Strange Kernel-EventTracing event

[ementat]

Hello,

Can someone help with strange error appearing every time i boot at Win 7 Ultimate and logged to event log:

Session "Microsoft-Windows-Setup" stopped due to the following error: 0xC000000D
 
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" /> 
<EventID>3</EventID> 
<Version>0</Version> 
<Level>2</Level> 
<Task>2</Task> 
<Opcode>14</Opcode> 
<Keywords>0x8000000000000010</Keywords> 
<TimeCreated SystemTime="2009-09-18T15:19:33.803626900Z" /> 
<EventRecordID>4</EventRecordID> 
<Correlation /> 
<Execution ProcessID="4" ThreadID="164" /> 
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel> 
<Computer>Zeus</Computer> 
<Security UserID="S-1-5-18" /> 
</System>
- <EventData>
<Data Name="SessionName">Microsoft-Windows-Setup</Data> 
<Data Name="FileName">C:\Windows\Panther\setup.etl</Data> 
<Data Name="ErrorCode">3221225485</Data> 
<Data Name="LoggingMode">5</Data> 
</EventData>
</Event>

It started to appear after several days of OS usage and I believe that it is caused by some software installation.

Thanks in advance.

 

[abumuqaatil]

I have the exact same problem !!! just started recently and I dont know what it is ??? Uninstalled Alcohol 120 and Microsoft office...but its still there ? ANy help would be appreciated... Thx

 

[abumuqaatil]

Well this worked for me...I just deleted the entire Panther folder and rebooted.

No problems No errors..and Panther folder was re-created.

I hope I didnt screw anything up tho ....

Update:.... You dont need to delete the whole folder...just the setup.etl file and the error goes away.

 

[ementat]

Thanks abumuqaatil! The error is gone. Will see if we really broken something. The setup.etl file was recreated at next reboot with zero size.

 

[H2SO4]

Thanks abumuqaatil! The error is gone. Will see if we really broken something. The setup.etl file was recreated at next reboot with zero size.

ETL = Event Tracing Log. It's a logfile, kinda. Actually, it's structured memory being dumped to a file for the purpose of subsequent interpretation as a logfile.

 

[octane097]

Hi all, I get this problem as well. I erased the entire Panther directory and it apparently gets recreated. Running Windows 7 final. Please helpppppp - this is driving me nuts. Thank you!!

 

[abumuqaatil]

Yes . the folder gets re-created....the problem goes away for a while....then comes back. Just delete the file or folder again...must be a bug or something in Win7

 

[octane097]

I am not sure why this is marked as solved when erasing the Panther folder does not solve it. I continue to get random BSODs.

I have found that the Kernel-EventTracing error (Event ID 3), which points to Panther\Setup.etl, takes place a few seconds after the Kernel-Power critical error (Event ID 41). People say the latter is related to Power Management, but I don't think that's the case. Is anyone else continuing to experience this problem?

 

[H2SO4]

I am not sure why this is marked as solved when erasing the Panther folder does not solve it. I continue to get random BSODs.

The event has nothing to do with the BSODs. It is a side-effect of the fact that your machine is logging certain diagnostics.

Deleting the folder accomplishes nothing. The "logger" component simply recreates it.

I'd suggest starting your own thread and attaching your minidumps if you'd like some assistance with the BSODs.

 

[octane097]

I am not sure why this is marked as solved when erasing the Panther folder does not solve it. I continue to get random BSODs.

The event has nothing to do with the BSODs. It is a side-effect of the fact that your machine is logging certain diagnostics.

Deleting the folder accomplishes nothing. The "logger" component simply recreates it.

I'd suggest starting your own thread and attaching your minidumps if you'd like some assistance with the BSODs.

You're totally right. The two errors I mention are related to the hard reset. Ignorant of me.... the problem with my dump files is that they're 450 megs!

 

[H2SO4]

.... the problem with my dump files is that they're 450 megs!

"Minidumps" please, not full dumps. The former reside in \Windows\Minidump on your machine. If you copy the latest dozen or so to a different location on your drive, zip them up, start a new thread, and upload the zip archive, somebody may be able to explain why your machine is crashing.

(On the other hand, if you're saying the \Minidump folder contains 450MB worth of minidumps, I think that must surely rank as a record and I admire your dedication! Given an average of say 256KB per minidump, that's 1800 crashes as a conservative estimate! There should be a new "my machine goes up and down like a yo-yo" forum achievement badge )

 

[octane097]

I'd suggest starting your own thread and attaching your minidumps if you'd like some assistance with the BSODs.

Good idea... I've done just that:

http://www.sevenforums.com/crashes-debugging/29618-random-bsods-different-causes.html

 

[GSXR13K]

i understand this thread is a year old and it is my first post....no need to remind me.

i am wondering if everybody with this problem is or was getting this error when using a loader to test win7. i am for win764 to deside if i want to upgrade to 64 and i also get this error.

yes or no.....no need for specifics

 

[azbobs]

did anyone ever find the cause to this? I have numerous errors like this on win7 64bit as well.

 

[dre168]

I am unable to find this %windir%\panther\setup.etl...Please help

 

[joopbraak]

- Open registry

- Goto

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Microsoft-Windows-Setup

Change Start value to 0.

I think this issue is caused by the Start value not being reset to zero after the Windows setup is finished.