Please follow the steps below to enter the Event Viewer program in Vista. This will give me more information into what is causing your issue. You can get to Event viewer two ways and I will post both for you.
Method One
Go to
Start
In the Search box type in Event Viewer in the search box and press Enter
From this point you can follow from step four from the below method as they will be the same.
Method Two
Go to Start
Right click on the Computer Icon and select Manage
Navigate to the Event Viewer, You will be prompted to accept the action you are going to perform. Click continue
On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
Look for the ones that correspond to the times that your issue occurred.
If any are found please double click and expand the error. This will open and give you more information on the error.
Please include that in your next reply.
Unfortunately, it doesn't seem to create an event file. Other than the unexpected shutdown messages. For example, It just crashed on me at 7:45pm. I checked the event log afterwards and there was nothing around that time other than the unexpected shutdown and I think that's because I have no choice but to hold down the power button.
Sometimes when it locks up on me and I restart it, I'll get that message about windows recovered from a serious error, to send them an error report which I do. It doesn't give me a solution it just closes. When I go check the "problem reports and solutions" section it will tell me that the problem is currently being researched.
I'll include the event messages that did happen around the time of the latest crash.
Log Name: System
Source: EventLog
Date: 8/13/2010 7:48:02 PM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Robert-PC
Description:
The previous system shutdown at 7:45:48 PM on 8/13/2010 was unexpected.
Event Xml:
<Event xmlns="
http://schemas.micro.../events/event"> <System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-08-13T23:48:02.000Z" />
<EventRecordID>238330</EventRecordID>
<Channel>System</Channel>
<Computer>Robert-PC</Computer>
<Security />
</System>
<EventData>
<Data>7:45:48 PM</Data>
<Data>8/13/2010</Data>
<Data>
</Data>
<Data>
</Data>
<Data>10882</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DA07080005000D0013002D0030003400DA07080005000D0017002D0030003400600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>
I get the following two errors a loooot. I created a log for them by going into Event Viewer/Applications and Services/Microsoft/Windows/CAPI2. I managed to have traced them back to my internet security suite, Zonealarm Extreme. I contacted their tech support people a couple of weeks back and they informed me that they are aware of the problem and are currently working on a solution. They told me that despite it showing up on my event log, it shouldn't be the reason I'm crashing.
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 8/13/2010 7:48:06 PM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Robert-PC
Description:
Failed extract of third-party root list from auto update cab at: <
http://www.download....uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="
http://schemas.micro.../events/event"> <System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="49154">11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-08-13T23:48:06.000Z" />
<EventRecordID>98623</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Robert-PC</Computer>
<Security />
</System>
<EventData>
<Data>
http://www.download....tstl.cab</Data> <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 8/13/2010 3:02:20 AM
Event ID: 6
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Robert-PC
Description:
Reached crypt32 threshold of 50 events and will suspend logging for 60 minutes.
Event Xml:
<Event xmlns="
http://schemas.micro.../events/event"> <System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="32770">6</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-08-13T07:02:20.000Z" />
<EventRecordID>98460</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Robert-PC</Computer>
<Security />
</System>
<EventData>
<Data>50</Data>
<Data>60</Data>
</EventData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 8/13/2010 7:48:04 PM
Event ID: 1101
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: Robert-PC
Description:
Audit events have been dropped by the transport. The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="
http://schemas.micro.../events/event"> <System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2010-08-13T23:48:04.830Z" />
<EventRecordID>69626</EventRecordID>
<Correlation />
<Execution ProcessID="284" ThreadID="1460" />
<Channel>Security</Channel>
<Computer>Robert-PC</Computer>
<Security />
</System>
<UserData>
<AuditEventsDropped xmlns:auto-ns3="
http://schemas.micro...2004/08/events" xmlns="
http://manifests.mic...dows/eventlog"> <Reason>34</Reason>
</AuditEventsDropped>
</UserData>
</Event>
The following error message didn't happen around the time of the 7:45pm crash but since I do receive it several times a day I thought I would include it as well:
Log Name: System
Source: Microsoft-Windows-WLAN-AutoConfig
Date: 8/13/2010 9:31:17 AM
Event ID: 4001
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Robert-PC
Description:
WLAN AutoConfig service has successfully stopped.
Event Xml:
<Event xmlns="
http://schemas.micro.../events/event"> <System>
<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580d7dd-0379-4658-9870-d5be7d52d6de}" />
<EventID>4001</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2010-08-13T13:31:17.475Z" />
<EventRecordID>238212</EventRecordID>
<Correlation />
<Execution ProcessID="344" ThreadID="3716" />
<Channel>System</Channel>
<Computer>Robert-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>
I see this one often as well:
Log Name: System
Source: Service Control Manager
Date: 8/10/2010 12:48:35 PM
Event ID: 7009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Robert-PC
Description:
A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
Event Xml:
<Event xmlns="
http://schemas.micro.../events/event"> <System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7009</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-08-10T16:48:35.000Z" />
<EventRecordID>236233</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Robert-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">Microsoft .NET Framework NGEN v4.0.30319_X86</Data>
</EventData>
</Event>
Edited by VistaM, 13 August 2010 - 06:40 PM.