XP Crash/Restart and Error Reporting

S

scott

For the last couple of months, my XP SP2 has been "crashing" and restarting
on it's own. I have dealt with it but now I want to figure out the exact
problem without having to restore from previous set-points. Can someone help
me determine what is the exact cause? XP is up to date. Any assistance would
be greatly appreciated.
 
J

Jan Mojzis

I had this problem after tried to install driver update AC 97 from
windowsupdate. After a few minutes, system restarted. I tried it 2 times with
the same result. However after removed new driver, problem disappeared. Its
strange enough, since there was no hardware conflict in device manager.
 
S

scott

Mark,
Thanks, here is what I found. Can you tell me any info:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 4/10/2008
Time: 10:20:39 PM
User: N/A
Computer: SCOTT
Description:
Error code 1000008e, parameter1 c0000005, parameter2 f64b71fc, parameter3
b87a4f50, parameter4 00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 66 36 34 62 37 31 66 63 f64b71fc
0040: 2c 20 62 38 37 61 34 66 , b87a4f
0048: 35 30 2c 20 30 30 30 30 50, 0000
0050: 30 30 30 30 0000
 
M

Mark L. Ferguson

This is a quote from Ron Martel on 'pstat', another utility you might try:
Process Explorer is a tool that can help with the address, and I prefer it,
but Ron's technique works great.
<quote follows>
0x0000008E
With this error code, paramter 2 gives the address where the exception
occurred.

You can see if this was caused by a device driver, and identify that
driver, with the following procedure:

******
Identifying the cause of STOP errors using PSTAT & Excel

Many times when a STOP error occurs the information provided does not
specifically identify the application, device driver, or other
component file where the error occurred. However the 4 parameters
associated with the STOP (bugcheck) code will very often include one
that is the address where the error occurred. You first need to look
up the detailed information about the specific STOP code in order to
determine if the address is included and if so which of the 4
parameters has the address.

You can identify the meaning of each of the parameters for your
specific STOP code at:
http://msdn2.microsoft.com/en-us/library/ms789516.aspx

The second step in the procedure is to identify the addresses that
each active process is being loaded at. The PSTAT utility will
provide this information. On some systems the PSTAT utility may
already be present. Check this by opening a Command Prompt window
(Start - Run - CMD) and entering the following command:

PSTAT /?

If PSTAT is not on your computer you can download it free from
Microsoft. The download is called "Windows XP Service Pack 2 Support
Tools" and it is available from
http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en
With PSTAT installed on your computer the next step is to open a
Command Prompt window again (Start - Run - CMD) and generate a report
with PSTAT. Because you need to copy part of the information from
this report (and only part) it is best to create the report as a text
file. In the Command Prompt window enter the following command:

PSTAT > C:\JUNK\PSTAT.TXT

You may change C:\JUNK\ to whatever drive and folder that you want to
save the report into.

Now open the saved file in Notepad. Start - Run - NOTEPAD
C:\JUNK\PSTAT.TXT

Scroll down the file, about 80% of the way to the end of the file and
you will find a head line:

ModuleName Load Addr Code Data Paged LinkDate

It is the information from this line to the end of the file that we
want to copy from this file and save as a separate file. Select the
block of text and copy it to the clipboard. Open a new notepad window
and paste the clipboard contents into it. Save this file under a
different name. I use PSTAT2.TXT and put it into the same C:\JUNK
folder.

Now launch Microsoft Excel and use File - Open to bring the PSTAT2.TXT
file into Excel. Excel will automatically parse the file into
columns. Once this is done use DATA - SORT to sort the entire
spreadsheet based on the value in Column B (Load Addr).

It is now a simple task to read down the addresses until you find the
highest value that is less than the address where the error occurred.
That module (name in column A) is the prime suspect for the cause of
your error.



Ron Martell
--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..
 
D

Daave

scott said:
Mark,
Thanks, here is what I found. Can you tell me any info:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 4/10/2008
Time: 10:20:39 PM
User: N/A
Computer: SCOTT
Description:
Error code 1000008e, parameter1 c0000005, parameter2 f64b71fc,
parameter3 b87a4f50, parameter4 00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 66 36 34 62 37 31 66 63 f64b71fc
0040: 2c 20 62 38 37 61 34 66 , b87a4f
0048: 35 30 2c 20 30 30 30 30 50, 0000
0050: 30 30 30 30 0000

Seems to be hardware-related. There is *a lot* of info to sift through
here:

http://www.eventid.net/display.asp?eventid=1003&eventno=1274&source=System&phase=1
 
G

Gerry

Scott

Background information on Stop Error message 0x8E
http://msdn2.microsoft.com/en-us/library/ms794023.aspx

0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
A kernel mode program generated an exception which the error handler
didn't catch. These are nearly always hardware compatibility issues
(which sometimes means a driver issue or a need for a BIOS upgrade).
Source: http://aumha.org/a/stop.htm

Does the problem arise during start up or does it occur later?

Are there any yellow question marks in Device Manager? Right click on
the My Computer icon on your Desktop and select Properties,
Hardware,Device Manager. If yes what is the Device Error code?

Try Start, Run, type "sigverif.exe" without quotes and hit OK. What
drivers are listed as unsigned? Disregard those which are not checked.

Remove any dust bunnies from inside the computer casing using an Air
Duster and check all fans are running.

Check the hard drive for bad sectors by running chkdsk /f /r

You need to be aware that running chkdsk can take hours

Faulty RAM. You might test your RAM memory
http://www.memtest.org/

http://www.elephantboycomputers.com/page2.html#Hardware_Tshoot

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
N

nass

scott said:
Mark,
Thanks, here is what I found. Can you tell me any info:

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 4/10/2008
Time: 10:20:39 PM
User: N/A
Computer: SCOTT
Description:
Error code 1000008e, parameter1 c0000005, parameter2 f64b71fc, parameter3
b87a4f50, parameter4 00000000.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 66 36 34 62 37 31 66 63 f64b71fc
0040: 2c 20 62 38 37 61 34 66 , b87a4f
0048: 35 30 2c 20 30 30 30 30 50, 0000
0050: 30 30 30 30 0000



Any hardware/software or updates installed recently?, please state all if
any in your next post.
You can use this driver verifier command:
verifier.exe click [OK]
First try to eliminate hardware, by going to Device manager and check by
expanding the Plus [+] to see all devices listed, if there is a
malfunctioning device or conflicting device it will show in Device manager.

This always refer to a bad Hardware/driver installed.
Try the Last good known Configuration to log into the system, then open
Device manager and see if there is any malfunctioning Devices or conflict in
IRQ, also look in the Event Viewer for error message and post them back in
your next post.
Bug Check 0x8E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
http://msdn2.microsoft.com/en-us/library/ms794023.aspx
You may receive a Stop error message on a blue screen when you start a
Microsoft Windows Server

http://support.microsoft.com/kb/893239
Open a run command and type in these commands to see if there is a conflict
in /among drivers :
pstat.exe click [OK]
dmpchck.exe click [OK]
What you get from running this commands?.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us

Try to use the Verifier.exe command to see which Drivers not Verified on
your system:
How to Use Driver Verifier to Troubleshoot Windows Drivers
http://support.microsoft.com/kb/244617/en-us

You may have a bad RAM try to test your RAM by running Memtest by
downloading this tool and unzip it and make a floppy or CD/DVD and run it on
Reboot.
http://www.memtest86.com/
You may need to reposition/reset the RAM sticks in their slots.
After that you could do a repair install, and then test.
http://www.michaelstevenstech.com/XPrepairinstall.htm

Use the command chkdsk /r with recovery console:
http://support.microsoft.com/kb/314058
http://support.microsoft.com/kb/326215
HTH.
nass
 
J

jim

i have typed in the PSTAT > C:\JUNK\PSTAT.TXT but i do not get a file
recorded, the cmd window comes up and text wisses through it but no file.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top