XP keeps crashing

[pacemaker]

Hello,

My PC has recently started crashing randomly, at first it used to go completely dead at if there was a power failure and re-boot. After a virus scan (which picked up nothing) and a registry clean it now just freezes every few hours.

Does anyone have any idea how I might find out what is causing the problem?

Thank you.

 

[Bobbye]

Follow this path:
Control Panel> Administrative Tools> Event Viewer> Click on System & Apps, one at a time on the left> look for Errors on the right> right click error> Properties> note description of error, Event# and Source.

There is a "copy" button below the up/down arrows. Click that, then go to any place that allows you to type (ie. notepad, wordpad, this board) and you can paste (use CTRL-V) the entire event details there. It makes for easy reporting of the event.

If you want to paste the Event here, you do not need to include the lines of code that follow the Description- but paste all else. You will be looking for Error that occurs at the time of the crash. Please ignore Warnings.

NOTE: if you have multiple entries of the same Error with the Same ID , the Same Source and the Same Description, you only need to post one of them,

 

[pacemaker]

Thanks Bobbye. Here are the errors:

Application:

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 18/04/2008
Time: 15:42:34
User: N/A
Computer: JEREMY-2B088B96
Description:
Faulting application PQV2iSvc.exe, version 9.0.2.3981, faulting module version.dll, version 5.1.2600.2180, fault address 0x00000001.
------------------------------------------------------------
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 18/04/2008
Time: 14:32:13
User: N/A
Computer: JEREMY-2B088B96
Description:
Faulting application iexplore.exe, version 7.0.5730.11, faulting module fldbg9c.ocx, version 9.0.45.0, fault address 0x000a5520.
------------------------------------------------------------
System:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 18/04/2008
Time: 16:39:07
User: NT AUTHORITY\SYSTEM
Computer: JEREMY-2B088B96
Description:
DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service upnphost with arguments "" in order to run the server:
------------------------------------------------------------
Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 32003
Date: 18/04/2008
Time: 16:39:01
User: N/A
Computer: JEREMY-2B088B96
Description:
The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
------------------------------------------------------------
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 18/04/2008
Time: 16:37:29
User: N/A
Computer: JEREMY-2B088B96
Description:
Timeout (30000 milliseconds) waiting for the Symantec IS Password Validation service to connect.
-------------------------------------------------------------
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 18/04/2008
Time: 16:37:29
User: N/A
Computer: JEREMY-2B088B96
Description:
The Intel(R) AnyPoint(R) 3240 USB Modem Firmware Loader service failed to start due to the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
-----------------------------------------------------------------
Event Type: Error
Event Source: ati2mtag
Event Category: CRT
Event ID: 45062
Date: 18/04/2008
Time: 16:36:01
User: N/A
Computer: JEREMY-2B088B96
Description:
CRT invalid display type
------------------------------------------------------
Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 18/04/2008
Time: 16:36:11
User: N/A
Computer: JEREMY-2B088B96
Description:
The IP address lease 192.168.1.2 for the Network Card with network address 00146C09A7A8 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
-----------------------------------------------------------
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7022
Date: 18/04/2008
Time: 15:44:55
User: N/A
Computer: JEREMY-2B088B96
Description:
The KService service hung on starting.

The 1st system error seems to be the most common.

Many thanks for your help.

 

[Bobbye]

This will give you some things to work on! Suggest you handle the Services first and when through with them, Reboot:

1. Event Source: Service Control Manager, Event ID: 7009
Description: Timeout (30000 milliseconds) waiting for the Symantec IS Password Validation service to connect.
Service: Symantec Client Firewall Accounts Manager - See the link to "Symantec Knowledge Base Document ID: 2003121714401248

2. Event Source: Application Error, Event ID: 1004
Description:
Faulting application PQV2iSvc.exe, version 9.0.2.3981, faulting module version.dll, version 5.1.2600.2180, fault address 0x00000001.
PQV2iSvc.exe> part of the Norton Systemworks Suite> Norton Ghost or V2i Protector or PowerQuest Drive Image
It may be found in C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe

This problem stems form the fact that Symantec bought PowerQuest Drive Image and refielded with Symantec styled mods as Ghost 9.0 hence the .v2i image file tags and the Pqv2iSvc.exe from Drive Image now called Norton Ghost Agent. An update showed that it was using enormous amount of resources. The fix appears to be that you change the Pqv2iSvc.exe service from automatic to manual. Control Panel> Administrative Tools> Services>

3. Event Source: Application Error, Event ID: 1000
Description: Faulting application iexplore.exe, version 7.0.5730.11, faulting module fldbg9c.ocx, version 9.0.45.0, fault address 0x000a5520.
Faulting Application iexplore.exe/Faulting Module fldbg9c.ocx,
The fldbg9c.ocx, is a problem with the Adobe Flash Player v9
Look for an Adobe update and see if it resolves this problem.


4. Event Source: Service Control Manager, Event ID: 7022
Description: The KService service hung on starting> kservice.exe is a process which belongs to the Delivery Manager Service.
See the following regarding the Delivery Manager Service:
http://www.pcdoctor-guide.com/wordpress/?p=2452
I suggest that you follow the removal instructions given.

5. Event Source: ati2mtag, Event ID: 45062
Description: CRT invalid display type
As per ATI: "When a digital panel connected to the graphics card the Windows system log will show the error CRT invalid display type, the source is ati2mtag. This occurs with Catalyst 7.7 and higher. This error will not cause any issues to the system or performance. If you do not want to see the error, the workaround is to install Catalyst 7.6". See the link to "AMD Knowledge Base Topic 737-29385" for more information.

Event Source: Service Control Manager, Event ID: 7000
Description: The Intel(R) AnyPoint(R) 3240 USB Modem Firmware Loader service failed to start due to the following error:The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

This is software for the modem. You need to look in the Administrative Tools in the Control Panel> services for the Service. Once found> right click> Properties> set startup box to Automatic> Start the Service> lick ont he Dependency tab> Note what other Services this Service needs to run> find those Services and set them to at least Manual so the y can start when you bot. If any are already set to Automatic, DON'T change them!

I would appreciate it if you would let me know what works for you. Others have the same problems.

 

[Bobbye]

How the DHCP process works:
"The DHCP servers and DHCP clients communicate through a series of DHCP messages. To obtain a lease, the DHCP client initiates a conversation with a DHCP server using a series of these DHCP messages. You can watch the process with a network monitor."

DHCPNack - Broadcast by a DHCP server to a DHCP client denying the client’s DHCPRequest message. This might occur if the requested address is incorrect because the client moved to a new subnet or because the DHCP client’s lease has expired and cannot be renewed.

http://www.softwaretipsandtricks.co...0-2003/14199-hows-does-ip-get-associated.html

Here are the rest. If you note the time, it's in a cascade:

1, Event Source: Dhcp, Event ID: 1002
Date: 18/04/2008, Time: 16:36:11
Description: The IP address lease 192.168.1.2 for the Network Card with network address 00146C09A7A8 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
Try these first: 1. power cycling the router first. This frees it's memory> unplug power to router and modem, wait about 10 seconds, then reconnect..
2. open command prompt and type ipconfig /release, then type ipconfig /renew.
3 IF that doesn't handle it, go on to this- last section: http://support.microsoft.com/default.aspx?scid=kb;en-us;830525

2. Event Source: ipnathlp, Event ID: 32003
Date: 18/04/2008, Time: 16:39:01
Description:The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
View this from TechNet: http://tinyurl.com/5g8rpf

3. Event Source: DCOM, Event ID: 10005
Date: 18/04/2008, Time: 16:39:07
Description: DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service upnphost with arguments "" in order to run the server:
Control Panel> Administrative Tools> Services> right click on DCOM> Properties> startup should be set to Automatic> Start the Service> there are no Dependencies.

Most likely, when #1 is handled, the rest will fall into place.