Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Unexpected shut down


  • Please log in to reply

#16
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts
thanks for the log... :thumbsup:
now answer my questions and run sfc and updates
  • 0

Advertisements


#17
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts

do you have a CD or DVD in the optical drive when you boot up...


I might have, though I don't think so. The last disk I had in was the memtest disk and windows would not have started if it was in the drive. I don't have one in now and usually don't.

The System File Checker is an important application which scans the integrity of all the protected system files

Click Start...type in sfc /scannow...
click on it in the results window above..press Enter...

If any files require replacing SFC will replace them...After the scan is done... Close the command prompt window.


In Win7 I went to the windows icon and searched for sfc. There was an executable file that I started. Some window flashed and quickly disappeared, but I have no idea what it said. Is there any way to check if worked correctly?

No updates are needed, according to the "Action Center."

Thanks for your help, dude. (that's socal slang for ya)

Edited by mclimbin, 24 January 2012 - 07:13 PM.

  • 0

#18
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts

Thanks for your help, dude. (that's socal slang for ya)


yep... :happy:

try this udfs.sys hotfix here
  • 0

#19
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
OK, I unzipped the file and it said it would install some files on my C drive. I'll let you know if I get another crash.

So, was it some kind of problem with the optical drive or the drivers for it?
  • 0

#20
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts

So, was it some kind of problem with the optical drive or the drivers for it?


I suspect its a OS problem...
if its fixed then is was for sure
  • 0

#21
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
It seemed more stable, I went about a day and a half with no shutdowns, then I just got one again. :(

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 4e
BCP1: 0000000000000099
BCP2: 0000000000075099
BCP3: 0000000000000002
BCP4: 0000000000074318
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\012612-18626-01.dmp
C:\Users\Michael\AppData\Local\Temp\WER-84895-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft....88&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt


Any suggestions?
  • 0

#22
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts
look in the event viewer for critical errors and warning in the system FIRST then and applications section...
to save some time look at the screenshot and follow the numbers to get any critical errors to the top
  • 0

#23
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
Should I post some of this data for you to look at? I can't really interpret it.
  • 0

#24
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts
yep...click on any critical and copy the text below it and paste it back here
  • 0

#25
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
There are 15 Criticals. I'm assuming you want the info from the details section, since the general section doesn't seem to be copy/paste-able. I'll post the first 10 on the list. Let me know if you need the other 5.

Edit: there are no criticals under applications.

1
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-24T05:04:47.991209600Z

EventRecordID 9511

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 80
BugcheckParameter1 0xfffffa7f8fe170cd
BugcheckParameter2 0x1
BugcheckParameter3 0xfffff88003e318be
BugcheckParameter4 0x7
SleepInProgress false
PowerButtonTimestamp 0


2
System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-11T19:32:47.972413100Z

EventRecordID 1420

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

3
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-26T17:03:24.953616600Z

EventRecordID 11192

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

4
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-11T20:59:42.192411700Z

EventRecordID 1816

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 78
BugcheckParameter1 0x99
BugcheckParameter2 0x1d3f5c
BugcheckParameter3 0x0
BugcheckParameter4 0x1d38dc
SleepInProgress false
PowerButtonTimestamp 0

5
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-21T22:21:37.693210900Z

EventRecordID 7991

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 26
BugcheckParameter1 0x403
BugcheckParameter2 0xfffff68000076f88
BugcheckParameter3 0xb8d000007f766005
BugcheckParameter4 0xfffff680000472a8
SleepInProgress false
PowerButtonTimestamp 0

6
- System

- Provider

[ Name] Microsoft-Windows-Eventlog
[ Guid] {FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}

EventID 29

Version 0

Level 1

Task 0

Opcode 0

Keywords 0x8000000000020000

- TimeCreated

[ SystemTime] 2012-01-26T15:53:28.712829400Z

EventRecordID 11172

Correlation

- Execution

[ ProcessID] 292
[ ThreadID] 372

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-19


- UserData

- PrimaryChannelFatalError

- Error

[ Code] 1455

ChannelPath Application


7
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-11T19:15:04.733618000Z

EventRecordID 1156

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0


8
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-27T04:15:01.223611800Z

EventRecordID 11466

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 78
BugcheckParameter1 0x99
BugcheckParameter2 0x75099
BugcheckParameter3 0x2
BugcheckParameter4 0x74318
SleepInProgress true
PowerButtonTimestamp 0


9
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-19T15:17:42.474810500Z

EventRecordID 6609

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0


10
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-13T06:27:44.257625900Z

EventRecordID 3254

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 244
BugcheckParameter1 0x3
BugcheckParameter2 0xfffffa800abd7b30
BugcheckParameter3 0xfffffa800abd7e10
BugcheckParameter4 0xfffff800033d08b0
SleepInProgress false
PowerButtonTimestamp 0

Edited by mclimbin, 27 January 2012 - 11:31 AM.

  • 0

Advertisements


#26
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts
nope...click on the general tab...highlight the text then press ctrl+c...open note pad then either right click and paste or ctrl+v

if you have a bunch of exactly the same just post one and note the dates and the time for all the rest that are the same
  • 0

#27
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
Is this the data you need? To copy it I had to select the event in the list, then go to the right side menu and select event properties. Then I had an option to copy the data.


Event id=29
The event logging service encountered a fatal error (res=1455) when applying settings to the Application channel. The service is shutting down since this channel is vital to its operation.

Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 1/26/2012 7:53:28 AM
Event ID: 29
Task Category: None
Level: Critical
Keywords: Service availability
User: LOCAL SERVICE
Computer: Desktop
Description:
The event logging service encountered a fatal error (res=1455) when applying settings to the Application channel. The service is shutting down since this channel is vital to its operation.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" />
<EventID>29</EventID>
<Version>0</Version>
<Level>1</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000020000</Keywords>
<TimeCreated SystemTime="2012-01-26T15:53:28.712829400Z" />
<EventRecordID>11172</EventRecordID>
<Correlation />
<Execution ProcessID="292" ThreadID="372" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-19" />
</System>
<UserData>
<PrimaryChannelFatalError xmlns:auto-ns3="http://schemas.micro...2004/08/events" xmlns="http://manifests.mic...dows/eventlog">
<Error Code="1455">
</Error>
<ChannelPath>Application</ChannelPath>
</PrimaryChannelFatalError>
</UserData>
</Event>

event id=10111
The device Apple iPhone (location Port_#0002.Hub_#0002) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 1/23/2012 7:24:42 PM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Desktop
Description:
The device Apple iPhone (location Port_#0002.Hub_#0002) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2E35AAEB-857F-4BEB-A418-2E6C0E54D988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-01-24T03:24:42.243628100Z" />
<EventRecordID>9471</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="1212" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{77C0DF7D-185D-4147-AF81-37CBFE181362}" xmlns:auto-ns2="http://schemas.micro...2004/08/events" xmlns="http://www.microsoft...serMode/Event">
<DeviceInfo>
<FriendlyName>Apple iPhone</FriendlyName>
<Location>Port_#0002.Hub_#0002</Location>
<InstanceId>USB\VID_05AC&amp;PID_12A0&amp;MI_00\0</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>


event id=10110
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 1/23/2012 7:24:42 PM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Desktop
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2E35AAEB-857F-4BEB-A418-2E6C0E54D988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-01-24T03:24:42.243628100Z" />
<EventRecordID>9470</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="1212" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{77C0DF7D-185D-4147-AF81-37CBFE181362}" xmlns:auto-ns2="http://schemas.micro...2004/08/events" xmlns="http://www.microsoft...serMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="3221226356">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>


12 of these:
event id 41
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 1/11/2012 11:32:47 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Desktop
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-01-11T19:32:47.972413100Z" />
<EventRecordID>1420</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>
  • 0

#28
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts
actually the highlighted part is what I'm after...
can you uninstall your iphone stuff while we test...you can put it back later
  • 0

#29
mclimbin

mclimbin

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 128 posts
That information is under the event id number for each event.

I'll uninstall iTunes, hopefully that should take care of it.
  • 0

#30
happyrock

happyrock

    Tech Moderator

  • Retired Staff
  • 9,285 posts
yes its there but I have to wade thru this crap to get to it


Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-01-11T19:32:47.972413100Z" />
<EventRecordID>1420</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP