Stop message

[Guest]

I keep getting Stop messages:

0x0000007E (0xC0000005, 0xF6E2B4D0, 0xF8B4CFC8, 0xF8B4CCC4)

Opening in safe mode and choosing system restore appears to work (as does
open widoows normally) but when I close the computer down and reboot I get
the blue screen of death again.

I have now system restored several times; I've gone back to a system restore
well before the problem started but still it persists. The second code in
the brackets varies. It has been:

0xF6DF24D0
0xF6DCA4d0
and
0xF6D1F4DO

I am running a Dell that is coming up to 3 years old. XP Home with server
pack 2, 512 RAM, Pentium 4, 2.66 Ghz. Hard disk has 34 GB free.

In the session just before the first appearance of the blue screen of death,
the machine was rather slow.

Any ideas on how I can fiix this?

 

[Ted Zieglar]

Information on STOP 0x7E SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
http://www.aumha.org/win5/kbestop.php#0x7e

 

[Gerry Cornell]

Ruth

Look in Device Manager for yellow question marks and, if found, post
details including Device Error Code. Right click on the My Computer icon on
your Desktop and select Properties, Hardware, Device Manager.

Look in the System and Application logs in Event Viewer and post copies of
any Warning or Error Reports.

You can access Event Viewer by selecting Start, Administrative Tools, Event
Viewer. When researching the meaning of the error, information regarding
Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;enus;308427&Product=winxp

A tip for posting copies of Error Reports! Run Event Viewer and double click
on the error you want to copy. In the window, which appears is a button
resembling two pages. Double click the button and close Event Viewer. Now
start your message(email) and do a paste into the body of the message. This
will paste the info from the Event Viewer Error Report complete with links
into the message. Make sure this is the first paste after exiting from Event
Viewer.


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Thanks Ted, but I'd already found that page. It didn't help (I've not got a
joystick and I haven't upgraded to XP), probably because I don't understand
what the bracketed codes are telling me. I didn't pick my user name at
random!

Event viewer for today gives me:
error application hang category (101) event 1002
error Net#BT event 4321
error browser event 8009
error service control manager event 7000
warning E100B event 4
error service control manager event 7034
error MrxSmb event 8003
warning browser event 8021
warning dhcp event 1003

for yesterday (and all the other blue screen s it gives 2 warnings for
msinstaller events 1001 and 1004.
Error DCOM event 10005 System
Error DCOM event 10005 my name
Error service control manager event 7026
error service control manager event 7034
error service control manager event 7001
error browser event 8032
warning browser event 8021
error service control manager event 7000
warning E100B event 4

Device manager says all my devices are working properly.

By the way I'm running Office 2000. And I am totally out of my depth

 

[Gerry Cornell]

Ruth

It is difficult to interpret complete messages but interpreting incomplete
ones leaves you guessing which version it is. Please copy and paste the
actual reports into a further post.

A tip for posting copies of Error Reports! Run Event Viewer and double click
on the error you want to copy. In the window, which appears is a button
resembling two pages. Double click the button and close Event Viewer. Now
start your message(email) and do a paste into the body of the message. This
will paste the info from the Event Viewer Error Report complete with links
into the message. Make sure this is the first paste after exiting from Event
Viewer.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

Gerry

Thanks. I had no idea so much information was available! I can get as far
as understanding that there is something wrong with my network (2 wireless
linked computers) - and this did go wrong a few days before the blue screen
started to appear. My daughter's machine now thinks it's boss (?). But
there seems to be something else??? A horribly large number of messages
from event viewer is pasted below.

Device manager has no nasty yellow icons, and all devices say they are
working. So if there is a device that needs attention I don't know which one
it is!

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 14/12/2005
Time: 11:17:31
User: NT AUTHORITY\SYSTEM
Computer: HERMIONE
Description:
Windows saved user [pc name/my name] registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 15/12/2005
Time: 07:47:25
User: NT AUTHORITY\NETWORK SERVICE
Computer: HERMIONE
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.



For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 14/12/2005
Time: 08:16:34
User: N/A
Computer: HERMIONE
Description:
Hanging application helpctr.exe, version 5.1.2600.2180, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 68 65 6c 70 63 74 helpct
0018: 72 2e 65 78 65 20 35 2e r.exe 5.
0020: 31 2e 32 36 30 30 2e 32 1.2600.2
0028: 31 38 30 20 69 6e 20 68 180 in h
0030: 75 6e 67 61 70 70 20 30 ungapp 0
0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a
0040: 74 20 6f 66 66 73 65 74 t offset
0048: 20 30 30 30 30 30 30 30 0000000
0050: 30 0

Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 15/12/2005
Time: 07:47:09
User: N/A
Computer: HERMIONE
Description:
Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 15/12/2005
Time: 07:47:35
User: N/A
Computer: HERMIONE
Description:
The PCAMPR5 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 15/12/2005
Time: 07:47:29
User: N/A
Computer: HERMIONE
Description:
The USB SECURITY DEVICE service failed to start due to the following error:
The service cannot be started, either because it is disabled or because it
has no enabled devices associated with it.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 14/12/2005
Time: 11:17:19
User: N/A
Computer: HERMIONE
Description:
The MD Simple Burner Service service terminated unexpectedly. It has done
this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: NetBT
Event Category: None
Event ID: 4321
Date: 14/12/2005
Time: 10:42:23
User: N/A
Computer: HERMIONE
Description:
The name "MSHOME :1d" could not be registered on the Interface with
IP address [ip adress]. The machine with the IP address [ip address] did not
allow the name to be claimed by this machine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 56 00 ......V.
0008: 00 00 00 00 e1 10 00 c0 ....á..À
0010: 01 01 00 00 01 00 00 c0 .......À
0018: 1d 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: BROWSER
Event Category: None
Event ID: 8009
Date: 14/12/2005
Time: 09:03:02
User: N/A
Computer: HERMIONE
Description:
The browser was unable to promote itself to master browser. The computer
that currently believes it is the master browser is [my daughter's pc].

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 34 00 00 00 4...


Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 14/12/2005
Time: 08:47:34
User: N/A
Computer: HERMIONE
Description:
Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€


Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 14/12/2005
Time: 09:36:59
User: N/A
Computer: HERMIONE
Description:
The master browser has received a server announcement from the computer
AMY-VKRZHHADU71 that believes that it is the master browser for the domain on
transport NetBT_Tcpip_{DFFFDEAA-DC9. The master browser is stopping or an
election is being forced.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 01 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

 

[Gerry Cornell]

Ruth

As you say lots of information but a number could just be a consequence of
the first one. Let's look at the others, after we have eliminated the cause
of the first.

This is the Report we need to tackle:

Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 15/12/2005
Time: 07:47:09
User: N/A
Computer: HERMIONE
Description:
Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down

I found two comments on this Report at my first port of call. The first led
to complicated explanations but the second may give an easier solution.
"This typically shows up when the network cable is unplugged from an Intel
network card adapter". However, you are saying the computers have wireless
connections. The network and wireless connections will have been set to
connect to the internet through a Router. It is this device we need to look
at and the connection point on your computer to the Network Card inside the
computer casing. A diagram of the port arrangement on the back of the
computer probably would help you and one may be available in your
motherboard manual. Do you have the Manual?

Was the network created for you or did you set it up? Do you have a Manual
for the Router? What is the make and model of the Router? You need to study
a diagram showing what connects to what. You need to check that cables
connecting to your computer and to the router are in the right slots. Also
check that they are properly pushed into the slot. When you move computers
around leads get loosened or come out. It could be a lead was put back into
the wrong slot.

If it is not a physical connection problem then the problem could lie in
settings contained in the router and I do not think I could take you through
these. There may be others here who could do so but you might get better
help in a specialist networking newsgroup.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Gerry

Thanks. I had no idea so much information was available! I can get as
far
as understanding that there is something wrong with my network (2 wireless
linked computers) - and this did go wrong a few days before the blue
screen
started to appear. My daughter's machine now thinks it's boss (?). But
there seems to be something else??? A horribly large number of messages
from event viewer is pasted below.

Device manager has no nasty yellow icons, and all devices say they are
working. So if there is a device that needs attention I don't know which
one
it is!

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 14/12/2005
Time: 11:17:31
User: NT AUTHORITY\SYSTEM
Computer: HERMIONE
Description:
Windows saved user [pc name/my name] registry while an application or
service was still using the registry during log off. The memory used by
the
user's registry has not been freed. The registry will be unloaded when it
is
no longer in use.

This is often caused by services running as a user account, try
configuring
the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 15/12/2005
Time: 07:47:25
User: NT AUTHORITY\NETWORK SERVICE
Computer: HERMIONE
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.



For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 14/12/2005
Time: 08:16:34
User: N/A
Computer: HERMIONE
Description:
Hanging application helpctr.exe, version 5.1.2600.2180, hang module
hungapp,
version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 68 65 6c 70 63 74 helpct
0018: 72 2e 65 78 65 20 35 2e r.exe 5.
0020: 31 2e 32 36 30 30 2e 32 1.2600.2
0028: 31 38 30 20 69 6e 20 68 180 in h
0030: 75 6e 67 61 70 70 20 30 ungapp 0
0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a
0040: 74 20 6f 66 66 73 65 74 t offset
0048: 20 30 30 30 30 30 30 30 0000000
0050: 30 0

Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 15/12/2005
Time: 07:47:09
User: N/A
Computer: HERMIONE
Description:
Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 15/12/2005
Time: 07:47:35
User: N/A
Computer: HERMIONE
Description:
The PCAMPR5 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 15/12/2005
Time: 07:47:29
User: N/A
Computer: HERMIONE
Description:
The USB SECURITY DEVICE service failed to start due to the following
error:
The service cannot be started, either because it is disabled or because it
has no enabled devices associated with it.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 14/12/2005
Time: 11:17:19
User: N/A
Computer: HERMIONE
Description:
The MD Simple Burner Service service terminated unexpectedly. It has done
this 1 time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: NetBT
Event Category: None
Event ID: 4321
Date: 14/12/2005
Time: 10:42:23
User: N/A
Computer: HERMIONE
Description:
The name "MSHOME :1d" could not be registered on the Interface
with
IP address [ip adress]. The machine with the IP address [ip address] did
not
allow the name to be claimed by this machine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 56 00 ......V.
0008: 00 00 00 00 e1 10 00 c0 ....á..À
0010: 01 01 00 00 01 00 00 c0 .......À
0018: 1d 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: BROWSER
Event Category: None
Event ID: 8009
Date: 14/12/2005
Time: 09:03:02
User: N/A
Computer: HERMIONE
Description:
The browser was unable to promote itself to master browser. The computer
that currently believes it is the master browser is [my daughter's pc].

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 34 00 00 00 4...


Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 14/12/2005
Time: 08:47:34
User: N/A
Computer: HERMIONE
Description:
Adapter Intel(R) PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€


Event Type: Error
Event Source: MRxSmb
Event Category: None
Event ID: 8003
Date: 14/12/2005
Time: 09:36:59
User: N/A
Computer: HERMIONE
Description:
The master browser has received a server announcement from the computer
AMY-VKRZHHADU71 that believes that it is the master browser for the domain
on
transport NetBT_Tcpip_{DFFFDEAA-DC9. The master browser is stopping or an
election is being forced.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00 ......N.
0008: 00 00 00 00 43 1f 00 c0 ....C..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 01 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........