Computer Support Forum

Event Viewer help? Need to diagnose unexpected shutdown on new build

Question: Event Viewer help? Need to diagnose unexpected shutdown on new build

I just rebuilt with a new motherboard, new Intel 6600K, and new RAM. It's assembled on a table top rather than in the case. All other parts are from an earlier build but believed to be in good shape.

I went to sleep about 14 hours ago with my PC still running. I was doing a backup job that would take a few hours, so I just slept.

6 hours later I woke up and notice that the CPU fan is not spinning. Panic. I didn't know if the motherboard had failed, the fan had failed, or even if the PC was running. Nothing displayed on the monitor.

I shut down and rebooted successfully, getting the "Windows did not shut down properly error".

Looking at logs, I see that the backup job completed at 1236 pm and that the Windows shut down at 1237, one minute later. Coincidence? Maybe.

Windows Reliability History gives no info beyond mentioning the unexpected shutdown.

Event Viewer may have more info, but I'm not familiar enough with it to find anything useful.

Do you have any specific help on Event Viewer?

Also interested in any ideas you may have on the cause.

The local power company says there were no failures today in my area.

The PC appears to be working OK for the last 8 hours since I restarted.

The backup job did in fact complete successfully. All files were copied as expected.

I re-ran the backup job to see if the PC would shut down when it finished a second time. It did not.

The new hardware has less than 100 hours of time on it and I need to determine if I need to RMA or if this was just one of those occasional unexplainable things that can happen.

Any diagnostic ideas especially welcome. I have no tools beyond screwdrivers. Power supply is a highly regarded unit that has been flawless and is less than 2 years old.

Relevance 100%
Preferred Solution: Event Viewer help? Need to diagnose unexpected shutdown on new build

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Event Viewer help? Need to diagnose unexpected shutdown on new build

I would run a memtest with the new RAM.
RAM - Test with Memtest86+

1 more replies
Relevance 84.46%

Greetings Gents


? Windows 7 ultimate
? x64
? it was vista upgraded to 7
? full retail version
? 2009
? 2010
? Intel(R) Core(TM)2 Quad CPU Q9100 @ 2.26GHz
? NVIDIA GeForce GTX 260M
? Alienware M17x
? FLEXTRONICS 19.5 v *12.3 a = 239.85 w

Summery:
out of sudden when i playing mkv or .avi media it stopped working and force me to total shutdown the system. To be precise, I never faced the BOSD; yet I know it the same/equivalent to it. I am seeking your help gents :D

kindly find the attached

thank you & your rapid response is highly appreciated.

Answer:BSOD - Event ID 6008 Previous Shutdown was Unexpected - need total shutdown

Hi -

Most of the 11 BSODs list NVIDIA video as the probable cause.

1. Update your NVIDIA video drivers -

Code:

nvlddmkm.sys Tue Mar 16 22:00:40 2010 (4BA037C8)
nvBridge.kmd Tue Mar 16 21:31:37 2010 (4BA030F9)

NVIDIA --> http://www.nvidia.com/Download/index.aspx?lang=en-us

One of the BSODs had a bugcheck = 0x124 = WHEA = Windows Hardware Error Architecture - potential hardware failure

Info on 0x124 --> http://www.sevenforums.com/crash-loc...-what-try.html

2. Remove Daemon Tools/ Alcohol 120. A driver common to both sptd.sys is known to cause BSODs.

3. Update your ESET installation to v4.2.64.12 --> http://www.eset.com/download

You need device driver updates. Alienware Support sends me to Dell Support -

http://support.dell.com/support/down...nConsent=False

4. Update all device drivers - chipset (NVIDIA & Ricoh), audio, network. DO NOT download the NVIDIA Video driver from Dell - go to NVIDIA Support per step #1 above.

Windbg Logs
--> http://jcgriff2.com/dbug_logs/_99-db..._jcgriff2_.txt
--> http://jcgriff2.com/dbug_logs/_99-db...riff2_.txt.zip


If BSODs persist after driver updates, run the Driver Verifier --> http://jcgriff2.com/driver_verifier.htm

Regards. . .

jcgriff2

`


BSOD BUGCHECK SUMMARY

Code:

Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Tue Aug 17 21:36:50.639 2010 (GMT-4)
System Uptime: 0 days 3:49:08.761
*** WARNING: Unable to verify tim... Read more

2 more replies
Relevance 84.05%

Ever since doing the Fall Creators Update (1709), every time I shut down my PC, event viewer shows Event 41 (Unexpected Shutdown). I'm turning it off in the usual way (Windows/Power/Shutdown).

Any suggestions, please?

Rob.

More replies
Relevance 82.41%

Greetings - I have searched for months but cannot fix this on my own and appreciate any help, please.

Shutdowns occurring in front of my eyes or when I'm not looking; cannot discern any particular software or drivers at fault. Loses all power and stays off, like a power plug pulled. Happens at my home and others as well, with home PSU or my travel PSU (both OEM) and carefully handled over the years, as well as on battery power only.

I had these issues before the new hard drive & Win7 OS installed Sept 2014. Shutdowns began shortly after again; now shutdowns much worse again. Do not believe it's temp related; I run a fan nonstop under the laptop which is in the air on a platform with cooling pad underneath, regularly shoot canned air in; temps read avg mid-40's C and stay displayed in systray, so I watch carefully. Happens with 2 different PSU's, carefully handled, also on just battery power. Did a power drain recently for static buildup; coincidentally or not, was better for a week. Have run chkdisk, memory tests, check for driver updates, and other system tools; no problems detected.

Event viewer seems to have the same patterns leading up to the shutdowns, but things I've tried from searches are ineffective. Here's the pattern, after manually restarting after a blackout shutdown.

Event 219, Kernel-PnP - Warning
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PRO... Read more

Answer:Frequent Unexpected Shutdowns to No Power-Same Pattern in Event Viewer

  
Quote: Originally Posted by Catherine99


temps read avg mid-40's C and stay displayed in systray, so I watch carefully.

Event viewer seems to have the same patterns leading up to the shutdowns, but things I've tried from searches are ineffective. Here's the pattern, after manually restarting after a blackout shutdown.


mid-40C temps are very good, but how are you monitoring temps? Some progs monitor CPU but not MB (graphics chip). With laptops, it's most often the graphics chip that causes overheat problems.

The two events leading to the shutdown may indicate hardware failure. Is there any connection between shutdowns and moving the unit? Has it ever been dropped?

You might run the machine overnight off a linux boot disk and see if the problem occurs. If so you will have a pretty good idea it's hardware driven.

7 more replies
Relevance 80.77%

Several times over the last few weeks, I noticed that my computer (Dell Optiplex 9020) had rebooted while left on overnight. Then today, without warning, the light blue (not BSOD) WIn 10 Restarting screen appeared while I was doing something noninvasive, like checking email. Then the system rebooted.

The event viewer offered the following clues:

Event ID 109
The kernel power manager has initiated a shutdown transition.
Shutdown Reason: Kernel AP

Event ID 1074
The process C:\WINDOWS\system32\winlogon.exe (MARK-9020) has initiated the restart of computer MARK-9020 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
I would be very grateful to hear back from members who have solved this problem.
Thanks!

More replies
Relevance 80.77%

Several times over the last few weeks, I noticed that my computer (Dell Optiplex 9020) had rebooted while left on overnight. Then today, without warning, the light blue (not BSOD) WIn 10 Restarting screen appeared while I was doing something noninvasive, like checking email. Then the system rebooted.

The event viewer offered the following clues:

Event ID 109
The kernel power manager has initiated a shutdown transition.
Shutdown Reason: Kernel AP

Event ID 1074
The process C:\WINDOWS\system32\winlogon.exe (MARK-9020) has initiated the restart of computer MARK-9020 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
I would be very grateful to hear back from members who have solved this problem.
Thanks!

More replies
Relevance 80.77%

Several times over the last few weeks, I noticed that my computer (Dell Optiplex 9020) had rebooted while left on overnight. Then today, without warning, the light blue (not BSOD) WIn 10 Restarting screen appeared while I was doing something noninvasive, like checking email. Then the system rebooted.

The event viewer offered the following clues:

Event ID 109
The kernel power manager has initiated a shutdown transition.
Shutdown Reason: Kernel AP

Event ID 1074
The process C:\WINDOWS\system32\winlogon.exe (MARK-9020) has initiated the restart of computer MARK-9020 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
I would be very grateful to hear back from members who have solved this problem.
Thanks!

More replies
Relevance 80.36%

Greetings - I have a major problem of 4-6 shutdowns a day and would really appreciate your help. Here are the specs, description of the problem will follow:
----------------------------------------------------------------
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 4062 Mb
Graphics Card: NVIDIA GeForce G 105M, 512 Mb
Hard Drives: C: Total - 476937 MB, Free - 202635 MB;
Motherboard: Compal, 306D
Antivirus: Microsoft Security Essentials, Updated and Enabled
----------------------------------------------------------------

I have searched for months but cannot find a solution to fix this on my own. It's getting much worse suddenly.

Shutdowns occurring in front of my eyes or when I'm not looking; cannot discern any particular software or drivers at fault, no timing pattern. Browser and email open or not; assorted programs open or not. Loses all power and stays off, like a power plug pulled. Happens at my home and other locations as well, with home PSU or my travel PSU (both OEM and carefully handled over the years), as well as on battery power only.

I had random shutdowns before a new hard drive replacement & clean Win7 OS installed Sept 2014. Shutdowns began shortly after again; now shutdowns much worse again. Do not believe it's temp related; I run a fan nonstop und... Read more

Answer:Frequent Unexpected Shutdowns / Black Screen-No Pwr / Repeat Patterns in Event Viewer

16 more replies
Relevance 79.95%

I plug in a flashdrive, scan it, copy a few files, pull it out (it had 3 files on it, never have viruses. Never.). Windows suddenly decides to shutdown. Waited :30 sec, rebooted, logged in and went to Event Viewer>System and filter for 6008 events. Zero, no listings. Can't find anything in the past 20 minutes that looks like a shutdown.

What gives? How can Event Viewer not show the shutdown? How can I find out what the burp was? I've had no issues lately (since a new card in July), Windows has been flawless. I hate it when Windows does something like this and I can't track it down.
Thanks in advance for any interest,

Surviver

More replies
Relevance 79.13%

Hi, i have just done a fresh install of win 7 and all was normal for 7 days with no errors in the event log but now on every start up i get the above error in the event log and don,t know how to trace it.After hours of googling i came upon a thread where you had helped someone else with the same problem.Thanks in advance for any help you can lend me.  Regards mark

Answer:Event ID 6008 The previous shutdown was unexpected

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy,  taking care to post the link of the snapshot in your next post.
   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.
    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course):
     Now, at the top, click File > Publish Snapshot. You will see the following prompt:
 &n... Read more

4 more replies
Relevance 79.13%

My computer continuously shutdowns every hour or so without any warning. When the computer loads back up a message pops up telling me that I have had an unexpected shutdown. If I click on more information it shows me what the error was (I have the error message copied if you wish to see it) but it makes no sense to me.

I have looked around for a solution but my error message is different to everyone elses.

If anyone could help me with this problem it would be much appreciated, thank you in advance.

Specs:

OS: Windows 7 Ultimate 64-bit
Processor: Intel Core 2 Duo
RAM: 2GB
Graphics card: ATI Radeon X1600 Series
Previous OS: Windows XP Media Center Edition

Lee.

Answer:Unexpected Shutdown - Problem Event Name: BlueScreen

@ttran

Sorry, I will do that now.

Thank you

@Marvel Varghese

I am certain it's not the beta, I bought Windows 7 Ultimate.

9 more replies
Relevance 79.13%

Hi, i have just done a fresh install of win 7 and all was normal for 7 days with no errors in the event log but now on every start up i get the above error in the event log and don,t know how to trace it.After hours of googling i came upon a thread where you had helped someone else with the same problem.Thanks in advance for any help you can lend me.  Regards mark

Answer:Event ID 6008 The previous shutdown was unexpected

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy,  taking care to post the link of the snapshot in your next post.
   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.
    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course):
     Now, at the top, click File > Publish Snapshot. You will see the following prompt:
 &#... Read more

2 more replies
Relevance 78.31%

Hi,
 
My desktop had been failing to wake from sleep (needing a restart everytime) since I installed the Windows 10 Anniversary update. Last night, I updated the chipset, intel graphics, and nvidia graphics drivers to their latest versions. Since last night, I have had three unexplained shutdowns after putting my pc to sleep. In event viewer, I am getting the 6008 error. 
 
My specs are
 
http://speccy.piriform.com/results/PepJcmtf23xATPNdl6YHn3L
 
Thanks for your help, and let me know what other information I might need to provide. 
 
 
Ciaran

More replies
Relevance 77.49%

This has been happening periodically for several weeks It doesn't happen every day so I have been just restarting and continuing on. It seems to happen when the desktop is not even being used. (i.e. middle of the night). Power settings are to never sleep. I've been running core temp because somewhere I saw that it might be related to a thermal event, but that doesn't seem to be the case here. I am not seeing much in the event log other than the event 6008, unexpected shutdown (with no other details). I am not getting bSOD minidumps either in the c:\windows\minidumps folder even though I do have this setup in system security. I've attached the dump files so hope that one of you can help me take a look to see if you can help me to figure it out. The last 6008 was earlier today around 2 AM PDT. Right now I am running chkdsk to see if that turns up anything. Any help appreciated. Thanks.

Edit: see updated dump file in post #3

Answer:Event 6008 unexpected shutdown Win7 Ultimate 64bit

There are numerous files missing from your upload, please run the tool again and wait for the files to be gathered then upload

3 more replies
Relevance 77.08%

Hey guys,
 
I built a new computer about a week ago and I`ve found out about these few errors in event viewer. Although the build has not had any major problems so far and has been very successful, I`d like to find out what those errors stem from just to make sure everything`s all right.
 
Here`s the info:
 
http://speccy.piriform.com/results/yvzLdPSkxTXQMH6C0e3IJ06
 
MiniToolBox by Farbar  Version: 21-07-2014
Ran by Jason (administrator) on 16-08-2014 at 17:46:48
Running from "C:\Users\Jason\Downloads"
Microsoft Windows 7 Professional   (X64)
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (08/16/2014 04:30:20 PM) (Source: thermald) (User: )
Description: System.NullReferenceException: Object reference not set to an instance of an object.
   at Gigabyte.EasyTune.WinRegistry.RegistryKeyHandle.ReadDwordValue(RegistryHive hKey, String subKey, String valueName, UInt32& pDwordValue)
   at Gigabyte.EasyTune.Fan.FanControl.IsEnableCalibrateStatus()
   at thermald.MainWindow.CheckFanCalibrateStatus()
   at thermald.MainWindow.SystemFanDispatcherTimer_Tick(Object sender, EventArgs e)
 
Error: (08/16/2014 04:30:17 PM) (Source: thermald) (User: )
Description: System.NullReferenceException: Object reference not set to an instance o... Read more

Answer:New build - Event viewer errors

Greetings, Buttwagon!
 
As you can see there were errors related to EasyTune, but since you removed it - problem is gone.
 

Error: (08/16/2014 04:17:37 PM) (Source: Application Error) (User: )
Description: Faulting application name: HCLOUD.exe, version: 1.0.0.0, time stamp: 0x5338f86e
Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdbdf
Exception code: 0xe0434352
Fault offset: 0x0000b727
Faulting process id: 0x12f8
Faulting application start time: 0xHCLOUD.exe0
Faulting application path: HCLOUD.exe1
Faulting module path: HCLOUD.exe2
Report Id: HCLOUD.exe3
 
Error: (08/16/2014 04:17:37 PM) (Source: .NET Runtime) (User: )
Description: Application: HCLOUD.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Net.HttpListenerException
Stack:
   at System.Net.HttpListener.Start()
   at NETWORK_LIB.HttpServer.HTTP_Listener()
   at System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
&#... Read more

2 more replies
Relevance 76.26%

I am running Windows 2000 workstation and need to get an audit report generated that documents when the computer shuts down. It will tell me when it is started (Event Viewer: Security) but not when it shuts down. Windows XP Professional will report both.

Q: How do I get W2K to record and report when it shuts down? Is it a registry setting? A local policy setting?

TIA.

--Bruce

Answer:W2K WS Event Viewer Shutdown audit question

Maybe this will help:

http://www.sans.org/resources/auto_a...#Audit%20Setup

3 more replies
Relevance 76.26%

So I've been in the process of putting together a HTPC. It's a little Habey 800B case with a ASRock E350-M1 motherboard running W7 64 bit. I havent had any issues with it while installing Windows or any of the misc programs (Office, MSE, XBMC, etc). But I recently turned it on in the morning and was going to let it run all day so that I could remote to it from work and work on it when I had a few free minutes. But when I got to work and finally got some time, it showed as being offline??? I figured that it had gone to sleep. So the next day I connected a monitor/keyboard/mouse to it, booted it and it showed that Windows had shut down unexpectedly. I selected the "Load Windows normally" option and then set the power options to "never" sleep. I attempted the same thing the next day, and again it was off when I tried to connect to it???

It took me a few days to get back to looking at it. After booting and messing around with it for a bit it seemed a bit sluggish and froze once, requiring a manual reboot. I checked the Event Logs and took as many screen shots as I could. I posted the screen shots below hoping that someone can give me some info from the Event log info.

Someone here at work suggested I search for the .dmp files to see if they would give any further info. Thanks in advance for any assistance.





This is the full text from the above User Profile Service error.


Also the last couple of times I manually rebooted, I got t... Read more

Answer:Event viewer info after a HTPC shutdown

Looks like a disk error to me. You had an error in your event log regarding a disk error, and you had a few boots that were disk related, too.
 

7 more replies
Relevance 76.26%

Problem 1
I'm not sure if this is a hardware or software problem, but I have a newly built computer and experienced some strange shutdown problems. When I shut down the computer it hangs for a couple of seconds before shutting down. It sounds like the secondary HDD start up, shuts down, starts up and shuts down again before the computer shuts down itself. This always gives me a critical warning in event viewer saying that the PC wasn't shut down properly.

Sometimes it won't shut down at all, and I have to use the power button on the case. The LED code on the motherboard always shows "D4" when computer won't shut down, which means "PCI allocation error - out of resources". HDD also makes power down/up noises. This problem I have had all since I built the computer, but after I did a clean install of Windows with diskpart, it happened that the PC would randomly shut down or enter hibernation mode with LED code "D3", which means "some of the architectural protocols are not available".

However, if I turn off "fast startup" I experience none of these problems. It happens that the PC won't shut down, just much, much more rarely. When that happens LED code shows "D5" which means "no space for legacy option ROM initialization."
What I find strange is that these codes describe problems that doesn't seem to have anything in common, but the LED codes are only from D3 to D5, which are right after eac... Read more

More replies
Relevance 76.26%

Hello all,
The problem is I had an old Nvidia gforce 5200 agp graphic card and upgraded it to a ATI 9600 xt agp graphic card and probably after a week after the installation when I shutdown my pc I get an end now message .Net Broadcast Event Viewer 1.0.5 end now. The ATI card requires the microsoft framework to run which I already have since I use Visual Studio .Net 2003 with framework v1.1. I decided to download the free 2005 visual basic and C# express with framework 2.0 which I heard is allright to run side by side with famework 1.1 and now after the first week of the new downloads I have two end now message .Net Broadcast Event Viewer upound shutting down. These pop up messages are getting really annoying, and I have googled to try to find a fix but have found nothing beside trying the microsoft UPh clean which did not work. Any help would be much appreciated. Thanks in advance.

Answer:end now message .Net Broadcast Event Viewer on shutdown

anyone?

1 more replies
Relevance 75.44%

I'm getting a trio of critical error messages in event viewer after each shutdown:

- "The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."

- "Windows failed fast startup with error status 0xC00000D4."

- "The previous system shutdown was unexpected."

The PC starts up fine and seems to shut down very fast - within 10-12 seconds, and there seems to be no issues with startup or shutdown. But when I stumbled onto these critical messages in event viewer I got concerned. What could be triggering this? How do I troubleshoot this? They are logged in event viewer after each shutdown/reboot.

Answer:Critical error messages in event viewer after each shutdown

Try turning Fast Start Up off in the Power Options Menu. Finding the option is a bit obscure. There are some known issues with this. It is on by default in Windows 10 and will trigger shut down errors.

3 more replies
Relevance 74.62%

So, I'm having a really weird issue.

I have a pc with a win10 Pro.
It was upgraded from Windows 8. Still in windows 8 the shutdown and the restart took like 10 minutes each time.
Upgraded to 10 expecting this not to happen.. It still does..

After alot of search, I started disabling Windows services a few blocks at a time, and after that 1 at a time.

My conclusion is that when the event viewer service is online, the computer takes forever to shutdown or reboot..
If I disable the service, the computers shutdown and restart are done in a matter of seconds..
I've tested this.

Sooo.. I'm lost here.. Tried sfc /scannow to see if that would fix something, but nothing was detected..

Answer:Event Viewer Service causing Shutdown/Restart slowdown.

You can force it to shutdown. 1000 = 1 second.

Code:
reg add "HKCU\Control Panel\Desktop" /v "AutoEndTasks" /t REG_SZ /d "1" /f
reg add "HKCU\Control Panel\Desktop" /v "HungAppTimeout" /t REG_SZ /d "5000" /f
reg add "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /t REG_SZ /d "5000" /f
reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "5000" /f

1 more replies
Relevance 74.21%

I'm having problems connecting some devices (android apps) to my computer via my wi-fi. I am usually able to solve the problem by running network diagnostics, but after awhile, I'll start having network connectivity problems again.

Whenever I run diagnostics in these situations, this error is shown in Event Viewer

"WLAN Extensibility Module has stopped.

Module Path: C:\Windows\system32\athihvs."

I also receive the error (in event viewer) on a fairly regular basis:

"Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x2225D3CC6415. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server."
I have checked, and my router and WLAN card drivers are both up to date.
I'm wondering if these errors are what is causing my app to lose connection, and what I could do to solve the problems. Thanks.

Answer:Receiving warning "WLAN Extensibility Module has stopped." in Event Viewer each time I diagnose wireless connection

It may have more to do with the firmware for your wireless adapter than it has to do with the drivers.
Check your PC or laptop manufacturer's website for a firmware update for the wireless adapter.

If they don't have one, check the wireless adapter manufacturer's website instead.

4 more replies
Relevance 73.8%

i have noticed that my computer has been taking longer to start up and shut down lately. i have used all my resources to see and control what i am running on startup, from msconfig to spybot's startup manager, there's not a lot running there so i went to check the event viewer and it's full of errors, critical events and warnings.

I tried using MS's websites for help but they are a nightmare to use, posted this same entry in their forums but no answer yet. I'll appreciate if you can help me understand what's going on with my computer. Thanks in advance

the last critical event reads as follows (the OS is in spanish so i'll translate to what i think it should be):

Windows has started up:

Boot duration : 135986ms
IsDegradation : true
Incident Time (UTC) : 27/04/2008 05:35:27 p.m.

Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Diagnostics-Performance
Date: 27/04/2008 12:38:01 p.m.
Event ID: 100
Task Category: Boot Performance Monitoring
Level: Critical
Keywords: Event Log
User: LOCAL SERVICE
Computer: (name deleted by me)


EventData

BootTsVersion 2
BootStartTime 2008-04-27T17:35:27.656Z
BootEndTime 2008-04-27T17:37:54.087Z
SystemBootInstance 512
UserBootInstance 493
BootTime 135986
MainPathBootTime 53423
BootKernelInitTime 15
BootDriverInitTime 3316
BootDevicesInitTime 5470
BootPrefetchInitTime 90685
BootPrefetchBytes 446992384
BootAutoChkTime 0
BootSm... Read more

Answer:Event viewer reports errors and critical events on boot and shutdown

the system specs in case t hey are useful at all:

DELL vostro 400
Intel core 2 Duo E6750 @ 2.66 ghz
2GB RAM

i tried to edit the previous post and there was a time limit, sorry for bumping this

1 more replies
Relevance 73.8%

I have vista 32bit and event viewer is showing the problems as follows:
1.The following boot-start or system-start driver(s) failed to load:
ATITool
sfdrv01
sfhlp02
sfsync02
sfvfs02

2. The Internet Connection Sharing (ICS) service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

3. The IPsec Policy Agent service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

4. The LogMeIn Kernel Information Provider service failed to start due to the following error:
The system cannot find the path specified.

5. The IKE and AuthIP IPsec Keying Modules service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

6. Terminal Service start failed. The relevant status code was The configuration data for this product is corrupt. Contact your support personnel.

7. Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

8. The server service was unable to recreate the share york because the directory C... Read more

More replies
Relevance 72.98%

1. Every time I boot up the computer, the following error is generated in Event Viewer:
Source: DistributedCom, Event ID: 10010 

The server {F9717507-6651-4EDB-BFF7-AE615179BCCF} did not register with DCOM within the required timeout.

This key pertains to appID WinInetBrokerServer (CLSID WinInetBroker). I tried adding permissions to the key(s) but that didn't solve the problem. In the permissions for the key, the first user name listed is named Account Unknown (S-1-15-2-1).
I think maybe that may have something to do with it. I deleted the 6 registry keys associated with this key and everything worked but I was locked out of Windows XP Mode (Windows Virtual PC). I was wondering if anyone had any suggestions to fix this error?


2. ALSO, exactly once a day I receive the following warning in Event Viewer:
Source: DNS Client Events, Event ID: 1014 

Name resolution for the name imrk.net timed out after none of the configured DNS servers responded.


It would seem that there is an application on my computer that is trying to connect to this site for whatever reason. I have read about ties between this domain and hacking. Someone suggested to enable boot logging in Process Monitor to try to pinpoint the
app but there's so much going on in Process Monitor I'm not really sure where to look. All of the apps that run on a daily basis (including the ones that are set to run at startup) seem relatively safe to me. I've run the gamut of a... Read more

More replies
Relevance 65.19%

Thanks for any help.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 28/11/2006
Time: 17:57:33
User: USER-2F62D3344E\user
Computer: USER-2F62D3344E
Description:
A provider, OffProv11, has been registered in the WMI namespace, Root\MSAPPS11, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Answer:What's this event in event viewer? (event source WinMgmt)

http://support.microsoft.com/default...b;en-us;891642
this might help

1 more replies
Relevance 63.96%

Hi all,

i tried loading the eventvwr.msc file from system32 folder directly as well as from the administrator tools, but i get:

"event log service is unavailable. verify that the service is running."

so i try to start the event log service, from the services.msc program;
whenever i try to start windows event log from services i get the message:

"Windows could not start the windows event log service on local computer.
Error 3: The system cannot find the path specified."

how can i specify the path?
or
how can i resolve the problem?

any help would be appreciated please---thanks

Answer:HELP need to solve this problem asap - Unable to start event viewer/event log service

Fire up regedit and find this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

With "Eventlog" highlighted on the left pane, you should be able to see a value called "ImagePath" on the right. ImagePath should be equal to this:

%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

If you can't see "ImagePath" in that location, or if it's not set to the text above, that's almost certainly your problem. If you're in the habit of using "registry cleaners", that might be the cause.

3 more replies
Relevance 63.96%

I was running 3DMark06 and got a BSOD code 124. After that every time I boot Event Viewer logs Error Codes ID 3012 and 3011. Attached are screenshots of both.

I googled this and found two different threads where someone suggested to rebuild the performance counters. Both responses were basically the same, below is one. Neither of the OP's came back and said if this worked for them.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Re: LoadPerf 3011, 3012
Hi-
I had the same problem with LoadPerf and here is what I found out:
All performance counter names and explain text are maintained in string tables managed by the performance counter subsystem (Perflib).

The current contents of the performance counter string tables are corrupted and cannot be displayed. To correct the problem, rebuild the string tables.

User Action
To rebuild the string tables, on the computer that displayed the message, at the command prompt, type Lodctr /r
The contents of the string tables are automatically rebuilt.

I hope this helps
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Since this was from 2008 (XP?) and the other response was for Vista I wanted to see if the guru's at SevenForums thought that this was okay before I did this.

Here are the screenshoots of my two errors.

Answer:After BSOD Event Viewer Logs Event ID 3012 and 3011 every time I boot

Rebuilding the string tables as outlined in my first post fixed the problem.

1 more replies
Relevance 63.96%

Hi,
keep getting the errors above every startup regarding;
11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.
Context: Application, SystemIndex Catalog
Details:
(HRESULT : 0x80004005) (0x80004005)"
I have 3 admin user profiles.
Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch event viewer or mouse customisation softwares, they freeze temporarily and ... Read more

Answer:Windows 7: Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

7 more replies
Relevance 63.96%

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"

I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch ... Read more

Answer:Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Hiya and welcome to SevenForums!
Please contact an admin to move this thread, because this isn't the appropriate section for these kinds of problems.

4 more replies
Relevance 63.96%

Hi,

I was hoping somebody could offer an insight on the below, as searching around I've not found much to go on other than "overheating"

Basically my laptop has been having very high temperatures for a long time (usually ~60C for CPU and often 100-110 for GPU...insanely high, in other words) For example, see how hot the machine gets just by resuming from a sleep (this is all within a minute or so):



I have been seeing the following error in event viewer each time I start Windows (4 entries) for some time:



So today I bit the bullet and had the back cover off the laptop and noticed what a bad state the thermal compound was in, for both the CPU and the chipset chip, so wiped it off using TIM Cleaner, and then applied new thermal compound and put the laptop back together. I was actually shocked because for the first time since I can remember, I could feel cold air blowing from the vents of my laptop! I logged into Windows and noticed that my temperatures had fallen and were staying at around the below:



Not as low as I'd like but a massive improvement. Trouble is, I am still getting the WHEA-Logger event errors in Windows Event Viewer ('processor core') and wondered if this was not in regards to overheating after all?

The plus side is my laptop is now almost totally silent - the way it must have been when I bought it new 3 years ago! But I was wondering how to investigate these WHEA-Logger errors, if anyone has any advice that'd be great.

... Read more

Answer:WHEA-Logger event 18/19 errors in Event Viewer (W7 Home Premium)

First, well done on applying the thermal paste to the cpu/gpu. I assume you cleaned the vents as well. Did you use arctic silver 5 (just curious)?

I wonder if the processor could have been damaged from the heat. Are you experiencing any BSODs or other problems? You can run Prime95 to test your system. And Furmark for gpu.

2 more replies
Relevance 63.96%

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"

I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch ... Read more

More replies
Relevance 63.96%

when I run reboot stress test at Intel platform with win10 Desktop RS1 version, after some cylces test, XHCI controller show yellow bang. Event viewer showed that event id is 14.  I want to know the indication of
StartDeviceFailReason equals 3. I cannot find more info about this failure from website.Thanks a lot!









-

Provider











[
Name]
Microsoft-Windows-USB-USBXHCI










[
Guid]
{30E1D284-5D88-459C-83FD-6345B39B19EC}




















EventID
14



















Version
0



















Level
2



















Task
0



















Opcode
0



















Keywords
0x8000400000000000

















-

TimeCreated











[
SystemTime]
2016-11-25T19:48:29.908393500Z




















EventRecordID
7099


















Correlation

















-

Execution











[
ProcessID]
4










[
ThreadID]
232




















Channel
System



















Computer
LAPTOP-QQEHB4HS

















-

Security











[
UserID]
S-1-5-18












-

EventData










fid_UcxController
0x187f9ddd64a8







... Read more

More replies
Relevance 63.55%

EDIT: ARGH, sorry, meant to post this in General Discussion forum, I have no idea if it is a network issue.

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

More replies
Relevance 63.55%

EDIT: ARGH, sorry, meant to post this in General Discussion forum, I have no idea if it is a network issue.

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

More replies
Relevance 63.55%

Hi all,

i tried loading the eventvwr.msc file from system32 folder directly as well as from the administrator tools, but i get:

"event log service is unavailable. verify that the service is running."

so i try to start the event log service, from the services.msc program;
whenever i try to start windows event log from services i get the message:

"Windows could not start the windows event log service on local computer.
Error 3: The system cannot find the path specified."

how can i specify the path?
or
how can i resolve the problem?

any help would be appreciated please---thanks

Answer:Unable to start event viewer/event log service on vista

By the way the OS is a Vista Home Prem without SP1. and i have searched this problem extensively, finding no solutions.

If anyone has any advice it would be greatly appreciated.

19 more replies
Relevance 63.55%

My Thinkpad W520 has been having an issue where it restarted prompytly and unexpectedly. I thought the issue might be related to the OS or Video driver, and ended up doing clean OS install with no luck. I ran the basic HW tests using Lenovo's utility and the memory, motherboard, and hard disk showed up as healthy.  To me, this seems to be a HW issues, but I am not able to isolate the cause of the problem. Any advice would be appreciated.    

Answer:W520 Restarts Unexpectedly With No Related Event in the Event Viewer

Look in the event log. See if there is an error at the time of the restart. I would do 3 things:1) Run a memory test (probably already done)2) Run a HDD test (Do long test)3) Install TPFANCONTROL to monitor temperatures

6 more replies
Relevance 63.55%

MY COMPUTER:
=============
OS: Win XP Corp SP2
MOBO: A7N8X-E Deluxe
CPU: AMD AthlonXP-M 2000 @ 2300GHz
HDD: Seagate ST3320620AS
Maxtor 6 Y160M0 (both SATA drives)
RAM: 2x 256 512MB pc3200 Crucial Value Select
GFX: ATI Radeon 9800pro
PSU: Antec 350? (the one that comes with Antec Sonata case) (broke)
Now I use a 400W no brand i bought for £15
BACKGROUND: (MAY OR MAY NOT BE RELEVANT)
============
My computer was running great until a few months ago when it crashed while I was playing HALO online. The computer turned off but the green light on front of case was still on. When i tried to reset it, nothing would come up on the monitor and the monitors light remained orange (standby). I knew the computer wasn’t booting up because it would have spoke to me as the a7n8x-e does. The fans and LED on the motherboard would turn on though and i could hear the HDD spin up.
Anyway I tried another socket A processor but it didn’t fix it. Then eventually I tried another PSU and that fixed it. My computer was working properly again.
THE PROBLEM:
============
When I tried to play HALO again on my computer I noticed that the originally smooth performance was now terrible. The game seemed to (and continues to ) freeze for a second every few seconds. When this occurs I can hear a click from the HDD and the screen and game freezes for a second. I tried to continue to play under these conditions the computer grinded to a halt and crashed.
When I checked the event log their are multiple event ... Read more

More replies
Relevance 63.55%

After too many unexplained problems, I decided to reinstall Windows 8.1 Pro x64, and migrate off of SBS 2011 Standard. In addition to the primary workstation that can't read any event logs, I built five Server 2012 R2 servers (Hyper-V host, Active Directory
VM, Exchange 2013 VM, SQL Server 2014 VM, and WSUS VM).

I was diagnosing why my workstation's Outlook cannot reach the local Exchange Server.   I tried to look at the event logs, and found the
Event Viewer cannot open the event log or custom view.  Verify that Event Log service is running (it is) or the query is too long (whatever that indicates).  The request is not supported (50)
Looking at the directory of the event logs folder.  It appears that most logs are empty, which is understandable since it's a rebuilt installation.  I found a small number of Applications and Services Logs and it appears nothing was logged since
six days ago on 4/4/2016.   On support forums, I found many have this exact problem on Win 7, Win 8, and Win 10.  Of the solutions posted none of them would even execute on my Win 8.1 Pro x64 machine.  I tried clearing the event logs (WEVTUTIL
CL logfilename) and am told Failed to clear log .... The request is not supported. 
It's very difficult to diagnose why Outlook 2013 cannot reach Exchange 2013, even if Outlook is installed on the Exchange server machine (just as a test).  The web-based Outlook owa, ecp, ... all work fine. ... Read more

More replies
Relevance 63.55%

The master browser has received a server announcement from the computer MATTSLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{18E5B85E-1249-4040-9EF0-5B1F93A7295B}. The master browser is stopping or an election is being forced.



...wtf.
 

Answer:odd event viewer event. my brothers laptop causes errors on my machine?

http://support.microsoft.com/default.aspx?scid=kb;en-us;135464
 

1 more replies
Relevance 63.55%

It's been a while since I've experienced a BSOD as I'm viewing a video on youtube. It would freeze as if the audio was caught in mid-stream then BSOD, then would restart automatically. I go to Event Viewer after windows as loaded and I see Event 41 Kernel-Power in there.

I had this issue before and we found out that the motherboard was causing the issue. I have also replaced my video card and added additional memory and expanded to 16gb. Before, I only have 8gb.

Ran sfc/scannow with no errors found. Going to do chkdsk as well.

It's strange because this does not happen at all when I'm playing online games or even just standard browsing. It's when I play videos on youtube that there would be instances where this would happen. There are other times where I can view them without any issue at all.

Any ideas would be great.

Also, how can I attach the windows DMP file to scale it down as it is just really large?

Thanks again guys.

Answer:BSOD when watching videos on youtube, Event 41 in Event Viewer

Hello Santos, and welcome to Seven Forums.

Please read the instructions here: Blue Screen of Death (BSOD) Posting Instructions, and post back with the needed information. One of our BSOD experts should be by later when able to further help.

9 more replies
Relevance 63.55%

Well, I tryed to manage page-file but unfortunataly it resulted in problems. Then I lost VAIO-CARE and 7 ZIP files too. When I open Event Viewer every single day I see this: event Id 2002, Souce: Eap Host, Log name: Application and number of Eventes: 84. As I am desparate about that, What sould I do? Reinstall VAIO-care or WHAT else? Please help me!!!!! Well, I can say that before of all, I tryed to install vopt, latest version but it was not freeware and I soon had to uninstall it but it was not getting to uninstall from programs and features and then I used register editor to delete the leftovers which desapered from program and features....but I can see several error in event viewr such as Event 11706, MsInstaller >>>> Product Vaio Media Plus -- Error 1706 - An instalation for the product Vaio Media Plus cannot be found. Try the installation again using a valid copy of the instalation package 'VMP VEPMMx64.msi'. So should I reinstall all vaio care or not................!!! By the way I tryed to install vopt in order to align files in hard drive but when I tryed to manage page file it did not work as should have so I lost vaio care..........................................What to do? can you figure out what going on.................!!!

Answer:Event Viewer Event Id 2002, Source: EapHost, Log Application

Welcome to the forums Marioo!

Have you tried a system restore to a point before these errors started? (Easiest things first) You could also try a sfc/scannow, to find and possibly repair any corrupted system files. We have many fine tutorials here at the forums, written by some very knowledgeable people, heres a link to one if you haven't did this before :

SFC /SCANNOW Command - System File Checker

5 more replies
Relevance 63.55%

System event not recording anything. It is empty, says "date is invalid(13)".

I have some flaky things going on like unexplained CPU spikes causing slowdowns and mouse drag. Also have video problems screen going blank then recovery.

I have reloaded video drivers to no avail. No system lockups or BSODs. I need to see system event log to debug. Other event logs OK. I am proficient on PC and have searched for event log problem. The Event Log service is running. Thanks.

hp pavilion dv9000
OS Name Microsoft® Windows Vista™ Home Premium
Version 6.0.6001 Service Pack 1 Build 6001
Processor Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHz, 1801 Mhz, 2 Core(s), 2 Logical Processor(s)
BIOS Version/Date Hewlett-Packard F.23, 10/3/2007
SMBIOS Version 2.4
Installed Physical Memory (RAM) 2.00 GB
Adapter Type GeForce 8400M GS, NVIDIA compatible
Adapter Description NVIDIA GeForce 8400M GS
Adapter RAM 128.00 MB (134,217,728 bytes)
 

Answer:Solved: Vista, Event Viewer - system event log not recording

Did you check the - %SystemRoot%\System32\Winevt\Logs\System.evtx file? It may be corrupted and you may want to rename it to .old and let it recreate itself.
 

2 more replies
Relevance 63.55%

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

Answer:Event Viewer Errors: SettingSyncHost, Source ESENT, Event 467

Bump... anyone have any idea? I keep getting it averaging about once an hour.

EDIT: Sorry, forgot to add, already tried /sfc scannow, it doesn't find the error.

2 more replies
Relevance 63.55%

Hi.
I have noticed that during the long duration my PC is on (18 hours), several apps keep getting crash. Even after I restart these apps, they will eventually crash. PC is still functioning.
The apps that are crashing are:

Asus AI Suite 2 (I use it for fan control)Corsair Utility Engine - for my mechanical gaming keyboardBitdefender - The Antivirus software doesn't really crash, but it's a module inside BitDefender that has issues.
Bellow are all three event viewer reports for all mentioned apps.
1. Asus AI
Faulting application name: AI Suite II.exe, version: 2.0.0.0, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.15063.296, time stamp: 0x28e9cf15
Exception code: 0x0eedfade
Fault offset: 0x000eb802
Faulting process id: 0x3600
Faulting application start time: 0x01d2ee6667bfdd12
Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\AI Suite II.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 64c7a38e-b13e-42ba-bf9f-4b4e72c0cc4b
Faulting package full name:
Faulting package-relative application ID:
2. Corsair Utility Engine
Faulting application name: CorsairHID.exe, version: 1.16.42.0, time stamp: 0x56f25dd3
Faulting module name: ntdll.dll, version: 10.0.15063.0, time stamp: 0xa82cc161
Exception code: 0xc0000005
Fault offset: 0x0005d9f4
Faulting process id: 0x3190
Faulting application start time: 0x01d2eccfcf3748b1
Faulting application path: C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe
... Read more

Answer:Multiple Application Errors (Event 1000) in Event Viewer

Please use this link to create a zip file so that we can troubleshoot the bsod minidump files and the logs:
BSOD - Posting Instructions - Windows 10 Forums

Please change the default language to English so that we will be able to read and troubleshoot the logs.

2 more replies
Relevance 63.14%

Not sure if this is the right section, if not please move to the correct one.

Under the details tab in Event Viewer when a logged event has a GUID that shows up in the registry under HKEYLM > System > CurrentControlSet>Control>WM>Autologger>EventLog-XX I know how to disable the event from logging, but Event ID 15 - ACPI does not have a GUID.

Does any one know how I can get this to stop logging? From what I have seen on the web only a fix to the motherboard BIOS would fix it and I doubt that this is high on Asus' list of BIOS fixes for the R6E. Everything I have read on the web says that this is meaningless and in the General tab it basically says to ignore it so I would like to get this to stop logging in Event Viewer.

More replies
Relevance 63.14%

I have noticed these in my event viewer appearing a lot and roughly around times when my computer decides to freeze up on me.

Event ID 7001, Service Control Manager
The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error:
%%-2140993535

&

Event ID 7023, Service Control Manager
The Peer Name Resolution Protocol service terminated with the following error:
%%-2140993535

Answer:Event ID 7001 and 7023 Shows in Event Viewer a lot.

Just FYI - I usually ignore these errors when they show up.
BUT, if they're associated with freezes we'll need to have a deeper look.

Please post this info even though you're not reporting BSOD's: http://www.sevenforums.com/crashes-d...tructions.html

7 more replies
Relevance 63.14%

Every time I boot my laptop I get error message Event ID 10 in Event Viewer. The details are:

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor"AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

I do believe that the error message is nothing to be concerned about from what I have read when I googled it, but nothing I read tells you how to get rid of it. Does anone know how I can get rid of this so it does not show up in event viewer everytime I boot?

Answer:Event Viewer Error Message Event ID10 - How to get rid of it?

idahosurge,
Read through the link below...
Hope it helps with your problem.

Event ID 10 is logged in the Application log after you install Service Pack 1 for Windows 7 or Windows Server 2008 R2

5 more replies
Relevance 63.14%

If a make a password mistake when logging in, event viewer should log event with ID 4625*. But it doesn't. How do I get it too? If you want to know about my computer model Etc. Click on the computer icon next to my name.

(*Event 4625 means Bad password)

Thanks
 

Answer:Solved: Event ID 4625 not being logged in event viewer

I assume you are using Vista or Win 7

The following eventIDs are all related to Login Failures:
4625,4626,4627,4628,4630,4635,4649,4740,4771,4772,4777
 

2 more replies
Relevance 63.14%

Welcome,
I have a problem. Every day I have this error in event viewer, system log:
{Registry Hive Recovered} Registry hive (file):\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-4089430802-3287748835-2730757419-1001-0-ntuser.dat was corrupted and it has been recovered. Some data might have been lost.
This error repeats every day at about 3:00AM.
Maybe someone could help me? Thanks in advance.

Answer:Event ID 5 Kernel-General error in Event Viewer

Hi:

Just curious:
Are you running MBAM Premium (paid version), or Free?If it's Premium, what time does your scheduled daily Threat scan run? (Assuming you are running a daily Threat scan, which is the default scan schedule.) (Dashboard > Settings > Automated Scheduling > Threat Scan > Edit)

Thanks,

MM

7 more replies
Relevance 63.14%

A week ago I started getting this warning errors logged three to six times or more per day in Event Viewer.

Event Viewer Warning - Source is e1yexpress - Event ID is 27
Intel(R) 82567V-2 Gigabit Network Connection Link has been disconnected.

Every time Event Viewer logs the e1yexpress warning it follows up with this logged warning
Event Viewer Warning - Source is DNS Client Events - Event ID is 1014
Name resolution for the name isatap.home timed out after none of the configured DNS servers responded.

Not every time, but a lot of times Event Viewer also logs this warning right after it logs the isatap.home warning.
Event Viewer Warning - Source is DNS Client Events - Event ID is 1014
Name resolution for the name teredo.ipv6.mocrosoft.com timed out after none of the configured DNS servers responded.

Today I installed updated drivers for my Intel(R) 82567V-2 Gigabit Network Connection, but after 11 hours of no logged error warnings they started up again and I got three sets of the above logged in a 90 minute time frame.

My system is two years old and as far as I know I have never had these errors logged before.

My motherboard is a Asus Rampage III Extreme.

Any ideas on how to get event viewer to stop logging these? A google search really did not offer any real clues on what to try other than updating my Intel(R) 82567V-2 Gigabit Network Connection drivers, which did not solve the problem.

Answer:Event Viewer Warning - Source e1yexpress - Event ID 27

Well after trying everything google came up with to try, including updating drivers to the latest version, rolling drivers back to the default Win7 version, disabling SIPS and a few others things I decided to call Verizon and see what they had to say. As soon as I told Verizon Tech Support that my error code was "e1yexpress - Event ID is 27
Intel(R) 82567V-2 Gigabit Network Connection Link has been disconnected", they told me not our problem take your PC to a shop. I called back a couple of hours later and talked to a different person and this time I only said that I was getting the Event 1014 time out errors. They had me do a few things in a cmd prompt and then said we do not know, but we can send you a router, I said fine, I will try the router.

Well it has been over a week since installing the new router and no error codes at all so it was the router!

2 more replies
Relevance 63.14%

I wanted to see who was viewing my computer and went to event viewer, under System > filter current log > power troubleshooter -- I found that the wake source for the system resuming from sleep was a device usb root hub, what does this mean?

More replies
Relevance 63.14%

From what I understand about the event log in Windows 7, when someone tries and is unsuccessful when logging into the computer the event log should record an event id 4625. However this is not happening at either of my Windows 7 Ultimate machines. I found an identical thread about this problem where the user found a solution but did not specify what is was.

http://forums.techguy.org/general-security/995501-solved-event-id-4625-not.html

Any ideas?

Thanks
 

Answer:Solved: Event ID 4625 not being logged in event viewer

Are you creating a Custom View ? Be sure that you have selected 'By Log - Event Logs: Windows Log, Security. Then except for the Event ID field, everything should not be checked.
 

3 more replies
Relevance 63.14%

While playing war thunder on steam my screen went black and i couldn't do anything. I restart my computer and play again it crashes. After one more time i look at my event viewer and find critical error event ID:41. I don't whether its the game or my pc.

Answer:BSOD playing war thunder, Event viewer event 41

Critical error - Event ID 41 is (most likely) when you forced the system to restart (usually by holding the power button down).

You have a NETGEAR WG111v3 Wireless-G USB Adapter:





I do not recommend using wireless USB network devices. Especially in Win8/8.1 systems.
These wireless USB devices have many issues with Win7 and later - using Vista drivers with them is almost sure to cause a BSOD.
Should you want to keep using these devices, be sure to have Win8/8.1 drivers - DO NOT use Vista drivers!!!
An installable wireless PCI/PCIe card that's plugged into your motherboard is much more robust, reliable, and powerful.



I noticed that you don't have Secure Boot and/or UEFI enabled. If you were having problems with it and changed it, please let us know.





It's not necessary to enable it now. But, should you reinstall Windows at some point in the future, please enable it first.

I mention this because it may happen that (one day) the system won't boot. This can be caused by a program changing your UEFI settings, or an update of the UEFI resetting it to default values.

To test and see if this is the cause, boot into the UEFI and see if the settings have been changed. If uncertain, try with Secure Boot both on and off (and the UEFI on UEFI or Legacy (CSM))

If it still doesn't boot after trying this, then move on to other troubleshooting tools as it's not likely to be due to this.



Black screen errors are not... Read more

1 more replies
Relevance 63.14%

My computer seemed to be running more slowly after the Creators update, so I went into the error viewer and found a ton of errors with the source EapHost, Event ID 2002. From Googling around, I found that this error can be caused by leftover keys from Cisco software, so I went ahead and deleted two of the keys referred to in the error logs, and the errors associated with those keys stopped popping up. However, there's a third error that keeps popping up:

Skipping: Eap method DLL path validation failed. Error: typeId=21, authorId=311, vendorId=0, vendorType=0

The trouble is that this doesn't give me enough information to figure out which key I need to delete. It refers me to a node in the registry called WLANProfileCreationUXAuth. There are six subfolders under that one, and some of them contain keys that I can't delete. (Stupidly, I tried, but the system wouldn't let me.)

What I'm wondering is this: how can I figure out which of the specific keys I need to delete? None of them refer to Cisco, as far as I can see.

More replies
Relevance 63.14%

I tried a lot, but couldn't find the event log for the cleanmgr.exe (Disk Cleanup) in the Event Viewer.
Actually, I need the source & event id of cleanmgr.exe to schedule a task in the Task Scheduler.

Answer:In Event Viewer, Where is event log for cleanmgr.exe (Disk Cleanup)?

This Article would be of services to you .

3 more replies
Relevance 63.14%

My Win 7 Pro x64 system just started acting up. When I select an event in the Event Viewer, the More Information: Event Log Online Help link doesn't open IE10. When I click on the link, the Event Viewer pop-up confirmation box open to confirm sending information across the internet, but when I click "Yes" the box goes away and I get a momentary indication from the cursor that the action is processing then nothing. It will not change the active IE10 page or open IE10.

Is there a solution with out a system restore?

Thanks in advance for your assistance.

Regards

Answer:Event Viewer Event Log Online Help Links don't function

I don't know much about this kind of stuff - but here is what I dug up using Microsoft's Process Monitor and Process Explorer.

The mmc app (event viewer) sends info to one of the svchost instances (netsvcs).

Svchost writes some info to the registry about a scheduled task and then runs that task.

This starts taskeng - which starts wscript.

Wscript runs a temporary VBS file that is supposed to send a URL to the operating system (shell).

The OS is supposed to open your default browser.

Here is the contents of the VBS file from my testing:

Code:
Set shell = createobject("wscript.shell")
Shell.run """C:\Users\username\AppData\Local\Temp\tmp78C0.url"""


You might try SFC /SCANNOW Command - System File Checker

And let's hope that some other forum member can suggest things that you should check.

4 more replies
Relevance 63.14%

I keep getting this error message in the application log of the event viewer.



I haven't been able to figure out which application I run which produces this error. It might be Windows Defend when it scans. I'm really not sure though. Can anyone give me any insight to this error.

I have Googled this, but nothing I see makes any sense to me. Maybe someone can simplify it for me. Thanks.
 

Answer:Userenv, Event 1000 Error in Event Viewer

HI!
This helped me when I had the same problem...check it out.
User Profile Hive Cleanup Service
http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en





Overview
The User Profile Hive Cleanup service helps to ensure user sessions are completely terminated when a user logs off. System processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off. In those cases the user session is prevented from completely ending. This can result in problems when using Roaming User Profiles in a server environment or when using locked profiles as implemented through the Shared Computer Toolkit for Windows XP.

On Windows 2000 you can benefit from this service if the application event log shows event id 1000 where the message text indicates that the profile is not unloading and that the error is "Access is denied". On Windows XP and Windows Server 2003 either event ids 1517 and 1524 indicate the same profile unload problem.

To accomplish this the service monitors for logged off users that still have registry hives loaded. When that happens the service determines which application have handles opened to the hives and releases them. It logs the application name and what registry keys were left open. After this the system finishes unloading the profile.Click to expand...

Hope it works as well for you!

 

3 more replies
Relevance 63.14%

Every time I boot my laptop I get error message Event ID 11 in Event Viewer. The details are:

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

This is listed under AppInit_DLLs in the registry and the dll being loaded is nvinitx.dll, from what I can find out this has to do with the optimus function on my laptop and having it loaded is okay. I just want to get rid of the error message being logged everytime I boot.

Answer:Event Viewer Error Message Event ID11 - How do I get rid of this to?

Does anyone have any ideas on how to get rid of this error message in Event Viewer?

2 more replies
Relevance 63.14%

I have updated Windows 10 Pro to the Creators update. I have had a few event viewer errors which I managed to fix. But I don't know what this one is, I guess everyone is seeing it, does anyone knoe how is it resolved? Thanks.

"Windows Hello for Business provisioning will not be launched.
Device is AAD joined ( AADJ or DJ++ ): Not Tested
User has logged on with AAD credentials: No
Windows Hello for Business policy is enabled: Not Tested
Local computer meets Windows hello for business hardware requirements: Not Tested
User is not connected to the machine via Remote Desktop: Yes
User certificate for on premise auth policy is enabled: Not Tested
Machine is governed by none policy."

Answer:W10 Creators update Event viewer error Event ID 360

Only workaround if you are fine with it.
Managing Windows 10 Creators Update rollout for a seamless experience - Page 7 - - Windows 10 Forums

1 more replies
Relevance 61.91%

Hi there,

It's my first time posting on this forum however this forum has helped me solve dozens of past issues so thanks

Ok so I've got an MSI GS40 notebook running Windows Home 64-bit. It's a great notebook and runs like a dream. I recently checked my Event Viewer and saw thousands of warnings. Basically the same warning every second. They're all Execution Service - Event ID: 1

I'm really not keen on a system restore or reformat. The hardware is pretty high-end and so it doesn't seem like anything has slowed down but I would like to resolve these crazy warnings.

Any help would be great...

More replies
Relevance 61.91%

Greetings,

I have a large number of the following errors in my event viewer:
Level|Source|Event ID|Task Category
Error|spdt---|------4|--- none

General--
Driver detected an internal error in its data structures for .

Details--
__________
XML View--
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="sptd" />
<EventID Qualifiers="49156">4</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-06-25T05:25:52.106802800Z" />
<EventRecordID>83268</EventRecordID>
<Channel>System</Channel>
<Computer>adm-PC</Computer>
<Security />
</System>
- <EventData>
<Data />
<Binary>000000000100000000000000040004C0530000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
__________
Here is the Friendly View--
-System
-Provider[ Name] sptd
-EventID4[ Qualifiers] 49156
Level2Task0Keywords0x80000000000000-TimeCreated[ SystemTime] 2011-06-25T05:25:52.106802800Z
EventRecordID83268ChannelSystemComputeradm-PCSecurity
-EventData
000000000100000000000000040004C0530000000000000000000000000000000000000000000000
Binary data:

In Words
0000: 00000000 00000001 00000000 C0040004
0008: 00000053 00000000 00000000 00000000
0010: 00000000 00000000

In Bytes
0000: 00 00 00 00 01 00 0... Read more

More replies
Relevance 61.91%

Dell Dimension 8200 (3 years old); Intel Pentium 4, 2000 Mhz; Phoenix BIOS (never updated); WinXP SP2 (all updates); AVG Pro; Brother MFC 420cn; Dell 1702 FP LCD; Spybot; MS AntiSpyware Beta.

Trying to save time for everyone, I'll just say that I looked at Event Viewer today. I've looked at it infrequently, and never could understand what I saw, but today there was something relatively new and scary:

Type: Warning
Date: 9/2/2005
Time: 7:24:03 AM
Source: disk
Category: None
Event: 51
User: N/A
Computer: JohnandCheryl

Further info under help and support said an error was detected during a paging file operation.

The word "disk" scared me, so I checked the entire Event Viewer, and found 25 of these errors, from Aug 1 2005 through Sep 3 2005. If this event was cataloged earlier, I don't know, because the Event Viewer only goes back to Aug 1.

I checked System Restore for Aug 1, 2005 and found a couple of things; 1) an accidental MS "update" to NVIDIA GeForce4 MX driver 5.12 -- but we've had the 6.1.7.7 driver for a long time now. The 5.12 screws up the display resolution, big time. I reinstalled the 6.17; resolution is fine; but I'm wondering if this could have something to do with the Event 51 warning.

Also, on that same date, something called Software Distribution Service 2.0 is listed three times, and I don't know why. I don't even know what it is.

I've researched the web, and can't find anything that seems ... Read more

More replies
Relevance 61.91%

Hi Guys/Girls

I keep getting this error every 30 minutes anybody managed to solve this ?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 30/10/2016 11:54:11
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: DALE-PC1\Dale
Computer: Dale-PC1
Description:
The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-10-30T11:54:11.788175700Z" />
<EventRecordID>18568</EventRecordID>
<Correlation />
<Execution ProcessID="8" ThreadID="9028" />
<Channel>System</Channel>
<Computer>Dale-PC1</Computer>
<Security UserID="S-1-5-21-4124590474-3230443324-182549641-1022" />
</System>
<EventData>
<Data Name="param1">{4AA0A5C4-1B9B-4F2E-99D7... Read more

Answer:Event Viewer keeps showing Event ID 10010

Hi,

It's a synchronization error. The server trying to sync to a device that is no longer present or was just never there.

Try to disable the following service: Portable Device Enumerator Service (WIN+R > Services.msc) and see if that helps.

Cheers,

11 more replies
Relevance 61.91%

I keep an eye on the event viewer and a new event I haven't seen before has showed up. The event is under the application heading as information and the source is (ESENT). It reads as follows:

Event Type: Information
Event Source: ESENT
Event Category: General
Event ID: 100
Date: 8/16/2004
Time: 5:20:33 AM
User: N/A
Computer: ALPHA
Description:
wuauclt (1272) The database engine 5.01.2600.0000 started.

Everything is the same on the next three events except the discriptions which are as follows:

wuaueng.dll (1272) SUS20ClientDataStore: The database engine started a new instance (0).

wuaueng.dll (1272) SUS20ClientDataStore: The database engine stopped the instance (0).

wuauclt (1272) The database engine stopped.

This happens several times a day. Everything seams to be working properly but I very interested in what this data is trying to tell me.

Thanks
John
 

Answer:Strange new event showing up in event viewer.

9 more replies
Relevance 61.91%

Hello,


First time ever I am posting a thread like this, never thought I would have to.

Anyway, the issue is described below.

Randomly my computer decides to shutdown and restart unexpectedly.

There is no blue screen, it just shut downs and restarts immediately.

I can't really relate the issue to a certain task or running program, it's all so random.

It can occur while browsing the web, watching a film or playing a game.

I have been fixing around with computers for quite some time now and this is my second build.
The components are listed below:

PSU: Corsair Professional Series HX850

CPU: Intel Core i7 2700K @ 3500 MHz

MB: Gigabyte GA-P67A-UD5-B3

RAM: Corsair Dominator 4x4GB 1600 MHz DDR3

GPU: EVGA GTX580 SuperClocked 1536 MB SLi

HDD: Corsair Force Series 3 60GB

HDD: Corsair Force Series 3 120GB

OS: Windows 7 Ultimate 64 Bit Retail

I finished this system about five months ago and it started to act like this since 3 weeks back.

The system is working solid otherwise.

Due to the limited amount of space on the system drive at 60GB I have disabled System Restore.

I have AVG Internet Security 2012 installed along with Malwarebyte's Anti-Malware.

I have tried to update system drivers in order to restore the system stability, which are:
USB 3.0 Host Controllers

SATA 3 Controllers

Realtek SFX Drivers

Realtek LAN Drivers
None of the above mentioned dr... Read more

Answer:Event Viewer - Event ID 6008 [Troubleshooting]

Event ID 6008 entries indicate that there was an unexpected shutdown.
Critical thermal event indicates that the problem is related to one of your hardware components not functioning properly that is triggering the computer to shut down.

Check if your CPU is overheating. Also check if the heat sink or fan is functioning properly. If the laptop is under warranty, get in touch with the manufacturer.

If it isn?t, get a good cleaning done for the fan and heat sink with compressed air only if you?re comfortable. Otherwise seek the help of a technician.

In addition, since power supply plays a major role in cooling the computer?s innards check if PSU (Power Supply Unit) is functioning properly.

Other thermal events (depending on your board) can be from the graphics card, bridge chipsets or hard drives.

You may opt to check for third party Thermal Event Monitor software so that you have a brief idea as in what?s triggering the critical thermal event.

Note: Microsoft cannot guarantee that any problems resulting from the use of Third Party Software can be solved. Using Third Party Software is at your own risk.

4 more replies
Relevance 61.91%

Windows 10 Home 64 bit
ASUS X540LA Notebook

What is going on here and what is the best for dealing with this? The AppID seems to be designating RuntimeBroker, but I have done everything so far to correct this error. What am I missing?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 7/4/2016 7:05:24 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-EOB6C9K
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<T... Read more

More replies
Relevance 61.91%

Howdy Gents....And Merry Christmas!!

Have a question...

I was poking around in event viewer and came across a new entry. It's called ESENT and is being logged anywere between 4-20 times a day. I've researched this...and it seams to be tied to Windows XP SP2 and the Windows Update Client Database because it's using the wuaueng.dll and wuauclt.exe files.


I do not have service pack 2 installed....but I'm updated on ALL fixs...so I'm thinking this is a problem with the just the Update Client. After backtracking my Install history...it began appearing in my logs after I installed the "Cumlative Security Update For Internet Explorer 6 Service Pack 1 (KB86781)....MS04-025.

I'm thinking Windows Update Installed the new Client software at that time...as that update didn't have anything to do with this. My questions are...

Has anyone seen this on an XP PRo system just using SP1?
Why is it being logged? (I Have autoupdate disabled)

More replies
Relevance 61.91%

Hi there,

It's my first time posting on this forum however this forum has helped me solve dozens of past issues so thanks

Ok so I've got an MSI GS40 notebook running Windows Home 64-bit. It's a great notebook and runs like a dream. I recently checked my Event Viewer and saw thousands of warnings. Basically the same warning every second. They're all Execution Service - Event ID: 1

I'm really not keen on a system restore or reformat. The hardware is pretty high-end and so it doesn't seem like anything has slowed down but I would like to resolve these crazy warnings.

Any help would be great...

More replies
Relevance 61.91%

I have a pavilion desktop h8-1075, and have found the following comes up in error of event viewer every so often

iaStor did not respond within the timeout period event 9

any assistance would be great to see if someone can cure this issue

Pavilion Desktop hpe h8-1075uk
Win 7/Pro
16 Meg ram

Tony Miller

Answer:Event Viewer error iaStor Event 9

Iastor is your storage driver (for HD or Raid) and often a driver will not respond within the normal range. No big deal but you can update the driver to newest version to see if that eliminates the messages

2 more replies
Relevance 61.91%

Hi, I have a strange thing going on with Event 1 in the Even Viewer.
Event 1 signifies that the computer awoke from sleep (standby/hibernation), see attachment below for illustrations. It shows the time (circled in blue) which is also the time it shows in the list with all the other events, and that is the actual time the event occurred. But if you look on top of the box (circled in red) you see weird times listed over there, in fact at the time that the event take place (9:08 in this case) the times listed above didn't arrive yet. Why are those future times there, and how does the computer write something form the past into the future? I find that very strange. Do you perhaps know how that could happen?

Thank you, I appreciate it!
 

Answer:Event Viewer - Event 1 has weird times in it

16 more replies
Relevance 61.91%

Windows 10 Home 64 bit
ASUS X540LA Notebook

What is going on here and what is the best for dealing with this? The AppID seems to be designating RuntimeBroker, but I have done everything so far to correct this error. What am I missing?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 7/4/2016 7:05:24 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-EOB6C9K
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<T... Read more

Answer:Event Error ID 10016 in Event Viewer...

There are fixes on the forum if you search for this error. The solution involves changing permissions and editing the registry and should only be attempted if you are sure of what you are doing.

See:
Windows 10 Event ID 10010 and 10016 Errors With DistributedCOM
http://www.eightforums.com/performan...ro-64-bit.html

4 more replies
Relevance 61.91%

Hi Guys/Girls

I keep getting this error every 30 minutes anybody managed to solve this ?

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 30/10/2016 11:54:11
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: DALE-PC1\Dale
Computer: Dale-PC1
Description:
The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-10-30T11:54:11.788175700Z" />
<EventRecordID>18568</EventRecordID>
<Correlation />
<Execution ProcessID="8" ThreadID="9028" />
<Channel>System</Channel>
<Computer>Dale-PC1</Computer>
<Security UserID="S-1-5-21-4124590474-3230443324-182549641-1022" />
</System>
<EventData>
<Data Name="param1">{4AA0A5C4-1B9B-4F2E-99D7... Read more

Answer:Event Viewer keeps showing Event ID 10010

Hi,

It's a synchronization error. The server trying to sync to a device that is no longer present or was just never there.

Try to disable the following service: Portable Device Enumerator Service (WIN+R > Services.msc) and see if that helps.

Cheers,

1 more replies
Relevance 61.91%

Having installed IE 8 I`ve been using the Help section quite a bit.It works perfectly well but each time I press one of the Help subjects I`m getting an HHCTRL event 1904 in Event Viewer.Does anybody know what this is all about and how to fix it?

Answer:IE 8 Event Viewer HHCTRL Event 1904

The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: about:blank, click here.Registry error? Missing .dll file?

1 more replies
Relevance 61.09%

Ever since i got my x1 carbon i've been experiencing constant unexpected shutdown issues. Ill leave my laptop on for a few minutes unused and when i come back it'll be turned off and when started back up it will prompt me that the computer has recovered from a unexpected shutdown. There are also numerous of times where i would attempt to put my laptop to sleep or shut it down manually and the screen will go black, however the laptop doesnt shutdown or goes into sleep mode, but instead freezes with a black screen. I've sent in my x1 carbon in once due to a harddrive failure where the computer wont even start up windows at all, the technician informed me that they put a new ssd in and ever since i got it back these issues still occur. Can some one please help me here? these occurance are getting more frequent and i'm afraid i might have to send in my laptop again due to harddrive failure.

Answer:thinkpad x1 carbon unexpected shutdown and freezing during manual shutdown

Hi, kuelderrek
 
Could you possibly go into Event Viewer and look at the Windows Logs, and then take a screenshot of these logs and post them here? I'd also recommend making sure all the drivers for your system are up to date, just to make sure they are not causing any issues. You can find all the drivers for your system here.
 
Best,
Adam





______________________________________________________________________________________________________________Did someone help you today? Press the star on the left to thank them with a Kudo!If you find a post helpful and it answers your question, please mark it as an "Accepted Solution!" This will help the rest of the community with similar issues identify the verified solution and benefit from it.

4 more replies
Relevance 60.27%

Ever since i got my x1 carbon i've been experiencing constant unexpected shutdown issues. Ill leave my laptop on for a few minutes unused and when i come back it'll be turned off and when started back up it will prompt me that the computer has recovered from a unexpected shutdown. There are also numerous of times where i would attempt to put my laptop to sleep or shut it down manually and the screen will go black, however the laptop doesnt shutdown or goes into sleep mode, but instead freezes with a black screen. I've sent in my x1 carbon in once due to a harddrive failure where the computer wont even start up windows at all, the technician informed me that they put a new ssd in and ever since i got it back these issues still occur. Can some one please help me here? these occurance are getting more frequent and i'm afraid i might have to send in my laptop again due to harddrive failure.

Answer:x1 carbon unexpected shutdown and freezing during manual shutdown

here is more detail about the issue, from the "check for solution" box that pops up every time this occurs Problem signature:Problem Event Name: BlueScreenOS Version: 6.1.7601.2.1.0.256.48Locale ID: 1033Additional information about the problem:BCCode: 9fBCP1: 0000000000000003BCP2: FFFFFA800410DA10BCP3: FFFFF800038073D8BCP4: FFFFFA8007E8C470OS Version: 6_1_7601Service Pack: 1_0Product: 256_1Files that help describe the problem:C:\Windows\Minidump\012813-8673-01.dmpC:\Users\Derrek Young\AppData\Local\Temp\WER-18704-0.sysdata.xml 

1 more replies
Relevance 60.27%

Hi everybody, I'm a electric/computer engineer.I come from Viet Nam and I have Lenovo T420s (from US) . On a beautiful day, he was silent when I touch he. Ahh, he was binky the led on power button. I serach on GOOGLE, and I bring he to maintance computer shop. They say power IC die, and they replaced with another. I think they do nothing because when I turn on my T420s, he ON, and he unexpectly/suddenly shuttown after about 25-40 mins in every case ( in win, in bios setup or in anything) but if I take restart he before 25 mins...he work over "die" time. I search and I dont know what was wrong with him. I love him, tell me what I need to do to bring he back please. Thank you.

Answer:Lenovo unexpected shutdown// suddenly shutdown become polular

Hi Kim_perfect_712,
 
Welcome to Lenovo Forums!
 
I appreciate the troubleshooting steps done, but as per the performed troubleshooting steps it seems to be a hardware issue and it looks like motherboard has gone bad. As you have told the laptop automatically shut down in BIOS, it clearly confirms that this is a motherboard issue. Hence I kindly request you to take the laptop to the authorised Lenovo service centre for the further assistance and you can get him back working
 
For your reference, please find the link given below to find out the authorised service centre according to your location.
Click here to open a link where you can select the country and get the exact contact support number. I?m sure they will be a great help.
OR
http://bplocator.lenovo.com/
 
Please let me know, whether the above suggestion helped you.
Thank you, have a good day.
 
Regards,
Naveen.v

1 more replies
Relevance 59.45%

Hi,

I am new to the forum and have searched to see if I can find a fix for my issue.

My issue is whenever I use the Event Log Online Help link in any Event Notification all I get is transferred to this page Page Not Found

I am new to Windows 8 but I used this service regularly with XP. I don't know if it is a set up issue or if the help is not available for Windows 8 ... I hope the latter is not the case as I am trying to resolve a completely different issue.

Any assistance would be great!

Answer:Event Viewer - Event Log Online Help

Well, I am still trying to get the Event Log Online Help link in Event Viewer working!

Could someone tell me what their data values are in the following registry entries:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\EventViewer\MicrosoftRedirectionProgram
HKLM\Software\Microsoft\Windows NT\CurrentVersion\EventViewer\MicrosoftRedirectionProgramCommandLineParameters

My data entries are blank and I am sure there should be something .

Thanks

7 more replies
Relevance 59.45%

Hello, I am having another strange event in my event viewer this time its this: A parity error was detected on \Device\Ide\iaStor0. Source: iaStor Event ID: 5 I have researched but nothing specifically addresses this issue, only similar event IDs with different error messages. Any help would be greatly appreciated.

Answer:iaStor event in event viewer

This error occur with this error usually :
Windows Event ID 9 from iaStor

3 more replies
Relevance 59.45%

I've noticed an intriguing event in Event viewer...


Code:
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 25. 1. 2013. 8:13:00 PM
Event ID: 8208
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: *************
Description:
Acquisition of genuine ticket failed (hr=0xC004C4AA) for template Id {88c92734-d682-4d71-983e-d6ec3f16059f}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">8208</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-25T19:13:00.000000000Z" />
<EventRecordID>3131</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MaminaKanta</Computer>
<Security />
</System>
<EventData>
<Data>hr=0xC004C4AA</Data>
<Data>{88c92734-d682-4d71-983e-d6ec3f16059f}</Data>
</E... Read more

Answer:Curious event in Event Viewer concerning 'with WMC'

Well, i should probably update this thread. I contacted Microsoft support, which told me that they've never seen this kind of situation before, one by all accounts activated Windows 8 throwing this kind of errors. They surmised that Windows 8 Pro wasn't really activated on their side when I fired up the upgrade to WMC. (?!) It sure looked activated on my side. Whatever...

Nothing short of a reinstall could be done to help it, I've been told. So I've done it, it is just a 'demo' installation for me, I don't have anything other than browser installed on it. This time it didn't need phone activation, it did everything on its own. I guess the situation really really cleared up in the meantime.

Casualty? My Google mail account in Windows Mail. I had it syncing using EAS just great, and I've lost that.
Thank you Google for not being evil, yeah.

2 more replies
Relevance 59.45%

keep getting it logged as an error. I have gone into Adjust Date and Time\Internet Time\and it is set to automatically synchronize with time.windows.com and on a scheduled basis. When I try to update or change the setting I get an error message that an error occurred while windows was synchronizing. I have tried to do a system file check but get the error message that Windows Resource Protection could not perform the requested service or start the Repair Service. I have checked that Windows Modules Installer is set to manual and so I don't know how else I can repair this error 131. Can anyone help please.

Answer:How do I rectify Event ID 131 in Event Viewer so I don't

You can try to sync with other time instead of time.windows.com. Once succeeded, switch back to time.windows.com. In addition, make sure the 'Windows Time' service is running.

6 more replies
Relevance 59.45%

On a daily basis I recieve this listing in the event viewer in administrative tools ? If anyone can point me to a fix or walk me thru one it would be great to eliminate this from being listed day after day . Here is a copy of the details of the event and what it reports >
Event Type: Information
Event Source: NSCService
Event Category: None
Event ID: 35
Date: 2009/08/09
Time: 05:56:29 AM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
The description for Event ID ( 35 ) in Source ( NSCService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Norton Protection Center Service. <<<<<<<<<<

Mt Norton Security Suite ,still updates my virus definintions and any other updates pertaining to the security suite ,so Iam a bit confused by the whole thing ? Thanks in Advance to All that Reply !!!
Take Care Nick

Answer:reoccuring event in event viewer !

Information items in Event Viewer are totally disregarded by me.

I can't tell you to do the same, it's your system...but those items are provided only for informational purposes.

None of them merit any action by the owner/user...there is nothing to fix.

Louis

1 more replies
Relevance 59.04%

Hi

I have seen many posts on various forums describing similar problems to mine, but no solution. Problem is as follows:

Running Windows Home Premium on HP DX7400 core 2 duo, 2gb memory, Nvidia 8400GS Video Card.

Everything runs perfectly, until I shut down.

I click shutdown and system starts to shut down, BSOD and minidump, then automatically reboots and says it has recovered from an unexpected shutdown.

If I ask it to find a solution it sends me off to some Broadcom Bluetooth driver problem and I have no Bluetooth installed. I did have but its uninstalled with Revo.

I have checked the disks, the memory, updated all Vista Updates and Nvidia drivers, Broadcom Ethernet driver.

Nothing seems to fix the problem. Its totally random. Sometimes it shuts down fine and sometimes not. I had XP on this PC initially and it was fine,

On many of the posts it seems to be only Vista Home Premium users who have this problem, I never see it with Ultimate or Basic Users. I also seems to affect many brands and configs, so it seesm to be a Home Premium problem.

Does anyone know of a fix?

Answer:BSOD on shutdown then recovers from unexpected shutdown

Please try and Reinstall your Blue tooth Driver that is Installed

See the Attachment for more Information

YOU WILL NEED TO BE AN ADMINISTRATOR

Hope This Helps,
Josh

6 more replies
Relevance 59.04%

Hi all,

I've just built an AcerPower F6 desktop to Win 7 Pro 32 every shutdown it shows BSOD and promptly restarts.

Event log is showing me the following for a critical event at the same time the shutdown occurs (The date on the log is from a week ago but this happens every shutdown which is once every weekday):

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 14/03/2014 13:19:19
Event ID: 6
Task Category: (6)
Level: Error
Keywords:
User: SYSTEM
Computer: CUR-ICT-01.LODGEFARM.LOCAL
Description:
Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>6</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-03-14T13:19:19.519629700Z" />
<EventRecordID>5118</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="52" />
<Channel>System</Channel>
<Computer>CUR-ICT-01.LODGEFARM.LOCAL</Computer>
<Security UserID="S-1-5-18" /&g... Read more

Answer:BSOD on Shutdown Event Log = Kernel-Processor-Power. Event ID: 6

Your NI Measurement Studio driver appears to be causing problems.


Code:
Probably caused by : NIPALK.sys
It's outdated by 11 years, if you wish to keep the program I suggest you update the driver.


Code:
88a32000 88aab000 NIPALK T (no symbols)
Loaded symbol image file: NIPALK.sys
Image path: \SystemRoot\System32\Drivers\NIPALK.sys
Image name: NIPALK.sys
Timestamp: Mon May 12 22:21:05 2003 (3EC01041)
CheckSum: 0007ACFC
ImageSize: 00079000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Please remove it or update it from the following link.

NI Measurement Studio - National Instruments

EDIT, there is a fix you can download which prevents file corruption, if you can't find an updated driver then download this.

http://digital.ni.com/public.nsf/web...C?OpenDocument

3 more replies
Relevance 58.63%

Hi, I recently made some upgrades to a (previously fine) PC - they were

- Installing 4GB extra RAM, of the same variety
- Reinstalling windows on a new SSD (a Samsung SSD 850 EVO 500GB)

I previously also upgraded to Windows 10, but a bunch of blue screens and other issues later I reinstalled 7. I'm still having problems though - the current symptoms are that every so often (1-3 times a day) the computer will hang for ~1-2 minutes on the 'starting windows' screen. When it finally loads, it will often hang for further extended periods before settling down. I checked in these event log and during these periods there will be many 'atapi' errors, with Event ID 11 "The driver detected a controller error on \Device\Ide\IdePort0." (I have attached a screenshot).

There will sometimes be other errors, usually relating to the timeout of certain things, but the previously mentioned error is by far the most prolific. On rare occasions there have been more serious errors - never blue screens since going back to windows 7, but once I booted to a black screen with just a mouse (was able to shut down via task manager then following a restart seemed ok).

Through some investigation, it does seem to be that the root cause of the problem is the SSD; I identified this a while ago and have tried various fixes, including:

Ensuring my Motherboard (a M4A78LT-M) SATA ports are configured in AHCI mode (they were previously IDE). This also led me to completely re-installing windows in an e... Read more

More replies
Relevance 58.22%

This i sthe error message, when i click ? help in all the ms office applications. Other things are working perfectly or I think so. This is the error , after i allowed windows updates, about 36 to my computer on microsoft office 2007 files, which included help updates and security and general package updates .After these updates, the computer gone in to configuring mode when started and finished. But when i click the ? help file, which is important for users could not be assessed. I have tried repairing of ms office at control panel, uninstall and reinstall , renaming help file in the program data/microsoft office etc. but this could not be solved. i want to know, whether i could download the ms office help files separately as separate downloads, so that i could atleast access these help features. Any help would be very much helpful.
I could not find which updates have done this to the computer. Please help

Answer:The Help viewer has encountered unexpected errors cannot continue

No reply received so far for my problem. So no help in sight,

9 more replies
Relevance 57.4%

I am new to this forum and posting as a last resort. I am getting windows zp freezes at random times - startup, using a program and idle. I have checked the physical hardrive, updated drivers and even thought I had it solved with the nvidia desktop manager turned off. But the freezes are back. I have never used hijack this so I am not sure what to expect, but if there is anything here, please help!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:36:43 AM, on 12/1/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Aliant\Aliant Security Services\Fws.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\DRIVERS\CDANTSRV.EXEC:\WINDOWS\system32\CTsvcCDA.EXEC:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Google\Common\Go... Read more

Answer:Hijackthis Log: Please Help Diagnose - Unexpected Xp Freeze

Welcome to the BleepingComputer Forums. Since it has been a few days, please post a new HijackThis log. Thank you for your patience.If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped.

1 more replies
Relevance 56.99%

I don't actually get a blue screen, but on the Problem Event Name, it lists bluescreen, so I'm not sure if I should post this here or not, but here are the details:






Quote:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 124
BCP1: 0000000000000000
BCP2: FFFFFA80085294F8
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\112712-23322-01.dmp
C:\Users\Admin\AppData\Local\Temp\WER-48282-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt


When I click check for solution, it acts like it's checking for a minute or two, closes, and nothing shows up.

I've made sure my drivers are all up to date, I've tried reformatting, I've made sure Windows is completely up to date, etc, etc, etc. Not even sure what's left to try at this point. Thanks in advance for any help.

Answer:Unexpected shutdowns/BlueScreen event name

Sorry for double post, but figure I would add that for the past 4 or 5 hours I've left it in safe mode and it has not crashed. Also, this is a brand new custom PC(bought, not built myself). Only been using it today.

4 more replies
Relevance 56.17%

Dear Friends i have a problem with my pc.This is the pc
OS
Windows 7 Ultimate x64
CPU
AMD Phenom II X4 955 3.2 Ghz
Motherboard
Gigabyte MA785GT-UD3H ver 1.1
Memory
4 gb 1600Mhz (2x2gb) G.Skill Ripjaws F3-12800CL8D-4GBRM
Graphics Card(s)
HIS Radeon HD5750 iCooler IV 1Gb 128Bit GDDR5
Sound Card
Onboard
Monitor(s) Displays
Philips 190C 19" LCD
Screen Resolution
N/A
Hard Drives
Western Digital Caviar Black (WD7501AAL89 3.5" 750GB SATA
PSU
600W thermaltake PSU
Case
Thermaltake V3 Black Edition with 600w psu
Cooling
Sunbeam Core Contact Freezer 120mm CPU fan +120mm case fan
My computer sometimes freezes.I send it to service but they werent able to find any errors.So now i understood that the pc creates an error when it is working under pressure, when playing game for example.The screen goes dark firstly, after sound freezes and there isnt any errors.I had to reset and after that it doesnt give an errors too.And when i looked event viewer i saw theese errors.


System

- Provider
[ Name] EventLog


- EventID 6008
[ Qualifiers] 32768



Level 2


Task 0


Keywords 0x80000000000000

- TimeCreated
[ SystemTime] 2011-12-14T20:32:26.000000000Z



EventRecordID 4164


Channel System


Computer Baris-PC


Security
- EventData
22:31:15
‎14.‎12.‎2011

... Read more

Answer:Freezing because of an unexpected error event id 6008

There are many reasons why a PC " behaves" this way.

These annoying " gliches" may be caused by an overloaded hard drive, overworked CPU, Malware, running 2 AV 's, unnecessary data, Browser addons or you may have unnecessary programs running in the background etc....

* Have you experienced a BSOD?

FYI.

windows 7 rc error event id 6008

unexpected shutdown "event id=6008" - Microsoft Answers

http://www.sevenforums.com/crashes-d...id-6008-a.html
Troubleshooting steps for you to try -

* If you are overclocking STOP.

*Make sure all intake/exhausts vents are clean along with all fans.
Get some temp monitoring software for cpu, gpu.

* Have you a System Restore Point PRIOR to the problem presenting that you could roll back to?

*How long have you had this problem for?

*Have you SP1 installed?

* What Anti Virus Program came preinstalled on your computer?
How did you get rid of it?

* Please list ALL the Security Programs currently used.

* Run a Disk Check.

Disk Check

9 more replies
Relevance 56.17%

Faulting application name: taskeng.exe, version: 6.1.7601.17514, time stamp: 0x4ce79d2c
Faulting module name: svrltmgr.dll, version: 0.0.0.0, time stamp: 0x584f2bca
Exception code: 0xc0000005
Fault offset: 0x000000000021f7d3
Faulting process id: 0x1860
Faulting application start time: 0x01d29e6dedebd9b9
Faulting application path: C:\Windows\system32\taskeng.exe
Faulting module path: C:\Windows\winipbin\svrltmgr.dll
Report Id: e0417759-0a61-11e7-9c07-0050569f7630

Task Scheduler crashes and the program closes. Need help

More replies
Relevance 55.76%

This has been happening since last 24 hours, My toshiba laptops shuts down automatically without showing any warning, the first it happened about 20 minutes after I turned it on , after the shutdown I again hit the power button and it started normally but after 2 minutes it happened again. I put it away and this afternoon I again turned it on and the same happened after 15-20 minutes this time when I tried turning it own it was not responding, I placed My hand underneath and it was hot around the fan and exactly under the touchpad. After 2-3 minutes I was able to turn it on again but it shutdown after a minute.
The fan is working , I do not see any hardware problem as well because its working FINE right now (been on for about 40 minutes)
I just checked the event logs and this is what I for the unexpected shutdowns.

THE FIRST SHUTDOWN LOG


HTML Code:
EventData11:57:08 PM‎3/‎6/‎2017439802E1070300010006001700390008004B00E1070300010006001200390008004B00600900003C000000010000006009000001000000B00400000100000000000000[FONT=Segoe UI]Binary data:
[/FONT]
[FONT=Segoe UI]In Words[/FONT]
[FONT=Courier New]0000: 000307E1 00060001 00390017 004B0008
0010: 000307E1 00060001 00390012 004B0008
0020: 00000960 0000003C 00000001 00000960
0030: 00000001 000004B0 00000001 00000000
[/FONT]
[FONT=Segoe UI]In Bytes[/FONT]
[FONT=Courier New]0000: E1 07 03 00 01 00 06 00 ?.......
0008: 17 00 39 00 08 0... Read more

Answer:Unexpected shutdowns with no warning - event logs attached

How long has it been since you cleaned the fan intake and exhaust for the laptop? You live in a hot, dusty climate. You're heatsink might be clogged with dust and dirt.

You laptop is showing all of the classic symptoms of overheating.

1 more replies