Pls Help- Sometimes my XP starts perfectly & sometimes it freezes

  • Thread starter Thread starter robvansolt
  • Start date Start date
R

robvansolt

Out of the blue it started with the problem, xp wanted to install a
fax, and if I closed those windows then i could continue working with
my computer. It got worse and I managed to salve my data and finally I
gave it the file that xp was requesting Fax.cab I believe (got it from
hp printer sotware) and then we got to a new dimension of problem: it
would freeze after several minutes into the booting problem. I figured
a software problem so as I had my data saved i did a recovery of my
computer which basically formats the HD and downloads the original
software. Didn'd work, did it again, rebooted a few times and finally
it worked. Rebboted it a few more times and worked fine. Thought I had
beaten the problem but after I downloaded some of my data the problem
persisted. Next day I did another recovery using again the original
recovery disks to rule out my data and the problem exists. Basically,
if the process finishes the booting process it works perfectly. Most
of the time 90% it freezes.
I can start it it safe mode but don't now what else to do. Right now
it is working like a charm ... until I restart it again. Anyone can
assist?? Robert
 
Rob

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Rob

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

--

Hope  this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~





- Show quoted text -

Hi Gerry, thanks for the assyst. I have not been able to start the
laptop as it always freezes after starting the booting problem, it
looks like the ram clogs up and the process stops. I say this because
one can see the hd led running slower and slower until it stops. Also
when I could i could see with task mgr how the cpu was running almost
at 100%.

Will keep trying to get you the information as soon as I can restart
it without freezing.

robert
 
Robert

Can you boot into Safe Mode?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Robert

Can you boot into Safe Mode?

--

Hope  this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Hi Gerry, finally managed to get the information you requested:

I tried today Sunday 3 times to start the notebook (froze every time)
and finally I went to safe mode get this info:

One Error in Application Log:

The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 8007043C from line 44 of d:\qxp_slp\com\com1x
\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft
Product Support Services to report this error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Several Errors in System log from most recent to older from today:

DCOM got error "This service cannot be started in Safe Mode "
attempting to start the service EventSystem with arguments "" in order
to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The following boot-start or system-start driver(s) failed to load:
AFD
AmdK8
Fips
IPSec
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip


The IPSEC Services service depends on the IPSEC driver service which
failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The TCP/IP NetBIOS Helper service depends on the AFD service which
failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The DNS Client service depends on the TCP/IP Protocol Driver service
which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The DHCP Client service depends on the NetBios over Tcpip service
which failed to start because of the following error:
A device attached to the system is not functioning.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


DCOM got error "This service cannot be started in Safe Mode "
attempting to start the service EventSystem with arguments "" in order
to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


\Device\ACPIEC: The embedded controller (EC) hardware returned data
when none was requested. This may indicate that the BIOS is
incorectly trying to access the EC without syncronizing with the OS.
The data is being ignored.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


DCOM got error "This service cannot be started in Safe Mode "
attempting to start the service netman with arguments "" in order to
run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


DCOM got error "This service cannot be started in Safe Mode "
attempting to start the service netman with arguments "" in order to
run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Thanks, Robert
 
Robert

You need to post more complete copies of the Error Reports for the last
time you ran the computer in normal mode. Don't attempt internet
connections in Safe mode.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Robert

You need to post more complete copies of the Error Reports for the last
time you ran the computer in normal mode. Don't attempt internet
connections in Safe mode.

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

--

Hope  this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Hi Back again, Sorry I had to travel and leave town. I came back and
turn it on and it started PERFECTLY! I know that if I reboot it it
will start with the problem again. I can see in the event viewer
everything but I do not know how to cut and past that information for
you to see. I mean, The complete window with all the warnings and
errror information. Basically I already posted that information by
event.

As it is running well until next reboot, what information can I give
you that will help sort this out?

Robert
 
Hi Back again, Sorry I had to travel and leave town. I came back and
turn it on and it started PERFECTLY! I know that if I reboot it it
will start with the problem again. I can see in the event viewer
everything but I do not know how to cut and past that information for
you to see. I mean, The complete window with all the warnings and
errror information. Basically I already posted that information by
event.

As it is running well until next reboot, what information can I give
you that willhelpsort this out?

Robert- Hide quoted text -

- Show quoted text -


Updated Error information as it is working well:



Event Viewer

Aplication Errors:

Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3001
Date: 1/27/2008
Time: 11:30:25 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The performance counter name string value in the registry is
incorrectly formatted. The bogus string is 2330, the bogus index value
is the first DWORD in Data section while the last valid index values
are the second and third DWORD in Data section.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1a 09 00 00 18 09 00 00 ........
0008: 19 09 00 00 97 02 00 00 ....—...




Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 1/27/2008
Time: 11:30:22 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
Unloading the performance counter strings for service WmiApRpl
(WmiApRpl) failed. The Error code is the first DWORD in Data section.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 3b 07 00 00 ò...;...


Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3001
Date: 1/27/2008
Time: 11:30:22 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The performance counter name string value in the registry is
incorrectly formatted. The bogus string is 2330, the bogus index value
is the first DWORD in Data section while the last valid index values
are the second and third DWORD in Data section.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1a 09 00 00 18 09 00 00 ........
0008: 19 09 00 00 cf 01 00 00 ....Ï...

Due to the time in this next error msg I believe that this next one
belongs to a different startup of notebook:

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 1/27/2008
Time: 9:04:35 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 8007043C from line 44 of d:\qxp_slp\com\com1x
\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft
Product Support Services to report this error.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


I will now post the System errors of the last start up.

System errors:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:43:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:41:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:39:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:37:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:35:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:33:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:31:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:29:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7022
Date: 1/27/2008
Time: 11:27:05 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The System Event Notification service hung on starting.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/27/2008
Time: 11:24:21 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
DCOM got error "This service cannot be started in Safe Mode "
attempting to start the service EventSystem with arguments "" in order
to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Anything else I can post?

regards, Robert
 
Updated Error information as it is working well:

Event Viewer

Aplication Errors:

Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3001
Date: 1/27/2008
Time: 11:30:25 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The performance counter name string value in the registry is
incorrectly formatted. The bogus string is 2330, the bogus index value
is the first DWORD in Data section while the last valid index values
are the second and third DWORD in Data section.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1a 09 00 00 18 09 00 00 ........
0008: 19 09 00 00 97 02 00 00 ....--...

Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 1/27/2008
Time: 11:30:22 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
Unloading the performance counter strings for service WmiApRpl
(WmiApRpl) failed. The Error code is the first DWORD in Data section.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 3b 07 00 00 ò...;...

Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3001
Date: 1/27/2008
Time: 11:30:22 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The performance counter name string value in the registry is
incorrectly formatted. The bogus string is 2330, the bogus index value
is the first DWORD in Data section while the last valid index values
are the second and third DWORD in Data section.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1a 09 00 00 18 09 00 00 ........
0008: 19 09 00 00 cf 01 00 00 ....Ï...

Due to the time in this next error msg I believe that this next one
belongs to a different startup of notebook:

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 1/27/2008
Time: 9:04:35 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 8007043C from line 44 of d:\qxp_slp\com\com1x
\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft
Product Support Services to report this error.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

I will now post the System errors of the last start up.

System errors:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:43:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:41:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:39:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:37:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:35:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:33:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:31:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/27/2008
Time: 11:29:07 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7022
Date: 1/27/2008
Time: 11:27:05 AM
User: N/A
Computer: ROB-NOTEBOOK
Description:
The System Event Notification service hung on starting.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/27/2008
Time: 11:24:21 AM
User: NT AUTHORITY\SYSTEM
Computer: ROB-NOTEBOOK
Description:
DCOM got error "This service cannot be started in Safe Mode "
attempting to start the service EventSystem with arguments "" in order
to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

Anything else I can post?

regards, Robert- Hide quoted text -

- Show quoted text -

Gerry,

Regarding your question if in the device manager window there was an
error mesage the answer is Right NOW no. Everything is working fine.
When I eventually find the heart to restart it I'm sure there will be
some issues but do not know if I can see them in safe mode.

Robert
 
I missed the beginning of this thread so I don't have
all the info, but when I had this same problem, disabling
the Welcome screen (which turns off Fast User Switching)
fixed it utterly.

http://support.microsoft.com/kb/291559/en-us

I can't remember how I arrived at this, I do believe that
there was a clue in Event Viewer.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top