Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

PC freezes and have to reboot


  • Please log in to reply

#16
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Really don't want to sound stupid but when i click on the link for the event viewer it opens the event window where i can check the boxes etc. I cannot save it to desktop as it doesn't upload?
  • 0

Advertisements


#17
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,367 posts
  • MVP
The .mof files were recently broken by a windows update. Nothing to worry about. Waiting on VEW now.
  • 0

#18
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,367 posts
  • MVP
We are not trying to upload the event viewer directly. All we want to do is clear the events to make it easier to tell what is happening during a boot. VEW will create the logs that you can copy and paste.
  • 0

#19
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Okay, really do appreciate your help
  • 0

#20
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Vino's Event Viewer v01c run on Windows Vista in English
Report run at 16/09/2013 19:20:56

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 16/09/2013 18:15:45
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service terminated with the following error: Unspecified error

Log: 'System' Date/Time: 16/09/2013 18:15:44
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service hung on starting.

Log: 'System' Date/Time: 16/09/2013 17:48:56
Type: Error Category: 0
Event: 7 Source: disk
The device, \Device\Harddisk0\DR0, has a bad block.

Log: 'System' Date/Time: 16/09/2013 17:48:52
Type: Error Category: 0
Event: 7 Source: disk
The device, \Device\Harddisk0\DR0, has a bad block.

Log: 'System' Date/Time: 16/09/2013 17:38:03
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service terminated with the following error: Unspecified error

Log: 'System' Date/Time: 16/09/2013 17:38:02
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service hung on starting.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 16/09/2013 18:12:01
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.
  • 0

#21
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Vino's Event Viewer v01c run on Windows Vista in English
Report run at 16/09/2013 19:22:44

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 16/09/2013 18:14:41
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Log: 'Application' Date/Time: 16/09/2013 17:37:55
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 16/09/2013 18:11:53
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 15 user registry handles leaked from \Registry\User\S-1-5-21-2173474633-418608521-1901038038-1003:
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\TrustedPeople
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\My
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\CA
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Policies\Microsoft\SystemCertificates
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Policies\Microsoft\SystemCertificates
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Policies\Microsoft\SystemCertificates
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Policies\Microsoft\SystemCertificates
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\Disallowed
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\Root
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003\Software\Microsoft\SystemCertificates\trust


Log: 'Application' Date/Time: 16/09/2013 17:35:12
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-2173474633-418608521-1901038038-1003:
Process 780 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003
  • 0

#22
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,367 posts
  • MVP

Log: 'System' Date/Time: 16/09/2013 17:48:52
Type: Error Category: 0
Event: 7 Source: disk
The device, \Device\Harddisk0\DR0, has a bad block.


Pretty serious alarm. I would try running the disk check again. It obviously didn't work if it finished in seconds. If it still doesn't work then try booting into Safe Mode with command prompt

(Reboot and when you see the maker's logo, hear a beep or it talks about F8, start tapping the F8 key slowly. Keep tapping until the Safe Mode Menu appears and choose Safe Mode with Command Prompt. Login with your usual login.)

and run

CHKDSK /R





Log: 'System' Date/Time: 16/09/2013 17:38:03
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service terminated with the following error: Unspecified error

Log: 'System' Date/Time: 16/09/2013 17:38:02
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service hung on starting.


This one is easy. Just go into Services and turn off the service. You don't need it.

In the Search box type services.msc and hit Enter. Services should open up. Find HP CUE DeviceDiscovery Service and right click on it and select Properties. Change the Startup Type: to Disabled. OK.


Log: 'Application' Date/Time: 16/09/2013 18:11:53
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 15 user registry handles leaked from \Registry\User\S-1-5-21-2173474633-418608521-1901038038-1003:
Process 2936 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2173474633-418608521-1901038038-1003
...


Windows Live is a disgrace to Microsoft. If you can live without it then I would uninstall it. If not, uninstall it and download the latest version and see if it is any better.
  • 0

#23
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Managed to get CHKDSK to work. Disabled HP CUE and in the process of deleting windows live.

Anything else i should do?
  • 0

#24
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,367 posts
  • MVP
Clear the logs again and reboot then run VEW as we did before. Let's see if we still have errors.
  • 0

#25
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Vino's Event Viewer v01c run on Windows Vista in English
Report run at 17/09/2013 06:10:58

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  • 0

Advertisements


#26
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Vino's Event Viewer v01c run on Windows Vista in English
Report run at 17/09/2013 06:17:44

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 17/09/2013 05:17:14
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Edited by p71p, 16 September 2013 - 11:18 PM.

  • 0

#27
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,367 posts
  • MVP
For the last error, try the fixit at http://support.micro...b;en-US;2545227
  • 0

#28
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
Tried the fix it but apparently it doesn't apply to my operating system. I think this error was for windows 7?
  • 0

#29
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,367 posts
  • MVP
You probably have to do the manual version or you can just ignore it since it doesn't really hurt anything.
  • 0

#30
p71p

p71p

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 122 posts
After all of the above my pc started to run faster and smoother until today.

When i powered it up this morning i suddenly got multi coloured lines on the screen and then it froze up. No movement from the mouse so i had to power down with the main power button. I left it for a while and then attempted to power up again. I was given the option of safe mode but i started windows normally. After a few minutes of being on desktop it did the same so i powered off again.

The next time i tried it i did it in safe mode, still no luck. I then swapped monitors to see if it was a failing monitor but i still got the frozen screen with coloured line.

Finally i opened the pc and made sure everything was seated right. I appears to be all okay and currently working but i am wondering what this could be? Is my pc failing, are there any tests i can carry out whilst it is currently running?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP