Looking for a "win XP crash analyzer" or something like that...

  • Thread starter Thread starter Christopher Grenness
  • Start date Start date
C

Christopher Grenness

I have a Win XP Pro SP1 computer that suddenly reboots, especially
when driving it hard making music with Logic, Reason and other music
software.
The reboots are dead sudden, it goes from the music editing screen to
the BIOS startup screen in a tenth of a second.
I have tried to reformat drive C (I have two HDD, C is the main system
disk) and reinstalled XP from scratch.
I have installed an extra fan - the BIOS now reports a CPU temp of 35
centigrade (95 F) when I run Logic 5.5 which I reckon is a good
working temp. It used to say 55-60 degrees C.
I have a Terratec EWS88 MT sound card, and I've disabled the onboard
soundcard via the BIOS/CMOS setup.
The PC is a Shuttle FN41 (small footprint) with an nVIDIA nforce2
motherboard, AMD Athlon XP-A 2500+ CPU (1833Mhz), 1 GB DDR SDRAM, 2x
80 GB Seagate HDDs.
I've downloaded and installed new drivers from Terratec.
I have just now turned off the "automatic reboot when crash occurs"
option in winXP, I hope that during the next crash it will tell me
something about what caused the crash.
However, I was wondering whether there are any utilities available
that could run in the background and when/if a crash occurs, it would
be able to give me an explanation on why it occured?
Windows sometimes tells me that it has registered that the computer
crashed and it wants to send a crash report to Microsoft, however the
computer is not online so I've declined every time. Could I do
something else with the crash report? Does it say anything that I
would understand, you think?

With regards,
Christopher
 
Greetings --

You should check your Event Logs to see if they can shed any light
on the matter, To do so, Right-click My Computer > Manage > Event
Viewer > System and Application. Record the specifics of any
red-flagged error messages and post the exact text back here.
Hopefully, one of us will be able to provide some insight.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
You should check your Event Logs to see if they can shed any light
on the matter, To do so, Right-click My Computer > Manage > Event
Viewer > System and Application. Record the specifics of any
red-flagged error messages and post the exact text back here.
Hopefully, one of us will be able to provide some insight.
Click to expand...


Ok, I've been away from the house for a couple of hours, and left the
computer on. The following apps were running:
Logic Platinum 5.5. (maximised, in front, playing a song loop)
Speedfan 4.09 (in tray, CPU temp has been around 34 C all the time)
Symantec AV 2003 (in tray, auto-protect enabled)

On the screen, the following error message was waiting for me:

**********

SERVICES AND CONTROLLER APP

Services and Controller app has encountered a problem and needs to
close. We are sorry for the inconvenience

If you were in the middle of something, the information you were
working on might be lost.

For more information on this error, click here.

**********

When clicking on the "click here" link, a new window opens:

ERROR SIGNATURE

szAppName: services.exe szAppVer: 5.1.2600.0 szModName:
rpcrt4.dll szModVer: 5.1.2600.1106 offset: 00004b8b

To view technical info about the error, click here.

....and "clicking here" tells me that two files would be included in an
error report, but I was a bit quick clicking ok so I wasn't able to
see for sure which files these were.
However by searching the HDD for files that had been changed in the
most likely time frame, I think these might have been the files:

appcompat.txt
manifest.txt
sevices.exe.hdmp
services.exe.hdmp

they've all got the same modification time and date, and I found them
under \docs and settings\[my user]\local settings\temp\WER6.tmp.dir00
This directory had the exact same modification time and date as the
files.

Finally, here's each file's content, hope this tells you something!

*******************
APPCOMPAT.TXT

<?xml version="1.0" encoding="UTF-16"?>
<DATABASE>
<EXE NAME="SYSTEM INFO" FILTER="GRABMI_FILTER_SYSTEM">
<MATCHING_FILE NAME="advapi32.dll" SIZE="558080"
CHECKSUM="0x7B6E5DDA" BIN_FILE_VERSION="5.1.2600.1106"
BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106"
FILE_DESCRIPTION="Advanced Windows 32 Base API"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="advapi32.dll" INTERNAL_NAME="advapi32.dll"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x9315E"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.1106"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="08/29/2002
10:40:40" UPTO_LINK_DATE="08/29/2002 10:40:40" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="gdi32.dll" SIZE="250368"
CHECKSUM="0x29850525" BIN_FILE_VERSION="5.1.2600.1106"
BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106"
FILE_DESCRIPTION="GDI Client DLL" COMPANY_NAME="Microsoft Corporation"
PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="gdi32" INTERNAL_NAME="gdi32" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"
MODULE_TYPE="WIN32" PE_CHECKSUM="0x4285C" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="5.1.2600.1106"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="08/29/2002
10:40:39" UPTO_LINK_DATE="08/29/2002 10:40:39" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="kernel32.dll" SIZE="930304"
CHECKSUM="0xCBCCF8A9" BIN_FILE_VERSION="5.1.2600.1106"
BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106"
FILE_DESCRIPTION="Windows NT BASE API Client DLL"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xE7ED3"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.1106"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="08/29/2002
10:40:40" UPTO_LINK_DATE="08/29/2002 10:40:40" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="ntdll.dll" SIZE="668672"
CHECKSUM="0x2149BD76" BIN_FILE_VERSION="5.1.2600.1106"
BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106"
FILE_DESCRIPTION="NT Layer DLL" COMPANY_NAME="Microsoft Corporation"
PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="ntdll.dll" INTERNAL_NAME="ntdll.dll"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xA92F6"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.1106"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="08/29/2002
10:40:40" UPTO_LINK_DATE="08/29/2002 10:40:40" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="ole32.dll" SIZE="1169920"
CHECKSUM="0x3E53EB37" BIN_FILE_VERSION="5.1.2600.1106"
BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106"
FILE_DESCRIPTION="Microsoft OLE for Windows" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="OLE32.DLL" INTERNAL_NAME="OLE32.DLL"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x121E6B"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.1106"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="08/29/2002
10:40:34" UPTO_LINK_DATE="08/29/2002 10:40:34" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="oleaut32.dll" SIZE="569344"
CHECKSUM="0x276CFFB1" BIN_FILE_VERSION="3.50.5016.0"
BIN_PRODUCT_VERSION="3.50.5016.0" PRODUCT_VERSION="3.50.5016.0"
FILE_DESCRIPTION="Microsoft OLE 3.50 for Windows NT(TM) and Windows
95(TM) Operating Systems" COMPANY_NAME="Microsoft Corporation"
PRODUCT_NAME="Microsoft OLE 3.50 for Windows NT(TM) and Windows
95(TM) Operating Systems" FILE_VERSION="3.50.5016.0"
INTERNAL_NAME="OLEAUT32.DLL" LEGAL_COPYRIGHT="Copyright © Microsoft
Corp. 1993-1999." VERFILEDATEHI="0x0" VERFILEDATELO="0x0"
VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x999AF" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="3.50.5016.0"
UPTO_BIN_PRODUCT_VERSION="3.50.5016.0" LINK_DATE="08/29/2002 10:40:34"
UPTO_LINK_DATE="08/29/2002 10:40:34" VER_LANGUAGE="English (United
States) [0x409]" />
<MATCHING_FILE NAME="shell32.dll" SIZE="8336384"
CHECKSUM="0x1220BF03" BIN_FILE_VERSION="6.0.2800.1106"
BIN_PRODUCT_VERSION="6.0.2800.1106" PRODUCT_VERSION="6.00.2800.1106"
FILE_DESCRIPTION="Windows Shell Common Dll" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2800.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="SHELL32.DLL" INTERNAL_NAME="SHELL32"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x7F8609"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2800.1106"
UPTO_BIN_PRODUCT_VERSION="6.0.2800.1106" LINK_DATE="08/29/2002
10:40:35" UPTO_LINK_DATE="08/29/2002 10:40:35" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="user32.dll" SIZE="560128"
CHECKSUM="0x200CFDED" BIN_FILE_VERSION="5.1.2600.1106"
BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106"
FILE_DESCRIPTION="Windows XP USER API Client DLL"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="user32" INTERNAL_NAME="user32" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"
MODULE_TYPE="WIN32" PE_CHECKSUM="0x936BC" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="5.1.2600.1106"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="08/29/2002
10:40:40" UPTO_LINK_DATE="08/29/2002 10:40:40" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="wininet.dll" SIZE="599040"
CHECKSUM="0xBEF20B21" BIN_FILE_VERSION="6.0.2800.1106"
BIN_PRODUCT_VERSION="6.0.2800.1106" PRODUCT_VERSION="6.00.2800.1106"
FILE_DESCRIPTION="Internet Extensions for Win32"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2800.1106 (xpsp1.020828-1920)"
ORIGINAL_FILENAME="wininet.dll" INTERNAL_NAME="wininet.dll"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x96179"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2800.1106"
UPTO_BIN_PRODUCT_VERSION="6.0.2800.1106" LINK_DATE="08/29/2002
10:40:28" UPTO_LINK_DATE="08/29/2002 10:40:28" VER_LANGUAGE="English
(United States) [0x409]" />
<MATCHING_FILE NAME="winsock.dll" SIZE="2864"
CHECKSUM="0x73AE8088" BIN_FILE_VERSION="3.10.0.103"
BIN_PRODUCT_VERSION="3.10.0.103" PRODUCT_VERSION="3.10"
FILE_DESCRIPTION="Windows Socket 16-Bit DLL" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows(TM) Operating System"
FILE_VERSION="3.10" ORIGINAL_FILENAME="WINSOCK.DLL"
INTERNAL_NAME="WINSOCK" LEGAL_COPYRIGHT="Copyright © Microsoft Corp.
1981-1996" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10001"
VERFILETYPE="0x2" MODULE_TYPE="WIN16" S16BIT_DESCRIPTION="BSD Socket
API for Windows" S16BIT_MODULE_NAME="WINSOCK"
UPTO_BIN_FILE_VERSION="3.10.0.103"
UPTO_BIN_PRODUCT_VERSION="3.10.0.103" VER_LANGUAGE="English (United
States) [0x409]" />
</EXE>
</DATABASE>

*******************

MANIFEST.TXT


Server=watson.microsoft.com
UI LCID=1033
Flags=99090
Brand=WINDOWS
TitleName=Services and Controller app
DigPidRegPath=HKLM\Software\Microsoft\Windows
NT\CurrentVersion\DigitalProductId
RegSubPath=Microsoft\PCHealth\ErrorReporting\DW
ErrorText=If you were in the middle of something, the information you
were working on might be lost.
Stage1URL=
Stage1URL=/StageOne/services_exe/5_1_2600_0/rpcrt4_dll/5_1_2600_1106/00004b8b.htm
Stage2URL=
Stage2URL=/dw/stagetwo.asp?szAppName=services.exe&szAppVer=5.1.2600.0&szModName=rpcrt4.dll&szModVer=5.1.2600.1106&offset=00004b8b
DataFiles=C:\DOCUME~1\Tobias\LOCALS~1\Temp\WER6.tmp.dir00\services.exe.mdmp|C:\DOCUME~1\Tobias\LOCALS~1\Temp\WER6.tmp.dir00\appcompat.txt
Heap=C:\DOCUME~1\Tobias\LOCALS~1\Temp\WER6.tmp.dir00\services.exe.hdmp
ErrorSubPath=services.exe\5.1.2600.0\rpcrt4.dll\5.1.2600.1106\00004b8b

*******************

The last two files can be downloaded from the following addresses:

http://grenness.com/sevices.exe.hdmp
http://grenness.com/services.exe.hdmp

(hope I'm not doing something stupid publishing these files, if so
please let me know! I have no idea what they contain...)

All the files had the date and time Oct. 13. 2003 20:25

At approximately that time I find the following events in the event
log:

APPLICATION EVENT

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 13.10.2003
Time: 20:25:02
User: N/A
Computer: DRMINUS
Description:
Faulting application services.exe, version 5.1.2600.0, faulting module
rpcrt4.dll, version 5.1.2600.1106, fault address 0x00004b8b.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 65 72 ure ser
0018: 76 69 63 65 73 2e 65 78 vices.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 30 20 69 6e 20 00.0 in
0030: 72 70 63 72 74 34 2e 64 rpcrt4.d
0038: 6c 6c 20 35 2e 31 2e 32 ll 5.1.2
0040: 36 30 30 2e 31 31 30 36 600.1106
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 30 34 et 00004
0058: 62 38 62 b8b


SYSTEM EVENT

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 13.10.2003
Time: 20:28:57
User: DRMINUS\Tobias
Computer: DRMINUS
Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register
with DCOM within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


So even though the machine seemed to crash at 20:25, the system event
occured almost four minutes later.

After that there's no events for two hours, when I rebooted the
machine.

Phew!

This might just be the longest post in this newsgroup tonight, I'm
sorry if I'm eating bandwith here.

As I said further up: If anyone can get something out of all this and
are able to explain why these crashes occur, I'd be very thankful!

Regards,

Christopher


PS. Please don't quote the whole message if replying...
 
When I woke up this morning (no this is not the start of a blues
song...) a bluescreen was waiting for me.

Last night I started Norton SpeedDisk 2003 and then I went to bed.

Now the bluescreen says (cutting to the tech stuff) :

*** STOP: 0X0000008E (0X0000005, 0XED227181, 0XECE1D978, 0X00000000)

*** SYMEVENT.SYS - Address ED227181 base at ED21E000, Datestamp
3d51c98f

Any clues?

Thanks,
Christopher
 
*** STOP: 0X0000008E (0X0000005, 0XED227181, 0XECE1D978, 0X00000000)

*** SYMEVENT.SYS - Address ED227181 base at ED21E000, Datestamp
3d51c98f
Click to expand...

After rebooting, I get the message "The system has recovered from a
serious error", and here are the details:

Error signature
BCCode: 1000008e BCP1: C0000005 BCP2: ED227181 BCP3: ECE1D978
BCP4: 00000000 OSVer: 5_1_2600 SP: 1_0 Product: 256_1

Two files are "included" according to the error message:
http://grenness.com/Mini101403-01.dmp
http://grenness.com/sysdata.xml

Please help! ;-)


Thanks,
Christopher
 
Hi Christopher,

Windows XP Patch: System Recovery Error Appears After Every Reboot:
http://www.microsoft.com/downloads/release.asp?releaseid=36920

You Receive a "System Has Recovered from a Serious Error" Message After
Every Restart
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q317277

Manual workarounds if SP1 is not installed: Use one of the three options.

Right Click the My Computer Icon/Properties/Advanced/
Performance/Settings/Advanced/Change. Set Page File to 0, ok your way out
and reboot. Then follow the same procedure and reset the Page File to
System Managed File.

Right Click the My Computer Icon/Properties/Advanced/
Performance/Advanced/Virtual Memory/Change/No Page File. Reboot. Then
delete C:\Pagefil.Sys then revert the page file setting.

Right Click the My Computer Icon/Properties/Advanced/
Performance/Advanced/Virtual Memory/Change. Set the swap file size to zero,
reboot. Re-set to System Managed, reboot. Reset the Custom setting,
reboot.

Report Error's to Microsoft automatically

Start/Run/gpedit.msc/Computer Configuration/Administrative
Templates/System/Error Reporting. Right click Report Errors/Properties.
Check off Enable and then check off, Do not display links to any MS provided
more information web sites. Apply, ok.

Right Click the My Computer Icon/Properties/Advanced/Error
Reporting/Disable...

Or....go to:

Start/Run/Regedit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\
ErrorReporting
Value: DoReport, 1 = Send Reports, 0 = Don't Send
 
Windows XP Patch: System Recovery Error Appears After Every Reboot:
http://www.microsoft.com/downloads/release.asp?releaseid=36920

You Receive a "System Has Recovered from a Serious Error" Message After
Every Restart
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q317277
Click to expand...

Kelly,

the problem isn't the error messages themselves, the problem is the
sudden reboots that keep occuring even though I've clean installed XP
(even did a complete, "slow" NTFS format before installing XP) - see
my previous posts which include my PC hardware and software specs and
the error reports / event logs.

Sending error reports to MS is not an option as the computer is not
hooked up to the internet.

Do you have any clues to what causes these crashes?

Thanks,

Christopher
 
You should check your Event Logs to see if they can shed any light
on the matter, To do so, Right-click My Computer > Manage > Event
Viewer > System and Application. Record the specifics of any
red-flagged error messages and post the exact text back here.
Hopefully, one of us will be able to provide some insight.
Click to expand...

Bruce,

did you get a chance to look at the error messages?
I really have no clue what causes the crashes.

Thanks,
Christopher
 
Back
Top