Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Dr Watson error


  • Please log in to reply

#1
keisiuho

keisiuho

    Member

  • Member
  • PipPip
  • 21 posts
My Dr. Watson Postmortem Debugger crashes when I am trying to executing applications/ultilities involving explorer.exe e.g. windows explorer, control panel... But I can still access my files by tabbrowsers or firefox. I made a search on this forum and found I am among quite a few those plagued by this problem. I followed some of the recommendations in other threads e.g. spybot, adware, virus scanning, sfc but the problem still persists. I finally disabled Dr. Watson Postmortem Debugger and when I open applications involving explorer.exe, I receive the following error message:
The instruction at "0x036cc9ed" referenced memory at "0x00000000". The memory could not be "written".
Click on OK to terminate the program

The problem does not seem to be caused by Malware or spyware and I suspect it is due to my faulty hard disk. Can anyone suggest what I can do now, apart from repairing Windows? Should I post my HijackThis log here?

Thanks in advance!

EDIT: One more question, will repairing Windows erase all the registries, start menu items, desktops, application settings?

Edited by keisiuho, 20 May 2006 - 03:51 AM.

  • 0

Advertisements


#2
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Run through what you can of this, ahead of repairing. A repair will not remove existing data

If you suspect the drive then chkdsk /f /r is more relevant at this point than a repair of windows

Items in blue which are underlined are clickable to give more information about the process

Click start then run, type prefetch then press enter, click edit then select all, right click any file then click delete, confirm delete

Click start, all programmes, accessories, system tools to run disc clean up, then from system tools, run disc defragmenter.

Click start then run, type sfc /scannow then press enter, you need the XP CD and Windows File Protection will show a blue onscreen progress bar, when the bar goes, reboot

If you do not have an XP CD you can borrow a same version as was originally installed XP CD, if you downloaded SP2 then you need an SP1 XP CD

Click start then run, type chkdsk /f /r then press enter, type Y to confirm for next boot, press enter then reboot.

Windows will appear to load normally then either the monitor will show progress or the screen will go blank, do not disturb this.

This will take an hour or so before it gets to the desktop.

Download and install Tune Up 2006 Trial

Run Tune Up Disc Clean Up

Run Tune Up Registry Clean Up

Click Optimize and Improve to run Reg Defrag, which will take a few minutes and need a reboot. You should disable the antivirus programme to run this and check it is running after the reboot

After the reboot, click optimize then system optimizer to optimize the computer, select computer with an internet connection from the drop down menu, this also requires a reboot

After the reboot, click optimize then system optimizer to accelerate downloads, select the speed just above your actual connection speed, this requires a reboot

After the reboot, click optimize then system optimizer to run system advisor

  • 0

#3
keisiuho

keisiuho

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Thanks very much for the advice. I have run through all of them but the problem still exists. Does it look like a physical problem of my hard disk?

Another sporadic problem is that a blue screen comes up when the machine is being shut down. It is then rebooted and when it gets to windows, a message reads "Windows has just recovered from a serious error". So I am quite worried about the health of my hard disk as it contains many important data which, however, have already been backed up.
  • 0

#4
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Check for it in event viewer

Click start then run, type msconfig then press enter, press start up click disable all then reeplace the ticks for the firewall, anti virus and any anti spyware programmes you have, click apply and reboot

How to use Event Viewer to view and manage Event Logs in Windows XP

Event Viewer

In Windows XP, an event is any significant occurrence in the system or in a program that requires users to be notified, or an entry added to a log. The Event Log Service records application, security, and system events in Event Viewer. With the event logs in Event Viewer, you can obtain information about your hardware, software, and system components, and monitor security events on a local or remote computer. Event logs can help you identify and diagnose the source of current system problems, or help you predict potential system problems.

Event Log Types

A Windows XP-based computer records events in the following three logs:

• Application log

The application log contains events logged by programs. For example, a database program may record a file error in the application log. Events that are written to the application log are determined by the developers of the software program.

• Security log

The security log records events such as valid and invalid logon attempts, as well as events related to resource use, such as the creating, opening, or deleting of files. For example, when logon auditing is enabled, an event is recorded in the security log each time a user attempts to log on to the computer. You must be logged on as Administrator or as a member of the Administrators group in order to turn on, use, and specify which events are recorded in the security log.

• System log

The system log contains events logged by Windows XP system components. For example, if a driver fails to load during startup, an event is recorded in the system log. Windows XP predetermines the events that are logged by system components.

How to View Event Logs

To open Event Viewer, follow these steps:

1. Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.

2. In the console tree, click Event Viewer.

The Application, Security, and System logs are displayed in the Event Viewer window.

How to View Event Details

To view the details of an event, follow these steps:

1. Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.

2. In the console tree, expand Event Viewer, and then click the log that contains the event that you want to view.

3. In the details pane, double-click the event that you want to view.

The Event Properties dialog box containing header information and a description of the event is displayed.

To copy the details of the event, click the Copy button, then open a new document in the program in which you want to paste the event (for example, Microsoft Word), and then click Paste on the Edit menu.

To view the description of the previous or next event, click the UP ARROW or DOWN ARROW.

How to Interpret an Event

Each log entry is classified by type, and contains header information, and a description of the event.

Event Header

The event header contains the following information about the event:

• Date - The date the event occurred.

• Time - The time the event occurred.

• User - The user name of the user that was logged on when the event occurred.

• Computer - The name of the computer where the event occurred.

• Event ID - An event number that identifies the event type. The Event ID can be used by product support representatives to help understand what occurred in the system.

• Source - The source of the event. This can be the name of a program, a system component, or an individual component of a large program.

• Type - The type of event. This can be one of the following five types: Error, Warning, Information, Success Audit, or Failure Audit.

• Category - A classification of the event by the event source. This is primarily used in the security log.

Event Types

The description of each event that is logged depends on the type of event. Each event in a log can be classified into one of the following types:

• Information

An event that describes the successful operation of a task, such as an application, driver, or service. For example, an Information event is logged when a network driver loads successfully.

• Warning
An event that is not necessarily significant, however, may indicate the possible occurrence of a future problem. For example, a Warning message is logged when disk space starts to run low.

• Error

An event that describes a significant problem, such as the failure of a critical task. Error events may involve data loss or loss of functionality. For example, an Error event is logged if a service fails to load during startup.

• Success Audit (Security log)
An event that describes the successful completion of an audited security event. For example, a Success Audit event is logged when a user logs on to the computer.

• Failure Audit (Security log)

An event that describes an audited security event that did not complete successfully. For example, a Failure Audit may be logged when a user cannot access a network drive.

How to Find Events in a Log

The default view of event logs is to list all its entries. If you want to find a specific event, or view a subset of events, you can either search the log, or you can apply a filter to the log data.

How to Search for a Specific Log Event

To search for a specific log event, follow these steps:

1. Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.

2. In the console tree, expand Event Viewer, and then click the log that contains the event that you want to view.

3. On the View menu, click Find.

4. Specify the options for the event that you want to view in the Find dialog box, and then click Find Next.
The event that matches your search criteria is highlighted in the details pane. Click Find Next to locate the next occurrence of an event as defined by your search criteria.

How to Filter Log Events

To filter log events, follow these steps:

1. Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.

2. In the console tree, expand Event Viewer, and then click the log that contains the event that you want to view.

3. On the View menu, click Filter.

4. Click the Filter tab (if it is not already selected).

5. Specify the filter options that you want, and then click OK.

Only events that match your filter criteria are displayed in the details pane.

To return the view to display all log entries, click Filter on the View menu, and then click Restore Defaults.

How to Manage Log Contents

By default, the initial maximum of size of a log is set to 512 KB, and when this size is reached, new events overwrite older events as needed. Depending on your requirements, you can change these settings, or clear a log of its contents.

How to Set Log Size and Overwrite Options

To specify log size and overwrite options, follow these steps:

1. Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.
2. In the console tree, expand Event Viewer, and then right-click the log in which you want to set size and overwrite options.

3. Under Log size, type the size that you want in the Maximum log size box.

4. Under When maximum log size is reached, click the overwrite option that you want.

5. If you want to clear the log contents, click Clear Log.

6. Click OK.

How to Archive a Log

If you want to save your log data, you can archive event logs in any of the following formats:
• Log-file format (.evt)
• Text-file format (.txt)
• Comma-delimited text-file format (.csv)

To archive a log, follow these steps:

1. Click Start, and then click Control Panel. Click Performance and Maintenance, then click Administrative Tools, and then double-click Computer Management. Or, open the MMC containing the Event Viewer snap-in.

2. In the console tree, expand Event Viewer, and then right-click the log in which you want to archive, and then click Save Log File As.

3. Specify a file name and location where you want to save the file. In the Save as type box, click the format that you want, and then click Save.
The log file is saved in the format that you specified.

REFERENCES

For more information about a specific event or error, visit the following Microsoft Web site:

http://www.microsoft...entserrors.mspx

For additional information about how to use Event Viewer, see Event Viewer Help. (In the Event Viewer snap-in or Computer Management window, on the Action menu, click Help).


APPLIES TO

• Microsoft Windows XP Home Edition

• Microsoft Windows XP Professional
  • 0

#5
keisiuho

keisiuho

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
After disabling all start-ups and rebooting, there aren't any logs for Application and Security, but System:
Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The IMAPI CD-Burning COM Service service entered the stopped state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The IMAPI CD-Burning COM Service service entered the running state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7035
Date:		21/05/2006
Time:		12:13:23
User:		NT AUTHORITY\SYSTEM
Computer:	MERT1657
Description:
The IMAPI CD-Burning COM Service service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The Remote Access Connection Manager service entered the running state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7035
Date:		21/05/2006
Time:		12:13:23
User:		MERT1657\Lucas
Computer:	MERT1657
Description:
The Remote Access Connection Manager service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The Telephony service entered the running state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The Application Layer Gateway Service service entered the running state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7035
Date:		21/05/2006
Time:		12:13:23
User:		NT AUTHORITY\SYSTEM
Computer:	MERT1657
Description:
The Application Layer Gateway Service service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The Fast User Switching Compatibility service entered the running state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7036
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The Network Location Awareness (NLA) service entered the running state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7035
Date:		21/05/2006
Time:		12:13:23
User:		NT AUTHORITY\SYSTEM
Computer:	MERT1657
Description:
The Network Location Awareness (NLA) service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Information
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7035
Date:		21/05/2006
Time:		12:13:23
User:		NT AUTHORITY\SYSTEM
Computer:	MERT1657
Description:
The Fast User Switching Compatibility service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Error
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7000
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The WebCamDV DV to Webcam Converter service failed to start due to the following error: 
The system cannot find the file specified. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type:	Error
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7000
Date:		21/05/2006
Time:		12:13:23
User:		N/A
Computer:	MERT1657
Description:
The TTell WDM Video Capture service failed to start due to the following error: 
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I encountered some errors when I was trying to correct problems in SystemControl in TuneUp (Customise & Analyse -> SystemControl -> Correct Problems). On the problem list, there are some items displayed in gibberish. When I selected them, an error message read "Access violation at address 01AE4F31" in module 'cmWizards.bpl'. Read of address 00000004."
  • 0

#6
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Do you use anynet or have flashfxp
  • 0

#7
keisiuho

keisiuho

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Do you use anynet or have flashfxp


No I don't. Not even heard of them before.
  • 0

#8
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Then it's a problem with tune up
  • 0

#9
keisiuho

keisiuho

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
The Dr Watson problem still exists. What should I do now?
  • 0

#10
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
You can use this guide to repair XP

Possibly, you will need to press the start button and keep tapping the delete key until the PC enters set up. Change the boot order to CD ROM Drive then hard drive, press F10 then press enter, load the XP CD then type Y then press enter, as it reboots, look for press any key to load from CD, press enter

You will need the XP product key to complete this

If you have audio / video files which are subject to DRM you should check with the provider for known issues with performing an XP repair install


XP Repair Install

Windows XP repair feature won't delete your data, installed programs, personal information, or settings. It just repairs the operating system

After running XP Repair you will need to install all Windows Updates

Microsoft Update
  • 0

#11
keisiuho

keisiuho

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
I got a blue screen when entering Windows after repairing and tried in vain several times. Finally I decided to install a fresh copy. To back up existing data, I installed another Windows under c:/windows2 and then installed a fresh copy under c:/windows. So now I ended up with two OS many user folders under C:\Documents and Settings. I just wonder if there is any way to remove the OS on c:/windows2 and create a new user that has the existing user data of an older user of another OS.
  • 0

#12
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Let me know if this does not help

http://www.geekstogo...ndpost&p=676974
  • 0

#13
keisiuho

keisiuho

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Everything is fine now. Thanks a lot!
  • 0

#14
Retired Tech

Retired Tech

    Retired Staff

  • Retired Staff
  • 20,563 posts
Thank You for letting me know
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP