Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Slow Start...fast Crash


  • Please log in to reply
10 replies to this topic

#1 JXBlack

JXBlack

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:07:10 PM

Posted 16 September 2007 - 01:47 AM

I have 3 problems but I don't know if they are related or not.

#1. For the last 10 days I have had 1 crash per day. Prior to that, about 2-3 crashes per week, over the last few months.
I have looked at the event viewer and notice that they mention either system error or " W32Time'. Each crash is followed by an immediate reboot.
On one occasion I followed the trail of destruction and got the following cryptic notations:

C:\*.*\Temp\WERb092.dir\mini091007.dmp
C:\*.*\Temp\WERb092.dir00\sysdata.xml

#2 For the last week my computer has taken 77 seconds to go thru the reboot prosess. Prior to that it would only take 12-15 seconds. Is their anyway of determining what the computer is doing for that extra time?

#3 For the last month my reboots usually (not always) shows a little notation above the clock in the lower righthand corner. It says that files are waiting to be written to my CD-Rom burner. No such files exist.

Thanks

BC AdBot (Login to Remove)

 


#2 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:05:10 AM

Posted 16 September 2007 - 04:31 AM

Could you Copy & Paste the last four error messages that are in the Event Viewer. If you right click on the error message and select properties you will find the infomation related to the crash. That is the information we need.
"2007 & 2008 Windows Shell/User Award"

#3 Sagacity83

Sagacity83

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Charlotte, N.C.
  • Local time:07:10 AM

Posted 16 September 2007 - 01:51 PM

And another thing to think about is the programs you installed on your computer around the time you started having these crashes.
Gateway GM5076e, Pentium D CPU 3.20GHZ, 2.1GB of RAM, 465GB SATA HDD, NVIDIA GeForce 6200 TurboCache™
256MB, Windows XP Media Center SP2, Mozilla Firefox, McAfee Security Center, AdAwareSE, F-Secure Blacklight, A-squared Free.

#4 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:07:10 PM

Posted 18 September 2007 - 07:37 AM

Thank you for your reply. Please forgive my late response.....I have been away from my computer.

My machine crashed again and here are the last 4 errors recorded.

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/18/2007
Time: 8:14:08 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Error code 100000d1, parameter1 00021000, parameter2 00000002, parameter3 00000000, parameter4 b923fec9.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 32 31 30 30 30 2c 20 021000,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 39 32 33 00, b923
0050: 66 65 63 39 fec9


Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 9/18/2007
Time: 7:40:36 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 59 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 9/18/2007
Time: 7:40:36 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 60 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 9/18/2007
Time: 7:10:35 PM
User: N/A
Computer: USERS-0CDAEA86A
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 29 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Thanks again for your assistance.

#5 WinCrazy

WinCrazy

  • Members
  • 265 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ambler, PA USA
  • Local time:06:10 AM

Posted 18 September 2007 - 12:45 PM

Hi JXBlack.
____________________________
you have files waiting to be written to CD

Every time i start WinXP i get a balloon from the task bar with message 'you have files waiting to be written to CD'. i assume this is something to do with backup. How do I stop this damn balloon pop-up???

Any help will be most appreciated.
_____________________________

Click inside the balloon and click "delete temporary files" in the lefthand frame of the resulting explorer window.
_____________________________

Edited by WinCrazy, 18 September 2007 - 12:50 PM.


#6 WinCrazy

WinCrazy

  • Members
  • 265 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ambler, PA USA
  • Local time:06:10 AM

Posted 18 September 2007 - 12:59 PM

"You may have a corrupt driver. How do you tell? You need to be a Microsoft Tech who has been trained to read dumps or open a ticket with them and they can read it for you. Even then [there are] no guarantees. I have been in this situation before and the best advise is to check the most resently added drivers and replace them... Its a lot of work and [I can make] no promises..."

#7 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:05:10 AM

Posted 19 September 2007 - 05:35 AM

I will look it over and get back with you as soon as possible. It appears to be a time server issue though.
"2007 & 2008 Windows Shell/User Award"

#8 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:07:10 PM

Posted 19 September 2007 - 11:48 AM

Thanks for your concern.

I had another crash today that looks a little different.

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/20/2007
Time: 12:43:08 AM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Error code 100000d1, parameter1 00021000, parameter2 00000002, parameter3 00000000, parameter4 baaf8ec9.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 32 31 30 30 30 2c 20 021000,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 61 61 66 00, baaf
0050: 38 65 63 39 8ec9

#9 JXBlack

JXBlack
  • Topic Starter

  • Members
  • 114 posts
  • OFFLINE
  •  
  • Local time:07:10 PM

Posted 19 September 2007 - 06:58 PM

Sorry to keep pestering you but I had 2 crashes this morning and I thought I might as well let you see them.
I promise this is the last one untill I hear from you.


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/20/2007
Time: 7:14:34 AM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Error code 100000d1, parameter1 b8ade000, parameter2 00000002, parameter3 00000000, parameter4 b7d8bec9.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 62 38 eters b8
0030: 61 64 65 30 30 30 2c 20 ade000,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 37 64 38 00, b7d8
0050: 62 65 63 39 bec9

_____________________________________________________________________________________________________________
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 9/20/2007
Time: 7:46:28 AM
User: N/A
Computer: USERS-0CDAEA86A
Description:
Error code 100000d1, parameter1 b8540000, parameter2 00000002, parameter3 00000000, parameter4 b777cec9.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 62 38 eters b8
0030: 35 34 30 30 30 30 2c 20 540000,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 37 37 37 00, b777
0050: 63 65 63 39 cec9

________________________________________________________________________________________________________________________

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 9/20/2007
Time: 7:46:08 AM
User: N/A
Computer: USERS-0CDAEA86A
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


_____________________________________________________________________________________________________________________

#10 david28

david28

    Forum Member


  • Banned
  • 1,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:40 PM

Posted 20 September 2007 - 03:40 AM

This soudns like some sort of virus (if that a number of viruses) I no people say "it sounds like a virus" but my freind had this problem and we got a couple of viruses removed by the local computer store and the problem was fixed. So you might want to try that. Or just do a virus scan with the latest definitions.

#11 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:10 AM

Posted 20 September 2007 - 06:39 PM

Here's a link to the error message: http://aumha.org/a/stop.php#0xd1
Use this link to find your memory dumps and run an analysis on them - post it here for us to have a look at ( http://www.bleepingcomputer.com/forums/top...tml#entry409491 )

While you're waiting, here's the most common causes for this error:
1) Bad/faulty driver (fix is to remove bad drivers and replace with new, good one's)
2) Bad/faulty memory (test with this free utility: http://www.memtest86.com/ )
3) Corrupted pagefile (reset it by following Item 2 in this link: http://www.bleepingcomputer.com/forums/ind...st&p=389845 )
4) Malware (the most likely explanation IME) - run several free, online scans to rule it out. Here's 2 that I like:
http://safety.live.com
http://housecall.trendmicro.com

Finally, as the second parameter of the error points to 00000002 (it's the IRQL of the device that had the error)- it's likely that it's a device driver that's corrupting another device on the motherboard (that has that IRQL) - so the dump report may not give us a complete answer, but it should at least point us in the right direction.

Edited by usasma, 20 September 2007 - 06:42 PM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users