Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Another Blue screen topic


  • Please log in to reply

#46
Chris_UK

Chris_UK

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts
Im going for now, i need to sleep, ill check tomorrow.
  • 0

Advertisements


#47
Chris_UK

Chris_UK

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

Ok...

Download, install, and run WinAudit on the machine. Generate a report in Formatted Text format. Scroll down to "Startup Programs" (near the bottom) and Copy/Paste the entire box here for me.



Startup Programs

--------------------------------------------------------------------------------------------------------------------------
| Name | Startup Command |
--------------------------------------------------------------------------------------------------------------------------
| ATIModeChange | Ati2mdxx.exe |
| ATIPTA | C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe |
| iTunesHelper | C:\Program Files\iTunes\iTunesHelper.exe |
| TV Now | C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK |
| Display Settings | C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s |
| QT4HPOT | C:\Program Files\HPQ\One-Touch\OneTouch.EXE |
| SynTPLpr | C:\Program Files\Synaptics\SynTP\SynTPLpr.exe |
| SynTPEnh | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe |
| HPHUPD05 | c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe |
| HPHmon05 | C:\WINDOWS\System32\hphmon05.exe |
| HP Software Update | "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" |
| HP Component Manager | "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" |
| RoxioEngineUtility | "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe" |
| RoxioDragToDisc | "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" |
| Cpqset | C:\Program Files\HPQ\Default Settings\cpqset.exe |
| CARPService | carpserv.exe |
| MessengerPlus3 | "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" |
| SunJavaUpdateSched | C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe |
| avast! | C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe |
| KernelFaultCheck | %systemroot%\system32\dumprep 0 -k |
| MSMSGS | "C:\Program Files\Messenger\msmsgs.exe" /background |
| desktop.ini | |
| HP Digital Imaging Monitor.lnk | |
| desktop.ini | |
--------------------------------------------------------------------------------------------------------------------------

Thats what the Audit generated
  • 0

#48
wannabe1

wannabe1

    Tech Staff

  • Technician
  • 16,645 posts
Sorry for the delay...a storm knocked the power out for a few hours...

After the recent errors, lets disable the memory dump for now by right clicking on "My Computer", selecting "Properties" and then the "Advanced" tab. Click on the "Settings" button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - "OK" your way out.

Then generate a fresh WinAudit report as you did earlier. This time I'd like to look at the System errors and Application errors. If memory serves, they should be toward the bottom of the report.
  • 0

#49
Chris_UK

Chris_UK

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

Sorry for the delay...a storm knocked the power out for a few hours...

After the recent errors, lets disable the memory dump for now by right clicking on "My Computer", selecting "Properties" and then the "Advanced" tab. Click on the "Settings" button in 'Startup and Recovery'. In the bottom pane - under 'Write debugging information' - click on the down arrow and then select 'None' - "OK" your way out.

Then generate a fresh WinAudit report as you did earlier. This time I'd like to look at the System errors and Application errors. If memory serves, they should be toward the bottom of the report.


System Errors

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| Time Generated | Source | Description |
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 16/07/2006 11:20:34 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service wuauserv with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 11:16:29 | Service Control Manager | The following boot-start or system-start driver(s) failed to load: Aavmker4 AmdK7 Fips Event ID 7026 |
| 16/07/2006 11:16:21 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 02:09:05 | Service Control Manager | The following boot-start or system-start driver(s) failed to load: Aavmker4 AmdK7 Fips Event ID 7026 |
| 16/07/2006 02:06:47 | Disk | The device, \Device\Harddisk0\D, has a bad block. Event ID 7 |
| 16/07/2006 01:51:13 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 01:41:57 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service wuauserv with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 01:39:01 | Service Control Manager | The following boot-start or system-start driver(s) failed to load: Aavmker4 AmdK7 Fips Event ID 7026 |
| 16/07/2006 01:38:52 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 01:30:58 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 01:27:29 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service netman with arguments "" in order to run the server: %4 Event ID 10005 |
| 16/07/2006 01:27:26 | Service Control Manager | The following boot-start or system-start driver(s) failed to load: Aavmker4 AFD AmdK7 aswTdi Fips IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip Event ID 7026 |
| 16/07/2006 01:27:26 | Service Control Manager | The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning. Event ID 7001 |
| 16/07/2006 01:27:26 | Service Control Manager | The TCP/IP NetBIOS Helper service depends on the AFD Networking Support Environment service which failed to start because of the following error: A device attached to the system is not functioning. Event ID 7001 |
| 16/07/2006 01:27:26 | Service Control Manager | The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning. Event ID 7001 |
| 16/07/2006 01:27:26 | Service Control Manager | The DHCP Client service depends on the NetBT service which failed to start because of the following error: A device attached to the system is not functioning. Event ID 7001 |
| 16/07/2006 01:27:21 | DCOM | DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server: %4 Event ID 10005 |
| 15/07/2006 19:14:11 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 14:27:55 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 14:27:39 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 13:51:46 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 13:50:53 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 13:50:01 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 13:49:43 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
| 15/07/2006 13:49:00 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 |
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------



Application Errors

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| Time Generated | Source | Description |
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| 11/07/2006 16:30:56 | Application Hang | Hanging application setup.exe, version 8.0.50727.42, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event ID 1002 |
| 11/07/2006 16:30:54 | Application Hang | Hanging application setup.exe, version 8.0.50727.42, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event ID 1002 |
| 10/07/2006 15:34:57 | Application Hang | Hanging application msnmsgr.exe, version 7.5.324.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event ID 1002 |
| 08/07/2006 05:35:33 | SBService | No description available. The log entry was posted with an ID of zero. Event ID 0 |
| 07/07/2006 12:04:18 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module unknown, version 0.0.0.0, fault address 0x00000000. Event ID 1000 |
| 07/07/2006 08:31:05 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x000a14a7. Event ID 1000 |
| 07/07/2006 07:58:02 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x0009786f. Event ID 1000 |
| 05/07/2006 21:22:52 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x000ac7de. Event ID 1000 |
| 02/07/2006 12:34:53 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module unknown, version 0.0.0.0, fault address 0x00000000. Event ID 1000 |
| 30/06/2006 05:34:07 | Application Hang | Hanging application msnmsgr.exe, version 7.5.324.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event ID 1002 |
| 28/06/2006 19:26:14 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module graphic.dll, version 0.0.0.0, fault address 0x0000684b. Event ID 1000 |
| 28/06/2006 14:31:57 | Application Error | Faulting application serveremulator.exe, version 0.0.0.0, faulting module kernel32.dll, version 5.1.2600.2180, fault address 0x0001eb33. Event ID 1000 |
| 26/06/2006 15:06:55 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module unknown, version 0.0.0.0, fault address 0x00000000. Event ID 1000 |
| 26/06/2006 14:11:17 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module unknown, version 0.0.0.0, fault address 0x00000000. Event ID 1000 |
| 23/06/2006 20:07:21 | Application Hang | Hanging application , version 0.0.0.0, hang module NAVComUI.dll, version 10.0.10.13, hang address 0x00017fe0. Event ID 1002 |
| 14/06/2006 18:05:14 | Application Hang | Hanging application Conquer.exe, version 1.0.0.1, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event ID 1002 |
| 15/05/2006 18:28:46 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module , version 00000000, fault address 0x%5. Event ID 1000 |
| 13/05/2006 13:29:54 | Application Error | Faulting application hycam2.exe, version 2.11.0.0, faulting module hycam2.exe, version 2.11.0.0, fault address 0x00004a46. Event ID 1000 |
| 06/05/2006 16:09:22 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x0006e389. Event ID 1000 |
| 06/05/2006 16:07:59 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x0006e389. Event ID 1000 |
| 06/05/2006 16:07:54 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x0006e389. Event ID 1000 |
| 02/05/2006 17:27:58 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x0006e389. Event ID 1000 |
| 18/04/2006 15:18:47 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x000e5fa5. Event ID 1000 |
| 18/04/2006 15:12:09 | Application Error | Faulting application conquer.exe, version 1.0.0.1, faulting module conquer.exe, version 1.0.0.1, fault address 0x000e91c9. Event ID 1000 |
| 15/04/2006 01:18:57 | Application Hang | Hanging application Conquer.exe, version 1.0.0.1, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event ID 1002 |
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
  • 0

#50
wannabe1

wannabe1

    Tech Staff

  • Technician
  • 16,645 posts
You have a couple of errors that are a bit troubling as both can indicate a bad motherboard or HDD.

16/07/2006 02:06:47 | Disk | The device, \Device\Harddisk0\D, has a bad block. Event ID 7 |
15/07/2006 19:14:11 | atapi | The device, \Device\Ide\IdePort0, did not respond within the timeout period. Event ID 9 | (Lots of these)

And it looks like the download of Avast! may have had a corrupt file...it happens sometimes when downloading.

Uninstall the Avast! from Safe Mode and see if you can boot normally.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP