Kernel Power Event ID 41 - Random restart problem

jai360

Honorable
Nov 14, 2014
70
1
10,635
ok guys im having this wired problem my Pc restarts randomly at times i can't predict when it happens its just so random i cant find which one causing the problem

i changed my PSU and also UPS still im getting those random restart

now i dono which one is causing the problem


heres the config

AMD FX 8350
Cooler Master 750 w PSU
Corsair 8 GB DDR3
Seagate 1TB Sata Drive
Cooler master Hyper 212X CPU
cooler master k380 cabinet
Dell 21.5 inch monitor S2240L
Asus strix r9285 GPU
APC ups 1KV

and the event viewer reads this

Source: Microsoft-Windows-Kernel-Power
Date: 9/9/2015 1:26:06 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Jairules
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2015-09-08T19:56:06.362413700Z" />
<EventRecordID>13269</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Jairules</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>

help me brothers ...
 
Solution
so looks like a hardware problem, the replace psu/ups leaves the other components, start by checking the temperatures, hwmonitor should work, do a ram check too (memtest)
check the cpu temperature, what's your motherboard model? and look for a bios update if available.

edit: eventviewer data is just windows realizing it was restarted without a clean shutdown, doesn't help finding the issue... is there anything interesting right before this event? (before the restart)
 

jai360

Honorable
Nov 14, 2014
70
1
10,635


This wat i got before reboot


Log Name: System
Source: EventLog
Date: 9/9/2015 1:26:13 AM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Jairules
Description:
The previous system shutdown at 1:24:23 AM on ‎9/‎9/‎2015 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-09-08T19:56:13.000000000Z" />
<EventRecordID>13265</EventRecordID>
<Channel>System</Channel>
<Computer>Jairules</Computer>
<Security />
</System>
<EventData>
<Data>1:24:23 AM</Data>
<Data>‎9/‎9/‎2015</Data>
<Data>
</Data>
<Data>
</Data>
<Data>1223</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DF070900030009000100180017009901DF070900020008001300360017009901600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>
 

jai360

Honorable
Nov 14, 2014
70
1
10,635



Ok this what i see before the restart in the system event


Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 9/9/2015 1:25:58 AM
Event ID: 12
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: Jairules
Description:
The operating system started at system time ‎2015‎-‎09‎-‎08T19:55:57.610798500Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>12</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2015-09-08T19:55:58.874400700Z" />
<EventRecordID>13261</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Jairules</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="MajorVersion">6</Data>
<Data Name="MinorVersion">1</Data>
<Data Name="BuildVersion">7601</Data>
<Data Name="QfeVersion">17514</Data>
<Data Name="ServiceVersion">1</Data>
<Data Name="BootMode">0</Data>
<Data Name="StartTime">2015-09-08T19:55:57.610798500Z</Data>
</EventData>
</Event>




Log Name: System
Source: Service Control Manager
Date: 9/9/2015 1:17:05 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Jairules
Description:
The Application Experience service entered the stopped state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2015-09-08T19:47:05.768559500Z" />
<EventRecordID>13260</EventRecordID>
<Correlation />
<Execution ProcessID="800" ThreadID="280" />
<Channel>System</Channel>
<Computer>Jairules</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Application Experience</Data>
<Data Name="param2">stopped</Data>
<Binary>410065004C006F006F006B00750070005300760063002F0031000000</Binary>
</EventData>
</Event>




Log Name: System
Source: Service Control Manager
Date: 9/9/2015 1:11:55 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Jairules
Description:
The Software Protection service entered the stopped state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2015-09-08T19:41:55.605819200Z" />
<EventRecordID>13259</EventRecordID>
<Correlation />
<Execution ProcessID="800" ThreadID="1268" />
<Channel>System</Channel>
<Computer>Jairules</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Software Protection</Data>
<Data Name="param2">stopped</Data>
<Binary>7300700070007300760063002F0031000000</Binary>
</EventData>
</Event>


does it help ?