My PC blue screens a lot!

I would be grateful for advice.
From having a stable xp system I have had a month of continual crashing. I thought it coincided with upgrading Bullguard antivirus to version5. I could always guarantee a crash if I did a virus scan. I removed Bullguard and things improved. I thought Outlook was causing problems so I re-installed a few times with no improvement.
The error messages from MS crash analysis always say either device driver problem or more commonly hardware failure.
I can now 'order' a crash by using windows media player 10 especially if I scan for media files.
I suspect this is a hardware problem and did change my cpu cooler as this was the problem a few years ago with win98.

Any hints as to what to do? Will posting a hijack log help? I run spybot, ad-aware and giant detectors and they seem to work well. CW shredder does its job occasionally.

Thanks a lot

Simon F

Greetings doctorf,

Can you post exact errors or have you researched them all yourself?

Have you turned off your auto restart in order to obtain error messages?

rt. click My Computer then click Properties then Advanced then Startup and Recovery Settings then unclick Automatically restart

Have you checked the Event Viewer?
event viewer: rt. click My Computer then click Manage then Event Viewer.
open the system as well as the application tabs & look for X errors. click error line for details. post back the source & event id especially of errors that seem to coincide with a crash.

Are you able to run a Virus Scan?

If you want to post a hijack this log:
please follow owen's Instructions and then post your log in the Spyware, Adware, Viruses and HijackThis Logs section.

jephree - I didn't expect such a lightening response!!

I'll try all you suggest on my return from work and try to post again before I go on hols for a week soon!
Wow - I thought this forum looked good but I wasn't expecting a reply within 10 minutes!!

Simon F

These are this mornings event errors which were associated with a crash. I can post more if required!!
I am now using AVG Free which scans with no problems. I should also point out that I have not run Norton on this pc for years but the recycle bin still has a reference to Norton Unerase wizard!


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 03/03/2005
Time: 07:13:40
User: N/A
Computer: BAHAMOOT
Description:
Error code 0000009c, parameter1 00000000, parameter2 8054da70, parameter3 c478c000, parameter4 00000136.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 34 64 61 37 30 8054da70
0040: 2c 20 63 34 37 38 63 30 , c478c0
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 31 33 36 0136 Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 03/03/2005
Time: 07:13:11
User: N/A
Computer: BAHAMOOT
Description:
Error code 0000009c, parameter1 00000000, parameter2 8054da70, parameter3 c478c000, parameter4 00000136.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 34 64 61 37 30 8054da70
0040: 2c 20 63 34 37 38 63 30 , c478c0
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 31 33 36 0136 Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 03/03/2005
Time: 07:12:35
User: N/A
Computer: BAHAMOOT
Description:
The Norton Unerase Protection service failed to start due to the following error:
The system cannot find the path specified.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7003
Date: 03/03/2005
Time: 07:12:35
User: N/A
Computer: BAHAMOOT
Description:
The BullGuard Scan Server service depends on the following nonexistent service: XCOMM

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 03/03/2005
Time: 07:13:40
User: N/A
Computer: BAHAMOOT
Description:
Error code 0000009c, parameter1 00000000, parameter2 8054da70, parameter3 c478c000, parameter4 00000136.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 34 64 61 37 30 8054da70
0040: 2c 20 63 34 37 38 63 30 , c478c0
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 31 33 36 0136 Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 03/03/2005
Time: 07:13:11
User: N/A
Computer: BAHAMOOT
Description:
Error code 0000009c, parameter1 00000000, parameter2 8054da70, parameter3 c478c000, parameter4 00000136.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 30 30 30 30 30 30 39 0000009
0020: 63 20 20 50 61 72 61 6d c Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 30 30 2c 20 000000,
0038: 38 30 35 34 64 61 37 30 8054da70
0040: 2c 20 63 34 37 38 63 30 , c478c0
0048: 30 30 2c 20 30 30 30 30 00, 0000
0050: 30 31 33 36 0136 Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 03/03/2005
Time: 07:12:35
User: N/A
Computer: BAHAMOOT
Description:
The Norton Unerase Protection service failed to start due to the following error:
The system cannot find the path specified.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7003
Date: 03/03/2005
Time: 07:12:35
User: N/A
Computer: BAHAMOOT
Description:
The BullGuard Scan Server service depends on the following nonexistent service: XCOMM

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

sorry about the size of the last post!
I'm having second thoughts about whether this mornings errors actually caused a blue screen. When they occur frequently you tend to forget what is what!
I have plenty of other errors in the system log so just tell me if any others are needed.
Thanks a lot

Simon F

The errors re: norton protected bin & bullguard seem uneventful other than they are not working.

Detail of BullGuard XComm ( XCOMMSVR.EXE )
http://www.windowsstartup.com/wso/detail.php?id=377

The Norton Unerase Protection service failed to start due to the following error:
The system cannot find the path specified.

If you uninstalled the bull & or norton it is probably just a leftover startup attempt not finding the deleted program. You can complete any uninstall by running a "search" for all files & folders "left-over" from that program.
Norton is very hard to uninstall without their uninstallation programs. What version was it? Also helps to use a good registry cleaner after uninstallations.

As to the Fatal Error:

system 1003 Error code 0000009c = "MACHINE_CHECK_EXCEPTION" - This indicates that a fatal machine check exception has occurred. See also Q162363 and error code 0x0000009c.

0x0000009C: MACHINE_CHECK_EXCEPTION

This is a hardware issue: an unrecoverable hardware error has occurred. The parameters have different meanings depending on what type of CPU you have but, while diagnostic, rarely lead to a clear solution. Most commonly it results from overheating, from failed hardware (RAM, CPU, hardware bus, power supply, etc.), or from pushing hardware beyond its capabilities (e.g., overclocking a CPU).

This program "everest" has some heat sencing capabilities depending on your particular hardware. Try it to check your temps. Look under: Computer > Sensor

http://www.lavalys.com/products/over...ng=en&pageid=1

Do you get this system 1003 Error code 0000009c at every crash?

Do you see any other "Fatal" errors?

jephree
many thanks for your reply.
I'm pretty sure you're right about a hardware problem but I can't work out what it is.
Everest suggests normal temps.
I have replaced my power supply and cpu cooler.
Memtest 68 suggests the memory is OK. The cpu is not overclocked.
Not all errors seem to be 1003 although I'm not sure what the other values mean. I will post other error readings if they would be of use to you.
Could it be the motherboard??

Thanks again

Simon F

Any errors that coincide with a freeze or crash would be helpfull.

Here is another error viewing source:

[1] Start Menu
[2] Help and Support
[3] Pick a Task
[4] Tools
[5] Advanced System Information
[6] View the Error Log

Also run chkdsk:

start > run > cmd
in the new window type chkdsk/f
when prompted to run on boot choose Y & reboot
this will check for & fix any disk errors.

Also:
What board do you have? Info should be in Everest.

Thanks again!
These are todays errors
04 March 2005 smtpsvc None
04 March 2005 smtpsvc None
04 March 2005 nview_info None
04 March 2005 smtpsvc None
04 March 2005 smtpsvc None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 smtpsvc None
04 March 2005 smtpsvc None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 nview_info None
04 March 2005 smtpsvc None
04 March 2005 smtpsvc None

Motherboard Name Soltek SL-75DRV5

These are 2 error logs from 2 crashes tonight. I wasn't doing much at the time,

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 04/03/2005
Time: 19:24:38
User: N/A
Computer: BAHAMOOT
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 04/03/2005
Time: 19:24:38
User: N/A
Computer: BAHAMOOT
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 04/03/2005
Time: 19:24:11
User: N/A
Computer: BAHAMOOT
Description:
The Norton Unerase Protection service failed to start due to the following error:
The system cannot find the path specified.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7003
Date: 04/03/2005
Time: 19:24:11
User: N/A
Computer: BAHAMOOT
Description:
The BullGuard Scan Server service depends on the following nonexistent service: XCOMM

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 04/03/2005
Time: 19:24:08
User: N/A
Computer: BAHAMOOT
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 04/03/2005
Time: 19:24:08
User: N/A
Computer: BAHAMOOT
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 04/03/2005
Time: 19:24:08
User: N/A
Computer: BAHAMOOT
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 04/03/2005
Time: 19:24:08
User: N/A
Computer: BAHAMOOT
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Print
Event Category: None
Event ID: 19
Date: 04/03/2005
Time: 19:24:06
User: NT AUTHORITY\SYSTEM
Computer: BAHAMOOT
Description:
Sharing printer failed + 1722, Printer HP DeskJet 950C/952C/959C share name Printer2.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 04/03/2005
Time: 19:13:51
User: N/A
Computer: BAHAMOOT
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 04/03/2005
Time: 19:13:51
User: N/A
Computer: BAHAMOOT
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 04/03/2005
Time: 19:13:37
User: N/A
Computer: BAHAMOOT
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 15 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 04/03/2005
Time: 19:13:37
User: N/A
Computer: BAHAMOOT
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 04/03/2005
Time: 19:13:37
User: N/A
Computer: BAHAMOOT
Description:
The Norton Unerase Protection service failed to start due to the following error:
The system cannot find the path specified.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 04/03/2005
Time: 19:13:37
User: N/A
Computer: BAHAMOOT
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 04/03/2005
Time: 19:13:37
User: N/A
Computer: BAHAMOOT
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7003
Date: 04/03/2005
Time: 19:13:37
User: N/A
Computer: BAHAMOOT
Description:
The BullGuard Scan Server service depends on the following nonexistent service: XCOMM

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Very sorry for such a long post.
I am very grateful to you for your help,

Simon F

The w32time errors will not cause a system crash. In fact, other than not being able to update your PC's time by getting a time tic from a time server, it will have zero effect on the system.

Still, no sense in letting that particular error keep showing up so I'd suggest one of two things:
1. configure your PC to look for an internet time server that exists and if you are on dial-up, to do so at a time when you will probably be on line
2. stop and disable the w32time service

You can try the settings via Control Panel > Date & Time > Internet Time
or:
http://www.windowsbbs.com/showthread.php?t=41108

Also just to simplify things let's try to get rid of BullGuard & Norton.

Start > Search > bullguard
also: XCOMMSVR.EXE
delete all finds & then empty your recycling bin.

What version of Norton were you running?
We can search Symantec for removal software.