Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Sudden reboot from 'serious error'


  • Please log in to reply
7 replies to this topic

#1 I am the Walrus

I am the Walrus

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:07 PM

Posted 15 June 2009 - 11:18 AM

I don't know why all of a sudden but my desktop will suddenly reboot then direct me to a microsoft help page on how to solve/remedy problem. When I checked the system log the only errors stated -

" DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service PPCtlPriv with arguments "" in order to run the server:
{F974178A-A284-440A-BEFC-5B0D11BCDB68}"

the error report sent to MS had the data sent
C:\DOCUME~1\Vincent\LOCALS~1\Temp\WER51b9.dir00\Mini061509-03.dmp
C:\DOCUME~1\Vincent\LOCALS~1\Temp\WER51b9.dir00\sysdata.xml

I reset my restore log on the MS suggestion that it was full and unable to create new restore points.

Does any of this make sense? I would gratefully appreciate your help.

BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:07 PM

Posted 15 June 2009 - 05:39 PM

Try running through the steps given here:

How to receive help diagnosing Blue Screens and Windows crashes
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 I am the Walrus

I am the Walrus
  • Topic Starter

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:07 PM

Posted 19 June 2009 - 02:17 PM

First, the link for malware online sources does not work. I did use two I found and removed items. Something I didn't mention before was that when I initially tried to do a disk check i would get a unable to disk check pop up.

Computer Specifications
CPU: Intel® Celeron® Processor 2.20GHz (w/128KB L2 cache & 400MHz FSB)
Operating System: Genuine Microsoft® Windows® XP Home Edition
Chipset: Intel® 845GL chipset
Memory: 256MB DDR (PC2100)
Hard Drive: 40GB HDD
Optical Drive: 40 × 12x40x Max. CD-RW Drive; 16x Max. DVD Drive; 3.5" 1.44MB FDD
Video: Intel® Extreme Graphics 3D (integrated)
Sound: AC '97 Audio
Network: 10/100Mbps built-in Ethernet
Modem: 56K ITU v.92-ready Fax/Modem
Peripherals: Standard Multimedia Keyboard, 2-Button Wheel Mouse, Standard Speakers
Ports/Other: 6 USB 2.0 ports (2 on front), 1 Serial, 1 Parallel, 2 PS/2, Microphone-In & Head Phone jack on front, Audio-In & Out, 3 PCI slots (2 available)
Dimensions: 7.25"W x 14.125"H x 16"D

The dump file (latest date wise) follows.

Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini061509-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp3_gdr.090206-1234
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Mon Jun 15 08:33:18.781 2009 (GMT-7)
System Uptime: 0 days 0:30:19.399
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {e1a43000, 2, 0, b8564e85}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: e1a43000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: b8564e85, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: e1a43000

CURRENT_IRQL: 2

FAULTING_IP:
+16
b8564e85 f3a5 rep movs dword ptr es:[edi],dword ptr [esi]

CUSTOMER_CRASH_COUNT: 3

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from b8566a21 to b8564e85

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
f78dad4c b8566a21 804e26a8 89f9d240 805622fc 0xb8564e85
f78dad74 804e426b 89f9d240 00000000 8a3023c8 0xb8566a21
f78dadac 8057aeff 89f9d240 00000000 00000000 nt!ExpWorkerThread+0x100
f78daddc 804f88ea 804e4196 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

SYMBOL_NAME: ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME: Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAILURE_BUCKET_ID: 0xD1_ANALYSIS_INCONCLUSIVE

BUCKET_ID: 0xD1_ANALYSIS_INCONCLUSIVE

Followup: MachineOwner
---------

Thank you, GOO GOO A JOOB

#4 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:07 PM

Posted 19 June 2009 - 04:55 PM

Check your devices in Device Manager (Start > Run > type "devmgmt.msc" (without the quotes) and press Enter). Look for any "!", "?" or "X" symbols.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 I am the Walrus

I am the Walrus
  • Topic Starter

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:07 PM

Posted 20 June 2009 - 01:10 PM

It shows a "X" Intel Graphics controller (nVidia is fine)
and a "!" WAN mini port (ATW) #2
everything else seemed normal.

#6 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:07 PM

Posted 20 June 2009 - 05:40 PM

You should try reinstalling the drivers for those devices.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#7 I am the Walrus

I am the Walrus
  • Topic Starter

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:08:07 PM

Posted 21 June 2009 - 07:07 PM

That seemed to fix some issue however now I am constantly getting an application error re: explorer.exe and CCUpdate.exe" unable to read etc., click OK to terminate program", which then shuts everything down????????

#8 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:07 PM

Posted 22 June 2009 - 03:18 AM

I believe that CCUpdate.exe is related to Norton. So if you have any Norton software you should reinstall it.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users