Vista - WHEA Event ID 5

I have looked for this Event ID 5 here:
http://msdn2.microsoft.com/en-us/library/aa939074.aspx but without success.
It shows in the Kernel-WHEA log under Applications and Services--Windows.
Thanks for any help.

Here is the Event Log detailed report:

- System

- Provider

[ Name] Microsoft-Windows-Kernel-WHEA
[ Guid] {7b563579-53c8-44e7-8236-0f87b9fe6594}

EventID 5

Version 0

Level 4

Task 0

Opcode 0

Keywords 0x4000000000000000

- TimeCreated

[ SystemTime] 2007-09-21T15:20:49.904Z

EventRecordID 237

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel Microsoft-Windows-Kernel-WHEA


- Security

[ UserID] S-1-5-18


- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable
5441424CEC00000004000000FE6FF5E89C91C54CBA8865ABE14913BB000000000000000000000000000000000200000008030000576865610000000078067485900C7485B18BCE2DD7BD0E45B9AD9CF4EBD4F890000000000000000000000000000000000100000008030000576865610100000068037485C00D7485FF89AD5BE6B7C942814ACF2485D6E98A000000000000000000000000000000000100000008030000576865610300000008107485F00E74851FC093CF161AFC4DB8BC9C4DAF67C1040000000000000000000000000000000001000000400200005768656104000000C01D7485780F7485

"John" <me@xxxxxx> wrote in message
news:ebUAbsG$HHA.4584@xxxxxxWHEA-Windows Hardware Error Architecture

Coupled with Event ID5, the error is indicative of a hardware issue. Start
by checking manufacturer websites for all your hardware, both internal and
external for the latest Vista compatible drivers for your various devices.

--
Michael Solomon
Backup is a PC user's best friend
DTS-L.Org: http://www.dts-l.org/

Thanks, Michael, I appreciate your help.

Shouldn't a hardware issue show up in Device Manager? Unfortunately the WHEA
report doesn't specify what piece of hardware. Any idea as to how the WHEA
detects hardware problems? Is it possible to have a false detection?


Thanks again.


"Michael Solomon" <user@#notme.com> wrote in message
news:9D8250A3-BB1B-4065-8651-17F34087A35A@xxxxxx

"John" <me@xxxxxx> wrote in message
news:#V8XpoI$HHA.5328@xxxxxxYou're welcome.

No, a hardware issue will only show up in device manager if there is an
issue with the device itself or something preventing it from functioning.
Compatibility is a broad range of things and is a moving target. That's why
you need to make sure drivers are compatible and up to date. Also, this is
a relatively new operating system, many devices came with drivers that only
supported basic functionality and were only expanded later with later
updated drivers. Other things have changed, you have other devices, other
software, all of which can create issues that may need to be addressed with
updated drivers.

Obviously, if a user is having no issues, they probably should leave well
enough alone. But that said, as you expand your system, add devices, add
other software, increase your own functionality, using devices for different
things and as other devices are updated as well, all these things can impact
any other device on the system. It may be quite capable of functioning but
under certain circumstances, it might crash or cause some kind of system
error. It will look fine in Device Manager and it will seem fine until the
issue presents itself.
--
Michael Solomon
Backup is a PC user's best friend
DTS-L.Org: http://www.dts-l.org/

John

A better way to post these event viewer reports is to double click the event
in the center screen. This will open a separate window with a Copy Button.
Click the Copy button and paste the results in your next post.

On my system, this eventid 5, Level4 shows as an informational message that
just shows that the WHEA was started successfully?

Are you having any hardware related problems?

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"John" <me@xxxxxx> wrote in message
news:ebUAbsG$HHA.4584@xxxxxx

Thanks for the help, Ronnie. All seems to be working. My concern is this
part of the ID5 error report:
- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable

It would appear there are 4 sources of errors... somewhere. Am I reading the
data incorrectly?

Thanks again.


"Ronnie Vernon MVP" <rv@xxxxxx> wrote in message
news:1E2A798F-5431-4DAF-B51F-908353935B93@xxxxxx

"John" <me@xxxxxx> wrote in message
news:%239RE34T$HHA.1184@xxxxxxYes, it is saying that there are 4 sources being monitored for errors. I
have the same exact entries that you are showing, including the exact source
table. As long as you don't see a red "X" icon on one of the events, you are
in good shape.

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"John" <me@xxxxxx> wrote in message
news:%239RE34T$HHA.1184@xxxxxx