Application popup: : Machine Check: Regs

[sea69]

the above topic was cut and paisted from winXP Pro event viewer.

This is viewed after the system rebooted (mini dump??) all on it's own.


This was followed by an event:"Uniprocessor", and then :"The SymEvent service was successfully sent a start control."

followed by:"The ScriptBlocking Service service entered the stopped state."

and then:"The Remote Access Auto Connection Manager service was successfully sent a start control."

then: "The Norton Unerase Protection Driver service was successfully sent a start control."

what is Machine Check reg??

GH, anyone have some thoughts??

this just started happening recently, and will cause a reboot at random times all by itself.

It doesn't make a difference as to what I may be doing at the time, the macine can even be idle completely.




------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)

[Rick]

I haven’t seen this on my system (yet) ,
That doesn’t mean it hasn’t happened.

Do you know If it creates an entry in the system event log file?


------------------
To ERR is HUMAN
To REALLY screw things UP, YOU NEED a COMPUTER !

[sea69]

probably a result of my tweaking............ but would like to know.

http://www.PCGuide.com/ubb/wink.gif



------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)

[Rick]

I just followed the system event log for this bootup.
Some of the same events are listed.
Except for the The Remote Access Auto Connection Manager

My logs look much the same as your post.
I disabled the remote access and auto update first thing after the install of XP pro.

I would also like to know why script blocking in “Stopped”
it is set to autostart and it was, But why and what is telling it to stop?

------------------
To ERR is HUMAN
To REALLY screw things UP, YOU NEED a COMPUTER !

[sea69]

I have remote access disabled as well as as "restart on bad event" (or whatever it's called)

http://www.PCGuide.com/ubb/eek.gif

you have "Machine Check, and Uniprocessor"??



------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)

[Rick]

From the time I Boot up
The following is what is listed Component Services , Event Viewer (local). system.
Application Popup :Machine Check Regs
Application Popup :Machine Check
Application Popup :Machine Check Regs
Application Popup :Machine Check
EventLog Eventlog service started
EventLog Microsoft (R) 2600 Uniprocessor Free
Service Control Manager (NLA) service entered the running state
Service Control Manager (NLA) service was successfully sent a start control

Followed by 7 more “Service Control Manager” listings including
SSDP.MGADG,NAVAP,NAVEX15,NAVEX15,NAVENG,FASTUSER Switch
The time stamps show it takes a full 2 minutes to complete. ( XP is supposed to boot faster? Isn’t it)

I should also Note that the USER listed for all the process’s from the 1st item till the first Service Control Manager Entered Running State Is Shown as N/A
Everything after that point is listed as User =System


------------------
To ERR is HUMAN
To REALLY screw things UP, YOU NEED a COMPUTER !

[sea69]

thanks Rick, for your replies, this makes me feel somewhat better but still confused as to why the 'spontaneous' reboots all by itself.

it isn't frequent but annoying for no reason... still investigating- must be a setting I changed.

http://www.PCGuide.com/ubb/wink.gif



------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)

[Ghost_Hacker]

Most of what your seeing is normal "startup" chatter. What you'll want to look at is what is written to the eventlog before your system reboots. The "event id","type", and "source" is what you'll want to make a note of. Types that are marked as "error" and "warning" should be investgated further. If there are no error or warnings then you should go into the control panel and open the system icon. Click "advance" and then "startup and recovery". Deselect the option to "automatically restart". Now when your system "dies" you'll get a blue screen that, hopefully, will contain some clues as to what is causing your problem.

After some research I found that the "machine check" your seeing in your event logs is an XP process that checks your hardware (Sorry, not a earth shattering relevation http://www.PCGuide.com/ubb/smile.gif )The most common cause is device conflicts or bad drivers.


To troubleshoot "scriptblocking" check it's "dependences" in the "services" icon. This may give you some idea why it doesn't start. It's also possible that it runs only when called by someother part of Norton Anti-virus. Another idea gleamed from researching other newsgroups is to install the update to the "blocking" service.


Good Luck http://www.PCGuide.com/ubb/smile.gif



[This message has been edited by Ghost_Hacker (edited 01-30-2002).]

[sea69]

thanks for replying GH!!!

next time this happens I will note the event log and post it!

http://www.PCGuide.com/ubb/wink.gif



------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)

[ranchdog]

And then un-install XP?

hehehe.


http://www.PCGuide.com/ubb/smile.gif

------------------
....How long is a minute... depends on which side of the Bathroom door you're on. ......
..........

[sea69]

never


(possible hardware problem??)

or something I tweaked out of wack..

maybe a reinstall............

but un-install->> go back to win9x??...not


http://www.PCGuide.com/ubb/wink.gif


------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)



[This message has been edited by sea69 (edited 01-30-2002).]

[Rick]

I’ve reviewed all my logs.
There are no errors in regard to Script blocking .
No Dependancies listed. Even when using the Start service button after double clicking the item in services it will start then stop again?
Time to dig into this one on Nortons Faq.

In regard to the errors and warning listed in My log.
I have the same 4 errors Over and over again.
These 2 are server issues
Dcom ( a server)
MrxSmb ( Redirector failed to determine connection type)

These 2 pop up Every time I turn on the Power switch to my speakers

Warning Tcpip ( System detected that network adapter \device\tcpip_(ab2c6785-1f9e-4e5c-0e3cbab37712)
Warning Dhcp Your computer was unable to renew its address from the network (from Dhcp server) The following error occurred The Semaphore Time Out period has expired..


Using the trouble shooting Button in the log after double clicking the error message.
I get the same message from the MS help and support site. Were Sorry No Info

------------------
To ERR is HUMAN
To REALLY screw things UP, YOU NEED a COMPUTER !

[sea69]

in System;

I get warnings :dhcp

"Your computer has automatically configured the IP address for the Network Card with network address 0010B55BXEFA. The IP address being used is 199.214.1x1.2x2."

and Errors;

"The Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) service depends on the Application Layer Gateway Service service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it."

and "true Vector" (zonealarm errors a lot.

in Application: errors-

True Vector Service, True Vector Engine

a bunch of these

warnings: Userenv

"Windows saved user OEM-\sea1 registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account."

Winmgmt:

this again:

"A provider, OffProv, has been registered in the WMI namespace, Root\MSAPPS, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests."

I had gotten rid of this before.

http://www.PCGuide.com/ubb/eek.gif

------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)

[Ghost_Hacker]

The Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) service ...

You must have the "application layer gateway service " turned off or have disabled someother service that would use it. I get the same error on my XP system when I try to look at it's dependencies because I've disabled the ICF/ICS service. However, it does startup in manual mode just fine.


: Userenv...

Another common one, Userenv manages Group policy in XP (IE: your profile)
When you shut down your computer it will give this warning if another application you've started hasn't yet shut down by the time it goes thru it's "cleanup" phase.


DHCP...

This one is because a DHCP server didn't answer XP's call for an address assignment,so it assigned one to itself. However the address it assigns itself should be in the 169.x.x.x range. I have never seen it assign an address like "199.214.1x1.2x2" before. Sea what is the eventid your getting with this warning and is the network card setup for DHCP?

Dcom

Another common one, Alot of services are started by DCOM so disabling anyone of them can cause this error. If you've disabled any "remote management" service you'll get this error for example. You can disable DCOM completly by using the DCOM configuration tool. Type "dcomcnfg" in the "run" window, click the "default properties" page and deselect "enable Distributed...". Please note that you should have a good idea what services your using on your system before playing with this tool.


MrxSmb

This is a bug in XP the error will be recorded under the following instances:

The first time you access a mapped drive.
Create a mapped drive to a local share.
Access a mapped drive after Windows XP comes out of "hibernation mode"
Reconnect to a disconnected mapped drive.



These 2 pop up Every time I turn on the Power switch to my speakers


hmmmmm.....Best guess would be that the network card and sound card are using the same IRQ( Hey Rick... wheren't you having this problem before?). Anyway, if I got you mistaken with someone else, you might try moving one card to another IRQ. (could be harder then it sounds http://www.PCGuide.com/ubb/smile.gif )


Sea


None of the errors your getting would cause your system to reboot. So you may have to see if you can get some info from the "blue screen of death" http://www.PCGuide.com/ubb/smile.gif



[This message has been edited by Ghost_Hacker (edited 01-31-2002).]

[sea69]

1) The Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) service ...

yes, turned off.

2) : Userenv...

ok

3) DHCP...

a- it was 169.xxx... I changed it for posting.

4) b-event id= "1007"

c-is my network card setup for Dhcp?= I haven't a clue. Remember I had/have win98se on my "C" drive and added winXP Pro to my "D" drive partition.

When installing XP, it identifies my NIC as an SMC ezcard (which it is not, it is an Accton) and I use verizon DSL.
XP found and installed my network settings and with the wizard I was able to achieve a connection effoftlessly without even using the verizon CD or winPoET.

5) Dcom- I will check dependencies!

6)MrxSmb

I don't have this.

7) These 2 pop up Every time I turn on the Power switch to my speakers

my speakers stay on all the time....?

http://www.PCGuide.com/ubb/wink.gif


------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)



[This message has been edited by sea69 (edited 01-31-2002).]

[Rick]

Ghost.
I already did the pci shuffle and have placed the Nic on it’s own IRQ and address .
It doesn’t share with anything. Below is the system share list as it stands after all the changes.

I/O Port 0x000003C0-0x000003DF VIA Tech CPU to AGP Controller
I/O Port 0x000003C0-0x000003DF Matrox Millennium G400 DualHead

IRQ 10 Adaptec AIC-7850 PCI SCSI Controller
IRQ 10 WinXP Promise Ultra100 (tm) IDE Controller (PDC20265)

Memory Address 0xE2800000-0xE3DFFFFF VIA Tech CPU to AGP Controller
Memory Address 0xE2800000-0xE3DFFFFF Matrox Millennium G400 DualHead

IRQ 9 VIA Rev 5 or later USB Universal Host Controller
IRQ 9 Creative SB Live! (WDM)

Memory Address 0xA0000-0xBFFFF VIA Tech CPU to AGP Controller
Memory Address 0xA0000-0xBFFFF Matrox Millennium G400 DualHead

I/O Port 0x000003B0-0x000003BB VIA Tech CPU to AGP Controller
I/O Port 0x000003B0-0x000003BB Matrox Millennium G400 DualHead

I have the USB completely disabled in the bios . Never use it ..
Yet windows insists on listing and activating it .
This is the same problem I had before with the SB 5.1
I was mistaken when I believed it was fixed.
What in fact happened was the POP up warnings stopped.
I turned off the Popup feature for explorer and the desktop.
In doing so I also disabled the Network warning popup.

I am beginning to think the only cure for this is to remove the SB 5.1 card when I refit this system
I will also be installing a new M/B that does Not support USB, ( It comes with a pci addin usb card)

------------------
To ERR is HUMAN
To REALLY screw things UP, YOU NEED a COMPUTER !

[Rick]

Sea
if you want to check the DHCP
Right click network Icon and then properties.
Then Right click Lan-High speed Icon. And properties again.
Then Internet protocol (Tcp/Ip) and the properties button
Under the General tab use the advanced button.
IP Settings tab IP address will list if DHCP is enabled.

There may be a quicker way to get to the info.
I just haven’t found it yet.


------------------
To ERR is HUMAN
To REALLY screw things UP, YOU NEED a COMPUTER !

[sea69]

hehe.. were're gangin' up on the GH knowlege bank!

http://www.PCGuide.com/ubb/wink.gif

Rick- how about your HID's?? these are usually usb devices.. can you disable there ??

oh, and the SB 128 PCI card works really well .

edit: I checked and DHCP is enabled.

I also found that netbios over TCP was not disabled.. I had disabled it before.. and have again.

http://www.PCGuide.com/ubb/wink.gif

------------------
sea1_69@hotmail.com

homepage (http://www.seanweb1.homestead.com/3.html)



[This message has been edited by sea69 (edited 01-31-2002).]

[Rick]

No Luck on the HID's.
None listed or active.

I'm looking more into the way the SB5.1 uses the i/o ports.
In the past they used one plug for both aug in and rear out with a software switch to enable / disable the feature.
It could be the speakers are sending a feed back to the plug.
Cheap $90 speakers causing the system to read it as nic signal (SB Wmd I/O)



[This message has been edited by Rick (edited 01-31-2002).]

[Ghost_Hacker]

Gotta make a correction....In XP the "dcomcnfg" tool looks different than in Win2k. In XP you would click the "Component services" icon,wait a little bit for it to build, then expand the "computers" folder. Right click "my computer" and then choose "properties | default properties".

Rick

You win the reward for strangest problem I've ever heard of http://www.PCGuide.com/ubb/smile.gif
When I gets a little free time I plan to do some research on your problem. I'm interested in finding out how XP determines that "this signal" is a NIC and it should try to configure it. You could be on the right track with the I/O theory.There are several recommended I/O ranges that can be shared between a sound card and a NIC. But why would XP assume it's a NIC and not a sound card or whatever??? I would think it would query the device first....Hmmmmmmmmmm.....

[Ghost_Hacker]

Rick

OK..While researching your problem I found this link:
http://www.microsoft.com/technet/treeview/default.asp?url=/tec hnet/prodtechnol/winxppro/reskit/prdh_dmt_lhfg.asp (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/reskit/prdh_dmt_lhfg.asp)

The last bit of the article explains how to see hidden and non-present devices in XP's Device Manager. Give that a try if you haven't already and see what's up.

Sea

Forgot to tell you that since your NIC is setup fo DHCP the error you're getting is normal.



[This message has been edited by Ghost_Hacker (edited 02-01-2002).]