Event ID 1001

Question

Event ID 1001

Anonymous

I've been wrestling with an issue for over a year now, it's scarce, hard to replicate and harder to diagnose without replacing parts. The whole system will lock up. No audio looping, no stuttering, no precursor just instantly locked. It almost always requires a force restart. There are no BSOD logs, there are no event viewer reports. I can't find any logs of this system failure. The temps are fine, everything runs stable but once a day or once a month it will lock up on me. Sometimes, very rarely, it can recover. Today it did and I got a report on event viewer. One stating the display drivers have stopped responding but successfully recovered and another I can't interpret. I found two of these, the only difference I can see is the "report status: 4" and the other says "report status : 2049."

Log Name: Application

Source: Windows Error Reporting

Date: 3/23/2018 11:08:08 PM

Event ID: 1001

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Purgatory

Description:

Fault bucket , type 0

Event Name: LiveKernelEvent

Response: Not available

Cab Id: 0

Problem signature:

P1: 141

P2: ffffb804ac7b3370

P3: fffff8061cb5f9cc

P4: 0

P5: 3468

P6: 10_0_16299

P7: 0_0

P8: 768_1

P9:

P10:

Attached files:

\?\C:\WINDOWS\LiveKernelReports\WATCHDOG\WATCHDOG-20180323-2308.dmp

\?\C:\WINDOWS\TEMP\WER-266735578-0.sysdata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER22A6.tmp.WERInternalMetadata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER22B6.tmp.csv

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER22F5.tmp.txt

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_141_1e4040a42e6ce5cec614833346399bd7aadead1_00000000_cab_2ca623a0

Analysis symbol:

Rechecking for solution: 0

Report Id: 965d92de-2fdb-4747-8a44-2d510394cb5d

Report Status: 2049

Hashed bucket:

Event Xml:

<Channel>Application</Channel>

<Computer>Purgatory</Computer>

</System>

<Data>

</Data>

<Data>LiveKernelEvent</Data>

<Data>Not available</Data>

<Data>ffffb804ac7b3370</Data>

<Data>fffff8061cb5f9cc</Data>

<Data>

</Data>

<Data>

</Data>

<Data>

\?\C:\WINDOWS\LiveKernelReports\WATCHDOG\WATCHDOG-20180323-2308.dmp

\?\C:\WINDOWS\TEMP\WER-266735578-0.sysdata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER22A6.tmp.WERInternalMetadata.xml

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER22B6.tmp.csv

\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER22F5.tmp.txt</Data>

<Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_141_1e4040a42e6ce5cec614833346399bd7aadead1_00000000_cab_2ca623a0</Data>

<Data>

</Data>

<Data>

</Data>

</EventData>

</Event>

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

4 answers

Answer 1

Hello,

This event indicates that an application has crashed the system. Since the event log doesn't show much, we could only rely to what information you may give. May we know when does your computer "locks up"? Is their a specific pattern? Does it happen when using a specific application or does it happen even if the system is left idle?

We look forward to your response.

Answer 2

There is a file located at the folder directory. It has a a lot of lines of sig, osinfo, and file paths. Otherwise computer gibberish to me but the last few lines I understand.

FriendlyEventName=Hardware error

ConsentKey=LiveKernelEvent

AppName=Windows

AppPath=C:\Windows\System32\WerFault.exe

ReportDescription=A problem with your hardware caused Windows to stop working correctly.

NsPartner=windows

NsGroup=windows8

ApplicationIdentity=00000000000000000000000000000000

MetadataHash=-220156090

For MSinfo32, under WER there is a healthy, or rather unhealthy number of errors logging back a ways. The Majority of them are Window errors, fault bucket. A couple application errors from games, an application error from Radeon Settings. On the day of this crash there is only one an hour prior to the crash.

Windows Error Reporting Fault Bucket Event Name: RADAR_PRE_LEAK_64 Response: Not available event signature Factorio

That was an error from one of my games by the looks of it. But no WER on the crash itself. In fact a lot of these errors are from my games. Is that normal to have about 5 of these in one day?

Answer 3

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_141_1e4040a42e6ce5cec614833346399bd7aadead1_00000000_cab_2ca623a0

Did you look in there?

I would also look in msinfo32.exe for its WER events. Note that you can format them by using a TechNet Sandbox forum's HTML edit frame. Click HTML to open it, paste the records you want to format in it, click Update, and click HTML again.

HTH

Robert Aldwinckle

Answer 4

Thank you for the reply David.

I'll happily provide any information I can about this issue. The full system lock up has happen in a few different instances, playing games, leaving the computer to sit, talking on txt programs or just watching youtube. The only consistent application that is open and running in the foreground during these lock ups would be firefox, skype and discord. That last lock up was very unusual cause in the rare cases it's recovered I've never seen the screen flicker like it did. In fact youtube refused to load after the two recovered it did within an hour so I had to restart the computer to solve that issue. I'm concerned with how many of these lock ups happen that it could be corrupting program files, they don't seem to have any reason or patterns, it's happen at any point during the day. For the last month it hasn't happen at all then this week it's happen 4 times now. It's latest pattern it once a day about. When I suspected it was my ssd the first time, I used a program to take an image of the drive, and copied it over to the new m.2. When the issues continued, I tried to doing a windows file check to make sure no windows files were corrupt but it came back clean, I did a fresh install of my video drivers to ensure those weren't corrupt either. So I'm at a lost as to what is causing this.

Share via

Event ID 1001

4 answers