Question:

Hi all,

I have a Windows XP Pro. (SP3) machine on my domain that sponteniously crashes. The crashes cause Application Errors (Event 1000) to be logged.  The applications that crash are: iexplorer, outlook, and other  programs. Also, the following Dr Watson Event 4097 is logged:

Source: Dr Warson    Event ID:4097
The application, C:\Program Files\Internet Explorer\iexplore.exe, generated an application error The error occurred on 04/16/2009 @ 10:00:09.060 The exception generated was c0000005 at address 7C937423 (ntdll!RtlRemoveVectoredExceptionHandler).

And here are some of the application errors:

Source: Application Error Event ID: 1000
Faulting application iexplore.exe, version 7.0.6000.16791, faulting module ntdll.dll, version 5.1.2600.5512, fault address 0×00037423.

Source: Application Hang   Event ID:1002
Hanging application EXCEL.EXE, version 10.0.2614.0, hang module hungapp, version 0.0.0.0, hang address 0×00000000.

However, strangely, the DrWatson event is logged as an information event and not as a warning or error.  As I mentiouned before, the events occur randomly and it is really difficult to predict their occurance.

I have taken the following steps to try and isolate the problem (with no luck):
*Tested RAM
*Tested CPU
*Tested Harddrive
*reinstalled windows and applications

The user that experiences the crashes is set up with a roaming profile. I also noticed that when the application errors occur, the user column reports N/A and not the users name.

Any ideas?

Thanks,

Helicase

Solution:

Question PAQ’d, 500 points refunded, and stored in the solution database.