1. Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Random Restarts - Windows 7-64 bit

Discussion in 'General Hardware' started by snuffnchess, Nov 29, 2012.

  1. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    even if for some reason it is telling the computer to pull up programs that are no longer installed?

    In the event viewer.... i see an error referring to gotomypc. I uninstalled that program close to a year ago.... it shouldnt still keep trying to pull it up... ya know?

    Maybe there is a different program that i should use to "clean" that kind of thing up??
     
  2. TheMailMan78

    TheMailMan78 Big Member

    Joined:
    Jun 3, 2007
    Messages:
    21,004 (7.88/day)
    Thanks Received:
    7,546
    Check your start up programs. There might be an old entry left over. If you gotta try one of those try Auslogic or CCleaner. MAKE A BACKUP of the registry before you run those.
     
  3. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    Thanks... I will look into those programs. I also noticed this message in the Event Viewer... I dont really understand what much of it means:


    Log Name: Application
    Source: Microsoft-Windows-User Profiles Service
    Date: 11/29/2012 12:06:26 PM
    Event ID: 1530
    Task Category: None
    Level: Warning
    Keywords:
    User: SYSTEM
    Computer: MarksTC
    Description:
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

    DETAIL -
    5 user registry handles leaked from \Registry\User\S-1-5-21-1541781749-630166740-1203472716-1000:
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\My
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\CA
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\Disallowed

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2012-11-29T20:06:26.007338200Z" />
    <EventRecordID>106519</EventRecordID>
    <Correlation ActivityID="{032B1A48-F800-0001-6467-CD6468CECD01}" />
    <Execution ProcessID="864" ThreadID="1156" />
    <Channel>Application</Channel>
    <Computer>MarksTC</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    <EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">5 user registry handles leaked from \Registry\User\S-1-5-21-1541781749-630166740-1203472716-1000:
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\My
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\CA
    Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\Disallowed
    </Data>
    </EventData>
    </Event>
     
    Last edited: Nov 29, 2012
  4. TheMailMan78

    TheMailMan78 Big Member

    Joined:
    Jun 3, 2007
    Messages:
    21,004 (7.88/day)
    Thanks Received:
    7,546
    Are you using windows 8 by chance? I get that same thing in windows 8 on shut down.
     
  5. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    I checked the msconfig startup section.... as well as the startup folder... there is no reference to gotomypc there.
     
  6. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    no... using windows 7 home premium
     
  7. TheMailMan78

    TheMailMan78 Big Member

    Joined:
    Jun 3, 2007
    Messages:
    21,004 (7.88/day)
    Thanks Received:
    7,546
    You can do a find in the registry if you like. Just be sure to make a backup of it before you do. Thats no mans land so dont delete something or edit something unless you are SURE what you are doing.
     
  8. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    I was able to eliminate most of the errors that are coming up in the Event Viewer at startup.

    One of the problems is related to our UPS software, and there is a tech calling me back shortly on that. The one that still remains is:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
    <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
    <EventID>1530</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2012-11-30T20:05:18.581903500Z" />
    <EventRecordID>107219</EventRecordID>
    <Correlation />
    <Execution ProcessID="988" ThreadID="5560" />
    <Channel>Application</Channel>
    <Computer>MarksTC</Computer>
    <Security UserID="S-1-5-18" />
    </System>
    - <EventData Name="EVENT_HIVE_LEAK">
    <Data Name="Detail">5 user registry handles leaked from \Registry\User\S-1-5-21-1541781749-630166740-1203472716-1000: Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000 Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000 Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\My Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\CA Process 504 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1541781749-630166740-1203472716-1000\Software\Microsoft\SystemCertificates\Disallowed</Data>
    </EventData>
    </Event>

    I cannot figure out how to eliminate this error.... any thoughts?
     
  9. TheMailMan78

    TheMailMan78 Big Member

    Joined:
    Jun 3, 2007
    Messages:
    21,004 (7.88/day)
    Thanks Received:
    7,546
    No clue man. However are you still bombing or did we fix the issue?
     
  10. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    Well, i didnt have it happen today...... yet.... so as of right now we are doing okay... i hope.

    Just trying to resolve all the errors i can, just in case that is what is causing it... ya know?
     
  11. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    Whelp, the random restarts are back......

    I am attaching a copy of the dmp file here..... looks like it is being caused by driver hal.dll

    WTF is that?
     

    Attached Files:

  12. TheMailMan78

    TheMailMan78 Big Member

    Joined:
    Jun 3, 2007
    Messages:
    21,004 (7.88/day)
    Thanks Received:
    7,546
  13. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    But I am not getting the error when i turn the PC on.... it is happening after the PC is already on and doing stuff....
     
  14. TechnikL New Member

    Joined:
    Apr 13, 2011
    Messages:
    3 (0.00/day)
    Thanks Received:
    0
    probably bad memory

    Hey snuff,

    this type of random restart along with the other errors you have described screams bad memory to me.

    Run a memtest and see if it shows any errors, and/or take out some RAM (eg. if you have 8GB take out 4GB and see how it runs, if you have 6GB take out 2GB)

    Other things that usually causes this type of random restart is power supply, or bad drivers, or failing HDD but those are less likely.

    Exhaust testing the memory and report back :)
     
  15. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    Thanks...... will run memtest
     
  16. snuffnchess New Member

    Joined:
    Nov 29, 2012
    Messages:
    21 (0.03/day)
    Thanks Received:
    0
    Ran Memtest and no errors were found...... How could i diagnose a power supply issue, other than replacing it???
     
  17. lyndonguitar

    lyndonguitar I play games

    Joined:
    Apr 1, 2010
    Messages:
    1,629 (1.00/day)
    Thanks Received:
    338
    Location:
    Philippines
    I don't think theres any other way of stress testing or diagnosing it. The only way is trial and error with the PSU, You could borrow a PSU from a friend and test it, if it doesn't restart for awhile then its the PSU.
     
  18. TheMailMan78

    TheMailMan78 Big Member

    Joined:
    Jun 3, 2007
    Messages:
    21,004 (7.88/day)
    Thanks Received:
    7,546
    Its software. Im telling you that you gotta reinstall windows man.
     

Currently Active Users Viewing This Thread: 1 (0 members and 1 guest)

Share This Page