Link to home
Start Free TrialLog in
Avatar of rgb192
rgb192Flag for United States of America

asked on

ntbtlog.txt windows vista

enable boot logging
creates ntbtlog.txt which lists all drivers that load during startup, including the last file to load before a failure

I have  a windows cd

my computer will not startup... I get a blue screen error that has no real information
how can I view this file
Avatar of John
John
Flag of Canada image

Find and download a bootable CD (not your Windows install CD) and boot from it. Knoppix (Linux) or Bart's PE (Windows). Create the CD, boot from it, look on your hard drive for ntbtlog.txt and open it from the CD tools.

... Thinkpads_User
Avatar of Davis McCarn
Unfortunately; in the real world, knowing the last item which loaded properly can often be less useful than you might think.....
Knowing the exact STOP 0x???????? on the blue screen along with the module is often far more productive.  So, what is that STOP error?
If you are comfortable with MS-DOS, http://www.bootdisk.com has a nice collection of boot disks.  The most useful one, for me, is the NTFS ISO image which I regularly use to run CHKDSK, delete Trojans, edit files, etc.  It will cost you $4; but, you can then download all of the ones you might ever want.
Look for your last 3 *.dmp files, Zip them and attach them in your next post.
Avatar of rgb192

ASKER

stop: 0x0000007E (0XC0000005,0X87131963,0X8B1C387C,0X8B1C3578)


and I cant find the 'last file'
using windows cmd
That stop error is often caused by failing memory.  Go get the free version of http://www.memtest86.com and burn it onto a CD. (Get the ISO version and read their instructions for how to burn)  Boot it and let it run for at least 30 minutes.  Even one error indicates you found the problem.  Test one at a time to find the bad memory and replace it.
If it runs clean, post back.
Avatar of rgb192

ASKER

the cd player does not work
i only have a usb bootable windows vista disk

how can i find the ntblog.txt file
Avatar of rgb192

ASKER

ntbtlog.txt
It is always problematic when a CD player doesn't work. Not much of a way forward. Try putting the driver in another machine or drive enclosure to get to the file. Longer term, if the PC is of value (it may not be), consider replacing the CD player. ... Thinkpads_User
How to create a bootable USB drive: http://www.bjorn3d.com/read.php?cID=1620
You do know that laptop dvd/cdrw drives are under $20 and desktop ones even cheaper?
The dmp files are usually in the \Windows\Minidump directory. Connect the HD to another PC as a 2nd Disk so you can access those files, or boot the PC with a PartedMagic LiveCD, then you can connect to the LAN and copy the files directly. Along with the Unetbootin utility you can create a booting USB drive from the ISO instead of a LiveCD:

http://partedmagic.com/
http://unetbootin.sourceforge.net/
Avatar of rgb192

ASKER

last minidump file
Mini090910-01.dmp
Avatar of rgb192

ASKER

minidump middle
Mini090810-01.dmp
Avatar of rgb192

ASKER

minidump first


how can i view minidump files
Mini083010-01.dmp
Two of your dumps point to symevent.sys,  which would be part of your Symantec products, like Antivirus or similar. If you can boot into safemode, or into normal mode with the LAN not connected, try uninstalling your symantec software. Also check their website, they have uninstallers for many of their products, as very often Symantec stuff doesn't uninstall properly the normal way.

The other dump pointed to spsys.sys, for which I don't know more about (I think it is part of Vista, a Vista repair could fix it). The error code in that dump also points to a bad pagefile, so you might want to first run the HD manufacturer's diagnostic utility on it, and if it finds errors and offers to repair them, allow it to do so. If it doesn't find errors, or if it has successfully repaired all of them, run a chkdsk /x on the drive-letters of that HD. After that delete the pagefile, reboot into windows and create a new pagefile. Also running a memtest86+ as has already been mentioned can't be wrong. That should also be included on the PartedMagic Flash Disk you have made (when you start from it, you get a boot menu and it should be one of the last items there.
Avatar of rgb192

ASKER

I read the 3 dump files
(it was my first time reading dmp files- so I may be incorrect)
I did not see symevent.sys, but I do have symantec

I can boot into safe mode now because I disconnected dvd drive

>>spsys.sys, for which I don't know more about (I think it is part of Vista, a Vista repair could fix it).

could i delete spsys.sys,  does vista repair mean repair install (I dont want to do this)

>>The error code in that dump also points to a bad pagefile, so you might want to first run the HD manufacturer's diagnostic utility on it, and if it finds errors and offers to repair them, allow it to do so.

Do I do this in bios, or how can i do this



>> If it doesn't find errors, or if it has successfully repaired all of them, run a chkdsk /x

Is this the same as chkdsk /r/f (which I am running right now)


>> After that delete the pagefile, reboot into windows and create a new pagefile.

How to create page file, where is pagefile located

>>Also running a memtest86+ as has already been mentioned can't be wrong

I dont have a cd drive
ASKER CERTIFIED SOLUTION
Avatar of rindi
rindi
Flag of Switzerland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of rgb192

ASKER

thanks