Computer Support Forum

Shutdown Event

Question: Shutdown Event

Hardware: IBMPentium(R) 4 CPU 2.6GH1.99 GHz1 GIG RAMXP HOME VERSION SP3Error message I keep getting: "Event provider attempted to register query "%1" whose target class "%2" does not exist. The query will be ignored."Explanation: "An erroneous dependcey for the class in the query no longer exists, a missing class definition."This has occurred with Firefox crashing, Internet Explorer crashing (not as often), other programs. After rebooting, it usually runs a checkdisk and reinstates "orphan" files, or repairs corrupt files.In the viewer logs AVG anti-virus keep popping up prior to a shutdown event and I've heard somewhere that it's no longer recommended. I know that every time I come back from the reboot, AVG needs another complete update. It's as if information is being wiped out, so that computer can't make the connection and crashes.The User Action says: 1. Compile the definition for the target class into the WMI repository by compiling the class povider mof file.2. Reinstall the program. Relevant mof files are automatically complied when a program is reinstalled.This is obvious being managed by the Windows Management (Inventory?)Anyhow, I don't know what an mof file is. If it's AVG that's causing this, or it's a clash with other programs, maybe that's it. I have some freeware: Spyware Guard, Spybot Search & Destroy, Spyware Blaster, File Checker, Registry Mechanic (not freeware). Maybe I've got too many programs launching at startup, or they conflict with each other somehow.Thanks loads for any help.Mike.

Relevance 100%
Preferred Solution: Shutdown Event

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Shutdown Event

I think your regisrty is locked so AVG can't complete a update. It sounds like it deleted or uninstalled some files and you regisrty is still pointing to them.Spybot Search & Destroy locks the regisrty. You can try to uninstall it and than try to run the update for AVG to see if it takes. If not than uninstall it and do a reinstall.Let us know how you make out.

3 more replies
Relevance 59.04%

Hi all,

I've just built an AcerPower F6 desktop to Win 7 Pro 32 every shutdown it shows BSOD and promptly restarts.

Event log is showing me the following for a critical event at the same time the shutdown occurs (The date on the log is from a week ago but this happens every shutdown which is once every weekday):

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 14/03/2014 13:19:19
Event ID: 6
Task Category: (6)
Level: Error
Keywords:
User: SYSTEM
Computer: CUR-ICT-01.LODGEFARM.LOCAL
Description:
Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>6</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-03-14T13:19:19.519629700Z" />
<EventRecordID>5118</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="52" />
<Channel>System</Channel>
<Computer>CUR-ICT-01.LODGEFARM.LOCAL</Computer>
<Security UserID="S-1-5-18" /&g... Read more

Answer:BSOD on Shutdown Event Log = Kernel-Processor-Power. Event ID: 6

Your NI Measurement Studio driver appears to be causing problems.


Code:
Probably caused by : NIPALK.sys
It's outdated by 11 years, if you wish to keep the program I suggest you update the driver.


Code:
88a32000 88aab000 NIPALK T (no symbols)
Loaded symbol image file: NIPALK.sys
Image path: \SystemRoot\System32\Drivers\NIPALK.sys
Image name: NIPALK.sys
Timestamp: Mon May 12 22:21:05 2003 (3EC01041)
CheckSum: 0007ACFC
ImageSize: 00079000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Please remove it or update it from the following link.

NI Measurement Studio - National Instruments

EDIT, there is a fix you can download which prevents file corruption, if you can't find an updated driver then download this.

http://digital.ni.com/public.nsf/web...C?OpenDocument

3 more replies
Relevance 57.4%

Greetings Gents


? Windows 7 ultimate
? x64
? it was vista upgraded to 7
? full retail version
? 2009
? 2010
? Intel(R) Core(TM)2 Quad CPU Q9100 @ 2.26GHz
? NVIDIA GeForce GTX 260M
? Alienware M17x
? FLEXTRONICS 19.5 v *12.3 a = 239.85 w

Summery:
out of sudden when i playing mkv or .avi media it stopped working and force me to total shutdown the system. To be precise, I never faced the BOSD; yet I know it the same/equivalent to it. I am seeking your help gents :D

kindly find the attached

thank you & your rapid response is highly appreciated.

Answer:BSOD - Event ID 6008 Previous Shutdown was Unexpected - need total shutdown

Hi -

Most of the 11 BSODs list NVIDIA video as the probable cause.

1. Update your NVIDIA video drivers -

Code:

nvlddmkm.sys Tue Mar 16 22:00:40 2010 (4BA037C8)
nvBridge.kmd Tue Mar 16 21:31:37 2010 (4BA030F9)

NVIDIA --> http://www.nvidia.com/Download/index.aspx?lang=en-us

One of the BSODs had a bugcheck = 0x124 = WHEA = Windows Hardware Error Architecture - potential hardware failure

Info on 0x124 --> http://www.sevenforums.com/crash-loc...-what-try.html

2. Remove Daemon Tools/ Alcohol 120. A driver common to both sptd.sys is known to cause BSODs.

3. Update your ESET installation to v4.2.64.12 --> http://www.eset.com/download

You need device driver updates. Alienware Support sends me to Dell Support -

http://support.dell.com/support/down...nConsent=False

4. Update all device drivers - chipset (NVIDIA & Ricoh), audio, network. DO NOT download the NVIDIA Video driver from Dell - go to NVIDIA Support per step #1 above.

Windbg Logs
--> http://jcgriff2.com/dbug_logs/_99-db..._jcgriff2_.txt
--> http://jcgriff2.com/dbug_logs/_99-db...riff2_.txt.zip


If BSODs persist after driver updates, run the Driver Verifier --> http://jcgriff2.com/driver_verifier.htm

Regards. . .

jcgriff2

`


BSOD BUGCHECK SUMMARY

Code:

Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Tue Aug 17 21:36:50.639 2010 (GMT-4)
System Uptime: 0 days 3:49:08.761
*** WARNING: Unable to verify tim... Read more

2 more replies
Relevance 49.61%

Hello, I have an x61s running Windows Vista business (32 bit).  I'd like to be able to close the lid while the system is shutting down. That is I initiate a shutdown by selecting "shut down" from the Windows Start menu, and then I close the lid of the notebook, without waiting for the sutdown to complete. Problem is that closing the lid makes the notebook go into sleep mode, even if a shutdown has already been initiated. Does anyone know how I can avoid this, so that the system will continue to shut down even though the lid is closed in the process? That would be most useful, because when I decide to shut down my computer, I want to close the lid immediately.  However, if I close the lid during regular operation (not in a shut down scenario), then I don't want the system to shut down; In this case the system going to sleep following the lid close event is fine. I tried setting a "Lid closed action delay" of 2 minutes (in power manager, global power settings, advanced settings for the "lid closed" event), but this does not seem to work, the system still goes to sleep immediately after I close the lid.Message Edited by astra4 on 12-17-2008 08:22 PM

More replies
Relevance 49.61%

I boot system. I sign in.....system shuts down all by itself. When I re-boot it tells me it failed to to "Thermal Event" and tells to be F1 to continues.

What is "Thermal Event"?

Answer:Thermal Event Shutdown

Hello,

It basically means that your system overheated and shut itself down so as not to damage any components.
Reasons for this range from dust on the heatsink or a fan not spinning to heatsink not being seated correctly.

What is the make/specifications of the system and roughly how old is it?

3 more replies
Relevance 49.61%

Several times over the last few weeks, I noticed that my computer (Dell Optiplex 9020) had rebooted while left on overnight. Then today, without warning, the light blue (not BSOD) WIn 10 Restarting screen appeared while I was doing something noninvasive, like checking email. Then the system rebooted.

The event viewer offered the following clues:

Event ID 109
The kernel power manager has initiated a shutdown transition.
Shutdown Reason: Kernel AP

Event ID 1074
The process C:\WINDOWS\system32\winlogon.exe (MARK-9020) has initiated the restart of computer MARK-9020 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
I would be very grateful to hear back from members who have solved this problem.
Thanks!

More replies
Relevance 49.61%

.Windows 7 Ultimate
.64 bit
.Original System installed windows 7 home premim
.Came pre installed but upgraded to ultimate
.System hardware age? I bought this new 4 months ago yes reinstalled os from factory defaults using recover OEM windows & then upgraded with anytime upgrade to Ultimate

CPU AMD 1000 mhz X 2
Motherboard?
Power Supply?

Toshiba
Model Number C655D-S5200

Answer:Event ID 41 system shutdown

Hi -

No BSOD dumps are present in the zip file.

When does the system shutdown, e.g., gaming, video, etc...?

Check temps - Speccy - FileHippo.com - Download Free Software

Be sure to keep the laptop elevated for airflow.

Have you contacted Toshiba Support?

Regards. . .

jcgriff2

`

3 more replies
Relevance 49.61%

Several times over the last few weeks, I noticed that my computer (Dell Optiplex 9020) had rebooted while left on overnight. Then today, without warning, the light blue (not BSOD) WIn 10 Restarting screen appeared while I was doing something noninvasive, like checking email. Then the system rebooted.

The event viewer offered the following clues:

Event ID 109
The kernel power manager has initiated a shutdown transition.
Shutdown Reason: Kernel AP

Event ID 1074
The process C:\WINDOWS\system32\winlogon.exe (MARK-9020) has initiated the restart of computer MARK-9020 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
I would be very grateful to hear back from members who have solved this problem.
Thanks!

More replies
Relevance 49.61%

My 3 week old HP laptop is booting up and shutting down very slowly.Have tried all the usual cleanups and start up program disable stuff but it's as slow as ever. It's got AMD Turion x2 cpu and 2gb Ram surely it shouldn't be this slow?Anybody any idea? Event log keeps coming up with event log 100 on start up and event log 200 on shutdown stating both these processes are taking too long, but how do i fix it???

More replies
Relevance 49.61%

Several times over the last few weeks, I noticed that my computer (Dell Optiplex 9020) had rebooted while left on overnight. Then today, without warning, the light blue (not BSOD) WIn 10 Restarting screen appeared while I was doing something noninvasive, like checking email. Then the system rebooted.

The event viewer offered the following clues:

Event ID 109
The kernel power manager has initiated a shutdown transition.
Shutdown Reason: Kernel AP

Event ID 1074
The process C:\WINDOWS\system32\winlogon.exe (MARK-9020) has initiated the restart of computer MARK-9020 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: restart
Comment:
I would be very grateful to hear back from members who have solved this problem.
Thanks!

More replies
Relevance 49.2%

Got these on my shutdown last night, I don't think I have got them before. What are they exactly?

The NgcCtnrSvc service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation.To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
The Microsoft Passport Container service failed to start due to the following error: The service did not start due to a logon failure.

More replies
Relevance 49.2%

I tend to run my computer 24/7, but within the last 3 days, I had my computer shutdown while I was away with an Event ID 109 with the following reason:






The kernel power manager has initiated a shutdown transition.

Shutdown Reason: Battery



Thing is, I am on a desktop computer, not a laptop with a UPS connected. And it is an APC UPS with Powerchute Personal Edition installed. Although this is a Windows 7 to Windows 10 upgrade with Powerchute Personal Already installed. Does anyone know of a reason why Kernel-Power is shutting my computer down for this battery reason?

Answer:Windows 10 Pro Desktop Shutdown with Event ID 109

Hi:

Until someone more expert arrives...

What does the PCPE dashboard tell you?
Are you hearing any beeps from the APC UPS?
How old is the APC UPS?
Are you sure everything is plugged in and working properly, including the data cable from the back of the PC tower to the UPS?

Reason for asking: I had a relatively new APC UPS fail after only a few months several months ago.
It was under warranty and, after calling Schneider Electric, they RMA'd the whole unit (not just the battery), no questions asked. They sent a brand new one in 2 days.
(After many years of using their products, this was a "first". But I was pleased to find that they took care of it with zero fuss. The only chore was having to haul the old unit to the UPS store for the return shipment.)
Just a thought.

MM

7 more replies
Relevance 49.2%

This appears to be a general issue with windows 10, I always get the following errors on shutdown:

The VMware Workstation Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

The User Data Access_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

The User Data Storage_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

The Contact Data_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

I suspect the Event ID 7031 Service Control Manager errors occurred initially in windows 8.1 upgrade and was resolved by Microsoft. It looks like the problem is back especially with the new windows 10 services (with the exception of the VMWare Workstation server)

I suspect this error also affects shutdown/reboot times.

Ideas anyone how to resolve this

More replies
Relevance 49.2%

Hello. First of all, I didn't know where to post this so I chose Win7 because it's what I use.

OK so this problem started about a month ago, but now it's becoming more frequent than ever. What happens is, as I'm chilling on my desktop PC, it just shuts down spontaneously, and here's the thing, since I don't have a restart button, I can't restart it, the monitor goes black (no BSOD) and even if I hold the power button too long, it won't shutdown. The only way to shut it down is to remove the power supply cord (which of course could lead to corrupted hardware, data loss, etc).

Now this mostly happens when I play games with high demanding hardware. So for this reason, I'm monitoring the CPU heat and it seems fine. Max temp goes to about 51C. OK I am now gonna post dxdiag info so you can examine all my PC specs, if you need anything else, just say so.

Thank you very much in advance!


Code:
------------------
System Information
------------------
Time of this report: 1/7/2011, 03:11:27
Machine name: TONI7
Operating System: Windows 7 Ultimate 64-bit (6.1, Build 7600) (7600.win7_rtm.090713-1255)
Language: English (Regional Setting: English)
System Manufacturer: Packard Bell
System Model: ixtreme M5120
BIOS: Default System BIOS
Processor: AMD Phenom(tm) 9650 Quad-Core Processor (4 CPUs), ~2.3GHz
Memory: 8192MB RAM
Available OS Memory: 8192MB RAM
Page File: 1661MB used, 14719MB ava... Read more

Answer:Event ID 41 Error - Spontaneous Shutdown

Update Realtek HD audio drivers - http://sysnative.com/0x1/DriverRefer...l#RTKVHD64.sys

See if update available for NVIDIA GeForce GT 230 drivers - http://www.nvidia.com/Download/index.aspx?lang=en-us

" " Marvell Yukon 88E8071 PCI-E Gigabit Ethernet Controller - http://www.marvell.com/support.html

Try these 3 places for additional information -

1. WERCON -
START | type view | "View all Problem Reports" | 2x-click on line item for additional crash info

2. Reliability Monitor -
START | type perfmon /rel

3. Event Viewer -
START | type eventvwr.msc | Custom Views | Administrative Events

Regards. . .

jcgriff2

`

13 more replies
Relevance 49.2%

Hey,

I recently had a random shutdown while using Google Chrome.

All I have is the minidump but no way to read it.

There seems to be no record of the crash in my event viewer.

I checked my ram, PS, HD and Gfx card and they all seem to be in working order.

This is a brand new rig that I built so I am thinking it's software related but I want to make sure.

What should my next step be?

Answer:Single Random Shutdown - No Event

Download BlueScreenView (in Zip file)No installation required.Unzip downloaded file and double click on BlueScreenView.exe file to run the program.When scanning is done, go Edit>Select All.Go File>Save Selected Items, and save the report as BSOD.txt.Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

34 more replies
Relevance 49.2%

My currently up to date windows 10 pro machine has been restarting very very frequently after I've left it for a goodly while, including nearly every night, and in trying to figger out why this is happening, I learned about this option, Display Shutdown Event Tracker. It's supposed to be in the Local Group Policy editor, but I do NOT see an option named that. I'm an admin on my machine, so I'm not sure why I can't see it, unless it's not there any longer? Moved? Who knows? I did locate the .msc for GP, and ran it explicitly as an admin, but nada. Someone had mentioned looking at the user32 events in the regular event viewer, but this is all I see there:

"The process C:\Windows\System32\RuntimeBroker.exe (LAPTOPNAME) has initiated the restart of computer LAPTOPNAME on behalf of user LAPTOPNAME\MyUserName for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment:"

Any thoughts anyone?

TIA
elaine

More replies
Relevance 49.2%

I am running Windows XP-Home. All of a sudden when I want to shut down my computer I get a box that comes up and it's for "shutdown event tracker". I never had that before and I would like to just be able to select either shutdown/restart/etc. not having to put in why I am shutting down.

What I read is that this was originally for Windows 2000 but in Windows XP this was shut-off. If that is so - why do I get that pop-up?

In the help area this is what I found:
"On Windows 2000 Server products, you will be prompted to supply information regarding why you are shutting down or restarting the computer. This feature is turned off in Windows XP."

How can I get this turned OFF?
 

Answer:Shutdown Event Tracker Question

How to enable and disable Shutdown Event Tracker
1.To open Registry Editor, click Start, click Run, type regedit, and then click OK.

2.In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Reliability

3.Name:ShutdownReasonUI
Type:REG_DWORD
Value:1=enable;0=disable
 

3 more replies
Relevance 49.2%

I moved this post from general discussions where it got completely buried.

I'm sure every one of us is getting these errors in windows 10

This appears to be a general issue with windows 10, I always get the following errors on shutdown:

The VMware Workstation Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

The User Data Access_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

The User Data Storage_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

The Contact Data_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

The Sync Host_Session1 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

I suspect the Event ID 7031 Service Control Manager errors occurred initially in windows 8.1 upgrade and was resolved by Microsoft. It looks like the problem is back especially with the new windows 10 services (with the exception of the VMWare Workstation server)

I suspect this error also affects shutdown/reboot times.

Ideas anyone how to resolve this

Answer:Event Log 7031 Errors on Shutdown

getting this also - on laptop and home pc

1 more replies
Relevance 49.2%

I have been encountering slow shutdown times on my desktop recently. I looked in the event logs to try and find some clue but they were not that helpful to the less than technically minded

1: EVENT_TCPIP_TCP_CONNECT_LIMIT_REACHED
I had a lot of the above that were listed both as information and warning

2: also W32time came up several time as both info and warning

3: NetBT came up several times - with
"the name MSHOME could not be registered on the interface with IP address xxx, the machine with the ip address yyy did not allow the name to be claimed by this machine.

The only hardware I have installed recently is a Belkin wireless card (whose problems I have posted elsewhere ) This may have something to do with it but I am not sure. Briefly my setup is a wireless laptop (no problems) and a wired desktop (which has been re-configured to run on wireless)

I am running Windows XP pro with SP2 on an AMD system with 2 gigs ram

I have run several virus checks and I run spybot regularly, I have a belkin router to connect through to my blueyonder broadband.

Any advice?
 

Answer:XP very slow shutdown - event logs

13 more replies
Relevance 49.2%

Hi there,

I have had this PC for about three months and this is something that happens about 3 times a week. I'll come into the room and try to get it out of sleep mode, and then realize it has shut down yet again. When I check the details, here's what I get. I'm not a computer technician but it would be great if someone could take a look at this and see if they can determine the cause.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 9f
BCP1: 0000000000000003
BCP2: FFFFFA8006E47060
BCP3: FFFFF80000B9C518
BCP4: FFFFFA8004DF4C10
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\040110-43680-01.dmp
C:\Users\Miseta\AppData\Local\Temp\WER-72649-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Answer:BlueScreen event and random shutdown

Hello Welcome to SF,

Please post us the Dump file http://www.sevenforums.com/crash-loc...d-problem.html

Good Luck,
Captain

5 more replies
Relevance 49.2%

Windows 10 64 bit, latest version, is working fine on my Toshiba i7 laptop with 8 Gb ram. But I have problems with shutdowns when I click on restart. It seems to take far too long to shutdown. I am not sure how to find out why but when checking out the event viewer, I found several shutdown errors (some critical and some warnings). So I got the following screen shots (not sure how I got there) which seem to reveal several errors during shutdown. When I click on the web link I get a non working website.

Question:
1. How do I find out what is making shutdowns so slow when I click restart? (I "think" Shutdown seems faster if I just click on shutdown instead of restart)
2. What problem do these screenshots of error indicate and how do I fix them?
Thank you
Edit:
Got to those screens: Control Panel - Administrative Tools - Component services. Event viewer(Local) -Applications and Services Logs - Microsoft -Windows - Diagnostics Performance - Operational.

Here are some recent error screenshots which occur in both shutdown and bootups.
As can be seen this is a problem that goes back to 2016.

More replies
Relevance 49.2%

I plug in a flashdrive, scan it, copy a few files, pull it out (it had 3 files on it, never have viruses. Never.). Windows suddenly decides to shutdown. Waited :30 sec, rebooted, logged in and went to Event Viewer>System and filter for 6008 events. Zero, no listings. Can't find anything in the past 20 minutes that looks like a shutdown.

What gives? How can Event Viewer not show the shutdown? How can I find out what the burp was? I've had no issues lately (since a new card in July), Windows has been flawless. I hate it when Windows does something like this and I can't track it down.
Thanks in advance for any interest,

Surviver

More replies
Relevance 48.79%

Server 2003 has a Shutdown Event Tracker that requires that you "best describe why you want to shutdown the computer". It is on by default, but can be turned off using Group Policy.

Wonderful!

Somewhere along the way, one (and only one) of my XP machines (SP2 + all updates) acquired that same "feature". The Group Policy trick mentioned above has no relevance in XP, so I can't stop this event tracker that way.

Among other things, it makes a remote shutdown impossible (unless I use an RPC terminal). Besides, it's a pain to have to type in a reason (usually "Windows F%#*ed up again") when all I want to do is to shutdown or reboot.

If it runs as a service, I can't find it in either "Services and Applications" or in "Sysinternals Process Explorer"

And another thing!!! I can't find the logged events in the Event Viewer for Application, Security, or System.

If I could find it, I'd drive a stake through its heart. How do I kill the beast?

To prove that I've taken my meds today, here's a screen dump:

Askme nicely and I might explain how I got a screen dump of an XP computer part way into shutdown.

Thanks in advance.
 

Answer:Shutdown Event Tracking (XP, Not Server 2003)

Heres a couple of articles:

http://support.microsoft.com/kb/555541/en-us
http://www.tweakxp.com/article37489.aspx
http://searchwinit.techtarget.com/tip/0,289483,sid1_gci943320,00.html?Offer=w2k2
 

3 more replies
Relevance 48.79%

My computer continuously shutdowns every hour or so without any warning. When the computer loads back up a message pops up telling me that I have had an unexpected shutdown. If I click on more information it shows me what the error was (I have the error message copied if you wish to see it) but it makes no sense to me.

I have looked around for a solution but my error message is different to everyone elses.

If anyone could help me with this problem it would be much appreciated, thank you in advance.

Specs:

OS: Windows 7 Ultimate 64-bit
Processor: Intel Core 2 Duo
RAM: 2GB
Graphics card: ATI Radeon X1600 Series
Previous OS: Windows XP Media Center Edition

Lee.

Answer:Unexpected Shutdown - Problem Event Name: BlueScreen

@ttran

Sorry, I will do that now.

Thank you

@Marvel Varghese

I am certain it's not the beta, I bought Windows 7 Ultimate.

9 more replies
Relevance 48.79%

Hi Sorry for my english, I prefer German! My Notebook shut down automaticly after a while. The Notebook is running 7x24, but with low usage of the CPU and RAM. It does some jobs, like recording values from a connected sensor. After different running times, the Notebook shuts down. When I turn it on, it asks for Save or Normal Startup. I've read a lot in the Internet but I still got the problem. So these things I've tried: - System Scan with the Lenovo Tool. => No Errors, but BIOS didn't work.- Updated all the recommended things from that Tool- All updates from Windows Update- Manual Bios Update from 1.00 to 1.62- Set the Windows Power Settings from the notebook to High In the event results of W7 I can find under System for example: - Warnung Kernel-Processor-Power ID 37: Die Geschwindigkeit des Prozessors 3 in der Gruppe 0 wird durch die Systemfirmware begrenzt. Seit dem Bericht befindet sich der Prozessor seit 86400 Sekunden in diesem Status mit verringerter Leistung. - Kritisch Kernel Power ID 41: BugCheckCode 0, everthing is with 0 - Fehler Event Log ID 6008: Das System wurde unerwartet heruntergefahren - And many kind of Fehler Kernel-General ID 6. Some Ideas? Thank you


























Eventlog.zip ?781 KB

More replies
Relevance 48.79%

So I've been in the process of putting together a HTPC. It's a little Habey 800B case with a ASRock E350-M1 motherboard running W7 64 bit. I havent had any issues with it while installing Windows or any of the misc programs (Office, MSE, XBMC, etc). But I recently turned it on in the morning and was going to let it run all day so that I could remote to it from work and work on it when I had a few free minutes. But when I got to work and finally got some time, it showed as being offline??? I figured that it had gone to sleep. So the next day I connected a monitor/keyboard/mouse to it, booted it and it showed that Windows had shut down unexpectedly. I selected the "Load Windows normally" option and then set the power options to "never" sleep. I attempted the same thing the next day, and again it was off when I tried to connect to it???

It took me a few days to get back to looking at it. After booting and messing around with it for a bit it seemed a bit sluggish and froze once, requiring a manual reboot. I checked the Event Logs and took as many screen shots as I could. I posted the screen shots below hoping that someone can give me some info from the Event log info.

Someone here at work suggested I search for the .dmp files to see if they would give any further info. Thanks in advance for any assistance.





This is the full text from the above User Profile Service error.


Also the last couple of times I manually rebooted, I got t... Read more

Answer:Event viewer info after a HTPC shutdown

Looks like a disk error to me. You had an error in your event log regarding a disk error, and you had a few boots that were disk related, too.
 

7 more replies
Relevance 48.79%

Hi

Please can you help me a friends computer keeps having the BSOD mentioned above i have attached the required log if you could help

Cheers
Andy

More replies
Relevance 48.79%

BACKGROUND:

I'm troubleshooting a critical error message I receive in the event log. It's the same as has been previously reported here. Prior to upgrading to Windows 10, my system was running Windows 7 Pro SP1. When running my previous OS (WIN 7) I rarely had errors listed in Event Viewer. Now after upgrading to Windows 10, I get errors/warnings I never used to get under Windows 7. I have performed a clean install of Win 10 and still am receiving error messages.

The error I would like help with today is of the "Critical" level in Event Viewer.

PROBLEM:

After doing a normal shutdown, and then booting my system, I check Event Viewer and always find the following critical error:

"The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."

---------------------- START: Event Viewer XML error text ---------------------
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>3</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000400000000002</Keywords>

<TimeCreated SystemTime="2016-01-04T21:03:56.991237200Z" />

... Read more

More replies
Relevance 48.79%

==> NOTE <==

I placed this thread under the "bsod-crashes-debugging" forum because I wasn't sure where it belonged. If the moderator is able to move it to a more appropriate forum, please do so. If it is moved to a different forum, please inform me via email. Thanks in advance for any assistance with this issue.

-----------------

BACKGROUND:

Prior to upgrading to Windows 10, my system was running Windows 7 Home Premium SP1. When running my previous OS (WIN 7) I rarely had errors listed in Event Viewer. Now after upgrading to Windows 10, I get errors/warnings I never used to get under Windows 7.

The error I would like help with today is of the "Critical" level in Event Viewer.

PROBLEM:

After doing a normal shutdown, and then booting my system, I check Event Viewer and always find the following critical error:

"The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."

---------------------- START: Event Viewer XML error text ---------------------

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>3</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0&... Read more

Answer:Critical error Event ID 41 after every shutdown and bootup.

RESOLVED:

Since placing this thread, I was addressing other errors I found in the event logs. One of those had to do with "Metadata staging failed".

Researching about this error let me to the URL:

http://www.eightforums.com/bsod-cras...-failed-3.html

where poster Saammy gave the following possible solution:

I have the solution for the problem.
Searches on regedit for the following entry: DeviceMetadataServiceURL
There you change the URL in the following: http://dmd.metaservices.microsoft.com/dms/metadata.svc
after you have closed the editor is saved the change.
Now the problem is solved and it will also re-loaded device information.

As instructed, I used regedit and searched for "DeviceMetadataServiceURL", and it's value was set to:

http://go.microsoft.com/fwlink/?Link...69&clcid=0x409

I changed the value to "http://dmd.metaservices.microsoft.com/dms/metadata.svc" and then rebooted.

The end result was that this did indeed fix the "Metadata staging failed" errors, and interestingly enough the Event ID 41 is no longer showing up in the event logs after shutdown/reboot. I did 5 shutdown/reboot sequences... 1 per hour, and neither problem has occurred since making the above change.

5 more replies
Relevance 48.79%

BACKGROUND:

I'm troubleshooting a critical error message I receive in the event log. It's the same as has been previously reported here. Prior to upgrading to Windows 10, my system was running Windows 7 Pro SP1. When running my previous OS (WIN 7) I rarely had errors listed in Event Viewer. Now after upgrading to Windows 10, I get errors/warnings I never used to get under Windows 7. I have performed a clean install of Win 10 and still am receiving error messages.

The error I would like help with today is of the "Critical" level in Event Viewer.

PROBLEM:

After doing a normal shutdown, and then booting my system, I check Event Viewer and always find the following critical error:

"The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."

---------------------- START: Event Viewer XML error text ---------------------
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>3</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000400000000002</Keywords>

<TimeCreated SystemTime="2016-01-04T21:03:56.991237200Z" />

... Read more

More replies
Relevance 48.79%

I am running Windows 2000 workstation and need to get an audit report generated that documents when the computer shuts down. It will tell me when it is started (Event Viewer: Security) but not when it shuts down. Windows XP Professional will report both.

Q: How do I get W2K to record and report when it shuts down? Is it a registry setting? A local policy setting?

TIA.

--Bruce

Answer:W2K WS Event Viewer Shutdown audit question

Maybe this will help:

http://www.sans.org/resources/auto_a...#Audit%20Setup

3 more replies
Relevance 48.79%

Problem 1
I'm not sure if this is a hardware or software problem, but I have a newly built computer and experienced some strange shutdown problems. When I shut down the computer it hangs for a couple of seconds before shutting down. It sounds like the secondary HDD start up, shuts down, starts up and shuts down again before the computer shuts down itself. This always gives me a critical warning in event viewer saying that the PC wasn't shut down properly.

Sometimes it won't shut down at all, and I have to use the power button on the case. The LED code on the motherboard always shows "D4" when computer won't shut down, which means "PCI allocation error - out of resources". HDD also makes power down/up noises. This problem I have had all since I built the computer, but after I did a clean install of Windows with diskpart, it happened that the PC would randomly shut down or enter hibernation mode with LED code "D3", which means "some of the architectural protocols are not available".

However, if I turn off "fast startup" I experience none of these problems. It happens that the PC won't shut down, just much, much more rarely. When that happens LED code shows "D5" which means "no space for legacy option ROM initialization."
What I find strange is that these codes describe problems that doesn't seem to have anything in common, but the LED codes are only from D3 to D5, which are right after eac... Read more

More replies
Relevance 48.79%

System : Dimension 3000 Hello, i'm having a problem with my Mother's computer. It is shutting down (completely powering off) and will not come back on for several hours, sometimes days. When it does power back on, before booting into windows, i get an error message that reads: Alert! Previous shutdown due to thermal event. I do not know what the problem is, both the case fan and power supply fan work properly and i have removed all of the dust from inside the case, including from the cpu heatsink. The case is not missing any expansion slot covers either. When i check the logs in the bios nothing is showing up at all. The computer is out of warranty and i'm stuck on what to do? thanks.

Answer:Alert! Previous shutdown due to thermal event

jholty
Have you checked, that the front panel air intake is clean?
Open the case and check that both the processor and chipset heatsinks are still firmly attached to the motherboard.
Bev.

14 more replies
Relevance 48.79%

Hello all,
The problem is I had an old Nvidia gforce 5200 agp graphic card and upgraded it to a ATI 9600 xt agp graphic card and probably after a week after the installation when I shutdown my pc I get an end now message .Net Broadcast Event Viewer 1.0.5 end now. The ATI card requires the microsoft framework to run which I already have since I use Visual Studio .Net 2003 with framework v1.1. I decided to download the free 2005 visual basic and C# express with framework 2.0 which I heard is allright to run side by side with famework 1.1 and now after the first week of the new downloads I have two end now message .Net Broadcast Event Viewer upound shutting down. These pop up messages are getting really annoying, and I have googled to try to find a fix but have found nothing beside trying the microsoft UPh clean which did not work. Any help would be much appreciated. Thanks in advance.

Answer:end now message .Net Broadcast Event Viewer on shutdown

anyone?

1 more replies
Relevance 48.79%

Hi, i have just done a fresh install of win 7 and all was normal for 7 days with no errors in the event log but now on every start up i get the above error in the event log and don,t know how to trace it.After hours of googling i came upon a thread where you had helped someone else with the same problem.Thanks in advance for any help you can lend me.  Regards mark

Answer:Event ID 6008 The previous shutdown was unexpected

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy,  taking care to post the link of the snapshot in your next post.
   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.
    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course):
     Now, at the top, click File > Publish Snapshot. You will see the following prompt:
 &#... Read more

2 more replies
Relevance 48.79%

Hi, i have just done a fresh install of win 7 and all was normal for 7 days with no errors in the event log but now on every start up i get the above error in the event log and don,t know how to trace it.After hours of googling i came upon a thread where you had helped someone else with the same problem.Thanks in advance for any help you can lend me.  Regards mark

Answer:Event ID 6008 The previous shutdown was unexpected

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy,  taking care to post the link of the snapshot in your next post.
   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.
    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course):
     Now, at the top, click File > Publish Snapshot. You will see the following prompt:
 &n... Read more

4 more replies
Relevance 48.79%

==> NOTE <==

I placed this thread under the "bsod-crashes-debugging" forum because I wasn't sure where it belonged. If the moderator is able to move it to a more appropriate forum, please do so. If it is moved to a different forum, please inform me via email. Thanks in advance for any assistance with this issue.

-----------------

BACKGROUND:

Prior to upgrading to Windows 10, my system was running Windows 7 Home Premium SP1. When running my previous OS (WIN 7) I rarely had errors listed in Event Viewer. Now after upgrading to Windows 10, I get errors/warnings I never used to get under Windows 7.

The error I would like help with today is of the "Critical" level in Event Viewer.

PROBLEM:

After doing a normal shutdown, and then booting my system, I check Event Viewer and always find the following critical error:

"The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."

---------------------- START: Event Viewer XML error text ---------------------

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>3</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0&... Read more

Answer:Critical error Event ID 41 after every shutdown and bootup.

RESOLVED:

Since placing this thread, I was addressing other errors I found in the event logs. One of those had to do with "Metadata staging failed".

Researching about this error let me to the URL:

http://www.eightforums.com/bsod-cras...-failed-3.html

where poster Saammy gave the following possible solution:

I have the solution for the problem.
Searches on regedit for the following entry: DeviceMetadataServiceURL
There you change the URL in the following: http://dmd.metaservices.microsoft.com/dms/metadata.svc
after you have closed the editor is saved the change.
Now the problem is solved and it will also re-loaded device information.

As instructed, I used regedit and searched for "DeviceMetadataServiceURL", and it's value was set to:

http://go.microsoft.com/fwlink/?Link...69&clcid=0x409

I changed the value to "http://dmd.metaservices.microsoft.com/dms/metadata.svc" and then rebooted.

The end result was that this did indeed fix the "Metadata staging failed" errors, and interestingly enough the Event ID 41 is no longer showing up in the event logs after shutdown/reboot. I did 5 shutdown/reboot sequences... 1 per hour, and neither problem has occurred since making the above change.

3 more replies
Relevance 48.79%

OK so for the last week or so my pc has been cshutting off at random times and then on reboot indicating that there had been a thermal event. The fan on the CPU is working and the computer often shutdown immediately following start up (before there would be any chance for it to get too hot) I have run Advanced Systemcare free SInc I got it along with AVG Free. When I started noticing problems I also downloaded Ad-Aware and MalWareBytes. All systems run clean, but performance still sucks. Today I get the Thermal event Shutdown message again and when I look at thr event log it shows that my memeory was reduced on Oct 14th. I decide to try to go back to a restore point, and coincedientally the last restore point is Oct 14th. I run system restore, and the restore application comes back and tells me that it can't restore the computer to that day.

There is too much coincidence to make me think that nothing is happening, but I'm not PC savvy enough to figure out on my own. PLease help. Hi Jack this logs below
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:18:42 AM, on 11/6/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS�... Read more

Answer:Thermal Event Shutdown? HiJack this Logs

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/426567 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 48.79%

Getting shutdowns approx. every other day. Every time gets BlueScreen event.
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

I am attaching the .exe zip file obtained by the DM log collector. Thanks much for your help

Got another unexpected shutdown with the event: bluescreen. Any help would be greatly appreciated.

Answer:Computer shutdown with problem event BlueScreen

Quote:
fffff880`02b62978 fffff880`047a9a9aUnable to load image \??\C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for bdfwfpf.sys
*** ERROR: Module load completed but symbols could not be loaded for bdfwfpf.sys
bdfwfpf+0xca9a


Uninstall BitDefender. At least as a test. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Report us for any further BSOD.

6 more replies
Relevance 47.97%

Now, this is a thread I am starting just in case anyone else has run into this issue but, it looks like I have found the solution: https://www.tenforums.com/bsod-cras...-event-id-41-after-every-shutdown-bootup.html

Ok, I have had this Windows 10 install from September 2015 until now and I am not going to redo it from scratch. The error 41 would only occur when I was using Hybrid shutdown mode but never without it. Also, it was a highly random issue, sometimes, it would occur and sometimes, it would not occur for the longest time.

I have gone from a Gigabyte Z170 and i7 6700k to an FX 8300 with Asus 970 Pro Aura on this build. I now have 2 x 1TB SSD but, I was also using a 180GB Intel SSD and a Adata 480GB SSD at one point, I just cloned the Windows 10 install over each time. I tried different sata cables, different sata drivers, tried using minimal hardware and even a different keyboard.

I am now on a 2 x Sapphire Fury setup, was on a EVGA 980 Ti, used a R9 380 and even had a R9 290x before the 980 Ti. I did the proper driver cleaning without issue and tried different video drivers as well. Recently, the problem appeared to more often and a lot less random.

After applying that solution above, it appears to have been resolved. However, I will keep this thread updated just in case.

Note: To those who want to just bash windows, DON'T! THis is meant to help people who may be running into this problem like I was for the longest time. It was only in the install of Window... Read more

More replies
Relevance 47.97%

Hi, everyone! I recently upgraded from Vista to 7 Home Premium 64-bit on a month-old machine. The computer has been running 7 for several weeks, and this error just showed up within the last couple of days.

When I go to shutdown or restart, I get a screen that says Waiting for background processes to close. The screen is only up for maybe a second, with no list of what process needs to close. Then Windows shuts down normally.

I went through msconfig and determined that the RAID event monitor is the program causing the hangup. What does this mean? Has anyone else encountered problems with this? Is there any way to fix it other than just disabling the program in msconfig?

Any help would be greatly appreciated! I am very noobish and really don't know what to do here.

Answer:RAID event monitor causing problems at shutdown

Fill in your hardware specs with HWInfo32 and update your drivers with the guide in my sig. You need that app if you have RAIDED hard drives.

2 more replies
Relevance 47.97%

I'm getting a trio of critical error messages in event viewer after each shutdown:

- "The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."

- "Windows failed fast startup with error status 0xC00000D4."

- "The previous system shutdown was unexpected."

The PC starts up fine and seems to shut down very fast - within 10-12 seconds, and there seems to be no issues with startup or shutdown. But when I stumbled onto these critical messages in event viewer I got concerned. What could be triggering this? How do I troubleshoot this? They are logged in event viewer after each shutdown/reboot.

Answer:Critical error messages in event viewer after each shutdown

Try turning Fast Start Up off in the Power Options Menu. Finding the option is a bit obscure. There are some known issues with this. It is on by default in Windows 10 and will trigger shut down errors.

3 more replies
Relevance 47.97%

Hi,

my son has a Toshiba Satellite P750-R10 and problems with spontaneous shutdowns.
Looking at the system log there is a "Kernel Power Event 41" for every occurrence.

It has happened several times today so now it is a major issue but it has occurred for the last 6 month (21 entries in total) but spread out over time.

Any ideas on what is wrong or how to troubleshoot this?

This is the details from the log:

+ System
- Provider
[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41
Version 2
Level 1
Task 63
Opcode 0
Keywords 0x8000000000000002

- TimeCreated
[ SystemTime] 2013-01-01T14:18:59.960009600Z
EventRecordID 114234
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 8
Channel System
Computer Allansdator
- Security
[ UserID] S-1-5-18

+ EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

/BR Peter

Answer:Satellite P750-R10 - Immediate shutdown - Kernel Power Event 41

Hi

I don?t have experience with this but plase check Microsoft document http://support.microsoft.com/kb/2028504

My personal opinion is that you should back-up all important data and reinstall OS. It is definitely most radical method but also most effective to fix such problems. after doing this you will have clean preinstalled OS and everything will be OK again.

1 more replies
Relevance 47.97%

I have just upgraded my PC as follows: New clean HDD & installed Windows 7 Home Premium 64bit (was Vista)
Memory increased from 4 to 16Gb.
Initially, all seemed well. (A couple of days) After many Windows updates, I had the start of many unexplained shutdowns & re-starts. On a few occasions, Windows Explorer has quit & restarted, but the PC has stayed on. Most times the PC was being used lightly or idle.
I have run memtest, disk checks etc, but no problems identified. Kernel power event 41 is noted in log.
Any help would be much appreciated!

Answer:BSOD & Unplanned shutdown. (Kernel power event 41)

Hi, I would really appreciate a reply to my previous post if anyone has any advice to offer. I have still not solved the problem & don't know what else to try, having contacted most suppliers of the components in my PC! Can anyone advise how to test the power supply?
I have re-fitted the original HDD with Vista 32bit installed, but retaining the new 16Gb memory, and have had no problems in 3 days.
Thanks for any advice

1 more replies
Relevance 47.97%

Anybody out there can tell me what this is supposed to mean ?

Noticed that after Windows is fully running, the monitor switches off and after a few seconds on again.

Below entry is about 25 minutes after booting the pc and Windows running idle.

=
Logged: 12-11-2015 13:00:30
The process Explorer.EXE has initiated the shutdown of computer DESKTOP-ZZZZZZZ on behalf of user DESKTOP-ZZZZZZZ\username for the following reason: Other (Planned)
Reason Code: 0x80000000
Shut-down Type: shutdown
Source: User32
Event ID: 1074
Level: Information

followed by 4 entries
Logged: 12-11-2015 13:00:31
The Sync Host_Session2 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Source: Service Control Manager
Event ID: 7031
Level: Error

==

Thanks
=

More replies
Relevance 47.97%

I just rebuilt with a new motherboard, new Intel 6600K, and new RAM. It's assembled on a table top rather than in the case. All other parts are from an earlier build but believed to be in good shape.

I went to sleep about 14 hours ago with my PC still running. I was doing a backup job that would take a few hours, so I just slept.

6 hours later I woke up and notice that the CPU fan is not spinning. Panic. I didn't know if the motherboard had failed, the fan had failed, or even if the PC was running. Nothing displayed on the monitor.

I shut down and rebooted successfully, getting the "Windows did not shut down properly error".

Looking at logs, I see that the backup job completed at 1236 pm and that the Windows shut down at 1237, one minute later. Coincidence? Maybe.

Windows Reliability History gives no info beyond mentioning the unexpected shutdown.

Event Viewer may have more info, but I'm not familiar enough with it to find anything useful.

Do you have any specific help on Event Viewer?

Also interested in any ideas you may have on the cause.

The local power company says there were no failures today in my area.

The PC appears to be working OK for the last 8 hours since I restarted.

The backup job did in fact complete successfully. All files were copied as expected.

I re-ran the backup job to see if the PC would shut down when it finished a second time. It did not.

The new hardware has less than 100 hours of time on it and I need ... Read more

Answer:Event Viewer help? Need to diagnose unexpected shutdown on new build

I would run a memtest with the new RAM.
RAM - Test with Memtest86+

1 more replies
Relevance 47.97%

Hello, my dell precision t3500 started showing symptoms of bad Heatsink since december 2015.  It has been restarting several times and showing "Previous shutdown due to thermal event.".  In the first few weeks it used to shutdown like twice a week. Currently i get a lot of shutdowns. I can't use my computer for 3 hours, it shuts down at least once every single hour. 
What i've done so far....(My solutions)
I rubbed off the heat sink compound between the processor and heatsink and applied new heatsink compound. This didn't help.  The computer was still shutting down due to thermal events.
I read on a forum where someone was having a shutdown problem just like me and a dell expert advised him to upgrade to the latest bios. I was running the latest bios at the instant when my computer started shutting down due to cpu excessive temperature. I tried downgrading the bios from A17 to A14, now the computer would stay for 3-5 hours without shutting down. Downgrading didn't help either.  I know that the old bios had a greater temperature threshold and that's the reason for the computer staying longer before detecting a excessive cpu temperature than in the A17 bios version. Ok, so processor upgrade/downgrade didn't help either.
i wen't out to a computer store and bought a new Heatsink for my dell precision t3500, i removed the old HeatSink and replaced it with the new one. The computer booted just fine, stayed up for 3 hour... Read more

Answer:Dell Precision T3500 Shutdown due to thermal event

What's the actual full error when the thermal event occurs?  Usually there are multiple temp sensors on a machine - does error say which one is causing thermal event?
I'd see what all temps actually are and monitor them.  What does HWMonitor or HWiNFO (Sensors window) say temps are when system is idle and under load? 
What CPU are you using?  Thermal shutdown threshold within a CPU is often around 100C, which usually is pretty hard to hit for a desktop (as opposed to a laptop). 
What heatsink compound are you using?  Is it making good contact but thinly applied?  You can check this by removing the heatsink - compound should be pressed out and thin enough to "see through it' evenly across surface.  A thick application has poor thermal properties because thermal compounds are much poorer conductors of heat (~8 W/mK) than copper (~400 W/mK) or aluminum (~200 W/mK).
I'd also check for dust/blockage on case air intakes and fans (including the PSU fan) - this can cause poor heat removal from the case and resulting heat buildup.

3 more replies
Relevance 47.97%

Hi,
 
My desktop had been failing to wake from sleep (needing a restart everytime) since I installed the Windows 10 Anniversary update. Last night, I updated the chipset, intel graphics, and nvidia graphics drivers to their latest versions. Since last night, I have had three unexplained shutdowns after putting my pc to sleep. In event viewer, I am getting the 6008 error. 
 
My specs are
 
http://speccy.piriform.com/results/PepJcmtf23xATPNdl6YHn3L
 
Thanks for your help, and let me know what other information I might need to provide. 
 
 
Ciaran

More replies
Relevance 47.97%

I have had three of these shutdowns randomly occur over the last 2 days. I have no warning on when they will occur.

The computer is only 5 weeks old, so i wouldn't except an overheat issue personally. I can think of no new software i have installed since this has started. So far, it has always happened while playing a game (Diablo 3) but that is likely just coincidental, as that is what i do most on this computer

Any ideas on what to do/check?

Any more info you need that what i provided?

MSI GT70 0ND computer
GTX 675MX vid
16GB DDR3
i7 3630QM
THANKS!!

Answer:Kernel Power Event 41 Task 63 - Random shutdown

Event ID 41 errors are primarily caused by:
- shutting down the system by holding the power button down
- overheating
- power supply issues

Install temp monitoring software (I suggest HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools )
Open up the case and point a house fan into it (on high) - see if the lessens the frequency of the Event ID 41 events
If neither of these help, then see about getting an 80+ rated PSU from a store that you can return it (if it's not needed).

Just in case, here's my usual canned speeches:

For starters:





At work we start all repairs with a set of diagnostics. Often they find problems that weren't even expected. It's a waste of time to try to fix software on a system that has hardware problems.
Please try these free diagnostics for starters: Initial Hardware Diagnostics
Also, please ensure that you have ALL available Windows Updates (it may take several trips to get them all).



Please provide this information so we can provide a complete analysis (even though you're not reporting BSOD's): https://www.eightforums.com/bsod-cra...tructions.html

Good luck!

18 more replies
Relevance 47.56%

This has been happening periodically for several weeks It doesn't happen every day so I have been just restarting and continuing on. It seems to happen when the desktop is not even being used. (i.e. middle of the night). Power settings are to never sleep. I've been running core temp because somewhere I saw that it might be related to a thermal event, but that doesn't seem to be the case here. I am not seeing much in the event log other than the event 6008, unexpected shutdown (with no other details). I am not getting bSOD minidumps either in the c:\windows\minidumps folder even though I do have this setup in system security. I've attached the dump files so hope that one of you can help me take a look to see if you can help me to figure it out. The last 6008 was earlier today around 2 AM PDT. Right now I am running chkdsk to see if that turns up anything. Any help appreciated. Thanks.

Edit: see updated dump file in post #3

Answer:Event 6008 unexpected shutdown Win7 Ultimate 64bit

There are numerous files missing from your upload, please run the tool again and wait for the files to be gathered then upload

3 more replies
Relevance 47.56%

Hey folks!

I've had this issue since building a new x99 system. I did a fresh install of Windows 10 and after every single shut down I've received the following Critical error:

Kernel-Power Event ID 41 Task Category (63)
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Code:
-
System


-
Provider

[ Name]
Microsoft-Windows-Kernel-Power

[ Guid]
{331C3B3A-2005-44C2-AC5E-77220C37D6B4}



EventID
41



Version
4



Level
1



Task
63



Opcode
0



Keywords
0x8000400000000002


-
TimeCreated

[ SystemTime]
2016-09-02T15:55:45.533812900Z



EventRecordID
2994



Correlation


-
Execution

[ ProcessID]
4

[ ThreadID]
8



Channel
System



Computer
DannysX99


-
Security

[ UserID]
S-1-5-18

-
EventData


BugcheckCode
0


BugcheckParameter1
0x0


BugcheckParameter2
0x0


BugcheckParameter3
0x0


BugcheckParameter4
0x0


SleepInProgress
6


PowerButtonTimestamp
0


BootAppStatus
3221225684


Checkpoint
0


ConnectedStandbyInProgress
false


SystemSleepTransitionsToOn
1


CsEntryScenarioInstanceId
0



Things I've tried:

Changed power profile to no sleep, no hard disk sleep etc... Everything on. All drivers up to date. I even made some registry edits found in this post on tenforums.

Let me be clear: I've had no actual loss of power or unexpected reboots.... Read more

Answer:Kernel-Power Event 41 Task 63 during Every Shutdown! Fresh Install W10

Also getting these random crashes as well. Seem to be a daily occurrence.

4 more replies
Relevance 47.56%

So, I'm having a really weird issue.

I have a pc with a win10 Pro.
It was upgraded from Windows 8. Still in windows 8 the shutdown and the restart took like 10 minutes each time.
Upgraded to 10 expecting this not to happen.. It still does..

After alot of search, I started disabling Windows services a few blocks at a time, and after that 1 at a time.

My conclusion is that when the event viewer service is online, the computer takes forever to shutdown or reboot..
If I disable the service, the computers shutdown and restart are done in a matter of seconds..
I've tested this.

Sooo.. I'm lost here.. Tried sfc /scannow to see if that would fix something, but nothing was detected..

Answer:Event Viewer Service causing Shutdown/Restart slowdown.

You can force it to shutdown. 1000 = 1 second.

Code:
reg add "HKCU\Control Panel\Desktop" /v "AutoEndTasks" /t REG_SZ /d "1" /f
reg add "HKCU\Control Panel\Desktop" /v "HungAppTimeout" /t REG_SZ /d "5000" /f
reg add "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /t REG_SZ /d "5000" /f
reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "5000" /f

1 more replies
Relevance 47.56%

Hi I bought my laptop about 3 months ago
i got BSOD relating event 41 task 63 kernel power many times and got twice BSOD today
it really made me frustrated
please help

Answer:BSOD Event 41 Task 63 Kernel-Power Random shutdown

This is a detail about my laptop's random start today

System


-
Provider

[ Name]
Microsoft-Windows-Kernel-Power

[ Guid]
{331C3B3A-2005-44C2-AC5E-77220C37D6B4}





EventID
41





Version
3





Level
1





Task
63





Opcode
0





Keywords
0x8000000000000002




-
TimeCreated

[ SystemTime]
2014-10-02T06:50:05.007895800Z





EventRecordID
14317





Correlation




-
Execution

[ ProcessID]
4

[ ThreadID]
8





Channel
System





Computer
Francis_Xiao-PC




-
Security

[ UserID]
S-1-5-18

-
EventData


BugcheckCode
209


BugcheckParameter1
0x40000000410


BugcheckParameter2
0x2


BugcheckParameter3
0x0


BugcheckParameter4
0xfffff88006170aa9


SleepInProgress
4


PowerButtonTimestamp
0


BootAppStatus
0

4 more replies
Relevance 47.56%

Hey folks!

I've had this issue since building a new x99 system. I did a fresh install of Windows 10 and after every single shut down I've received the following Critical error:

Kernel-Power Event ID 41 Task Category (63)
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Code:
-
System


-
Provider

[ Name]
Microsoft-Windows-Kernel-Power

[ Guid]
{331C3B3A-2005-44C2-AC5E-77220C37D6B4}



EventID
41



Version
4



Level
1



Task
63



Opcode
0



Keywords
0x8000400000000002


-
TimeCreated

[ SystemTime]
2016-09-02T15:55:45.533812900Z



EventRecordID
2994



Correlation


-
Execution

[ ProcessID]
4

[ ThreadID]
8



Channel
System



Computer
DannysX99


-
Security

[ UserID]
S-1-5-18

-
EventData


BugcheckCode
0


BugcheckParameter1
0x0


BugcheckParameter2
0x0


BugcheckParameter3
0x0


BugcheckParameter4
0x0


SleepInProgress
6


PowerButtonTimestamp
0


BootAppStatus
3221225684


Checkpoint
0


ConnectedStandbyInProgress
false


SystemSleepTransitionsToOn
1


CsEntryScenarioInstanceId
0



Things I've tried:

Changed power profile to no sleep, no hard disk sleep etc... Everything on. All drivers up to date. I even made some registry edits found in this post on tenforums.

Let me be clear: I've had no actual loss of power or unexpected reboots.... Read more

More replies
Relevance 47.56%

I have been having an issue with my system just simply shutting down without any warning almost as if a power outage occurred. No blue screen no notifications nothing. It has happened 4 times now while playing a game in particular. When the power goes out I cant turn the computer back on for about 2 minutes or so. I initially thought it was a cpu heating issue since i had a stock cooler, I changed it for an evo 212, but the same issue applies. Could it possibly be the PSU, even though it powers the computer 99% of the time and fan seems to be working fine? I went back into the windows event viewer and I have a link of the past week of errors that have been occuring, I just dont know what they mean. any help?https://onedrive.live.com/redir?resid=42B9E1D1DBB4DB7C%...
specs are as follows: amd 8350 4.0ghz, gigabyte 990fx mobo, gtx 760 nvidia gpu, 650W PSU silverstone ac input 115-240Vac 60-50Hz, 8 gb ddr 3 ram.
temperatures doesnt reach more than 58 degrees under full load usually around 50 range.

this is the most recent incident.

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 8/28/2014 1:52:31 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: NickKanarev-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events... Read more

Answer:critical administrative event 41 random shutdown while gaming No BSOD

Please don't Double Post, People will still your old post within the BSOD Thread.

1 more replies
Relevance 47.15%

I have vista 32bit and event viewer is showing the problems as follows:
1.The following boot-start or system-start driver(s) failed to load:
ATITool
sfdrv01
sfhlp02
sfsync02
sfvfs02

2. The Internet Connection Sharing (ICS) service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

3. The IPsec Policy Agent service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

4. The LogMeIn Kernel Information Provider service failed to start due to the following error:
The system cannot find the path specified.

5. The IKE and AuthIP IPsec Keying Modules service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

6. Terminal Service start failed. The relevant status code was The configuration data for this product is corrupt. Contact your support personnel.

7. Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

8. The server service was unable to recreate the share york because the directory C... Read more

More replies
Relevance 47.15%

i have noticed that my computer has been taking longer to start up and shut down lately. i have used all my resources to see and control what i am running on startup, from msconfig to spybot's startup manager, there's not a lot running there so i went to check the event viewer and it's full of errors, critical events and warnings.

I tried using MS's websites for help but they are a nightmare to use, posted this same entry in their forums but no answer yet. I'll appreciate if you can help me understand what's going on with my computer. Thanks in advance

the last critical event reads as follows (the OS is in spanish so i'll translate to what i think it should be):

Windows has started up:

Boot duration : 135986ms
IsDegradation : true
Incident Time (UTC) : 27/04/2008 05:35:27 p.m.

Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Diagnostics-Performance
Date: 27/04/2008 12:38:01 p.m.
Event ID: 100
Task Category: Boot Performance Monitoring
Level: Critical
Keywords: Event Log
User: LOCAL SERVICE
Computer: (name deleted by me)


EventData

BootTsVersion 2
BootStartTime 2008-04-27T17:35:27.656Z
BootEndTime 2008-04-27T17:37:54.087Z
SystemBootInstance 512
UserBootInstance 493
BootTime 135986
MainPathBootTime 53423
BootKernelInitTime 15
BootDriverInitTime 3316
BootDevicesInitTime 5470
BootPrefetchInitTime 90685
BootPrefetchBytes 446992384
BootAutoChkTime 0
BootSm... Read more

Answer:Event viewer reports errors and critical events on boot and shutdown

the system specs in case t hey are useful at all:

DELL vostro 400
Intel core 2 Duo E6750 @ 2.66 ghz
2GB RAM

i tried to edit the previous post and there was a time limit, sorry for bumping this

1 more replies
Relevance 46.74%

My pc is Dell Optiplex gx270
That's the message from appearing BIOS when I start the computer ...
Alert! Previous shutdown due to thermal event.....
I then have a choice between F1 and F2
F1: Press F1 to continue -> windows going to start and then the machine will turn off automatically.
F2: Press F2 tp run the set up utility-- > It goes to BIOS

Can someone help me Please!

Thank you
 

Answer:Dell Optiplex gx270 Problem: Alert! Previous shutdown due to thermal event.....

Try clearing the event log. Instructions from a Dell support forum:

Start the system.
Press 'F2' to enter System Setup.
Under the Maintenance heading, highlight 'System Event Log' and press the 'Enter' key.
Highlight 'Clear System Event Log' and press the 'Enter' key.
Press the 'Esc' key twice to restart.
 

3 more replies
Relevance 46.74%

My pc is Dell Optiplex gx270
That's the message from appearing BIOS when I start the computer ...
Alert! Previous shutdown due to thermal event.....
I then have a choice between F1 and F2
F1: Press F1 to continue -> windows going to start and then the machine will turn off automatically.
F2: Press F2 tp run the set up utility-- > It goes to BIOS



Can someone help me before I call Dell because it is the client machine!

Thank you

Answer:Dell Optiplex gx270 Problem: Alert! Previous shutdown due to thermal event.....

Check for excessive dust and proper fan operation. Sounds like it is overheating and shutting down.

6 more replies
Relevance 46.74%

This is for a Thinkpad Edge E530C with windows 7 professional, join to a domain. Kaspersky endpoint AV, no modification done to device. User brought it to me a few weeks back describing the issue as the screen goes all wonky, computer then shutdown. I that point I had not seen the screen. Did full update, (windows and lenovo), lenovo system scan (All good and Green). Problem did not occure for a couple weeks.Today user call me, this time i got to see the screen. I was going to take a picture, but the laptop shutdown before i could.  Google search image show very similar to what i was looking at: Screen picture Looked through the event log, found at the exact same time just before kernel power event get logged i find this:device ide iastor0 event id 9Same problem description as here: technet problem descriptionBut his problem is for a server with raid, all other issue related to that event that I could find talks about raid, I have an edge e530c........ Thank you all for your help. 

More replies
Relevance 45.51%

Alright, started getting the 1001 BugCheck crash with Event 41 Kernel-Power BSOD a few times not long ago, widely spaced out incidents (it will lock up, make a very weird repetitive noise through my stereo speakers and will also get black and white bars across the screen before the blue screen turns up and asks for restart option choice). And Event 4 k57nd60a has been ongoing for as long as I can remember.

Any ideas?
Event 1001, BugCheck
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x00000000c0000005, 0xfffff8800646843a, 0xfffff880028c5a10, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 041312-18205-01.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-04-13T14:05:58.000000000Z" />
<EventRecordID>39029</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>M... Read more

Answer:Event 1001 BugCheck Event 41 Kernel-Power Event 4 k57nd60a

Memory exception but we need to examine the DMP files to find out why.

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

If you are overclocking STOP
We could also use some system information, which you can get easily by running msinfo32.
To do that go to start>run>type msinfo32>enter

When it is finished running go to file>save>name it and upload to us here.
You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:





Quote:
* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.


To ensure minidumps are enabled:





Quote:
* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb ... Read more

9 more replies
Relevance 43.46%

I have hundreds of these errors for event id's 1026,1049 and 1059, I have searched and cannot find anything remotely associated with these errors or the cause of them:

The description for Event ID 1026 from source Internet Explorer cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
 
If the event originated on another computer, the display information had to be saved with the event.
 
There all have the same information and event log online help does not "help" , any ideas?

Answer:Event ID 1026 ,Event ID 1049 and Event ID 1059

I think Iv'e answered my own question:
 
http://msdn.microsoft.com/en-us/library/dd565636(v=vs.85).aspx error 1059
http://msdn.microsoft.com/en-us/library/dd565650(v=vs.85).aspx error 1049
http://msdn.microsoft.com/en-us/library/dd565667(v=vs.85).aspx error 102
Would someone be able to check this is correct?
 
thanks very much

3 more replies
Relevance 43.46%

Thanks for any help.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 28/11/2006
Time: 17:57:33
User: USER-2F62D3344E\user
Computer: USER-2F62D3344E
Description:
A provider, OffProv11, has been registered in the WMI namespace, Root\MSAPPS11, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Answer:What's this event in event viewer? (event source WinMgmt)

http://support.microsoft.com/default...b;en-us;891642
this might help

1 more replies
Relevance 43.05%

About 2 days ago, my computer started randomly turning off and on. I would enter my password and it would load windows and run fine. As of yesterday it shut itself down and after I entered my password, it would give me that message. I would choose "Run Windows normally" and it would go to the screen with the Windows logo with the loading bar underneath of it. The loading bar doesn't have the scrolling green light though, and it just sits there. Any help is greatly appreciated.
 

Answer:"Alert! Previous shutdown due to thermal event!"

9 more replies
Relevance 41.41%

Not sure when this started but I wanted to check out a problem on this system and when I went to do some filtering on the event logs the Event Sources section was empty. I can filter by event level, I can filter by Event IDs but if I try any of the drop
downs, Event sources or Keywords the lists are blank.

Any suggestions?
Peter

More replies
Relevance 39.36%

Hi, all. I have been trying to figure out a serious of issues that my PC has been having. It's possible they were caused by poorly seated RAM, but the RAM seems to check out now. There is a whole slew of details on the case here: TechNet with a lot more information that will be of help, including posted evtx files. I have always gotten great help here, though, and am in dire need of a second opinion, so I thought I would check with this forum's experts.Here is the basic gist, although there is a ton more detail on the other link:Since building this machine, I've had frequent BSODs, often seemingly-related to middle of the night MSE updates, or possibly other windows updates. These always required a System Restore to recover from, as Windows was unbootable. Often it said the Restore failed, but it seemed to resolved the bootability issue at least.I have removed MSE and reseated some RAM that initially tested poorly, but which now seems to be passing MemTest no problem.I still have a series of issues that occur, and the one that was causing noticeable issues was SuperFetch causing sysmain.dll to fault (Event 1000, posted below) on every boot and periodically throughout the day. I have disabled SuperFetch, which stopped the issue from happening every boot, but it still happens occasionally, so it seems SuperFetch is but one trigger.The other most common error I have is Event 55 (posted below), possibly related to Windows Backup and/or System Restore, which seems ... Read more

More replies
Relevance 39.36%

I was running 3DMark06 and got a BSOD code 124. After that every time I boot Event Viewer logs Error Codes ID 3012 and 3011. Attached are screenshots of both.

I googled this and found two different threads where someone suggested to rebuild the performance counters. Both responses were basically the same, below is one. Neither of the OP's came back and said if this worked for them.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Re: LoadPerf 3011, 3012
Hi-
I had the same problem with LoadPerf and here is what I found out:
All performance counter names and explain text are maintained in string tables managed by the performance counter subsystem (Perflib).

The current contents of the performance counter string tables are corrupted and cannot be displayed. To correct the problem, rebuild the string tables.

User Action
To rebuild the string tables, on the computer that displayed the message, at the command prompt, type Lodctr /r
The contents of the string tables are automatically rebuilt.

I hope this helps
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Since this was from 2008 (XP?) and the other response was for Vista I wanted to see if the guru's at SevenForums thought that this was okay before I did this.

Here are the screenshoots of my two errors.

Answer:After BSOD Event Viewer Logs Event ID 3012 and 3011 every time I boot

Rebuilding the string tables as outlined in my first post fixed the problem.

1 more replies
Relevance 39.36%

duct: .NET Framework; Version: 2.0.50727.8670; Event ID: 0;
Event Source: TOASTER.EXE;


 

More replies
Relevance 39.36%

Hi,
keep getting the errors above every startup regarding;
11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.
Context: Application, SystemIndex Catalog
Details:
(HRESULT : 0x80004005) (0x80004005)"
I have 3 admin user profiles.
Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch event viewer or mouse customisation softwares, they freeze temporarily and ... Read more

Answer:Windows 7: Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post. 
Louis

7 more replies
Relevance 39.36%

Hi all,

i tried loading the eventvwr.msc file from system32 folder directly as well as from the administrator tools, but i get:

"event log service is unavailable. verify that the service is running."

so i try to start the event log service, from the services.msc program;
whenever i try to start windows event log from services i get the message:

"Windows could not start the windows event log service on local computer.
Error 3: The system cannot find the path specified."

how can i specify the path?
or
how can i resolve the problem?

any help would be appreciated please---thanks

Answer:HELP need to solve this problem asap - Unable to start event viewer/event log service

Fire up regedit and find this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog

With "Eventlog" highlighted on the left pane, you should be able to see a value called "ImagePath" on the right. ImagePath should be equal to this:

%SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted

If you can't see "ImagePath" in that location, or if it's not set to the text above, that's almost certainly your problem. If you're in the habit of using "registry cleaners", that might be the cause.

3 more replies
Relevance 39.36%

Description:
Error code 100000d1, parameter1 00000060, parameter2 00000002, parameter3 00000000, parameter4 ba60578c.

For more information, see Help and Support Center at
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 64 100000d
0020: 31 20 20 50 61 72 61 6d 1 Param
0028: 65 74 65 72 73 20 30 30 eters 00
0030: 30 30 30 30 36 30 2c 20 000060,
0038: 30 30 30 30 30 30 30 32 00000002
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 30 2c 20 62 61 36 30 00, ba60
0050: 35 37 38 63 578c

Some body can help me ?
 

Answer:Random restarts Source:System Error Event Category: (102) Event is 1003

Inside the 1 MiniDump:




BugCheck 100000D1, {60, 2, 0, ba60578c}
Probably caused by : nvata.sys ( nvata+1378c )Click to expand...

Uninstall the nvidia drivers from the control panel
Download and install the latest drivers
 

2 more replies
Relevance 39.36%

i have been having this error for a couple days now and it also seems to be associated with another crash im getting from a game i play also.

first one is a memory dump blue screen issue and the other is just the game crashing.


Script:



Log Name:      Application
Source
:        Microsoft-Windows-WMI
Date
:          1/17/2015 10:53:52 AM
Event ID
:      10
Task Category
None
Level
... Read more

Answer:Event ID 10 — Event Filter Query Functionality CAUSING BLUE SCREEN

Still nothing responded on this.

1 more replies
Relevance 39.36%

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"

I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch ... Read more

Answer:Event errors (11, 7000, 7026), intellipoint and event viewer freeze.

Hiya and welcome to SevenForums!
Please contact an admin to move this thread, because this isn't the appropriate section for these kinds of problems.

4 more replies
Relevance 39.36%

Hi,

I was hoping somebody could offer an insight on the below, as searching around I've not found much to go on other than "overheating"

Basically my laptop has been having very high temperatures for a long time (usually ~60C for CPU and often 100-110 for GPU...insanely high, in other words) For example, see how hot the machine gets just by resuming from a sleep (this is all within a minute or so):



I have been seeing the following error in event viewer each time I start Windows (4 entries) for some time:



So today I bit the bullet and had the back cover off the laptop and noticed what a bad state the thermal compound was in, for both the CPU and the chipset chip, so wiped it off using TIM Cleaner, and then applied new thermal compound and put the laptop back together. I was actually shocked because for the first time since I can remember, I could feel cold air blowing from the vents of my laptop! I logged into Windows and noticed that my temperatures had fallen and were staying at around the below:



Not as low as I'd like but a massive improvement. Trouble is, I am still getting the WHEA-Logger event errors in Windows Event Viewer ('processor core') and wondered if this was not in regards to overheating after all?

The plus side is my laptop is now almost totally silent - the way it must have been when I bought it new 3 years ago! But I was wondering how to investigate these WHEA-Logger errors, if anyone has any advice that'd be great.

... Read more

Answer:WHEA-Logger event 18/19 errors in Event Viewer (W7 Home Premium)

First, well done on applying the thermal paste to the cpu/gpu. I assume you cleaned the vents as well. Did you use arctic silver 5 (just curious)?

I wonder if the processor could have been damaged from the heat. Are you experiencing any BSODs or other problems? You can run Prime95 to test your system. And Furmark for gpu.

2 more replies
Relevance 39.36%

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"

I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch ... Read more

More replies
Relevance 39.36%

Hi people,
I have setup a disk quota usage for the user "tester" 
50mb = warning level
100mb = Quota limit
When I generated a file of > 50mb then I see well a event
Level,Date and Time,Source,Event ID,Task Category
Information,23-09-16 15:10:24,Ntfs,36,(2),A user hit their quota threshold on volume C:.
when I try put a second file of more than 50mb also, first i'm block to copy it (good) and then i receive well then related event
Level,Date and Time,Source,Event ID,Task Category
Information,23-09-16 15:10:38,Ntfs,37,(2),A user hit their quota limit on volume C:.
so I erase the files and try again, and then nothing in the event log !
I have try : restart the quota management, to pout other limit for that user, to disable then enable again limitation for this user without success ! once the event 36 & 37 appear it seem that he never appear again even if a warning, limit is triggered
again...

any idea... ?

More replies
Relevance 38.95%

received three error codes in a row with the following error message:Windows Operating System; Version: 6.1.7600.16385; Event ID: 11; Event Source: Disk, what do i do i need help please.........
HP,WINDOWS 7 HOME PREMIUM
 

Answer:Windows Operating System; Version: 6.1.7600.16385; Event ID: 11; Event Source: Disk

11 more replies
Relevance 38.95%

The exact details are Log Name:      Application
Source:        SideBySide
Date:          9/23/2015 1:28:53 PM
Event ID:      80
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Angela-PC
Description:
Activation context generation failed for "C:\Program Files (x86)\Slingplayer Desktop\Slingplayer Desktop.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component
version already active. Conflicting components are:. Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

if someone can help with this error in my event log i would be so grateful.

More replies
Relevance 38.95%

when I run reboot stress test at Intel platform with win10 Desktop RS1 version, after some cylces test, XHCI controller show yellow bang. Event viewer showed that event id is 14.  I want to know the indication of
StartDeviceFailReason equals 3. I cannot find more info about this failure from website.Thanks a lot!









-

Provider











[
Name]
Microsoft-Windows-USB-USBXHCI










[
Guid]
{30E1D284-5D88-459C-83FD-6345B39B19EC}




















EventID
14



















Version
0



















Level
2



















Task
0



















Opcode
0



















Keywords
0x8000400000000000

















-

TimeCreated











[
SystemTime]
2016-11-25T19:48:29.908393500Z




















EventRecordID
7099


















Correlation

















-

Execution











[
ProcessID]
4










[
ThreadID]
232




















Channel
System



















Computer
LAPTOP-QQEHB4HS

















-

Security











[
UserID]
S-1-5-18












-

EventData










fid_UcxController
0x187f9ddd64a8







... Read more

More replies
Relevance 38.95%

Well, I tryed to manage page-file but unfortunataly it resulted in problems. Then I lost VAIO-CARE and 7 ZIP files too. When I open Event Viewer every single day I see this: event Id 2002, Souce: Eap Host, Log name: Application and number of Eventes: 84. As I am desparate about that, What sould I do? Reinstall VAIO-care or WHAT else? Please help me!!!!! Well, I can say that before of all, I tryed to install vopt, latest version but it was not freeware and I soon had to uninstall it but it was not getting to uninstall from programs and features and then I used register editor to delete the leftovers which desapered from program and features....but I can see several error in event viewr such as Event 11706, MsInstaller >>>> Product Vaio Media Plus -- Error 1706 - An instalation for the product Vaio Media Plus cannot be found. Try the installation again using a valid copy of the instalation package 'VMP VEPMMx64.msi'. So should I reinstall all vaio care or not................!!! By the way I tryed to install vopt in order to align files in hard drive but when I tryed to manage page file it did not work as should have so I lost vaio care..........................................What to do? can you figure out what going on.................!!!

Answer:Event Viewer Event Id 2002, Source: EapHost, Log Application

Welcome to the forums Marioo!

Have you tried a system restore to a point before these errors started? (Easiest things first) You could also try a sfc/scannow, to find and possibly repair any corrupted system files. We have many fine tutorials here at the forums, written by some very knowledgeable people, heres a link to one if you haven't did this before :

SFC /SCANNOW Command - System File Checker

5 more replies
Relevance 38.95%

no info comes up with diagnosis/analysis for this URGENT item in Event Log...was directed to you for further assistance.      Add'l/same problem w/Event ID 100. Please advise ASAP?  Tnx, Karen

 

More replies
Relevance 38.95%

System event not recording anything. It is empty, says "date is invalid(13)".

I have some flaky things going on like unexplained CPU spikes causing slowdowns and mouse drag. Also have video problems screen going blank then recovery.

I have reloaded video drivers to no avail. No system lockups or BSODs. I need to see system event log to debug. Other event logs OK. I am proficient on PC and have searched for event log problem. The Event Log service is running. Thanks.

hp pavilion dv9000
OS Name Microsoft® Windows Vista™ Home Premium
Version 6.0.6001 Service Pack 1 Build 6001
Processor Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHz, 1801 Mhz, 2 Core(s), 2 Logical Processor(s)
BIOS Version/Date Hewlett-Packard F.23, 10/3/2007
SMBIOS Version 2.4
Installed Physical Memory (RAM) 2.00 GB
Adapter Type GeForce 8400M GS, NVIDIA compatible
Adapter Description NVIDIA GeForce 8400M GS
Adapter RAM 128.00 MB (134,217,728 bytes)
 

Answer:Solved: Vista, Event Viewer - system event log not recording

Did you check the - %SystemRoot%\System32\Winevt\Logs\System.evtx file? It may be corrupted and you may want to rename it to .old and let it recreate itself.
 

2 more replies
Relevance 38.95%

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

Answer:Event Viewer Errors: SettingSyncHost, Source ESENT, Event 467

Bump... anyone have any idea? I keep getting it averaging about once an hour.

EDIT: Sorry, forgot to add, already tried /sfc scannow, it doesn't find the error.

2 more replies
Relevance 38.95%

EDIT: ARGH, sorry, meant to post this in General Discussion forum, I have no idea if it is a network issue.

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

More replies
Relevance 38.95%

Out of the blue I get 3 event errors when I boot up my Home Premium 64 bit. First time in two years.

Event ID 7006:
The ScRegSetValueExW call failed for FailureActions with the following error:
Access is denied.

I don't have AVG. I have Agnitum Firewall, Panda Antivirus (Free).

Event ID 7009:

A timeout was reached (30000 milliseconds) while waiting for the IPsec Policy Agent service to connect.

Event ID 7000:

The IPsec Policy Agent service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

When I checked the windows services table, I noticed that IPsec has in fact been started but probably not in a timely fashion. How do I get rid of these 3 annoying errors although I don't notice any performance problems in my laptop?

Thanks in advance for your help.

Answer:Three event errors on bootup: Event ID 7006, 7000 and 7009

Hi Atom.

"Event ID 7006:
The ScRegSetValueExW call failed for FailureActions with the following error:
Access is denied."

These events are normal because of Panda Cloud Antivirus' self-protection feature.

"Event ID 7009:

A timeout was reached (30000 milliseconds) while waiting for the IPsec Policy Agent service to connect."

Follow the instructions from here:

Event ID 7009 — Basic Service Operations

You can put new value as 60000 instead of 30000.

The Event ID 7000 should disappear when you boot your laptop next time.

Hope this helps.

1 more replies
Relevance 38.95%

So basically my pc restarts whenever it wants its getting really annoying, it comes up with serious error and it either says its device drivers or ram, but ive tested my ram with the windows diag and mem test with no errors, and ive updated all my drivers, so im not sure, any help would be muchly appreciated,

this is from the event viewer, ill have to post a copy of my next serious error report and anything else that would be helpful, thanks and plz plz plz help


Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 4/21/2007
Time: 2:34:13 AM
User: N/A
Computer: EZMIKE
Description:
Error code 1000008e, parameter1 c0000005, parameter2 805607c5, parameter3 f3283a84, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 38 30 35 36 30 37 63 35 805607c5
0040: 2c 20 66 33 32 38 33 61 , f3283a
0048: 38 34 2c 20 30 30 30 30 84, 0000
0050: 30 30 30 30 0000
 

Answer:System Error - Event Category (102) - Event ID 1003 Windows OS

got these last 4 minidumps too
 

3 more replies
Relevance 38.95%

After too many unexplained problems, I decided to reinstall Windows 8.1 Pro x64, and migrate off of SBS 2011 Standard. In addition to the primary workstation that can't read any event logs, I built five Server 2012 R2 servers (Hyper-V host, Active Directory
VM, Exchange 2013 VM, SQL Server 2014 VM, and WSUS VM).

I was diagnosing why my workstation's Outlook cannot reach the local Exchange Server.   I tried to look at the event logs, and found the
Event Viewer cannot open the event log or custom view.  Verify that Event Log service is running (it is) or the query is too long (whatever that indicates).  The request is not supported (50)
Looking at the directory of the event logs folder.  It appears that most logs are empty, which is understandable since it's a rebuilt installation.  I found a small number of Applications and Services Logs and it appears nothing was logged since
six days ago on 4/4/2016.   On support forums, I found many have this exact problem on Win 7, Win 8, and Win 10.  Of the solutions posted none of them would even execute on my Win 8.1 Pro x64 machine.  I tried clearing the event logs (WEVTUTIL
CL logfilename) and am told Failed to clear log .... The request is not supported. 
It's very difficult to diagnose why Outlook 2013 cannot reach Exchange 2013, even if Outlook is installed on the Exchange server machine (just as a test).  The web-based Outlook owa, ecp, ... all work fine. ... Read more

More replies
Relevance 38.95%

Good Evening,

My PC is steadily failing with a variety of blue screen errors -

----------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 07/10/2010
Time: 00:06:29
User: N/A
Computer: PHIL-E2A3E8C94F
Description:
Error code 1000000a, parameter1 806f8360, parameter2 000000ff, parameter3 00000008, parameter4 806f8360.

Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 30 1000000
0020: 61 20 20 50 61 72 61 6d a Param
0028: 65 74 65 72 73 20 38 30 eters 80
0030: 36 66 38 33 36 30 2c 20 6f8360,
0038: 30 30 30 30 30 30 66 66 000000ff
0040: 2c 20 30 30 30 30 30 30 , 000000
0048: 30 38 2c 20 38 30 36 66 08, 806f
0050: 38 33 36 30 8360

----------------------------------------------------------------------------------------------------

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 06/10/2010
Time: 22:23:54
User: N/A
Computer: PHIL-E2A3E8C94F
Description:
Error code 10000050, parameter1 e4733000, parameter2 00000000, parameter3 80582627, parameter4 00000001.


Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 35 10... Read more

Answer:System Error - Event Category (102) - Event ID 1003 Windows OS

are these errors occurring out of the blue or do they happen when you run certain things? did you recently install new drivers or updates? posting the full specs of your machine and which operating system would also be helpful.
 

5 more replies
Relevance 38.95%

Hi.
I have noticed that during the long duration my PC is on (18 hours), several apps keep getting crash. Even after I restart these apps, they will eventually crash. PC is still functioning.
The apps that are crashing are:

Asus AI Suite 2 (I use it for fan control)Corsair Utility Engine - for my mechanical gaming keyboardBitdefender - The Antivirus software doesn't really crash, but it's a module inside BitDefender that has issues.
Bellow are all three event viewer reports for all mentioned apps.
1. Asus AI
Faulting application name: AI Suite II.exe, version: 2.0.0.0, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.15063.296, time stamp: 0x28e9cf15
Exception code: 0x0eedfade
Fault offset: 0x000eb802
Faulting process id: 0x3600
Faulting application start time: 0x01d2ee6667bfdd12
Faulting application path: C:\Program Files (x86)\ASUS\AI Suite III\AI Suite II.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 64c7a38e-b13e-42ba-bf9f-4b4e72c0cc4b
Faulting package full name:
Faulting package-relative application ID:
2. Corsair Utility Engine
Faulting application name: CorsairHID.exe, version: 1.16.42.0, time stamp: 0x56f25dd3
Faulting module name: ntdll.dll, version: 10.0.15063.0, time stamp: 0xa82cc161
Exception code: 0xc0000005
Fault offset: 0x0005d9f4
Faulting process id: 0x3190
Faulting application start time: 0x01d2eccfcf3748b1
Faulting application path: C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairHID.exe
... Read more

Answer:Multiple Application Errors (Event 1000) in Event Viewer

Please use this link to create a zip file so that we can troubleshoot the bsod minidump files and the logs:
BSOD - Posting Instructions - Windows 10 Forums

Please change the default language to English so that we will be able to read and troubleshoot the logs.

2 more replies
Relevance 38.95%

EDIT: ARGH, sorry, meant to post this in General Discussion forum, I have no idea if it is a network issue.

Hello everyone,

I keep seeing this error appear several times a day, even during idle, in my Event Viewer. I did a clean install of build 10586 less than a month ago. I'm not having any overt issues yet, but the error is disturbing.

SettingSyncHost (9144) {979B90BD-0F81-4D83-B038-62032DD17C47}: Database C:\Users\xxxxx\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Index deleteDetection of table items is corrupted (0).
I have spent a few hours researching this and I can't find any reports of similar issues or even what the file metastore\meta.edb is for. Is this hopefully one I can just rename and it'll automatically create a new one?

More replies
Relevance 38.95%

It's been a while since I've experienced a BSOD as I'm viewing a video on youtube. It would freeze as if the audio was caught in mid-stream then BSOD, then would restart automatically. I go to Event Viewer after windows as loaded and I see Event 41 Kernel-Power in there.

I had this issue before and we found out that the motherboard was causing the issue. I have also replaced my video card and added additional memory and expanded to 16gb. Before, I only have 8gb.

Ran sfc/scannow with no errors found. Going to do chkdsk as well.

It's strange because this does not happen at all when I'm playing online games or even just standard browsing. It's when I play videos on youtube that there would be instances where this would happen. There are other times where I can view them without any issue at all.

Any ideas would be great.

Also, how can I attach the windows DMP file to scale it down as it is just really large?

Thanks again guys.

Answer:BSOD when watching videos on youtube, Event 41 in Event Viewer

Hello Santos, and welcome to Seven Forums.

Please read the instructions here: Blue Screen of Death (BSOD) Posting Instructions, and post back with the needed information. One of our BSOD experts should be by later when able to further help.

9 more replies