Just built a new gaming rig with vista sp2 installed, and I'm experiencing seemingly random freezes that don't show up in the administrative events log, only that it had to shut down unexpectedly. Here are my specs:
ASRock x58 Extreme mobo
i7 920 CPU
6gb Corsair Dominator 1600
4x intel i25-e ssd's raid0
2x HIS gtx275 sli
I've noticed a number of errors showing up time and time again:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 10/6/2009 9:26:30 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Beavis
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-10-07T04:26:30.000Z" />
<EventRecordID>923</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Beavis</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 10/6/2009 7:36:02 PM
Event ID: 1108
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: Beavis
Description:
The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1108</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2009-10-07T02:36:02.955Z" />
<EventRecordID>4484</EventRecordID>
<Correlation />
<Execution ProcessID="424" ThreadID="1780" />
<Channel>Security</Channel>
<Computer>Beavis</Computer>
<Security />
</System>
<UserData>
<EventProcessingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Error Code="15007">
</Error>
<EventID>4634</EventID>
<PublisherID>Microsoft-Windows-Security-Auditing</PublisherID>
</EventProcessingFailure>
</UserData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 10/6/2009 6:04:29 PM
Event ID: 1101
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: Beavis
Description:
Audit events have been dropped by the transport. The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2009-10-07T01:04:29.777Z" />
<EventRecordID>4439</EventRecordID>
<Correlation />
<Execution ProcessID="424" ThreadID="532" />
<Channel>Security</Channel>
<Computer>Beavis</Computer>
<Security />
</System>
<UserData>
<AuditEventsDropped xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Reason>34</Reason>
</AuditEventsDropped>
</UserData>
</Event>
Log Name: System
Source: Microsoft-Windows-Servicing
Date: 10/6/2009 10:03:00 AM
Event ID: 4385
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Beavis
Description:
Windows Servicing failed to complete the process of changing update Aux32 from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US(Language Pack) into Staged(Staged) state
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Servicing" Guid="{bd12f3b8-fc40-4a61-a307-b7a013a069c1}" EventSourceName="Microsoft-Windows-Servicing" />
<EventID Qualifiers="49152">4385</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-10-06T17:03:00.000Z" />
<EventRecordID>23169</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Beavis</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CbsUpdateChangeState xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
<UpdateName>Aux32</UpdateName>
<PackageIdentifier>WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US</PackageIdentifier>
<ReleaseType>Language Pack</ReleaseType>
<UpdateState>Staged</UpdateState>
<PackageAssembly>WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~en-US~7.4.7600.226</PackageAssembly>
<UpdateDisplayName>
</UpdateDisplayName>
<Operation>Installed</Operation>
<OperationCompleted>True</OperationCompleted>
<ErrorCode>0x800f0806</ErrorCode>
<RebootOption>False</RebootOption>
</CbsUpdateChangeState>
</UserData>
</Event>
Log Name: System
Source: Microsoft-Windows-Servicing
Date: 10/6/2009 10:03:00 AM
Event ID: 4375
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Beavis
Description:
Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US (Language Pack) into Install Requested(Install Requested) state
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Servicing" Guid="{bd12f3b8-fc40-4a61-a307-b7a013a069c1}" EventSourceName="Microsoft-Windows-Servicing" />
<EventID Qualifiers="49152">4375</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-10-06T17:03:00.000Z" />
<EventRecordID>23167</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Beavis</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CbsPackageChangeState xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
<PackageIdentifier>WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US</PackageIdentifier>
<ReleaseType>Language Pack</ReleaseType>
<PackageState>Install Requested</PackageState>
<PackageAssembly>WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~en-US~7.4.7600.226</PackageAssembly>
<Operation>Installed</Operation>
<OperationCompleted>True</OperationCompleted>
<ErrorCode>0x800f0806</ErrorCode>
<RebootOption>False</RebootOption>
<MissingElements>
</MissingElements>
</CbsPackageChangeState>
</UserData>
</Event>
Very confused as to where to go with this, and I haven't found anything online pointing towards a solution. Each time it freezes, I need to do a cold boot, no bsod at all. I've updated drivers for LAN and vid cards, chipset drivers appear to be up to date.
Any advice would be appreciated.
ASRock x58 Extreme mobo
i7 920 CPU
6gb Corsair Dominator 1600
4x intel i25-e ssd's raid0
2x HIS gtx275 sli
I've noticed a number of errors showing up time and time again:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 10/6/2009 9:26:30 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Beavis
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-10-07T04:26:30.000Z" />
<EventRecordID>923</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Beavis</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 10/6/2009 7:36:02 PM
Event ID: 1108
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: Beavis
Description:
The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1108</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2009-10-07T02:36:02.955Z" />
<EventRecordID>4484</EventRecordID>
<Correlation />
<Execution ProcessID="424" ThreadID="1780" />
<Channel>Security</Channel>
<Computer>Beavis</Computer>
<Security />
</System>
<UserData>
<EventProcessingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Error Code="15007">
</Error>
<EventID>4634</EventID>
<PublisherID>Microsoft-Windows-Security-Auditing</PublisherID>
</EventProcessingFailure>
</UserData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 10/6/2009 6:04:29 PM
Event ID: 1101
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: Beavis
Description:
Audit events have been dropped by the transport. The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime="2009-10-07T01:04:29.777Z" />
<EventRecordID>4439</EventRecordID>
<Correlation />
<Execution ProcessID="424" ThreadID="532" />
<Channel>Security</Channel>
<Computer>Beavis</Computer>
<Security />
</System>
<UserData>
<AuditEventsDropped xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Reason>34</Reason>
</AuditEventsDropped>
</UserData>
</Event>
Log Name: System
Source: Microsoft-Windows-Servicing
Date: 10/6/2009 10:03:00 AM
Event ID: 4385
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Beavis
Description:
Windows Servicing failed to complete the process of changing update Aux32 from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US(Language Pack) into Staged(Staged) state
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Servicing" Guid="{bd12f3b8-fc40-4a61-a307-b7a013a069c1}" EventSourceName="Microsoft-Windows-Servicing" />
<EventID Qualifiers="49152">4385</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-10-06T17:03:00.000Z" />
<EventRecordID>23169</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Beavis</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CbsUpdateChangeState xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
<UpdateName>Aux32</UpdateName>
<PackageIdentifier>WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US</PackageIdentifier>
<ReleaseType>Language Pack</ReleaseType>
<UpdateState>Staged</UpdateState>
<PackageAssembly>WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~en-US~7.4.7600.226</PackageAssembly>
<UpdateDisplayName>
</UpdateDisplayName>
<Operation>Installed</Operation>
<OperationCompleted>True</OperationCompleted>
<ErrorCode>0x800f0806</ErrorCode>
<RebootOption>False</RebootOption>
</CbsUpdateChangeState>
</UserData>
</Event>
Log Name: System
Source: Microsoft-Windows-Servicing
Date: 10/6/2009 10:03:00 AM
Event ID: 4375
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Beavis
Description:
Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US (Language Pack) into Install Requested(Install Requested) state
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Servicing" Guid="{bd12f3b8-fc40-4a61-a307-b7a013a069c1}" EventSourceName="Microsoft-Windows-Servicing" />
<EventID Qualifiers="49152">4375</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-10-06T17:03:00.000Z" />
<EventRecordID>23167</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Beavis</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<CbsPackageChangeState xmlns="http://manifests.microsoft.com/win/2004/08/windows/setup_provider">
<PackageIdentifier>WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US</PackageIdentifier>
<ReleaseType>Language Pack</ReleaseType>
<PackageState>Install Requested</PackageState>
<PackageAssembly>WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~en-US~7.4.7600.226</PackageAssembly>
<Operation>Installed</Operation>
<OperationCompleted>True</OperationCompleted>
<ErrorCode>0x800f0806</ErrorCode>
<RebootOption>False</RebootOption>
<MissingElements>
</MissingElements>
</CbsPackageChangeState>
</UserData>
</Event>
Very confused as to where to go with this, and I haven't found anything online pointing towards a solution. Each time it freezes, I need to do a cold boot, no bsod at all. I've updated drivers for LAN and vid cards, chipset drivers appear to be up to date.
Any advice would be appreciated.