Critical 9/14/2011 12:27:48 PM Kernel-Power 41 (63)
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 9/14/2011 12:27:48 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: BEAST_001
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2011-09-14T06:57:48.989611400Z" />
<EventRecordID>9786</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>BEAST_001</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">278</Data>
<Data Name="BugcheckParameter1">0xfffffa800b8e24e0</Data>
<Data Name="BugcheckParameter2">0xfffff880106588bc</Data>
<Data Name="BugcheckParameter3">0xffffffffc000009a</Data>
<Data Name="BugcheckParameter4">0x4</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>
Error 9/14/2011 12:27:58 PM BugCheck 1001 None
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 9/14/2011 12:27:58 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: BEAST_001
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000116 (0xfffffa800b8e24e0, 0xfffff880106588bc, 0xffffffffc000009a, 0x0000000000000004). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 091411-14773-01.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-09-14T06:57:58.000000000Z" />
<EventRecordID>9785</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>BEAST_001</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x00000116 (0xfffffa800b8e24e0, 0xfffff880106588bc, 0xffffffffc000009a, 0x0000000000000004)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">091411-14773-01</Data>
</EventData>
</Event>
Error 9/14/2011 12:27:55 PM EventLog 6008 None
Log Name: System
Source: EventLog
Date: 9/14/2011 12:27:55 PM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: BEAST_001
Description:
The previous system shutdown at 12:25:54 PM on 9/14/2011 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-09-14T06:57:55.000000000Z" />
<EventRecordID>9781</EventRecordID>
<Channel>System</Channel>
<Computer>BEAST_001</Computer>
<Security />
</System>
<EventData>
<Data>12:25:54 PM</Data>
<Data>9/14/2011</Data>
<Data>
</Data>
<Data>
</Data>
<Data>15912</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DB07090003000E000C00190036008A00DB07090003000E000600370036008A00600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>