Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can someone help me with an unexpected shutdown (error 6008)


  • Please log in to reply
10 replies to this topic

#1 Roburt

Roburt

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:12:57 PM

Posted 04 June 2014 - 01:49 PM

I had two happen in quick session, on a different PC but obviously cannot make sense of the report generated by windows.  Is it even possible to make sense of them?  Any help would be appreciated.


Edited by Roburt, 04 June 2014 - 02:26 PM.


BC AdBot (Login to Remove)

 


#2 Roburt

Roburt
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:12:57 PM

Posted 04 June 2014 - 01:59 PM

I attached the log, but as I look at this post I don't see anywhere where it might be downloaded from...just to be safe I am going to paste the info too...

 

Log Name:      System
Source:        EventLog
Date:          6/4/2014 12:47:12 PM
Event ID:      6008
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      BassHead
Description:
The previous system shutdown at 12:46:42 PM on ‎6/‎4/‎2014 was unexpected.
Event Xml:
  <System>
    <Provider Name="EventLog" />
    <EventID Qualifiers="32768">6008</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-06-04T17:47:12.000000000Z" />
    <EventRecordID>12619</EventRecordID>
    <Channel>System</Channel>
    <Computer>BassHead</Computer>
    <Security />
  </System>
  <EventData>
    <Data>12:46:42 PM</Data>
    <Data>‎6/‎4/‎2014</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>7</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Binary>DE070600030004000C002E002A001E01DE0706000300040011002E002A001E01600900003C000000010000006009000000000000B004000001000000EF760500</Binary>
  </EventData>
</Event>


#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:57 PM

Posted 04 June 2014 - 03:44 PM

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis



#4 Roburt

Roburt
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:12:57 PM

Posted 04 June 2014 - 10:53 PM

Hi Louis,

 

Sorry for the delay - I was at work.  I will have to open my store tomorrow too, so I may be late to respond further as well.  But here is the info you asked for.  Thanks for helping me out!

 

 

MiniToolBox by Farbar  Version: 23-01-2014
Ran by Robert (administrator) on 04-06-2014 at 22:51:46
Running from "Q:\Robert\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (06/04/2014 00:58:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (06/04/2014 00:49:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/31/2014 09:19:46 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/30/2014 09:16:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/30/2014 09:10:19 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/19/2014 01:09:28 PM) (Source: Bonjour Service) (User: )
Description: mDNS_Execute: mDNSPlatformRawTime went backwards by 1645644077 ticks; setting correction factor to -575039407
 
Error: (04/18/2014 09:14:04 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8424
 
Error: (04/18/2014 09:14:04 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8424
 
Error: (04/18/2014 09:14:04 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (04/18/2014 09:14:03 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7410
 
 
System errors:
=============
Error: (06/04/2014 10:47:19 PM) (Source: BTHUSB) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: Service Control Manager) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (06/04/2014 00:48:02 PM) (Source: DCOM) (User: )
Description: 1068netprofm{A47979D2-C419-11D9-A5B4-001185AD2B89}
 
 
Microsoft Office Sessions:
=========================
Error: (06/04/2014 00:58:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (06/04/2014 00:49:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/31/2014 09:19:46 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/30/2014 09:16:47 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/30/2014 09:10:19 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (05/19/2014 01:09:28 PM) (Source: Bonjour Service)(User: )
Description: mDNS_Execute: mDNSPlatformRawTime went backwards by 1645644077 ticks; setting correction factor to -575039407
 
Error: (04/18/2014 09:14:04 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8424
 
Error: (04/18/2014 09:14:04 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8424
 
Error: (04/18/2014 09:14:04 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
 
Error: (04/18/2014 09:14:03 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7410
 
 
=========================== Installed Programs ============================
 
Apple Application Support (Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (Version: 2.1.3.127)
Asmedia ASM104x USB 3.0 Host Controller Driver (Version: 1.14.10.0)
Asmedia ASM106x SATA Host Controller Driver (Version: 1.3.4.000)
Bonjour (Version: 3.0.0.10)
GeForce Experience NvStream Client Components (Version: 1.6.28)
Google Chrome (Version: 18.0.1025.142)
Google Update Helper (Version: 1.3.21.99)
Intel® Management Engine Components (Version: 8.1.20.1337)
Intel® USB 3.0 eXtensible Host Controller Driver (Version: 1.0.5.235)
Intel® Trusted Connect Service Client (Version: 1.26.242.3)
iTunes (Version: 11.1.3.8)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
MIDI-OX (Version: 7.02.372)
Novation USB Audio Driver 2.5 (Version: 2.5)
NVIDIA 3D Vision Controller Driver 331.82 (Version: 331.82)
NVIDIA 3D Vision Driver 331.82 (Version: 331.82)
NVIDIA Control Panel 331.82 (Version: 331.82)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1)
NVIDIA Graphics Driver 331.82 (Version: 331.82)
NVIDIA HD Audio Driver 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.140.952)
NVIDIA LED Visualizer 1.0 (Version: 1.0)
NVIDIA PhysX (Version: 9.13.0725)
NVIDIA PhysX System Software 9.13.0725 (Version: 9.13.0725)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3182)
NVIDIA Update 9.3.21 (Version: 9.3.21)
NVIDIA Update Components (Version: 9.3.21)
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9)
Pioneer DDJ_SX Driver (Version: 1.000.000.001)
Pismo File Mount Audit Package
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.208)
QuickTime 7 (Version: 7.75.80.95)
Realtek Ethernet Controller Driver (Version: 7.53.216.2012)
Realtek High Definition Audio Driver (Version: 6.0.1.6813)
Renesas Electronics USB 3.0 Host Controller Driver (Version: 3.0.12.0)
Savu Mouse (Version: 1.1.9)
Serato DJ  (Version: 1.6.3.7539)
SHIELD Streaming (Version: 1.6.53)
Speccy (Version: 1.26)
YouTube Video Downloader 3
 
========================= Memory info: ===================================
 
Percentage of memory in use: 17%
Total physical RAM: 8137.76 MB
Available physical RAM: 6740.3 MB
Total Pagefile: 66272.7 MB
Available Pagefile: 64294.59 MB
Total Virtual: 4095.88 MB
Available Virtual: 3971.27 MB
 
========================= Partitions: =====================================
 
1 Drive c: () (Fixed) (Total:111.69 GB) (Free:73.02 GB) NTFS
2 Drive q: (Data) (Fixed) (Total:698.63 GB) (Free:498.97 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\BASSHEAD
 
Administrator            Guest                    Robert                   
UpdatusUser              
 
 
**** End of log ****
 
 
 


#5 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:57 PM

Posted 05 June 2014 - 09:57 AM

Your Windows install dates from Dec 2013.  Your AV program reflects "disabled" status and I don't see one listed in Installed Programs.

 

Is this a planned "strategy"?

 

Aside from the obvious unnecessary exposure to malware sans AV program...and no optical drive...I don't see anything I would be concerned with.

 

Are you overclocking?

 

Louis



#6 Roburt

Roburt
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:12:57 PM

Posted 05 June 2014 - 12:42 PM

No AV software installed because I only use this computer with my audio equipment. If I go online for anything to download it is only from reputable places. Email (rarely), iTunes, Serato, pioneer. These are really the only places anything has ever been downloaded from. I feel the likelihood of an attack is very low. Do you disagree? There are plenty of free ones I can install and I am open to recommendations.

I'm not overclocking, BUT this is an ITX build. It's very cramped. I have great fans, move lots of air but it might not be enough.

Here's what was happening at the time of the shutdown: I had been playing on serato DJ for over an hour, maybe two. I normally play around an hour at the most. Things shut down. I panicked, but attempted to turn the pc back on. Got all the way to desktop and shut down again. Immediately opened in safe mode with no issues. I left it in safe mode while I figured out (on another pc) how to get the report. Restarted in normal mode and no shutdown since. It's asleep right now. I think it might have over heated? Graphics card, CPU, all working and working and it just got too hot.

Do you recommend any software that actively monitors CPU temps? I want to try playing for
A few hours with something like this going so I can watch numbers.

#7 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:57 PM

Posted 05 June 2014 - 01:13 PM

Well...I'm certainly no expert of any sort...but it's my belief that most of the malware users get...doesn't come from "disreputable sites" but from drive-bys and well-visited sites providing easy access to a target market.

 

I hardly ever see anyone post a malware situation (mistakenly) in the O/S or hardware forums...who asserts that they know how, when, and where they picked up the malware.

 

Taken into account the fact that user systems are constantly being attacked each day randomly (which is why it's good to have a router as an additional source of protection, I just don't think that the majority of users with malware inflict themselves by the choice of sites they visit...yet they do have their systems logged with malware.

 

It's your system...run it in the manner that you see fit :).  I would not think of running a system for any length of time without an AV program installed and constantly maintained...I was hit with the Blaster worm eons ago when I was in the process of doing a clean install on one of my desktops.  Windows could not have been online for more than a minute sans AV (I wanted to get critical updates first)...that's all that it took.

 

Louis



#8 Roburt

Roburt
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:12:57 PM

Posted 06 June 2014 - 05:49 AM

So to rule out malware, would you suggest malwarebytes in safe mode or some other route? I also will find something to monitor temps and put the rig under load. The logs I posted don't look out of order or anything?

You'll have to forgive my delay, been busy with work! About to go in now, but I will have 24 straight hours to work on this when I get home today (3pm central time).

Edited by Roburt, 06 June 2014 - 05:51 AM.


#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:57 PM

Posted 06 June 2014 - 10:17 AM

Don't worry about timing and responses...I'm retired and it's not my system that may have a problem :).

 

Since I believe in ruling out the obvious as quickly as possible...I would try to rule out the possibility of malware by initiating a new topic (or having me move this one) in the Am I Infected forum.

 

Frankly...I don't believe that most users do a very good job of keeping their systems free of malware so I don't encourage them to try to determine whether malware is present.  We have a forum where personnel there can assist in making that determination.

 

If no malware...then would be the time to pursue other suspects, IMO.

 

Louis



#10 Roburt

Roburt
  • Topic Starter

  • Members
  • 31 posts
  • OFFLINE
  •  
  • Local time:12:57 PM

Posted 06 June 2014 - 12:50 PM

If you think it's best to rule out malware first then I agree. And whatever works best - either me starting a new post or you moving this one. I appreciate your help thus far.

Edited by Roburt, 06 June 2014 - 12:50 PM.


#11 hamluis

hamluis

    Moderator


  • Moderator
  • 56,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:01:57 PM

Posted 06 June 2014 - 01:23 PM

A new topic would keep these other comments out of an AII topic and that's the route I would take.  Just quickly summarize concisely the fact that you have had the shutdown errors...do not have an AV installed...and link to the topic here (in case someone wants to see the detail).

 

Thanks :).

 

I will close this topic after the new one is posted...to avoid confusion.  If necessary, we can always reopen it once the malware suspect is eliminated.

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users