blue screen error

G

Guest

I keep getting a blue screen error and the computer shuts down immediately
I’ve tested all the hardware with a testing program which reports all
components are working. I’m now assuming it is a software problem, how do I
find out what is causing the problem. My operating system is XP pro and the
error happens randomly sometimes I can go the whole day without an
occurrence, other times it can happen several times a day.
 
G

Guest

Astonished John said:
I keep getting a blue screen error and the computer shuts down immediately
I’ve tested all the hardware with a testing program which reports all
components are working. I’m now assuming it is a software problem, how do I
find out what is causing the problem. My operating system is XP pro and the
error happens randomly sometimes I can go the whole day without an
occurrence, other times it can happen several times a day.
Click to expand...


Could you try the following please:
Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following and also
the System File Checker (SFC) sfc /scannow:
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us
HTH.
nass
 
W

WaIIy

I got one a few days ago for the first time in four years.

I finally read the entire blue screen and near the bottom it told me
which file was causing the problem and pointed me in the right
direction.
 
G

Guest

Hi nass,
thankyou for your reponse, I've done as you requested copy and pasting the
latest problems and hope you can make some sense of it.

System Events

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/15/2007
Time: 10:56:46 AM
User: N/A
Computer: WISEOWL
Description:
Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3
00054f88, parameter4 00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 34 0000004
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 38 66 2c 20 00008f,
0038: 30 30 30 31 61 63 66 30 0001acf0
0040: 2c 20 30 30 30 35 34 66 , 00054f
0048: 38 38 2c 20 30 30 30 30 88, 0000
0050: 30 30 30 30 0000

Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 31008
Date: 9/14/2007
Time: 3:20:55 PM
User: N/A
Computer: WISEOWL
Description:
The DNS proxy agent was unable to read the local list of name-resolution
servers from the registry. The data is the error code.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6f 00 00 00 o...

Event Type: Error
Event Source: Print
Event Category: None
Event ID: 19
Date: 9/13/2007
Time: 8:36:16 PM
User: NT AUTHORITY\SYSTEM
Computer: WISEOWL
Description:
Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: BridgeMP
Event Category: None
Event ID: 14702
Date: 9/6/2007
Time: 11:37:53 PM
User: N/A
Computer: WISEOWL
Description:
Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]:
The bridge could not modify the adapter's packet filter. The adapter will
not function correctly.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 04 00 02 00 5a 00 ......Z.
0008: 00 00 00 00 6e 39 00 c0 ....n9.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 11 00 01 c0 ...À

Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 11
Date: 9/6/2007
Time: 11:37:52 PM
User: N/A
Computer: WISEOWL
Description:
The driver detected a controller error on \Device\CdRom0.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 68 00 01 00 b8 00 ..h...¸.
0008: 00 00 00 00 0b 00 04 c0 .......À
0010: 03 01 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 4c 5a 2e 00 00 00 00 00 LZ......
0030: ff ff ff ff 06 00 00 00 ÿÿÿÿ....
0038: 40 00 00 00 00 00 00 00 @.......
0040: ff 20 0a 12 48 01 00 10 ÿ ..H...
0048: 08 00 00 00 04 00 00 00 ........
0050: c0 80 5d 8a c0 c8 1a 8a À€]ŠÀÈ.Š
0058: 00 00 00 00 c8 a1 17 8a ....È¡.Š
0060: 00 00 00 00 00 00 00 00 ........
0068: 4a 01 00 00 5a 00 00 00 J...Z...
0070: 08 00 00 00 00 00 00 00 ........
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 9/11/2007
Time: 12:47:25 PM
User: WISEOWL\john
Computer: WISEOWL
Description:
The attempt to reboot WISEOWL failed

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....

Event Type: Warning
Event Source: Server
Event Category: None
Event ID: 2504
Date: 9/11/2007
Time: 10:24:50 AM
User: N/A
Computer: WISEOWL
Description:
The server could not bind to the transport
\Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: aa 05 00 00 ª...

Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 9/6/2007
Time: 8:17:00 PM
User: N/A
Computer: WISEOWL
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Application Events

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 9/15/2007
Time: 9:50:24 AM
User: N/A
Computer: WISEOWL
Description:
Fault bucket 471789395.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 37 31 37 38 39 33 39 47178939
0010: 35 0d 0a 5..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 9/13/2007
Time: 1:59:17 PM
User: N/A
Computer: WISEOWL
Description:
Faulting application fwmanager.exe, version 2.0.0.2, faulting module
fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 66 77 6d ure fwm
0018: 61 6e 61 67 65 72 2e 65 anager.e
0020: 78 65 20 32 2e 30 2e 30 xe 2.0.0
0028: 2e 32 20 69 6e 20 66 77 .2 in fw
0030: 6d 61 6e 61 67 65 72 2e manager.
0038: 65 78 65 20 32 2e 30 2e exe 2.0.
0040: 30 2e 32 20 61 74 20 6f 0.2 at o
0048: 66 66 73 65 74 20 30 30 ffset 00
0050: 30 33 34 61 38 64 0d 0a 034a8d..

I hope you can shine some light on the above so I can get back to learning
how to use the computer rather than worrying about fixing it.

Thanks John






nass said:
Astonished John said:
I keep getting a blue screen error and the computer shuts down immediately
I’ve tested all the hardware with a testing program which reports all
components are working. I’m now assuming it is a software problem, how do I
find out what is causing the problem. My operating system is XP pro and the
error happens randomly sometimes I can go the whole day without an
occurrence, other times it can happen several times a day.
Click to expand...


Could you try the following please:
Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following and also
the System File Checker (SFC) sfc /scannow:
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us
HTH.
nass
Click to expand...
 
G

Guest

Hi John,
My reply in-line:

Astonished John said:
Hi nass,
thankyou for your reponse, I've done as you requested copy and pasting the
latest problems and hope you can make some sense of it.
Click to expand...

Go through these cleaning steps to see or get a clear opinion on how
clean your machine is:
= Click Start >> Control Panel>>Network and Internet Connections >> Double
click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Open a run command and type in:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock reset click [OK]

or you can use this winsock fixer:
http://www.nasstec.co.uk/tools.html
Execute and t will prompt you to restart, please do so. and see if your
issue or part of it will resolve.

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the FileMon to see the Running Processes in realtime from here:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Or Process Explorer :
http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.
You may need to reposition/reset the RAM sticks in their slots.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/15/2007
Time: 10:56:46 AM
User: N/A
Computer: WISEOWL
Description:
Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3
00054f88, parameter4 00000000.
It could be an overheating issue, Bad RAM, Bad Power Supply, Bad drivers for
Vids
http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1



Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 31008
Date: 9/14/2007
Time: 3:20:55 PM
User: N/A
Computer: WISEOWL
Description:
The DNS proxy agent was unable to read the local list of name-resolution
servers from the registry. The data is the error code.
If you are using long DNS name, it can cause this problem, also if the ICS
sharing service is disabled.
Try to make sure the service is running by opening a run command and type in:
services.msc click [OK]
Locate the Internet Connection sharing and make start Manual or Auto.

ipnathlp.dll open this with a Notepad and check the entries there.

NOTE: That if you have sharing implemented on your Network, which you have
if I'm understanding correctly, hence the Printer!.
Chapter 32 - Networking Name Resolution and Registration
http://www.microsoft.com/technet/archive/ntwrkstn/reskit/rktcp03.mspx?mfr=true


Event Type: Error
Event Source: Print
Event Category: None
Event ID: 19
Date: 9/13/2007
Time: 8:36:16 PM
User: NT AUTHORITY\SYSTEM
Computer: WISEOWL
Description:
Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer.
Again an application causing this, either the shares mismatched or disabled.

Event Type: Error
Event Source: BridgeMP
Event Category: None
Event ID: 14702
Date: 9/6/2007
Time: 11:37:53 PM
User: N/A
Computer: WISEOWL
Description:
Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]:
The bridge could not modify the adapter's packet filter. The adapter will
not function correctly.

CHECK YOUR WIRELESS CARD FUNCTIONALITY OR UNINSTALL THEN REINSTALL, AGAIN
UPDATE THE FIRMWARE IF THERE IS
AN AVAILABLE UPDATE FOR IT.


Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 11
Date: 9/6/2007
Time: 11:37:52 PM
User: N/A
Computer: WISEOWL
Description:
The driver detected a controller error on \Device\CdRom0.
Try to see the Cables fitted correctly for the CD-ROM to the Mobo, also the
jumpers and update the Firmware.
Update your MOTHERBOARD BIOS AND ALL THE DRIVERS.


Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 9/11/2007
Time: 12:47:25 PM
User: WISEOWL\john
Computer: WISEOWL
Description:
The attempt to reboot WISEOWL failed
Event ID 1073 Occurs When You Attempt to Move the Quorum Disk
http://support.microsoft.com/kb/257879
Try user Hive cleanup:
http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en
http://www.eventid.net/display.asp?eventid=1073&eventno=1960&source=USER32&phase=1


Event Type: Warning
Event Source: Server
Event Category: None
Event ID: 2504
Date: 9/11/2007
Time: 10:24:50 AM
User: N/A
Computer: WISEOWL
Description:
The server could not bind to the transport
\Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}.

There something interrupting the Signal on line, like Noise or Bad Phone
line or your Printer and File sharing ware deselected or you have a corrupted
winsock.
Browse List Problems When File and Print Sharing Is Not Installed
http://support.microsoft.com/kb/254527


Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 9/6/2007
Time: 8:17:00 PM
User: N/A
Computer: WISEOWL
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.
First, what Firewall you have installed?.

EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED
http://www.microsoft.com/technet/su...ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033
Network Protection Technologies
http://technet.microsoft.com/en-us/library/bb457156.aspx#XSLTsection127121120120

Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of
Service (KB893066)
http://www.updatexp.com/kb893066.html

http://www.speedguide.net/read_articles.php?id=1497
http://www.lvllord.de/?lang=en&url=downloads




Application Events

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 9/15/2007
Time: 9:50:24 AM
User: N/A
Computer: WISEOWL
Description:
Fault bucket 471789395.
could indicate memory leakage?.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 37 31 37 38 39 33 39 47178939
0010: 35 0d 0a 5..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 9/13/2007
Time: 1:59:17 PM
User: N/A
Computer: WISEOWL
Description:
Faulting application fwmanager.exe, version 2.0.0.2, faulting module
fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d.

Do you have one of the below:
Either try to update it or uninstall then reinstall the software for it.
C:\Program Files\Seyeon Tech\FlexWatch Manager\FwManager.exe
C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe

You can try system Repair/install of XP:
http://michaelstevenstech.com/XPrepairinstall.htm

If the above too much for you, then my advice take the machine to your local
repair shop.

HTH.
nass
 
G

Guest

Hi nass
Thank you I have done all the things that are immediately within my limited
scope of understanding.
Removed and re-seated the Ram – 2gb matched pair
Removed Wireless Card – I mostly use a LAN cable anyway and I do remember
when I installed the software I got a warning from Microsoft that it hadn’t
been certified by them and it could cause problems at sometime in the future,
but D-link told me to ignore this message.
Checked the CD-ROM cables are fitted correctly
Reset the winsock
Altered the IE properties as suggested and Disable all non Verified Add-Ons
uninstall then reinstalled FWManager.exe
so far the system appears to be stable, (hasn’t crashed for at least two
hours!) but if I do experience anymore trouble you’ve given me plenty of
other options to follow up.
Thank you, I’ve learnt a lot. I'm really grateful because I live in a remote
area the local repair shop is a long way.
TDH
John


nass said:
Hi John,
My reply in-line:

Astonished John said:
Hi nass,
thankyou for your reponse, I've done as you requested copy and pasting the
latest problems and hope you can make some sense of it.
Click to expand...

Go through these cleaning steps to see or get a clear opinion on how
clean your machine is:
= Click Start >> Control Panel>>Network and Internet Connections >> Double
click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Open a run command and type in:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock reset click [OK]

or you can use this winsock fixer:
http://www.nasstec.co.uk/tools.html
Execute and t will prompt you to restart, please do so. and see if your
issue or part of it will resolve.

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the FileMon to see the Running Processes in realtime from here:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Or Process Explorer :
http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.
You may need to reposition/reset the RAM sticks in their slots.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/15/2007
Time: 10:56:46 AM
User: N/A
Computer: WISEOWL
Description:
Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3
00054f88, parameter4 00000000.
It could be an overheating issue, Bad RAM, Bad Power Supply, Bad drivers for
Vids.
http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1



Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 31008
Date: 9/14/2007
Time: 3:20:55 PM
User: N/A
Computer: WISEOWL
Description:
The DNS proxy agent was unable to read the local list of name-resolution
servers from the registry. The data is the error code.
If you are using long DNS name, it can cause this problem, also if the ICS
sharing service is disabled.
Try to make sure the service is running by opening a run command and type in:
services.msc click [OK]
Locate the Internet Connection sharing and make start Manual or Auto.

ipnathlp.dll open this with a Notepad and check the entries there.

NOTE: That if you have sharing implemented on your Network, which you have
if I'm understanding correctly, hence the Printer!.
Chapter 32 - Networking Name Resolution and Registration
http://www.microsoft.com/technet/archive/ntwrkstn/reskit/rktcp03.mspx?mfr=true


Event Type: Error
Event Source: Print
Event Category: None
Event ID: 19
Date: 9/13/2007
Time: 8:36:16 PM
User: NT AUTHORITY\SYSTEM
Computer: WISEOWL
Description:
Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer.
Again an application causing this, either the shares mismatched or disabled.

Event Type: Error
Event Source: BridgeMP
Event Category: None
Event ID: 14702
Date: 9/6/2007
Time: 11:37:53 PM
User: N/A
Computer: WISEOWL
Description:
Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]:
The bridge could not modify the adapter's packet filter. The adapter will
not function correctly.

CHECK YOUR WIRELESS CARD FUNCTIONALITY OR UNINSTALL THEN REINSTALL, AGAIN
UPDATE THE FIRMWARE IF THERE IS
AN AVAILABLE UPDATE FOR IT.


Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 11
Date: 9/6/2007
Time: 11:37:52 PM
User: N/A
Computer: WISEOWL
Description:
The driver detected a controller error on \Device\CdRom0.
Try to see the Cables fitted correctly for the CD-ROM to the Mobo, also the
jumpers and update the Firmware.
Update your MOTHERBOARD BIOS AND ALL THE DRIVERS.


Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 9/11/2007
Time: 12:47:25 PM
User: WISEOWL\john
Computer: WISEOWL
Description:
The attempt to reboot WISEOWL failed
Event ID 1073 Occurs When You Attempt to Move the Quorum Disk
http://support.microsoft.com/kb/257879
Try user Hive cleanup:
http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en
http://www.eventid.net/display.asp?eventid=1073&eventno=1960&source=USER32&phase=1


Event Type: Warning
Event Source: Server
Event Category: None
Event ID: 2504
Date: 9/11/2007
Time: 10:24:50 AM
User: N/A
Computer: WISEOWL
Description:
The server could not bind to the transport
\Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}.

There something interrupting the Signal on line, like Noise or Bad Phone
line or your Printer and File sharing ware deselected or you have a corrupted
winsock.
Browse List Problems When File and Print Sharing Is Not Installed
http://support.microsoft.com/kb/254527


Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 9/6/2007
Time: 8:17:00 PM
User: N/A
Computer: WISEOWL
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.
First, what Firewall you have installed?.

EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED
http://www.microsoft.com/technet/su...ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033
Network Protection Technologies
http://technet.microsoft.com/en-us/library/bb457156.aspx#XSLTsection127121120120

Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of
Service (KB893066)
http://www.updatexp.com/kb893066.html

http://www.speedguide.net/read_articles.php?id=1497
http://www.lvllord.de/?lang=en&url=downloads




Application Events

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 9/15/2007
Time: 9:50:24 AM
User: N/A
Computer: WISEOWL
Description:
Fault bucket 471789395.
could indicate memory leakage?.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 37 31 37 38 39 33 39 47178939
0010: 35 0d 0a 5..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 9/13/2007
Time: 1:59:17 PM
User: N/A
Computer: WISEOWL
Description:
Faulting application fwmanager.exe, version 2.0.0.2, faulting module
fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d.

Do you have one of the below:
Either try to update it or uninstall then reinstall the software for it.
C:\Program Files\Seyeon Tech\FlexWatch Manager\FwManager.exe
C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe

You can try system Repair/install of XP:
http://michaelstevenstech.com/XPrepairinstall.htm

If the above too much for you, then my advice take the machine to your local
repair shop.

HTH.
nass
Click to expand...
 
G

Guest

Glad to help John, thanks for your feedback and good luck.
Regards,
nass
-----
www.nasstec.co.uk

Astonished John said:
Hi nass
Thank you I have done all the things that are immediately within my limited
scope of understanding.
Removed and re-seated the Ram – 2gb matched pair
Removed Wireless Card – I mostly use a LAN cable anyway and I do remember
when I installed the software I got a warning from Microsoft that it hadn’t
been certified by them and it could cause problems at sometime in the future,
but D-link told me to ignore this message.
Checked the CD-ROM cables are fitted correctly
Reset the winsock
Altered the IE properties as suggested and Disable all non Verified Add-Ons
uninstall then reinstalled FWManager.exe
so far the system appears to be stable, (hasn’t crashed for at least two
hours!) but if I do experience anymore trouble you’ve given me plenty of
other options to follow up.
Thank you, I’ve learnt a lot. I'm really grateful because I live in a remote
area the local repair shop is a long way.
TDH
John


nass said:
Hi John,
My reply in-line:

Astonished John said:
Hi nass,
thankyou for your reponse, I've done as you requested copy and pasting the
latest problems and hope you can make some sense of it.
Click to expand...

Go through these cleaning steps to see or get a clear opinion on how
clean your machine is:
= Click Start >> Control Panel>>Network and Internet Connections >> Double
click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
[ ] Disable script Debugging (internet Explorer) <= check this box
[ ] Disable Script Debugging (Other) <= check this box

Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Open a run command and type in:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock reset click [OK]

or you can use this winsock fixer:
http://www.nasstec.co.uk/tools.html
Execute and t will prompt you to restart, please do so. and see if your
issue or part of it will resolve.

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the FileMon to see the Running Processes in realtime from here:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Or Process Explorer :
http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx

You may have a bad RAM try to test your RAM by running Memory test by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://oca.microsoft.com/en/windiag.asp.
You may need to reposition/reset the RAM sticks in their slots.

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/15/2007
Time: 10:56:46 AM
User: N/A
Computer: WISEOWL
Description:
Error code 0000004e, parameter1 0000008f, parameter2 0001acf0, parameter3
00054f88, parameter4 00000000.
It could be an overheating issue, Bad RAM, Bad Power Supply, Bad drivers for
Vids.
http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1



Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 31008
Date: 9/14/2007
Time: 3:20:55 PM
User: N/A
Computer: WISEOWL
Description:
The DNS proxy agent was unable to read the local list of name-resolution
servers from the registry. The data is the error code.
If you are using long DNS name, it can cause this problem, also if the ICS
sharing service is disabled.
Try to make sure the service is running by opening a run command and type in:
services.msc click [OK]
Locate the Internet Connection sharing and make start Manual or Auto.

ipnathlp.dll open this with a Notepad and check the entries there.

NOTE: That if you have sharing implemented on your Network, which you have
if I'm understanding correctly, hence the Printer!.
Chapter 32 - Networking Name Resolution and Registration
http://www.microsoft.com/technet/archive/ntwrkstn/reskit/rktcp03.mspx?mfr=true


Event Type: Error
Event Source: Print
Event Category: None
Event ID: 19
Date: 9/13/2007
Time: 8:36:16 PM
User: NT AUTHORITY\SYSTEM
Computer: WISEOWL
Description:
Sharing printer failed + 1722, Printer Quicken PDF Printer share name Printer.
Again an application causing this, either the shares mismatched or disabled.

Event Type: Error
Event Source: BridgeMP
Event Category: None
Event ID: 14702
Date: 9/6/2007
Time: 11:37:53 PM
User: N/A
Computer: WISEOWL
Description:
Bridge [Adapter D-Link AirPlus G+ DWL-G520+ Wireless PCI Adapter]:
The bridge could not modify the adapter's packet filter. The adapter will
not function correctly.

CHECK YOUR WIRELESS CARD FUNCTIONALITY OR UNINSTALL THEN REINSTALL, AGAIN
UPDATE THE FIRMWARE IF THERE IS
AN AVAILABLE UPDATE FOR IT.


Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 11
Date: 9/6/2007
Time: 11:37:52 PM
User: N/A
Computer: WISEOWL
Description:
The driver detected a controller error on \Device\CdRom0.
Try to see the Cables fitted correctly for the CD-ROM to the Mobo, also the
jumpers and update the Firmware.
Update your MOTHERBOARD BIOS AND ALL THE DRIVERS.


Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 9/11/2007
Time: 12:47:25 PM
User: WISEOWL\john
Computer: WISEOWL
Description:
The attempt to reboot WISEOWL failed
Event ID 1073 Occurs When You Attempt to Move the Quorum Disk
http://support.microsoft.com/kb/257879
Try user Hive cleanup:
http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en
http://www.eventid.net/display.asp?eventid=1073&eventno=1960&source=USER32&phase=1


Event Type: Warning
Event Source: Server
Event Category: None
Event ID: 2504
Date: 9/11/2007
Time: 10:24:50 AM
User: N/A
Computer: WISEOWL
Description:
The server could not bind to the transport
\Device\NetBT_Tcpip_{1602A26E-0426-41B0-8468-483AC389C464}.

There something interrupting the Signal on line, like Noise or Bad Phone
line or your Printer and File sharing ware deselected or you have a corrupted
winsock.
Browse List Problems When File and Print Sharing Is Not Installed
http://support.microsoft.com/kb/254527


Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 9/6/2007
Time: 8:17:00 PM
User: N/A
Computer: WISEOWL
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.
First, what Firewall you have installed?.

EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED
http://www.microsoft.com/technet/su...ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033
Network Protection Technologies
http://technet.microsoft.com/en-us/library/bb457156.aspx#XSLTsection127121120120

Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of
Service (KB893066)
http://www.updatexp.com/kb893066.html

http://www.speedguide.net/read_articles.php?id=1497
http://www.lvllord.de/?lang=en&url=downloads




Application Events

Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 9/15/2007
Time: 9:50:24 AM
User: N/A
Computer: WISEOWL
Description:
Fault bucket 471789395.
could indicate memory leakage?.


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 37 31 37 38 39 33 39 47178939
0010: 35 0d 0a 5..

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 9/13/2007
Time: 1:59:17 PM
User: N/A
Computer: WISEOWL
Description:
Faulting application fwmanager.exe, version 2.0.0.2, faulting module
fwmanager.exe, version 2.0.0.2, fault address 0x00034a8d.

Do you have one of the below:
Either try to update it or uninstall then reinstall the software for it.
C:\Program Files\Seyeon Tech\FlexWatch Manager\FwManager.exe
C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe

You can try system Repair/install of XP:
http://michaelstevenstech.com/XPrepairinstall.htm

If the above too much for you, then my advice take the machine to your local
repair shop.
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Blue Screen problems 9
Blue screen error message 1
Blue Screen 10
Blue/Green Screen Stop Error 5
IBM Trackpoint Keyboard Support? 6
Problems with Windows firewall 7
Need help PLEASE 9
Windows update 3

Top