New
#1
Sudden restarts every month or so (L1C62x64.sys)
I seem to have sudden restarts, without any notice, every month or so...
WINDBG tells me it's "L1C62x64.sys".
In system managment I get 2 errors.
1. Kernel- Microsoft Security Client OOBE stopped. error 0xC000000D
EVENT ID: 3
2. Bug check- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>14</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2014-11-19T14:52:05.719616200Z" />
<EventRecordID>40</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="168" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>MaoR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="SessionName">Microsoft Security Client OOBE</Data>
<Data Name="FileName">C:\ProgramData\Microsoft\Microsoft Security Client\Support\EppOobe.etl</Data>
<Data Name="ErrorCode">3221225485</Data>
<Data Name="LoggingMode">5</Data>
</EventData>
</Event>
" 0x000000d1 (0x0000000000000000, 0x0000000000000002, 0x0000000000000000, 0xfffff88002dccc9b). Dump file saved in: C:\Windows\MEMORY.DMP. Report: 111914-13806-01."
EVENT ID: 1001
And A critical error:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-11-19T14:52:18.000000000Z" />
<EventRecordID>12594</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>MaoR-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000d1 (0x0000000000000000, 0x0000000000000002, 0x0000000000000000, 0xfffff88002dccc9b)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">111914-13806-01</Data>
</EventData>
</Event>
ID: 41, Task: 63
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2014-11-19T14:52:02.459210500Z" />
<EventRecordID>12586</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>MaoR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="BugcheckCode">209</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x2</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0xfffff88002dccc9b</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>
I added 2 files from each date I've had this.
Thank you.