Unexpected shutdown. event id 6008. Computer restarts on its own

Original title: Computer restarts

 

Hi. My computer restarts 1-2 twice a day, I keep it on for 16 hours.

I check the CPU and GPU temps constantly and they are not high, 60 degrees Celsius on average

here are the details from the even viewer: Event 41 - Kernel-Power , Task Category ( 63)

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
  <EventID>41</EventID>
  <Version>2</Version>
  <Level>1</Level>
  <Task>63</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8000000000000002</Keywords>
  <TimeCreated SystemTime="2013-06-13T02:14:24.512021100Z" />
  <EventRecordID>233129</EventRecordID>
  <Correlation />
  <Execution ProcessID="4" ThreadID="8" />
  <Channel>System</Channel>
  <Computer>HIVEMIND</Computer>
  <Security UserID="S-1-5-18" />
  </System>
- <EventData>
  <Data Name="BugcheckCode">0</Data>
  <Data Name="BugcheckParameter1">0x0</Data>
  <Data Name="BugcheckParameter2">0x0</Data>
  <Data Name="BugcheckParameter3">0x0</Data>
  <Data Name="BugcheckParameter4">0x0</Data>
  <Data Name="SleepInProgress">false</Data>
  <Data Name="PowerButtonTimestamp">0</Data>
  </EventData>
  </Event>

The previous system shutdown at 5:13:05 AM on ‎6/‎13/‎2013 was unexpected.
Event ID 6008, Task Category: None

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="EventLog" />
  <EventID Qualifiers="32768">6008</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2013-06-13T02:14:32.000000000Z" />
  <EventRecordID>233123</EventRecordID>
  <Channel>System</Channel>
  <Computer>HIVEMIND</Computer>
  <Security />
  </System>
- <EventData>
  <Data>5:13:05 AM</Data>
  <Data>‎6/‎13/‎2013</Data>
  <Data />
  <Data />
  <Data>175768</Data>
  <Data />
  <Data />
  <Binary>DD07060004000D0005000D0005002901DD07060004000D0002000D00050029013C0000003C000000000000000000000000000000000000000100000000000000</Binary>
  </EventData>
  </Event>

Thank you!!


Hey Wesley,

 

 

As per the event viewer logs that you have provided for unexpected shutdown, it appears to be a heat issue.

 

 

I would suggest you to follow the suggestion given by Ajay K in http://answers.microsoft.com/en-us/windows/forum/windows_vista-performance/unexpected-computer-reboot-event-id-6008-on/2a1c8f6a-0f66-4b73-a89c-d69060e0bf03

 

Hope the information helps. If you have any concerns, please let us know.

Microsoft Desktop Support Engineer

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Please provide a copy of your System Information file. Type System Information in the Search Box above the start Button and press the ENTER key. Select File, Export and give the file a name noting where it is located. Please upload to your Sky Drive, share with everyone and post a link here.

 

Please upload and share with everyone copies of your System and Application logs from your Event Viewer to your Sky Drive and post a link here.

 

To access the System log select Start, Control Panel, Administrative Tools, Event Viewer, from the list in the left side of the window select Windows Logs and System. Place the cursor on System, select Action from the Menu and Save All Events as and give the file a name. Do the same for the Applications log.

 

For help with Sky Drive see paragraph 9.3:
http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm

 

Paragraph 2.14 here:
http://www.gerryscomputertips.co.uk/syserrors4.htm

 

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.


system info

https://skydrive.live.com/redir?resid=D1E30F71641330B5!109&authkey=!AHn__hcrJSWSt6U

system events

https://skydrive.live.com/redir?resid=D1E30F71641330B5!107&authkey=!AIx-XVyVwyEhGrc

application events

https://skydrive.live.com/redir?resid=D1E30F71641330B5!108&authkey=!AKqOF90sSyCZ_YI

I uploaded only stuff around the incident. thank you very much for the support guys.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

The Event Viewer logs have insufficient reports to get a very good picture. Have you cleared the logs?

 

This report may be worth thinking about.

 

Log Name:      Application
Source:        ESENT
Date:          13/06/13 03:15:28
Event ID:      302
Level:         Information
Description:
Windows (2416) Windows: The database engine has successfully completed recovery steps.

 

Please upload to your Sky Drive a copy of this log:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.

 

Please run the Windows 7 Memory Diagnostic Tool

http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html

http://windows.microsoft.com/en-US/windows7/Diagnosing-memory-problems-on-your-computer

 

Please provide a copy of a chkdsk report on your C partition select Start, Run, type "cmd" without quotes in the box and press the ENTER key. Type chkdsk and press the ENTER key and a report, detailing amongst other things a summary of how the disk space is utilised, is provided. If you want a report on a partition or drive other than C you need to go to that partition. To access F, where F is the required partition you type F: and press the ENTER key.

 

Copying reports from a command prompt can be tricky. Right click and select Mark. This enables you to highlight selected text and click to copy. You then go to an open Word, Notepad or similar file, right click and paste. The selected text transfers from your clipboard to the open file. You can paste directly into a reply message to most forums.

 

In Windows 7 you may need to use an Elevated Command Prompt;

http://www.sevenforums.com/tutorials/783-elevated-command-prompt.html

 

I think you should check whether you have the latest firmware for your Samsung drives.

 

SAMSUNG HD502HJ ATA Device
http://knowledge.seagate.com/articles/en_US/FAQ/223631en

 

SAMSUNG HD204UI ATA Device –not sure about the quality of this source:
http://hardforum.com/showthread.php?t=1672505

 

See Paragraph 2.14 here:
http://www.gerryscomputertips.co.uk/syserrors4.htm

 

CleanMyPC Registry Cleaner -This is not software I would have on any of my computers.

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

how far back do you want the logs from ? the oldest is from 10th february 2012


Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Wesley

 

The oldest report in the System log is 13.6.13 03:14:12. The situation with the Application log is similar. However, I will be more interested to know how my suggestions  changed the situation and to see the chkdsk report?

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

well how for back do you want me to go with the logs, I could go as far as 2012. I only saved that portion from 13.6.13 to keep it as short as possible.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
  421888 file records processed.
File verification completed.
  302 large file records processed.
  0 bad file records processed.
  2 EA records processed.
  60 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3)...
  506702 index entries processed.
Index verification completed.
  0 unindexed files scanned.
  0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 3)...
  421888 file SDs/SIDs processed.
Security descriptor verification completed.
  42408 data files processed.
CHKDSK is verifying Usn Journal...
  36438120 USN bytes processed.
Usn Journal verification completed.
Windows has checked the file system and found no problems.

 488282111 KB total disk space.
 233577072 KB in 228236 files.
    128428 KB in 42409 indexes.
         0 KB in bad sectors.
    539463 KB in use by the system.
     65536 KB occupied by the log file.
 254037148 KB available on disk.

      4096 bytes in each allocation unit.
 122070527 total allocation units on disk.
  63509287 allocation units available on disk.

>>> MEMORY DIAGNOSTIC TOOL <<<

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-MemoryDiagnostics-Results" Guid="{5F92BC59-248F-4111-86A9-E393E12C6139}" />
  <EventID>2001</EventID>
  <Version>0</Version>
  <Level>4</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x4000000000000000</Keywords>
  <TimeCreated SystemTime="2013-06-16T02:04:19.618157900Z" />
  <EventRecordID>2</EventRecordID>
  <Correlation />
  <Execution ProcessID="3312" ThreadID="3316" />
  <Channel>Microsoft-Windows-MemoryDiagnostics-Results/Debug</Channel>
  <Computer>HIVEMIND</Computer>
  <Security UserID="S-1-5-18" />
  </System>
- <UserData>
- <Results xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2005/08/windows/Reliability/Postboot/Events">
  <MemDiagRawData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emDiagRawData>
  </Results>
  </UserData>
  </Event>

I am going to intall the HDD drivers soon, I don't have anything to boot them with at the moment. the computer has not restarted since by the way.

I can't seem to be able to access the mss.log file, windows won't let me and google didn't help, any ideas?

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Say 3 months?

 

To unlock the file, go to Control Panel > Administrative Tools > Services and then look for the Windows Search service; click on it, and click Stop in the left. Now the MSS.log file should be unlocked.

Source: http://richardcarterorg.wordpress.com/2010/02/07/mss-log-is-locked/

 

Why are you interested in this log?

 

What do you do when the computer freezes?

 

Please download and run HD Tune:

http://www.hdtune.com/download.html

 

Select HD Tune not HD Tune Pro. You need to scroll down the page to see the HD Tune freeware link.

 

When you have installed click on the Info tab and select the drive you want in the box located top left using the scroll bar. Click on the icon to the right of the temperature and it copies the data on the page to your Clipboard. Paste this into a text file and upload to your Sky Drive.

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated March 15, 2018 Views 6,170 Applies to: