Rebooting, no virus, found stop code.

[Anna]

Hi

I posted a week ago about my computer that restarts for no
reason (no error messages - it just goes black, no viruses
found, have been in contact with Symantec and they
confirmed it was no virus they knew of). I run XP prof,
updated.

Now I've found some error displays in the event log, I
can't find anything on the internet when I search for it,
but maybe you know? (these are errors that appear just
before the reboot starts, and they appear over and over
again, the exact same messages)

This is the first one:

The computer has rebooted from a bugcheck. The bugcheck
was: 0x1000008e (0xc0000005, 0xf584c966, 0xf4744020,
0x00000000). A dump was saved in:
C:\WINDOWS\Minidump\Mini052404-01.dmp.

The second:

The COM+ Event System failed to fire the StartShell method
on subscription {A5978620-5B3F-F1D1-8ED2-00FA0035B753}-
{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-
0000-000000000000}. The subscriber returned HRESULT
80004001.

And at last there are these four messages that always come
together. I'm not sure these have anything to do with the
reboot, but I'll post them anyway:

The description for Event ID ( 5007 ) in Source (
TrueVector Service ) cannot be found. The local computer
may not have the necessary registry information or message
DLL files to display messages from a remote computer. You
may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The
following information is part of the event:
File "C:\WINDOWS\Internet Logs\IAMDB.RDB" was corrupt and
has been copied to "C:\WINDOWS\Internet Logs\xDB6.tmp".
File "C:\WINDOWS\Internet Logs\IAMDB.RDB" was corrupt and
has been deleted..


The description for Event ID ( 5007 ) in Source (
TrueVector Service ) cannot be found. The local computer
may not have the necessary registry information or message
DLL files to display messages from a remote computer. You
may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The
following information is part of the event:
File "C:\WINDOWS\Internet Logs\IAMDB.RDB" was corrupt,
restoring from backup "C:\WINDOWS\Internet
Logs\BACKUP.RDB"..


The description for Event ID ( 5007 ) in Source (
TrueVector Service ) cannot be found. The local computer
may not have the necessary registry information or message
DLL files to display messages from a remote computer. You
may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The
following information is part of the event:
File "C:\WINDOWS\Internet Logs\HALLIN.ldb" was corrupt and
has been copied to "C:\WINDOWS\Internet Logs\xDB7.tmp".
File "C:\WINDOWS\Internet Logs\HALLIN.ldb" was corrupt and
has been deleted..

The description for Event ID ( 0 ) in Source (
SymProxySvc ) cannot be found. The local computer may not
have the necessary registry information or message DLL
files to display messages from a remote computer. You may
be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The
following information is part of the event: Transparent
Proxy Server started.

Does anyone know what this is?

Thanks, Anna.

 

[Rocket J. Squirrel]

True Vector is the name of the technology behind Zone Alarm. Is it possible
that you haven't configured your firewall correctly? Zone Alarm ships with
an excellent tutorial. BTW, only run one software firewall at a time.

Rocky

 

[Anna]

Hi, and thanks for the quick reply.

So Zone Alarm i still haunting me, this is strange. I
recently uninstalled Zone Alarm and activated the Norton
Internet Security firewall instead (after the technician
at Symantec told me the two programs could still
interfere, even though one was deactivated). Could it be
that it is not properly uninstalled? I uninstalled it from
the Control Panel Add/Remove programs option. Does the
Transparent Proxy Server have to do with this too (since
that message comes right after the three ZA messages), or
what does that program do? Do you have any idea of how I
can get rid of the former ZA trying to come back?

Thanks, Anna.

 

[anandhms]

Hi Anna,

I'm facing the same issue. Did you get any workaround for this
problem?

thanks and regards,
Anand

 

[Guest]

After doing some seaching I found that the 0x1000008e error was video
related, so the first step would be to make sure that all of your video
drivers are updated.
The 0xc0000005 error seems to be some sort of error caused by possibly
Symantec Antivirus - might want to try updating this if you have it.

My thoughts - Probably something to do with a Symantec product (i.e. Norton
Antivirus) and/or Zone Alarm - if you have them installed. After I had major
problems with both of these products I uninstalled them (Zone Alarm is easy
to uninstall, Norton is a nightmare - it was very system invasive) and went
with other products - I have running problem free to this day (at least in
regard to my firewall and antivirus). The ones I run are: AVG Antivirus and
Sygate Personal Firewall 5.6 (not available through Sygate anymore but you
can still find it on the web).

I think Norton does a good job in finding viruses, but I feel it is too
system invasive (a multitude of installed programs, drivers, and a lot of
running services) which diminished performance of the OS. When Zone Alarm was
working fine it was great, but after a long time of use it bogged my internet
connection to a crawl. But these might not be the problem, just thought it
would be a good jumping off point for troubleshooting.

Hope this helps. Dan.

 

[anandhms]

Thank you Dan for these tips. I didn't check the video drivers...[will
do that ]. But, I don't have any Symantec products installed. (have
eTrust EZAntivirus installed on the pc)
Will update all the drivers and get back to you.

Thank you!

 

[Guest]

Did a little more digging for some of the other errors listed - and came to
find that Zone Alarm could be causing a lot of problems - this is from the
event id 5007 (TrueVector Service).

After a search at eventid.net for 5007 it came up with information like what
you described. It seems to be a problem specific to Zone Alarm. The solution
for the TrueVector errors: download the latest version of ZoneAlarm,
completely uninstall your current version of ZoneAlarm, then install the
latest version and configure it.

Information on how to *Completely* uninstall ZoneAlarm:
http://nh2.nohold.net/noHoldCust25/Prod_1/Articles55646/CompleteUninstallNonNT.html


As for one of the other errors - the "The COM+ Event System failed to fire
the StartShell method on subscription" error - from what I can find it seems
like there is a posibility that it might be related to MSN Messenger. You
could try to update Messenger to see if that gets rid of the problem -
http://get.live.com/messenger/overview.

If you're still getting the COM+ error then you can try to disable MSN
Messenger:
http://www.eventid.net/display.asp?eventid=4354&eventno=1277&source=EventSystem&phase=1.
Just look for the part where is says 'To Disable MSN Messenger...', reboot
and see if the error is gone.

-Dan