If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
|
Thread Tools | Rate Thread | Display Modes |
#1
|
|||
|
|||
Unexpected overnight restarts
Would be grateful for some expert help on the following please.
I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK |
Ads |
#2
|
|||
|
|||
Unexpected overnight restarts
Terry Pinnell wrote:
Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I was away from the PC later this morning (31st August) and found there had been another restart at about 11:25. Instead of Event Viewer, this time I downloaded and used Nirsoft's FullEventLogView. Here's a screenshot showing the entries around that time. (And, in case it's relevant, details of one of the many Event 504 entries.) https://www.dropbox.com/s/v5ivxu868k...st-1.jpg?raw=1 Hoping someone can help me isolate and fix the cause of these unwanted restarts please. Studying Event logs (with whatever tool) quickly leaves me wondering how my PC can be working apparently perfectly, and despair at ever finding the needle in the haystack. Terry, East Grinstead, UK |
#3
|
|||
|
|||
Unexpected overnight restarts
Terry Pinnell wrote:
Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I was away from the PC later this morning (31st August) and found there had been another restart at about 11:25. Instead of Event Viewer, this time I downloaded and used Nirsoft's FullEventLogView. Here's a screenshot showing the entries around that time. (And, in case it's relevant, details of one of the many Event 504 entries.) https://www.dropbox.com/s/v5ivxu868k...st-1.jpg?raw=1 Hoping someone can help me isolate and fix the cause of these unwanted restarts please. Studying Event logs (with whatever tool) quickly leaves me wondering how my PC can be working apparently perfectly, and despair at ever finding the needle in the haystack. Terry, East Grinstead, UK This vast number of errors sure looks hardware related. How do things look in Device Manager? Any yellow shrieks? Notably around storage devices? Ed |
#4
|
|||
|
|||
Unexpected overnight restarts
Ed Cryer wrote:
Terry Pinnell wrote: Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I was away from the PC later this morning (31st August) and found there had been another restart at about 11:25. Instead of Event Viewer, this time I downloaded and used Nirsoft's FullEventLogView. Here's a screenshot showing the entries around that time. (And, in case it's relevant, details of one of the many Event 504 entries.) https://www.dropbox.com/s/v5ivxu868k...st-1.jpg?raw=1 Hoping someone can help me isolate and fix the cause of these unwanted restarts please. Studying Event logs (with whatever tool) quickly leaves me wondering how my PC can be working apparently perfectly, and despair at ever finding the needle in the haystack. Terry, East Grinstead, UK This vast number of errors sure looks hardware related. How do things look in Device Manager? Any yellow shrieks? Notably around storage devices? Ed This error is often associated with SD cards; and recent updates/upgrades to Win10. If you have any such plugged in all the time, try without them, see what happens. Ed |
#5
|
|||
|
|||
Unexpected overnight restarts
In article
Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 I'd run sfc /scannow from a command window with Admin rights. If that finds errors, I would run it up to 3 times consecutively to clear errors. I would manually run Windows Update to confirm that you are current. If that doesn't clear things up, ignore Event Viewer warnings and concentrate on the errors. Google each error. Solve one at a time. Nathan |
#6
|
|||
|
|||
Unexpected overnight restarts
Ed Cryer wrote:
Terry Pinnell wrote: Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I was away from the PC later this morning (31st August) and found there had been another restart at about 11:25. Instead of Event Viewer, this time I downloaded and used Nirsoft's FullEventLogView. Here's a screenshot showing the entries around that time. (And, in case it's relevant, details of one of the many Event 504 entries.) https://www.dropbox.com/s/v5ivxu868k...st-1.jpg?raw=1 Hoping someone can help me isolate and fix the cause of these unwanted restarts please. Studying Event logs (with whatever tool) quickly leaves me wondering how my PC can be working apparently perfectly, and despair at ever finding the needle in the haystack. Terry, East Grinstead, UK This vast number of errors sure looks hardware related. How do things look in Device Manager? Any yellow shrieks? Notably around storage devices? Ed None, and all apps seem to be working OK. Terry, East Grinstead, UK |
#7
|
|||
|
|||
Unexpected overnight restarts
Ed Cryer wrote:
Ed Cryer wrote: Terry Pinnell wrote: Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I was away from the PC later this morning (31st August) and found there had been another restart at about 11:25. Instead of Event Viewer, this time I downloaded and used Nirsoft's FullEventLogView. Here's a screenshot showing the entries around that time. (And, in case it's relevant, details of one of the many Event 504 entries.) https://www.dropbox.com/s/v5ivxu868k...st-1.jpg?raw=1 Hoping someone can help me isolate and fix the cause of these unwanted restarts please. Studying Event logs (with whatever tool) quickly leaves me wondering how my PC can be working apparently perfectly, and despair at ever finding the needle in the haystack. Terry, East Grinstead, UK This vast number of errors sure looks hardware related. How do things look in Device Manager? Any yellow shrieks? Notably around storage devices? Ed This error is often associated with SD cards; and recent updates/upgrades to Win10. If you have any such plugged in all the time, try without them, see what happens. Ed No SD cards. Terry, East Grinstead, UK |
#8
|
|||
|
|||
Unexpected overnight restarts
Nomen Nescio wrote:
In article Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 I'd run sfc /scannow from a command window with Admin rights. If that finds errors, I would run it up to 3 times consecutively to clear errors. Thanks, but that was about the first thing I did, with no errors. I would manually run Windows Update to confirm that you are current. That too, updating the two entries I described. If that doesn't clear things up, ignore Event Viewer warnings Happy to do that... and concentrate on the errors. Google each error. Solve one at a time. Assuming you mean focus exclusively on the Event Viewer 'Errors' then that's what I need help with. Most of their descriptions mean nothing to me. Nathan |
#9
|
|||
|
|||
Unexpected overnight restarts
On Fri, 31 Aug 2018 09:22:45 +0100, Terry Pinnell
wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I had a similar problem months ago. Originally I had installed Windows10 over Windows7 and this caused an accumulation of problems such as you describe, especially the random restarts. I had to start again with the latest Windows10 and then transfer all programs etc across. All works faster now without trouble. |
#10
|
|||
|
|||
Unexpected overnight restarts
Terry Pinnell wrote:
Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I remain unsure whether WU is implicated. For example, I found this in Event Viewer: https://www.dropbox.com/s/jjjftpiqzr...st-4.jpg?raw=1 Or is that a side issue, and Update History is simply unreliable or incomplete? Here also is the latest status of Event Viewer as of this morning 1st Sep: https://www.dropbox.com/s/qlcrbyj89d...st-3.jpg?raw=1 On a more positive note, the Reliability History recommended in tenforums.com in response to my similar enquiry was informative. It first gave me this summary: https://www.dropbox.com/s/l37iuizas6...ty-1.jpg?raw=1 I then examined the three most recent Critical Events. I'll paste almost in full in case any of the obscure stuff means anything to others: 1. Problem: Hardware error Date: 29/08/18 20:32 A problem with your hardware caused Windows to stop working correctly. Problem Event Name: LiveKernelEvent Code: 190 Parameter 1: 1 Parameter 2: ffff9399c00c5620 Parameter 3: ffff9399c6206840 Parameter 4: ffff9399c609f260 OS version: 10_0_17134 Service Pack: 0_0 Product: 256_1 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 ==================== 2. Problem: Stopped working Date: 30/08/18 13:46 and again 31/08/18 14:28 Faulting Application Path: C:\Program Files\Send To Toys\SendToQuickLaunch.exe Problem Event Name: APPCRASH Application Name: SendToQuickLaunch.exe Application Version: 0.0.0.0 Application Timestamp: 55e1eb01 Fault Module Name: StackHash_88ff Fault Module Version: 10.0.17134.228 Fault Module Timestamp: 6d15b6d7 Exception Code: c0000374 Exception Offset: PCH_86_FROM_ntdll+0x000000000009AA04 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 Additional Information 1: 88ff Additional Information 2: 88ff76520c0e89f22f3e0085b01f1a71 Additional Information 3: abdc Additional Information 4: abdcd6ba0c3c6a5697b31c759de987d1 Extra information about the problem Bucket ID: be13e25c7a8a1cc0b492019c4a01765c (1482248998126450268) ==================== But how to find WHAT hardware? And anyway, from studying the Event Viewer the PC did not restart at 20:32 on 29th Aug, but probably at 21:47. Terry, East Grinstead, UK |
#11
|
|||
|
|||
Unexpected overnight restarts
Terry Pinnell wrote:
Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I remain unsure whether WU is implicated. For example, I found this in Event Viewer: https://www.dropbox.com/s/jjjftpiqzr...st-4.jpg?raw=1 Or is that a side issue, and Update History is simply unreliable or incomplete? Here also is the latest status of Event Viewer as of this morning 1st Sep: https://www.dropbox.com/s/qlcrbyj89d...st-3.jpg?raw=1 On a more positive note, the Reliability History recommended in tenforums.com in response to my similar enquiry was informative. It first gave me this summary: https://www.dropbox.com/s/l37iuizas6...ty-1.jpg?raw=1 I then examined the three most recent Critical Events. I'll paste almost in full in case any of the obscure stuff means anything to others: 1. Problem: Hardware error Date: 29/08/18 20:32 A problem with your hardware caused Windows to stop working correctly. Problem Event Name: LiveKernelEvent Code: 190 Parameter 1: 1 Parameter 2: ffff9399c00c5620 Parameter 3: ffff9399c6206840 Parameter 4: ffff9399c609f260 OS version: 10_0_17134 Service Pack: 0_0 Product: 256_1 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 ==================== 2. Problem: Stopped working Date: 30/08/18 13:46 and again 31/08/18 14:28 Faulting Application Path: C:\Program Files\Send To Toys\SendToQuickLaunch.exe Problem Event Name: APPCRASH Application Name: SendToQuickLaunch.exe Application Version: 0.0.0.0 Application Timestamp: 55e1eb01 Fault Module Name: StackHash_88ff Fault Module Version: 10.0.17134.228 Fault Module Timestamp: 6d15b6d7 Exception Code: c0000374 Exception Offset: PCH_86_FROM_ntdll+0x000000000009AA04 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 Additional Information 1: 88ff Additional Information 2: 88ff76520c0e89f22f3e0085b01f1a71 Additional Information 3: abdc Additional Information 4: abdcd6ba0c3c6a5697b31c759de987d1 Extra information about the problem Bucket ID: be13e25c7a8a1cc0b492019c4a01765c (1482248998126450268) ==================== But how to find WHAT hardware? And anyway, from studying the Event Viewer the PC did not restart at 20:32 on 29th Aug, but probably at 21:47. Terry, East Grinstead, UK OK, apparently there is a control where Windows Update can update "Apps". But I swear I've seen a 100MB download come in, with no notation whatsoever in Windows Update history. And it was Apps (because I sniffed in the SoftwareDistribution using ProcMon while it was happening). If the language one is looping say, you could turn off the Windows Update setting for Apps. https://support.microsoft.com/en-ca/...ic-app-updates ...open the Store. Select the account menu (next to the search box), then select Settings. Under App updates, set "Update apps automatically" to No. But that's purely as a test, to see if you can tame that one. ******* "Hardware error livekernelevent at 17:05. - when this happens it also creates a dmp file in c:\windows/LiveKernelEventReports and all those files are named sys32.k-"date of the day in numbers" " In that example, it isn't directly traceable to a video problem. It's possible a driver could tip something over, but the wrong file gets blamed for it. Nirsoft BlueScreenView might read the .dmp file. A problem I have with utilities like that, is they insist on looking in specific folders. It's harder to get a program that just analyzes a file you feed it directly. There is "dumpchk.exe", but it's usually a pain to get a copy of it. (Might be part of debug tools on some SDK ISO perhaps.) Windbg would likely work, but who keeps that loaded ? Paul |
#12
|
|||
|
|||
Unexpected overnight restarts
Paul wrote:
Terry Pinnell wrote: Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I remain unsure whether WU is implicated. For example, I found this in Event Viewer: https://www.dropbox.com/s/jjjftpiqzr...st-4.jpg?raw=1 Or is that a side issue, and Update History is simply unreliable or incomplete? Here also is the latest status of Event Viewer as of this morning 1st Sep: https://www.dropbox.com/s/qlcrbyj89d...st-3.jpg?raw=1 On a more positive note, the Reliability History recommended in tenforums.com in response to my similar enquiry was informative. It first gave me this summary: https://www.dropbox.com/s/l37iuizas6...ty-1.jpg?raw=1 I then examined the three most recent Critical Events. I'll paste almost in full in case any of the obscure stuff means anything to others: 1. Problem: Hardware error Date: 29/08/18 20:32 A problem with your hardware caused Windows to stop working correctly. Problem Event Name: LiveKernelEvent Code: 190 Parameter 1: 1 Parameter 2: ffff9399c00c5620 Parameter 3: ffff9399c6206840 Parameter 4: ffff9399c609f260 OS version: 10_0_17134 Service Pack: 0_0 Product: 256_1 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 ==================== 2. Problem: Stopped working Date: 30/08/18 13:46 and again 31/08/18 14:28 Faulting Application Path: C:\Program Files\Send To Toys\SendToQuickLaunch.exe Problem Event Name: APPCRASH Application Name: SendToQuickLaunch.exe Application Version: 0.0.0.0 Application Timestamp: 55e1eb01 Fault Module Name: StackHash_88ff Fault Module Version: 10.0.17134.228 Fault Module Timestamp: 6d15b6d7 Exception Code: c0000374 Exception Offset: PCH_86_FROM_ntdll+0x000000000009AA04 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 Additional Information 1: 88ff Additional Information 2: 88ff76520c0e89f22f3e0085b01f1a71 Additional Information 3: abdc Additional Information 4: abdcd6ba0c3c6a5697b31c759de987d1 Extra information about the problem Bucket ID: be13e25c7a8a1cc0b492019c4a01765c (1482248998126450268) ==================== But how to find WHAT hardware? And anyway, from studying the Event Viewer the PC did not restart at 20:32 on 29th Aug, but probably at 21:47. Terry, East Grinstead, UK OK, apparently there is a control where Windows Update can update "Apps". But I swear I've seen a 100MB download come in, with no notation whatsoever in Windows Update history. And it was Apps (because I sniffed in the SoftwareDistribution using ProcMon while it was happening). If the language one is looping say, you could turn off the Windows Update setting for Apps. https://support.microsoft.com/en-ca/...ic-app-updates ...open the Store. Select the account menu (next to the search box), then select Settings. Under App updates, set "Update apps automatically" to No. But that's purely as a test, to see if you can tame that one. ******* "Hardware error livekernelevent at 17:05. - when this happens it also creates a dmp file in c:\windows/LiveKernelEventReports and all those files are named sys32.k-"date of the day in numbers" " In that example, it isn't directly traceable to a video problem. It's possible a driver could tip something over, but the wrong file gets blamed for it. Nirsoft BlueScreenView might read the .dmp file. A problem I have with utilities like that, is they insist on looking in specific folders. It's harder to get a program that just analyzes a file you feed it directly. There is "dumpchk.exe", but it's usually a pain to get a copy of it. (Might be part of debug tools on some SDK ISO perhaps.) Windbg would likely work, but who keeps that loaded ? Paul I used BlueScreenView on the most recent DMP file C:\windows\LiveKernelReports\USBHUB3\USBHUB3-20180711-0406.dmp but what is its display of 176 files supposed to tell me? https://www.dropbox.com/s/uvyv6pxghz...MP-1.jpg?raw=1 Also, I see that that date is not one of the recent ones under discussion, 29th August to 1st Sep. Terry, East Grinstead, UK |
#13
|
|||
|
|||
Unexpected overnight restarts
Terry Pinnell wrote:
Paul wrote: Terry Pinnell wrote: Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I remain unsure whether WU is implicated. For example, I found this in Event Viewer: https://www.dropbox.com/s/jjjftpiqzr...st-4.jpg?raw=1 Or is that a side issue, and Update History is simply unreliable or incomplete? Here also is the latest status of Event Viewer as of this morning 1st Sep: https://www.dropbox.com/s/qlcrbyj89d...st-3.jpg?raw=1 On a more positive note, the Reliability History recommended in tenforums.com in response to my similar enquiry was informative. It first gave me this summary: https://www.dropbox.com/s/l37iuizas6...ty-1.jpg?raw=1 I then examined the three most recent Critical Events. I'll paste almost in full in case any of the obscure stuff means anything to others: 1. Problem: Hardware error Date: 29/08/18 20:32 A problem with your hardware caused Windows to stop working correctly. Problem Event Name: LiveKernelEvent Code: 190 Parameter 1: 1 Parameter 2: ffff9399c00c5620 Parameter 3: ffff9399c6206840 Parameter 4: ffff9399c609f260 OS version: 10_0_17134 Service Pack: 0_0 Product: 256_1 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 ==================== 2. Problem: Stopped working Date: 30/08/18 13:46 and again 31/08/18 14:28 Faulting Application Path: C:\Program Files\Send To Toys\SendToQuickLaunch.exe Problem Event Name: APPCRASH Application Name: SendToQuickLaunch.exe Application Version: 0.0.0.0 Application Timestamp: 55e1eb01 Fault Module Name: StackHash_88ff Fault Module Version: 10.0.17134.228 Fault Module Timestamp: 6d15b6d7 Exception Code: c0000374 Exception Offset: PCH_86_FROM_ntdll+0x000000000009AA04 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 Additional Information 1: 88ff Additional Information 2: 88ff76520c0e89f22f3e0085b01f1a71 Additional Information 3: abdc Additional Information 4: abdcd6ba0c3c6a5697b31c759de987d1 Extra information about the problem Bucket ID: be13e25c7a8a1cc0b492019c4a01765c (1482248998126450268) ==================== But how to find WHAT hardware? And anyway, from studying the Event Viewer the PC did not restart at 20:32 on 29th Aug, but probably at 21:47. Terry, East Grinstead, UK OK, apparently there is a control where Windows Update can update "Apps". But I swear I've seen a 100MB download come in, with no notation whatsoever in Windows Update history. And it was Apps (because I sniffed in the SoftwareDistribution using ProcMon while it was happening). If the language one is looping say, you could turn off the Windows Update setting for Apps. https://support.microsoft.com/en-ca/...ic-app-updates ...open the Store. Select the account menu (next to the search box), then select Settings. Under App updates, set "Update apps automatically" to No. But that's purely as a test, to see if you can tame that one. ******* "Hardware error livekernelevent at 17:05. - when this happens it also creates a dmp file in c:\windows/LiveKernelEventReports and all those files are named sys32.k-"date of the day in numbers" " In that example, it isn't directly traceable to a video problem. It's possible a driver could tip something over, but the wrong file gets blamed for it. Nirsoft BlueScreenView might read the .dmp file. A problem I have with utilities like that, is they insist on looking in specific folders. It's harder to get a program that just analyzes a file you feed it directly. There is "dumpchk.exe", but it's usually a pain to get a copy of it. (Might be part of debug tools on some SDK ISO perhaps.) Windbg would likely work, but who keeps that loaded ? Paul I used BlueScreenView on the most recent DMP file C:\windows\LiveKernelReports\USBHUB3\USBHUB3-20180711-0406.dmp but what is its display of 176 files supposed to tell me? https://www.dropbox.com/s/uvyv6pxghz...MP-1.jpg?raw=1 Also, I see that that date is not one of the recent ones under discussion, 29th August to 1st Sep. Terry, East Grinstead, UK According to this, BlueScreenView needs DumpChk in order to dump the details. https://answers.microsoft.com/en-us/...9-d147810eb64d This looks like a fairly recent SDK. https://download.microsoft.com/downl...load-installer winsdksetup.exe When you run that on Win10, use just the one tick box, to minimize the size of download. https://s33.postimg.cc/txvoru6xr/debugging_tools.gif I didn't download and check, but the dumpchk.exe executable should end up in the Windows 10 kits folder. You can try plopping a copy of that, in the BlueScreenView folder if you want, or, run it separately from the command line. Paul |
#14
|
|||
|
|||
Unexpected overnight restarts
Paul wrote:
Terry Pinnell wrote: Paul wrote: Terry Pinnell wrote: Terry Pinnell wrote: Would be grateful for some expert help on the following please. I run my PC 24/7, typically starting work around 7-8 am. For the last two nights it has restarted inexplicably in the early hours. IOW, not due to a WU. My first aim is to discover what caused it. In Event Viewer terms I need to discover which of the daunting number of Warnings and Errors triggered the restart. Many of them apparently occur regularly so logically it seems I can rule those out. For starters here are a selection of screenshots I'm hoping might offer some clue. https://www.dropbox.com/s/0u7r9sthrz...ly-1.jpg?raw=1 https://www.dropbox.com/s/yrctcfl83i...ly-2.jpg?raw=1 https://www.dropbox.com/s/h308e1p2ir...ly-3.jpg?raw=1 https://www.dropbox.com/s/vzee1l8h20...2064.jpg?raw=1 https://www.dropbox.com/s/fb7wnz9ntc...0001.jpg?raw=1 Terry, East Grinstead, UK I remain unsure whether WU is implicated. For example, I found this in Event Viewer: https://www.dropbox.com/s/jjjftpiqzr...st-4.jpg?raw=1 Or is that a side issue, and Update History is simply unreliable or incomplete? Here also is the latest status of Event Viewer as of this morning 1st Sep: https://www.dropbox.com/s/qlcrbyj89d...st-3.jpg?raw=1 On a more positive note, the Reliability History recommended in tenforums.com in response to my similar enquiry was informative. It first gave me this summary: https://www.dropbox.com/s/l37iuizas6...ty-1.jpg?raw=1 I then examined the three most recent Critical Events. I'll paste almost in full in case any of the obscure stuff means anything to others: 1. Problem: Hardware error Date: 29/08/18 20:32 A problem with your hardware caused Windows to stop working correctly. Problem Event Name: LiveKernelEvent Code: 190 Parameter 1: 1 Parameter 2: ffff9399c00c5620 Parameter 3: ffff9399c6206840 Parameter 4: ffff9399c609f260 OS version: 10_0_17134 Service Pack: 0_0 Product: 256_1 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 ==================== 2. Problem: Stopped working Date: 30/08/18 13:46 and again 31/08/18 14:28 Faulting Application Path: C:\Program Files\Send To Toys\SendToQuickLaunch.exe Problem Event Name: APPCRASH Application Name: SendToQuickLaunch.exe Application Version: 0.0.0.0 Application Timestamp: 55e1eb01 Fault Module Name: StackHash_88ff Fault Module Version: 10.0.17134.228 Fault Module Timestamp: 6d15b6d7 Exception Code: c0000374 Exception Offset: PCH_86_FROM_ntdll+0x000000000009AA04 OS Version: 10.0.17134.2.0.0.256.48 Locale ID: 2057 Additional Information 1: 88ff Additional Information 2: 88ff76520c0e89f22f3e0085b01f1a71 Additional Information 3: abdc Additional Information 4: abdcd6ba0c3c6a5697b31c759de987d1 Extra information about the problem Bucket ID: be13e25c7a8a1cc0b492019c4a01765c (1482248998126450268) ==================== But how to find WHAT hardware? And anyway, from studying the Event Viewer the PC did not restart at 20:32 on 29th Aug, but probably at 21:47. Terry, East Grinstead, UK OK, apparently there is a control where Windows Update can update "Apps". But I swear I've seen a 100MB download come in, with no notation whatsoever in Windows Update history. And it was Apps (because I sniffed in the SoftwareDistribution using ProcMon while it was happening). If the language one is looping say, you could turn off the Windows Update setting for Apps. https://support.microsoft.com/en-ca/...ic-app-updates ...open the Store. Select the account menu (next to the search box), then select Settings. Under App updates, set "Update apps automatically" to No. But that's purely as a test, to see if you can tame that one. ******* "Hardware error livekernelevent at 17:05. - when this happens it also creates a dmp file in c:\windows/LiveKernelEventReports and all those files are named sys32.k-"date of the day in numbers" " In that example, it isn't directly traceable to a video problem. It's possible a driver could tip something over, but the wrong file gets blamed for it. Nirsoft BlueScreenView might read the .dmp file. A problem I have with utilities like that, is they insist on looking in specific folders. It's harder to get a program that just analyzes a file you feed it directly. There is "dumpchk.exe", but it's usually a pain to get a copy of it. (Might be part of debug tools on some SDK ISO perhaps.) Windbg would likely work, but who keeps that loaded ? Paul I used BlueScreenView on the most recent DMP file C:\windows\LiveKernelReports\USBHUB3\USBHUB3-20180711-0406.dmp but what is its display of 176 files supposed to tell me? https://www.dropbox.com/s/uvyv6pxghz...MP-1.jpg?raw=1 Also, I see that that date is not one of the recent ones under discussion, 29th August to 1st Sep. Terry, East Grinstead, UK According to this, BlueScreenView needs DumpChk in order to dump the details. I'm not sure what you mean by 'dump the details'? As mentioned, I read an irrelevant DMP file, in the absence of anything relevant to my recent restarts, with the results I showed in my screenshot. What would DumpChk add to the scenario? https://answers.microsoft.com/en-us/...9-d147810eb64d That gives "DumpCHK is included with the Windows Debugging Tools. Download and Install Debugging Tools for Windows http://www.microsoft.com/whdc/devtools/debugging/default.mspx" which gives "We are sorry, the page you requested cannot be found." and "Check this thread for information on using BlueScreenView, MyEventViewer, and other methods to troubleshoot BlueScreens - top 3 methods (+1 other). http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/c675b7b8-795f-474d-a1c4-6b77b3fcd990" that gives "Invalid URL" BlueScreenView also has an Option to read using DumpChk.exe though you need to point it to where you have DumpChk.exe installed." This looks like a fairly recent SDK. https://download.microsoft.com/downl...load-installer Thanks for patiently staying on the case but I'm not sure this is going to be a productive line of enquiry because, as I understand it, these DMP files are created after BSODs? Happily I don't appear to have had any, at least for a long time. Did my detailed Event Viewer screenshot off re any clues. Any thoughts on why, with 'Automatic restart' switched OFF, my last unwanted restart took place anyway? So far today (Sunday 2 September 2018, 14:28) I've not had another since then. Terry, East Grinstead, UK winsdksetup.exe When you run that on Win10, use just the one tick box, to minimize the size of download. https://s33.postimg.cc/txvoru6xr/debugging_tools.gif I didn't download and check, but the dumpchk.exe executable should end up in the Windows 10 kits folder. You can try plopping a copy of that, in the BlueScreenView folder if you want, or, run it separately from the command line. Paul |
#15
|
|||
|
|||
Unexpected overnight restarts
On 02/09/2018 14:29, Terry Pinnell wrote:
According to this, BlueScreenView needs DumpChk in order to dump the details. I'm not sure what you mean by 'dump the details'? As mentioned, I read an irrelevant DMP file, in the absence of anything relevant to my recent restarts, with the results I showed in my screenshot. What would DumpChk add to the scenario? https://answers.microsoft.com/en-us/...9-d147810eb64d That gives "DumpCHK is included with the Windows Debugging Tools. Download and Install Debugging Tools for Windows http://www.microsoft.com/whdc/devtools/debugging/default.mspx" which gives "We are sorry, the page you requested cannot be found." and "Check this thread for information on using BlueScreenView, MyEventViewer, and other methods to troubleshoot BlueScreens - top 3 methods (+1 other). http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/c675b7b8-795f-474d-a1c4-6b77b3fcd990" that gives "Invalid URL" BlueScreenView also has an Option to read using DumpChk.exe though you need to point it to where you have DumpChk.exe installed." This looks like a fairly recent SDK. https://download.microsoft.com/downl...load-installer Sorry, don't see OP Also, Windows SDK - https://www.remkoweijnen.nl/blog/201...rect-download/ -- Regards wasbit |
|
Thread Tools | |
Display Modes | Rate This Thread |
|
|