Immediate restart w/ dump files but no BSOD

[benbrockn]

Just finished the 2-hour Prime95 test. All cores on the CPU passed (see attached).

The highest temperature reached was 41C

 

[Boozad]

Good news that the CPU passed the Prime95 test, although I'll take that temp reading with a pinch of salt.

Have there been any more crashes recently?

 

[benbrockn]

Good news that the CPU passed the Prime95 test, although I'll take that temp reading with a pinch of salt.

Have there been any more crashes recently?

Well, I want to say no, but I was just playing a NES game through Steam, and it restarted. I had already watched a movie and played about an hour of games. So maybe I've had it up for about 2.5 hours? No BSOD, same error as the others (viewed in BlueScreenView) See attached. 02 April minidump. My computer didn't restart during any of the stress tests, so I thought it was fixed.

 

[benbrockn]

And it just restarted again, the computer was just idling... not doing anything!!

 

[benbrockn]

most recent BlueScreenView report attached

 

[Golden]

Bizarre - the latest .dmp still points to the CPU/hardware.

Can you confirm that ALL Gigabyte utility software is uninstalled? Are any componenets overclocked?

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 124, {0, fffffa8007c748f8, 0, 0}

Probably caused by : AuthenticAMD

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa8007c748f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.

Debugging Details:
------------------


BUGCHECK_STR:  0x124_AuthenticAMD

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre

STACK_TEXT:  
fffff880`0319b5b0 fffff800`034d6cb9 : fffffa80`07c748d0 fffffa80`06d2fb50 fffffa80`00000007 00000000`00000000 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`0319bad0 fffff800`033b7157 : fffffa80`07c748d0 fffff800`034312d8 fffffa80`06d2fb50 00000000`00000000 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`0319bb00 fffff800`0331e505 : fffff800`03492d00 00000000`00000001 fffffa80`07c8a820 fffffa80`06d2fb50 : nt!WheapProcessWorkQueueItem+0x57
fffff880`0319bb40 fffff800`03293a95 : fffff880`00c5ae00 fffff800`0331e4e0 fffffa80`06d2fb00 00000000`00000000 : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`0319bb70 fffff800`03528b8a : 00000000`00000000 fffffa80`06d2fb50 00000000`00000080 fffffa80`06cec040 : nt!ExpWorkerThread+0x111
fffff880`0319bc00 fffff800`0327b8e6 : fffff880`009b3180 fffffa80`06d2fb50 fffff880`009be040 13120b02`02010000 : nt!PspSystemThreadStartup+0x5a
fffff880`0319bc40 00000000`00000000 : fffff880`0319c000 fffff880`03196000 fffff880`03b4b730 00000000`00000000 : nt!KxStartSystemThread+0x16

 

[benbrockn]

Bizarre - the latest .dmp still points to the CPU/hardware.

Can you confirm that ALL Gigabyte utility software is uninstalled? Are any componenets overclocked?

All Gigabyte software is uninstalled, I'm running stock everything. I chatted with Microsoft Tech Support and asked what this meant (as read in BlueScreenView): "Crash Address - ntoskrnl.exe+4af21" The guy said it was malware. This is a new custom build, so I highly doubt malware is the culprit. Just in case, I'm running Comodo Rescue Disk on it right now for a full system scan, I'll upload results when it's done.

 

[Golden]

"Crash Address - ntoskrnl.exe+4af21" is just a standard output when Windows crashes, its not indicative of anything - those MS tech support jockeys don't know anything about BSOD's

I didn't look at what you had installed, but just to check....do you perhaps have a beta of Chrome browser installed?

 

[benbrockn]

As soon as CRD is done (which may take a while), I'll upload a screenshot of all installed programs. There is only one thing I think might be leftover from GB, that's VIA Platform Device Manager... I didn't delete that, but maybe I should.

The only browser I have on there is Firefox which is up-to-date.

 

[Golden]

Can you run MSINFO32, then save the .nfo file and upload it here please?

 

[benbrockn]

Comodo Rescue Disk froze at 85%, so I'll do that later. Here is the .nfo information along with a screenshot of installed programs in a ZIP.

 

[Golden]

Event[5884]:
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2015-03-30T10:05:41.736
  Event ID: 10114
  Task: Startup of the UMDF reflector
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: 350D
  Description: 
The UMDF reflector was unable to complete startup because the WUDFPf service was not found.  This service may be started later during boot, at which point Windows will attempt to start the device again.

Event[5885]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2015-03-30T10:05:41.736
  Event ID: 219
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: 350D
  Description: 
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_KINGSTON&PROD_DATATRAVELER_2.0&REV_1.00#0014780D8CF15A8718010298&0#.

Please create a System Restore point, then uninstall the VIA stuff, then reboot and monitor further. Unplug all USB external drives when rebooting, also disconnect the USB Port Hub for now please.

 

[benbrockn]

-- I created a new restore point
-- I deleted the VIA package thing
-- I also deleted ASUS GPUTweak Streaming (not sure what that is, but I know I won't use streaming anything)
-- I ran Comodo Cleaning Essentials (including checking RAM/bootsector/hidden&system files/etc) - no malware reported
-- From now on, I won't use the USB hub.

Apparently the immediate restart thing happened the day I built the computer, I must not have noticed it since I was installing everything. I don't remember it ever happening though, but the dump files confirm that it happened on 14 March (build date) but not again until 22 March (might have been around the time I started using the USB hub).

 

[benbrockn]

So... it's not the USB hub, played a game and it restarted again. Is there any tool I can use that will tell me why it restarts? I hate having a $700 computer that works most of the time and then randomly restarts!

 

[Boozad]

Run the tool and upload the new logs, I'll take a look at the event logs.

 

[benbrockn]

Run the tool and upload the new logs, I'll take a look at the event logs.

Which tool?

Also, I'm looking at my BIOS and I have some options I've never heard of before. Maybe on of them is the culprit? I've tried everything else I can think of (Also, If you know what any of them mean can you let me know?)


-- IGX Config (In the BIOS_2 picture, it has UMA - What's that?)
-- Load Line Control
-- AMD C1E Support
-- AMD C6 Support
-- AMD K8 Cool&Quiet
-- AMD APM Master Mode
-- CPU Core Control (Can I just make it manual, I want to use all cores anyway)
-- HPET Support (Can I disable this? I read that it mostly helps sync audio/video when streaming, but I don't care about streaming)
-- Hardware Thermal Control (Should I keep it enabled or disable it?)

 

[Boozad]

Which tool?

Sorry, this one. I forgot we weren't in the BSOD section.

Download


​

I'll have to find your motherboard manual and have a look through what's what. Leave it with me and I'll get back to you. Run that tool in the meantime and post up the resulting .zip file so we can have a look through your system.

 

[Boozad]

• UMA on the Internal Graphics Mode allocates memory from the system memory to the onboard graphics controller. Considering you're using a dedicated GPU I'd set that to Disabled.
• Leave Load Line Control as Auto.
• Leave C1E as Disabled.
• K8 Cool n Quiet allows the AMD Cool n Quiet driver to dynamically adjust the CPU clock and VID to reduce heat output and power consumption. May be worth testing with this function Disabled.
• Leave APM (Application Power Management) Master Mode as is.
• Core Control, I'd leave it as it is, but that's your call. You know what it does.
• HPET Support is the High Precision Event Timer for Windows 7. Your call whether you disable it, you can always re-enable it I suppose.
• Hardware Thermal Control reduces the core voltage and and ratio if your CPU is overheating. If your temperatures are good this shouldn't be a problem.

Source

 

[benbrockn]

In BIOS I only changed two settings:

-- Internal Graphics Mode to Disabled (instead of UMA)
-- K8 Cool&Quiet to disabled (instead of enabled)

It seemed like Windows & Steam booted a few seconds faster.

I re-ran that tool and attached is today's zip file (04 April) along with the results of the test I ran on 30 March (just to compare them if needed).

 

[Boozad]

Have I asked you previously if you have a Kingston Data Traveler plugged into your system?

  [FONT=&quot]Event[7293]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-Kernel-PnP[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:05:05.312[/FONT]
  [FONT=&quot]  Event ID: 219[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Warning[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_KINGSTON&PROD_DATATRAVELER_2.0&REV_1.00#0014780D8CF15A8718010298&0#.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7294]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Service Control Manager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:05:05.870[/FONT]
  [FONT=&quot]  Event ID: 7036[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The Software Protection service entered the stopped state.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7295]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Service Control Manager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:05:06.093[/FONT]
  [FONT=&quot]  Event ID: 7036[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The Windows Driver Foundation - User-mode Driver Framework service entered the running state.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7296]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Service Control Manager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:05:15.820[/FONT]
  [FONT=&quot]  Event ID: 7036[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The Application Information service entered the running state.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7297]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-UserPnp[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:08:54.455[/FONT]
  [FONT=&quot]  Event ID: 20011[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]Device action request for device 'USB\VID_0951&PID_1607\0014780D8CF15A8718010298' was vetoed by 'STORAGE\Volume\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_1.00#0014780D8CF15A8718010298&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}' with veto type 5.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7298]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-UserPnp[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:09:11.596[/FONT]
  [FONT=&quot]  Event ID: 20011[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]Device action request for device 'USB\VID_0951&PID_1607\0014780D8CF15A8718010298' was vetoed by 'STORAGE\Volume\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_1.00#0014780D8CF15A8718010298&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}' with veto type 5.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7299]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-UserPnp[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:09:35.637[/FONT]
  [FONT=&quot]  Event ID: 20011[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]Device action request for device 'USB\VID_0951&PID_1607\0014780D8CF15A8718010298' was vetoed by 'STORAGE\Volume\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_1.00#0014780D8CF15A8718010298&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}' with veto type 5.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7300]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-UserPnp[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:10:05.060[/FONT]
  [FONT=&quot]  Event ID: 20011[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]Device action request for device 'USB\VID_0951&PID_1607\0014780D8CF15A8718010298' was vetoed by 'STORAGE\Volume\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_1.00#0014780D8CF15A8718010298&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}' with veto type 6.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7301]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Service Control Manager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:12:27.021[/FONT]
  [FONT=&quot]  Event ID: 7036[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The Portable Device Enumerator Service service entered the stopped state.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7302]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Service Control Manager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:15:32.569[/FONT]
  [FONT=&quot]  Event ID: 7036[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The Application Experience service entered the stopped state.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7303]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-Kernel-General[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:18.952[/FONT]
  [FONT=&quot]  Event ID: 12[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The operating system started at system time ?2015?-?04?-?02T22:23:17.844798900Z.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7304]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-FilterManager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:21.776[/FONT]
  [FONT=&quot]  Event ID: 6[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]File System Filter 'FileInfo' (6.1, ?2009?-?07?-?13T19:34:25.000000000Z) has successfully loaded and registered with Filter Manager.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7305]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-FilterManager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:25.956[/FONT]
  [FONT=&quot]  Event ID: 6[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]File System Filter 'aswSnx' (6.0, ?2015?-?03?-?02T08:15:28.000000000Z) has successfully loaded and registered with Filter Manager.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7306]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-FilterManager[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:26.003[/FONT]
  [FONT=&quot]  Event ID: 6[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: Info[/FONT]
  [FONT=&quot]  Keyword: N/A[/FONT]
  [FONT=&quot]  User: S-1-5-18[/FONT]
  [FONT=&quot]  User Name: NT AUTHORITY\SYSTEM[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]File System Filter 'aswSP' (6.0, ?2015?-?03?-?02T08:28:40.000000000Z) has successfully loaded and registered with Filter Manager.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7307]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: EventLog[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:35.000[/FONT]
  [FONT=&quot]  Event ID: 6008[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Error[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The previous system shutdown at 6:21:47 PM on ?4/?2/?2015 was unexpected.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7308]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: EventLog[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:35.000[/FONT]
  [FONT=&quot]  Event ID: 6009[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]Microsoft (R) Windows (R) 6.01. 7601 Service Pack 1 Multiprocessor Free.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7309]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: EventLog[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:35.000[/FONT]
  [FONT=&quot]  Event ID: 6005[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The Event log service was started.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7310]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: EventLog[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:35.000[/FONT]
  [FONT=&quot]  Event ID: 6013[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Information[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The system uptime is 17 seconds.[/FONT]
  [FONT=&quot] [/FONT]
  [FONT=&quot]Event[7311]:[/FONT]
  [FONT=&quot]  Log Name: System[/FONT]
  [FONT=&quot]  Source: Microsoft-Windows-WER-SystemErrorReporting[/FONT]
  [FONT=&quot]  Date: 2015-04-02T18:23:36.000[/FONT]
  [FONT=&quot]  Event ID: 1001[/FONT]
  [FONT=&quot]  Task: N/A[/FONT]
  [FONT=&quot]  Level: Error[/FONT]
  [FONT=&quot]  Opcode: N/A[/FONT]
  [FONT=&quot]  Keyword: Classic[/FONT]
  [FONT=&quot]  User: N/A[/FONT]
  [FONT=&quot]  User Name: N/A[/FONT]
  [FONT=&quot]  Computer: 350D[/FONT]
  [FONT=&quot]  Description: [/FONT]
  [FONT=&quot]The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa8007cd78f8, 0x0000000000000000, 0x0000000000000000). A dump was saved in: C:\Windows\Minidump\040215-19250-01.dmp. Report Id: 040215-19250-01.[/FONT]