Win 2K - Sudden random shutdown. Win98se looking not so bad.

TomBilliodeaux

Senior member
Sep 29, 2000
788
0
0
Its been almost 2 weeks and 5 re-installs for Win2k Pro.
As much as I do not like W98, I am getting the feeling that W2k is not stable enough to rely on it.

In Outlook Express (mostly) I get a sudden complete shutdown. This also occurs when switching from one application to another while on the internet. Cannot identify any particular application. No games are being run on this system (yet).

Yes I am running my 128MB 133 HSDRAM at 222 instead of rated 232. (Win98 did not seem to mind). No overclocking:(P733EB133) 441fsb
I did update the latest stuff Microsoft has on its autoupdate site as well as the last recommended package. Seemed to be worse afterwards. AS others have stated, the install is a bitc. None of the drivers were install-friendly with the Intel 815 chipset AbitSE6.

Will try one more install if no one can recommend a solution. (That will take care of the other post problem about the file that opens up unwanted at startup). Then back to 98se.yuk. or perhaps I can learn Linux?

:disgust:
 

ctll

Senior member
Sep 28, 2000
208
0
0
it's not the OS
try the i815 drivers
i had to replace my memory, what i had wawsn't cutting it for some reason (could be the overclocking)
 

ctll

Senior member
Sep 28, 2000
208
0
0
and was it a clean install or upgrade? clean installs are always the best installs
 

TomBilliodeaux

Senior member
Sep 29, 2000
788
0
0
Clean install each of the 5 times. No updates. I did tinker with the registry lately over the program that keeps loading. I will reinstall the saved registry and see if that helps before reinstalling.
Memory is Mushkin HSDRAM Cas2,232 4.7ns chip, 133Mhz,128Mb. Good stuf.
I downloaded all that Microsoft had in its latest updates.
Abit latest drivers were installed for W2k.
Is their an ABIT forum like the CUSL2?
:p
 

TomBilliodeaux

Senior member
Sep 29, 2000
788
0
0
I changed my bios CAS to RAS back to Mushkin's memory module spec of 3 from previous 2 setting.

This seems to be working.


I did check the error logs that indicated driver loading problems (as suggested) concerning Winspool.drv error - driver unable to be loaded.
Then would get Unable to read IO control info from NBT device.


If I can only figure out what is instructing startup to run C:\WINNT\System32\cmd.exe and display the System32 directory folder.
 

jaywallen

Golden Member
Sep 24, 2000
1,227
0
0
Hi, Tom.

I suppose you've already looked at all of the usual suspects:

Check:

Startup folders for the current user and all users.

In the registry --

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
load REG_SZ and/or run REG_SZ values

plus

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

Or is this caused by Explorer mapping that directory as though it were a network drive? I saw this somewhere, I think on an old NT4 installation. I think it was caused by searching on folders that contained shortcuts to mapped drives and / or directories. But I think the problem was fixed by a service pack -- and it shouldn't be happening in W2K, unless Microsoft is repeating history.

I also have seen FindFast cause weird stuff like this. You're not running that nasty little thing are you?

Are those Event ID 37 errors in your Event Viewer? I suppose you've tried issuing the two commands

winmgmt /clearadap

winmgmt /resyncperf -p (p = PID of the WinMgmt process in Task Manager)

I had to disable a couple of (apparently) incompatible extensible counters to get rid of the perfproc.dll errors. Another fix is to change the timeouts on the offending counters. And I always get the NBT error if I disable my NIC.

Hope you solve your mysteries.

Regards,
Jim

 

jaywallen

Golden Member
Sep 24, 2000
1,227
0
0
Just had a brain storm. Well, okay it was probably just a brain f*rt. Wanted to mention it anyhow since this situation is so odd.

W2K can be set to parse an AUTOEXEC.BAT file. I was just thinking of all sorts of weird ways that this might happen and wondered a) if you had AUTOEXEC.BAT parsing enabled, and b) if there might be a command in that file that was causing Explorer to open the system32 folder.

Okay, it's a long shot, but I'm trying to be creative here!

:eek:

Regards,
Jim
 

TomBilliodeaux

Senior member
Sep 29, 2000
788
0
0
YEAH!!! Thanks Jim and the others at my other post.
IN the registry, I searched all the "run" keys to examine what you had mentioned.
I found one key that did not have any entry below the value.
ie- some had "no value" but this one did not and did not have a subsequent hive below it pointing to an exe. file like the others.
I deleted that key which was under Machine....Currentversion\run.
I deleted the key. No problem so far with several reboots and no more SYSTEM32 folder opening. Also deleted an entry under SETUP in the boot section. It was another blank item that looked like it did not call anything. I think this was the item causing the problem.
I see where this has been a continued problem for Microsoft.
They even have an article in their archives since 1997.

Again thanks everyone. This is a great learning forum.
 

jaywallen

Golden Member
Sep 24, 2000
1,227
0
0
Hi, Tom. Glad you found the culprit and banished him from the kingdom!

BTW, are you still seeing those performance counter related messages in your Event Viewer?

Regards,
Jim, typing on his slow old 500 MHz, non-overclocked PIII notebook
 

jaywallen

Golden Member
Sep 24, 2000
1,227
0
0
Hi, Tom.

Well, I have seen a lot of different WinMgmt / perfctrs / WMI ADAP errors in the Event Viewer Applications Logs on different machines. I haven't had an opportunity to do thorough research on the matter, but many of those errors that do show up in Windows 2000 appear to me to be due to incompatibilities between extensible performance counters which have been installed (by driver and / or software installation procedures). The incompatibilities aren't necessarily absolute. By that I mean that I've eliminated the error messages in some cases by increasing the timeout values for those counters in their respective keys in the registry. So it may be that the default timeout values for the performance counters for many devices may simply be too stringent.

An interesting commonality among most of the machines, especially portables, has been the appearance of Event ID 37 messages in the apps of the following wording:

WMI ADAP was unable to load the perfproc.dll performance library due to an unknown problem in the library: 0x0

My early research on Technet revealed only that Microsoft considered this to be related to Release Candidate 2 systems which had been upgraded to Windows 2000 gold. (The problem was supposed to be with the Performance Library Dredger thinking the library was invalid, even though the counter was functioning correctly. The problem was also supposed to have been solved in RC3.)

The manual fix on affected systems was to issue two commands from a command prompt:

winmgmt /clearadap

and

winmgmt /resyncperf -p (where "p" is the Process ID number for the WinMgmt process as listed in Task Manager)

However, the machines I was seeing this issue on were original clean installations of the commercial product, not upgrades from earlier releases of W2K. And issuing the above commands only provided temporary, if any, change in the behavior. Basically, you'd see some type of Event ID 37 error (though not necessarily the one mentioned above, some of them being related to the spooler or NIC adaptors or whatever, but always involving the performance counter / monitor system) occuring at the terminus of each boot. Often, issuing the "fix" commands would result in the next reported errors referring to performance counters not functioning due to timeouts. (That's why I tried increasing the timeout values in the registry.)

To the rescue comes a tool included in the Windows 2000 Resource Kits, exctrlst.exe (the Extensible Counter Listing tool). This tool provides a convenient means of listing the extensible counters on the system, and of disabling the ones that issue non-useful error messages. On my personal notebook I've only had to disable the perfproc and perfnet counters to eliminate all of these error messages. My system suffers no functional problems as a result. And I deliberately disabled the perfdisk counter to speed things up. (Notebook disk drives ain't exactly blessed with blazing speed, and killing of the collection of performance data on the drive gave me a noticeable performance boost.) Unfortunately, the tool is NOT freeware. (Some of the ResKit tools are downloadable for free.) Frankly, considering what appear to be inherent problems with the performance counter system, I think Microsoft might reconsider that policy.

It's cool that these monitors are provided to enable us to optimize and troubleshoot our systems, but I don't think MS got the kinks out yet. If they're going to enable the things by default, even on standalone W2K Pro installations, they should have them sorted out so that they don't pester the user with meaningless error messages. It appears that you have to really delve into the resource kit to make appropriate use of the performance monitoring capabilities of the system, so why turn on all of this stuff by default for every user? (I'm relatively new to Windows of any kind, being a retiree who doesn't have much use for an AIX system at home.) At present it doesn't seem to matter a whole lot what we do about the error messages. Ignoring them has no apparent adverse effect on the system, though the recurrent messages in the Event Viewer may give some users a Clint Eastwood twitch. Going into the registry and increasing the timeout values for troublesome counters seems to get rid of some messages. I presume you could disable them from the registry manually, but I'm wary of editing keys with which I'm not thoroughly familiar without some assurance of the precise nature my editing is to take. It's easy to figure that increasing a timeout will make the counter "relax" a little. Being certain of the proper value(s) to use (or delete) in the registry in order to disable a counter is something I'm not prepared to do on a work computer. When I have time, I'll use the Extensible Counter Listing tool to switch between enabled and disabled conditions for some counters to see what happens in the registry and make some notes on the matter. I'm beginning to see some registry fixes here and there online, so I expect that the "tweaks" sites will have the info up soon, and perhaps they already have posted such information.

The real point is that, if you're not suffering any actual performance or functional problems with the devices that are producing performance counter errors, then there really can't be anything wrong with silencing the little buggers -- as long as we don't bash our registries while we're at it.

Just in case you hadn't seen the feature, there's an icon on the properties dialog for each event reported that will copy the contents of that event message to the clipboard so that you can paste it into a text file for later reference or to a message thread for communicating with others about it. Might come in handy if you want to provide the information for future discussion.

Hope this is helpful.

Regards,
Jim

Dang, I can read over a message a hundred times in the editing window, but I don't see the errors until I post the danged message! Old eyes, old hands, cranky old brain!

;)