Solved Big probs with Boot, many errors,hard disk and so on!

rundwald · Nov 19, 2011

Long OP Please bear with me!

A few weeks back my computer started having problems. The system was slow in starting up and failed a few minutes after. Light on base of mouse would die and monitor would switch to power saving. The light of the front switch on my Inspiron 560 remained steady. Switching the machine off was nigh impossible meaning I had to switch off at the mains wall switch.

To some extent things improved following a relative's intervention: he refreshed the BIOS, I believe.

After about a week problems returned as before and with a plethora of errors

Code:

Log Name: System
Source: Service Control Manager
Date: 14/11/2011 13:09:48
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:09:48.210060900Z" />
<EventRecordID>37370</EventRecordID>
<Correlation />
<Execution ProcessID="412" ThreadID="544" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Network List Service</Data>
<Data Name="param2">Network Location Awareness</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>
 
======================================================================
 
 
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 14/11/2011 13:09:47
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server:
{A47979D2-C419-11D9-A5B4-001185AD2B89}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:09:47.000000000Z" />
<EventRecordID>37363</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1068</Data>
<Data Name="param2">netprofm</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{A47979D2-C419-11D9-A5B4-001185AD2B89}</Data>
</EventData>
</Event>
 
====================================================================
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 14/11/2011 13:09:47
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:09:47.000000000Z" />
<EventRecordID>37365</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1084</Data>
<Data Name="param2">WSearch</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{9E175B6D-F52A-11D8-B9A5-505054503030}</Data>
</EventData>
</Event>
 
====================================================================
 
Log Name: System
Source: Service Control Manager
Date: 14/11/2011 13:09:30
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: 
A device attached to the system is not functioning.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:09:30.831630400Z" />
<EventRecordID>37352</EventRecordID>
<Correlation />
<Execution ProcessID="412" ThreadID="416" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">SMB MiniRedirector Wrapper and Engine</Data>
<Data Name="param2">Redirected Buffering Sub Sysytem</Data>
<Data Name="param3">%%31</Data>
</EventData>
</Event>
 
===================================================================================
 
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 14/11/2011 13:09:30
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: GORDON-PC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0xfffff28007c7e880, 0x0000000000000002, 0x0000000000000000, 0xfffff8000228dd94). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: .
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:09:30.000000000Z" />
<EventRecordID>37334</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>GORDON-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x0000000a (0xfffff28007c7e880, 0x0000000000000002, 0x0000000000000000, 0xfffff8000228dd94)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">
</Data>
</EventData>
</Event>
 
==============================================================================================
 
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 14/11/2011 13:09:30
Event ID: 1005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: GORDON-PC
Description:
Unable to produce a minidump file from the full dump file.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:09:30.000000000Z" />
<EventRecordID>37333</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>GORDON-PC</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
 
==================================================================================================
 
Log Name: Application
Source: Application Error
Date: 14/11/2011 13:24:19
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
Faulting application name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808
Faulting module name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808
Exception code: 0xc0000094
Fault offset: 0x0000000000034f82
Faulting process id: 0x4ec
Faulting application start time: 0x01cca2d086052264
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\system32\mmc.exe
Report Id: f49cd4c6-0ec3-11e1-8830-9bd613533ee6
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:24:19.000000000Z" />
<EventRecordID>10883</EventRecordID>
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data>mmc.exe</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bc808</Data>
<Data>mmc.exe</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bc808</Data>
<Data>c0000094</Data>
<Data>0000000000034f82</Data>
<Data>4ec</Data>
<Data>01cca2d086052264</Data>
<Data>C:\Windows\system32\mmc.exe</Data>
<Data>C:\Windows\system32\mmc.exe</Data>
<Data>f49cd4c6-0ec3-11e1-8830-9bd613533ee6</Data>
</EventData>
</Event>
 
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 14/11/2011 13:13:41
Event ID: 3011
Task Category: None
Level: Error
Keywords: 
User: SYSTEM
Computer: Gordon-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:13:41.290070300Z" />
<EventRecordID>10879</EventRecordID>
<Correlation />
<Execution ProcessID="1584" ThreadID="1588" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>F20300004D070000</binaryData>
</EventXML>
</UserData>
</Event
 
========================================================================
 
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 14/11/2011 13:13:41
Event ID: 3011
Task Category: None
Level: Error
Keywords: 
User: SYSTEM
Computer: Gordon-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T13:13:41.290070300Z" />
<EventRecordID>10879</EventRecordID>
<Correlation />
<Execution ProcessID="1584" ThreadID="1588" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>F20300004D070000</binaryData>
</EventXML>
</UserData>
</Event>
 
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 14/11/2011 18:25:53
Event ID: 3011
Task Category: None
Level: Error
Keywords: 
User: SYSTEM
Computer: Gordon-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T18:25:53.954603900Z" />
<EventRecordID>10963</EventRecordID>
<Correlation />
<Execution ProcessID="2528" ThreadID="1564" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>F20300004D070000</binaryData>
</EventXML>
</UserData>
</Event>
================================================================================
 
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 14/11/2011 18:25:53
Event ID: 3011
Task Category: None
Level: Error
Keywords: 
User: SYSTEM
Computer: Gordon-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T18:25:53.954603900Z" />
<EventRecordID>10963</EventRecordID>
<Correlation />
<Execution ProcessID="2528" ThreadID="1564" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>F20300004D070000</binaryData>
</EventXML>
</UserData>
</Event>
 
==============================================================================
 
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 14/11/2011 18:25:53
Event ID: 3012
Task Category: None
Level: Error
Keywords: 
User: SYSTEM
Computer: Gordon-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3012</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T18:25:53.954603900Z" />
<EventRecordID>10962</EventRecordID>
<Correlation />
<Execution ProcessID="2528" ThreadID="1564" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>Performance</param1>
<binaryDataSize>16</binaryDataSize>
<binaryData>37070000000000000000000009030000</binaryData>
</EventXML>
</UserData>
</Event>
 
===========================================================================
 
Log Name: Application
Source: Microsoft-Windows-Search
Date: 14/11/2011 14:48:11
Event ID: 3030
Task Category: Gatherer
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The gatherer service cannot be initialized.
 
Details:
    The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660)
 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
<EventID Qualifiers="49152">3030</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-14T14:48:11.000000000Z" />
<EventRecordID>10923</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="ExtraInfo">
 
Details:
    The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660)
</Data>
</EventData>
</Event>[/QUOTE]
 
Finally, it was impossible to reboot and the light on the front of machine remained ON but with no activity light. All that happened when I powered OFF/ON at the wall was a plop from my power strip and a bleep from the system.
 
Same relative came and told me all he had heard was a click from the hard disk but no sound of it spinning up. We gave the innards a spring clean, vac and air spray, and ensured that everything was seated properly, just in case. The disk remained stuck until he tapped lightly the outside of the disk a few times.
 
Since then everything seems to be working and boot this morning was swift with only two errors.
[QUOTE]Log Name: System
Source: Service Control Manager
Date: 19/11/2011 07:22:29
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The !SASCORE service failed to start due to the following error: 
The system cannot find the path specified.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-11-19T07:22:29.909461100Z" />
<EventRecordID>40745</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="520" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">!SASCORE</Data>
<Data Name="param2">%%3</Data>
</EventData>
</Event>
=========================================
Log Name: Application
Source: Microsoft-Windows-Search
Date: 19/11/2011 07:22:54
Event ID: 3030
Task Category: Gatherer
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The gatherer service cannot be initialized.
 
Details:
    The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660)
 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
<EventID Qualifiers="49152">3030</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-19T07:22:54.000000000Z" />
<EventRecordID>11556</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="ExtraInfo">
 
Details:
    The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660)
</Data>
</EventData>
</Event>[/QUOTE]
 
(Just had a power glitch of some sort whilst posting:eek:)
 
I am confused about these as I believe one is concerned with SuperAntispyware which I had removed, and there is no trace ATAICS in the registry. As to the other the Temp folder was cleared a few days ago.
 
What advice can you give of next steps need I take for the error messages?
 
Do you think the hard disk's problem, although seemingly cured, needs further attention, and how, what?
 
Thank you in anticipation of your responses.:)
 
EDIT
 
At glitch whilst posting there were incidences of the two errors at this mornings boot and also these
 
[QUOTE]
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 19/11/2011 09:53:28
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Gordon-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2011-11-19T09:53:28.396810300Z" />
<EventRecordID>40835</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>Log Name: System
Source: EventLog
Date: 19/11/2011 09:53:40
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The previous system shutdown at 09:52:24 on ‎19/‎11/‎2011 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" />
<EventRecordID>40836</EventRecordID>
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data>09:52:24</Data>
<Data>‎19/‎11/‎2011</Data>
<Data>
</Data>
<Data>
</Data>
<Data>9019</Data>
<Data>
</Data>
<Data>
</Data>
 
============================================================================================================================================
 
Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 19/11/2011 09:53:40
Event ID: 4625
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: GORDON-PC
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="16384">4625</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" />
<EventRecordID>11580</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>GORDON-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">86400</Data>
<Data Name="param2">SuppressDuplicateDuration</Data>
<Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
</EventData>
</Event>
<Binary>DB070B0006001300090034001800D300DB070B0006001300090034001800D300600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>[/QUOTE]
 
 
 
 
 
 
 
 
 
 
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 19/11/2011 09:53:28
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Gordon-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2011-11-19T09:53:28.396810300Z" />
<EventRecordID>40835</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>Log Name: System
Source: EventLog
Date: 19/11/2011 09:53:40
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Gordon-PC
Description:
The previous system shutdown at 09:52:24 on ‎19/‎11/‎2011 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" />
<EventRecordID>40836</EventRecordID>
<Channel>System</Channel>
<Computer>Gordon-PC</Computer>
<Security />
</System>
<EventData>
<Data>09:52:24</Data>
<Data>‎19/‎11/‎2011</Data>
<Data>
</Data>
<Data>
</Data>
<Data>9019</Data>
<Data>
</Data>
<Data>
</Data>
 
============================================================================================================================================
 
Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 19/11/2011 09:53:40
Event ID: 4625
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: GORDON-PC
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="16384">4625</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" />
<EventRecordID>11580</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>GORDON-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">86400</Data>
<Data Name="param2">SuppressDuplicateDuration</Data>
<Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
</EventData>
</Event>
<Binary>DB070B0006001300090034001800D300DB070B0006001300090034001800D300600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>[/QUOTE]

Maguscreed · Nov 19, 2011

All of this is looking like motherboard or power supply issues to me.
Sadly neither are very easy to test for without proper equipment.

Also could you follow these instructions on the machine in question?
http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

rundwald · Nov 19, 2011

Thank you! I will attempt to follow the link's instructions.

My OP has been edited with events at time of glitch whilst posting OP.

Maguscreed · Nov 19, 2011

it's really minidump files I'm hoping to have a look at.
Which the above process should include if there are any.

rundwald · Nov 19, 2011

I hope I have got this right!

Code:

System Manufacturer/Model Number
Dell Inspiron 560MT
OS
Home Premium 64 bit
CPU
.93 gigahertz Intel Core2 Duo 64 kilobyte primary memory cac
Motherboard
Board: Dell Inc. 0K83V0 A00 Serial Number: ..CN750939CP069B
Memory
4096 Megabytes Usable Installed Memory Slot 'DIMM0' has 102
Graphics Card(s)
Invidia GeForce G310 512MB
Sound Card
High Definition Audio Device NVIDIA High Definition Audio (
Monitor(s) Displays
DELL ST2210 [Monitor] (21.7"vis, s/n P479R01Q0VCU, January 2
Screen Resolution
1920x1080
Hard Drives
628.58 Gigabytes Usable Hard Drive Capacity
554.78 Gigabytes Hard Drive Free Space
PSU
N/A
Case
N/A
Cooling
N/A
Keyboard
N/A
Mouse
N/A
Internet Speed
N/A
Other Info
N/A

Zipped files attached as instructed.

Maguscreed · Nov 19, 2011

Only one dump file was included, but it was recent.
It's pointing to a issue with the nvidia graphics driver kernel. (google video tdr failure for info)
I can't say for certain if this is the only problem you have as you've had many crashes and I only have the one file to review.

Generally the first suggestion here is to simply manually remove the driver and then reinstall it.

If you need further instruction on doing that just say so. I'm just a bit tight on time atm.

Code:

Probably caused by : nvlddmkm.sys ( nvlddmkm+c3bae4 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

VIDEO_TDR_FAILURE (116)
Attempt to reset the display driver and recover from timeout failed.
Arguments:
Arg1: fffffa8003ff0010, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
Arg2: fffff8800fc59ae4, The pointer into responsible device driver module (e.g. owner tag).
Arg3: ffffffffc000009a, Optional error code (NTSTATUS) of the last failed operation.
Arg4: 0000000000000004, Optional internal context dependent data.

Debugging Details:
------------------


FAULTING_IP: 
nvlddmkm+c3bae4
fffff880`0fc59ae4 4883ec28        sub     rsp,28h

DEFAULT_BUCKET_ID:  GRAPHICS_DRIVER_TDR_FAULT

CUSTOMER_CRASH_COUNT:  1

BUGCHECK_STR:  0x116

PROCESS_NAME:  System

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`04b13b48 fffff880`0fcf7000 : 00000000`00000116 fffffa80`03ff0010 fffff880`0fc59ae4 ffffffff`c000009a : nt!KeBugCheckEx
fffff880`04b13b50 fffff880`0fcca867 : fffff880`0fc59ae4 fffffa80`0648f000 00000000`00000000 ffffffff`c000009a : dxgkrnl!TdrBugcheckOnTimeout+0xec
fffff880`04b13b90 fffff880`0fcf6e0f : fffffa80`ffffd84d ffffffff`fffe7960 fffffa80`03ff0010 00000000`00000000 : dxgkrnl!DXGADAPTER::Reset+0x2a3
fffff880`04b13c40 fffff880`0fdc5ec1 : fffffa80`075c0590 00000000`00000080 00000000`00000000 fffffa80`0648b010 : dxgkrnl!TdrResetFromTimeout+0x23
fffff880`04b13cc0 fffff800`03117fee : 00000000`02865272 fffffa80`06489620 fffffa80`03cce040 fffffa80`06489620 : dxgmms1!VidSchiWorkerThread+0x101
fffff880`04b13d00 fffff800`02e6e5e6 : fffff800`02ff2e80 fffffa80`06489620 fffff800`03000cc0 fffff880`01238cb0 : nt!PspSystemThreadStartup+0x5a
fffff880`04b13d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
nvlddmkm+c3bae4
fffff880`0fc59ae4 4883ec28        sub     rsp,28h

SYMBOL_NAME:  nvlddmkm+c3bae4

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nvlddmkm

IMAGE_NAME:  nvlddmkm.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4e99233b

FAILURE_BUCKET_ID:  X64_0x116_IMAGE_nvlddmkm.sys

BUCKET_ID:  X64_0x116_IMAGE_nvlddmkm.sys

Followup: MachineOwner
---------

rundwald · Nov 20, 2011

Thanks!

I will look into your suggestion and come back should I need to.

As to missing DUMPs, for some puzzling and unknown reason, twice when I looked in the default locations items were missing. Some were in unexpected locations.
Here are details

Code:

C:\Windows\memory.dmp 
 MEMORY.DMP 17/11/2011 20.44 388147 KB

C:\Windows\Minidump

26473-01111711-26473-01 17/11/2011 20.45 DMP File 679KB

On my Desktop

111511-18610-01.dmp 18/11/2011 08:50.03 293KB

One is mentioned as being in both the Documents and Music libraries with other related files seemingly duplicated too.

Do you want any of them? I could find no way to send with my last reply,

EDIT Graphics drive rolled back in Device Manager

Maguscreed · Nov 20, 2011

Yeah, those are full memory dumps, unfortunately the restrictions here don't allow for attaching them, they're just too large.

rundwald · Nov 21, 2011

Thanks for all your attention to this case.

If I uploaded them to a hosting site and provided a link, would that be acceptable?

Event log at boot time this morning showed no error and switch on and boot were very quick.

Are there any other tests retests to do to confirm computer fit? A registry cleaner is showing over 200 errors.

Have you comments on the matter of the hard disk's bot spinning up incident?

zigzag3143 · Nov 21, 2011

rundwald said:
Thanks for all your attention to this case.

If I uploaded them to a hosting site and provided a link, would that be acceptable? YES

Event log at boot time this morning showed no error and switch on and boot were very quick.

Are there any other tests retests to do to confirm computer fit? A registry cleaner is showing over 200 errors. AT LEAST FOR THE TIME BEING DONT RUN THE REG CLEANER IT WILL DELETE THE DMP FILES

Have you comments on the matter of the hard disk's bot spinning up incident?

Just filling in for Maguscreed to save time.

rundwald · Nov 21, 2011

Here are links to dmp files uploaded
111511-18610-01.dmp - download now for free. File sharing. Software file sharing. Free file hosting. File upload. FileFactory.com

111711-26473-01.dmp - download now for free. File sharing. Software file sharing. Free file hosting. File upload. FileFactory.com

Unfortunately when I tried to upload MEMORy.DMP it deleted without trace.

rundwald · Nov 21, 2011

I hope that the links work; they are a bit slow. I have tried some other link but when I tried to zip the files I got warning " No file found or No Read Permission". So if the links above do not work, I'm stumped.

gregrocker · Nov 21, 2011

Do not use a Registry Cleaner - these are mostly sales scams that have no genius at all behind them. If you are using one then that's likely part of your problem. I would clean reinstall to get a perfect reinstall then don't do any tweaking at all beyond normal system settings as Win7 won't tolerate it. Reinstalling Windows 7.

A second-best option is to run Dell Factory Recovery: Dell Restoring Your Computer´s Software to the Factory Settings

Next would be to System Restore if possible before any Registry Cleaner was run and likely ruined your SYstem.

Since Magus identified the Nvidia driver as a cause of your BSOD's, besides uninstalling/reinstalling it if that fails to solve the issue then try other drivers for your GPU model as the latest might not be suitable. I would start with whatever Win7 delivers in optional Updates after install as these are highly reliable and vetted by MS for suitability for your system.

Other sources are Dell Support Downloads webpage for your Tag number, and the Nvidia site. Try them all starting with what the Win7 installer gives you.

rundwald · Nov 23, 2011

Cannot set proper monitor resolution

I have followed sugeestions in my previous thread http://www.sevenforums.com/general-discussion/198112-big-probs-boot-many-errors-hard-disk-so.html and repaired my Windows installation.

I have encountered a problem involving my Dell ST 2210 monitor. The options to set screen resolution to 1920x1080 are no longer avaialble in Control Panel, the max being 1280x1024. In Device Manager the monitor is reported as Generic PnP rather than specific.

Searches have revealed nothing to help bar right-clicking on desktop then properties and procesing from there. No Properties option exists.

Please help.

gregrocker · Nov 23, 2011

Run Windows Updates and watch for optional Update for Display adapter which controls screen resolution. It should also deliver a Monitor driver if one is available and suitable for Win7.

If none arrive soon import the display driver from Dell Support Downloads webpage for your tag number.

rundwald · Nov 26, 2011

The screen resolution issue self corrected. I think having repaired Windows lots of updates were outstanding, which, once installed, ironed out a few wrinkles.

In last 24 hrs only rwo errors have been reported

Code:

The NVIDIA Display Driver Service service has reported an invalid current state 32.
25/11 @22:20

The previous system shutdown at 7:46:07 PM on ‎11/‎25/‎2011 was unexpected.
25/11 @19:47

I'm not sure what the NVIDIA entry means, and Googling confuses If it is not serious I shall mark the thread solved.

MY thanks to everyone

gregrocker · Nov 26, 2011

If you don't use special settings only offered by the Nvidia software you can disable the NvIdia display driver service at services.msc as it is unneeded bloatware. You only need the driver.

Make sure that and anything else besides AV are also unchecked at msconfig>Startup and msconfig>Services after hiding all MS services. You now have a clean boot.

Maguscreed · Nov 26, 2011

I'm really starting to wonder if the power supply may not be a problem here.
I used to have a nvidia card that behaved in a similar way it turned out to be related to a power supply that wasn't supplying the proper voltages.

This is just a guess mind you. I don't have anything solid to back it up with here short of the nature of the failure.

rundwald · Nov 27, 2011

All now seems well.

As to the stuck drive, I wonder if that might have been a one off inexplicable glitch?

The report on it is Passed.

Maguscreed · Nov 27, 2011

flukes do happen that never pop up again.
generally after experiencing a odd drive problem that debugging and troubleshooting can't identify I will just replace the data cable to the drive to be on the safe side. ...but yeah it does happen.

Solved Big probs with Boot, many errors,hard disk and so on!

New member

My Computer My Computer

Helping Hand

My Computer My Computer

New member

My Computer My Computer

Helping Hand

My Computer My Computer

New member

Attachments

My Computer My Computer

Helping Hand

My Computer My Computer

New member

My Computer My Computer

Helping Hand

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

My Computer My Computer

New member

New member

My Computer My Computer

New member

New member

My Computer My Computer

New member

Helping Hand

My Computer My Computer

New member

My Computer My Computer

Helping Hand

My Computer My Computer

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer