Text 21134, 149 rader
Skriven 2006-09-20 07:34:18 av Jeff Guerdat (1:275/311)
     Kommentar till en text av James Bradley
Ärende: Re: 2K Volley #1a
=========================
James Bradley wrote:

> I found the "Event Viewer", after I spent about one man-hour on the
> "Performance Logs" that only held a "Sample entry". How stupid of me to look
> for "Logs" in its name. <Thump head> Sorry if I missed you fellas mentioning
> it, but it'd be just like me.

You do realize the difference, right?  The performance logs are used to 
look at CPU and network utilization, etc. while the system logs are the 
ones that tell you about events.

> I did look at my IRQs, and it seems I have a log (Not intended as a pun.) jam
> at #19. I have my vid-sound capture card using it twice, my PCI to USB Host
> Controller, and <Drum roll> the NIC. (No wonder it was crawling!)
> 
> I do have 10, 11, and 18 blank, but PnP would rather cram them all in at 19.
> <?> What's a girl to do?
> 
> I'm going to try moving stuff to the blanks, until I hear back if it's a good
> idea. SMP is brand new to me, so I suspect there are some redirection
locations
> I shouldn't mess with.

Virtually any bus other than ISA will share interrupts - what you're 
seeing is correct.  SMP generally doesn't have anything to do with this 
but some software (not hardware) work better when pointed to a single 
CPU.  That's not the norm, however.  I wouldn't touch the IRQs, assuming 
that you can do so in the first place.

> PS: NONE of the four entries allowed me to change the resources. [Square,
> bloody one!]

Normal.

> Now that I am at the "Event", I find things like:
> 0/__________________________
> Event Type:     Information
> Event Source:   DrWatson
> Event Category: None
> Event ID:       4097
> Date:           9/16/06
> Time:           1:13:19 AM
> User:           N/A
> Computer:       DELL-210-750
> Description:
> The application, , generated an application error [date,time...] The
exception
> generated was c0000005 at address 0042208F (<nosymbols>)
> Data:
> 0000: 0d 0a 0d 0a 41 70 70 6c   ....Appl
> 0008: 69 63 61 74 69 6f 6e 20   ication
> 0010: 65 78 63 65 70 74 69 6f   exceptio
> Bla-bla-bla...

Note the link at the bottom of the details for each event.  That will 
allow you to query MS' database of symptoms and may provide more help in 
discerning what's up.  You can also look up the error code (c000005 in 
this case) to see what may be learned from that.  I will say that the 
above event, if typed accurately, is disturbing and may be just a 
symptom of the overall problem.  The lack of application name makes it 
hard to track down.  Make sure you look in both the system and 
application logs for the same timestamp and see if you can correlate 
events in both logs.

> 0/__________________________
> Event Type:     Warning
> Event Source:   WinMgmt
> Event Category: None
> Event ID:       61
> Date:           9/16/06
> Time:           12:34:17 AM
> User:           N/A
> Computer:       DELL-210-750
> Description:
> WMI ADAP was unable to process the PerfDisk performance library due to a time
> violation in the open function
>  ___________________________
> o\
> 
> I think the above is the cause of my main lockups. I will note the time of
> future lockup, but I'm pretty confident on this one.

Maybe not.  If you haven't enabled the performance logging, this may be 
normal.  Besides, if there are events afterwards, it didn't lock up.

> 0/__________________________
> Event Type:     Error
> Event Source:   Userenv
> Event Category: None
> Event ID:       1000
> Date:           9/14/06
> Time:           10:17:21 PM
> User:           NT AUTHORITY\SYSTEM
> Computer:       DELL-210-750
> Description:
> Windows cannot unload your registry file.  If you have a roaming profile,
your
> settings are not replicated. Contact your administrator.
> 
> DETAIL - Access is denied. , Build number ((2195)).
>  ___________________________
> o\
> 
> I'd like to know why I need a portable registry, or if it behaves differently
> when it is or isn't loaded. [Hiccup B-]

You don't need one unless you're on a network where you might work on 
different computers all over the place.  I've never used roaming 
profiles so I don't have experience but I suspect you need a server 
(domain controller) to accomplish this.  The inability to unload the 
profile can be caused by various things, perhaps due to a "stuck" 
application/process and may well be caused by the problems you're having.

> 0/__________________________
> Event Type:     Information
> Event Source:   MsiInstaller
> Event Category: None
> Event ID:       11729
> Date:           9/08/06
> Time:           1:37:42 PM
> User:           N/A
> Computer:       DELL-210-750
> Description:
> Product: TV Tuner Driver -- Configuration failed.
>  ___________________________
> o\

And this is just broken.

What's the possibility of reloading the OS?  A fresh start may be the 
fastest way to resolve these issues.  A less intensive attempt can be to 
delete the hardware from Device Manager, shut down and remove the 
hardware (install a different video card, if needed) and reboot.  Now 
shut down again and reinstall the card and start the installation 
process again.  Of course, make sure you have the proper drivers for the 
device beforehand.

If it seems to be a user issue, log in with a different administrative 
account and try the same things to see if it works.  If so, it's your 
profile that's munged.  To fix this, simply rename the profile in 
"c:\documents and settings" to a different name (to keep shortcuts, etc. 
that can be copied back into a new profile - you can copy everything 
except the NTUSER.* files, which are the old user registry) and log in 
as yourself again.

Personally, I think your system needs a rebuild but that's a SWAG from 
this distance...
--- Platinum Xpress/Win/WINServer v3.0pr5a
 * Origin: FidoTel & QWK on the Web! www.fidotel.com (1:275/311)