Boris Posted January 6, 2004 Report Share Posted January 6, 2004 XP Pro SP1The PC reboots itself suddenly.Event Viewer keeps showing this :-Event Type: InformationEvent Source: Save DumpEvent Category: NoneEvent ID: 1001Date: 06/01/2004Time: 11:54:55User: N/AComputer: CELERONDescription:The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c2 (0x00000007, 0x00000cd4, 0x000015d0, 0x81845a60). A dump was saved in: C:\WINDOWS\Minidump\Mini010604-01.dmp.It seems then to produce this error :-Event Type: ErrorEvent Source: DCOMEvent Category: NoneEvent ID: 10005Date: 06/01/2004Time: 11:55:54User: NT AUTHORITY\SYSTEMComputer: CELERONDescription:DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service BITS with arguments "" in order to run the server:{4991D34B-80A1-4291-83B6-3328366B9097}Its happened 11 times since 1 Jan.I've googled to no avail.Any ideas ??? Quote Link to comment Share on other sites More sharing options...
Redhat Posted January 6, 2004 Report Share Posted January 6, 2004 To me looks like Blaster or Nachi again... you don't use a firewall, do you? Or an AV by the looks of things? :( Well if you do run a firewall... it cant be nachi or blaster (well, not easily). Do you run a software firewall or have a router ? Quote Link to comment Share on other sites More sharing options...
Boris Posted January 6, 2004 Author Report Share Posted January 6, 2004 AVG free (up to date) DataBase 350 2/1/04Outpost Free 1.0.1817 1645Scanned today - nothing (AVG and Asquared)Router :D - 56k Dialup ! Quote Link to comment Share on other sites More sharing options...
Redhat Posted January 7, 2004 Report Share Posted January 7, 2004 ROFL :D Have you disabled the Messenger serivce? http://www.grc.com/dcom/I think it could be just a lil bug in Windows, not hard to believe lol :) Quote Link to comment Share on other sites More sharing options...
Boris Posted January 7, 2004 Author Report Share Posted January 7, 2004 I had discombobulated already ?Results LOCALThis System's DCOM / RPCTCP Port 135 is Closed!Congratulations are in orderDCOM is shut down and disabled on this system:It doesn't get any better than this. Not only is this system's DCOM facility shut down and disabled, but the "port of entry" for all TCP DCOM exploits is closed and will reject any local or remote attempts at connection and exploitation. Congratulations.REMOTEPort Status Protocol and Application 135 Stealth dcom-scmDCOM Service Control Manager The result of the port probe is shown above. Quote Link to comment Share on other sites More sharing options...
Sir Radfordin Posted January 7, 2004 Report Share Posted January 7, 2004 To prevent users seeing blue screen MS in their wisdom decided that your computer would just reboot. 90% of the time this is great and what you would have done anyway, but it doesn't help with troubleshoorting.If you right click on the My Computer icon and select Properties and then the Advanced tab and startup and recovery settings button in the system failure there is a tick box for automatically restart. Take this tick out and ok out of everything. Sit back and see what happens. If your computer still reboots you at least know its not a BSOD! Quote Link to comment Share on other sites More sharing options...
Boris Posted January 7, 2004 Author Report Share Posted January 7, 2004 Right click on the My Computer icon and select Properties and then the Advanced tab and startup and recovery settings button in the system failure there is a tick box for automatically restart. Take this tick out and ok out of everything. Sit back and see what happens. If your computer still reboots you at least know its not a BSOD!I've unticked and am sat waiting :o Quote Link to comment Share on other sites More sharing options...
Sir Radfordin Posted January 7, 2004 Report Share Posted January 7, 2004 Don't sit for too long! Quote Link to comment Share on other sites More sharing options...
trackrat Posted January 7, 2004 Report Share Posted January 7, 2004 I had discombobulated already ?What the hell does that mean :wub: Quote Link to comment Share on other sites More sharing options...
Boris Posted January 7, 2004 Author Report Share Posted January 7, 2004 http://www.grc.com/dcom/Sorry - Dcombobulated ?Look here ? :D Quote Link to comment Share on other sites More sharing options...
Guest nellie2 Posted January 8, 2004 Report Share Posted January 8, 2004 Oh you are so fickle and have such short memories!!! :( :P http://www.windowsforum.org/support/forum/...l=Dcombobulator Quote Link to comment Share on other sites More sharing options...
Boris Posted January 8, 2004 Author Report Share Posted January 8, 2004 Sit back and see what happens. If your computer still reboots you at least know its not a BSOD!Its a BSOD !BAD_POOL_CALLERSTOP : 0X000000C2 (0X00000007,0X00000CD4,0X00001A72,0X818A3B10)but what causes it ????? :blink: Quote Link to comment Share on other sites More sharing options...
moon Posted January 8, 2004 Report Share Posted January 8, 2004 Mr. Gates has stated that incidences of BSOD are directly proportional to lack of faith in his software. Quote Link to comment Share on other sites More sharing options...
Guest Grim Reaper Posted January 8, 2004 Report Share Posted January 8, 2004 hope you are feeling intelligent.............click here Quote Link to comment Share on other sites More sharing options...
Boris Posted January 8, 2004 Author Report Share Posted January 8, 2004 One hour later ! After reading pages and pages of fascinating but to me meaningless stuff.The _POOL_TYPE codes are enumerated in ntddk.h. :o :blink: :blink: :blink: In particular, zero indicates nonpaged pool and one indicates paged pool.CauseA bad pool request has been made by the current thread.Resolving the ProblemActivate Driver Verifier to obtain more information about these errors. For details, see Driver Verifier. So - I ran Verifier from Start\Run and it identified about a dozen unverified drivers.aslm75.sys ? bantext.sys ?bsstor.sys B.A. Storage Helper Driver (Windows NT5.x)bsudf.sys UDF File System Driver (Windows XP)d344bus.sys PnP Bios Extensiond344prt.sys SCSI Miniportincdfs.sys INCD File System Driverincdpass.sys Ahead RW Filter Driverincdrec.sys INCD File System Recognizersecdrv.sys ?sisidex.sys SISIDEX Driversisperf.sys SiS Filter DriverOK GR - NOW I give up and admit I'm totally baffled.Please can you explain it all to me (in simple terms !) :D :D :D Quote Link to comment Share on other sites More sharing options...
Boris Posted January 8, 2004 Author Report Share Posted January 8, 2004 Where can I buy "The Dummies Guide to File Verifier" ? Quote Link to comment Share on other sites More sharing options...
Boris Posted January 8, 2004 Author Report Share Posted January 8, 2004 This is a little clearer ? :rolleyes: http://msdn.microsoft.com/library/default....ols/dv_5m9f.asp- but it looks like a long job ? :( - testing one driver at a time ? :unsure: Quote Link to comment Share on other sites More sharing options...
Guest Shirley_Crabtree Posted January 12, 2004 Report Share Posted January 12, 2004 http://www.shirleycrabtree.pwp.blueyonder.co.uk/untitled.JPG :angry: Did ya suss it out Boris? Quote Link to comment Share on other sites More sharing options...
Guest ellas Posted January 12, 2004 Report Share Posted January 12, 2004 have you nero installed and disable the imapi in services ,heres info about bits http://msdn.microsoft.com/library/default..../WinXP_BITS.asp Quote Link to comment Share on other sites More sharing options...
Guest Shirley_Crabtree Posted January 12, 2004 Report Share Posted January 12, 2004 If you were asking me,Ellas,then no.No Nero.This is a 48 hour old fresh install of XP Pro.I've made a few alterations but nothing I haven't done a thousand times.Shirl. Quote Link to comment Share on other sites More sharing options...
Guest ellas Posted January 12, 2004 Report Share Posted January 12, 2004 yeah it the only DCOM error I get cause I disable it as I use nero. Quote Link to comment Share on other sites More sharing options...
Guest Shirley_Crabtree Posted January 12, 2004 Report Share Posted January 12, 2004 Erm....I've actually bothered to read the error message and it is something to do with Windows Messenger!!I always delete it and install the latest version of msn messenger.At the end of the day it isn't affecting my PC....it's just annoying me :blink: Quote Link to comment Share on other sites More sharing options...
Tankus Posted January 12, 2004 Report Share Posted January 12, 2004 Boris ...your puter keeps you seriously entertained ....I just turn mine on .....and it works .....! Quote Link to comment Share on other sites More sharing options...
Boris Posted January 12, 2004 Author Report Share Posted January 12, 2004 http://www.shirleycrabtree.pwp.blueyonder.co.uk/untitled.JPG :angry: Did ya suss it out Boris?Still working on it !Hasn't crashed today (yet :o ) - so I think I'm on the right track ? Quote Link to comment Share on other sites More sharing options...
Guest Shirley_Crabtree Posted January 13, 2004 Report Share Posted January 13, 2004 My PC hasn't crashed at all....I just find these errors annoying!! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.