[leftlanetruckin]

hi guys n gals,
here is my problem!
Out of the blue, I started getting the blue screen when opening aol. It was working flawlessly for over a year before this.
the first time it did this, i was using aol, and all of a sudden, there was the blue screen.
i removed that version of aol, and have downloaded both older versions and the most recent, no change. as soon as it tries to connect (via my aircard), it goes to the blue screen.
i have downloaded and used a couple of registry scans, no change. i swapped the ram from my wifes laptop (same make etc) to mine, no change.
I have Norton 360 premier, and it says no problems after scans. the windows defender gives me an error of "security center service is turned off", but when i try to activate it, i get "security center can't be started". i can run scans from defender, but always get the error message at startup. never did this before the blue screen.
i have changed the virtual memory settings as per a tech advise line. no change.
i got 2 cans of compressed air and used them both. i could not remove the cover for my laptop (satellite a215-s4747) so i used the air in all the openings i could find. after doing this, it did start aol and it ran fine for about an hour or so, then the same blue screen.
i have searched and searched, and everything from bad ram, to bad software comes up! i am no computer genius but do follow the instructions as best i can.
here are the messages on the blue screen of death!
"BAD_POOL_HEADER"
then warning etc.
then
"STOP: 0x00000019 (0x00000020, 0x85251320, 0x08030009)"

any ideas??
many thanks in advance, adn sorry for the long post. just figured it was best to have all the info i could provide.

Martin

[Advertisements]

Hello Martin and Welcome to Geeks to Go

i have downloaded and used a couple of registry scans,

Not a good idea.. Registry Cleaners do more bad then good and can even make a PC unbootable in the worst case.

many thanks in advance, adn sorry for the long post. just figured it was best to have all the info i could provide.

Long posts are good The more info we get, the more info we can work with!

Lets see if you have any errors in the event viewer.

• Go to Start and open Run.
• In the Box, type in eventvwr
• When the window pops up. Go to the system log and application log.
• Look for red circles with Xs in them around the time of error.
• Once you've opened the error press the button to the right with the 2 papers on it. (under the 'down' arrow)
• Please attach the information you just copied onto your next reply.

Regards,
Olrik

[Artellos]

Hello Martin and Welcome to Geeks to Go

i have downloaded and used a couple of registry scans,

Not a good idea.. Registry Cleaners do more bad then good and can even make a PC unbootable in the worst case.

many thanks in advance, adn sorry for the long post. just figured it was best to have all the info i could provide.

Long posts are good The more info we get, the more info we can work with!

Lets see if you have any errors in the event viewer.

• Go to Start and open Run.
• In the Box, type in eventvwr
• When the window pops up. Go to the system log and application log.
• Look for red circles with Xs in them around the time of error.
• Once you've opened the error press the button to the right with the 2 papers on it. (under the 'down' arrow)
• Please attach the information you just copied onto your next reply.

Regards,
Olrik

[leftlanetruckin]

Log Name: System
Source: Server
Date: 1/19/2009 12:46:29 AM
Event ID: 2505
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: martincordwe-PC
Description:
The server could not bind to the transport \Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD} because another computer on the network has the same name. The server could not start.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Server" />
<EventID Qualifiers="49152">2505</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-19T06:46:29.000Z" />
<EventRecordID>115895</EventRecordID>
<Channel>System</Channel>
<Computer>martincordwe-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD}</Data>
<Binary>34000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Server
Date: 1/19/2009 12:46:29 AM
Event ID: 2505
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: martincordwe-PC
Description:
The server could not bind to the transport \Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD} because another computer on the network has the same name. The server could not start.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Server" />
<EventID Qualifiers="49152">2505</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-19T06:46:29.000Z" />
<EventRecordID>115895</EventRecordID>
<Channel>System</Channel>
<Computer>martincordwe-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD}</Data>
<Binary>34000000</Binary>
</EventData>
</Event>

is that what i was supoised to do mate? there was no thing with 2 papers on it under the down arrow!!
i hope this is the right info, if not i will try again. i just made it do it again, adn that is the most current info. its real easy to make it give me the bsod, just open and try to connect via aol...lol
thanks again
martin

[Artellos]

Yea, that is what I was looking for

It appears that another device on the network has the same name as this computer, is this correct?
You might want to make sure that all your devices have different names on the network.

To do this, Open the Start Menu and Right click Computer
Then select Properties
To the right of the screen that now shows up is a link Change settings, click that and confirm the UAC.
Then push the bottom of the 2 buttons that are now shown (Change...) and change the computer name.

Regards,
Olrik

[leftlanetruckin]

many thanks again!
unfortunately, it did the same thing, here are the current messages i got by following you instructions...

Log Name: System
Source: Server
Date: 1/19/2009 6:41:48 PM
Event ID: 2505
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: laptop
Description:
The server could not bind to the transport \Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD} because another computer on the network has the same name. The server could not start.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Server" />
<EventID Qualifiers="49152">2505</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T00:41:48.000Z" />
<EventRecordID>116319</EventRecordID>
<Channel>System</Channel>
<Computer>laptop</Computer>
<Security />
</System>
<EventData>
<Data>\Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD}</Data>
<Binary>34000000</Binary>
</EventData>
</Event>

here is another message from the same time if this helps? this was also in red...

Log Name: System
Source: Service Control Manager
Date: 1/19/2009 6:41:36 PM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: laptop
Description:
The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T00:41:36.000Z" />
<EventRecordID>116315</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>laptop</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">WinHTTP Web Proxy Auto-Discovery Service</Data>
<Data Name="param2">running</Data>
</EventData>
</Event>
as you can see, i changed the laptops name, from my personal name to "laptop".
other ideas?
many thanks
martin

Edited by leftlanetruckin, 19 January 2009 - 06:47 PM.

[Artellos]

Hello again martin!

Lets try something else.
Open up your start menu and type cmd in the white box.
Right click the cmd.exe entry that appears and Run as Administrator
In the black box, type chkdsk /r
Confirm by pressing Y then reboot the machine.
NOTE: This could take a while as it is a thorough check.

Regards,
Olrik

[leftlanetruckin]

ok, did all that. it rebooted and i tried opening aol, same result!
i now also have this error on boot up, appears on the desk top in a warning box
"device driver software was not succesfully installed.

microsoft 6to4 adapter #43 Failed."

and here is the latest result from eventvwr.

Log Name: System
Source: Service Control Manager
Date: 1/20/2009 12:06:53 PM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: truckslaptop
Description:
The Windows Image Acquisition (WIA) service depends on the Shell Hardware Detection service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T18:06:53.000Z" />
<EventRecordID>117094</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>truckslaptop</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Image Acquisition (WIA)</Data>
<Data Name="param2">Shell Hardware Detection</Data>
<Data Name="param3">%%1058</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 1/20/2009 12:05:54 PM
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: truckslaptop
Description:
DCOM got error "1068" attempting to start the service stisvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T18:05:54.000Z" />
<EventRecordID>117087</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>truckslaptop</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1068</Data>
<Data Name="param2">stisvc</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{A1F4E726-8CF1-11D1-BF92-0060081ED811}</Data>
</EventData>
</Event>

Log Name: System
Source: Server
Date: 1/20/2009 12:06:01 PM
Event ID: 2505
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: truckslaptop
Description:
The server could not bind to the transport \Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD} because another computer on the network has the same name. The server could not start.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Server" />
<EventID Qualifiers="49152">2505</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T18:06:01.000Z" />
<EventRecordID>117089</EventRecordID>
<Channel>System</Channel>
<Computer>truckslaptop</Computer>
<Security />
</System>
<EventData>
<Data>\Device\NetBT_Tcpip_{93B77B57-C193-407D-BC3F-25893FD750BD}</Data>
<Binary>34000000</Binary>
</EventData>
</Event>

this is driving me nuts...lol
there are other errors from today aswell, but they are mainly not in red.
thanks again, welcome to my world of windows....hehehe

martin

[Artellos]

Lets check if the File and Printer Sharing is enabled or not.

Open Start and type Network and Sharing into the white box.
Select the Network and Sharing Center
In the menu to the left select Manage network connections
Please right click your network adapter and select Properties
In that list, can you find File and Printer Sharing for Microsoft Networks and is it enabled or disabled?

Also, a bit of a long shot.
Please hit CTRL + SHIFT + ESC.
Open the Processes tab.
Is the process stisvc in that list?

Regards,
Olrik

[leftlanetruckin]

hiya Olrik!
file and printer sharing has the box checked, so i assume it is enabled mate.
stisvc is NOT in processes within the task manager. not listed.

many thanks again

martin

[Artellos]

Indeed, File and Printer Sharing seems to be on.

Lets go a bit deeper on that stisvc.

Lets see what we can find out about that service.

• Go to Start and in the white box, type cmd.
• A black box will appear. Type: sc query stisvc
• Information will appear, Please right click the black window and select all.
• Hit Enter to copy the text.
• Then paste it into your next reply.

Regards,
Olrik

Edited by Artellos, 22 January 2009 - 10:49 PM.

[leftlanetruckin]

here we go....
i hope this makes more sence to you than it does to me mate! lol

Microsoft Windows [Version 6.0.6001]
Copyright © 2006 Microsoft Corporation. All rights reserved.

C:\Users\martin cordwell>sc query stisvc

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Users\martin cordwell>


thanks again olrik!

martin

[Artellos]

Hey martin,

It certainly does
I want to explore this further.

Open notepad by going to Start and type notepad in the white box that appears. In the window that pops up please copy and paste the following

@ECHO off
sc query stisvc >> C:\explore.txt
echo. >> C:\explore.txt
sc qc stisvc >> C:\explore.txt
echo. >> C:\explore.txt
sc qdescription stisvc >> C:\explore.txt
echo. >> C:\explore.txt
sc qfailure stisvc >> C:\explore.txt
echo. >> C:\explore.txt
sc qfailureflag stisvc >> C:\explore.txt
exit

In Notepad click on the File then click Save As... Under File name type explore.bat and Change Save as type to All Files, save it to a place you will remember.



Then right click on explore.bat and hit Run as Administrator
And please copy the contents of C:\explore.txt into your next post

Regards,
Olrik

Edited by Artellos, 25 January 2009 - 08:28 AM.

[leftlanetruckin]

when i try to open the file from where it saved it, i click run as administrator, then a black box pops up and then disappears before i can read it!
so i did a search for c:\explore.txt in the search box, and copy n pasted that window, so i hope it is right!
see if this makes sense to you mate...

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k imgsvc
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Image Acquisition (WIA)
DEPENDENCIES : RpcSs
: ShellHWDetection
SERVICE_START_NAME : NT Authority\LocalService

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
DESCRIPTION: Provides image acquisition services for scanners and cameras

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
RESET_PERIOD (in seconds) : 0
REBOOT_MESSAGE :
COMMAND_LINE :


[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k imgsvc
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Image Acquisition (WIA)
DEPENDENCIES : RpcSs
: ShellHWDetection
SERVICE_START_NAME : NT Authority\LocalService

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
DESCRIPTION: Provides image acquisition services for scanners and cameras

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
RESET_PERIOD (in seconds) : 0
REBOOT_MESSAGE :
COMMAND_LINE :


[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k imgsvc
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Image Acquisition (WIA)
DEPENDENCIES : RpcSs
: ShellHWDetection
SERVICE_START_NAME : NT Authority\LocalService

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
DESCRIPTION: Provides image acquisition services for scanners and cameras

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
RESET_PERIOD (in seconds) : 0
REBOOT_MESSAGE :
COMMAND_LINE :


[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: stisvc
TYPE : 10 WIN32_OWN_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k imgsvc
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Image Acquisition (WIA)
DEPENDENCIES : RpcSs
: ShellHWDetection
SERVICE_START_NAME : NT Authority\LocalService

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
DESCRIPTION: Provides image acquisition services for scanners and cameras

[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
RESET_PERIOD (in seconds) : 0
REBOOT_MESSAGE :
COMMAND_LINE :


[SC] QueryServiceConfig2 SUCCESS

SERVICE_NAME: stisvc
FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE



martin

[Artellos]

Hey Martin,

Thanks for your detailed report, I shall adjust my canned speech to be more specific of what will happen.
The black screen was supposed to open and close quickly and you only needed to run it once

Open Start and type services.msc
In the list, find Windows Image Acquisition (WIA) and open it.
Then please list me what you can find in the box that says Start parameters:

Regards,
Olrik

[leftlanetruckin]

thanks for the basic english olrik! i need all the help i can get mate......lol

the box that has start parameters to the immediate left of it is blank.
service status is stopped.

many thanks
martin