[happyrock]

thanks for the log...
now answer my questions and run sfc and updates

[Advertisements]

do you have a CD or DVD in the optical drive when you boot up...

I might have, though I don't think so. The last disk I had in was the memtest disk and windows would not have started if it was in the drive. I don't have one in now and usually don't.

The System File Checker is an important application which scans the integrity of all the protected system files

Click Start...type in sfc /scannow...
click on it in the results window above..press Enter...

If any files require replacing SFC will replace them...After the scan is done... Close the command prompt window.

In Win7 I went to the windows icon and searched for sfc. There was an executable file that I started. Some window flashed and quickly disappeared, but I have no idea what it said. Is there any way to check if worked correctly?

No updates are needed, according to the "Action Center."

Thanks for your help, dude. (that's socal slang for ya)

Edited by mclimbin, 24 January 2012 - 07:13 PM.

[mclimbin]

do you have a CD or DVD in the optical drive when you boot up...

I might have, though I don't think so. The last disk I had in was the memtest disk and windows would not have started if it was in the drive. I don't have one in now and usually don't.

The System File Checker is an important application which scans the integrity of all the protected system files

Click Start...type in sfc /scannow...
click on it in the results window above..press Enter...

If any files require replacing SFC will replace them...After the scan is done... Close the command prompt window.

In Win7 I went to the windows icon and searched for sfc. There was an executable file that I started. Some window flashed and quickly disappeared, but I have no idea what it said. Is there any way to check if worked correctly?

No updates are needed, according to the "Action Center."

Thanks for your help, dude. (that's socal slang for ya)

Edited by mclimbin, 24 January 2012 - 07:13 PM.

[happyrock]

Thanks for your help, dude. (that's socal slang for ya)

yep...

try this udfs.sys hotfix here

[mclimbin]

OK, I unzipped the file and it said it would install some files on my C drive. I'll let you know if I get another crash.

So, was it some kind of problem with the optical drive or the drivers for it?

[happyrock]

So, was it some kind of problem with the optical drive or the drivers for it?

I suspect its a OS problem...
if its fixed then is was for sure

[mclimbin]

It seemed more stable, I went about a day and a half with no shutdowns, then I just got one again.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 4e
BCP1: 0000000000000099
BCP2: 0000000000075099
BCP3: 0000000000000002
BCP4: 0000000000074318
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\012612-18626-01.dmp
C:\Users\Michael\AppData\Local\Temp\WER-84895-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft....88&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Any suggestions?

[happyrock]

look in the event viewer for critical errors and warning in the system FIRST then and applications section...
to save some time look at the screenshot and follow the numbers to get any critical errors to the top

[mclimbin]

Should I post some of this data for you to look at? I can't really interpret it.

[happyrock]

yep...click on any critical and copy the text below it and paste it back here

[mclimbin]

There are 15 Criticals. I'm assuming you want the info from the details section, since the general section doesn't seem to be copy/paste-able. I'll post the first 10 on the list. Let me know if you need the other 5.

Edit: there are no criticals under applications.

1
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-24T05:04:47.991209600Z

EventRecordID 9511

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 80
BugcheckParameter1 0xfffffa7f8fe170cd
BugcheckParameter2 0x1
BugcheckParameter3 0xfffff88003e318be
BugcheckParameter4 0x7
SleepInProgress false
PowerButtonTimestamp 0


2
System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-11T19:32:47.972413100Z

EventRecordID 1420

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

3
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-26T17:03:24.953616600Z

EventRecordID 11192

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0

4
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-11T20:59:42.192411700Z

EventRecordID 1816

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 78
BugcheckParameter1 0x99
BugcheckParameter2 0x1d3f5c
BugcheckParameter3 0x0
BugcheckParameter4 0x1d38dc
SleepInProgress false
PowerButtonTimestamp 0

5
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-21T22:21:37.693210900Z

EventRecordID 7991

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 26
BugcheckParameter1 0x403
BugcheckParameter2 0xfffff68000076f88
BugcheckParameter3 0xb8d000007f766005
BugcheckParameter4 0xfffff680000472a8
SleepInProgress false
PowerButtonTimestamp 0

6
- System

- Provider

[ Name] Microsoft-Windows-Eventlog
[ Guid] {FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}

EventID 29

Version 0

Level 1

Task 0

Opcode 0

Keywords 0x8000000000020000

- TimeCreated

[ SystemTime] 2012-01-26T15:53:28.712829400Z

EventRecordID 11172

Correlation

- Execution

[ ProcessID] 292
[ ThreadID] 372

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-19


- UserData

- PrimaryChannelFatalError

- Error

[ Code] 1455

ChannelPath Application


7
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-11T19:15:04.733618000Z

EventRecordID 1156

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0


8
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-27T04:15:01.223611800Z

EventRecordID 11466

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 78
BugcheckParameter1 0x99
BugcheckParameter2 0x75099
BugcheckParameter3 0x2
BugcheckParameter4 0x74318
SleepInProgress true
PowerButtonTimestamp 0


9
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-19T15:17:42.474810500Z

EventRecordID 6609

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0


10
- System

- Provider

[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}

EventID 41

Version 2

Level 1

Task 63

Opcode 0

Keywords 0x8000000000000002

- TimeCreated

[ SystemTime] 2012-01-13T06:27:44.257625900Z

EventRecordID 3254

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel System

Computer Desktop

- Security

[ UserID] S-1-5-18


- EventData

BugcheckCode 244
BugcheckParameter1 0x3
BugcheckParameter2 0xfffffa800abd7b30
BugcheckParameter3 0xfffffa800abd7e10
BugcheckParameter4 0xfffff800033d08b0
SleepInProgress false
PowerButtonTimestamp 0

Edited by mclimbin, 27 January 2012 - 11:31 AM.

[happyrock]

nope...click on the general tab...highlight the text then press ctrl+c...open note pad then either right click and paste or ctrl+v

if you have a bunch of exactly the same just post one and note the dates and the time for all the rest that are the same

[mclimbin]

Is this the data you need? To copy it I had to select the event in the list, then go to the right side menu and select event properties. Then I had an option to copy the data.


Event id=29
The event logging service encountered a fatal error (res=1455) when applying settings to the Application channel. The service is shutting down since this channel is vital to its operation.

Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 1/26/2012 7:53:28 AM
Event ID: 29
Task Category: None
Level: Critical
Keywords: Service availability
User: LOCAL SERVICE
Computer: Desktop
Description:
The event logging service encountered a fatal error (res=1455) when applying settings to the Application channel. The service is shutting down since this channel is vital to its operation.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" />
<EventID>29</EventID>
<Version>0</Version>
<Level>1</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000020000</Keywords>
<TimeCreated SystemTime="2012-01-26T15:53:28.712829400Z" />
<EventRecordID>11172</EventRecordID>
<Correlation />
<Execution ProcessID="292" ThreadID="372" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-19" />
</System>
<UserData>
<PrimaryChannelFatalError xmlns:auto-ns3="http://schemas.micro...2004/08/events" xmlns="http://manifests.mic...dows/eventlog">
<Error Code="1455">
</Error>
<ChannelPath>Application</ChannelPath>
</PrimaryChannelFatalError>
</UserData>
</Event>

event id=10111
The device Apple iPhone (location Port_#0002.Hub_#0002) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 1/23/2012 7:24:42 PM
Event ID: 10111
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Desktop
Description:
The device Apple iPhone (location Port_#0002.Hub_#0002) is offline due to a user-mode driver crash. Windows will attempt to restart the device 5 more times. Please contact the device manufacturer for more information about this problem.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2E35AAEB-857F-4BEB-A418-2E6C0E54D988}" />
<EventID>10111</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-01-24T03:24:42.243628100Z" />
<EventRecordID>9471</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="1212" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UmdfDeviceOffline lifetime="{77C0DF7D-185D-4147-AF81-37CBFE181362}" xmlns:auto-ns2="http://schemas.micro...2004/08/events" xmlns="http://www.microsoft...serMode/Event">
<DeviceInfo>
<FriendlyName>Apple iPhone</FriendlyName>
<Location>Port_#0002.Hub_#0002</Location>
<InstanceId>USB\VID_05AC&amp;PID_12A0&amp;MI_00\0</InstanceId>
</DeviceInfo>
<RestartCount>5</RestartCount>
</UmdfDeviceOffline>
</UserData>
</Event>


event id=10110
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Log Name: System
Source: Microsoft-Windows-DriverFrameworks-UserMode
Date: 1/23/2012 7:24:42 PM
Event ID: 10110
Task Category: User-mode Driver problems.
Level: Critical
Keywords:
User: SYSTEM
Computer: Desktop
Description:
A problem has occurred with one or more user-mode drivers and the hosting process has been terminated. This may temporarily interrupt your ability to access the devices.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-DriverFrameworks-UserMode" Guid="{2E35AAEB-857F-4BEB-A418-2E6C0E54D988}" />
<EventID>10110</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-01-24T03:24:42.243628100Z" />
<EventRecordID>9470</EventRecordID>
<Correlation />
<Execution ProcessID="516" ThreadID="1212" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<UMDFHostProblem lifetime="{77C0DF7D-185D-4147-AF81-37CBFE181362}" xmlns:auto-ns2="http://schemas.micro...2004/08/events" xmlns="http://www.microsoft...serMode/Event">
<Problem code="8" detectedBy="2">
</Problem>
<ExitCode>0</ExitCode>
<Operation code="3221226356">
<Message>0</Message>
<Status>4294967295</Status>
</Operation>
</UMDFHostProblem>
</UserData>
</Event>


12 of these:
event id 41
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 1/11/2012 11:32:47 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Desktop
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-01-11T19:32:47.972413100Z" />
<EventRecordID>1420</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

[happyrock]

actually the highlighted part is what I'm after...
can you uninstall your iphone stuff while we test...you can put it back later

[mclimbin]

That information is under the event id number for each event.

I'll uninstall iTunes, hopefully that should take care of it.

[happyrock]

yes its there but I have to wade thru this crap to get to it


Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-01-11T19:32:47.972413100Z" />
<EventRecordID>1420</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Desktop</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>