Prev: System hang when a data disk does error recovery
Next: Create a restorable system backup with NTBACKUP?
From: dr nemo on 26 Jan 2009 22:25
Kind of wish I could send both logs as attachments. I did look at the event &
application logs, but here is excerpts from each, representing an entire boot
sequence from start to BSOD:

Application log:

Type Date Time Source Category Event User Computer
Information 1/23/2009 02:06:11 EAPOL None 2002 N/A ACME
Information 1/23/2009 02:06:11 EAPOL None 2003 N/A ACME
Information 1/23/2009 02:05:49 McLogEvent None 5000 SYSTEM ACME
Information 1/23/2009 02:05:42 SecurityCenter None 1800 N/A ACME
Information 1/23/2009 02:05:38 avg8emc None 1 N/A ACME
Information 1/23/2009 02:05:30 sprtsvc_dellsupportcenter None 1 N/A ACME
Information 1/23/2009 02:05:13 McAfee SiteAdvisor Service None 0 N/A ACME
Information 1/23/2009 02:05:12 gusvc None 0 N/A ACME
Information 1/23/2009 02:05:12 ATI Smart None 105 N/A ACME
Warning 1/23/2009 02:00:51 Userenv None 1517 SYSTEM ACME
Information 1/23/2009 01:59:12 EAPOL None 2002 N/A ACME
Information 1/23/2009 01:59:12 EAPOL None 2003 N/A ACME
Information 1/23/2009 01:58:47 McLogEvent None 5000 SYSTEM ACME
Information 1/23/2009 01:58:39 SecurityCenter None 1800 N/A ACME
Information 1/23/2009 01:58:31 avg8emc None 1 N/A ACME

.... Break ... (no errors listed)

Type Date Time Source Category Event User Computer
Information 1/22/2009 23:34:53 EAPOL None 2003 N/A ACME
Information 1/22/2009 23:34:26 SecurityCenter None 1800 N/A ACME
Information 1/22/2009 23:34:17 McLogEvent None 5000 SYSTEM ACME
Information 1/22/2009 23:33:48 sprtsvc_dellsupportcenter None 1 N/A ACME
Information 1/22/2009 23:33:41 avg8emc None 1 N/A ACME
Information 1/22/2009 23:32:05 McAfee SiteAdvisor Service None 0 N/A ACME
Information 1/22/2009 23:31:52 gusvc None 0 N/A ACME
Information 1/22/2009 23:31:47 ATI Smart None 105 N/A ACME
Error 1/22/2009 18:14:41 WMIAdapter None 4099 Nemo ACME
Warning 1/22/2009 18:14:36 WinMgmt None 63 Nemo ACME
Warning 1/22/2009 18:14:36 WinMgmt None 63 Nemo ACME
Error 1/22/2009 08:29:50 Application Error None 1000 N/A ACME
Error 1/22/2009 08:29:13 Application Error None 1001 N/A ACME
Error 1/22/2009 08:29:01 Application Error None 1000 N/A ACME
Warning 1/21/2009 17:46:10 MsiInstaller None 1015 Nemo ACME
Warning 1/21/2009 17:43:57 MsiInstaller None 1015 Nemo ACME
Information 1/21/2009 17:43:18 crypt32 None 7 N/A ACME
Information 1/21/2009 17:43:16 crypt32 None 7 N/A ACME
Information 1/21/2009 17:41:27 EAPOL None 2002 N/A ACME
Information 1/21/2009 17:41:27 EAPOL None 2003 N/A ACME
Information 1/21/2009 17:41:19 SecurityCenter None 1800 N/A ACME
Information 1/21/2009 17:40:58 McLogEvent None 5000 SYSTEM ACME
Information 1/21/2009 17:40:42 sprtsvc_dellsupportcenter None 1 N/A ACME
Information 1/21/2009 17:40:39 avg8emc None 1 N/A ACME
Error 1/21/2009 17:40:20 crypt32 None 8 N/A ACME
Error 1/21/2009 17:40:20 crypt32 None 8 N/A ACME
Error 1/21/2009 17:40:20 crypt32 None 8 N/A ACME
Error 1/21/2009 17:40:03 crypt32 None 8 N/A ACME
Error 1/21/2009 17:40:02 crypt32 None 8 N/A ACME
Information 1/21/2009 17:39:13 McAfee SiteAdvisor Service None 0 N/A ACME
Information 1/21/2009 17:39:09 gusvc None 0 N/A ACME
Information 1/21/2009 17:39:08 ATI Smart None 105 N/A ACME
Information 1/21/2009 17:37:38 EAPOL None 2002 N/A ACME
Information 1/21/2009 17:37:38 EAPOL None 2003 N/A ACME
Information 1/21/2009 17:37:03 McLogEvent None 5000 SYSTEM ACME
Information 1/21/2009 17:36:58 SecurityCenter None 1800 N/A ACME
Information 1/21/2009 17:36:38 avg8emc None 1 N/A ACME
Information 1/21/2009 17:36:23 sprtsvc_dellsupportcenter None 1 N/A ACME
Error 1/21/2009 17:36:17 crypt32 None 8 N/A ACME
Error 1/21/2009 17:36:03 crypt32 None 8 N/A ACME
Error 1/21/2009 17:36:00 crypt32 None 8 N/A ACME
Information 1/21/2009 17:35:14 McAfee SiteAdvisor Service None 0 N/A ACME
Information 1/21/2009 17:35:02 gusvc None 0 N/A ACME
Information 1/21/2009 17:34:59 ATI Smart None 105 N/A ACME
Warning 1/21/2009 13:28:08 crypt32 None 6 N/A ACME
Error 1/21/2009 13:28:08 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:08 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:06 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:05 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:05 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:04 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:02 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:02 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:02 crypt32 None 8 N/A ACME
Error 1/21/2009 13:28:02 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:49 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:49 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:47 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:47 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:44 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:44 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:42 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:41 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:41 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:41 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:41 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:41 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:39 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:39 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:38 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:38 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:37 crypt32 None 8 N/A ACME
Error 1/21/2009 13:27:36 crypt32 None 8 N/A ACME
Error 1/21/2009 13:26:07 crypt32 None 8 N/A ACME
Error 1/21/2009 13:26:05 crypt32 None 8 N/A ACME
Error 1/21/2009 13:25:54 crypt32 None 8 N/A ACME
Error 1/21/2009 13:25:53 crypt32 None 8 N/A ACME
Information 1/21/2009 13:21:51 EAPOL None 2002 N/A ACME
Information 1/21/2009 13:21:51 EAPOL None 2003 N/A ACME
Error 1/21/2009 13:21:48 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:48 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:47 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:47 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:47 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:47 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:47 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:46 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:46 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:46 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:46 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:46 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:46 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:45 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:45 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:45 ESENT General 485 N/A ACME
Error 1/21/2009 13:21:45 ESENT General 485 N/A ACME
Information 1/21/2009 13:21:20 McLogEvent None 5000 SYSTEM ACME
Information 1/21/2009 13:21:13 SecurityCenter None 1800 N/A ACME
Information 1/21/2009 13:21:06 avg8emc None 1 N/A ACME
Information 1/21/2009 13:21:02 sprtsvc_dellsupportcenter None 1 N/A ACME
Information 1/21/2009 13:20:38 McAfee SiteAdvisor Service None 0 N/A ACME
Information 1/21/2009 13:20:37 gusvc None 0 N/A ACME
Information 1/21/2009 13:20:37 ATI Smart None 105 N/A ACME
Information 1/21/2009 13:00:22 EAPOL None 2002 N/A ACME
Information 1/21/2009 13:00:22 EAPOL None 2003 N/A ACME
Information 1/21/2009 13:00:03 SecurityCenter None 1800 N/A ACME
Information 1/21/2009 12:59:32 avg8emc None 1 N/A ACME
Information 1/21/2009 12:59:25 McLogEvent None 5000 SYSTEM ACME
Information 1/21/2009 12:59:12 sprtsvc_dellsupportcenter None 1 N/A ACME
Error 1/21/2009 12:58:47 crypt32 None 8 N/A ACME
Information 1/21/2009 12:58:04 McAfee SiteAdvisor Service None 0 N/A ACME
Information 1/21/2009 12:57:50 gusvc None 0 N/A ACME
Information 1/21/2009 12:57:47 ATI Smart None 105 N/A ACME
Error 1/20/2009 19:55:51 crypt32 None 8 N/A ACME
Error 1/20/2009 19:55:51 crypt32 None 8 N/A ACME

This is the system log - for these excerpts I tried to match the event time
to both.


Type Date Time Source Category Event User Computer

Information 1/23/2009 02:08:15 Service Control Manager None 7035 Nemo ACME
Information 1/23/2009 02:07:46 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:07:33 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:07:32 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:07:22 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:07:22 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:06:11 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:06:10 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:06:08 srservice None 111 N/A ACME
Information 1/23/2009 02:06:04 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:06:04 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:06:02 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:05:53 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:05:53 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:05:53 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:05:52 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:05:52 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:05:51 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:05:43 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 02:04:59 eventlog None 6005 N/A ACME
Information 1/23/2009 02:04:59 eventlog None 6009 N/A ACME
Information 1/23/2009 02:00:54 eventlog None 6006 N/A ACME
Information 1/23/2009 02:00:29 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:00:14 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 02:00:13 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 01:59:13 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 01:59:11 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 01:59:07 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 01:59:06 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 01:59:06 srservice None 111 N/A ACME
Information 1/23/2009 01:59:04 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 01:58:56 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 01:58:51 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 01:58:50 Service Control Manager None 7036 N/A ACME
Information 1/23/2009 01:58:50 Service Control Manager None 7035 SYSTEM ACME
Information 1/23/2009 01:58:50 Service Control Manager None 7035 SYSTEM ACME
----------------
Type Date Time Source Category Event User Computer
Information 1/20/2009 20:59:40 eventlog None 6006 N/A ACME
Error 1/20/2009 20:59:30 DCOM None 10005 SYSTEM ACME
Error 1/20/2009 13:54:42 DCOM None 10005 SYSTEM ACME
Error 1/20/2009 13:54:37 DCOM None 10005 SYSTEM ACME
Error 1/20/2009 13:52:44 Service Control Manager None 7026 N/A ACME
Error 1/20/2009 13:52:44 Service Control Manager None 7001 N/A ACME
Error 1/20/2009 13:52:16 DCOM None 10005 SYSTEM ACME
Information 1/20/2009 13:51:18 Save Dump None 1001 N/A ACME
Information 1/20/2009 13:51:17 eventlog None 6005 N/A ACME
Information 1/20/2009 13:51:17 eventlog None 6009 N/A ACME
Information 1/20/2009 01:15:36 Service Control Manager None 7035 Nemo ACME
Information 1/20/2009 01:15:13 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:59 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:58 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:49 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:48 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:42 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:42 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:41 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:34 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:24 Service Control Manager None 7036 N/A ACME
Information 1/20/2009 01:14:17 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:16 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:16 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:16 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:14:07 Service Control Manager None 7035 SYSTEM ACME
Information 1/20/2009 01:13:12 eventlog None 6005 N/A ACME
Information 1/20/2009 01:13:12 eventlog None 6009 N/A ACME

I hope this has a clue.

-dn


"Gerry" wrote:

> dr nemo
>
>
> Are there any errors in Event Viewer?
>
> Have a look in the System and Application logs in Event Viewer for
> Errors and Warnings and post copies here. Don't post any more than 48
> hours ago.
>
> You can access Event Viewer by selecting Start, Control Panel,
> Administrative Tools, and Event Viewer. When researching the meaning
> of the error, information regarding Event ID, Source and Description
> are important.
>
> HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
> http://support.microsoft.com/kb/308427/en-us
>
> A tip for posting copies of Error Reports! Run Event Viewer and double
> click on the error you want to copy. In the window, which appears is a
> button resembling two pages. Click the button and close Event
> Viewer.Now start your message (email) and do a paste into the body of
> the message. Make sure this is the first paste after exiting from
> Event Viewer.
>
>
> --
>
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
> dr nemo wrote:
> > Laptop: Dell 6400/E1505 XP SP3
> >
> > Lately I have had new problems with my laptop. The first problem was
> > that on normal boot-up that I could not start up applications. I had
> > not installed any new software although I had a lot of freeware and
> > update everything as often as I can. I can trace my problems back to
> > a 'hard shutdown' (Using 'off' under 'shutdown' then suddenly
> > becoming impatient for it to complete the process and pressing the
> > Power button upon seeing my g/f come out of the jetway at the
> > airport). Multiple reboots (from 1 to 5) will eventually reach a
> > stage which I can open any & all applications.
> >
> > [Aside--Back in mid Nov I attempted to update the ATI CCC driver
> > using a 3rd party driver (Dell *never, ever* updates their drivers or
> > software, and ATI has updates for just about everyone except Dell,
> > which they refer you back to them). This didn't work and since then
> > after rolling it back I still get a ATI dialogue box on start-up
> > stating the driver is not compatible or needs to be updated. Since it
> > doesn't seem to make a difference, I just close the box out. I have
> > not done anything with this since the initial attempts in mid-Nov.]
> >
> > I have had at least 3 BSODs starting approximately two weeks after
> > the above incident. I cannot relate to what I was doing although once
> > I was going back & forth on a browser page, and another was looking
> > at my computer in the morning after leaving it on overnight and
> > finding a BSOD.
> >
> > All BSODs have the same Error message. Bug Check 0xC5:
> > DRIVER_CORRUPTED_EXPOOL
> >
> > I can find Errors (usually in pairs of the same system) for:
> >
> > DCOM (Event 10010) (same for both)
> >
> > System Service Mgr (Event 7600 for one, Event 7609 for the other)
> >
> > Several internet searches & researches has not come up with a
> > consistent cause ('check for new software installations' is the most
> > frequent first solution), and worse there is no consistent solution.
> > One cause implied was installation of SP3--mine was installed at
> > least 6 months ago.
> >
> > I used verifier.exe to see about signed drivers and now I can't
> > finish a normal boot-up. This time I have (approximate):
> >
> > IO System Verification Error: wmiacpi.sys + 152f(a)BA55D52F Error 20e
> >
> > I figured out wmiacpi.sys (a signed driver) as Windows Management
> > Interface acpi (C:\Windown\system32\drivers) v 5.1.2600.5512) which I
> > think goes with acpi.sys Driver for NT. Both are listed as system
> > files.
> >
> > I am able to boot up in SAFE Mode without a problem, and also have
> > networking ability. Also I have at least one memory dump to use for
> > the IO driver verification error.
> >
> > I have not figured out how to use verifier.exe for debugging, but I
> > know enough to know I am over my head now. I wish it were as easy as
> > uninstalling then reinstalling or updating the driver. I'm not 100%
> > if this is the entire problem though. Interestingly, if I disable
> > most of the start-up items, I am able to complete a normal boot-up,
> > but not able to open any applications by clicking on them. I do not
> > know which start up may be implicated. Worse however is that I
> > cannot install the Win XP 32-bit debugger, in SAFE MODE there is no
> > access to the installer. In normal mode my laptop can't finish the
> > boot-up process without crashing, so I can't install it that way. My
> > SAFE MODE with networking works fine. I tried using another computer
> > with the idea of downloading, opening then transfer the .exe to my
> > laptop, but (my everylasting curse) my work computer requires admin
> > rights to do this (that may be good policy against the stupid and the
> > clueless, but this sucks to whomever can manage their own). Finding
> > another computer -- if this even works -- is daunting. I've not sure
> > if I can install an outside program while running the laptop off the
> > XP CD.
> >
> > So far I've tried or was advised:
> > * I do not have a system restore prior to this
> > * Last good configuration had no effect.
> > * Uninstalled the ATI CCC driver - I had rolled it back to the old one
> > previously (see above).
> > * Using my XP system CD I did CHKDSK /r then CHKDSK /r/p - no change.
> >
> > I have the Dell drivers & utilities disk, but have not tried it --
> > I've
> > never seen a reference of this ever being used in troubleshooting. I
> > don't know if the ATI CCC software is in there.
> >
> > One troubleshooting site I traced in XP Newsgroups suggested
> > overwriting the drivers. I need adult supervision as that sounds like
> > nearing the cliff.
> >
> > Another site suggested just re-lay the XP boot sequence--when I had
> > serious problems (likely a defective HDD - my attempt to re-install
> > XP --after up with so many different Stop Error BSODs over 10
> > months--just completely shut down my computer, and Dell threw in the
> > towel and basically replaced the HDD, motherboard & processor), a
> > restallation was a total failure. I'm reluctant--for one thing is I'm
> > not 100% sure that the driver I/O problem is part of loading XP on
> > bootup--the fatal error occurs very late in the startup.
> >
> > The nuclear option is using the Symantec Ghost. I've been able to
> > manually transfer files over to an external drive. The Backup doesn't
> > work in SAFE MODE.
> >
> > How should I proceed in fixing this ongoing fiasco?
>
>
>
 | 
Pages: 1
Prev: System hang when a data disk does error recovery
Next: Create a restorable system backup with NTBACKUP?