Event ID 51

M

Mercutio

At different points of activity Windows XP freezes. I can move around the
mouse and get background activity, e.g. music playing. Nevertheless all
active programms stop responding and I cannot open the task manager.

I have found the following event IDs which are warnings or errors around the
time: 1003, 1009, 1001 and 51.

My amateur idea is that 51 is the culprit, something like the disk being
damaged at some sectors. Thus I ran chkdsk which could not find anything.

I have found http://support.microsoft.com/kb/244780 but unluckily I am not
able to read the hexstuff. Maybe someone could help me there and find a
solution.

The event reads as follows:

0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..€
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 96 c1 02 00 00 00 00 00 –Ã......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 04 00 00 00 00 @.......
0040: 00 20 0a 12 80 03 20 40 . ..€. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 90 18 5b 88 ....Â.[ˆ
0058: 00 00 00 00 70 67 5e 88 ....pg^ˆ
0060: 00 00 00 00 27 42 1b 12 ....'B..
0068: 2a 00 12 1b 42 27 00 00 *...B'..
0070: 80 00 00 00 00 00 00 00 €.......
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Thanks a lot
 
T

Thee Chicago Wolf

At different points of activity Windows XP freezes. I can move around the
mouse and get background activity, e.g. music playing. Nevertheless all
active programms stop responding and I cannot open the task manager.

I have found the following event IDs which are warnings or errors around the
time: 1003, 1009, 1001 and 51.

My amateur idea is that 51 is the culprit, something like the disk being
damaged at some sectors. Thus I ran chkdsk which could not find anything.

I have found http://support.microsoft.com/kb/244780 but unluckily I am not
able to read the hexstuff. Maybe someone could help me there and find a
solution.

The event reads as follows:

0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..?
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 96 c1 02 00 00 00 00 00 ?Á......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 04 00 00 00 00 @.......
0040: 00 20 0a 12 80 03 20 40 . ..?. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 90 18 5b 88 ....?.[?
0058: 00 00 00 00 70 67 5e 88 ....pg^?
0060: 00 00 00 00 27 42 1b 12 ....'B..
0068: 2a 00 12 1b 42 27 00 00 *...B'..
0070: 80 00 00 00 00 00 00 00 ?.......
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Thanks a lot

What is the event ID source. 51 is too broad and could be tons of
things.

- Thee Chicago Wolf
 
G

Gerry

Please post copies of the Event Viewer reports. The bit you posted is
the part of no interest. Sorry you guessed wrong.

Please post copies of all Error and Warning Reports appearing in the
System and Application logs in Event Viewer relating to the last boot in
normal mode . No Information Reports or Duplicates please. Indicate
which also appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
M

Mercutio

These are the warnings and errors I get.
They are translations so there might be some minor differences to an English
original, but I hope you can refer to the events anyway.

I always get "DHCP 1009" together with "DHCP 1003", which happened a couple
of times during the last boots.

There are three "disk 51" whenever this warning happens.

"DCOM 10005" are usually about 8 errors following after each other within a
couple of seconds. As far as I understand the only thing that changes is the
affected server.

"Service Manager 7001" is a group of 4 errors at the exact same time.
Descriptions in the format X depends on Y are: 1 ) ... DHCP client ...
Netbios via TCP/IP 2) ... DNS clinet ... TCP/IP protocoll driver 3) ...
TCP/IP-NetBIOS-Assistantprogram ... AFD 4) ... IPSEC-Service ... IPSEC-Driver


I just hope this makes some sense...


Event type:warning
Source: Dhcp
Category: none
Event id: 1009
Date: 24.11.2008
Time: 16:19:20
User: not applicable
Computer: mercutio
Description:
When trying to send a message an error occured. errorcode: a blockingprocess
was interrupted when opening WSACancelBlockingCall
Data:
0000: 14 27 00 00 .'..


Event type:warning
Source: Dhcp
Category: none
Event id: 1003
Date: 24.11.2008
Time: 16:19:20
User: not applicable
Computer: mercutio
Description:
Computer could not renew the network address which the DHCP-Server
attributed to network card with address 0095BB58A41. The following error
occured:
Process was interrupted by user. It is being tried in the background to
acquire an adress from networkadressserver (DHCP).
Data:
0000: c7 04 00 00 Ç...


Event type:error
Source: Service Control Manager
Category: none
Event id: 7034
Date: 24.11.2008
Time: 15:18:52
User: not applicable
Computer: mercutio
Description:
Service "NVIDIA Display Driver Service" was closed unexpectedly. This
happened for the 1st time

Event type:warning
Source: Disk
Category: none
Event id: 51
Date: 24.11.2008
Time: 14:30:06
User: not applicable
Computer: mercutio
Description:
During an
When buffering an error occured. Device affected: \Device\Harddisk0\D
Data:
0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..€
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 4f aa 02 00 00 00 00 00 Oª......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 04 00 00 00 00 @.......
0040: 00 20 0a 12 80 03 20 40 . ..€. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 30 73 92 89 ....0s’‰
0058: 00 00 00 00 08 50 1f 88 .....P.ˆ
0060: 00 00 00 00 07 b3 83 0c .....³ƒ.
0068: 2a 00 0c 83 b3 07 00 00 *..ƒ³...
0070: 08 00 00 00 00 00 00 00 ........
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Event type:error
Source: DCOM
Category: none
Event id: 10005
Date: 24.11.2008
Time: 14:24:52
User: mercutio\mercutio
Computer: mercutio
Description:
At DCOM the error "this service cannot be started in safe mode." occured
when the service "netman" was started with arguments "" to use the following
server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}


Event type:error
Source: Service Control Manager
Category: none
Event id: 7026
Date: 24.11.2008
Time: 13:46:38
User: not applicable
Computer: mercutio
Description:
Loading following boot- or systemdriver failed:
AFD
AvgLdx86
AvgMfx86
Fips
IPSec
MRxSmb
NetBIOS
NetBT
Processor
RasAcd
Rdbss
Tcpip


Event type:error
Source: Service Control Manager
Category: none
Event id: 7001
Date: 24.11.2008
Time: 13:46:38
User: not applicable
Computer: mercutio
Description:
Service "IPSEC-Service" depends on service "IPSEC-Driver" which was not
started due to the following error:
A device attached to the system is not working

Gerry said:
Please post copies of the Event Viewer reports. The bit you posted is
the part of no interest. Sorry you guessed wrong.

Please post copies of all Error and Warning Reports appearing in the
System and Application logs in Event Viewer relating to the last boot in
normal mode . No Information Reports or Duplicates please. Indicate
which also appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


At different points of activity Windows XP freezes. I can move around
the mouse and get background activity, e.g. music playing.
Nevertheless all active programms stop responding and I cannot open
the task manager.

I have found the following event IDs which are warnings or errors
around the time: 1003, 1009, 1001 and 51.

My amateur idea is that 51 is the culprit, something like the disk
being damaged at some sectors. Thus I ran chkdsk which could not find
anything.

I have found http://support.microsoft.com/kb/244780 but unluckily I
am not able to read the hexstuff. Maybe someone could help me there
and find a solution.

The event reads as follows:

0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..€
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 96 c1 02 00 00 00 00 00 –Ã......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 04 00 00 00 00 @.......
0040: 00 20 0a 12 80 03 20 40 . ..€. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 90 18 5b 88 ....Â.[ˆ
0058: 00 00 00 00 70 67 5e 88 ....pg^ˆ
0060: 00 00 00 00 27 42 1b 12 ....'B..
0068: 2a 00 12 1b 42 27 00 00 *...B'..
0070: 80 00 00 00 00 00 00 00 €.......
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Thanks a lot
 
G

Gerry

Mercutio

Event ID:51

What exactly do you have by way of hard drives? What are you doing when
these errors occurs. What do you have by way of USB drives? Do you copy
large files from a USB flash drive to your hard drive?

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

What version of Windows XP is installed? Is the SP3 update installed?

What is your computer make and model?

I have added some comments on the on the other Events in line.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
These are the warnings and errors I get.
They are translations so there might be some minor differences to an
English original, but I hope you can refer to the events anyway.

I always get "DHCP 1009" together with "DHCP 1003", which happened a
couple of times during the last boots.

There are three "disk 51" whenever this warning happens.

"DCOM 10005" are usually about 8 errors following after each other
within a couple of seconds. As far as I understand the only thing
that changes is the affected server.

"Service Manager 7001" is a group of 4 errors at the exact same time.
Descriptions in the format X depends on Y are: 1 ) ... DHCP client ...
Netbios via TCP/IP 2) ... DNS clinet ... TCP/IP protocoll driver 3)
... TCP/IP-NetBIOS-Assistantprogram ... AFD 4) ... IPSEC-Service ...
IPSEC-Driver


I just hope this makes some sense...


Event type:warning
Source: Dhcp
Category: none
Event id: 1009
Date: 24.11.2008
Time: 16:19:20
User: not applicable
Computer: mercutio
Description:
When trying to send a message an error occured. errorcode: a
blockingprocess was interrupted when opening WSACancelBlockingCall
Data:
.'..

You interrupted the process. It's not worth further investigation.
Event type:warning
Source: Dhcp
Category: none
Event id: 1003
Date: 24.11.2008
Time: 16:19:20
User: not applicable
Computer: mercutio
Description:
Computer could not renew the network address which the DHCP-Server
attributed to network card with address 0095BB58A41. The following
error occured:
Process was interrupted by user. It is being tried in the background
to acquire an adress from networkadressserver (DHCP).
Data:

You interrupted the process. It's not worth further investigation.
Event type:error
Source: Service Control Manager
Category: none
Event id: 7034
Date: 24.11.2008
Time: 15:18:52
User: not applicable
Computer: mercutio
Description:
Service "NVIDIA Display Driver Service" was closed unexpectedly. This
happened for the 1st time

Unless this is a repeating error I would not think it is worth
investigating.
Event type:warning
Source: Disk
Category: none
Event id: 51
Date: 24.11.2008
Time: 14:30:06
User: not applicable
Computer: mercutio
Description:
During an
When buffering an error occured. Device affected: \Device\Harddisk0\D
Data:

Snipped


Event type:error
Source: DCOM
Category: none
Event id: 10005
Date: 24.11.2008
Time: 14:24:52
User: mercutio\mercutio
Computer: mercutio
Description:
At DCOM the error "this service cannot be started in safe mode."
occured when the service "netman" was started with arguments "" to
use the following server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

This is a direct consequence of booting to safe mode and does not
require any remedial action.

Event type:error
Source: Service Control Manager
Category: none
Event id: 7026
Date: 24.11.2008
Time: 13:46:38
User: not applicable
Computer: mercutio
Description:
Loading following boot- or systemdriver failed:

This is a direct consequence of booting to safe mode and does not
require any remedial action.

Snipped
Event type:error
Source: Service Control Manager
Category: none
Event id: 7001
Date: 24.11.2008
Time: 13:46:38
User: not applicable
Computer: mercutio
Description:
Service "IPSEC-Service" depends on service "IPSEC-Driver" which was
not started due to the following error:
A device attached to the system is not working

Does this error occur when you boot to normal mode?

Gerry said:
Please post copies of the Event Viewer reports. The bit you posted is
the part of no interest. Sorry you guessed wrong.

Please post copies of all Error and Warning Reports appearing in the
System and Application logs in Event Viewer relating to the last
boot in normal mode . No Information Reports or Duplicates please.
Indicate which also appear in a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and
double click on the error you want to copy. In the window, which
appears is a button resembling two pages. Click the button and close
Event Viewer.Now start your message (email) and do a paste into the
body of the message. Make sure this is the first paste after exiting
from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


At different points of activity Windows XP freezes. I can move
around the mouse and get background activity, e.g. music playing.
Nevertheless all active programms stop responding and I cannot open
the task manager.

I have found the following event IDs which are warnings or errors
around the time: 1003, 1009, 1001 and 51.

My amateur idea is that 51 is the culprit, something like the disk
being damaged at some sectors. Thus I ran chkdsk which could not
find anything.

I have found http://support.microsoft.com/kb/244780 but unluckily I
am not able to read the hexstuff. Maybe someone could help me there
and find a solution.

The event reads as follows:

0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..?
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 96 c1 02 00 00 00 00 00 -Á......
0030: ff ff ff ff 03 00 00 00 ÿÿÿÿ....
0038: 40 00 00 04 00 00 00 00 @.......
0040: 00 20 0a 12 80 03 20 40 . ..?. @
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 90 18 5b 88 .....[^
0058: 00 00 00 00 70 67 5e 88 ....pg^^
0060: 00 00 00 00 27 42 1b 12 ....'B..
0068: 2a 00 12 1b 42 27 00 00 *...B'..
0070: 80 00 00 00 00 00 00 00 ?.......
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

Thanks a lot
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top