New
#1
Random crashes with pattern in event log
Hello Everyone,
Can I get some help in relation to the above from you guys? It seems I do experience certain crashes for which I cannot find any possible explanation. There are few similar threads out there where similar events in the event log occur near the crash, but I haven't been able to resolve my issue after their examining. First of all my PC specs:
Win 7 Prof X64
AMD Phenom II x4 955BE
GA-790FXTA-UD5 F2
Corsair Dominator 4 x 2GB CL7 CMD8GX3M4A1333C7
MSI N460GTX Cyclone 678 D5 OC/Sapphire Radeon HD 5870 Vapor-X 2GB
Cooler Master Silent Pro M700 700W 80+
+3.3V - 28 A
+5V - 25 A
+12V1 - 50 A
-12V - 0,5 A
+5VSB - 2,5 A
None of the components has been overclocked. All the drivers are up to date. The GPU is a stock overclock, and the crashes occur both with Nvidia and ATI. (I have Nvidia now as my HD 5870 has been RMA'd). RAM was checked by Memtest - OK ( although I might do few more continuous runs later on as per suggestions in the different forums).
The crash relates to Kernel Power errors. I have only two dumps from the said crashes (they both relate, I think, to the graphics - see attached zip's).
Attachment 115031
Attachment 115032
The remaining crashes for which I'm going to put the event log excerpts, ended up with hard resets and no crash dump file.
If you have a look at the event log below, you'll see that there are two events before the kernel power crash that have sth to do with Microsoft Filter Manager. Both are exactly the same, and even all the values are exactly the same. There is one more thing that I've just noticed; other event, just before those two filter manager events is very odd; it says that "the operating system has been launched at the (time given plus couple of digits and letters). This particular event always comes BEFORE the filter manager events and approx 8-10 seconds BEFORE!! the crash.. Isn't it weird? The crashes happen only during gaming in 3D mode, never in 2D mode. Please note this event is not included in the piece below.
The following is the excerpt from the event log in relation to the filter manager and crash events (all other crashes are preceded with EXACTLY the same filter manager events - even the alpha numeric strings are the same) Please note I'm Polish, the OS is Polish version as well, and I'll do my best to translate all the details highlighted in red into English (if you need to have more details translated please let me know:
Nazwa dziennika:System
Źr๓dło: Microsoft-Windows-Kernel-Power
Data: 2010-11-05 13:39:39
Identyfikator zdarzenia:41
Kategoria zadania: (63)
Poziom: Krytyczne
Słowa kluczowe: (2)
Użytkownik: SYSTEM
Komputer: Luki-Komputer
Opis:
System został uruchomiony ponownie bez uprzedniego czystego zamknięcia. Przyczyną tego błędu może być fakt, że system przestał odpowiadać, uległ awarii lub nastąpiła nieoczekiwana utrata zasilania (The system has been booted again without a previous clean shutdown. The reason for this error might be the fact that the system stopped responding, malfunctioned or there was a sudden power loss).
Kod XML zdarzenia:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2010-11-05T13:39:39.487213900Z" />
<EventRecordID>20131</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Luki-Komputer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">59</Data>
<Data Name="BugcheckParameter1">0xc0000005</Data>
<Data Name="BugcheckParameter2">0xfffff880049a1c8e</Data>
<Data Name="BugcheckParameter3">0xfffff88008e318c0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>
Nazwa dziennika:System
Źr๓dło: Microsoft-Windows-FilterManager
Data: 2010-11-05 13:39:39
Identyfikator zdarzenia:6
Kategoria zadania:Brak
Poziom: Informacje
Słowa kluczowe:
Użytkownik: SYSTEM
Komputer: Luki-Komputer
Opis:
Filtr systemu plik๓w MpFilter (6.1, ?2010?-?03?-?20T05:58:08.000000000Z) został pomyślnie załadowany i zarejestrował się w menedżerze filtr๓w ((The filter for files system MpFilter has been loaded and it registered itself in the filter manager).
Kod XML zdarzenia:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2010-11-05T13:39:39.440413900Z" />
<EventRecordID>20126</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Luki-Komputer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x0</Data>
<Data Name="DeviceVersionMajor">6</Data>
<Data Name="DeviceVersionMinor">1</Data>
<Data Name="DeviceNameLength">8</Data>
<Data Name="DeviceName">MpFilter</Data>
<Data Name="DeviceTime">2010-03-20T05:58:08.000000000Z</Data>
</EventData>
</Event>
Nazwa dziennika:System
Źr๓dło: Microsoft-Windows-FilterManager
Data: 2010-11-05 13:39:31
Identyfikator zdarzenia:6
Kategoria zadania:Brak
Poziom: Informacje
Słowa kluczowe:
Użytkownik: SYSTEM
Komputer: Luki-Komputer
Opis:
Filtr systemu plik๓w FileInfo (6.1, ?2009?-?07?-?13T23:34:25.000000000Z został pomyślnie załadowany i zarejestrował się w menedżerze filtr๓w. (The filter for files system FileInfo has been loaded and it registered itself in the filter manager))
Kod XML zdarzenia:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2010-11-05T13:39:31.702800400Z" />
<EventRecordID>20125</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Luki-Komputer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x0</Data>
<Data Name="DeviceVersionMajor">6</Data>
<Data Name="DeviceVersionMinor">1</Data>
<Data Name="DeviceNameLength">8</Data>
<Data Name="DeviceName">FileInfo</Data>
<Data Name="DeviceTime">2009-07-13T23:34:25.000000000Z</Data>
</EventData>
</Event>
Please HELP!!
Thank you.