Intermittent STOP error on shut down



kram
07-10-2005, 12:56 AM
About two weeks ago my computer suddenly began to restart on shut down. After
reading some posts in the Newsgroups, I unchecked the "Restart" box in System
Failure. In the past two days, I've gotten the dreaded bluescreen only twice
on shut down, with the following error:

STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)

I looked at the Event Viewer, but could find only one "Warning," in the
Application category:

"Windows saved user KAREN\Karen Ram registry while an application or service
was still using the registry during log off. The memory used by the user's
registry has not been freed. The registry will be unloaded when it is no
longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account."

Since I can't seem to locate Minidump, I can't view the error log. I read
some tech support articles on the MS Web site and also read the stuff on the
aumha.org Web site. I haven't installed any new hardware or drivers (except
to restore the original REALTEK sound card driver). But I have absolutely no
idea what's wrong or how to fix it.

Can anyone help me?

Thanks.

kram
07-10-2005, 12:56 AM
Forgot to include system info:

Windows XP Media Center Edition Service Pack 2 (build 2600)
3.40 gigahertz Intel Pentium 4
16 kilobyte primary memory cache
1024 kilobyte secondary memory cache
320.33 Gigabytes Usable Hard Drive Capacity
293.86 Gigabytes Hard Drive Free Space
Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
Bus Clock: 200 megahertz
Realtek High Definition Audio
Sony MPEG RealTime encoder board
1024 Megabytes Installed Memory
Slot 'DIMM0' has 512 MB (serial number SerNum0)
Slot 'DIMM1' is Empty
Slot 'DIMM2' has 512 MB
Slot 'DIMM3' is Empty
BIOS: American Megatrends Inc. 3001 12/09/2004
NVIDIA GeForce 6600 [Display adapter]
Default Monitor (2x)
Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)


"kram" wrote:

> About two weeks ago my computer suddenly began to restart on shut down. After
> reading some posts in the Newsgroups, I unchecked the "Restart" box in System
> Failure. In the past two days, I've gotten the dreaded bluescreen only twice
> on shut down, with the following error:
>
> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
>
> I looked at the Event Viewer, but could find only one "Warning," in the
> Application category:
>
> "Windows saved user KAREN\Karen Ram registry while an application or service
> was still using the registry during log off. The memory used by the user's
> registry has not been freed. The registry will be unloaded when it is no
> longer in use.
>
> This is often caused by services running as a user account, try configuring
> the services to run in either the LocalService or NetworkService account."
>
> Since I can't seem to locate Minidump, I can't view the error log. I read
> some tech support articles on the MS Web site and also read the stuff on the
> aumha.org Web site. I haven't installed any new hardware or drivers (except
> to restore the original REALTEK sound card driver). But I have absolutely no
> idea what's wrong or how to fix it.
>
> Can anyone help me?
>
> Thanks.

Jon
07-10-2005, 12:56 AM
You'll find the minidump in

C:\WINDOWS\Minidump

You can get hold of windbg from here

http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx

This is quite a helpful walkthrough to enable you to identify the faulting
module , if you look at the first post in this thread

http://forum.majorgeeks.com/archive/index.php/t-35246.html

Jon


"kram" <kram@discussions.microsoft.com> wrote in message
news:DA676B9E-D824-46D7-B872-F5C6A7F2FFB9@microsoft.com...
> Forgot to include system info:
>
> Windows XP Media Center Edition Service Pack 2 (build 2600)
> 3.40 gigahertz Intel Pentium 4
> 16 kilobyte primary memory cache
> 1024 kilobyte secondary memory cache
> 320.33 Gigabytes Usable Hard Drive Capacity
> 293.86 Gigabytes Hard Drive Free Space
> Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
> Bus Clock: 200 megahertz
> Realtek High Definition Audio
> Sony MPEG RealTime encoder board
> 1024 Megabytes Installed Memory
> Slot 'DIMM0' has 512 MB (serial number SerNum0)
> Slot 'DIMM1' is Empty
> Slot 'DIMM2' has 512 MB
> Slot 'DIMM3' is Empty
> BIOS: American Megatrends Inc. 3001 12/09/2004
> NVIDIA GeForce 6600 [Display adapter]
> Default Monitor (2x)
> Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)
>
>
> "kram" wrote:
>
>> About two weeks ago my computer suddenly began to restart on shut down.
>> After
>> reading some posts in the Newsgroups, I unchecked the "Restart" box in
>> System
>> Failure. In the past two days, I've gotten the dreaded bluescreen only
>> twice
>> on shut down, with the following error:
>>
>> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
>>
>> I looked at the Event Viewer, but could find only one "Warning," in the
>> Application category:
>>
>> "Windows saved user KAREN\Karen Ram registry while an application or
>> service
>> was still using the registry during log off. The memory used by the
>> user's
>> registry has not been freed. The registry will be unloaded when it is no
>> longer in use.
>>
>> This is often caused by services running as a user account, try
>> configuring
>> the services to run in either the LocalService or NetworkService
>> account."
>>
>> Since I can't seem to locate Minidump, I can't view the error log. I read
>> some tech support articles on the MS Web site and also read the stuff on
>> the
>> aumha.org Web site. I haven't installed any new hardware or drivers
>> (except
>> to restore the original REALTEK sound card driver). But I have absolutely
>> no
>> idea what's wrong or how to fix it.
>>
>> Can anyone help me?
>>
>> Thanks.

kram
07-10-2005, 12:56 AM
I have a few questions:

-- I do not have a Minidump folder in C:\WINDOWS. I did, however, find a
userenv.lof file in C:\WINDOWS\Debug\UserMode. It seems to repeat the
following information:

USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(31c.620) 17:32:20:484 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(31c.750) 17:32:20:515 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(31c.320) 17:34:17:421 MyRegUnLoadKey: Failed to unmount hive 00000005
USERENV(31c.320) 17:34:17:421 DumpOpenRegistryHandle: 2 user registry
Handles leaked from
\Registry\User\S-1-5-21-3800514441-2800369307-1419737896-1005
USERENV(31c.320) 17:34:17:421 UnloadUserProfileP: Didn't unload user profile
<err = 5>
USERENV(31c.320) 17:34:19:812 UnloadUserProfile: UnloadUserProfileP failed
with 0

Do you have any idea what this means???

-- This may sound like a dumb question, but how do I know if I need the 32-
or 64-bit version of windbg?

Thanks,
Karen

"Jon" wrote:

> You'll find the minidump in
>
> C:\WINDOWS\Minidump
>
> You can get hold of windbg from here
>
> http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
>
> This is quite a helpful walkthrough to enable you to identify the faulting
> module , if you look at the first post in this thread
>
> http://forum.majorgeeks.com/archive/index.php/t-35246.html
>
> Jon
>
>
> "kram" <kram@discussions.microsoft.com> wrote in message
> news:DA676B9E-D824-46D7-B872-F5C6A7F2FFB9@microsoft.com...
> > Forgot to include system info:
> >
> > Windows XP Media Center Edition Service Pack 2 (build 2600)
> > 3.40 gigahertz Intel Pentium 4
> > 16 kilobyte primary memory cache
> > 1024 kilobyte secondary memory cache
> > 320.33 Gigabytes Usable Hard Drive Capacity
> > 293.86 Gigabytes Hard Drive Free Space
> > Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
> > Bus Clock: 200 megahertz
> > Realtek High Definition Audio
> > Sony MPEG RealTime encoder board
> > 1024 Megabytes Installed Memory
> > Slot 'DIMM0' has 512 MB (serial number SerNum0)
> > Slot 'DIMM1' is Empty
> > Slot 'DIMM2' has 512 MB
> > Slot 'DIMM3' is Empty
> > BIOS: American Megatrends Inc. 3001 12/09/2004
> > NVIDIA GeForce 6600 [Display adapter]
> > Default Monitor (2x)
> > Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)
> >
> >
> > "kram" wrote:
> >
> >> About two weeks ago my computer suddenly began to restart on shut down.
> >> After
> >> reading some posts in the Newsgroups, I unchecked the "Restart" box in
> >> System
> >> Failure. In the past two days, I've gotten the dreaded bluescreen only
> >> twice
> >> on shut down, with the following error:
> >>
> >> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
> >>
> >> I looked at the Event Viewer, but could find only one "Warning," in the
> >> Application category:
> >>
> >> "Windows saved user KAREN\Karen Ram registry while an application or
> >> service
> >> was still using the registry during log off. The memory used by the
> >> user's
> >> registry has not been freed. The registry will be unloaded when it is no
> >> longer in use.
> >>
> >> This is often caused by services running as a user account, try
> >> configuring
> >> the services to run in either the LocalService or NetworkService
> >> account."
> >>
> >> Since I can't seem to locate Minidump, I can't view the error log. I read
> >> some tech support articles on the MS Web site and also read the stuff on
> >> the
> >> aumha.org Web site. I haven't installed any new hardware or drivers
> >> (except
> >> to restore the original REALTEK sound card driver). But I have absolutely
> >> no
> >> idea what's wrong or how to fix it.
> >>
> >> Can anyone help me?
> >>
> >> Thanks.
>
>
>

Jon
07-10-2005, 12:56 AM
It will be the 32-bit you'd need

Actually you might be better off trying this first, to see if it does the
trick

http://www.microsoft.com/downloads/details.aspx?FamilyID=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

Jon


"kram" <kram@discussions.microsoft.com> wrote in message
news:10C8F372-D675-413D-967A-470A77D9C8E6@microsoft.com...
>I have a few questions:
>
> -- I do not have a Minidump folder in C:\WINDOWS. I did, however, find a
> userenv.lof file in C:\WINDOWS\Debug\UserMode. It seems to repeat the
> following information:
>
> USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count
> is
> not 0
> USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count
> is
> not 0
> USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count
> is
> not 0
> USERENV(31c.620) 17:32:20:484 GetGPOInfo: Local GPO's gpt.ini is not
> accessible, assuming default state.
> USERENV(31c.750) 17:32:20:515 GetGPOInfo: Local GPO's gpt.ini is not
> accessible, assuming default state.
> USERENV(31c.320) 17:34:17:421 MyRegUnLoadKey: Failed to unmount hive
> 00000005
> USERENV(31c.320) 17:34:17:421 DumpOpenRegistryHandle: 2 user registry
> Handles leaked from
> \Registry\User\S-1-5-21-3800514441-2800369307-1419737896-1005
> USERENV(31c.320) 17:34:17:421 UnloadUserProfileP: Didn't unload user
> profile
> <err = 5>
> USERENV(31c.320) 17:34:19:812 UnloadUserProfile: UnloadUserProfileP failed
> with 0
>
> Do you have any idea what this means???
>
> -- This may sound like a dumb question, but how do I know if I need the
> 32-
> or 64-bit version of windbg?
>
> Thanks,
> Karen
>
> "Jon" wrote:
>
>> You'll find the minidump in
>>
>> C:\WINDOWS\Minidump
>>
>> You can get hold of windbg from here
>>
>> http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
>>
>> This is quite a helpful walkthrough to enable you to identify the
>> faulting
>> module , if you look at the first post in this thread
>>
>> http://forum.majorgeeks.com/archive/index.php/t-35246.html
>>
>> Jon
>>
>>
>> "kram" <kram@discussions.microsoft.com> wrote in message
>> news:DA676B9E-D824-46D7-B872-F5C6A7F2FFB9@microsoft.com...
>> > Forgot to include system info:
>> >
>> > Windows XP Media Center Edition Service Pack 2 (build 2600)
>> > 3.40 gigahertz Intel Pentium 4
>> > 16 kilobyte primary memory cache
>> > 1024 kilobyte secondary memory cache
>> > 320.33 Gigabytes Usable Hard Drive Capacity
>> > 293.86 Gigabytes Hard Drive Free Space
>> > Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
>> > Bus Clock: 200 megahertz
>> > Realtek High Definition Audio
>> > Sony MPEG RealTime encoder board
>> > 1024 Megabytes Installed Memory
>> > Slot 'DIMM0' has 512 MB (serial number SerNum0)
>> > Slot 'DIMM1' is Empty
>> > Slot 'DIMM2' has 512 MB
>> > Slot 'DIMM3' is Empty
>> > BIOS: American Megatrends Inc. 3001 12/09/2004
>> > NVIDIA GeForce 6600 [Display adapter]
>> > Default Monitor (2x)
>> > Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)
>> >
>> >
>> > "kram" wrote:
>> >
>> >> About two weeks ago my computer suddenly began to restart on shut
>> >> down.
>> >> After
>> >> reading some posts in the Newsgroups, I unchecked the "Restart" box in
>> >> System
>> >> Failure. In the past two days, I've gotten the dreaded bluescreen only
>> >> twice
>> >> on shut down, with the following error:
>> >>
>> >> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
>> >>
>> >> I looked at the Event Viewer, but could find only one "Warning," in
>> >> the
>> >> Application category:
>> >>
>> >> "Windows saved user KAREN\Karen Ram registry while an application or
>> >> service
>> >> was still using the registry during log off. The memory used by the
>> >> user's
>> >> registry has not been freed. The registry will be unloaded when it is
>> >> no
>> >> longer in use.
>> >>
>> >> This is often caused by services running as a user account, try
>> >> configuring
>> >> the services to run in either the LocalService or NetworkService
>> >> account."
>> >>
>> >> Since I can't seem to locate Minidump, I can't view the error log. I
>> >> read
>> >> some tech support articles on the MS Web site and also read the stuff
>> >> on
>> >> the
>> >> aumha.org Web site. I haven't installed any new hardware or drivers
>> >> (except
>> >> to restore the original REALTEK sound card driver). But I have
>> >> absolutely
>> >> no
>> >> idea what's wrong or how to fix it.
>> >>
>> >> Can anyone help me?
>> >>
>> >> Thanks.
>>
>>
>>

kram
07-10-2005, 12:57 AM
OK. I installed the UPHClean utility. Now let's see what happens. I don't
need to actually run the application, right? I just let it do its thing?

Can you please tell me why I can't locate the minidump folder or crash dump
files???

"Jon" wrote:

> It will be the 32-bit you'd need
>
> Actually you might be better off trying this first, to see if it does the
> trick
>
> http://www.microsoft.com/downloads/details.aspx?FamilyID=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
>
> Jon
>
>
> "kram" <kram@discussions.microsoft.com> wrote in message
> news:10C8F372-D675-413D-967A-470A77D9C8E6@microsoft.com...
> >I have a few questions:
> >
> > -- I do not have a Minidump folder in C:\WINDOWS. I did, however, find a
> > userenv.lof file in C:\WINDOWS\Debug\UserMode. It seems to repeat the
> > following information:
> >
> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count
> > is
> > not 0
> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count
> > is
> > not 0
> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref Count
> > is
> > not 0
> > USERENV(31c.620) 17:32:20:484 GetGPOInfo: Local GPO's gpt.ini is not
> > accessible, assuming default state.
> > USERENV(31c.750) 17:32:20:515 GetGPOInfo: Local GPO's gpt.ini is not
> > accessible, assuming default state.
> > USERENV(31c.320) 17:34:17:421 MyRegUnLoadKey: Failed to unmount hive
> > 00000005
> > USERENV(31c.320) 17:34:17:421 DumpOpenRegistryHandle: 2 user registry
> > Handles leaked from
> > \Registry\User\S-1-5-21-3800514441-2800369307-1419737896-1005
> > USERENV(31c.320) 17:34:17:421 UnloadUserProfileP: Didn't unload user
> > profile
> > <err = 5>
> > USERENV(31c.320) 17:34:19:812 UnloadUserProfile: UnloadUserProfileP failed
> > with 0
> >
> > Do you have any idea what this means???
> >
> > -- This may sound like a dumb question, but how do I know if I need the
> > 32-
> > or 64-bit version of windbg?
> >
> > Thanks,
> > Karen
> >
> > "Jon" wrote:
> >
> >> You'll find the minidump in
> >>
> >> C:\WINDOWS\Minidump
> >>
> >> You can get hold of windbg from here
> >>
> >> http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
> >>
> >> This is quite a helpful walkthrough to enable you to identify the
> >> faulting
> >> module , if you look at the first post in this thread
> >>
> >> http://forum.majorgeeks.com/archive/index.php/t-35246.html
> >>
> >> Jon
> >>
> >>
> >> "kram" <kram@discussions.microsoft.com> wrote in message
> >> news:DA676B9E-D824-46D7-B872-F5C6A7F2FFB9@microsoft.com...
> >> > Forgot to include system info:
> >> >
> >> > Windows XP Media Center Edition Service Pack 2 (build 2600)
> >> > 3.40 gigahertz Intel Pentium 4
> >> > 16 kilobyte primary memory cache
> >> > 1024 kilobyte secondary memory cache
> >> > 320.33 Gigabytes Usable Hard Drive Capacity
> >> > 293.86 Gigabytes Hard Drive Free Space
> >> > Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
> >> > Bus Clock: 200 megahertz
> >> > Realtek High Definition Audio
> >> > Sony MPEG RealTime encoder board
> >> > 1024 Megabytes Installed Memory
> >> > Slot 'DIMM0' has 512 MB (serial number SerNum0)
> >> > Slot 'DIMM1' is Empty
> >> > Slot 'DIMM2' has 512 MB
> >> > Slot 'DIMM3' is Empty
> >> > BIOS: American Megatrends Inc. 3001 12/09/2004
> >> > NVIDIA GeForce 6600 [Display adapter]
> >> > Default Monitor (2x)
> >> > Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)
> >> >
> >> >
> >> > "kram" wrote:
> >> >
> >> >> About two weeks ago my computer suddenly began to restart on shut
> >> >> down.
> >> >> After
> >> >> reading some posts in the Newsgroups, I unchecked the "Restart" box in
> >> >> System
> >> >> Failure. In the past two days, I've gotten the dreaded bluescreen only
> >> >> twice
> >> >> on shut down, with the following error:
> >> >>
> >> >> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
> >> >>
> >> >> I looked at the Event Viewer, but could find only one "Warning," in
> >> >> the
> >> >> Application category:
> >> >>
> >> >> "Windows saved user KAREN\Karen Ram registry while an application or
> >> >> service
> >> >> was still using the registry during log off. The memory used by the
> >> >> user's
> >> >> registry has not been freed. The registry will be unloaded when it is
> >> >> no
> >> >> longer in use.
> >> >>
> >> >> This is often caused by services running as a user account, try
> >> >> configuring
> >> >> the services to run in either the LocalService or NetworkService
> >> >> account."
> >> >>
> >> >> Since I can't seem to locate Minidump, I can't view the error log. I
> >> >> read
> >> >> some tech support articles on the MS Web site and also read the stuff
> >> >> on
> >> >> the
> >> >> aumha.org Web site. I haven't installed any new hardware or drivers
> >> >> (except
> >> >> to restore the original REALTEK sound card driver). But I have
> >> >> absolutely
> >> >> no
> >> >> idea what's wrong or how to fix it.
> >> >>
> >> >> Can anyone help me?
> >> >>
> >> >> Thanks.
> >>
> >>
> >>
>
>
>

Rock
07-10-2005, 12:57 AM
kram wrote:
> About two weeks ago my computer suddenly began to restart on shut down. After
> reading some posts in the Newsgroups, I unchecked the "Restart" box in System
> Failure. In the past two days, I've gotten the dreaded bluescreen only twice
> on shut down, with the following error:
>
> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
>
> I looked at the Event Viewer, but could find only one "Warning," in the
> Application category:
>
> "Windows saved user KAREN\Karen Ram registry while an application or service
> was still using the registry during log off. The memory used by the user's
> registry has not been freed. The registry will be unloaded when it is no
> longer in use.
>
> This is often caused by services running as a user account, try configuring
> the services to run in either the LocalService or NetworkService account."
>
> Since I can't seem to locate Minidump, I can't view the error log. I read
> some tech support articles on the MS Web site and also read the stuff on the
> aumha.org Web site. I haven't installed any new hardware or drivers (except
> to restore the original REALTEK sound card driver). But I have absolutely no
> idea what's wrong or how to fix it.
>
> Can anyone help me?
>
> Thanks.

0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
http://aumha.org/win5/kbestop.htm

--
Rock
MS MVP Windows - Shell/User

kram
07-10-2005, 12:57 AM
Yes, I saw that. However, the MSDN article really didn't tell me very much!

"Rock" wrote:

> kram wrote:
> > About two weeks ago my computer suddenly began to restart on shut down. After
> > reading some posts in the Newsgroups, I unchecked the "Restart" box in System
> > Failure. In the past two days, I've gotten the dreaded bluescreen only twice
> > on shut down, with the following error:
> >
> > STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
> >
> > I looked at the Event Viewer, but could find only one "Warning," in the
> > Application category:
> >
> > "Windows saved user KAREN\Karen Ram registry while an application or service
> > was still using the registry during log off. The memory used by the user's
> > registry has not been freed. The registry will be unloaded when it is no
> > longer in use.
> >
> > This is often caused by services running as a user account, try configuring
> > the services to run in either the LocalService or NetworkService account."
> >
> > Since I can't seem to locate Minidump, I can't view the error log. I read
> > some tech support articles on the MS Web site and also read the stuff on the
> > aumha.org Web site. I haven't installed any new hardware or drivers (except
> > to restore the original REALTEK sound card driver). But I have absolutely no
> > idea what's wrong or how to fix it.
> >
> > Can anyone help me?
> >
> > Thanks.
>
> 0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
> http://aumha.org/win5/kbestop.htm
>
> --
> Rock
> MS MVP Windows - Shell/User
>
>

Jon
07-10-2005, 12:57 AM
No, you don't need to do anything. It runs as a service in the background
like your other services in
Control Panel > Administrative Tools > Services

Do you have things set up to record a minidump here ......?

Control Panel > System > Advanced > Click "Settings" under "Startup and
recovery"
Have a look in the "Write debugging info" section. Check the directory there
(mine is "%SystemRoot%\Minidump", which is the same as c:\windows\Minidump)
and select "Small memory dump (64kb) in the combobox above it

Jon


>
"kram" <kram@discussions.microsoft.com> wrote in message
news:9DDFAE7D-7876-4953-BF73-4F278D37AEFB@microsoft.com...
> OK. I installed the UPHClean utility. Now let's see what happens. I don't
> need to actually run the application, right? I just let it do its thing?
>
> Can you please tell me why I can't locate the minidump folder or crash
> dump
> files???
>
> "Jon" wrote:
>
>> It will be the 32-bit you'd need
>>
>> Actually you might be better off trying this first, to see if it does the
>> trick
>>
>> http://www.microsoft.com/downloads/details.aspx?FamilyID=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
>>
>> Jon
>>
>>
>> "kram" <kram@discussions.microsoft.com> wrote in message
>> news:10C8F372-D675-413D-967A-470A77D9C8E6@microsoft.com...
>> >I have a few questions:
>> >
>> > -- I do not have a Minidump folder in C:\WINDOWS. I did, however, find
>> > a
>> > userenv.lof file in C:\WINDOWS\Debug\UserMode. It seems to repeat the
>> > following information:
>> >
>> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref
>> > Count
>> > is
>> > not 0
>> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref
>> > Count
>> > is
>> > not 0
>> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref
>> > Count
>> > is
>> > not 0
>> > USERENV(31c.620) 17:32:20:484 GetGPOInfo: Local GPO's gpt.ini is not
>> > accessible, assuming default state.
>> > USERENV(31c.750) 17:32:20:515 GetGPOInfo: Local GPO's gpt.ini is not
>> > accessible, assuming default state.
>> > USERENV(31c.320) 17:34:17:421 MyRegUnLoadKey: Failed to unmount hive
>> > 00000005
>> > USERENV(31c.320) 17:34:17:421 DumpOpenRegistryHandle: 2 user registry
>> > Handles leaked from
>> > \Registry\User\S-1-5-21-3800514441-2800369307-1419737896-1005
>> > USERENV(31c.320) 17:34:17:421 UnloadUserProfileP: Didn't unload user
>> > profile
>> > <err = 5>
>> > USERENV(31c.320) 17:34:19:812 UnloadUserProfile: UnloadUserProfileP
>> > failed
>> > with 0
>> >
>> > Do you have any idea what this means???
>> >
>> > -- This may sound like a dumb question, but how do I know if I need the
>> > 32-
>> > or 64-bit version of windbg?
>> >
>> > Thanks,
>> > Karen
>> >
>> > "Jon" wrote:
>> >
>> >> You'll find the minidump in
>> >>
>> >> C:\WINDOWS\Minidump
>> >>
>> >> You can get hold of windbg from here
>> >>
>> >> http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
>> >>
>> >> This is quite a helpful walkthrough to enable you to identify the
>> >> faulting
>> >> module , if you look at the first post in this thread
>> >>
>> >> http://forum.majorgeeks.com/archive/index.php/t-35246.html
>> >>
>> >> Jon
>> >>
>> >>
>> >> "kram" <kram@discussions.microsoft.com> wrote in message
>> >> news:DA676B9E-D824-46D7-B872-F5C6A7F2FFB9@microsoft.com...
>> >> > Forgot to include system info:
>> >> >
>> >> > Windows XP Media Center Edition Service Pack 2 (build 2600)
>> >> > 3.40 gigahertz Intel Pentium 4
>> >> > 16 kilobyte primary memory cache
>> >> > 1024 kilobyte secondary memory cache
>> >> > 320.33 Gigabytes Usable Hard Drive Capacity
>> >> > 293.86 Gigabytes Hard Drive Free Space
>> >> > Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
>> >> > Bus Clock: 200 megahertz
>> >> > Realtek High Definition Audio
>> >> > Sony MPEG RealTime encoder board
>> >> > 1024 Megabytes Installed Memory
>> >> > Slot 'DIMM0' has 512 MB (serial number SerNum0)
>> >> > Slot 'DIMM1' is Empty
>> >> > Slot 'DIMM2' has 512 MB
>> >> > Slot 'DIMM3' is Empty
>> >> > BIOS: American Megatrends Inc. 3001 12/09/2004
>> >> > NVIDIA GeForce 6600 [Display adapter]
>> >> > Default Monitor (2x)
>> >> > Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)
>> >> >
>> >> >
>> >> > "kram" wrote:
>> >> >
>> >> >> About two weeks ago my computer suddenly began to restart on shut
>> >> >> down.
>> >> >> After
>> >> >> reading some posts in the Newsgroups, I unchecked the "Restart" box
>> >> >> in
>> >> >> System
>> >> >> Failure. In the past two days, I've gotten the dreaded bluescreen
>> >> >> only
>> >> >> twice
>> >> >> on shut down, with the following error:
>> >> >>
>> >> >> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
>> >> >>
>> >> >> I looked at the Event Viewer, but could find only one "Warning," in
>> >> >> the
>> >> >> Application category:
>> >> >>
>> >> >> "Windows saved user KAREN\Karen Ram registry while an application
>> >> >> or
>> >> >> service
>> >> >> was still using the registry during log off. The memory used by the
>> >> >> user's
>> >> >> registry has not been freed. The registry will be unloaded when it
>> >> >> is
>> >> >> no
>> >> >> longer in use.
>> >> >>
>> >> >> This is often caused by services running as a user account, try
>> >> >> configuring
>> >> >> the services to run in either the LocalService or NetworkService
>> >> >> account."
>> >> >>
>> >> >> Since I can't seem to locate Minidump, I can't view the error log.
>> >> >> I
>> >> >> read
>> >> >> some tech support articles on the MS Web site and also read the
>> >> >> stuff
>> >> >> on
>> >> >> the
>> >> >> aumha.org Web site. I haven't installed any new hardware or drivers
>> >> >> (except
>> >> >> to restore the original REALTEK sound card driver). But I have
>> >> >> absolutely
>> >> >> no
>> >> >> idea what's wrong or how to fix it.
>> >> >>
>> >> >> Can anyone help me?
>> >> >>
>> >> >> Thanks.
>> >>
>> >>
>> >>
>>
>>
>>

kram
07-10-2005, 12:58 AM
Yes, the path is "%SystemRoot%\Minidump," but the folder DOES NOT EXIST in
C:\WINDOWS. I changed the path to "C:\WINDOWS\Minidump." Do I need to create
the folder first???

The UPHClean utility failed a couple of hours ago on shut down. I got the
exact same STOP error message as before. Does this utility create some kind
of error log? If so, where can I find it?

How can I run WinDbg if I don't have a .DMP file??

Please HELP!
Thanks.

"Jon" wrote:

> No, you don't need to do anything. It runs as a service in the background
> like your other services in
> Control Panel > Administrative Tools > Services
>
> Do you have things set up to record a minidump here ......?
>
> Control Panel > System > Advanced > Click "Settings" under "Startup and
> recovery"
> Have a look in the "Write debugging info" section. Check the directory there
> (mine is "%SystemRoot%\Minidump", which is the same as c:\windows\Minidump)
> and select "Small memory dump (64kb) in the combobox above it
>
> Jon
>
>
> >
> "kram" <kram@discussions.microsoft.com> wrote in message
> news:9DDFAE7D-7876-4953-BF73-4F278D37AEFB@microsoft.com...
> > OK. I installed the UPHClean utility. Now let's see what happens. I don't
> > need to actually run the application, right? I just let it do its thing?
> >
> > Can you please tell me why I can't locate the minidump folder or crash
> > dump
> > files???
> >
> > "Jon" wrote:
> >
> >> It will be the 32-bit you'd need
> >>
> >> Actually you might be better off trying this first, to see if it does the
> >> trick
> >>
> >> http://www.microsoft.com/downloads/details.aspx?FamilyID=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
> >>
> >> Jon
> >>
> >>
> >> "kram" <kram@discussions.microsoft.com> wrote in message
> >> news:10C8F372-D675-413D-967A-470A77D9C8E6@microsoft.com...
> >> >I have a few questions:
> >> >
> >> > -- I do not have a Minidump folder in C:\WINDOWS. I did, however, find
> >> > a
> >> > userenv.lof file in C:\WINDOWS\Debug\UserMode. It seems to repeat the
> >> > following information:
> >> >
> >> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref
> >> > Count
> >> > is
> >> > not 0
> >> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref
> >> > Count
> >> > is
> >> > not 0
> >> > USERENV(31c.320) 17:32:09:437 CUserProfile::CleanupUserProfile: Ref
> >> > Count
> >> > is
> >> > not 0
> >> > USERENV(31c.620) 17:32:20:484 GetGPOInfo: Local GPO's gpt.ini is not
> >> > accessible, assuming default state.
> >> > USERENV(31c.750) 17:32:20:515 GetGPOInfo: Local GPO's gpt.ini is not
> >> > accessible, assuming default state.
> >> > USERENV(31c.320) 17:34:17:421 MyRegUnLoadKey: Failed to unmount hive
> >> > 00000005
> >> > USERENV(31c.320) 17:34:17:421 DumpOpenRegistryHandle: 2 user registry
> >> > Handles leaked from
> >> > \Registry\User\S-1-5-21-3800514441-2800369307-1419737896-1005
> >> > USERENV(31c.320) 17:34:17:421 UnloadUserProfileP: Didn't unload user
> >> > profile
> >> > <err = 5>
> >> > USERENV(31c.320) 17:34:19:812 UnloadUserProfile: UnloadUserProfileP
> >> > failed
> >> > with 0
> >> >
> >> > Do you have any idea what this means???
> >> >
> >> > -- This may sound like a dumb question, but how do I know if I need the
> >> > 32-
> >> > or 64-bit version of windbg?
> >> >
> >> > Thanks,
> >> > Karen
> >> >
> >> > "Jon" wrote:
> >> >
> >> >> You'll find the minidump in
> >> >>
> >> >> C:\WINDOWS\Minidump
> >> >>
> >> >> You can get hold of windbg from here
> >> >>
> >> >> http://www.microsoft.com/whdc/devtools/debugging/installx86.mspx
> >> >>
> >> >> This is quite a helpful walkthrough to enable you to identify the
> >> >> faulting
> >> >> module , if you look at the first post in this thread
> >> >>
> >> >> http://forum.majorgeeks.com/archive/index.php/t-35246.html
> >> >>
> >> >> Jon
> >> >>
> >> >>
> >> >> "kram" <kram@discussions.microsoft.com> wrote in message
> >> >> news:DA676B9E-D824-46D7-B872-F5C6A7F2FFB9@microsoft.com...
> >> >> > Forgot to include system info:
> >> >> >
> >> >> > Windows XP Media Center Edition Service Pack 2 (build 2600)
> >> >> > 3.40 gigahertz Intel Pentium 4
> >> >> > 16 kilobyte primary memory cache
> >> >> > 1024 kilobyte secondary memory cache
> >> >> > 320.33 Gigabytes Usable Hard Drive Capacity
> >> >> > 293.86 Gigabytes Hard Drive Free Space
> >> >> > Board: ASUSTeK Computer INC. PTGD2-VX Rev 1.xx
> >> >> > Bus Clock: 200 megahertz
> >> >> > Realtek High Definition Audio
> >> >> > Sony MPEG RealTime encoder board
> >> >> > 1024 Megabytes Installed Memory
> >> >> > Slot 'DIMM0' has 512 MB (serial number SerNum0)
> >> >> > Slot 'DIMM1' is Empty
> >> >> > Slot 'DIMM2' has 512 MB
> >> >> > Slot 'DIMM3' is Empty
> >> >> > BIOS: American Megatrends Inc. 3001 12/09/2004
> >> >> > NVIDIA GeForce 6600 [Display adapter]
> >> >> > Default Monitor (2x)
> >> >> > Sony SDM-HS95P [Monitor] (19.1"vis, s/n 6311066, January 2005)
> >> >> >
> >> >> >
> >> >> > "kram" wrote:
> >> >> >
> >> >> >> About two weeks ago my computer suddenly began to restart on shut
> >> >> >> down.
> >> >> >> After
> >> >> >> reading some posts in the Newsgroups, I unchecked the "Restart" box
> >> >> >> in
> >> >> >> System
> >> >> >> Failure. In the past two days, I've gotten the dreaded bluescreen
> >> >> >> only
> >> >> >> twice
> >> >> >> on shut down, with the following error:
> >> >> >>
> >> >> >> STOP: 0x0000008E (0xC0000005, 0x804EEEA8, 0xAE3D68C8, 0x00000000)
> >> >> >>
> >> >> >> I looked at the Event Viewer, but could find only one "Warning," in
> >> >> >> the
> >> >> >> Application category:
> >> >> >>
> >> >> >> "Windows saved user KAREN\Karen Ram registry while an application
> >> >> >> or
> >> >> >> service
> >> >> >> was still using the registry during log off. The memory used by the
> >> >> >> user's
> >> >> >> registry has not been freed. The registry will be unloaded when it
> >> >> >> is
> >> >> >> no
> >> >> >> longer in use.
> >> >> >>
> >> >> >> This is often caused by services running as a user account, try
> >> >> >> configuring
> >> >> >> the services to run in either the LocalService or NetworkService
> >> >> >> account."
> >> >> >>
> >> >> >> Since I can't seem to locate Minidump, I can't view the error log.
> >> >> >> I
> >> >> >> read
> >> >> >> some tech support articles on the MS Web site and also read the
> >> >> >> stuff
> >> >> >> on
> >> >> >> the
> >> >> >> aumha.org Web site. I haven't installed any new hardware or drivers
> >> >> >> (except
> >> >> >> to restore the original REALTEK sound card driver). But I have
> >> >> >> absolutely
> >> >> >> no
> >> >> >> idea what's wrong or how to fix it.
> >> >> >>
> >> >> >> Can anyone help me?
> >> >> >>
> >> >> >> Thanks.
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Jon
07-10-2005, 12:59 AM
> Yes, the path is "%SystemRoot%\Minidump," but the folder DOES NOT EXIST in
> C:\WINDOWS. I changed the path to "C:\WINDOWS\Minidump." Do I need to
> create
> the folder first???
>

Makes no difference whether you do or not. It would be created when the dump
is written.

Type "set" at a command prompt (start > run > cmd) to confirm your
%SystemRoot% really is "c:\windows" , though. Should have a line that says
"SystemRoot=C:\WINDOWS" if it is, when you type the set command. If it's not
then look in that other folder for the minidump folder / files.

> The UPHClean utility failed a couple of hours ago on shut down. I got the
> exact same STOP error message as before. Does this utility create some
> kind
> of error log? If so, where can I find it?

Look in Event Viewer
Control Panel > Administrative Tools > Event Viewer.
Also check the readme.txt file that's on the file download page for
UPHClean (where you downloaded the installer) Seem to recall you can tweak
it, via the registry, to give more analysis.


> How can I run WinDbg if I don't have a .DMP file??

You could run it, but you wouldn't have much to look at ;)
Search your harddrive for .dmp files though, just in case they are located
elsewhere, though
start > search > ... Put *.dmp in the "All or part of the filename" box

Jon

kram
07-10-2005, 12:59 AM
Yes, I confirmed that %SystemRoot% is, in fact, C:\WINDOWS. But I DO NOT have
a Minidump folder, nor do I have any .DMP files. I have, however, made Dr.
Watson my default debugger, so if this occurs again at least some kind of log
will be created.

This is very frustrating. I contacted Sony, and all they can suggest is to
re-format my hard drive. Since I spent four days setting up this new computer
(transferring everything f rom an old one), I want to avoid having to do that
again.

"Jon" wrote:

>
> > Yes, the path is "%SystemRoot%\Minidump," but the folder DOES NOT EXIST in
> > C:\WINDOWS. I changed the path to "C:\WINDOWS\Minidump." Do I need to
> > create
> > the folder first???
> >
>
> Makes no difference whether you do or not. It would be created when the dump
> is written.
>
> Type "set" at a command prompt (start > run > cmd) to confirm your
> %SystemRoot% really is "c:\windows" , though. Should have a line that says
> "SystemRoot=C:\WINDOWS" if it is, when you type the set command. If it's not
> then look in that other folder for the minidump folder / files.
>
> > The UPHClean utility failed a couple of hours ago on shut down. I got the
> > exact same STOP error message as before. Does this utility create some
> > kind
> > of error log? If so, where can I find it?
>
> Look in Event Viewer
> Control Panel > Administrative Tools > Event Viewer.
> Also check the readme.txt file that's on the file download page for
> UPHClean (where you downloaded the installer) Seem to recall you can tweak
> it, via the registry, to give more analysis.
>
>
> > How can I run WinDbg if I don't have a .DMP file??
>
> You could run it, but you wouldn't have much to look at ;)
> Search your harddrive for .dmp files though, just in case they are located
> elsewhere, though
> start > search > ... Put *.dmp in the "All or part of the filename" box
>
> Jon
>
>
>

Kelly
07-10-2005, 12:59 AM
Under Folder Options/View

1. Show hidden files and folders.
2. Do not hide protected operating system files.

--

All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com



"kram" <kram@discussions.microsoft.com> wrote in message
news:56404774-2034-488D-9731-7F5331E5CEAE@microsoft.com...
> Yes, I confirmed that %SystemRoot% is, in fact, C:\WINDOWS. But I DO NOT
> have
> a Minidump folder, nor do I have any .DMP files. I have, however, made Dr.
> Watson my default debugger, so if this occurs again at least some kind of
> log
> will be created.
>
> This is very frustrating. I contacted Sony, and all they can suggest is to
> re-format my hard drive. Since I spent four days setting up this new
> computer
> (transferring everything f rom an old one), I want to avoid having to do
> that
> again.
>
> "Jon" wrote:
>
>>
>> > Yes, the path is "%SystemRoot%\Minidump," but the folder DOES NOT EXIST
>> > in
>> > C:\WINDOWS. I changed the path to "C:\WINDOWS\Minidump." Do I need to
>> > create
>> > the folder first???
>> >
>>
>> Makes no difference whether you do or not. It would be created when the
>> dump
>> is written.
>>
>> Type "set" at a command prompt (start > run > cmd) to confirm your
>> %SystemRoot% really is "c:\windows" , though. Should have a line that
>> says
>> "SystemRoot=C:\WINDOWS" if it is, when you type the set command. If it's
>> not
>> then look in that other folder for the minidump folder / files.
>>
>> > The UPHClean utility failed a couple of hours ago on shut down. I got
>> > the
>> > exact same STOP error message as before. Does this utility create some
>> > kind
>> > of error log? If so, where can I find it?
>>
>> Look in Event Viewer
>> Control Panel > Administrative Tools > Event Viewer.
>> Also check the readme.txt file that's on the file download page for
>> UPHClean (where you downloaded the installer) Seem to recall you can
>> tweak
>> it, via the registry, to give more analysis.
>>
>>
>> > How can I run WinDbg if I don't have a .DMP file??
>>
>> You could run it, but you wouldn't have much to look at ;)
>> Search your harddrive for .dmp files though, just in case they are
>> located
>> elsewhere, though
>> start > search > ... Put *.dmp in the "All or part of the filename" box
>>
>> Jon
>>
>>
>>

Jon
07-10-2005, 01:00 AM
Might be some significance in that last comment you made there actually -
"transferring everything from an old one". Taking a simpler approach, it's
possible that some of your installed software, that installs a service, is
causing problems with your new computer, although it may have worked fine
with your last one - likely candidates being your antivirus or firewall.

If that's a possibility then try uninstalling those temporarily to see if it
solves the stop error problem. If it does then, perhaps consider upgrading
to newer versions of the software, or trying another package.

You can see your 3rd party services by going
start > run > msconfig > services tab > Check "Hide all Microsoft Services"
> (and then Cancel to leave rather than ok)

Jon


"kram" <kram@discussions.microsoft.com> wrote in message
news:56404774-2034-488D-9731-7F5331E5CEAE@microsoft.com...
> Yes, I confirmed that %SystemRoot% is, in fact, C:\WINDOWS. But I DO NOT
> have
> a Minidump folder, nor do I have any .DMP files. I have, however, made Dr.
> Watson my default debugger, so if this occurs again at least some kind of
> log
> will be created.
>
> This is very frustrating. I contacted Sony, and all they can suggest is to
> re-format my hard drive. Since I spent four days setting up this new
> computer
> (transferring everything f rom an old one), I want to avoid having to do
> that
> again.
>
> "Jon" wrote:
>
>>
>> > Yes, the path is "%SystemRoot%\Minidump," but the folder DOES NOT EXIST
>> > in
>> > C:\WINDOWS. I changed the path to "C:\WINDOWS\Minidump." Do I need to
>> > create
>> > the folder first???
>> >
>>
>> Makes no difference whether you do or not. It would be created when the
>> dump
>> is written.
>>
>> Type "set" at a command prompt (start > run > cmd) to confirm your
>> %SystemRoot% really is "c:\windows" , though. Should have a line that
>> says
>> "SystemRoot=C:\WINDOWS" if it is, when you type the set command. If it's
>> not
>> then look in that other folder for the minidump folder / files.
>>
>> > The UPHClean utility failed a couple of hours ago on shut down. I got
>> > the
>> > exact same STOP error message as before. Does this utility create some
>> > kind
>> > of error log? If so, where can I find it?
>>
>> Look in Event Viewer
>> Control Panel > Administrative Tools > Event Viewer.
>> Also check the readme.txt file that's on the file download page for
>> UPHClean (where you downloaded the installer) Seem to recall you can
>> tweak
>> it, via the registry, to give more analysis.
>>
>>
>> > How can I run WinDbg if I don't have a .DMP file??
>>
>> You could run it, but you wouldn't have much to look at ;)
>> Search your harddrive for .dmp files though, just in case they are
>> located
>> elsewhere, though
>> start > search > ... Put *.dmp in the "All or part of the filename" box
>>
>> Jon
>>
>>
>>


Intermittent STOP error on shut down