Windows XP Random crashes

[SpaceCrime]

Hello,

I am recently experiencing automatic restarts.

The Event Viewer shows this:

Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060005, parameter4 89460bd0.

Not technical to this level, anyone familiar how to identify the culprit. I can send minidumps if required.

Thanks in advance.

Jay.

 

[raybay]

What you see reported is the memory dump from the failure to function properly.
Look in Control Panel->System ->hardware->Device manager to see if there are any yellow or red flags showing failed operation.
Then look in Control Panel->Administrative Tools->Computer Management->Event Viewer to see what is reported there with yellow or red flags.
Usually the cause is a hard ware failure, but hard to quickly figger out what... Memory, Device Driver failure, video graphics card, modem, ethernet card, hard drive beginning to fail, CPU fan failure, CPU thermal paste is not doing the job, or it could be an infestation..
I would start by ruling out problems... First, run the 8 Steps to detect infestations that you will find elsewhere on this forum.
Then, download and run the Free MemTest86 for four hours or seven passes if it will run that long.... either you will find a memory problem, or will rule memory out as the cause...
Then go to the support site of your hard drive manufacturer to download and run their drive fitness test... everybody but Toshiba and TriGem have one...
Use a strong light to observe your cpu fan and other case fans... listen for noise, and watch for irregular movement.
Remove everything in a PCI slot that you are not using... We have seen idle components cause such problems and never be suspected since they supposedly were not running.

 

[SpaceCrime]

Thanks for the quick reply raybay, I will follow your suggestions and report back.

Jay.

 

[SpaceCrime]

Reporting back

Hi raybay,


I checked Device Manager – no red or yellow flags


As for Event Viewer, here is what I found:


Applications - Errors
1. Application Error - Event: 1001
Fault bucket 685344149.


Applications - Warnings
Event: 1517

1. Userenv (no idea)
Windows saved user HP\HP_Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.


2. System.ServiceModel.Install 3.0.0.0 (just recently updated with latest Windows framework)
Event: 0

Configuration section system.serviceModel.activation already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.




System - Errors


1. Service Control Manager (shows multiple entries – did a fix....see below)
Event 7026

The following boot-start or system-start driver(s) failed to load:
ftsata2


This one I Googled and did a fix I found as follows:

Go to Start->Control Panel->System->Hardware->Device Manager->View->Show Hidden Devices->Non Plug and Play Drivers->ftsata2->Driver->Start up Type = Demand


2. System Error (shows multiple entries- no idea-this one is of most concern)
All show Category 102 and Event ID 1003

I’ve pasted few examples and parameters 3 & 4 are different.

Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060002,
parameter4 89522948


Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060005,
parameter4 89460bd0.


Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02130002,
parameter4 8903f2a0.


Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060002,
parameter4 88eddca8.


Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060002,
parameter4 8959b3a8.

Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02130001,
parameter4 88dcde00.


I also did the 8 steps and ruled out virus/malware.

I did the memory test for 7 passes, no errors.

I downloaded the hardware diagnostic tool and did an exteneded test - no errors.

I did not notice any problems with the fan, but have not touched the PCI slot yet - not too comfortable fiddling there, I have to get someone over.

But I will attach the dumps and logs shortly (allowed after my 5th post).

Thanks again.

Jay.

 

[SpaceCrime]

Just to mention, I also updated drivers via Windows Update.

 

[SpaceCrime]

I had 2 restarts today and both were due to System Error.

The attachment will follow in next post.

 

[SpaceCrime]

Here are 3 attachments for the 8 steps virus/malware/spyware.

 

[SpaceCrime]

Here are the 2 minidumps:

Thanks,

Jay.

 

[SpaceCrime]

Hi,

I realized that the dmp file can be saved into text...so I re-attached the minidumps in plain txt.

Thanks,
Jay.

 

[peterdiva]

Uninstall Zonealarm. Use the Windows firewall while you wait to see if the crashes stop.

BugCheck C2, {7, cd4, 2060002, 89522948}
Probably caused by : vsdatant.sys ( vsdatant+476c6 )

BugCheck C2, {7, cd4, 2130002, 8921f808}
Probably caused by : ntkrpamp.exe ( nt!ExFreePoolWithTag+2a3 )

 

[SpaceCrime]

Thanks peterdiva, I have uninstalled ZA and waiting....

 

[SpaceCrime]

A month later.....

Hi peterdiva,

Just reporting back after a month and 100% certain that ZA was causing it. I did go back and reinstalled a recent updated ZA and it still crashed twice. Without the firewall I had no crashes at all.

I have attached 2 dumps from the resintall to see if there is any other conflict.

I've been using registered ZA for 4 years and never had a problem. Any suggestions for a free firewall I can use for now?

Thanks,

Jay.

 

[gbhall]

Try Comodo - recommended on this site as alternative to ZoneAlarm