XP Pro SP3 crashes - Event Viewer log

[rock]

Hi,

My box has taken to crashing every now and then randomly.. maybe even
after hours, it will suddenly crash whilst doing a chore.

Screen goes black and it reboots.

Application Event Viewer shows this..

Any ideas please?


rock



Event Type: Information
Event Source: NMIndexingService
Event Category: None
Event ID: 0
Date: 3/11/2010
Time: 9:14:08 PM
User: N/A
Computer: VIDEO-AUDIO
Description:
The description for Event ID ( 0 ) in Source ( NMIndexingService )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following information
is part of the event: Service started.

Event Type: Information
Event Source: SecurityCenter
Event Category: None
Event ID: 1800
Date: 3/11/2010
Time: 9:14:06 PM
User: N/A
Computer: VIDEO-AUDIO
Description:
The Windows Security Center Service has started.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Information
Event Source: PLFlash DeviceIoControl Service
Event Category: None
Event ID: 105
Date: 3/11/2010
Time: 9:14:02 PM
User: N/A
Computer: VIDEO-AUDIO
Description:
The service was started.

Event Type: Information
Event Source: Nero BackItUp Scheduler 3
Event Category: None
Event ID: 0
Date: 3/11/2010
Time: 9:14:02 PM
User: N/A
Computer: VIDEO-AUDIO
Description:
The description for Event ID ( 0 ) in Source ( Nero BackItUp Scheduler 3
) cannot be found. The local computer may not have the necessary
registry information or message DLL files to display messages from a
remote computer. You may be able to use the /AUXSOURCE= flag to retrieve
this description; see Help and Support for details. The following
information is part of the event: Nero BackItUp Scheduler 3 is started.
HRESULT: 1.


Event Type: Information
Event Source: Capture Device Service
Event Category: None
Event ID: 0
Date: 3/11/2010
Time: 9:13:59 PM
User: N/A
Computer: VIDEO-AUDIO
Description:
The description for Event ID ( 0 ) in Source ( Capture Device Service )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following information
is part of the event: [CDeviceObject::Init]:
CLSID_AudioInputDeviceCategory:

DeviceName: M-Audio Delta 44 Multi
Desc:
..


Event Type: Information
Event Source: Capture Device Service
Event Category: None
Event ID: 0
Date: 3/11/2010
Time: 9:13:59 PM
User: N/A
Computer: VIDEO-AUDIO
Description:
The description for Event ID ( 0 ) in Source ( Capture Device Service )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following information
is part of the event: [CDeviceObject::Init]:
CLSID_AudioInputDeviceCategory:

DeviceName: M-Audio Delta 44 Mon. Mixer
Desc:
..

[jose]

On Mar 11, 6:48

[rock]

On 11/03/2010 11:45 PM, John John - MVP wrote:
> rock wrote:
>> Hi,
>>
>> My box has taken to crashing every now and then randomly.. maybe even
>> after hours, it will suddenly crash whilst doing a chore.
>>
>> Screen goes black and it reboots.
>>
>> Application Event Viewer shows this..
>>
>> Any ideas please?
>>
>>
>> rock
>>
>>
>>
>> Event Type: Information
>> Event Source: NMIndexingService
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:14:08 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( NMIndexingService )
>> cannot be found. The local computer may not have the necessary
>> registry information or message DLL files to display messages from a
>> remote computer. You may be able to use the /AUXSOURCE= flag to
>> retrieve this description; see Help and Support for details. The
>> following information is part of the event: Service started.
>>
>> Event Type: Information
>> Event Source: SecurityCenter
>> Event Category: None
>> Event ID: 1800
>> Date: 3/11/2010
>> Time: 9:14:06 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The Windows Security Center Service has started.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>>
>>
>> Event Type: Information
>> Event Source: PLFlash DeviceIoControl Service
>> Event Category: None
>> Event ID: 105
>> Date: 3/11/2010
>> Time: 9:14:02 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The service was started.
>>
>> Event Type: Information
>> Event Source: Nero BackItUp Scheduler 3
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:14:02 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( Nero BackItUp Scheduler
>> 3 ) cannot be found. The local computer may not have the necessary
>> registry information or message DLL files to display messages from a
>> remote computer. You may be able to use the /AUXSOURCE= flag to
>> retrieve this description; see Help and Support for details. The
>> following information is part of the event: Nero BackItUp Scheduler 3
>> is started. HRESULT: 1.
>>
>>
>> Event Type: Information
>> Event Source: Capture Device Service
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:13:59 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( Capture Device Service
>> ) cannot be found. The local computer may not have the necessary
>> registry information or message DLL files to display messages from a
>> remote computer. You may be able to use the /AUXSOURCE= flag to
>> retrieve this description; see Help and Support for details. The
>> following information is part of the event: [CDeviceObject::Init]:
>> CLSID_AudioInputDeviceCategory:
>>
>> DeviceName: M-Audio Delta 44 Multi
>> Desc:
>> .
>>
>>
>> Event Type: Information
>> Event Source: Capture Device Service
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:13:59 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( Capture Device Service
>> ) cannot be found. The local computer may not have the necessary
>> registry information or message DLL files to display messages from a
>> remote computer. You may be able to use the /AUXSOURCE= flag to
>> retrieve this description; see Help and Support for details. The
>> following information is part of the event: [CDeviceObject::Init]:
>> CLSID_AudioInputDeviceCategory:
>>
>> DeviceName: M-Audio Delta 44 Mon. Mixer
>> Desc:
>
> For all intents and purposes when dealing with system crashes
> "Information" events are almost non-events and events from the
> application log are of little value. We need "Errors" from the System log.
>
> John

Thanks but where do I find this error log as their are no 'errors' in
the Event Viewer'

REgards,

rock

[rock]

On 11/03/2010 10:59 PM, Jose wrote:
> On Mar 11, 6:48 am, rock<1...@pobox.com> wrote:
>> Hi,
>>
>> My box has taken to crashing every now and then randomly.. maybe even
>> after hours, it will suddenly crash whilst doing a chore.
>>
>> Screen goes black and it reboots.
>>
>> Application Event Viewer shows this..
>>
>> Any ideas please?
>>
>> rock
>>
>> Event Type: Information
>> Event Source: NMIndexingService
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:14:08 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( NMIndexingService )
>> cannot be found. The local computer may not have the necessary registry
>> information or message DLL files to display messages from a remote
>> computer. You may be able to use the /AUXSOURCE= flag to retrieve this
>> description; see Help and Support for details. The following information
>> is part of the event: Service started.
>>
>> Event Type: Information
>> Event Source: SecurityCenter
>> Event Category: None
>> Event ID: 1800
>> Date: 3/11/2010
>> Time: 9:14:06 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The Windows Security Center Service has started.
>>
>> For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
>>
>> Event Type: Information
>> Event Source: PLFlash DeviceIoControl Service
>> Event Category: None
>> Event ID: 105
>> Date: 3/11/2010
>> Time: 9:14:02 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The service was started.
>>
>> Event Type: Information
>> Event Source: Nero BackItUp Scheduler 3
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:14:02 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( Nero BackItUp Scheduler 3
>> ) cannot be found. The local computer may not have the necessary
>> registry information or message DLL files to display messages from a
>> remote computer. You may be able to use the /AUXSOURCE= flag to retrieve
>> this description; see Help and Support for details. The following
>> information is part of the event: Nero BackItUp Scheduler 3 is started.
>> HRESULT: 1.
>>
>> Event Type: Information
>> Event Source: Capture Device Service
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:13:59 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( Capture Device Service )
>> cannot be found. The local computer may not have the necessary registry
>> information or message DLL files to display messages from a remote
>> computer. You may be able to use the /AUXSOURCE= flag to retrieve this
>> description; see Help and Support for details. The following information
>> is part of the event: [CDeviceObject::Init]:
>> CLSID_AudioInputDeviceCategory:
>>
>> DeviceName: M-Audio Delta 44 Multi
>> Desc:
>> .
>>
>> Event Type: Information
>> Event Source: Capture Device Service
>> Event Category: None
>> Event ID: 0
>> Date: 3/11/2010
>> Time: 9:13:59 PM
>> User: N/A
>> Computer: VIDEO-AUDIO
>> Description:
>> The description for Event ID ( 0 ) in Source ( Capture Device Service )
>> cannot be found. The local computer may not have the necessary registry
>> information or message DLL files to display messages from a remote
>> computer. You may be able to use the /AUXSOURCE= flag to retrieve this
>> description; see Help and Support for details. The following information
>> is part of the event: [CDeviceObject::Init]:
>> CLSID_AudioInputDeviceCategory:
>>
>> DeviceName: M-Audio Delta 44 Mon. Mixer
>> Desc:
>> .
>
> That is good information, but not enough information. It sounds like
> you may be experiencing a blue screen of death and not able to see the
> info before XP reboots. Here is where you should start:
>
> Have any hardware oriented changes been made to the system since it
> worked? RAM, video card, storage (hard disks, USB devices), hardware
> drivers, device drivers?
>
> Click Start, Run and in the box enter:
>
> msinfo32
>
> Click OK, and when the System Summary info appears, click Edit, Select
> All, Copy and then paste back here.
>
> There would be some personal information (like System Name and User
> Name) or whatever appears to be only your business that you can delete
> from the paste.
>
> Since "audio" shows up in some of your messages, lets see what
> msinfo32 has to say about the audio drivers you have:
>
> For audio information, expand the Components, click Sound Device,
> click Edit, Select All, Copy and then paste the information back here.
>
>
> Disable Automatic restart on system error to stop the error on your
> screen so you can see it:
>
> Right click My Computer, Properties, Advanced, Startup and Recovery
> Settings.
>
> In the System failure section, untick the Automatically restart box,
> OK, OK.
>
> If you can only boot in Safe Mode and are seeing a BSOD, choose the
> option:
>
> Disable automatic restart on system failure
>
> Then you can see the BSOD when it happens again.
>
> Here are some BSOD blue screen of death examples showing information
> you need to provide:
>
> http://www.codinghorror.com/blog/images ... P_BSOD.png
> http://techrepublic.com.com/i/tr/downlo ... bsod_a.jpg
>
> Send the information pointed to with the red arrows (3-4 lines
> total). Skip the boring text unless it looks important to you. We
> know what a BSOD looks like, we need to know the other information
> that is specific to your BSOD.


Thank you. No this is a new system and it worked well for a while but
the crashes started recently - 2 months or so.

It is so frustrating as I have pulled it apart, checked cables, chnaged
drivers but still it happens every now and then out of the blue usually
whn I don't want it to happen like the near end of a DVD burn..

I will follow your instructs above thanks again for the time.

rock

[rock]

On 12/03/2010 9:32 AM, rock wrote:
> On 11/03/2010 10:59 PM, Jose wrote:
>> On Mar 11, 6:48 am, rock<1...@pobox.com> wrote:
>>> Hi,
>>>
>>> My box has taken to crashing every now and then randomly.. maybe even
>>> after hours, it will suddenly crash whilst doing a chore.
>>>
>>> Screen goes black and it reboots.
>>>
>>> Application Event Viewer shows this..
>>>
>>> Any ideas please?
>>>
>>> rock
>>>
>>> Event Type: Information
>>> Event Source: NMIndexingService
>>> Event Category: None
>>> Event ID: 0
>>> Date: 3/11/2010
>>> Time: 9:14:08 PM
>>> User: N/A
>>> Computer: VIDEO-AUDIO
>>> Description:
>>> The description for Event ID ( 0 ) in Source ( NMIndexingService )
>>> cannot be found. The local computer may not have the necessary registry
>>> information or message DLL files to display messages from a remote
>>> computer. You may be able to use the /AUXSOURCE= flag to retrieve this
>>> description; see Help and Support for details. The following information
>>> is part of the event: Service started.
>>>
>>> Event Type: Information
>>> Event Source: SecurityCenter
>>> Event Category: None
>>> Event ID: 1800
>>> Date: 3/11/2010
>>> Time: 9:14:06 PM
>>> User: N/A
>>> Computer: VIDEO-AUDIO
>>> Description:
>>> The Windows Security Center Service has started.
>>>
>>> For more information, see Help and Support Center
>>> athttp://go.microsoft.com/fwlink/events.asp.
>>>
>>> Event Type: Information
>>> Event Source: PLFlash DeviceIoControl Service
>>> Event Category: None
>>> Event ID: 105
>>> Date: 3/11/2010
>>> Time: 9:14:02 PM
>>> User: N/A
>>> Computer: VIDEO-AUDIO
>>> Description:
>>> The service was started.
>>>
>>> Event Type: Information
>>> Event Source: Nero BackItUp Scheduler 3
>>> Event Category: None
>>> Event ID: 0
>>> Date: 3/11/2010
>>> Time: 9:14:02 PM
>>> User: N/A
>>> Computer: VIDEO-AUDIO
>>> Description:
>>> The description for Event ID ( 0 ) in Source ( Nero BackItUp Scheduler 3
>>> ) cannot be found. The local computer may not have the necessary
>>> registry information or message DLL files to display messages from a
>>> remote computer. You may be able to use the /AUXSOURCE= flag to retrieve
>>> this description; see Help and Support for details. The following
>>> information is part of the event: Nero BackItUp Scheduler 3 is started.
>>> HRESULT: 1.
>>>
>>> Event Type: Information
>>> Event Source: Capture Device Service
>>> Event Category: None
>>> Event ID: 0
>>> Date: 3/11/2010
>>> Time: 9:13:59 PM
>>> User: N/A
>>> Computer: VIDEO-AUDIO
>>> Description:
>>> The description for Event ID ( 0 ) in Source ( Capture Device Service )
>>> cannot be found. The local computer may not have the necessary registry
>>> information or message DLL files to display messages from a remote
>>> computer. You may be able to use the /AUXSOURCE= flag to retrieve this
>>> description; see Help and Support for details. The following information
>>> is part of the event: [CDeviceObject::Init]:
>>> CLSID_AudioInputDeviceCategory:
>>>
>>> DeviceName: M-Audio Delta 44 Multi
>>> Desc:
>>> .
>>>
>>> Event Type: Information
>>> Event Source: Capture Device Service
>>> Event Category: None
>>> Event ID: 0
>>> Date: 3/11/2010
>>> Time: 9:13:59 PM
>>> User: N/A
>>> Computer: VIDEO-AUDIO
>>> Description:
>>> The description for Event ID ( 0 ) in Source ( Capture Device Service )
>>> cannot be found. The local computer may not have the necessary registry
>>> information or message DLL files to display messages from a remote
>>> computer. You may be able to use the /AUXSOURCE= flag to retrieve this
>>> description; see Help and Support for details. The following information
>>> is part of the event: [CDeviceObject::Init]:
>>> CLSID_AudioInputDeviceCategory:
>>>
>>> DeviceName: M-Audio Delta 44 Mon. Mixer
>>> Desc:
>>> .
>>
>> That is good information, but not enough information. It sounds like
>> you may be experiencing a blue screen of death and not able to see the
>> info before XP reboots. Here is where you should start:
>>
>> Have any hardware oriented changes been made to the system since it
>> worked? RAM, video card, storage (hard disks, USB devices), hardware
>> drivers, device drivers?
>>
>> Click Start, Run and in the box enter:
>>
>> msinfo32
>>
>> Click OK, and when the System Summary info appears, click Edit, Select
>> All, Copy and then paste back here.
>>
>> There would be some personal information (like System Name and User
>> Name) or whatever appears to be only your business that you can delete
>> from the paste.
>>
>> Since "audio" shows up in some of your messages, lets see what
>> msinfo32 has to say about the audio drivers you have:
>>
>> For audio information, expand the Components, click Sound Device,
>> click Edit, Select All, Copy and then paste the information back here.
>>
>>
>> Disable Automatic restart on system error to stop the error on your
>> screen so you can see it:
>>
>> Right click My Computer, Properties, Advanced, Startup and Recovery
>> Settings.
>>
>> In the System failure section, untick the Automatically restart box,
>> OK, OK.
>>
>> If you can only boot in Safe Mode and are seeing a BSOD, choose the
>> option:
>>
>> Disable automatic restart on system failure
>>
>> Then you can see the BSOD when it happens again.
>>
>> Here are some BSOD blue screen of death examples showing information
>> you need to provide:
>>
>> http://www.codinghorror.com/blog/images ... P_BSOD.png
>> http://techrepublic.com.com/i/tr/downlo ... bsod_a.jpg
>>
>> Send the information pointed to with the red arrows (3-4 lines
>> total). Skip the boring text unless it looks important to you. We
>> know what a BSOD looks like, we need to know the other information
>> that is specific to your BSOD.
>
>
> Thank you. No this is a new system and it worked well for a while but
> the crashes started recently - 2 months or so.
>
> It is so frustrating as I have pulled it apart, checked cables, chnaged
> drivers but still it happens every now and then out of the blue usually
> whn I don't want it to happen like the near end of a DVD burn..
>
> I will follow your instructs above thanks again for the time.
>
> rock

Okay here is the system tools info..

Also took off the auto reboot as advised.

Thanks,


rock



OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 3 Build 2600
OS Manufacturer Microsoft Corporation
System Name VIDEO-AUDIO
System Manufacturer System manufacturer
System Model System Product Name
System Type X86-based PC
Processor x86 Family 6 Model 23 Stepping 10 GenuineIntel ~2666 Mhz
BIOS Version/Date American Megatrends Inc. 0609, 1/8/2009
SMBIOS Version 2.5
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.5512 (xpsp.080413-2111)"
User Name VIDEO-AUDIO\John
Time Zone AUS Eastern Daylight Time
Total Physical Memory 4,096.00 MB
Available Physical Memory 2.78 GB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.95 GB
Page File Space 5.09 GB
Page File C:\pagefile.sys

[jose]

On Mar 11, 6:38

[glee]

"rock" <1940@pobox.com> wrote in message
news:OS9apoWwKHA.4552@TK2MSFTNGP04.phx.gbl...
> On 11/03/2010 11:45 PM, John John - MVP wrote:
>> rock wrote:
>>> Hi,
>>>
>>> My box has taken to crashing every now and then randomly.. maybe
>>> even
>>> after hours, it will suddenly crash whilst doing a chore.
>>>
>>> Screen goes black and it reboots.
>>>
>>> Application Event Viewer shows this..
>>>
>>> Any ideas please?
>>>
>>>
>>> rock
>>>
>>>snip of unneeded information
>>
>> For all intents and purposes when dealing with system crashes
>> "Information" events are almost non-events and events from the
>> application log are of little value. We need "Errors" from the System
>> log.
>>
>
> Thanks but where do I find this error log as their are no 'errors' in
> the Event Viewer'

Open Event Viewer, in the left pane, select System.
In the right pane, look in the 'Type' column for 'Error' events (marked
with a white X in a Red Circle) that correspond with the time and date
of your spontaneous reboot.

If you've turned off automatic restart, the next time you will see a
blue screen with the error details...those will be helpful.

Also look in this location in Windows Explorer or My Computer:
C:\Windows\Minidump
See if there are any .dmp files that correspond to the time and date of
your restarts.

If there are corresponding .dmp files, download and install the free
version of WhoCrashed
http://www.resplendence.com/whocrashed

When you start it, WhoCrashed will prompt to download the Windows
Debugging Package (WinDbg)...do so.
The program will give you an easy to read display of the info found in
the crash dump files.

(Sorry to butt in, John John...just trying to give the OP some more
tools and info to work with)
--
Glen Ventura, MS MVP Oct. 2002 - Sept. 2009
A+
http://dts-l.net/