Gerry,
Here are the Application and System Errors Report. There are about 60
warnings
involving MsiInstaller under Applications which I didn't send because I was
afraid a single post would be too
long. There are four Warnings under System so I've tacked those onto the
end. If you
want the Application Warnings I'll post them.
APPLICATION ERRORS
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 12/12/2008
Time: 4:38:52 AM
User: N/A
Computer: ALSEMACHINE
Description:
Faulting application explorer.exe, version 6.0.2900.2180, faulting module
msvbvm60.dll,
version 6.0.96.90, fault address 0x00015d8a.
For more information, see Help and
Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 65 78 70 ure exp
0018: 6c 6f 72 65 72 2e 65 78 lorer.ex
0020: 65 20 36 2e 30 2e 32 39 e 6.0.29
0028: 30 30 2e 32 31 38 30 20 00.2180
0030: 69 6e 20 6d 73 76 62 76 in msvbv
0038: 6d 36 30 2e 64 6c 6c 20 m60.dll
0040: 36 2e 30 2e 39 36 2e 39 6.0.96.9
0048: 30 20 61 74 20 6f 66 66 0 at off
0050: 73 65 74 20 30 30 30 31 set 0001
0058: 35 64 38 61 0d 0a 5d8a..
Event Type: Error
Event Source: MPSampleSubmission
Event Category: None
Event ID: 5000
Date: 12/12/2008
Time: 2:02:21 AM
User: N/A
Computer: ALSEMACHINE
Description:
EventType mptelemetry, P1 80244022, P2 endsearch, P3 search, P4 1.1.1593.0,
P5
mpsigdwn.dll, P6 1.1.1593.0, P7 windows defender, P8 NIL, P9 NIL, P10 NIL.
For
more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 6d 00 70 00 74 00 65 00 m.p.t.e.
0008: 6c 00 65 00 6d 00 65 00 l.e.m.e.
0010: 74 00 72 00 79 00 2c 00 t.r.y.,.
0018: 20 00 38 00 30 00 32 00 .8.0.2.
0020: 34 00 34 00 30 00 32 00 4.4.0.2.
0028: 32 00 2c 00 20 00 65 00 2.,. .e.
0030: 6e 00 64 00 73 00 65 00 n.d.s.e.
0038: 61 00 72 00 63 00 68 00 a.r.c.h.
0040: 2c 00 20 00 73 00 65 00 ,. .s.e.
0048: 61 00 72 00 63 00 68 00 a.r.c.h.
0050: 2c 00 20 00 31 00 2e 00 ,. .1...
0058: 31 00 2e 00 31 00 35 00 1...1.5.
0060: 39 00 33 00 2e 00 30 00 9.3...0.
0068: 2c 00 20 00 6d 00 70 00 ,. .m.p.
0070: 73 00 69 00 67 00 64 00 s.i.g.d.
0078: 77 00 6e 00 2e 00 64 00 w.n...d.
0080: 6c 00 6c 00 2c 00 20 00 l.l.,. .
0088: 31 00 2e 00 31 00 2e 00 1...1...
0090: 31 00 35 00 39 00 33 00 1.5.9.3.
0098: 2e 00 30 00 2c 00 20 00 ..0.,. .
00a0: 77 00 69 00 6e 00 64 00 w.i.n.d.
00a8: 6f 00 77 00 73 00 20 00 o.w.s. .
00b0: 64 00 65 00 66 00 65 00 d.e.f.e.
00b8: 6e 00 64 00 65 00 72 00 n.d.e.r.
00c0: 2c 00 20 00 4e 00 49 00 ,. .N.I.
00c8: 4c 00 2c 00 20 00 4e 00 L.,. .N.
00d0: 49 00 4c 00 20 00 4e 00 I.L. .N.
00d8: 49 00 4c 00 0d 00 0a 00 I.L.....
SYSTEM ERRORS
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/12/2008
Time: 12:02:59 PM
User: N/A
Computer: ALSEMACHINE
Description:
The following boot-start or system-start driver(s) failed to load:
szkg
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/12/2008
Time: 9:49:09 AM
User: N/A
Computer: ALSEMACHINE
Description:
The following boot-start or system-start driver(s) failed to load:
szkg
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/12/2008
Time: 9:35:17 AM
User: N/A
Computer: ALSEMACHINE
Description:
The following boot-start or system-start driver(s) failed to load:
szkg
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/12/2008
Time: 8:00:46 AM
User: N/A
Computer: ALSEMACHINE
Description:
The following boot-start or system-start driver(s) failed to load:
szkg
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/12/2008
Time: 7:31:36 AM
User: N/A
Computer: ALSEMACHINE
Description:
The following boot-start or system-start driver(s) failed to load:
szkg
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 12/12/2008
Time: 11:33:48 AM
User: N/A
Computer: ALSEMACHINE
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You
can use information about how these programs operate to choose whether to
allow them
to run or remove them from your computer. Allow changes only if you trust
the program
or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {503472D8-B37E-4282-8F79-F91F7B2A1F73}
User: ALSEMACHINE\Owner
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found:
runkey:HKCU@S-1-5-21-3386413868-485311502-1189716786-1003\Software\Microsoft\
Windows\CurrentVersion\Run\\swg
Alert Type: Unclassified software
Detection Type:
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 20
Date: 12/12/2008
Time: 11:21:17 AM
User: NT AUTHORITY\SYSTEM
Computer: ALSEMACHINE
Description:
Printer Driver HP PSC 1600 series for Windows NT x86 Version-3 was added or
updated. Files:- hpz2ku12.dll, hpzpm312.dll, hpop1612.dat, hpfmom12.hlp,
hpzimc12.dll, hpzstw12.exe, hpzslk12.dll, hpzr3212.dll, hpzrm312.dll,
hpzcon12.dll,
hpzcfg12.exe, hpzeng12.exe, hpzflt12.dll, hpzime12.dll, hpzjui12.dll,
hpzpre12.exe,
hpzres12.dll, hpzstc12.exe, hpztbi12.dll, hpztbu12.exe, hpztbx12.exe,
hpzlnt12.dll,
hpzsnt12.dll, hpzcoi12.dll, hpzvip12.dll, hpzims12.dll, hpzpcl12.dll.
For more
information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: MRxSmb
Event Category: None
Event ID: 3019
Date: 12/12/2008
Time: 11:01:15 AM
User: N/A
Computer: ALSEMACHINE
Description:
The redirector failed to determine the connection type.
For more information, see
Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 cb 0b 00 80 ....Ë..€
0010: 00 00 00 00 84 01 00 c0 ....„..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 20
Date: 12/12/2008
Time: 4:35:11 AM
User: NT AUTHORITY\SYSTEM
Computer: ALSEMACHINE
Description:
Printer Driver HP PSC 1600 series for Windows NT x86 Version-3 was added or
updated. Files:- hpz2ku12.dll, hpzpm312.dll, hpop1612.dat, hpfmom12.hlp,
hpzimc12.dll, hpzstw12.exe, hpzslk12.dll, hpzr3212.dll, hpzrm312.dll,
hpzcon12.dll,
hpzcfg12.exe, hpzeng12.exe, hpzflt12.dll, hpzime12.dll, hpzjui12.dll,
hpzpre12.exe,
hpzres12.dll, hpzstc12.exe, hpztbi12.dll, hpztbu12.exe, hpztbx12.exe,
hpzlnt12.dll,
hpzsnt12.dll, hpzcoi12.dll, hpzvip12.dll, hpzims12.dll, hpzpcl12.dll.
Gerry said:
Aldago
Leave UPH installed.
Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.
You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us
A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
aldago said:
Gerry,
I downloaded the UPHC software and it did something - but I don't
know what. I no longer get the BSOD but perhaps that's because the
machine won't shutdown. When I shut down it hangs for a long time at
the "logging off" screen. It will eventually get to the "Windows is
shutting down" screen where it stays and I finally have to use the
power button to shut it down. Also, bootup takes an inordinately long
time. I could remove the Hive Cleaner and see if I get the BSOD again
but I don't know that it will help.
aldago said:
Gerry,
Forgot to mention that I removed Stopzilla from my computer some
time ago including registry items.
aldago
:
Gerry, sorry for the miscommunication. I did reply and it must have
gotten screwed up somehow. What I replied to you was:
I neglected to answer all the questions in my last post. In
particular, Gerry asked about the make and model of the computer
I'm using. I did list that info at the bottom of my original post
but here it is again:
Emachine T3506
Total Physical Memory: 1.5Gb
Windows XP Home SP2
3.2GHz Intel Celeron
120 Gb Hard Drive
As for Windows CDs I do not have an original for this machine.
I did make a bootable recovery disk using Bart's PE and the I 386
file from the computer. I do have disks for Windows XP Pro.
Ichecked the Device Manager and all looks normal. I had read where
this bsod had occurred with some malware comprimised machines so
just to cover all bets I ran HijackThis and submitted the log file
for analysis. The results indicated a couple of suspicious files
but nothing glaring. I also found that a heck of a lot of the
people who had this IRQ BSOD had emachines. Thanks for the other
info. I will download and run that software and I'll post back here
again.
:
aldago
http://snipurl.com/7qbeo [216_239_59_132]
You never responded to my last post?
Download and install the User Profile Hive Cleanup Service
Download details: User Profile Hive Cleanup Service
http://snipurl.com/5b61
UPHClean v1.5e readme.txt
http://snipurl.com/ko8m
This may resolve the Warning message without the need to configure
services.
What is the status of Stopzilla on your computer?
Is this a possibility?
http://support.microsoft.com/kb/311806
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
aldago wrote:
The original post is "IRQ BSOD" posted 12/5/2008
Since that post, I ran pc diagnostics from Hiren's Boot Disk and
came up with "failed system stress" test. Don't know what that
means. Can anyone help with that??
I also get popups on boot:
The system has recovered from a serious error.
The following files will be included in the error report:
C:\DOCUME~1\Owner\LOCALS~1\Temp\WER616a.dir00\Mini120908-03.dmp
C:\DOCUME~1\Owner\LOCALS~1\Temp\WER616a.dir00\sysdata.xml
Error Signature:
BCCode : a BCP1 : 000000B0 BCP2 : 00000002 BCP3 :
00000000 BCP4 : 804EE061 OSVer : 5_1_2600 SP : 2_0
Product : 768_1
Registry Change: KernalFaultCheck
Old Data: %systemroot%\system32\dumprep 0 -k
Don't know what that means either. But I put it out in case some
MS System guys monitor these posts and can explain it. Also the
machine doesn't boot or shutdown properly. Very very slow. But,
once it's up it runs faster than ever - unless it freezes up. I
have other computers to use but this problem is a bug and I hate
to let it go. Anyone think of any tests I might run? I can run
diagnostics from a boot disk (UBCD, UBCD for Windows, etc.)
rather than from Windows.
