Computer rebooting itself

  1. #1
    tysonp is offline Junior Member

    Question Computer rebooting itself

    I hope this is going into the right section of the forum because I'm not really sure where it belongs. Here is the story so far. Beginning around November of last year my computer started shutting down and restarting itself for no obvious reason. At the time I had Norton SystemWorks 2003 and proceeded to run all of the diagnostic things I could. I didn't come up with any major problems and I did not fix the situation. I am a graduate student at LSU so I thought I would ask the tech support in our building. He immediately told me he was 95% sure it was a virus. I always keep my antivirus up to date and do a scan once a week so I thought this was probably not my issue but he told me to do an online scan so I gave it a try. Once again, no problems or viruses found. I finally got fed up and reformatted my hard drive figuring that would get rid of any virus I might have. Things went well for a couple of weeks and then it started to do the reboot thing again. Now, this typically happens when running graphic intensive games but not always. Here are some of the programs that the computer has rebooted during use of: Microsoft Word, Internet Explorer, Rome Total War, Solitaire, Calculator, and even when the computer is sitting idle at the desktop. After the restart I get a little window that says the computer has recovered from a serious error, please tell Micorsoft about it. So I do, and ever time it tells me "error caused by device driver but we are unable to determine the exact....". Very helpful. I have run Windows update, gone to the individual hardware sites for updated drivers, run dxdiag, bought-installed-ran Norton 2005, and ran adaware all with no change. Sometimes the computer will run for hours at a time with no problem, other times it will barely get loaded back to the desktop before it restarts. Anyway, that was longer than I wanted but hopefully somebody can help. I also ran your hardware checker and the results follow:
    -------------------------------------------------------

    OS Information:
    PropertyValue
    OS Name Microsoft Windows XP Professional|C:\WINDOWS|\Device\Harddisk0\Partitio n1
    Service Pack 2.0
    OS Manufacturer Microsoft Corporation
    Windows Directory C:\WINDOWS


    Processor:
    PropertyValue
    Current Clock Speed 1659
    Description x86 Family 6 Model 6 Stepping 2
    Manufacturer AuthenticAMD
    Name AMD Athlon(tm) XP 2000+


    Memory (RAM):
    PropertyValue
    Bank Label RAS 11 & 4
    Capacity 268435456

    Bank Label RAS 11 & 4
    Capacity 268435456

    Total Memory Deteced in Hardware: ~512 MB
    Memory Reported to Operating System: 511MB

    Disk Drives:
    PropertyValue
    Description Disk drive
    Manufacturer (Standard disk drives)
    Model WDC WD300AB-00BVA0
    Media Type Fixed hard disk media
    Size 30014046720 (~28 GB)
    Number of Partitions 1

    Description Disk drive
    Manufacturer (Standard disk drives)
    Model HP psc 2175 USB Device
    Media Type
    Number of Partitions


    Installed Printers:
    PropertyValue
    Name hp psc 2170 series
    Port Name USB001
    Default True
    Driver Name hp psc 2170 series


    Motherboard:
    PropertyValue
    Manufacturer ECS
    Model
    Name Base Board
    Part Number
    Product K7S5A
    Serial Number
    Version


    BIOS:
    PropertyValue
    Manufacturer American Megatrends Inc.
    Name Version 1.00
    Release Date 20010402000000.000000+000
    Version AMIINT - 1000


    Monitor:
    PropertyValue
    Description Samsung SAMTRON 55E(Plus)
    Name Samsung SAMTRON 55E(Plus)
    Screen Height 768
    Screen Width 1024


    Keyboard:
    PropertyValue
    Description Standard 101/102-Key or Microsoft Natural PS/2 Keyboard


    Pointing Device:
    PropertyValue
    Manufacturer Microsoft
    Name Microsoft PS/2 Mouse


    Sound Card:
    PropertyValue
    Manufacturer C-Media
    Description C-Media AC97 Audio Device
    Device ID PCI\VEN_1039&DEV_7012&SUBSYS_030013F6&REV_A0\3&61A AA01&0&17

    Manufacturer Creative Technology Ltd.
    Description Creative AudioPCI (ES1371,ES1373) (WDM)
    Device ID PCI\VEN_1274&DEV_5880&SUBSYS_20001274&REV_02\3&61A AA01&0&78


    Video Card:
    PropertyValue
    Adapter Compatibility NVIDIA
    Adapter RAM 67108864
    Description NVIDIA GeForce4 Ti 4200
    Installed Display Drivers nv4_disp.dll
    Driver Version 6.14.10.7184
    Driver Date 2/24/2005 1:32:00 PM
    Video Mode Description 1024 x 768 x 4294967296 colors


    DirectX Installation:
    PropertyValue
    Version 6.03.01.0146


    Modem:
    PropertyValue

    Network Adapters:
    PropertyValue
    Description SiS 900 PCI Fast Ethernet Adapter - Packet Scheduler Miniport
    Description RAS Async Adapter
    Description Packet Scheduler Miniport
    Description WAN Miniport (L2TP)
    Description WAN Miniport (PPTP)
    Description WAN Miniport (PPPOE)
    Description Direct Parallel
    Description WAN Miniport (IP)
    Description Packet Scheduler Miniport
    Description Motorola SurfBoard 4200 USB Cable Modem - Packet Scheduler Miniport
    Description Packet Scheduler Miniport

    External Ports:
    PropertyValue
    External Reference Designator Def

    Expansion Slots:
    PropertyValue
    Slot Designation PCI1
    Slot Designation PCI2
    Slot Designation PCI3
    Slot Designation PCI4
    Slot Designation PCI5
    -------------------------------------------------------
    Help me if you can. Good luck.

  2. #2
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Welcome to D-A-L

    First off change this setting so we can get blue screen errors:

    rt. click My Computer then click Properties then Advanced then Startup and Recovery Settings then unclick Automatically restart

    Also do a search to see if you have any .dmp files. Go to Start | Search | .dmp

    Also: look in your event viewer: rt. click My Computer then click Manage then Event Viewer.
    Open the system as well as the application tabs & look for X errors. Click error line for details.
    Post back the source & event id especially of errors that seem to coincide with a crash.

    ______________________________________
    Last edited by jephree; 11-04-2005 at 05:09 AM.

  3. #3
    reddwarf is offline Valued Member
    I have ME doing the same, nothing has worked except the shotgun, have tried all you have and asked expert help to no avail. Good luck, I will keep watching you might come up with something.

  4. #4
    tysonp is offline Junior Member
    Thanks for the quick response, here is what I found:

    First off, I unchecked the autorestart button so I'll let you know if that turns anything up

    Search results for .dmp files
    NAME
    Names are in the format "MiniDATE-0*.dmp" where DATE is the date the file was last modified (020905) and *is either a 1,2,or3

    IN FOLDER
    C:\WINDOWS\Minidump

    SIZE
    First one is 96KB
    Rest are 88KB

    TYPE
    SAS Enterprise Miner Project File

    SAS is a statistics program I use from time to time but haven't had it running since January some time. However, the oldest file in the results is from 02/09/05 and the newest is from 04/10/05


    Event Viewer Application Tab

    Source Event #oftimes Date Time
    nview_info 1 2 4/10/05 8:00:25PM
    nview_info 1 4 4/10/05 8:00:05PM
    blank 0 2 4/10/05 1:57:27PM
    blank 0 2 4/10/05 2:22:51AM
    nview_info 1 1 4/9/05 11:26:33PM
    nview_info 1 1 4/9/05 11:23:29PM
    blank 0 3 4/9/05 11:19:46PM
    Application Error 1001 1 4/6/05 10:46:40PM
    Application Error 1000 1 4/6/05 10:46:36PM
    nview_info 1 1 4/4/05 5:58:18PM
    nview_info 1 4 4/2/05 9:34:25PM
    nview_info 1 4 4/2/05 9:32:05PM
    nview_info 1 1 4/1/05 9:17:37PM
    nview_info 1 5 4/1/05 7:10:18AM
    nview_info 1 2 4/1/05 2:27:25AM
    nview_info 1 6 4/1/05 2:25:05AM

    The source blank doesn't really say "blank" it's just a blank space, however all of the errors with a blank for the source correspond to a restart. The event viewer goes back much further than this, I just listed the errors for April. Also, there are a few Warning events scattered around but I wasn't sure if they mean much so I didn't list them


    Event Viewer System Tab

    Source Event #oftimes Date Time
    System Error 1003 1 4/10/05 8:10:53PM
    System Error 1003 1 4/10/05 8:04:41PM
    System Error 1003 1 4/2/05 9:45:09PM
    System Error 1003 1 4/2/05 3:11:46PM
    DCOM 10010 1 4/1/05 8:43:34AM
    System Error 1003 1 4/1/05 7:16:25AM
    System Error 1003 1 4/1/05 2:36:54AM
    System Error 1003 1 4/1/05 2:33:52AM


    That's it for now, hope this is helpful. Thanks again for the quick response.

  5. #5
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    1) Download and install the
    Debugging Tools from Microsoft
    2) Download and install this
    debugwiz
    3) Open the Wiz & Browse to, or paste in the path to, your MEMORY.DMP or latest .dmp file.
    4) After the Wiz creates a Text document post it back to this thread.

    I will go over your Event Viewer errors this evening.

  6. #6
    tysonp is offline Junior Member
    Here is the debug file, I hope I ran it correctly. I also hope it makes a lot more sense to you than it does (or doesn't) to me. Thanks.

    Opened log file 'c:\debuglog.txt'

    Microsoft (R) Windows Debugger Version 6.4.0007.2
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini041005-02.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32 \drivers
    Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp_sp2_rtm.040803-2158
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20
    Debug session time: Sun Apr 10 20:07:31.728 2005 (GMT-5)
    System Uptime: 0 days 0:05:05.291
    Loading Kernel Symbols
    .................................................. .................................................. ..................................
    Loading unloaded module list
    ..........
    Loading User Symbols
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for SYMEVENT.SYS -
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000000A, {f88e448b, 2, 0, 804e3f1e}

    Probably caused by : SYMEVENT.SYS ( SYMEVENT!SYMEvent_Operation+f2a )

    Followup: MachineOwner
    ---------

    kd> !analyze -v;r;kv;lmtn;.logclose;q
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    IRQL_NOT_LESS_OR_EQUAL (a)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high. This is usually
    caused by drivers using improper addresses.
    If a kernel debugger is available get the stack backtrace.
    Arguments:
    Arg1: f88e448b, memory referenced
    Arg2: 00000002, IRQL
    Arg3: 00000000, value 0 = read operation, 1 = write operation
    Arg4: 804e3f1e, address which referenced memory

    Debugging Details:
    ------------------


    OVERLAPPED_MODULE: kmixer

    READ_ADDRESS: f88e448b

    CURRENT_IRQL: 2

    FAULTING_IP:
    nt!KeSetEvent+8
    804e3f1e ff1568764d80 call dword ptr [nt!_imp__KeRaiseIrqlToDpcLevel (804d7668)]

    CUSTOMER_CRASH_COUNT: 2

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    BUGCHECK_STR: 0xA

    LAST_CONTROL_TRANSFER: from ee3e229a to 804e3f1e

    STACK_TEXT:
    ecd7c5f4 ee3e229a 81eb2dc4 00000000 00000000 nt!KeSetEvent+0x8
    WARNING: Stack unwind information not available. Following frames may be wrong.
    81eb2dd8 00000000 0a080008 78766553 ee3e36ec SYMEVENT!SYMEvent_Operation+0xf2a


    FOLLOWUP_IP:
    SYMEVENT!SYMEvent_Operation+f2a
    ee3e229a 6a00 push 0x0

    SYMBOL_STACK_INDEX: 1

    FOLLOWUP_NAME: MachineOwner

    SYMBOL_NAME: SYMEVENT!SYMEvent_Operation+f2a

    MODULE_NAME: SYMEVENT

    IMAGE_NAME: SYMEVENT.SYS

    DEBUG_FLR_IMAGE_TIMESTAMP: 41758490

    STACK_COMMAND: kb

    FAILURE_BUCKET_ID: 0xA_SYMEVENT!SYMEvent_Operation+f2a

    BUCKET_ID: 0xA_SYMEVENT!SYMEvent_Operation+f2a

    Followup: MachineOwner
    ---------

    eax=81eb2dc4 ebx=81e44500 ecx=81eb2dd8 edx=00000000 esi=81eb2da8 edi=804e3f16
    eip=804e3f1e esp=ecd7c5e8 ebp=ecd7c5f4 iopl=0 nv up ei pl zr na po nc
    cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
    nt!KeSetEvent+0x8:
    804e3f1e ff1568764d80 call dword ptr [nt!_imp__KeRaiseIrqlToDpcLevel (804d7668)] ds:0023:804d7668=001f446c
    ChildEBP RetAddr Args to Child
    ecd7c5f4 ee3e229a 81eb2dc4 00000000 00000000 nt!KeSetEvent+0x8 (FPO: [Non-Fpo])
    WARNING: Stack unwind information not available. Following frames may be wrong.
    81eb2dd8 00000000 0a080008 78766553 ee3e36ec SYMEVENT!SYMEvent_Operation+0xf2a
    start end module name
    804d7000 806eb780 nt ntoskrnl.exe Wed Aug 04 01:19:48 2004 (41108004)
    806ec000 806ffd80 hal halacpi.dll Wed Aug 04 00:59:04 2004 (41107B28)
    bf800000 bf9c0380 win32k win32k.sys Wed Aug 04 01:17:30 2004 (41107F7A)
    bf9c1000 bf9d2580 dxg dxg.sys Wed Aug 04 01:00:51 2004 (41107B93)
    bf9d3000 bfd9d300 nv4_disp nv4_disp.dll Thu Feb 24 10:08:56 2005 (421DFC18)
    eb861000 eb863e80 secdrv secdrv.sys Fri Jan 16 07:16:04 2004 (4007E414)
    eb895000 eb8c1400 mrxdav mrxdav.sys Wed Aug 04 01:00:49 2004 (41107B91)
    ebaea000 ebb01480 dump_atapi dump_atapi.sys Wed Aug 04 00:59:41 2004 (41107B4D)
    ebcb9000 ebce2f00 kmixer kmixer.sys Wed Aug 04 01:07:46 2004 (41107D32)
    ebce3000 ebcf7400 wdmaud wdmaud.sys Wed Aug 04 01:15:03 2004 (41107EE7)
    ebd04000 ebd56180 srv srv.sys Wed Aug 04 01:14:44 2004 (41107ED4)
    ec383000 ec386ee0 GBFSHook GBFSHook.SYS Tue Dec 21 12:05:46 2004 (41C865FA)
    ec62c000 ec62f280 ndisuio ndisuio.sys Wed Aug 04 01:03:10 2004 (41107C1E)
    ec893000 ec8a3960 NAVENG NAVENG.Sys Thu Dec 30 15:46:10 2004 (41D47722)
    ec8a4000 ec93ca60 NavEx15 NavEx15.Sys Thu Dec 30 15:45:19 2004 (41D476EF)
    ec93d000 ec994000 SAVRT SAVRT.SYS Fri Dec 10 14:42:07 2004 (41BA0A1F)
    ec9e4000 eca24100 HTTP HTTP.sys Fri Oct 08 18:48:20 2004 (41672744)
    ecc95000 ecc9d8a0 NPDRIVER NPDRIVER.SYS Mon Aug 30 23:38:34 2004 (413400CA)
    ee1f5000 ee215f00 ipnat ipnat.sys Wed Sep 29 17:28:36 2004 (415B3714)
    ee216000 ee284400 mrxsmb mrxsmb.sys Tue Jan 18 22:26:50 2005 (41EDE18A)
    ee285000 ee2afa00 rdbss rdbss.sys Wed Oct 27 20:13:57 2004 (418047D5)
    ee2b0000 ee2c3000 SAVRTPEL SAVRTPEL.SYS Fri Dec 10 14:42:09 2004 (41BA0A21)
    ee2c3000 ee315000 SPBBCDrv SPBBCDrv.sys Wed Jul 21 18:08:26 2004 (40FEF76A)
    ee315000 ee336d00 afd afd.sys Wed Aug 04 01:14:13 2004 (41107EB5)
    ee337000 ee35ec00 netbt netbt.sys Wed Aug 04 01:14:36 2004 (41107ECC)
    ee35f000 ee3a5460 symidsco symidsco.sys Thu Mar 03 20:55:44 2005 (4227CE30)
    ee3a6000 ee3ce9e0 SYMFW SYMFW.SYS Fri Jan 21 23:57:51 2005 (41F1EB5F)
    ee3cf000 ee3e8a80 SYMEVENT SYMEVENT.SYS Tue Oct 19 16:18:08 2004 (41758490)
    ee3e9000 ee428da0 SYMTDI SYMTDI.SYS Fri Jan 21 23:55:40 2005 (41F1EADC)
    ee429000 ee480a80 tcpip tcpip.sys Wed Aug 04 01:14:39 2004 (41107ECF)
    ee481000 ee493400 ipsec ipsec.sys Wed Aug 04 01:14:27 2004 (41107EC3)
    ef604000 ef637200 update update.sys Wed Aug 04 00:58:32 2004 (41107B08)
    ef638000 ef668100 rdpdr rdpdr.sys Wed Aug 04 01:01:10 2004 (41107BA6)
    ef669000 ef679e00 psched psched.sys Wed Aug 04 01:04:16 2004 (41107C60)
    ef67a000 ef690680 ndiswan ndiswan.sys Wed Aug 04 01:14:30 2004 (41107EC6)
    ef691000 ef6b4980 portcls portcls.sys Wed Aug 04 01:15:47 2004 (41107F13)
    ef6b5000 ef77ce80 cmuda cmuda.sys Fri Jun 25 04:13:39 2004 (40DBECC3)
    ef77d000 ef79f680 ks ks.sys Wed Aug 04 01:15:20 2004 (41107EF8)
    ef91e000 ef92a640 HPZid412 HPZid412.sys Fri Jan 03 07:25:01 2003 (3E158F2D)
    efdec000 efdf4700 wanarp wanarp.sys Wed Aug 04 01:04:57 2004 (41107C89)
    efdfc000 efe04880 Fips Fips.SYS Fri Aug 17 20:31:49 2001 (3B7DC585)
    efe1c000 efe24700 netbios netbios.sys Wed Aug 04 01:03:19 2004 (41107C27)
    efe2c000 efe36000 SYMNDIS SYMNDIS.SYS Fri Jan 21 23:57:07 2005 (41F1EB33)
    efe4c000 efe55480 NDProxy NDProxy.SYS Fri Aug 17 15:55:30 2001 (3B7D84C2)
    efe5c000 efe6a100 usbhub usbhub.sys Wed Aug 04 01:08:40 2004 (41107D68)
    efe6c000 efe75f00 termdd termdd.sys Wed Aug 04 00:58:52 2004 (41107B1C)
    efe7c000 efe84900 msgpc msgpc.sys Wed Aug 04 01:04:11 2004 (41107C5B)
    f0249000 f0254d00 raspptp raspptp.sys Wed Aug 04 01:14:26 2004 (41107EC2)
    f0259000 f0263200 raspppoe raspppoe.sys Wed Aug 04 01:05:06 2004 (41107C92)
    f0269000 f0275880 rasl2tp rasl2tp.sys Wed Aug 04 01:14:21 2004 (41107EBD)
    f0279000 f0282f80 es1371mp es1371mp.sys Mon Jun 03 13:18:31 2002 (3CFBB2F7)
    f0289000 f0297b80 drmk drmk.sys Wed Aug 04 01:07:54 2004 (41107D3A)
    f0299000 f02a3380 Imapi Imapi.SYS Wed Aug 04 01:00:12 2004 (41107B6C)
    f02a9000 f02b7080 redbook redbook.sys Wed Aug 04 00:59:34 2004 (41107B46)
    f02b9000 f02c5180 cdrom cdrom.sys Wed Aug 04 00:59:52 2004 (41107B58)
    f07c9000 f07c9b80 Null Null.SYS Fri Aug 17 15:47:39 2001 (3B7D82EB)
    f0812000 f0812c00 audstub audstub.sys Fri Aug 17 15:59:40 2001 (3B7D85BC)
    f0905000 f090b780 USBSTOR USBSTOR.SYS Wed Aug 04 01:08:44 2004 (41107D6C)
    f090d000 f09122c0 HPZius12 HPZius12.sys Wed Feb 05 00:40:52 2003 (3E40B1F4)
    f0915000 f091b500 usbprint usbprint.sys Wed Aug 04 01:01:23 2004 (41107BB3)
    f091d000 f0924b80 usbccgp usbccgp.sys Wed Aug 04 01:08:45 2004 (41107D6D)
    f0925000 f092b000 symlcbrd symlcbrd.sys Sun Aug 22 03:10:18 2004 (412854EA)
    f092d000 f09341e0 SYMIDS SYMIDS.SYS Fri Jan 21 23:59:16 2005 (41F1EBB4)
    f0c7c000 f0c7e980 gameenum gameenum.sys Wed Aug 04 01:08:20 2004 (41107D54)
    f0c98000 f0c99100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
    f1192000 f1197060 SYMREDRV SYMREDRV.SYS Fri Jan 21 23:58:32 2005 (41F1EB88)
    f119a000 f11a1880 Npfs Npfs.SYS Wed Aug 04 01:00:38 2004 (41107B86)
    f11a2000 f11a6a80 Msfs Msfs.SYS Wed Aug 04 01:00:37 2004 (41107B85)
    f11aa000 f11af200 vga vga.sys Wed Aug 04 01:07:06 2004 (41107D0A)
    f11c2000 f11c6080 raspti raspti.sys Fri Aug 17 15:55:32 2001 (3B7D84C4)
    f11ca000 f11ce580 ptilink ptilink.sys Fri Aug 17 15:49:53 2001 (3B7D8371)
    f11d2000 f11d6880 TDI TDI.SYS Wed Aug 04 01:07:47 2004 (41107D33)
    f11da000 f11e0800 usbehci usbehci.sys Wed Aug 04 01:08:34 2004 (41107D62)
    f14b9000 f14bb900 Dxapi Dxapi.sys Fri Aug 17 15:53:19 2001 (3B7D843F)
    f16e4000 f16e4740 BCMNTIO BCMNTIO.sys Fri Jun 19 19:25:06 1998 (358B0162)
    f17f9000 f17fd500 watchdog watchdog.sys Wed Aug 04 01:07:32 2004 (41107D24)
    f1947000 f1955d80 sysaudio sysaudio.sys Wed Aug 04 01:15:54 2004 (41107F1A)
    f1c03000 f1c12900 Cdfs Cdfs.SYS Wed Aug 04 01:14:09 2004 (41107EB1)
    f2042000 f2047000 usbuhci usbuhci.sys Wed Aug 04 01:08:34 2004 (41107D62)
    f204a000 f2052000 sisnic sisnic.sys Mon Aug 04 02:05:37 2003 (3F2E05C1)
    f5856000 f5859c80 mssmbios mssmbios.sys Wed Aug 04 01:07:47 2004 (41107D33)
    f5872000 f5874580 ndistapi ndistapi.sys Fri Aug 17 15:55:29 2001 (3B7D84C1)
    f6b96000 f6bb8e80 USBPORT USBPORT.SYS Wed Aug 04 01:08:34 2004 (41107D62)
    f6bb9000 f6bcc900 parport parport.sys Wed Aug 04 00:59:04 2004 (41107B28)
    f6ea5000 f6eb8780 VIDEOPRT VIDEOPRT.SYS Wed Aug 04 01:07:04 2004 (41107D08)
    f6eb9000 f72044c0 nv4_mini nv4_mini.sys Thu Feb 24 10:13:44 2005 (421DFD38)
    f7295000 f729e680 AFS2K AFS2K.SYS Sat Feb 14 17:01:29 2004 (402EA8C9)
    f768b000 f769ad80 serial serial.sys Wed Aug 04 01:15:51 2004 (41107F17)
    f769b000 f76a7e00 i8042prt i8042prt.sys Wed Aug 04 01:14:36 2004 (41107ECC)
    f7c0d000 f7c10dc0 HPZipr12 HPZipr12.sys Fri Jan 03 07:25:03 2003 (3E158F2F)
    f7c11000 f7c14b00 usbscan usbscan.sys Wed Aug 04 00:58:44 2004 (41107B14)
    f7c15000 f7c18c00 NetMotCM NetMotCM.sys Mon Feb 09 11:06:21 2004 (4027BE0D)
    f82ee000 f82f1c80 serenum serenum.sys Wed Aug 04 00:59:06 2004 (41107B2A)
    f8302000 f8304280 rasacd rasacd.sys Fri Aug 17 15:55:39 2001 (3B7D84CB)
    f8332000 f835ba80 GoBack2K GoBack2K.sys Tue Dec 21 12:05:32 2004 (41C865EC)
    f835c000 f8376580 Mup Mup.sys Wed Aug 04 01:15:20 2004 (41107EF8)
    f8377000 f83a3a80 NDIS NDIS.sys Wed Aug 04 01:14:27 2004 (41107EC3)
    f83a4000 f8430480 Ntfs Ntfs.sys Wed Aug 04 01:15:06 2004 (41107EEA)
    f8431000 f8447780 KSecDD KSecDD.sys Wed Aug 04 00:59:45 2004 (41107B51)
    f8448000 f8459f00 sr sr.sys Wed Aug 04 01:06:22 2004 (41107CDE)
    f845a000 f8478780 fltmgr fltmgr.sys Wed Aug 04 01:01:17 2004 (41107BAD)
    f8479000 f8490480 atapi atapi.sys Wed Aug 04 00:59:41 2004 (41107B4D)
    f8491000 f84b6700 dmio dmio.sys Wed Aug 04 01:07:13 2004 (41107D11)
    f84b7000 f84d5880 ftdisk ftdisk.sys Fri Aug 17 15:52:41 2001 (3B7D8419)
    f84d6000 f84e6a80 pci pci.sys Wed Aug 04 01:07:45 2004 (41107D31)
    f84e7000 f8514d80 ACPI ACPI.sys Wed Aug 04 01:07:35 2004 (41107D27)
    f8536000 f853ec00 isapnp isapnp.sys Fri Aug 17 15:58:01 2001 (3B7D8559)
    f8546000 f8550500 MountMgr MountMgr.sys Wed Aug 04 00:58:29 2004 (41107B05)
    f8556000 f8562c80 VolSnap VolSnap.sys Wed Aug 04 01:00:14 2004 (41107B6E)
    f8566000 f856ee00 disk disk.sys Wed Aug 04 00:59:53 2004 (41107B59)
    f8576000 f8582200 CLASSPNP CLASSPNP.SYS Wed Aug 04 01:14:26 2004 (41107EC2)
    f8586000 f8590080 sisagp sisagp.sys Wed Aug 04 01:07:42 2004 (41107D2E)
    f86f6000 f86ff200 amdk7 amdk7.sys Wed Aug 04 00:59:19 2004 (41107B37)
    f87b6000 f87bc200 PCIIDEX PCIIDEX.SYS Wed Aug 04 00:59:40 2004 (41107B4C)
    f87be000 f87c2900 PartMgr PartMgr.sys Fri Aug 17 20:32:23 2001 (3B7DC5A7)
    f88ae000 f88b3a00 mouclass mouclass.sys Wed Aug 04 00:58:32 2004 (41107B08)
    f88b6000 f88bc000 kbdclass kbdclass.sys Wed Aug 04 00:58:32 2004 (41107B08)
    f88be000 f88bf000 fdc fdc.sys unavailable (00000000)
    f88c6000 f88ca280 usbohci usbohci.sys Wed Aug 04 01:08:34 2004 (41107D62)
    f8946000 f8949000 BOOTVID BOOTVID.dll Fri Aug 17 15:49:09 2001 (3B7D8345)
    f8a36000 f8a37b80 kdcom kdcom.dll Fri Aug 17 15:49:10 2001 (3B7D8346)
    f8a38000 f8a39100 WMILIB WMILIB.SYS Fri Aug 17 16:07:23 2001 (3B7D878B)
    f8a3a000 f8a3b700 dmload dmload.sys Fri Aug 17 15:58:15 2001 (3B7D8567)
    f8a54000 f8a55a80 ParVdm ParVdm.SYS Fri Aug 17 15:49:49 2001 (3B7D836D)
    f8ace000 f8acf100 swenum swenum.sys Wed Aug 04 00:58:41 2004 (41107B11)
    f8ad0000 f8ad1280 USBD USBD.SYS Fri Aug 17 16:02:58 2001 (3B7D8682)
    f8ad2000 f8ad3f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 15:49:37 2001 (3B7D8361)
    f8ad4000 f8ad5080 Beep Beep.SYS Fri Aug 17 15:47:33 2001 (3B7D82E5)
    f8ad6000 f8ad7080 mnmdd mnmdd.SYS Fri Aug 17 15:57:28 2001 (3B7D8538)
    f8ad8000 f8ad9080 RDPCDD RDPCDD.sys Fri Aug 17 15:46:56 2001 (3B7D82C0)
    f8ada000 f8adb640 SYMDNS SYMDNS.SYS Fri Jan 21 2320 2005 (41F1EB04)
    f8afe000 f8afed00 pciide pciide.sys Fri Aug 17 15:51:49 2001 (3B7D83E5)
    f8aff000 f8afffa0 GBDevice GBDevice.sys Tue Dec 21 12:06:18 2004 (41C8661A)
    f8b12000 f8b128a0 MAPMEM MAPMEM.sys Fri May 08 16:25:04 1998 (35537830)
    f8c72000 f8c72d00 dxgthk dxgthk.sys Fri Aug 17 15:53:12 2001 (3B7D8438)

    Unloaded modules:
    ebc96000 ebcc0000 kmixer.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f1365000 f1366000 drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f7235000 f7242000 DMusic.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    ebcc0000 ebce3000 aec.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f76ab000 f76b9000 swmidi.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f8a70000 f8a72000 splitter.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    efe0c000 efe15000 processr.sys
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f11b2000 f11b7000 Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f8306000 f8309000 Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    f11ba000 f11bf000 Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum: 00000000
    Closing open log file c:\debuglog.txt
    Last edited by jephree; 12-04-2005 at 03:38 AM. Reason: posted attached log

  7. #7
    joehobart is offline Junior Member
    There are a couple things going on in this dump. I'd like to see a second crash to confirm what we see is whats going on.

    You need to verify that you are running the latest version of SYMEVENT.SYS
    Use this link to find more information. If you check \windows\system32\drivers\symevent.sys by right click->properties, you should see a version of 11.5.3.3, if you dont, use that article to get the latest version.

    MAPMEM.sys Fri May 08 16:25:04 1998 <-- what is this, its older than I am.


    Let us know what you find with that version of symevent. Once thats current, if the phenomenon is still occuring, collect a new debug log, and lets see whats doing.

  8. #8
    tysonp is offline Junior Member
    Welcome to the problem Joe! Okay, I checked the symevent.sys and it was version 11.5.3.2 so I ran through the update procedure. Just so you know, the newest version is now 11.6.1.1 and now I'm updated there. Not surprisingly, my computer seems to be like my car when I take it to the shop, it works just fine. I'm sure it will act up eventually. For the time being I'm just going to leave it on all the time since it appears to crash whenever it feels like it regardless of the situation. If it crashes when I'm away, I hope the blue screen will appear and stay up untill I get back. Anyhow, I'll let you know if it does.

  9. #9
    tysonp is offline Junior Member
    I'm not sure if this is related to the rebooting problem or not, but I suspect that it is. A couple of times recently (last couple of weeks), my computer gets hung on the "windows is shutting down" screen when I try and turn it off. I really didn't think much of it when it happened before but it happened again last night. I went into my Event Viewer and this is the message that it displayed at the same time that it wouldn't shut down:

    Application Tab:
    Type Date Time Source Categ. Event User Comp.
    Warning 4/13/2005 2:16:54AM Userenv None 1517 SYSTEM PHILLIPS

    Nothing was shown at that time on the system tab.

    One other thing. A friend of mine built his computer at the same time I did so we have identical systems except for our hard drives. I downloaded the EVEREST system monitor and had him download it too and everything looks pretty much the same except for the operating temperatures. His system temp is 29 C (84 F) and mine is 36 C (97 F). Also his cpu temp is 40 C (104 F) and mine is 51 C (124 F). I don't know enough about computers to know if this is outside the norm for this cpu and motherboard but I thought it was strange that they were different.

    If these two situations have nothing to do with my original question, let me know and I will start another post after you figure this rebooting problem out. I'm still waiting on it to crash on me so goodbye for now.

  10. #10
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Event ID: 1517
    Source Userenv
    Type Warning
    Description Windows saved user <user name> registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

    MORE

    I'd say your friend's system is running nice & cool & that you are very warm although not dangerously HOT. Room temp is also a factor as well as what you are doing on the system.

    Heat is often an issue in crashes but at this point I'd just wait for the next Dump.

+ Reply to Thread
Page 1 of 6 1 2 3 4 5 6 LastLast