locked
Win 7 x64 Ultimate blue screening RRS feed

  • Question

  • Hey all,

    I've seen previous posts very similar to my own but none of the solutions have worked for me. I'm hoping someone could shed some light on the event logs below, or even just point me in the direction of where I can figure them out myself.

    Basically the issue is that my Win 7 machine is blue screening, seemingly at random. I have often gone to the PC after leaving it on for a few hours to see a message that it has recovered from a unexpected shutdown. I have found the error log as close to the time of the last restart and pasted it below:

    The previous system shutdown at 03:54:33 on ‎21/‎04/‎2012 was unexpected.

    - System
    - Provider
    [ Name] EventLog
    - EventID 6008
    [ Qualifiers] 32768
    Level 2
    Task 0
    Keywords 0x80000000000000
    - TimeCreated
    [ SystemTime] 2012-04-21T02:56:48.000000000Z
    EventRecordID 46714
    Channel System
    Computer Slim-GamingPC
    Security
    - EventData
    03:54:33
    ‎21/‎04/‎2012
    17990
    DC07040006001500030036002100F300DC07040006001500020036002100F300600900003C000000010000006009000000000000B004000001000000FEFFFFFF

    Binary data:

    In Words

    0000: 000407DC 00150006 00360003 00F30021
    0008: 000407DC 00150006 00360002 00F30021
    0010: 00000960 0000003C 00000001 00000960
    0018: 00000000 000004B0 00000001 FFFFFFFE

    In Bytes

    0000: DC 07 04 00 06 00 15 00 Ü.......
    0008: 03 00 36 00 21 00 F3 00 ..6.!.ó.
    0010: DC 07 04 00 06 00 15 00 Ü.......
    0018: 02 00 36 00 21 00 F3 00 ..6.!.ó.
    0020: 60 09 00 00 3C 00 00 00 `...<...
    0028: 01 00 00 00 60 09 00 00 ....`...
    0030: 00 00 00 00 B0 04 00 00 ....°...
    0038: 01 00 00 00 FE FF FF FF ....þÿÿÿ

    As stated in the title it says the shutdown took place at 03:54:33 on ‎21/‎04/‎2012, but when I check the event logs from that time the only entries I see are:

    The Volume Shadow Copy service entered the running state.

    The Microsoft Software Shadow Copy Provider service entered the running state.

    The Windows Time service entered the running state.

    (I can include the full error log here if it will help)

    I can't seem to find any information about whether it is a hardware issue or software based. I put this machine together myself so it could well be a hardware issue :P

    Any help would be greatly appreciated, even if someone were just to share their methods so I could investigate more myself.

    Thanks,

    Buncorleone

    Saturday, April 21, 2012 11:20 AM

Answers

  • Hello,

    Start by that:

    • Update all possible drivers
    • Uninstall all unused programs
    • Run chkdsk /r /f and sfc /scannow
    • Perform a clean boot: http://support.microsoft.com/kb/929135
    • Disable temporary all security softwares you have
    • Run memtest86+ to check your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support for assistance

    For hardware diagnosis, you can contact your manufacturer Technical Support for assistance.

    If BSODs persists, please use Microsoft Skydrive to upload dump files (c:\windows\minidump). Once done, post a link here.

    You can also contact Microsoft CSS for assistance.


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer


    • Marked as answer by Arthur Xie Friday, May 4, 2012 7:45 AM
    Wednesday, April 25, 2012 8:22 AM

All replies

  • Hi,

    Event ID 6008 is more related to the CPU and motherboard, please perform hardware troubleshooting first.

    If it is possible, please upload *.dump files for further analyzation.
    The log file will be %systemroot%\Minidump which is normally C:\windows\Minidump

    If the files don't exist then setup your system to record them.
    1.Go to Start and type in sysdm.cpl and press Enter
    2.Click on the Advanced tab
    3.Click on the Startup and Recovery Settings button
    4.Ensure that Automatically restart is unchecked
    5.Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box
    6.Ensure that the Small Dump Directory is listed as %systemroot%\Minidump << where your .dmp files can be found later

    How to read the small memory dump files that Windows creates for debugging
    http://support.microsoft.com/kb/315263/en-us

    windows 7 rc error event id 6008
    http://social.technet.microsoft.com/Forums/en-US/w7itproperf/thread/c2ed92ae-bd0c-474d-9071-cb6b031a5f41/


    Hope that helps.


    Ivan-Liu

    TechNet Community Support

    Monday, April 23, 2012 2:43 AM
  • Thanks for the info Maurice. I've downloaded VEW and noticed a few of the events from recently were to do with Actual Multiple Monitors, which is a program I used for having 2 separate taskbars on 2 monitors. I've removed that now so I'll see if anything else happens.

    I'm on a quick break from work so don't have time to investigate too much, but I'll report back with my findings. Thanks again :)

    Monday, April 23, 2012 5:47 PM
  • Thanks for the info, I thought it was a hardware issue because of the way my machine was behaving just before a crash (I witnessed one just after posting, seemed to stall when logging off during a routine shut down and wouldn't complete the shut down process, I waited and it then blue screened and restarted). I have since cleaned the vent covering the cooling fans which were quiet dusty and the machine (when working) seems to be responding a lot better. As I said before this is a custom build so I may not have enough cooling for the components. I'll investigate a bit more on the software side first before investing in more fans.
    Monday, April 23, 2012 5:49 PM
  • Hello,

    Start by that:

    • Update all possible drivers
    • Uninstall all unused programs
    • Run chkdsk /r /f and sfc /scannow
    • Perform a clean boot: http://support.microsoft.com/kb/929135
    • Disable temporary all security softwares you have
    • Run memtest86+ to check your RAM. If an error was detected then replace the faulty RAM or contact your manufacturer Technical Support for assistance

    For hardware diagnosis, you can contact your manufacturer Technical Support for assistance.

    If BSODs persists, please use Microsoft Skydrive to upload dump files (c:\windows\minidump). Once done, post a link here.

    You can also contact Microsoft CSS for assistance.


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer


    • Marked as answer by Arthur Xie Friday, May 4, 2012 7:45 AM
    Wednesday, April 25, 2012 8:22 AM