having problems with xp

  1. #1
    Peter Yianni is offline Newbie

    having problems with xp

    my computer freezes randomly
    no blue screen the mouse and keyboard would stop and i have to reset
    sometimes i could use for hours no probs other times just min

    last freeze i noticed this in event viewer


    Details
    Product: Windows Operating System
    ID: 680
    Source: Security
    Version: 5.2
    Symbolic Name: SE_AUDITID_ACCOUNT_LOGON
    Message: Logon attempt by: %1
    Logon account: %2
    Source Workstation: %3
    Error Code: %4


    Explanation
    A set of credentials was passed to the authentication system on this computer either by a local process or by a remote process or user.

    Success or failure is displayed in the message. If this event indicates success, then the credentials presented were valid. The error code is 0x0 for success messages. For failure messages, the user field in the message header displays NT AUTHORITY\SYSTEM, and an NTStatus code is displayed. The following is a list of the most common failure status codes and their meanings. NT Status Code Meaning
    0xC000006A An incorrect password was supplied.
    0xC000006F The account is not allowed to log on at this time.
    0xC0000064 The account does not exist.
    0xC0000070 The account is not allowed to log on from this computer.
    0xC0000071 The password has expired.
    0xC0000072 The account is disabled.



    User Action
    No user action is required.



    Version: 5.0
    Symbolic Name: SE_AUDITID_ACCOUNT_LOGON
    Message: Logon attempt by: %1
    Logon account: %2
    Source Workstation: %3
    Error Code: %4


    Explanation
    A set of credentials was passed to the authentication system on this computer either by a local process or by a remote process or user.

    Success or failure is displayed in the message. If this event indicates success, then the credentials presented were valid. The error code is 0x0 for success messages. For failure messages, the user field in the message header displays NT AUTHORITY\SYSTEM, and an NTStatus code is displayed. The following is a list of the most common failure status codes and their meanings. NT Status Code Meaning
    0xC000006A An incorrect password was supplied.
    0xC000006F The account is not allowed to log on at this time.
    0xC0000064 The account does not exist.
    0xC0000070 The account is not allowed to log on from this computer.
    0xC0000071 The password has expired.
    0xC0000072 The account is disabled.



    User Action
    No user action is required.



    --------------------------------------------------------------------------------


    Currently there are no Microsoft Knowledge Base articles available for this specific error or event message. For information about other support options you can use to find answers online, see Microsoft Support.




    i have a fully registered windows xp home edition cd
    i have changed the memory
    changed the hard drive
    changed the power supply
    cleaned the cpu
    also put some new fans in system
    did a bios update
    re installed windows from scratch
    and have all the latest drivers

  2. #2
    Peter Yianni is offline Newbie
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 14/10/2010
    Time: 21:06:12
    User: N/A
    Computer: PETER-8B0A753ED
    Description:
    The Scutum50 NDIS Protocol Driver service failed to start due to the following error:
    The system cannot find the file specified.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

  3. #3
    Peter Yianni is offline Newbie
    Malwarebytes' Anti-Malware 1.46
    Malwarebytes

    Database version: 4826

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    15/10/2010 04:58:06
    mbam-log-2010-10-15 (04-58-06).txt

    Scan type: Quick scan
    Objects scanned: 142399
    Time elapsed: 6 minute(s), 39 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)



    done it again 2 time tonight same problems show on log
    read on a forum about malware all clean
    did the sfc / scandisk
    its driving me nuts

  4. #4
    Peter Yianni is offline Newbie
    Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\WINDOWS\Minidump\Mini101510-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: *** Invalid ***
    ************************************************** **************************
    * Symbol loading may be unreliable without a symbol search path. *
    * Use .symfix to have the debugger choose a symbol path. *
    * After setting your symbol path, use .reload to refresh symbol locations. *
    ************************************************** **************************
    Executable search path is:
    ************************************************** *******************
    * Symbols can not be loaded because symbol path is not initialized. *
    * *
    * The Symbol Path can be set by: *
    * using the _NT_SYMBOL_PATH environment variable. *
    * using the -y <symbol_path> argument when starting the debugger. *
    * using .sympath and .sympath+ *
    ************************************************** *******************
    Unable to load image ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Machine Name:
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Fri Oct 15 04:41:29.890 2010 (UTC + 1:00)
    System Uptime: 0 days 0:54:45.594
    ************************************************** *******************
    * Symbols can not be loaded because symbol path is not initialized. *
    * *
    * The Symbol Path can be set by: *
    * using the _NT_SYMBOL_PATH environment variable. *
    * using the -y <symbol_path> argument when starting the debugger. *
    * using .sympath and .sympath+ *
    ************************************************** *******************
    Unable to load image ntoskrnl.exe, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Loading Kernel Symbols
    .................................................. .............
    .................................................. .........
    Loading User Symbols
    Loading unloaded module list
    .........
    ************************************************** *****************************
    * *
    * Bugcheck Analysis *
    * *
    ************************************************** *****************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000007F, {8, 80042000, 0, 0}

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

    *** WARNING: Unable to verify timestamp for hal.dll
    *** ERROR: Module load completed but symbols could not be loaded for hal.dll
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    ************************************************** ***********************
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!KPRCB ***
    *** ***
    ************************************************** ***********************
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    ************************************************** ***********************
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!KPRCB ***
    *** ***
    ************************************************** ***********************
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    ************************************************** ***********************
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    ************************************************** ***********************
    ************************************************** ***********************
    *** ***
    *** ***
    *** Your debugger is not using the correct symbols ***
    *** ***
    *** In order for this command to work properly, your symbol path ***
    *** must point to .pdb files that have full type information. ***
    *** ***
    *** Certain .pdb files (such as the public OS symbols) do not ***
    *** contain the required information. Contact the group that ***
    *** provided you with these symbols if you need this command to ***
    *** work. ***
    *** ***
    *** Type referenced: nt!_KPRCB ***
    *** ***
    ************************************************** ***********************
    Probably caused by : ntoskrnl.exe ( nt+489fa )

    Followup: MachineOwner
    ---------


    ok this is what i got with the dump file not sure if this is right or not
    Last edited by Peter Yianni; 15-10-2010 at 06:12 AM.

+ Reply to Thread