Share via

constant crashes: eventlog, kernel power, bonjour service, DistributedCOM

Anonymous
2022-06-06T17:05:37+00:00

Kernel Crashes

  • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
  • <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" /><EventID>41</EventID><Version>8</Version><Level>1</Level><Task>63</Task><Opcode>0</Opcode><Keywords>0x8000400000000002</Keywords><TimeCreated SystemTime="2022-06-06T16:31:33.1655706Z" /><EventRecordID>182229</EventRecordID><Correlation /><Execution ProcessID="4" ThreadID="8" /><Channel>System</Channel><Computer>DESKTOP-FNNSI93</Computer><Security UserID="S-1-5-18" /></System>
  • <EventData> <Data Name="BugcheckCode">278</Data><Data Name="BugcheckParameter1">0xffffd785d12b2010</Data><Data Name="BugcheckParameter2">0xfffff80627481218</Data><Data Name="BugcheckParameter3">0xffffffffc000009a</Data><Data Name="BugcheckParameter4">0x4</Data><Data Name="SleepInProgress">0</Data><Data Name="PowerButtonTimestamp">0</Data><Data Name="BootAppStatus">0</Data><Data Name="Checkpoint">0</Data><Data Name="ConnectedStandbyInProgress">false</Data><Data Name="SystemSleepTransitionsToOn">0</Data><Data Name="CsEntryScenarioInstanceId">0</Data><Data Name="BugcheckInfoFromEFI">false</Data><Data Name="CheckpointStatus">0</Data><Data Name="CsEntryScenarioInstanceIdV2">0</Data><Data Name="LongPowerButtonPressDetected">false</Data></EventData> </Event> bonjour crashes
  • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
  • <System> <Provider Name="Bonjour Service" /><EventID Qualifiers="0">100</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2022-06-06T15:56:05.8624643Z" /><EventRecordID>115514</EventRecordID><Correlation /><Execution ProcessID="0" ThreadID="0" /><Channel>Application</Channel><Computer>DESKTOP-FNNSI93</Computer><Security /></System>
  • <EventData> <Data>Excessive name conflicts (18) for 5.7.0.1.4.D.7.9.5.D.4.7.B.B.0.E.0.0.0.0.E.E.D.D.C.C.B.B.A.A.D.F.ip6.arpa. (PTR); rate limiting in effect</Data></EventData>

</Event>

  • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
  • <System> <Provider Name="Bonjour Service" /><EventID Qualifiers="0">100</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2022-06-06T15:56:05.8624643Z" /><EventRecordID>115490</EventRecordID><Correlation /><Execution ProcessID="0" ThreadID="0" /><Channel>Application</Channel><Computer>DESKTOP-FNNSI93</Computer><Security /></System>
  • <EventData> <Data>mDNSCoreReceiveResponse: Unexpected conflict discarding 25 71.1.168.192.in-addr.arpa. PTR DESKTOP-FNNSI93-2.local.</Data></EventData> </Event>
  • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
  • <System> <Provider Name="Bonjour Service" /><EventID Qualifiers="0">100</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2022-06-06T15:56:01.5735354Z" /><EventRecordID>115479</EventRecordID><Correlation /><Execution ProcessID="0" ThreadID="0" /><Channel>Application</Channel><Computer>DESKTOP-FNNSI93</Computer><Security /></System>
  • <EventData> <Data>mDNSCoreReceiveResponse: Resetting to Probing: 16 DESKTOP-FNNSI93.local. AAAA FE80:0000:0000:0000:2892:37EB:A9E7:C55B</Data></EventData>

</Event>

  • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
  • <System> <Provider Name="Bonjour Service" /><EventID Qualifiers="0">100</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2022-06-06T15:56:01.5735354Z" /><EventRecordID>115478</EventRecordID><Correlation /><Execution ProcessID="0" ThreadID="0" /><Channel>Application</Channel><Computer>DESKTOP-FNNSI93</Computer><Security /></System>
  • <EventData> <Data>mDNSCoreReceiveResponse: Received from 169.254.218.33:5353 4 DESKTOP-FNNSI93.local. Addr 169.254.218.33</Data></EventData>

</Event>

note: constant warnings about - <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">

  • <System> <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /><EventID Qualifiers="0">10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime="2022-06-06T15:57:44.1503029Z" /><EventRecordID>182199</EventRecordID><Correlation ActivityID="{7d95deea-aaf1-45c6-8ce1-2c59ac33b3e6}" /><Execution ProcessID="804" ThreadID="1444" /><Channel>System</Channel><Computer>DESKTOP-FNNSI93</Computer><Security UserID="S-1-5-18" /></System>
  • <EventData> <Data Name="param1">application-specific</Data><Data Name="param2">Local</Data><Data Name="param3">Launch</Data><Data Name="param4">Windows.SecurityCenter.WscDataProtection</Data><Data Name="param5">Unavailable</Data><Data Name="param6">NT AUTHORITY</Data><Data Name="param7">SYSTEM</Data><Data Name="param8">S-1-5-18</Data><Data Name="param9">LocalHost (Using LRPC)</Data><Data Name="param10">Unavailable</Data><Data Name="param11">Unavailable</Data></EventData> </Event>
Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

3 answers

Sort by: Most helpful
  1. Anonymous
    2022-06-15T16:41:19+00:00

    Dump file creation failed due to error during dump creation.

    • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
    • <System> <Provider Name="volmgr" /><EventID Qualifiers="49156">161</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2022-06-15T16:38:13.9002166Z" /><EventRecordID>187901</EventRecordID><Correlation /><Execution ProcessID="4" ThreadID="392" /><Channel>System</Channel><Computer>DESKTOP-FNNSI93</Computer><Security /></System>
    • <EventData> <Data>\Device\HarddiskVolume6</Data><Binary>000000000100000000000000A10004C081000000010000C000000000000000000000000000000000</Binary></EventData>

    </Event>

    • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
    • <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" /><EventID>41</EventID><Version>8</Version><Level>1</Level><Task>63</Task><Opcode>0</Opcode><Keywords>0x8000400000000002</Keywords><TimeCreated SystemTime="2022-06-15T16:38:14.1582882Z" /><EventRecordID>187904</EventRecordID><Correlation /><Execution ProcessID="4" ThreadID="8" /><Channel>System</Channel><Computer>DESKTOP-FNNSI93</Computer><Security UserID="S-1-5-18" /></System>
    • <EventData> <Data Name="BugcheckCode">278</Data><Data Name="BugcheckParameter1">0xffff9e81c6cd1010</Data><Data Name="BugcheckParameter2">0x0</Data><Data Name="BugcheckParameter3">0x0</Data><Data Name="BugcheckParameter4">0x0</Data><Data Name="SleepInProgress">0</Data><Data Name="PowerButtonTimestamp">0</Data><Data Name="BootAppStatus">0</Data><Data Name="Checkpoint">0</Data><Data Name="ConnectedStandbyInProgress">false</Data><Data Name="SystemSleepTransitionsToOn">0</Data><Data Name="CsEntryScenarioInstanceId">0</Data><Data Name="BugcheckInfoFromEFI">true</Data><Data Name="CheckpointStatus">0</Data><Data Name="CsEntryScenarioInstanceIdV2">0</Data><Data Name="LongPowerButtonPressDetected">false</Data></EventData> </Event>
    0 comments No comments
  2. Anonymous
    2022-06-09T17:41:01+00:00

    https://drive.google.com/file/d/1RfmZYBqm1Jvs12AMMJxoxrR2xbaPYDYW/view?usp=sharing 

    had a new type of crash today

    • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
    • <System> <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{b675ec37-bdb6-4648-bc92-f3fdc74d3ca2}" /><EventID>2</EventID><Version>0</Version><Level>2</Level><Task>2</Task><Opcode>12</Opcode><Keywords>0x8000000000000010</Keywords><TimeCreated SystemTime="2022-06-09T16:41:07.0234626Z" /><EventRecordID>7227</EventRecordID><Correlation /><Execution ProcessID="16992" ThreadID="12680" /><Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel><Computer>DESKTOP-FNNSI93</Computer><Security UserID="S-1-5-21-3707317131-1621240198-3038269255-1001" /></System>
    • <EventData> <Data Name="SessionName">dc3a3596-71e1-45a3-b2ea-39ad5322fe51</Data><Data Name="FileName" /><Data Name="ErrorCode">3221225506</Data><Data Name="LoggingMode">4194560</Data></EventData>

    </Event>

    • <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
    • <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" /><EventID>41</EventID><Version>8</Version><Level>1</Level><Task>63</Task><Opcode>0</Opcode><Keywords>0x8000400000000002</Keywords><TimeCreated SystemTime="2022-06-09T16:24:04.1487590Z" /><EventRecordID>182990</EventRecordID><Correlation /><Execution ProcessID="4" ThreadID="8" /><Channel>System</Channel><Computer>DESKTOP-FNNSI93</Computer><Security UserID="S-1-5-18" /></System>
    • <EventData> <Data Name="BugcheckCode">0</Data><Data Name="BugcheckParameter1">0x0</Data><Data Name="BugcheckParameter2">0x0</Data><Data Name="BugcheckParameter3">0x0</Data><Data Name="BugcheckParameter4">0x0</Data><Data Name="SleepInProgress">0</Data><Data Name="PowerButtonTimestamp">0</Data><Data Name="BootAppStatus">0</Data><Data Name="Checkpoint">0</Data><Data Name="ConnectedStandbyInProgress">false</Data><Data Name="SystemSleepTransitionsToOn">0</Data><Data Name="CsEntryScenarioInstanceId">0</Data><Data Name="BugcheckInfoFromEFI">false</Data><Data Name="CheckpointStatus">0</Data><Data Name="CsEntryScenarioInstanceIdV2">0</Data><Data Name="LongPowerButtonPressDetected">false</Data></EventData> </Event>
    0 comments No comments
  3. DaveM121 871.8K Reputation points Independent Advisor
    2022-06-06T17:38:24+00:00

    Hi Alex,

    I am Dave, I will help you with this.

    Please check to see if your PC is producing any minidump files, I will check those to see if they provide any insight into a potential cause of the system crashes.

    Open Windows File Explorer.

    Navigate to C:\Windows\Minidump

    Copy any minidump files onto your Desktop, then zip those up.

    Upload the zip file to the Cloud (OneDrive, DropBox... etc.), then choose to share those and get a share link.

    Then post the link here to the zip file, so we can take a look for you.

    0 comments No comments