XP Crashes

[chicsdiggit]

I keep getting crashes and I don't have any clue as to why it keeps crashing.
I am running XP Pro SP2, with the latest updates.

Athlon x2 3800
1 GB RAM
200 Gig Hard Drive
Antec True Power2.0 480
Asus A8n32-SLI Deluxe
LeadTek PX7800 GT TDH
SB Audigy 2

Here are the Events listed under System.


Here are the 10 events before it occurred:

Starting from first to last before crash.

(this group is from the Service Control Manager - TIME for all these events: 4:45:00 PM)
The Terminal Services service entered the running state. Event ID 7036
The Fast User Switching Compatibility service was successfully sent a start control. Event ID 7035
The Fast User Switching Compatibility service entered the running state. Event ID 7036
The Network Location Awareness (NLA) service was successfully sent a start control. Event ID 7035
The Network Location Awareness (NLA) service entered the running state. Event ID 7036
The Telephony service entered the running state. Event ID 7036
The Remote Access Connection Manager service was successfully sent a start control. Event ID 7035
The Application Layer Gateway Service service was successfully sent a start control. Event ID 7035
The Application Layer Gateway Service service entered the running state. Event ID 7036
The Remote Access Connection Manager service entered the running state. Event ID 7036

(these are from the Event Log - TIME for these events: 4:49:59)
Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Multiprocessor Free. Event ID 6009
The Event log service was started. Event ID 6005

(this one is from the Save Dump - TIME for this event: 4:50:01)
The computer has rebooted from a bugcheck. The bugcheck was: 0x1000007f (0x0000000d, 0x00000000, 0x00000000, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini111606-03.dmp. Event ID 1001

(and this is from nvata -- TIME: 4:49:34)
Device identified. Event ID 2


Here are the X-ERROR crashes:

(these are DCOM Errors -- TIME: 4:50:15)
DCOM got error "The service database is locked. " attempting to start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811} Event ID 10005


DCOM got error "The service database is locked. " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF} Event ID 10005


DCOM got error "The service database is locked. " attempting to start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E} Event ID 10005

DCOM got error "The service database is locked. " attempting to start the service winmgmt with arguments "" in order to run the server:
{8BC3F05E-D86B-11D0-A075-00C04FB68820} Event ID 10005

 

[chicsdiggit]

Here are the Errors under Application, all during the same time.

Avg7UpdSvc --- Service started Event ID 1
Creative Service for CDR ---Service started Event ID 105
AvgEMS --- Service started Event ID 1
WMDM PMSP Service --- The service was started. Event ID 105
EventSystem --- The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007041F from line 44 of d:\qxp_slp\com\com1x******\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.
Event ID (50)

 

[imported_nocturne]

Try debugging the referenced dump file. In my sig is a link to dclive's guide.

 

[chicsdiggit]

Originally posted by: nocturne
Try debugging the referenced dump file. In my sig is a link to dclive's guide.

It appears that dclive's guide is not there anymore. Thanks, btw. You are the only one that responded!

 

[chicsdiggit]

Originally posted by: nocturne
Try debugging the referenced dump file. In my sig is a link to dclive's guide.

How is this supposed to work??? Help! lol

 

[chicsdiggit]

Anyone at all? I could use the help here, and these crashes seem to be getting worse, and they are ALWAYs irritating. THanks in advance!

 

[Rottie]

don't you want to do fresh/clean install windows xp might fix your worries.

I don't think nocturne is coming back anymore?

 

[chicsdiggit]

Originally posted by: Rottie
don't you want to do fresh/clean install windows xp might fix your worries.

I don't think nocturne is coming back anymore?

A fresh, clean install is a little drastic, don't you think? I figure SOMEBODY out there might have an insight to all of this. Surely others have had the same problem...

 

[btcomm1]

Download the debugging tools for windows http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx. Install the latest one open it then go to file then open crash dump. Then it will give you a better idea of what is causing your crashes post it back here and maybe someone will know what it is.

 

[chicsdiggit]

Here is the latest when I open the dmp file in the debugger.


Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini112706-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Mon Nov 27 08:54:53.828 2006 (GMT-8)
System Uptime: 0 days 5:22:59.516
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..............
Unable to load image win32k.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c000001d, bf813e87, f118661c, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : hardware ( win32k+13e87 )

Followup: MachineOwner
---------

 

[chicsdiggit]

Here is the dump just before the previously posted one.


Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini112706-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Mon Nov 27 03:31:28.390 2006 (GMT-8)
System Uptime: 0 days 19:11:04.097
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
................................................................................................................................................
Loading User Symbols
Loading unloaded module list
........................
Unable to load image Ntfs.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for Ntfs.sys
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Unable to load image sr.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for sr.sys
*** ERROR: Module load completed but symbols could not be loaded for sr.sys
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, f72000ce, ecec29c0, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*** WARNING: Unable to verify timestamp for SiWinAcc.sys
*** ERROR: Module load completed but symbols could not be loaded for SiWinAcc.sys
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : hardware ( SiWinAcc+1292 )

Followup: MachineOwner
---------

 

[marulee]

Have you debug it yet?

Or, have you disable some of the services from safe mode?

Go though the services and see what is been enable on your startup type.

 

[chicsdiggit]

Originally posted by: marulee
Have you debug it yet?

Or, have you disable some of the services from safe mode?

Go though the services and see what is been enable on your startup type.

Ok, I will do that. Anything in particualr I should look for?