C
Confusedasker
Guest
Hello everyone,
I have a Acer Aspire ES1-531/ 64 bit/ Windows 10 1803
I have had problems with my acer freezing in the past month more frequently, thought it's been happening since July I just never really noticed as it happened not very regularly. I have now ,alongside dealing with occasional and regular freezes, completely lost my network adapter (tried to uninstall because it wasn't working and then when I restarted my laptop the network adapter disappeared and I cannot relocate it).
Before the logs, I wanted to say that my acer charger isn't exactly working great. I have to place it in a very particular position for my laptop to charge or else it will go off. I thought I'd use it until it completely stopped working. Do you think this can cause the issue I am dealing with? I also have a bios update of v1.11. Thing is when I go online via acer product support online I see five different bios updates that seem to have come out after the v1.11 (1.15, 1.16, 1.18, 1.19, 1.22).
Below are some of the logs:
1)
Kernel-Power
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 15/11/2018 06:37:53
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: LAPTOP-428N27PT
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>6</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2018-11-15T06:37:53.788389200Z" />
<EventRecordID>28486</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">1</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">false</Data>
<Data Name="CheckpointStatus">0</Data>
</EventData>
</Event>
2)
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 15/11/2018 07:15:10
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: LOCAL SERVICE
Computer: LAPTOP-428N27PT
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T07:15:10.990244100Z" />
<EventRecordID>28561</EventRecordID>
<Correlation />
<Execution ProcessID="1144" ThreadID="8768" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
<Data Name="param6">NT AUTHORITY</Data>
<Data Name="param7">LOCAL SERVICE</Data>
<Data Name="param8">S-1-5-19</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
3)
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 15/11/2018 07:06:03
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: LAPTOP-428N27PT\Rahma
Computer: LAPTOP-428N27PT
Description:
The server {3C5E2B20-B911-44E2-A2DD-9F05E7B5E775} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T07:06:03.842134400Z" />
<EventRecordID>28555</EventRecordID>
<Correlation />
<Execution ProcessID="1144" ThreadID="1852" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-21-2507483065-88634092-634120601-1001" />
</System>
<EventData>
<Data Name="param1">{3C5E2B20-B911-44E2-A2DD-9F05E7B5E775}</Data>
</EventData>
</Event>
4)
Log Name: System
Source: Microsoft-Windows-DNS-Client
Date: 15/11/2018 07:52:39
Event ID: 1014
Task Category: (1014)
Level: Warning
Keywords: (268435456)
User: NETWORK SERVICE
Computer: LAPTOP-428N27PT
Description:
Name resolution for the name directory.services.live.com timed out after none of the configured DNS servers responded.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
<EventID>1014</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1014</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000010000000</Keywords>
<TimeCreated SystemTime="2018-11-15T07:52:39.740126600Z" />
<EventRecordID>28569</EventRecordID>
<Correlation />
<Execution ProcessID="2764" ThreadID="2904" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="QueryName">directory.services.live.com</Data>
<Data Name="AddressLength">128</Data>
<Data Name="Address">02000000C0A82C01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000</Data>
</EventData>
</Event>
5)
Log Name: System
Source: BTHUSB
Date: 15/11/2018 06:38:13
Event ID: 34
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff; got 0x1fffffff. Low Energy peripheral role functionality will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="BTHUSB" />
<EventID Qualifiers="32773">34</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T06:38:13.563197500Z" />
<EventRecordID>28499</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0x491f7fffff</Data>
<Data>0x1fffffff</Data>
<Binary>00000000030028000000000022000580000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
6)
Log Name: System
Source: BTHUSB
Date: 15/11/2018 06:38:13
Event ID: 34
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff; got 0x1fffffff. Low Energy peripheral role functionality will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="BTHUSB" />
<EventID Qualifiers="32773">34</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T06:38:13.563197500Z" />
<EventRecordID>28499</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0x491f7fffff</Data>
<Data>0x1fffffff</Data>
<Binary>00000000030028000000000022000580000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
7)
Log Name: System
Source: EventLog
Date: 15/11/2018 06:38:26
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The previous system shutdown at 06:19:49 on 15/11/2018 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T06:38:26.503581500Z" />
<EventRecordID>28465</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>06:19:49</Data>
<Data>15/11/2018</Data>
<Data>
</Data>
<Data>
</Data>
<Data>9661</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>E2070B0004000F000600130031006A00E2070B0004000F000600130031006A00DC0500003C00000001000000DC05000001000000780000000100000000000000</Binary>
</EventData>
</Event>
8)
Log Name: System
Source: TXEIx64
Date: 15/11/2018 01:59:41
Event ID: 1
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The Intel(R) Trusted Execution Engine Interface is being reset.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="TXEIx64" />
<EventID Qualifiers="32775">1</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T01:59:41.418432600Z" />
<EventRecordID>28130</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Binary>00000000010000000000000001000780000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
9)
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 15/11/2018 01:33:19
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000012b (0xffffffffc00002c4, 0x0000000000000aae, 0x0000000004de7840, 0xffffca8194752000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: d6cd2c73-59ab-4da7-bdb7-f0fd3f8f1165.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T01:33:19.737370000Z" />
<EventRecordID>27969</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x0000012b (0xffffffffc00002c4, 0x0000000000000aae, 0x0000000004de7840, 0xffffca8194752000)</Data>
<Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
<Data Name="param3">d6cd2c73-59ab-4da7-bdb7-f0fd3f8f1165</Data>
</EventData>
</Event>
10)
Log Name: System
Source: Service Control Manager
Date: 14/11/2018 23:48:20
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The WsAppService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-11-14T23:48:20.420190800Z" />
<EventRecordID>27800</EventRecordID>
<Correlation />
<Execution ProcessID="840" ThreadID="3184" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">WsAppService</Data>
<Data Name="param2">%%1053</Data>
<Binary>5700730041007000700053006500720076006900630065000000</Binary>
</EventData>
</Event>
11)
Log Name: System
Source: Microsoft-Windows-Time-Service
Date: 14/11/2018 23:47:56
Event ID: 134
Task Category: None
Level: Warning
Keywords:
User: LOCAL SERVICE
Computer: LAPTOP-428N27PT
Description:
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
<EventID>134</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-14T23:47:56.861701300Z" />
<EventRecordID>27798</EventRecordID>
<Correlation />
<Execution ProcessID="3260" ThreadID="3904" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
<Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
<Data Name="RetryMinutes">15</Data>
<Data Name="DomainPeer">time.windows.com,0x9</Data>
</EventData>
</Event>
12)
Log Name: System
Source: EventLog
Date: 14/11/2018 23:47:45
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The previous system shutdown at 23:30:53 on 14/11/2018 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-14T23:47:45.685471900Z" />
<EventRecordID>27749</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>23:30:53</Data>
<Data>14/11/2018</Data>
<Data>
</Data>
<Data>
</Data>
<Data>48</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>E2070B0003000E0017001E003500EA00E2070B0003000E0017001E003500EA003C0000003C000000000000000000000000000000000000000100000000000000</Binary>
</EventData>
</Event>
Continue reading...
I have a Acer Aspire ES1-531/ 64 bit/ Windows 10 1803
I have had problems with my acer freezing in the past month more frequently, thought it's been happening since July I just never really noticed as it happened not very regularly. I have now ,alongside dealing with occasional and regular freezes, completely lost my network adapter (tried to uninstall because it wasn't working and then when I restarted my laptop the network adapter disappeared and I cannot relocate it).
Before the logs, I wanted to say that my acer charger isn't exactly working great. I have to place it in a very particular position for my laptop to charge or else it will go off. I thought I'd use it until it completely stopped working. Do you think this can cause the issue I am dealing with? I also have a bios update of v1.11. Thing is when I go online via acer product support online I see five different bios updates that seem to have come out after the v1.11 (1.15, 1.16, 1.18, 1.19, 1.22).
Below are some of the logs:
1)
Kernel-Power
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 15/11/2018 06:37:53
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: LAPTOP-428N27PT
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>6</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2018-11-15T06:37:53.788389200Z" />
<EventRecordID>28486</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">1</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">false</Data>
<Data Name="CheckpointStatus">0</Data>
</EventData>
</Event>
2)
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 15/11/2018 07:15:10
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: LOCAL SERVICE
Computer: LAPTOP-428N27PT
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T07:15:10.990244100Z" />
<EventRecordID>28561</EventRecordID>
<Correlation />
<Execution ProcessID="1144" ThreadID="8768" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
<Data Name="param6">NT AUTHORITY</Data>
<Data Name="param7">LOCAL SERVICE</Data>
<Data Name="param8">S-1-5-19</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
3)
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 15/11/2018 07:06:03
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: LAPTOP-428N27PT\Rahma
Computer: LAPTOP-428N27PT
Description:
The server {3C5E2B20-B911-44E2-A2DD-9F05E7B5E775} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T07:06:03.842134400Z" />
<EventRecordID>28555</EventRecordID>
<Correlation />
<Execution ProcessID="1144" ThreadID="1852" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-21-2507483065-88634092-634120601-1001" />
</System>
<EventData>
<Data Name="param1">{3C5E2B20-B911-44E2-A2DD-9F05E7B5E775}</Data>
</EventData>
</Event>
4)
Log Name: System
Source: Microsoft-Windows-DNS-Client
Date: 15/11/2018 07:52:39
Event ID: 1014
Task Category: (1014)
Level: Warning
Keywords: (268435456)
User: NETWORK SERVICE
Computer: LAPTOP-428N27PT
Description:
Name resolution for the name directory.services.live.com timed out after none of the configured DNS servers responded.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DNS-Client" Guid="{1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}" />
<EventID>1014</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1014</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000010000000</Keywords>
<TimeCreated SystemTime="2018-11-15T07:52:39.740126600Z" />
<EventRecordID>28569</EventRecordID>
<Correlation />
<Execution ProcessID="2764" ThreadID="2904" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="QueryName">directory.services.live.com</Data>
<Data Name="AddressLength">128</Data>
<Data Name="Address">02000000C0A82C01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000</Data>
</EventData>
</Event>
5)
Log Name: System
Source: BTHUSB
Date: 15/11/2018 06:38:13
Event ID: 34
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff; got 0x1fffffff. Low Energy peripheral role functionality will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="BTHUSB" />
<EventID Qualifiers="32773">34</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T06:38:13.563197500Z" />
<EventRecordID>28499</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0x491f7fffff</Data>
<Data>0x1fffffff</Data>
<Binary>00000000030028000000000022000580000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
6)
Log Name: System
Source: BTHUSB
Date: 15/11/2018 06:38:13
Event ID: 34
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff; got 0x1fffffff. Low Energy peripheral role functionality will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="BTHUSB" />
<EventID Qualifiers="32773">34</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T06:38:13.563197500Z" />
<EventRecordID>28499</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0x491f7fffff</Data>
<Data>0x1fffffff</Data>
<Binary>00000000030028000000000022000580000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
7)
Log Name: System
Source: EventLog
Date: 15/11/2018 06:38:26
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The previous system shutdown at 06:19:49 on 15/11/2018 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T06:38:26.503581500Z" />
<EventRecordID>28465</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>06:19:49</Data>
<Data>15/11/2018</Data>
<Data>
</Data>
<Data>
</Data>
<Data>9661</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>E2070B0004000F000600130031006A00E2070B0004000F000600130031006A00DC0500003C00000001000000DC05000001000000780000000100000000000000</Binary>
</EventData>
</Event>
8)
Log Name: System
Source: TXEIx64
Date: 15/11/2018 01:59:41
Event ID: 1
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The Intel(R) Trusted Execution Engine Interface is being reset.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="TXEIx64" />
<EventID Qualifiers="32775">1</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T01:59:41.418432600Z" />
<EventRecordID>28130</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Binary>00000000010000000000000001000780000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
9)
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 15/11/2018 01:33:19
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000012b (0xffffffffc00002c4, 0x0000000000000aae, 0x0000000004de7840, 0xffffca8194752000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: d6cd2c73-59ab-4da7-bdb7-f0fd3f8f1165.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-15T01:33:19.737370000Z" />
<EventRecordID>27969</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x0000012b (0xffffffffc00002c4, 0x0000000000000aae, 0x0000000004de7840, 0xffffca8194752000)</Data>
<Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
<Data Name="param3">d6cd2c73-59ab-4da7-bdb7-f0fd3f8f1165</Data>
</EventData>
</Event>
10)
Log Name: System
Source: Service Control Manager
Date: 14/11/2018 23:48:20
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The WsAppService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-11-14T23:48:20.420190800Z" />
<EventRecordID>27800</EventRecordID>
<Correlation />
<Execution ProcessID="840" ThreadID="3184" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">WsAppService</Data>
<Data Name="param2">%%1053</Data>
<Binary>5700730041007000700053006500720076006900630065000000</Binary>
</EventData>
</Event>
11)
Log Name: System
Source: Microsoft-Windows-Time-Service
Date: 14/11/2018 23:47:56
Event ID: 134
Task Category: None
Level: Warning
Keywords:
User: LOCAL SERVICE
Computer: LAPTOP-428N27PT
Description:
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
<EventID>134</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-14T23:47:56.861701300Z" />
<EventRecordID>27798</EventRecordID>
<Correlation />
<Execution ProcessID="3260" ThreadID="3904" />
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData Name="TMP_EVENT_MANUAL_PEER_DNS_ERROR">
<Data Name="ErrorMessage">No such host is known. (0x80072AF9)</Data>
<Data Name="RetryMinutes">15</Data>
<Data Name="DomainPeer">time.windows.com,0x9</Data>
</EventData>
</Event>
12)
Log Name: System
Source: EventLog
Date: 14/11/2018 23:47:45
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LAPTOP-428N27PT
Description:
The previous system shutdown at 23:30:53 on 14/11/2018 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-14T23:47:45.685471900Z" />
<EventRecordID>27749</EventRecordID>
<Channel>System</Channel>
<Computer>LAPTOP-428N27PT</Computer>
<Security />
</System>
<EventData>
<Data>23:30:53</Data>
<Data>14/11/2018</Data>
<Data>
</Data>
<Data>
</Data>
<Data>48</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>E2070B0003000E0017001E003500EA00E2070B0003000E0017001E003500EA003C0000003C000000000000000000000000000000000000000100000000000000</Binary>
</EventData>
</Event>
Continue reading...