View Full Version : Win 2000 Pro (SP4) keeps re-booting itself


clueless1
02-11-2008, 02:44 PM
Hi! My desktop running Win 2000 Pro (SP4) keeps re-booting itself. Does anyone know what errors these messages refer to and what I need to do to correct the problem(s)? The event logs have read as follows the last 3 times it has re-booted itself:

Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 2/9/2008
Time: 5:09:39 AM
User: N/A
Computer: US-626W9JNE9M91
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0xff5feebc, 0x00000002, 0x00000000, 0xeb651423). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini020908-01.dmp.

Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 2/10/2008
Time: 7:20:49 PM
User: N/A
Computer: US-626W9JNE9M91
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0xfe53cb3c, 0x00000002, 0x00000000, 0xeb661423). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini021008-01.dmp.

Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 2/11/2008
Time: 9:08:20 AM
User: N/A
Computer: US-626W9JNE9M91
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0xff6067fc, 0x00000002, 0x00000000, 0xeb651423). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini021108-01.dmp.

Thanks for any help you can offer!!

Gizmokid2005
02-11-2008, 03:21 PM
Can you be more specific? What exactly are you doing on the computer when it reboots? Have you recently added/changed/removed any hardware or software?

clueless1
02-11-2008, 03:37 PM
Generally, it's when I'm doing a backup or a virus scan

No new hardware. I had recently added some software, so I used Revo Uninstaller to remove the software and its registry entries. The problem remains.

Thanks very much for your reply!

Gizmokid2005
02-11-2008, 03:42 PM
Preliminarily it sounds like the hard drive may be going bad. The whole drive may not be bad, but it could be some bad sectors.

Try doing a scandisk/checkdisk and see what that finds.

PhilliePhan
02-11-2008, 03:50 PM
Try doing a scandisk/checkdisk and see what that finds.

In addition to doing the above, please attach the C:\WINNT\Minidump\Mini020908-01.dmp

PP :)

clueless1
02-11-2008, 06:40 PM
Hi,

Attached is C:\WINNT\Minidump\Mini020908-01.dmp

I have also run the CHKDSK.

Thanks!

PhilliePhan
02-11-2008, 08:55 PM
Attached is C:\WINNT\Minidump\Mini020908-01.dmp
I have also run the CHKDSK.

Well . . Drat. For some reason, I no longer have dumpchk.exe on my computer, so I can't open that. Maybe one of the other members has it handy?

Anyhoo, how did the chkdsk go?
I have a feeling this might be more a driver or hardware issue than a hard drive problem.

If you are able to stop the machine from rebooting, you might be able to get more info on the exact nature of the problem.

If you RightClick My Computer > Properties > Advanced > Startup & Recovery and look under "System Failure" and Uncheck the box to "Automatically Restart."
Be sure any other boxes pertaining to the writing of the reports are checked.
Let's see if that produces more info....

pp :)

clueless1
02-11-2008, 10:22 PM
Thanks, PhilliePhan! I'll wait for the next meltdown!:banghead:

PhilliePhan
02-12-2008, 04:15 PM
Thanks, PhilliePhan! I'll wait for the next meltdown!:banghead:

Sorry I can't be more help . . . These errors can be a pain to narrow down.If you have your Windows CD, there should be a copy of dumpchk.exe on it and you could analyze the minidump... I spent 20 minutes at lunch today looking for my Windows CD, LOL! I haven't a clue where I put it!

NT/2000 Event logs contain 5 types of events:
Information - An event that describes the successful operation of an application, driver, or service. For example, when a network driver loads successfully, an Information event will be logged.

-- You mentioned this occurs after AV scan. Are you using Norton?
http://service1.symantec.com/SUPPORT/ent-security.nsf/pfdocs/2002071208532048

I definitely think this is driver-related as opposed to a bad hard drive, for what that is worth.

PP :)

Gizmokid2005
02-12-2008, 04:51 PM
I'll see if I can find my win2k iso....if I do, I'll send you the file PP. I make no guarantees though.

PhilliePhan
02-12-2008, 05:14 PM
I'll see if I can find my win2k iso....if I do, I'll send you the file PP. I make no guarantees though.

Thanks . . . But my personal compy is XP. :dancinge:
And, the one I use for most work is, gasp, ME. LOL!

I could probably dl dumpchk.exe from M$, I suppose....

Gizmokid2005
02-12-2008, 05:16 PM
Thanks . . . But my personal compy is XP. :dancinge:
And, the one I use for most work is, gasp, ME. LOL!

I could probably dl dumpchk.exe from M$, I suppose....
So is mine, but with the ISO I would have the CD and might be able to find dumpchk. :)

PhilliePhan
02-12-2008, 05:30 PM
So is mine, but with the ISO I would have the CD and might be able to find dumpchk. :)

That'd be cool if you could attach dumpchk.exe for us :)

Gizmokid2005
02-12-2008, 05:43 PM
I'll see what I can do.

Check this link (http://thesource.ofallevil.com/downloads/details.aspx?FamilyId=49AE8576-9BB9-4126-9761-BA8011FABF38&displaylang=en) PP it might help.

PhilliePhan
02-12-2008, 07:00 PM
this link (http://thesource.ofallevil.com/downloads/details.aspx?FamilyId=49AE8576-9BB9-4126-9761-BA8011FABF38&displaylang=en) PP it might help.
Thanks, but I found my XP CD. Took a while though. Sure did not want to be without that...... LOL!

----- 32 bit Kernel Mini Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000893
DirectoryTableBase 00030000
PfnDataBase 820de000
PsLoadedModuleList 80481580
PsActiveProcessHead 80483008
MachineImageType 0000014c
NumberProcessors 00000001
BugCheckCode 000000d1
BugCheckParameter1 ff5feebc
BugCheckParameter2 00000002
BugCheckParameter3 00000000
BugCheckParameter4 eb651423
PaeEnabled 00000000
KdDebuggerDataBlock 8046d470
MiniDumpFields 45474150

TRIAGE_DUMP32:
ServicePackBuild 00000400
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001050
UnloadedDriversOffset 00001088
PrcbOffset 00001860
ProcessOffset 00002250
ThreadOffset 000024e0
CallStackOffset 00002728
SizeOfCallStack 0000058c
DriverListOffset 00002cb4
DriverCount 0000006e
StringPoolOffset 00004d5c
StringPoolSize 00001ec8
BrokenDriverOffset 00000000
TriageOptions 00000045
TopOfStack eb83fa74


Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x80481580
Debug session time: Sat Feb 09 05:07:46 2008
System Uptime: not available
start end module name
80400000 8059cd00 nt Checksum: 001A2A64 Timestamp: Mon Mar 05 10:51:43 2007 (45EC3C8F)

Unloaded modules:
bba5e000 bba6b000 DMusic.sys Timestamp: unavailable (00000000)
bb183000 bb1a8000 kmixer.sys Timestamp: unavailable (00000000)
bc1a5000 bc1ca000 kmixer.sys Timestamp: unavailable (00000000)
bc2e2000 bc2ef000 DMusic.sys Timestamp: unavailable (00000000)
bc2f2000 bc300000 swmidi.sys Timestamp: unavailable (00000000)
bc920000 bc935000 VGA.dll Timestamp: unavailable (00000000)
bc8b3000 bc935000 nv4.dll Timestamp: unavailable (00000000)
eb550000 eb559000 redbook.sys Timestamp: unavailable (00000000)
eb7f0000 eb7f5000 Cdaudio.SYS Timestamp: unavailable (00000000)
eb8e4000 eb8e7000 Sfloppy.SYS Timestamp: unavailable (00000000)

Finished dump check


Definitely looks to be a driver issue, but I am not seeing the exception code or exception address.... 'course, it's not as though I read these every day...

Perhaps Driver Verifier needs to be run?
http://support.microsoft.com/default.aspx?scid=kb;en-us;244617

What do you think, Giz?

PP :)

Gizmokid2005
02-12-2008, 07:04 PM
I agree with the driver verification.

You did mention that you installed a new NIC. Try removing the drivers for the NIC. They may have an issue. First try the driver verifier first.

clueless1
02-16-2008, 02:04 PM
Hi Folks,

Just got up and running yesterday.

I wanted to let you know what happened, as you two were nice enough to try to help me.

I used verifier.exe. Got a BSOD AND couldn't even boot up using safe mode. I didn't have an off-line registry application to use to turn off verifier.exe.

Ended up removing the drive, putting in another with a fresh copy of the OS and slaved the "bad" drive so I could salvage my files.

Thanks for all your help, Gizmokid2005 and PhilliePhan!!

PhilliePhan
02-16-2008, 04:08 PM
I wanted to let you know what happened, as you two were nice enough to try to help me.

We're happy to try to help :)

Sorry we couldn't be of much assistance. These sorts of problems are among the most difficult to diagnose in support forums - or at home in front of the actual machine for that matter.

In retrospect, we probably should have suggested installing the Recovery Console or some other option in anticipation of further problems...

At the very least, this underscores the need for people to backup their HDs with a tool such as Acronis True Image or one of the many freeware alternatives.

Best :)
PP