[Faithsa]

Prior thread in the malware dept:  http://www.geekstogo...view=getnewpost

 

Apparently Malware is not the problem.  I am hoping it isn't the hard drive again as we replaced it last year because it kept shutting down.

It definitely doesn't like browsers and apparently hates video.  I am hoping someone can help?

 

Thanks,

Sabrina

[Advertisements]

Faithsa,

 

Seems as though this error showed up twice in you running WhoCrashed   https://www.google.c...LURE&gws_rd=ssl

And could be due to a bad driver for hardware, since custom built hard for me to look at each component you have to know which one or can be this for sure, read through some articles of Googled error, most of erros have numbers after it, so that makes the difference on what can be too.

 

Check Event Viewer, To open Event Viewer by clicking the Start button , clicking Control Panel, clicking System and Security, clicking Administrative Tools, and then double-clicking Event Viewer.‌  If you're prompted for an administrator password or confirmation, type the password or provide confirmation. On left side Event Viewer open Windows logs clicking arrow, check each Application,system and setup, in middle of window see errors by symbols, any red critical ones , below that in general and detail area give you error codes better view maximize window, can list critical codes here for others to check. Check also Custom Views Administrative Events for any critical errors.

 

Otherwise any guarantee (warranty) on custom built, how old, can one who built it for you take a look ? Unless you built it.

 

See who else here can have more of a clue to what might be also, make sure some main hardware, like Video cards, sound cards have updated drivers. Also read possible PSU Power supply.

Any external devices hooked up, try unplugging all from PC, Hard drives, printers, scanners see if issue persists too. Try listing all hardware here if you can.

Edited by jds63, 30 January 2015 - 03:25 PM.

[jds63]

Faithsa,

 

Seems as though this error showed up twice in you running WhoCrashed   https://www.google.c...LURE&gws_rd=ssl

And could be due to a bad driver for hardware, since custom built hard for me to look at each component you have to know which one or can be this for sure, read through some articles of Googled error, most of erros have numbers after it, so that makes the difference on what can be too.

 

Check Event Viewer, To open Event Viewer by clicking the Start button , clicking Control Panel, clicking System and Security, clicking Administrative Tools, and then double-clicking Event Viewer.‌  If you're prompted for an administrator password or confirmation, type the password or provide confirmation. On left side Event Viewer open Windows logs clicking arrow, check each Application,system and setup, in middle of window see errors by symbols, any red critical ones , below that in general and detail area give you error codes better view maximize window, can list critical codes here for others to check. Check also Custom Views Administrative Events for any critical errors.

 

Otherwise any guarantee (warranty) on custom built, how old, can one who built it for you take a look ? Unless you built it.

 

See who else here can have more of a clue to what might be also, make sure some main hardware, like Video cards, sound cards have updated drivers. Also read possible PSU Power supply.

Any external devices hooked up, try unplugging all from PC, Hard drives, printers, scanners see if issue persists too. Try listing all hardware here if you can.

Edited by jds63, 30 January 2015 - 03:25 PM.

[Faithsa]

I don't seem to have System and Security only System and I don't see Administrative tools there??

The only things connected should be the monitor, keyboard, wireless mouse, speakers, internet and a Canon printer/scanner.  None of those are recent.

[jds63]

Should have Administrator tools in your control panel, this tutorial can show you how in better detail  http://www.sevenforu...indows-7-a.html

 

What i meant, this maybe caused by driver and those external devices use drivers, so by temporarily removing say printer or making sure have recent driver software for them.

When it reboots, does it shut down you said then restart or just reboot with no power loss ?

[Faithsa]

There are several things with that list that have either a yellow triangle or a red exclamation point.  I have no idea what to do with them.  The pc shuts down unexpectedly and then reboots to the screen giving you the option to select start up mode.

[jds63]

When PC reboots unexpectedly is it telling you to do anything, repair PC or just getting list of startup mode options like these  http://windows.micro...e#1TC=windows-7

 

Be more concerned with red exclamation points in Event Viewer as these should be ones show you errors, if copy them from detailed area post them here.

[jds63]

Some other things come to mind on this as possible issues.

 

Any failing hardware component in your computer could cause your computer to unexpectedly generate an error or reboot without warning. If you have recently attempted to add a new hardware device, remove that device to make sure it is not causing your issues.

 

New drivers can also cause this issue, if you have recently performed any hardware driver updates you may want to try an earlier version of the drivers. Any yellow exclamation points in Device Manager ?

 

It's also possible that the memory (RAM) is bad in the computer.
 

Computers today are designed to turn off or automatically reboot if the computer, processor, or other device in your computer gets to hot. Have you heard any abnormal noises coming from your computer recently such as a high squealing this could indicate a fan may be failing in your computer. Do you regularly clean inside, say with canned air, too much dust on fans and components can cause overheating also.

 

Something with windows 7 but does not solve whatever is causing the issue   http://support.micro...b/2621246/en-us
 

Edited by jds63, 02 February 2015 - 08:49 PM.

[Faithsa]

I get the 'windows has shut down unexpectedly please choose start up method' (or something similar)  I get the option of safe mode, normal start up or one other.

 

Fan works fine.  This is an oversized case so lots of airflow and not much dust.  No extra noises.  The last time I was having random shut down issues, someone had me run a scan that showed my hard drive had I want to say a smart fail or something?  We ended up having to replace it.  This was last summer.  the only thing recent is that I got an ipad.  All other accessories have been here from the get go.

 

I just turned off the auto shutdown/reboot.  But I definitely want to figure out what is causing it.  I'm really hoping it's not my hard drive again.

 

Error 2/2/2015 2:24:01 PM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 2/2/2015 12:52:44 PM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/30/2015 3:20:06 PM WMI 10 None

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

 

Warning 1/30/2015 3:19:52 PM L 0 None

The description for Event ID 0 from source L cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

 

If the event originated on another computer, the display information had to be saved with the event.

 

The following information was included with the event: 

 

Ä

 

 

 

Error 1/28/2015 12:31:30 AM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/27/2015 4:35:52 PM WMI 10 None

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

 

Warning 1/27/2015 4:35:46 PM L 0 None

The description for Event ID 0 from source L cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

 

If the event originated on another computer, the display information had to be saved with the event.

 

The following information was included with the event: 

 

Ä

 

 

Error 1/27/2015 12:32:13 AM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/26/2015 12:31:59 AM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/25/2015 1:55:18 PM WMI 10 None

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

 

Warning 1/25/2015 1:54:54 PM L 0 None

The description for Event ID 0 from source L cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

 

If the event originated on another computer, the display information had to be saved with the event.

 

The following information was included with the event: 

 

Ä

 

 

Error 1/24/2015 12:31:14 AM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/21/2015 7:16:54 PM SideBySide 80 None

Activation context generation failed for "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/21/2015 12:31:18 AM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

Error 1/20/2015 12:31:39 AM SideBySide 80 None

Activation context generation failed for "c:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

 

THE ABOVE SEEM TO REPEAT A LOT

 

Error 1/12/2015 4:09:23 PM VSS 8194 None

Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.

. This is often caused by incorrect security settings in either the writer or requestor process. 

 

Operation:

   Gathering Writer Data

 

Context:

   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

   Writer Name: System Writer

   Writer Instance ID: {4e7e9c07-e1b3-49a4-ab4a-069539aa891a}

 

Error 1/9/2015 11:01:59 PM Application Hang 1002 (101)

The program LeapFrogConnect.exe version 6.0.19.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

 Process ID: 380

 Start Time: 01d02c614d522714

 Termination Time: 63

 Application Path: C:\Program Files (x86)\LeapFrog\LeapFrog Connect\LeapFrogConnect.exe

 Report Id: 

 

Warning 1/2/2015 12:41:28 PM Search 3036 Gatherer

The content source <csc://{S-1-5-21-2175456564-3303761008-1419212204-1003}/> cannot be accessed.

 

Context:  Application, SystemIndex Catalog

 

Details:

(HRESULT : 0x80004005) (0x80004005)

 

 

Warning 1/1/2015 12:58:23 PM Search 3036 Gatherer

The content source <csc://{S-1-5-21-2175456564-3303761008-1419212204-1003}/> cannot be accessed.

 

Context:  Application, SystemIndex Catalog

 

Details:

(HRESULT : 0x80004005) (0x80004005)

 

 

Error 12/30/2014 2:02:57 PM Application Error 1000 (100)

Faulting application name: chrome.exe, version: 39.0.2171.95, time stamp: 0x548243f3

Faulting module name: RPCRT4.dll, version: 6.1.7601.18532, time stamp: 0x53c3352a

Exception code: 0xc0020043

Fault offset: 0x0005d111

Faulting process id: 0xf5c

Faulting application start time: 0x01d0246311f0c238

Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Faulting module path: C:\Windows\syswow64\RPCRT4.dll

Report Id: 77309abe-9056-11e4-9600-001cc03ca643

 

^THIS ONE REPEATS TOO ^

 

Error 1/30/2015 3:19:10 PM EventLog 6008 None

The previous system shutdown at 3:19:24 PM on ‎1/‎30/‎2015 was unexpected.

 

Error 1/27/2015 4:41:08 PM cdrom 7 None

The device, \Device\CdRom0, has a bad block.

 

Error 1/27/2015 4:35:18 PM EventLog 6008 None

The previous system shutdown at 4:33:14 PM on ‎1/‎27/‎2015 was unexpected.

 

Error 1/25/2015 1:54:52 PM Service Control Manager 7000 None

The Garmin Core Update Service service failed to start due to the following error: 

The service did not respond to the start or control request in a timely fashion.

 

Error 1/25/2015 1:54:52 PM Service Control Manager 7009 None

A timeout was reached (30000 milliseconds) while waiting for the Garmin Core Update Service service to connect.

 

Critical 1/25/2015 1:54:12 PM Kernel-Power 41 (63)

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

 

Error 1/25/2015 1:54:16 PM EventLog 6008 None

The previous system shutdown at 1:52:42 PM on ‎1/‎25/‎2015 was unexpected.

 

Error 1/20/2015 8:17:03 PM atapi 11 None

The driver detected a controller error on \Device\Ide\IdePort2.

 

Warning 1/19/2015 2:51:40 PM Kernel-PnP 219 (212)

The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_CANON&PROD_MP560_SERIES&REV_0104#7&16C0721E&0&24BF73&0#.

 

Error 1/19/2015 2:51:17 PM EventLog 6008 None

The previous system shutdown at 2:48:54 PM on ‎1/‎19/‎2015 was unexpected.

 

Warning 1/19/2015 2:06:13 PM Kernel-PnP 219 (212)

The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_CANON&PROD_MP560_SERIES&REV_0104#7&16C0721E&0&24BF73&0#.

 

Critical 1/16/2015 10:09:05 PM Kernel-Power 41 (63)+

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly..

 

Error 1/16/2015 10:09:11 PM EventLog 6008 None

The previous system shutdown at 10:09:05 PM on ‎1/‎16/‎2015 was unexpected.

 

Critical 1/16/2015 2:37:35 PM Kernel-Power 41 (63)

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

 

Error 1/16/2015 2:37:38 PM EventLog 6008 None

The previous system shutdown at 2:36:03 PM on ‎1/‎16/‎2015 was unexpected.

 

Critical 1/16/2015 2:34:03 PM Kernel-Power 41 (63)

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

 

THAT'S NOT EVERYTHING BUT IT GIVES YOU A GOOD IDEA I HOPE.

[jds63]

Nothing i see really jumps out at me say they are big issues, i see where you kept getting shutdowns in the event viewer files. Possible may have a driver or software conflict, corrupt  and missing files too.

Another issue as mentioned could be bad RAM.

 

Believing might be the hard drive again, maybe highly unlikely so soon. I would first try to run a DISM and a System file checker, right click the command prompt from start menu, select "Run as Administrator"

Copy and past this exactly into command prompt                    dism /online /cleanup-image /restorehealth                                 Do not close the command prompt and copy and paste this                sfc /scannow

 

Let that finish, see if tells you it found any violations in system file checker (SFC), if it does let you know if it repairs them or not or does not find any violations which is good.

 

Also if you want to run a chkdsk because you feel the Hard drive might be failing again at same way with Run as Administrator command prompt copy paste this         chkdsk c: /f /r

This could take up to 2 hrs. to complete, once it does can use this way to provide you with a text file of results which can post here

 

1. Press the Windows + R keys to open the Run dialog, type powershell.exe, and press Enter.

2. In PowerShell, copy and paste the command below, and press Enter.

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt

3. You will now have a CHKDSKResults.txt file created on your desktop that is the log file of your chkdsk scan results from Event Viewer.
 

 

One word about dust in case, can get to places you might not see as much, but enough to ruin a fan or other components, does not matter how large a case is for being adequately ventilated. Wire management, placement of fans properly for proper airflow makes a difference, good fans also and where pc is located, enough airflow around it, not on a carpet, especially high shagged ones. At least once a month, use canned air held upright, make sure with fans hold blade with something non metallic, say lollipop stick when spraying them.

 

Here is another step can take if understand, second paragraph in this post with microsoft, of trying to narrow down the possible culprit of issues of shutdowns. Involves use of MSCONFIG

http://answers.micro...36-124ed33f6f2e

Edited by jds63, 03 February 2015 - 07:22 PM.

[Faithsa]

Please elaborate on "right click on the command prompt".  

[Faithsa]

I was watching a video on fb and it shutdown and rebooted normally, then as I tried to restore my last chrome session, it shut down and rebooted again with the safe start options.

[jds63]

Please elaborate on "right click on the command prompt".  

Open Start menu in Windows 7 should be able to find Command Prompt, then right click it with your mouse, select option "Run as Administrator" should be there in context menu when you right click.

 

A lot of errors in your post from Event Viewer from ESET online scanner, seems be conflictions with this and AMD and Windows 7,suggest to temporarily remove it for now. Do you have another Anti-Virus ?

Chrome showed an error with execution file, try reinstalling Chrome.

 

I would first run those items in command prompt i suggested, plus if you feel drive is bad, do chkdsk. When first put Operating system on new drive should run chkdsk, but also with Hard disk drive good to run periodically.

 

Again this could well be corrupted, missing files and or conflicts with a software drivers for hardware or other software on PC.

[Plastic Nev]

Hi, a quicker way to get to the command prompt rather than searching through all the programs, is click the start orb, then type cmd.exe in the search box, you will then see a small black oblong icon with cmd, or cmd.exe at the top of whatever list opens, you must then right click on that entry to choose "Run as administrator".

 

Nev.

[jds63]

Hi, a quicker way to get to the command prompt rather than searching through all the programs, is click the start orb, then type cmd.exe in the search box, you will then see a small black oblong icon with cmd, or cmd.exe at the top of whatever list opens, you must then right click on that entry to choose "Run as administrator".

 

Nev.

Thanks Nev. trying to recall the other way, been quite awhile since Windows 7 for me.

[Faithsa]

Thank you that alternate method was much easier.  When I copy paste the command to I put space in between the first command and the second or do I hit return??