Solved

Could "missing or corrupt hal.dll" be a symptom of hardware failure?

Posted on 2004-08-05
26
23,497 Views
Last Modified: 2008-03-03
Over the last week I've been having more and more crashes. Below are a (I hope) representative selection of logs for them. Finally in frustration I removed all my hardware and reinstalled windows. All went well (for 5 minutes, as I basked in the glow of my achievement), then I tried to install a bluetooth device. A reboot was called for. Then I received "the following file is missing or corrupt <windows root>\system32\hal.dll". I've installed on a previously unused hd. I haven't connected to the web at all for any reason on the pc in question, so, could I sue the producers of the bluetooth software for time and effort (;-))? I'm thinking that my video card may be at fault, but I just don't know. Any ideas much appriciated.

Event Type:      Error
Event Source:      EventSystem
Event Category:      (50)
Event ID:      4609
Date:            28/07/2004
Time:            10:53:38
User:            N/A
Description:
The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.

Event Type:      Error
Event Source:      VSS
Event Category:      None
Event ID:      8193
Date:            28/07/2004
Time:            10:53:38
User:            N/A
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040206.
Data:
0000: 57 52 54 57 52 54 49 43   WRTWRTIC
0008: 32 31 31 33 00 00 00 00   2113....
0010: 57 52 54 57 52 54 49 43   WRTWRTIC
0018: 32 30 37 38 00 00 00 00   2078....

Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10005
Date:            05/08/2004
Time:            09:53:49
User:            
Description:
DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Event Type:      Error
Event Source:      VSS
Event Category:      None
Event ID:      8193
Date:            04/08/2004
Time:            11:30:56
User:            N/A
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040206.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 52 54 57 52 54 49 43   WRTWRTIC
0008: 32 31 31 33 00 00 00 00   2113....
0010: 57 52 54 57 52 54 49 43   WRTWRTIC
0018: 32 30 37 38 00 00 00 00   2078....


Event Type:      Error
Event Source:      EventSystem
Event Category:      (50)
Event ID:      4609
Date:            04/08/2004
Time:            11:30:56
User:            N/A
Description: The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.  Please contact Microsoft Product Support Services to report this error.

Event Type:      Error
Event Source:      Application Hang
Event Category:      (101)
Event ID:      1002
Date:            03/08/2004
Time:            18:14:20
User:            N/A
Description: Hanging application iexplore.exe, version 6.0.2800.1106, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 48 61 6e 67   ion Hang
0010: 20 20 69 65 78 70 6c 6f     iexplo
0018: 72 65 2e 65 78 65 20 36   re.exe 6
0020: 2e 30 2e 32 38 30 30 2e   .0.2800.
0028: 31 31 30 36 20 69 6e 20   1106 in
0030: 68 75 6e 67 61 70 70 20   hungapp
0038: 30 2e 30 2e 30 2e 30 20   0.0.0.0
0040: 61 74 20 6f 66 66 73 65   at offse
0048: 74 20 30 30 30 30 30 30   t 000000
0050: 30 30                     00      


Event Type:      Error
Event Source:      Application Error
Event Category:      None
Event ID:      1000
Date:            03/08/2004
Time:            18:13:43
User:            N/A
Description: Faulting application iexplore.exe, version 6.0.2800.1106, faulting module ntdll.dll, version 5.1.2600.1217, fault address 0x00033aed.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 69 65 78   ure  iex
0018: 70 6c 6f 72 65 2e 65 78   plore.ex
0020: 65 20 36 2e 30 2e 32 38   e 6.0.28
0028: 30 30 2e 31 31 30 36 20   00.1106
0030: 69 6e 20 6e 74 64 6c 6c   in ntdll
0038: 2e 64 6c 6c 20 35 2e 31   .dll 5.1
0040: 2e 32 36 30 30 2e 31 32   .2600.12
0048: 31 37 20 61 74 20 6f 66   17 at of
0050: 66 73 65 74 20 30 30 30   fset 000
0058: 33 33 61 65 64 0d 0a      33aed..


Event Type:      Error
Event Source:      VSS
Event Category:      None
Event ID:      8193
Date:            28/07/2004
Time:            11:10:16
User:            N/A
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040206.
Data:
0000: 57 52 54 57 52 54 49 43   WRTWRTIC
0008: 32 31 31 33 00 00 00 00   2113....
0010: 57 52 54 57 52 54 49 43   WRTWRTIC
0018: 32 30 37 38 00 00 00 00   2078....


Event Type:      Error
Event Source:      EventSystem
Event Category:      (50)
Event ID:      4609
Date:            28/07/2004
Time:            11:10:16
User:            N/A
Description: The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.  Please contact Microsoft Product Support Services to report this error.

Event Type:      Error
Event Source:      VSS
Event Category:      None
Event ID:      8193
Date:            28/07/2004
Time:            10:53:38
User:            N/A
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040206.
Data:
0000: 57 52 54 57 52 54 49 43   WRTWRTIC
0008: 32 31 31 33 00 00 00 00   2113....
0010: 57 52 54 57 52 54 49 43   WRTWRTIC
0018: 32 30 37 38 00 00 00 00   2078....


Event Type:      Error
Event Source:      EventSystem
Event Category:      (50)
Event ID:      4609
Date:            28/07/2004
Time:            10:53:38
User:            N/A
Description: The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.  Please contact Microsoft Product Support Services to report this error.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7026
Date:            04/08/2004
Time:            11:32:21
User:            N/A
Description:
The following boot-start or system-start driver(s) failed to load:
AmdK7
Fips
IPSec
KmxFw
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7001
Date:            04/08/2004
Time:            11:32:21
User:            N/A
Description: The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7001
Date:            04/08/2004
Time:            11:32:21
User:            N/A
Description: The Messenger service depends on the NetBIOS Interface service which failed to start because of the following error:
A device attached to the system is not functioning.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7001
Date:            04/08/2004
Time:            11:32:21
User:            N/A
Description: The DHCP Client service depends on the SYMTDI service which failed to start because of the following error:
The dependency service or group failed to start.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7001
Date:            04/08/2004
Time:            11:32:21
User:            N/A
Description: The SYMTDI service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
A device attached to the system is not functioning.

Event Type:      Information
Event Source:      Save Dump
Event Category:      None
Event ID:      1001
Date:            04/08/2004
Time:            11:30:54
User:            N/A
Description:
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000000a (0xc051d0c7, 0x00000002, 0x00000000, 0x8050bfd0). A dump was saved in: C:\WINDOWS\Minidump\Mini080404-01.dmp.



0
Comment
Question by:joffy
  • 8
  • 6
  • 3
  • +7
26 Comments
 
LVL 36

Expert Comment

by:Zyloch
ID: 11731991
Hi

You'd probably have to boot to the recovery console on your WinXP disk:
http://www.webtree.ca/windowsxp/repair_xp.htm has information on how to boot to the Recovery Disk

After you boot to there, run sfc /scannow and chkdisk and that should solve your problem.

Regards,
Zyloch
0
 
LVL 7

Expert Comment

by:GATOR420
ID: 11732040
My first guess by looking at these dumps would be to check the NIC card.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11732284
If you need to replace the hal.dll, you can do this with the Recovery Console and your Installation CD...  just copy it from the i386 folder on the cd to your %systemfolder%\system32 folder..

FE
0
 
LVL 91

Expert Comment

by:nobus
ID: 11733947
you stated that you've had more and more crashes; i would then test everything as much as possible, assemble a basic system and in stall on that one; only then i would add more to it. And before installing, take out the NIC (or disable it) i've had troubles with some too...
test the HDD with the soft you find on the manufacturers site, or post back the type
a link to test the memory :

http://www.memtest.org/                        memtest86+

hope it get's you on the road again...

nobus
0
 
LVL 5

Expert Comment

by:LordRipper
ID: 11742456
Hi there
well this is easy to fix

Insert and boot from your WindowsXP CD.
At the first R=Repair option, press the R key
Press the number that corresponds to the correct location for the installation of Windows you want to repair.
Typically this will be #1
Type bootcfg /list to show the current entries in the BOOT.INI file
Type bootcfg /rebuild to repair it
Take out the CD ROM and type exit

But if this happens it means your hardrive have some seriuos errors and if it happend once it will happen again ....Take out the hard drive, and hook it to another system as a Slave drive, then within windows access the slave drive from Primary drive and copy all of the data.

after that hook back your drive to your system and format the drive and do a fresh installation after that just copy your data back

goodluck
0
 

Author Comment

by:joffy
ID: 11775419
I think theres something seriously wrong!! The system now won't finish POSTing. The beep code that it gives is "RAM failure on data bits xxxx of high byte of memory bus."  The system is a dual processor tyan mb (s2466). I got the mb to POST ok after removing one of the processors, so I thought that it was probably that processor. Tried re-installing windows after testing all my components to see whether the system would POST, and then the beep code repeated itself. It may be that I've got too much thermal compound on the processors - could this fry them?
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11775778
No, thermal compound will not conduct electrical current, so it is safe to say the it will not 'fry' them, but it is counterproductive to put too much on these.  A small amount will suffice.  I use Artic Silver (the best) on all my processors..  Here is a quick tutorial on application:

http://www.arcticsilver.com/arctic_silver_instructions.htm
0
 

Author Comment

by:joffy
ID: 11776863
Does anybody know what part of the POST the system is getting to? Is the POST error beep code testing the processor(s)?  I've got thermal compund on parts of the processor other than the central die. Is the mobo dead?
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11777144
You can determine the problem using the beep codes..  Again, here is a link from my webpage for this:

http://65.24.134.81/KipSolutions/bios/Bios.htm

You will need to know the BIOS manufacturer.  Look at the bottom of the page for a listing of all the beep codes to determine the problem..

FE
0
 

Author Comment

by:joffy
ID: 11777549
Its phoenix 4.06. I've already looked the code up, as I said above. "RAM failure on data bits xxxx of high byte of memory bus." is my problem, but I'm not sure what this means/refers to. Where is the memory bus? - on the mobo? in the processor? I've ruled out extended ram, as the POST never gets anywhere near it.
0
 

Author Comment

by:joffy
ID: 11777592
PS the mobo comes with an integrated NIC, which worked fine for a year, so I assume its not that.
0
 

Author Comment

by:joffy
ID: 11777615
PPS I tried resetting the cmos just before getting the system to POST after I removed one of the processors.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11777757
Looks to me like a memory problem.  If you have more than one stick of memory in there, take one out at a time and see if the problem still occurs.  
0
 

Author Comment

by:joffy
ID: 11778175
I suspect this now souodn't really bein this topic but in the hardware topic. Never mind.. and thanks in advance for all the help.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11779075
That is okay..  most all of the experts in the OS areas are also qualified to work on hardware also...  :)
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11965154
Just in case this is not deleted and ends up being paq'd, one thing to note regarding a missing HAL error..  This is usually just an error in the Boot.ini file.  It can be corrected using the Recovery Console and running the bootcfg /rebuild command..  

FE
0
 
LVL 5

Expert Comment

by:LordRipper
ID: 11965204
yip just As I also posted in my previous post ....
>>>>>>Type bootcfg /list to show the current entries in the BOOT.INI file
Glad that someone agrees with me ....thanks Fatal  ;-)
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 11965546
Ha..  LR..  did not see that in the post...  :)
0
 
LVL 5

Expert Comment

by:LordRipper
ID: 11965661
Fatal ..... don't worry ... .think the questioner also missed it .... ;-)
but its atleast there for future refrence ...... well I hope so ....
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 11989479
PAQed, with points refunded (250)

Computer101
E-E Admin
0
 

Expert Comment

by:telemed2
ID: 12046072
I had the same problem with hal.dll file. I was practically reinstalling XP everyday until I read this article that stated that sometimes the disk is so overloaded it won't display the correct capacity - so you are thinking you are okay but in reality you barely have enough room - so I followed the advice of the article which says to save what you can, reformat and partition, and go from there. It certainly worked for me as I haven't had any problems since doing that , other than the irritation and annoyance at having to redo the disk.
0
 

Expert Comment

by:thanawee
ID: 12429694
To resolve this problem, repair the Windows XP installation from your CD-ROM

http://www.jsiinc.com/SUBO/tip7100/rh7193.htm
0
 

Expert Comment

by:thanawee
ID: 12429735
0
 

Expert Comment

by:vvbraju
ID: 12553085
There was a critical Problem in windows XP and 2003:

Symptoms:
1.Disappearing the Network Connections and Dcom objects (dcomcnfg), according to eventviewer logs there was log posted with ID:4609, Source: EventSystems.
2.Unable to configure new network connection like vpns and all, existing VPN connection is not working
3.But network is up, able to connect LAN machines and internet

Action taken: After removing the Service pack 2, working fine for some machines but not for all.

Desperately looking for solution since there was no link which gives the details or solution for specified problem.......Can any one take this challange????

Cheers,
Raja
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 12554605
wb, you need to open a new thread for you problem...  That way, the experts can see and respond to your questions..

FE
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now