BSODs are usually a bad hard drive.
----- Original Message -----
From: "Andrew Webber" <[email protected]>
To: <[email protected]>
Sent: Friday, May 28, 2010 10:10 PM
Subject: Re: [Thinkpad] X300: BSOD
The lockup hasn't happened for a while, but I've learned that doesn't
mean it's been fixed through a BIOS or other update, it's just waiting
to pounce.
I went through all the Errors for the last week in the "Administrative
Events" section of Event Viewer (Windows 7) and none of them sounds
like some earth-shattering problem. Am I using this tool correctly? Is
there some other way I should be using Event Viewer to troubleshoot
this? There are some other errors further in the past but I thought
this was long enough already.
For each of the Errors in the last 7 days, I chose
(right-click)|Help|Event Log Online Help on This Event. The results:
[Access Connections errors]
Event ID: 59; Event Source: SideBySide;
No results were found for your query.
[IP lease denied, don't know if this would cause a lockup, nor why
it's happening]
Event ID 1002 — DHCP Client Address Conflicts
Updated: January 8, 2009
Applies To: Windows Server 2008 R2
Dynamic Host Configuration Protocol (DHCP) operates on a lease renewal
basis. During the leasing process, IP address conflicts can occur as
leases are renewed and expired. Client lease requests might be denied
by the server for invalid (out of pool) or duplicate IP addresses.
Multiple IP address conflict messages can indicate that your lease
period, your scope, or both, need adjustment in your DHCP server
configuration.
[MSE errors]
Event ID: 3; Event Source: Microsoft-Windows-Kernel-EventTracing;
No results were found for your query.
[Audit events errors]
Event ID 1101 — Security Channel Publishing
Updated: December 16, 2008
Applies To: Windows Server 2008 R2
As events are delivered to the Event Log service to be saved in the
Security log, they pass through the operating system (OS) kernel. If
the kernel does not have enough resources to deliver the events to the
Event Log service (which can happen if the Event Log service has to
handle a large number of events), then the events are lost. This can
compromise the security of the system and ability of administrators,
support personnel, and automated utilities to troubleshoot and
diagnose problems.
[Reboot without clean shutdown errors]
Event ID: 41; Event Source: Microsoft-Windows-Kernel-Power;
No results were found for your query.
[Previous shutdown was unexpected]
Event ID: 6008; Event Source: EventLog;
No results were found for your query.
[Reboot from bugcheck]
Event ID: 1001; Event Source:
Microsoft-Windows-WER-SystemErrorReporting;
No results were found for your query.
FWIW, here are the Errors for the last 7 days (there's no more message
after this, so don't feel a obligation to scroll through them :).
Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax.
Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax.
Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax.
Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax.
The IP address lease 192.168.2.10 for the Network Card with network
address 0x00215C85A79D has been denied by the DHCP server 0.0.0.0 (The
DHCP Server sent a DHCPNACK message).
Session "Microsoft Security Essentials OOBE" stopped due to the
following error: 0xC000000D
Audit events have been dropped by the transport. 0
Session "Microsoft Security Essentials OOBE" stopped due to the
following error: 0xC000000D
CRITICAL: The system has rebooted without cleanly shutting down first.
This error could be caused if the system stopped responding, crashed,
or lost power unexpectedly.
The previous system shutdown at 3:25:01 AM on ?5/?22/?2010 was
unexpected. [note that there's no event for 3:25AM =aw]
Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax.
Audit events have been dropped by the transport. 0
Session "Microsoft Security Essentials OOBE" stopped due to the
following error: 0xC000000D
CRITICAL: The system has rebooted without cleanly shutting down first.
This error could be caused if the system stopped responding, crashed,
or lost power unexpectedly.
The computer has rebooted from a bugcheck. The bugcheck was:
0x000000c2 (0x00000007, 0x00001097, 0x08230008, 0x89a467b8). A dump
was saved in: C:\Windows\MEMORY.DMP. Report Id: 052110-13946-01.
The previous system shutdown at 5:00:38 PM on ?5/?21/?2010 was
unexpected.
Audit events have been dropped by the transport. 0
Session "Microsoft Security Essentials OOBE" stopped due to the
following error: 0xC000000D
CRITICAL: The system has rebooted without cleanly shutting down first.
This error could be caused if the system stopped responding, crashed,
or lost power unexpectedly.
The previous system shutdown at 8:38:06 AM on ?5/?21/?2010 was
unexpected.
Audit events have been dropped by the transport. 0
Session "Microsoft Security Essentials OOBE" stopped due to the
following error: 0xC000000D
The system has rebooted without cleanly shutting down first. This
error could be caused if the system stopped responding, crashed, or
lost power unexpectedly.
The computer has rebooted from a bugcheck. The bugcheck was:
0x00000019 (0x00000022, 0x8c9b2000, 0x00000000, 0x00000000). A dump
was saved in: C:\Windows\MEMORY.DMP. Report Id: 052110-13618-01.
The previous system shutdown at 2:22:11 AM on ?5/?21/?2010 was
unexpected.
Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax.
Thanks!
--
Andrew mailto:[email protected]
Tuesday, April 20, 2010, 11:34:41 AM, you wrote:
Thanks Dale,
Windows 7 actually, though it seems to be the same setting. I've
changed it, though when I google "ae147db8" I get no useful results
(yesterday just a furniture code, today my original post also).
I noticed that tab says to do a kernel dump to
"%SystemRoot%\MEMORY.DMP". I can't find that file, though I suspect it
wouldn't be a lot of use to me.
Looking at the Event Viewer, "Administrative Events" looks like a
place with useful information. There are 1545 events since Oct/09. The
two most recent are:
"Activation context generation failed for "C:\Program
Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or
policy file "C:\Program Files\Lenovo\Access
Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax."
and
"Session "Microsoft Security Essentials OOBE" stopped due to the
following error: 0xC000000D"
There are others, but what do I do with this information now that I've
found it?
Thanks!
_______________________________________________
Thinkpad mailing list
[email protected]
http://stderr.org/cgi-bin/mailman/listinfo/thinkpad
_______________________________________________
Thinkpad mailing list
[email protected]
http://stderr.org/cgi-bin/mailman/listinfo/thinkpad
