TechSpot

Windows XP Random crashes

By SpaceCrime
Feb 2, 2009
  1. Hello,

    I am recently experiencing automatic restarts.

    The Event Viewer shows this:

    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060005, parameter4 89460bd0.

    Not technical to this level, anyone familiar how to identify the culprit. I can send minidumps if required.

    Thanks in advance.

    Jay.
     
  2. raybay

    raybay TS Evangelist Posts: 7,241   +9

    What you see reported is the memory dump from the failure to function properly.
    Look in Control Panel->System ->hardware->Device manager to see if there are any yellow or red flags showing failed operation.
    Then look in Control Panel->Administrative Tools->Computer Management->Event Viewer to see what is reported there with yellow or red flags.
    Usually the cause is a hard ware failure, but hard to quickly figger out what... Memory, Device Driver failure, video graphics card, modem, ethernet card, hard drive beginning to fail, CPU fan failure, CPU thermal paste is not doing the job, or it could be an infestation..
    I would start by ruling out problems... First, run the 8 Steps to detect infestations that you will find elsewhere on this forum.
    Then, download and run the Free MemTest86 for four hours or seven passes if it will run that long.... either you will find a memory problem, or will rule memory out as the cause...
    Then go to the support site of your hard drive manufacturer to download and run their drive fitness test... everybody but Toshiba and TriGem have one...
    Use a strong light to observe your cpu fan and other case fans... listen for noise, and watch for irregular movement.
    Remove everything in a PCI slot that you are not using... We have seen idle components cause such problems and never be suspected since they supposedly were not running.
     
  3. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Thanks for the quick reply raybay, I will follow your suggestions and report back.

    Jay.
     
  4. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Reporting back

    Hi raybay,


    I checked Device Manager – no red or yellow flags


    As for Event Viewer, here is what I found:


    Applications - Errors
    1. Application Error - Event: 1001
    Fault bucket 685344149.


    Applications - Warnings
    Event: 1517

    1. Userenv (no idea)
    Windows saved user HP\HP_Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

    This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.


    2. System.ServiceModel.Install 3.0.0.0 (just recently updated with latest Windows framework)
    Event: 0

    Configuration section system.serviceModel.activation already exists in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Config\machine.config.




    System - Errors


    1. Service Control Manager (shows multiple entries – did a fix....see below)
    Event 7026

    The following boot-start or system-start driver(s) failed to load:
    ftsata2


    This one I Googled and did a fix I found as follows:

    Go to Start->Control Panel->System->Hardware->Device Manager->View->Show Hidden Devices->Non Plug and Play Drivers->ftsata2->Driver->Start up Type = Demand


    2. System Error (shows multiple entries- no idea-this one is of most concern)
    All show Category 102 and Event ID 1003

    I’ve pasted few examples and parameters 3 & 4 are different.

    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060002,
    parameter4 89522948


    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060005,
    parameter4 89460bd0.


    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02130002,
    parameter4 8903f2a0.


    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060002,
    parameter4 88eddca8.


    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02060002,
    parameter4 8959b3a8.

    Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 02130001,
    parameter4 88dcde00.


    I also did the 8 steps and ruled out virus/malware.

    I did the memory test for 7 passes, no errors.

    I downloaded the hardware diagnostic tool and did an exteneded test - no errors.

    I did not notice any problems with the fan, but have not touched the PCI slot yet - not too comfortable fiddling there, I have to get someone over.

    But I will attach the dumps and logs shortly (allowed after my 5th post).

    Thanks again.

    Jay.
     
  5. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Just to mention, I also updated drivers via Windows Update.
     
  6. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    I had 2 restarts today and both were due to System Error.

    The attachment will follow in next post.
     
  7. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Here are 3 attachments for the 8 steps virus/malware/spyware.
     
  8. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Here are the 2 minidumps:

    Thanks,

    Jay.
     
  9. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Hi,

    I realized that the dmp file can be saved into text...so I re-attached the minidumps in plain txt.

    Thanks,
    Jay.
     
  10. peterdiva

    peterdiva TechSpot Ambassador Posts: 1,088

    Uninstall Zonealarm. Use the Windows firewall while you wait to see if the crashes stop.

    BugCheck C2, {7, cd4, 2060002, 89522948}
    Probably caused by : vsdatant.sys ( vsdatant+476c6 )

    BugCheck C2, {7, cd4, 2130002, 8921f808}
    Probably caused by : ntkrpamp.exe ( nt!ExFreePoolWithTag+2a3 )
     
  11. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    Thanks peterdiva, I have uninstalled ZA and waiting....
     
  12. SpaceCrime

    SpaceCrime TS Rookie Topic Starter Posts: 19

    A month later.....

    Hi peterdiva,

    Just reporting back after a month and 100% certain that ZA was causing it. I did go back and reinstalled a recent updated ZA and it still crashed twice. Without the firewall I had no crashes at all.

    I have attached 2 dumps from the resintall to see if there is any other conflict.

    I've been using registered ZA for 4 years and never had a problem. Any suggestions for a free firewall I can use for now?

    Thanks,

    Jay.
     
  13. gbhall

    gbhall TechSpot Chancellor Posts: 2,425   +77

    Try Comodo - recommended on this site as alternative to ZoneAlarm
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...