Windows system restart problem tracking

1. Problem description:

       Recently, I often find that the programs deployed on the server hang up inexplicably. Once suspected the problem of program stability. Check out the Windows log tracking system for problems.

Two, step method

       1. Startup log


       2. View the log





       3. Analyze the problem

                It appears that the system has rebooted. . . .


3. Common log id

ID

Types of

source

Explanation of the meaning of the representative

2 information Serial While verifying that \Device\Serial1 is indeed a serial port, the system detected a first-in, first-out (fifo). will use this method.
17 mistake W32Time Time Provider NtpClient: An error occurred while DNS query for manually configured peer 'time.windows.com,0x1'. NtpClient will retry the NDS query within 15 minutes. The error was: A socket operation attempted a host that could not be connected. (0x80072751)
20 warn Print The printer driver Canon PIXMA iP1000 for Windows NT x86 Version-3 has been added or updated. Files:- CNMDR6e.DLL, CNMUI6e.DLL, CNMCP6e.DLL, CNMMH6e.HLP, CNMD56e.DLL, CNMUR6e.DLL, CNMSR6e.DLL, CNMIN6e.INI, CNMPI6e.DLL, CNMSM6e.EXE, CNMSS6e.SMR, CNMSD6e.EXE , CNMSQ6e.EXE, CNMSH6e.HLP, CNMSH6e
26 information Application Popup Application pops up: Rsaupd.exe - Unable to find component: MFC71.DLL was not found, so this application failed to start. Reinstalling the app may fix this issue.
29 mistake W32Time The time service provider NtpClient is configured to obtain time from one or more time sources, however, none of the sources are accessible. Attempts to contact the time source will not be made within 14 minutes. NtpClient has no time source for accurate time.
35 information W32Time The time service now synchronizes the system time with the time source time.windows.com (ntp.m|0x1|192.168.1.208:123->207.46.197.32:123).
115 information SRService System Restore monitoring is enabled on all drives.
116 information SRService System Restore monitoring is disabled on all drives.
1001 information Save Dump The computer has restarted from a bugcheck. Detected error: 0x4a4b4d53 (0xc000000e, 0x01d04bf0, 0x00000010, 0x0000029a). The dumped data has been saved in: C:\WINDOWS\Minidump\Mini052809-01.dmp.
1005 warn Dhcp Your computer has detected that the IP address 192.168.1.100 of the network card with network address 00E04C47978D is already in use on the network. The computer automatically obtains another address.
3260 information Workstation This computer was successfully added to workgroup 'WORKGROUP'.
4202 information Tcpip The system detected the network card Realtek...Family PCI Fast Ethernet NIC - The packet scheduler miniport is disconnected from the network and the network configuration of the network card has been released. If the network card isn't disconnected, that probably means it's malfunctioning. Please contact your supplier for updated drivers.
4226 warn Tcpip TCP/IP has reached a safe limit on the number of concurrent TCP connection attempts.
4377 information NtServicePack Windows XP Hotfix KB873339 was installed.
6005 information EventLog The event log service has started. (boot)
6006 information EventLog The event log service has stopped. (shutdown)
6009 information EventLog Press ctrl, alt, delete keys (abnormal) to shut down
6011 information EventLog Change the NetBIOS name and DNS hostname of this machine from MACHINENAME to AA.
7000 mistake Service Control Manager The npkcrypt service failed to start due to the following error:
7031 mistake Service Control Manager Eset Service 服务意外地终止,这种情况已经出现了 1 次。以下的修正操作将在 0 毫秒内运行: 重新启动服务。
7035 信息 Service Control Manager xxx服务成功发送一个开始控件。
7036 信息 Service Control Manager xxx服务处于运行或停止等状态。
8033 信息 BROWSER 由于主浏览器已经停止,浏览器在 \Device\NetBT_Tcpip_{163DE7AB-92AE-499F-8340-B6358A4597CE} 网络上进行强制性的选举。
10000 错误 DCOM 无法启动 DCOM 服务器: {80EE4902-33A8-11D1-A213-0080C88593A5}。 错误:
15007 信息 HTTP 成功地添加了由 URL 前缀 http://*:2869/ 标识的命名空间的保留。
60054 信息 Setup 安装程序成功地完成了安装 Windows 内部版本 2600。
64002 信息 Windows File Protection 试图在被保护的系统文件 c:\windows\system32\quartz.dll 上进行文件替换。 为了维护系统稳定,这个文件被还原成原始版本。系统文件的文件版本是 6.5.2600.3497。
64008 警告 Windows File Protection


参考:http://blog.sina.com.cn/s/blog_66f4eb9f010149am.html







Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=325836430&siteId=291194637