Hi Nass,
Here's the error msgs from my event log and it's a lot of error msgs. There
were errors in the application and system logs but my sercurity log didn't
have any items in it. My I tried the first part of your post but when I put
in the windows xp disk, the disk brought up a lot of steps I was not familiar
with.
Application:
Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 12/17/2007
Time: 5:31:06 PM
User: N/A
Computer: CHARLES
Description:
The COM+ Event System detected a bad return code during its internal
processing. HRESULT
was 8007041F from line 44 of
d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Please contact Microsoft Product Support Services to report this error.
For more
information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: MPSampleSubmission
Event Category: None
Event ID: 5000
Date: 12/16/2007
Time: 1:24:59 PM
User: N/A
Computer: CHARLES
Description:
EventType mptelemetry, P1 80004002, P2
cocreateinstance(updateservicemanager), P3
fallbackcheck, P4 1.1.1593.0, P5 mpsigdwn.dll, P6 1.1.1593.0, P7 windows
defender, P8 NIL,
P9 NIL, P10 NIL.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 70 00 74 00 65 00 m.p.t.e.
0008: 6c 00 65 00 6d 00 65 00 l.e.m.e.
0010: 74 00 72 00 79 00 2c 00 t.r.y.,.
0018: 20 00 38 00 30 00 30 00 .8.0.0.
0020: 30 00 34 00 30 00 30 00 0.4.0.0.
0028: 32 00 2c 00 20 00 63 00 2.,. .c.
0030: 6f 00 63 00 72 00 65 00 o.c.r.e.
0038: 61 00 74 00 65 00 69 00 a.t.e.i.
0040: 6e 00 73 00 74 00 61 00 n.s.t.a.
0048: 6e 00 63 00 65 00 28 00 n.c.e.(.
0050: 75 00 70 00 64 00 61 00 u.p.d.a.
0058: 74 00 65 00 73 00 65 00 t.e.s.e.
0060: 72 00 76 00 69 00 63 00 r.v.i.c.
0068: 65 00 6d 00 61 00 6e 00 e.m.a.n.
0070: 61 00 67 00 65 00 72 00 a.g.e.r.
0078: 29 00 2c 00 20 00 66 00 ).,. .f.
0080: 61 00 6c 00 6c 00 62 00 a.l.l.b.
0088: 61 00 63 00 6b 00 63 00 a.c.k.c.
0090: 68 00 65 00 63 00 6b 00 h.e.c.k.
0098: 2c 00 20 00 31 00 2e 00 ,. .1...
00a0: 31 00 2e 00 31 00 35 00 1...1.5.
00a8: 39 00 33 00 2e 00 30 00 9.3...0.
00b0: 2c 00 20 00 6d 00 70 00 ,. .m.p.
00b8: 73 00 69 00 67 00 64 00 s.i.g.d.
00c0: 77 00 6e 00 2e 00 64 00 w.n...d.
00c8: 6c 00 6c 00 2c 00 20 00 l.l.,. .
00d0: 31 00 2e 00 31 00 2e 00 1...1...
00d8: 31 00 35 00 39 00 33 00 1.5.9.3.
00e0: 2e 00 30 00 2c 00 20 00 ..0.,. .
00e8: 77 00 69 00 6e 00 64 00 w.i.n.d.
00f0: 6f 00 77 00 73 00 20 00 o.w.s. .
00f8: 64 00 65 00 66 00 65 00 d.e.f.e.
0100: 6e 00 64 00 65 00 72 00 n.d.e.r.
0108: 2c 00 20 00 4e 00 49 00 ,. .N.I.
0110: 4c 00 2c 00 20 00 4e 00 L.,. .N.
0118: 49 00 4c 00 20 00 4e 00 I.L. .N.
0120: 49 00 4c 00 0d 00 0a 00 I.L.....
System:
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 12/17/2007
Time: 5:31:06 PM
User: CHARLES\Kids
Computer: CHARLES
Description:
DCOM got error "The service database is locked. " attempting to start the
service
EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/17/2007
Time: 4:55:45 PM
User: N/A
Computer: CHARLES
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
eeCtrl
Fips
i8042prt
intelppm
IPSec
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
SPBBCDrv
SRTSPX
SYMTDI
Tcpip
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 12/17/2007
Time: 4:55:45 PM
User: N/A
Computer: CHARLES
Description:
The IPSEC Services service depends on the IPSEC driver service which failed
to start because
of the following error:
A device attached to the system is not functioning.
For more information, see Help and
Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 12/16/2007
Time: 11:57:04 AM
User: N/A
Computer: CHARLES
Description:
The IP address lease 192.168.100.2 for the Network Card with network address
00008D9CBF83 has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 7
Date: 12/16/2007
Time: 12:46:15 PM
User: N/A
Computer: CHARLES
Description:
The device, \Device\CdRom0, has a bad block.
For more information, see Help and Support
Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b8 00 ..h...¸.
0008: 00 00 00 00 07 00 04 c0 .......À
0010: 00 01 00 00 9c 00 00 c0 ....œ..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 c0 c0 22 00 00 00 00 .ÀÀ"....
0028: 69 64 03 00 00 00 00 00 id......
0030: ff ff ff ff 01 00 00 00 ÿÿÿÿ....
0038: 40 00 00 c4 02 00 00 00 @..Ä....
0040: 00 20 0a 12 48 02 00 40 . ..H..@
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 c8 35 cc 85 ....È5̅
0058: 00 00 00 00 70 5e 88 85 ....p^ˆ…
0060: 02 00 00 00 18 58 04 00 .....X..
0068: 28 00 00 04 58 18 00 00 (...X...
0070: 20 00 00 00 00 00 00 00 .......
0078: 70 00 03 00 00 00 00 0a p.......
0080: 00 00 00 00 11 05 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 12/16/2007
Time: 11:56:43 AM
User: N/A
Computer: CHARLES
Description:
The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible. No
attempt to contact a source will be made for 14 minutes. NtpClient has no
source of accurate time.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 12/16/2007
Time: 11:56:43 AM
User: N/A
Computer: CHARLES
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an
unreachable host. (0x80072751)
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Date: 12/16/2007
Time: 12:23:56 PM
User: N/A
Computer: CHARLES
Description:
The Network Address Translator (NAT) was unable to request an operation of
the kernel-mode
translation module. This may indicate misconfiguration, insufficient
resources, or an
internal error. The data is the error code.
For more information, see Help and Support
Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1f 00 00 00 ....
Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 12/16/2007
Time: 12:23:56 PM
User: N/A
Computer: CHARLES
Description:
The IP address lease 192.168.100.2 for the Network Card with network address
00008D9CBF83
has been denied by the DHCP server 192.168.100.1 (The DHCP Server sent a
DHCPNACK
message).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
nass said:
Chuck25 said:
For a while now, I've had trouble with computer lock ups. The lock ups happen
when I work on the computer or when I leave the computer on and sometimes the
screen saver freezes. I've tried uninstalling some programs and I reinstalled
Windows XP and the arrow froze.
Run disk clean up and then Defrag the system in safe Mode.
Then Open a run command and type in:
sfc /scannow click [OK] and let it run , you will may be asked about the XP
installation media CD, so get it ready to insert it in when asked by the
System.
If still no Joy try this:
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us
Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.
I will assume the system is clean and running an up2date Anti-Virus
application, so try to capture the Process that causing this crash, either by
downloading the Process explorer from Ms site or by Task manager.
HTH.
nass
