Error messages (forwarded by friend)

[Rainy]

Hi finally got some of the event or error messages.. there are a number she
copied and pasted..Looks like she has more than one
problem... system clock, cdrom drive, (cd rom does work)although not sure if
this is referring to her dvd burner which has never worked... hope you can
help... thanks ahead of time.. Rainy

-
Subject: error messages to forward, several of them

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 7/15/2005
Time: 1:35:26 AM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The time service has not been able to synchronize the system time for
49152 seconds because none of the time providers has
been able to provide a usable time stamp. The system clock is
unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and another one.....

Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 7/14/2005
Time: 11:53:44 AM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The IP address lease 192.168.1.101 for the Network Card with network
address 00055D507E70 has been denied by the DHCP server
192.168.1.1 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and another....
Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Date: 7/12/2005
Time: 9:33:00 PM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The Network Address Translator (NAT) was unable to request an
operation of the kernel-mode translation module. This may
indicate misconfiguration, insufficient resources, or an internal error. The
data is the error code.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1f 00 00 00 ....


and I get this one often.....

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 7/12/2005
Time: 9:22:44 PM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The following boot-start or system-start driver(s) failed to load:
Cdrom
redbook

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 7/12/2005
Time: 8:22:34 PM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
Error code 0000004e, parameter1 00000099, parameter2 00000000,
parameter3 00000000, parameter4 00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 34 0000004
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 39 39 2c 20 000099,
0038: 30 30 30 30 30 30 30 30 00000000
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 30 30 30 0000


Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 7/11/2005
Time: 8:23:11 AM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
An error was detected on device \Device\Harddisk1\D during a paging
operation.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..?
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 4e 45 36 00 00 00 00 .NE6....
0028: ae e7 44 00 00 00 00 00 ®çD.....
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 84 02 00 01 00 @..?....
0040: 00 20 0a 12 40 03 20 40 . ..@. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 08 f7 ae ff .....÷®ÿ
0058: 00 00 00 00 38 5d 94 ff ....8]?ÿ
0060: 02 00 00 00 a7 22 1b 00 ....§"..
0068: 28 00 00 1b 22 a7 00 00 (..."§..
0070: 80 00 00 00 00 00 00 00 ?.......
0078: f0 00 06 00 00 00 00 0b ð.......
0080: 00 00 00 00 5a 01 00 00 ....Z...
0088: 00 00 00 00 00 00 00 00 ........
---- Original Message -----
From: "Rainy" <[email protected]>
Newsgroups: microsoft.public.windowsxp.basics
Sent: Thursday, July 14, 2005 7:40 PM
Subject: Re: Viewing errors


thanks so much, I just forwarded all this information to her... keeping
fingers crossed! thanks Rainy

 

[Rainy]

She finally sent me the screenshot.. I don't think this group will let me
forward it... but I looked at it..and the source of the errors seems to be
Service Control Manager, disk, win32k,and DHCP. Hope this helps... Rainy

Hi finally got some of the event or error messages.. there are a number
she copied and pasted..Looks like she has more than one
problem... system clock, cdrom drive, (cd rom does work)although not sure
if this is referring to her dvd burner which has never worked... hope you
can help... thanks ahead of time.. Rainy

-
Subject: error messages to forward, several of them

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 7/15/2005
Time: 1:35:26 AM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The time service has not been able to synchronize the system time for
49152 seconds because none of the time providers has
been able to provide a usable time stamp. The system clock is
unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and another one.....

Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 7/14/2005
Time: 11:53:44 AM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The IP address lease 192.168.1.101 for the Network Card with network
address 00055D507E70 has been denied by the DHCP server
192.168.1.1 (The DHCP Server sent a DHCPNACK message).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and another....
Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Date: 7/12/2005
Time: 9:33:00 PM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The Network Address Translator (NAT) was unable to request an
operation of the kernel-mode translation module. This may
indicate misconfiguration, insufficient resources, or an internal error.
The data is the error code.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1f 00 00 00 ....


and I get this one often.....

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 7/12/2005
Time: 9:22:44 PM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
The following boot-start or system-start driver(s) failed to load:
Cdrom
redbook

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 7/12/2005
Time: 8:22:34 PM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
Error code 0000004e, parameter1 00000099, parameter2 00000000,
parameter3 00000000, parameter4 00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 34 0000004
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 39 39 2c 20 000099,
0038: 30 30 30 30 30 30 30 30 00000000
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 30 30 30 0000


Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 7/11/2005
Time: 8:23:11 AM
User: N/A
Computer: JANE-3LXVVEDMRK
Description:
An error was detected on device \Device\Harddisk1\D during a paging
operation.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 03 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..?
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 4e 45 36 00 00 00 00 .NE6....
0028: ae e7 44 00 00 00 00 00 ®çD.....
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 84 02 00 01 00 @..?....
0040: 00 20 0a 12 40 03 20 40 . ..@. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 08 f7 ae ff .....÷®ÿ
0058: 00 00 00 00 38 5d 94 ff ....8]?ÿ
0060: 02 00 00 00 a7 22 1b 00 ....§"..
0068: 28 00 00 1b 22 a7 00 00 (..."§..
0070: 80 00 00 00 00 00 00 00 ?.......
0078: f0 00 06 00 00 00 00 0b ð.......
0080: 00 00 00 00 5a 01 00 00 ....Z...
0088: 00 00 00 00 00 00 00 00 ........
---- Original Message -----
From: "Rainy" <[email protected]>
Newsgroups: microsoft.public.windowsxp.basics
Sent: Thursday, July 14, 2005 7:40 PM
Subject: Re: Viewing errors


thanks so much, I just forwarded all this information to her... keeping
fingers crossed! thanks Rainy

 

[Sharon F]

Hi finally got some of the event or error messages.. there are a number she
copied and pasted..Looks like she has more than one
problem... system clock, cdrom drive, (cd rom does work)although not sure if
this is referring to her dvd burner which has never worked... hope you can
help... thanks ahead of time.. Rainy

The W32Time event is normal. It occurs when the time server is unreachable.
The default time server in XP is often busy enough from traffic that this
information message is generated.

The DHCP error: It means an attempt to gain an IP failed. Possible
explanation is that the PC requested an IP outside of the range allowed by
the router or modem configuration. Have her click the "more info" link in
this error message and in the next one regarding ipnathlp. This one may
just be a fallout from the first but it also reflects a possible mistake in
the IP range allowed.

NOTE: If using a router or cable/dsl modem that uses the IP 192.168.2.1
for its own IP, do not use Internet Connection Sharing. It uses the same IP
(no way to change it) and can conflict with the router or modem. If there
are multiple computers in the home, find a different way to share the
connection.

Getting internet connections setup properly is not difficult with a little
bit of knowledge, a decent guide to follow and being there firsthand. It
could be *very* difficult to help someone with this long distance. If her
equipment is rented from the ISP, have them come out and configure it for
her.

If she has dialup and is a single computer, then it may just be a service
running that doesn't need to be. The error messages can be eliminated with
some tweaking but it's not necessary for internet connections to work and
should not be causing the shutdown problems she's having.

There's a chance that the system is infected with something trying to run
as a server (or software that does this - such as p2p file sharing programs
- is intentionally installed) and is causing the IP reports. These things
are usually a little more sneaky though - not broadcasting errors and there
would be other symptoms besides. Still, it wouldn't hurt to check this
angle.

The system error (event id 1003) could be related to just the banged out
cdrom drive or it could be due to more hardware problems that are yet to be
discovered.

The two errors regarding a problem drive: Most likely for the non-working
drive. Any reason why this drive does not work? Needs jumpers changed?
Needs position on IDE channels changed? Something along those lines? On the
other hand, if it's as dead as a doornail, it should get removed from the
system. Or at the very least disabled in Device Manager.

Unfortunately, none of these things really explain why the system is
suddenly shutting down and/or restarting. There's an outside chance that
disabling that one drive *might* help but am not hopeful of that prospect.

If no luck, it may be time to bring the system in for a health check. Going
by what's been related so far, I'm inclined to think there is a more basic
hardware problem that needs to be addressed.

 

[Rainy]

thanks so much... will pass this on to her.. she should be in this group so
she can address these issues herself...I am very thankful you responded...
and will let you know how it goes... since I gave her the computer.. I don't
want her to have to invest in repair.. this is a small town and there is
only one computer store in town and reputation says he's not very good..We
do live about 45 min away from Davenport, so there is always that option...
she is sharing her computer.. with one other person now.. and has cable..
she needs to have the cable guy out and see what he can find out.. thanks
Sharon.. it's always appreciated..Rainy

 

[Sharon F]

thanks so much... will pass this on to her.. she should be in this group so
she can address these issues herself...I am very thankful you responded...
and will let you know how it goes... since I gave her the computer.. I don't
want her to have to invest in repair.. this is a small town and there is
only one computer store in town and reputation says he's not very good..We
do live about 45 min away from Davenport, so there is always that option...
she is sharing her computer.. with one other person now.. and has cable..
she needs to have the cable guy out and see what he can find out.. thanks
Sharon.. it's always appreciated..Rainy

You're most welcome. Don't forget to check the system for malware (viruses,
adware, etc). Sometimes you can spend hours diagnosing only to find out one
of these nasties is at the root of your problems. Whenever there are
unusual problems with the system, this is the first thing that should be
checked for.

 

[Rainy]

I remember something ..she has no firewall..not sure she has xp firewall
enabled, but uses spybot or some other program for malware, and avg for her
antivirus... her isp said Zone alarm interferes .. I had it on my computer
when I lived with her, and it didn't bother either one of us...so I don't
understand why they told her that..sure does govern the traffic going back
and forth.. Rainy

 

[Sharon F]

I remember something ..she has no firewall..not sure she has xp firewall
enabled, but uses spybot or some other program for malware, and avg for her
antivirus... her isp said Zone alarm interferes .. I had it on my computer
when I lived with her, and it didn't bother either one of us...so I don't
understand why they told her that..sure does govern the traffic going back
and forth.. Rainy

She needs a firewall, Rainy, to stay safe online. Some ISP-provided modems
have them builtin. If not builtin, the XP firewall is okay to block
unwanted incoming. It does not give early warning of nasties that may have
sneaked in and are trying to communicate to the outside world. Still, one
way protection is better than nothing.

Thought: She may want to ask the ISP which firewalls *will work* with their
service.