTALL THEN REINSTALL, AGAIN UPDATE THE FIRMWARE IF THERE IS AN AVAILABLE UPDATE FOR IT. Event Type: Error Event Source: Cdrom Event Category: None Event ID: 11 Date: 9/6/2007 Time: 11:37:52 PM User: N/A Computer: WISEOWL Description: The driver detected a controller error on \Device\CdRom0. Try to see the Cables fitted correctly for the CD-ROM to the Mobo, also the jumpers and update the Firmware. Update your MOTHERBOARD BIOS AND ALL THE DRIVERS. Event Type: Warning Event Source: USER32 Event Category: None Event ID: 1073 Date: 9/11/2007 Time: 12:47:25 PM User: WISEOWL\john Computer: WISEOWL Description: The attempt to reboot WISEOWL failed Event ID 1073 Occurs When You Attempt to Move the Quorum Disk http://support.microsoft.com/kb/257879 Try user Hive cleanup: http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en http://www.eventid.net/display.asp?eventid=1073&eventno=1960&source=USER32&phase=1 Event Type: Warning Event Source: Server Event Category: None Event ID: 2504 Date: 9/11/2007 Time: 10:24:50 AM User: N/A Computer: WISEOWL Description: The server could not bind to the transport \Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}. There something interrupting the Signal on line, like Noise or Bad Phone line or your Printer and File sharing ware deselected or you have a corrupted winsock. Browse List Problems When File and Print Sharing Is Not Installed http://support.microsoft.com/kb/254527 Event Type: Warning Event Source: Tcpip Event Category: None Event ID: 4226 Date: 9/6/2007 Time: 8:17:00 PM User: N/A Computer: WISEOWL Description: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. First, what Firewall you have installed?. EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033 Network Protection Technologies http://technet.microsoft.com/en-us/library/bb457156.aspx#XSLTsection127121120120 Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (KB893066) http://www.updatexp.com/kb893066.html http://www.speedguide.net/read_articles.php?id=1497 http://www.lvllord.de/?lang=en&url=downloads Application Events Event Type: Error Event Source: Application Hang Event Category: None Event ID: 1001 Date: 9/15/2007 Time: 9:50:24 AM User: N/A Computer: WISEOWL Description: Fault bucket 471789395. could indicate memory leakage?. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 42 75 63 6b 65 74 3a 20 Bucket: 0008: 34 37 31 37 38 39 33 39 47178939 0010: 35 0d 0a 5.. Event Type: Error Event Source: Application Error Event Category: None Event ID: 1000 Date: 9/13/2007 Time: 1:59:17 PM User: N/A Computer: WISEOWL Description: Faulting application fwmanager.exe, version 2.0.0.2, faulting module fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d. Do you have one of the below: Either try to update it or uninstall then reinstall the software for it. C:\Program Files\Seyeon Tech\FlexWatch Manager\FwManager.exe C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe You can try system Repair/install of XP: http://michaelstevenstech.com/XPrepairinstall.htm If the above too much for you, then my advice take the machine to your local repair shop. HTH. nass ---- http://www.nasstec.co.uk
Guest Astonished John Posted September 16, 2007 Posted September 16, 2007 RE: blue screen error Hi nass Thank you I have done all the things that are immediately within my limited scope of understanding. Removed and re-seated the Ram – 2gb matched pair Removed Wireless Card – I mostly use a LAN cable anyway and I do remember when I installed the software I got a warning from Microsoft that it hadn’t been certified by them and it could cause problems at sometime in the future, but D-link told me to ignore this message. Checked the CD-ROM cables are fitted correctly Reset the winsock Altered the IE properties as suggested and Disable all non Verified Add-Ons uninstall then reinstalled FWManager.exe so far the system appears to be stable, (hasn’t crashed for at least two hours!) but if I do experience anymore trouble you’ve given me plenty of other options to follow up. Thank you, I’ve learnt a lot. I'm really grateful because I live in a remote area the local repair shop is a long way. TDH John "nass" wrote: > > Hi John, > My reply in-line: > > "Astonished John" wrote: > > > Hi nass, > > thankyou for your reponse, I've done as you requested copy and pasting the > > latest problems and hope you can make some sense of it. > > Go through these cleaning steps to see or get a clear opinion on how > clean your machine is: > = Click Start >> Control Panel>>Network and Internet Connections >> Double > click Internet Options. > On the IE properties windows you will see these Tabs: > General | Security | Privacy | Content | Connections | Programs | > Advanced. > Under General Tab clear your History, Internet Files and Cookies. > Then click on Advanced tab and scroll down to under the Browsing Option: > [&] Browsing > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box. > [ ] Disable script Debugging (internet Explorer) <= check this box > [ ] Disable Script Debugging (Other) <= check this box > > Then click on Programs Tab and click Manage Add-Ons and Disable all non > Verified Add-Ons (You should Renable them later one-by-one and see the > culprit and update it or remove it. > How to manage Add-Ons: > http://support.microsoft.com/kb/883256 > > 2.... And also for malware from here: > http://onecare.live.com/site/en-gb/default.htm?s_cid=sah > http://onecare.live.com/standard/en-gb/default.htm > > Run a scan from here on-line: > http://www.sophos.com > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx > http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym > Download Avast Cleaner from here: > http://www.avast.com/eng/avast-virus-cleaner.html > Lots of tools to download and disinfect your machine: > http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/ > http://free.grisoft.com/doc/5390/lng/us/tpl/v5 > > Open a run command and type in: > ipconfig /flushdns click [OK] > ipconfig /renew click [OK] > netsh winsock reset click [OK] > > or you can use this winsock fixer: > http://www.nasstec.co.uk/tools.html > Execute and t will prompt you to restart, please do so. and see if your > issue or part of it will resolve. > > =How to perform a clean boot procedure to prevent background programs from > interfering with a game or a program that you currently use > http://support.microsoft.com/kb/331796 > Download the FileMon to see the Running Processes in realtime from here: > http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx > Or Process Explorer : > http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx > > You may have a bad RAM try to test your RAM by running Memory test by > downloading this tool and unzip it and make a floppy or CD/DVD and run it on > Reboot. > http://oca.microsoft.com/en/windiag.asp. > You may need to reposition/reset the RAM sticks in their slots. > > Download the Hijackthis and send the report to one of > many > forums for analysis and troubleshooting: > When all else fails, HijackThis v2.0.2 > (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is > the preferred tool to use. > It will help you to both identify and remove any hijackware/spyware. Post > your log to: > http://www.spywareinfo.com/~merijn/downloads.html > http://aumha.net/viewforum.php?f=30, > http://castlecops.com/forum67.html, > http://forums.subratam.org/index.php?showforum=7 > http://www.bleepingcomputer.com/tutorials/tutorial42.html > > Event Type: Error > Event Source: System Error > Event Category: (102) > Event ID: 1003 > Date: 9/15/2007 > Time: 10:56:46 AM > User: N/A > Computer: WISEOWL > Description: > Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3 > 00054f88, parameter4 00000000. > It could be an overheating issue, Bad RAM, Bad Power Supply, Bad drivers for > Vids. > http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1 > > > > Event Type: Error > Event Source: ipnathlp > Event Category: None > Event ID: 31008 > Date: 9/14/2007 > Time: 3:20:55 PM > User: N/A > Computer: WISEOWL > Description: > The DNS proxy agent was unable to read the local list of name-resolution > servers from the registry. The data is the error code. > If you are using long DNS name, it can cause this problem, also if the ICS > sharing service is disabled. > Try to make sure the service is running by opening a run command and type in: > services.msc click [OK] > Locate the Internet Connection sharing and make start Manual or Auto. > > ipnathlp.dll open this with a Notepad and check the entries there. > > NOTE: That if you have sharing implemented on your Network, which you have > if I'm understanding correctly, hence the Printer!. > Chapter 32 - Networking Name Resolution and Registration > http://www.microsoft.com/technet/archive/ntwrkstn/reskit/rktcp03.mspx?mfr=true > > > Event Type: Error > Event Source: Print > Event Category: None > Event ID: 19 > Date: 9/13/2007 > Time: 8:36:16 PM > User: NT AUTHORITY\SYSTEM > Computer: WISEOWL > Description: > Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer. > Again an application causing this, either the shares mismatched or disabled. > > Event Type: Error > Event Source: BridgeMP > Event Category: None > Event ID: 14702 > Date: 9/6/2007 > Time: 11:37:53 PM > User: N/A > Computer: WISEOWL > Description: > Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]: > The bridge could not modify the adapter's packet filter. The adapter will > not function correctly. > > CHECK YOUR WIRELESS CARD FUNCTIONALITY OR UNINSTALL THEN REINSTALL, AGAIN > UPDATE THE FIRMWARE IF THERE IS > AN AVAILABLE UPDATE FOR IT. > > > Event Type: Error > Event Source: Cdrom > Event Category: None > Event ID: 11 > Date: 9/6/2007 > Time: 11:37:52 PM > User: N/A > Computer: WISEOWL > Description: > The driver detected a controller error on \Device\CdRom0. > Try to see the Cables fitted correctly for the CD-ROM to the Mobo, also the > jumpers and update the Firmware. > Update your MOTHERBOARD BIOS AND ALL THE DRIVERS. > > > Event Type: Warning > Event Source: USER32 > Event Category: None > Event ID: 1073 > Date: 9/11/2007 > Time: 12:47:25 PM > User: WISEOWL\john > Computer: WISEOWL > Description: > The attempt to reboot WISEOWL failed > Event ID 1073 Occurs When You Attempt to Move the Quorum Disk > http://support.microsoft.com/kb/257879 > Try user Hive cleanup: > http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en > http://www.eventid.net/display.asp?eventid=1073&eventno=1960&source=USER32&phase=1 > > > Event Type: Warning > Event Source: Server > Event Category: None > Event ID: 2504 > Date: 9/11/2007 > Time: 10:24:50 AM > User: N/A > Computer: WISEOWL > Description: > The server could not bind to the transport > \Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}. > > There something interrupting the Signal on line, like Noise or Bad Phone > line or your Printer and File sharing ware deselected or you have a corrupted > winsock. > Browse List Problems When File and Print Sharing Is Not Installed > http://support.microsoft.com/kb/254527 > > > Event Type: Warning > Event Source: Tcpip > Event Category: None > Event ID: 4226 > Date: 9/6/2007 > Time: 8:17:00 PM > User: N/A > Computer: WISEOWL > Description: > TCP/IP has reached the security limit imposed on the number of concurrent > TCP connect attempts. > First, what Firewall you have installed?. > > EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED > http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033 > Network Protection Technologies > http://technet.microsoft.com/en-us/library/bb457156.aspx#XSLTsection127121120120 > > Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of > Service (KB893066) > http://www.updatexp.com/kb893066.html > > http://www.speedguide.net/read_articles.php?id=1497 > http://www.lvllord.de/?lang=en&url=downloads > > > > > Application Events > > Event Type: Error > Event Source: Application Hang > Event Category: None > Event ID: 1001 > Date: 9/15/2007 > Time: 9:50:24 AM > User: N/A > Computer: WISEOWL > Description: > Fault bucket 471789395. > could indicate memory leakage?. > > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > 0008: 34 37 31 37 38 39 33 39 47178939 > 0010: 35 0d 0a 5.. > > Event Type: Error > Event Source: Application Error > Event Category: None > Event ID: 1000 > Date: 9/13/2007 > Time: 1:59:17 PM > User: N/A > Computer: WISEOWL > Description: > Faulting application fwmanager.exe, version 2.0.0.2, faulting module > fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d. > > Do you have one of the below: > Either try to update it or uninstall then reinstall the software for it. > C:\Program Files\Seyeon Tech\FlexWatch Manager\FwManager.exe > C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe > > You can try system Repair/install of XP: > http://michaelstevenstech.com/XPrepairinstall.htm > > If the above too much for you, then my advice take the machine to your local > repair shop. > > HTH. > nass > ---- > http://www.nasstec.co.uk > >
Guest nass Posted September 16, 2007 Posted September 16, 2007 RE: blue screen error Glad to help John, thanks for your feedback and good luck. Regards, nass ----- http://www.nasstec.co.uk "Astonished John" wrote: > Hi nass > Thank you I have done all the things that are immediately within my limited > scope of understanding. > Removed and re-seated the Ram – 2gb matched pair > Removed Wireless Card – I mostly use a LAN cable anyway and I do remember > when I installed the software I got a warning from Microsoft that it hadn’t > been certified by them and it could cause problems at sometime in the future, > but D-link told me to ignore this message. > Checked the CD-ROM cables are fitted correctly > Reset the winsock > Altered the IE properties as suggested and Disable all non Verified Add-Ons > uninstall then reinstalled FWManager.exe > so far the system appears to be stable, (hasn’t crashed for at least two > hours!) but if I do experience anymore trouble you’ve given me plenty of > other options to follow up. > Thank you, I’ve learnt a lot. I'm really grateful because I live in a remote > area the local repair shop is a long way. > TDH > John > > > "nass" wrote: > > > > > Hi John, > > My reply in-line: > > > > "Astonished John" wrote: > > > > > Hi nass, > > > thankyou for your reponse, I've done as you requested copy and pasting the > > > latest problems and hope you can make some sense of it. > > > > Go through these cleaning steps to see or get a clear opinion on how > > clean your machine is: > > = Click Start >> Control Panel>>Network and Internet Connections >> Double > > click Internet Options. > > On the IE properties windows you will see these Tabs: > > General | Security | Privacy | Content | Connections | Programs | > > Advanced. > > Under General Tab clear your History, Internet Files and Cookies. > > Then click on Advanced tab and scroll down to under the Browsing Option: > > [&] Browsing > > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box. > > [ ] Disable script Debugging (internet Explorer) <= check this box > > [ ] Disable Script Debugging (Other) <= check this box > > > > Then click on Programs Tab and click Manage Add-Ons and Disable all non > > Verified Add-Ons (You should Renable them later one-by-one and see the > > culprit and update it or remove it. > > How to manage Add-Ons: > > http://support.microsoft.com/kb/883256 > > > > 2.... And also for malware from here: > > http://onecare.live.com/site/en-gb/default.htm?s_cid=sah > > http://onecare.live.com/standard/en-gb/default.htm > > > > Run a scan from here on-line: > > http://www.sophos.com > > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx > > http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym > > Download Avast Cleaner from here: > > http://www.avast.com/eng/avast-virus-cleaner.html > > Lots of tools to download and disinfect your machine: > > http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/ > > http://free.grisoft.com/doc/5390/lng/us/tpl/v5 > > > > Open a run command and type in: > > ipconfig /flushdns click [OK] > > ipconfig /renew click [OK] > > netsh winsock reset click [OK] > > > > or you can use this winsock fixer: > > http://www.nasstec.co.uk/tools.html > > Execute and t will prompt you to restart, please do so. and see if your > > issue or part of it will resolve. > > > > =How to perform a clean boot procedure to prevent background programs from > > interfering with a game or a program that you currently use > > http://support.microsoft.com/kb/331796 > > Download the FileMon to see the Running Processes in realtime from here: > > http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx > > Or Process Explorer : > > http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx > > > > You may have a bad RAM try to test your RAM by running Memory test by > > downloading this tool and unzip it and make a floppy or CD/DVD and run it on > > Reboot. > > http://oca.microsoft.com/en/windiag.asp. > > You may need to reposition/reset the RAM sticks in their slots. > > > > Download the Hijackthis and send the report to one of > > many > > forums for analysis and troubleshooting: > > When all else fails, HijackThis v2.0.2 > > (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is > > the preferred tool to use. > > It will help you to both identify and remove any hijackware/spyware. Post > > your log to: > > http://www.spywareinfo.com/~merijn/downloads.html > > http://aumha.net/viewforum.php?f=30, > > http://castlecops.com/forum67.html, > > http://forums.subratam.org/index.php?showforum=7 > > http://www.bleepingcomputer.com/tutorials/tutorial42.html > > > > Event Type: Error > > Event Source: System Error > > Event Category: (102) > > Event ID: 1003 > > Date: 9/15/2007 > > Time: 10:56:46 AM > > User: N/A > > Computer: WISEOWL > > Description: > > Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3 > > 00054f88, parameter4 00000000. > > It could be an overheating issue, Bad RAM, Bad Power Supply, Bad drivers for > > Vids. > > http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1 > > > > > > > > Event Type: Error > > Event Source: ipnathlp > > Event Category: None > > Event ID: 31008 > > Date: 9/14/2007 > > Time: 3:20:55 PM > > User: N/A > > Computer: WISEOWL > > Description: > > The DNS proxy agent was unable to read the local list of name-resolution > > servers from the registry. The data is the error code. > > If you are using long DNS name, it can cause this problem, also if the ICS > > sharing service is disabled. > > Try to make sure the service is running by opening a run command and type in: > > services.msc click [OK] > > Locate the Internet Connection sharing and make start Manual or Auto. > > > > ipnathlp.dll open this with a Notepad and check the entries there. > > > > NOTE: That if you have sharing implemented on your Network, which you have > > if I'm understanding correctly, hence the Printer!. > > Chapter 32 - Networking Name Resolution and Registration > > http://www.microsoft.com/technet/archive/ntwrkstn/reskit/rktcp03.mspx?mfr=true > > > > > > Event Type: Error > > Event Source: Print > > Event Category: None > > Event ID: 19 > > Date: 9/13/2007 > > Time: 8:36:16 PM > > User: NT AUTHORITY\SYSTEM > > Computer: WISEOWL > > Description: > > Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer. > > Again an application causing this, either the shares mismatched or disabled. > > > > Event Type: Error > > Event Source: BridgeMP > > Event Category: None > > Event ID: 14702 > > Date: 9/6/2007 > > Time: 11:37:53 PM > > User: N/A > > Computer: WISEOWL > > Description: > > Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]: > > The bridge could not modify the adapter's packet filter. The adapter will > > not function correctly. > > > > CHECK YOUR WIRELESS CARD FUNCTIONALITY OR UNINSTALL THEN REINSTALL, AGAIN > > UPDATE THE FIRMWARE IF THERE IS > > AN AVAILABLE UPDATE FOR IT. > > > > > > Event Type: Error > > Event Source: Cdrom > > Event Category: None > > Event ID: 11 > > Date: 9/6/2007 > > Time: 11:37:52 PM > > User: N/A > > Computer: WISEOWL > > Description: > > The driver detected a controller error on \Device\CdRom0. > > Try to see the Cables fitted correctly for the CD-ROM to the Mobo, also the > > jumpers and update the Firmware. > > Update your MOTHERBOARD BIOS AND ALL THE DRIVERS. > > > > > > Event Type: Warning > > Event Source: USER32 > > Event Category: None > > Event ID: 1073 > > Date: 9/11/2007 > > Time: 12:47:25 PM > > User: WISEOWL\john > > Computer: WISEOWL > > Description: > > The attempt to reboot WISEOWL failed > > Event ID 1073 Occurs When You Attempt to Move the Quorum Disk > > http://support.microsoft.com/kb/257879 > > Try user Hive cleanup: > > http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en > > http://www.eventid.net/display.asp?eventid=1073&eventno=1960&source=USER32&phase=1 > > > > > > Event Type: Warning > > Event Source: Server > > Event Category: None > > Event ID: 2504 > > Date: 9/11/2007 > > Time: 10:24:50 AM > > User: N/A > > Computer: WISEOWL > > Description: > > The server could not bind to the transport > > \Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}. > > > > There something interrupting the Signal on line, like Noise or Bad Phone > > line or your Printer and File sharing ware deselected or you have a corrupted > > winsock. > > Browse List Problems When File and Print Sharing Is Not Installed > > http://support.microsoft.com/kb/254527 > > > > > > Event Type: Warning > > Event Source: Tcpip > > Event Category: None > > Event ID: 4226 > > Date: 9/6/2007 > > Time: 8:17:00 PM > > User: N/A > > Computer: WISEOWL > > Description: > > TCP/IP has reached the security limit imposed on the number of concurrent > > TCP connect attempts. > > First, what Firewall you have installed?. > > > > EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED > > http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033 > > Network Protection Technologies > > http://technet.microsoft.com/en-us/library/bb457156.aspx#XSLTsection127121120120 > > > > Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of > > Service (KB893066) > > http://www.updatexp.com/kb893066.html > > > > http://www.speedguide.net/read_articles.php?id=1497 > > http://www.lvllord.de/?lang=en&url=downloads > > > > > > > > > > Application Events > > > > Event Type: Error > > Event Source: Application Hang > > Event Category: None > > Event ID: 1001 > > Date: 9/15/2007 > > Time: 9:50:24 AM > > User: N/A > > Computer: WISEOWL > > Description: > > Fault bucket 471789395. > > could indicate memory leakage?. > > > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > > 0008: 34 37 31 37 38 39 33 39 47178939 > > 0010: 35 0d 0a 5.. > > > > Event Type: Error > > Event Source: Application Error > > Event Category: None > > Event ID: 1000 > > Date: 9/13/2007 > > Time: 1:59:17 PM > > User: N/A > > Computer: WISEOWL > > Description: > > Faulting application fwmanager.exe, version 2.0.0.2, faulting module > > fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d. > > > > Do you have one of the below: > > Either try to update it or uninstall then reinstall the software for it. > > C:\Program Files\Seyeon Tech\FlexWatch Manager\FwManager.exe > > C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe > > > > You can try system Repair/install of XP: > > http://michaelstevenstech.com/XPrepairinstall.htm > > > > If the above too much for you, then my advice take the machine to your local > > repair shop.
Recommended Posts