Event ID 6008 Help.

[pmannin]

About a month ago I built a new pc. Everything was running at great temps(no overclock). I use HW Monitor to look at the temps. I ran Memtest86 for about 3-4hrs with no errors and ran Prime95 for about 6-7hrs and never went above 55C on stock cooling(no failures). In the span of two weeks, I have had three BSODs. All were regarding a file for my video card (atikmpag.sys). I ran driver sweep in safe mode and reinstalled the latest drivers for my card. I checked the reliability report and it keeps giving me errors regarding unexpected shutdown - Event ID 6008. I have no idea what is causing this. I click on the details in event log and there are none. I did a reinstall of windows and it keeps happening. The 6008 events did start occurring BEFORE the BSOD's if that helps. After i reformatted with windows, I have had no more BSOD's so far, but 6008 is still happening almost every time I shutdown. Any help would be appreciated. Thanks!

 

[zigzag3143]

About a month ago I built a new pc. Everything was running at great temps(no overclock). I use HW Monitor to look at the temps. I ran Memtest86 for about 3-4hrs with no errors and ran Prime95 for about 6-7hrs and never went above 55C on stock cooling(no failures). In the span of two weeks, I have had three BSODs. All were regarding a file for my video card (atikmpag.sys). I ran driver sweep in safe mode and reinstalled the latest drivers for my card. I checked the reliability report and it keeps giving me errors regarding unexpected shutdown - Event ID 6008. I have no idea what is causing this. I click on the details in event log and there are none. I did a reinstall of windows and it keeps happening. The 6008 events did start occurring BEFORE the BSOD's if that helps. After i reformatted with windows, I have had no more BSOD's so far, but 6008 is still happening almost every time I shutdown. Any help would be appreciated. Thanks!

We need both the event iD (6008) and the source (?????). ID 6008 just means an unexpected shutdown. Can be from heat, someone force quitting, or anything else.

 

[pmannin]

I looked in event log and all of the the 6008 errors all said EventLog under the source.

 

[pmannin]

Anyone have a solution for me? I'm hoping it's not a hardware issue.

 

[steel865]

are you doing a proper shutdown every time? ie, start, shutdown, or are you just pressing the power button on the pc?

 

[zigzag3143]

I looked in event log and all of the the 6008 errors all said EventLog under the source.

So there are no other critical events in event viewer besides the 6008?


There are several ways to find what the problem is. The best is to go into event viewer (type eventvwr in search). Go to the windows log>application tab.

You want to look for critical errors (they have red in the left column ).

When you find them you want to look for critical errors that say app hang, app crash, or anything that relates to the problem.

When you find them please note the event ID, and the source codes and tell us what they are.

 

[pmannin]

I am doing a proper shutdown and this only happens when I shutdown the pc. It never turns off by itself. The only app errors I could find were regarding itunes, but I don't think that would be the problem. I did find Kernel-Power 41 (63) a few times, but we have been experiencing a lot of power surges lately so my pc did get shutdown improperly. Could it be my psu? I think it's enough power though.

 

[pmannin]

I got another 6008 error after shutting down yesterday. I looked in the event viewer for an app errors around the same time and there were none. I did see a constant warning about Wininit Event ID 11

Log Name: System
Source: Microsoft-Windows-Wininit
Date: 5/14/2011 11:59:07 PM
Event ID: 11
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: MANNING-PC
Description:
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206F6DEA-D3C5-4D10-BC72-989F03C8B84B}" />
<EventID>11</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2011-05-15T03:59:07.503050600Z" />
<EventRecordID>11981</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="544" />
<Channel>System</Channel>
<Computer>MANNING-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="StringCount">2</Data>
<Data Name="String">C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll</Data>
<Data Name="String">C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll</Data>
</EventData>
</Event>


I'm starting to think it's a hardware issue but I don't know what it could be.

 

[zigzag3143]

Event ID 11 is a disk controller error Please run CHKDSK

A- CHKDSK /R /F:

Run CHKDSK /R /F from an elevated (Run as administrator) Command Prompt.

Do this for each hard drive on your system.

When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter.

Then reboot and let the test run.

It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors.

See "CHKDSK LogFile" below in order to check the results of the test.


B- Elevated Command Prompt:

Go to Start and type in "cmd.exe" (without the quotes)

At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"


C-CHKDSK LogFile:

Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter

Expand the Windows logs heading, then select the Application log file entry.

Double click on the Source column header.

Scroll down the list until you find the Chkdsk entry (wininit for Win7) (winlogon for XP).

Copy/paste the results into your next post.

 

[pmannin]

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 5/15/2011 5:23:31 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: MANNING-PC
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
158464 file records processed.

File verification completed.
200 large file records processed.

0 bad file records processed.

2 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
222960 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
158464 file SDs/SIDs processed.

Cleaning up 474 unused index entries from index $SII of file 0x9.
Cleaning up 474 unused index entries from index $SDH of file 0x9.
Cleaning up 474 unused security descriptors.
Security descriptor verification completed.
32249 data files processed.

CHKDSK is verifying Usn Journal...
33793056 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
158448 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
132484709 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

625027071 KB total disk space.
94722640 KB in 125851 files.
88184 KB in 32250 indexes.
0 KB in bad sectors.
277407 KB in use by the system.
65536 KB occupied by the log file.
529938840 KB available on disk.

4096 bytes in each allocation unit.
156256767 total allocation units on disk.
132484710 allocation units available on disk.

Internal Info:
00 6b 02 00 9f 69 02 00 62 8c 04 00 00 00 00 00 .k...i..b.......
1e 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-05-15T21:23:31.000000000Z" />
<EventRecordID>3188</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MANNING-PC</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
158464 file records processed.

File verification completed.
200 large file records processed.

0 bad file records processed.

2 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
222960 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
158464 file SDs/SIDs processed.

Cleaning up 474 unused index entries from index $SII of file 0x9.
Cleaning up 474 unused index entries from index $SDH of file 0x9.
Cleaning up 474 unused security descriptors.
Security descriptor verification completed.
32249 data files processed.

CHKDSK is verifying Usn Journal...
33793056 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
158448 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
132484709 free clusters processed.

Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

625027071 KB total disk space.
94722640 KB in 125851 files.
88184 KB in 32250 indexes.
0 KB in bad sectors.
277407 KB in use by the system.
65536 KB occupied by the log file.
529938840 KB available on disk.

4096 bytes in each allocation unit.
156256767 total allocation units on disk.
132484710 allocation units available on disk.

Internal Info:
00 6b 02 00 9f 69 02 00 62 8c 04 00 00 00 00 00 .k...i..b.......
1e 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>


Two things:
Is my psu enough?
I have ram that is not listed in my mobo manual. Could that be it? I did a memtest (with both sticks in) and didn't get any errors.

 

[zigzag3143]

How many passes with memtest did you run?

 

[pmannin]

I believe it was 7. It ran for about 6 hours, but I did have both sticks in if that means anything.

 

[zigzag3143]

I believe it was 7. It ran for about 6 hours, but I did have both sticks in if that means anything.

Thats fine


Are you just seeing the report in the log but no symptoms other than that?

 

[pmannin]

Yeah pretty much. That and the wininit error(all kaspersky related) which I posted already. Was the CHKDSK ok? I have not had any more blue screens in a while so I hope it was just a driver issue regarding my gpu. Is a 650 watt enough for my system? I was told it was.

 

[zigzag3143]

Yeah pretty much. That and the wininit error(all kaspersky related) which I posted already. Was the CHKDSK ok? I have not had any more blue screens in a while so I hope it was just a driver issue regarding my gpu. Is a 650 watt enough for my system? I was told it was.

Chkdsk is fine as is ower supply.

 

[pmannin]

Okay. Is there anything I can do to fix this 6008 error? Or should I just ignore it. My system is working fine and I wouldn't of even noticed if I didn't look in the reliability report. Is there a way to test every hardware component to see if I got something defective? Thanks for the quick responses, I appreciate it. Also, the ram I purchased is not listed in the qualified vendor's list in my mobo's manual, but I haven't noticed any problems with it.

 

[zigzag3143]

Okay. Is there anything I can do to fix this 6008 error? Or should I just ignore it. My system is working fine and I wouldn't of even noticed if I didn't look in the reliability report. Is there a way to test every hardware component to see if I got something defective? Thanks for the quick responses, I appreciate it. Also, the ram I purchased is not listed in the qualified vendor's list in my mobo's manual, but I haven't noticed any problems with it.

If there are not symptoms I would ignore it for a boit and see if you have any problems. I think you are safe to forget about it.

 

[pmannin]

Ok. Thanks for your help.

 

[zigzag3143]

Ok. Thanks for your help.

My pleasure and let us know if you need help.

 

[pmannin]

So, about three days ago I did two things to my computer and have not had anymore 6008 errors.
1) I disabled USB suspend mode in my power options and
2) I created a shutdown shortcut on my desktop.

This means it's software right? I have not tested each by itself so I am not sure which one it is, but, if it is number 2, why wouldn't the normal shutdown feature work?