I have a Vista Business 32-bit computer which shuts down after about 20
minutes with no warning of any kind, as if the power has suddenly been shut
off. Are there any log files I can look at to see if there is any indication
what the problem is?

My guess is that it is the power supply, but I am reluctant to buy a new
supply in case it is something else.



The computer is permanently on, (apart from a couple of hours every week),
and has been working correctly for nearly a year, so has probably been
switched on for over 7,000 hours. Is that the life expectancy of a power
supply?

Viv

As well as checking the internal fans for cleanliness, make certain that the
heat sink on the CPU is not impacted with dust/crud. This will prevent
proper cooling even if the fan is doing as it should.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience



"Viv" <Viv@xxxxxx> wrote in message
news0CD3C15-56A9-41CC-87A3-6E2485A53643@xxxxxx

>I have a Vista Business 32-bit computer which shuts down after about 20
> minutes with no warning of any kind, as if the power has suddenly been
> shut
> off. Are there any log files I can look at to see if there is any
> indication
> what the problem is?
>
> My guess is that it is the power supply, but I am reluctant to buy a new
> supply in case it is something else.
>
> The computer is permanently on, (apart from a couple of hours every week),
> and has been working correctly for nearly a year, so has probably been
> switched on for over 7,000 hours. Is that the life expectancy of a power
> supply?
>
> Viv

Click on Start Icon
Type Eventvwr on the start search box and enter (or Windows button + R) and type eventvwr
Check the windows logs ( Security - System & Application ) if there are any error logs post them here.
Then scroll down to application and service logs.. check for any errors there?
post them here too.
if you have checked for any errors that belongs to hardware you might also download Hiren CD as bootable CD when you boot up using this CD you will have great number of tools to test all of your hardware components...
You can use Memtest program to do so, as it is one of Hiren CD tools included there.

Please Post your feed back
Thanks
Mohammed J.H

I agree with the other posters: this is almost certainly an overheating
problem. I bet your processor fan is broken, or covered in dust, or the
processor heatsink is dusty.

You can do a reasonably good job with one of those compressed air cans,
although removing the fan and heatsink altogether for a proper clean is the
best approach. It also lets you renew the thermal paste between the
processor and heatsink, which can degrade over time.

SteveT

Thanks to the four people who have posted suggestions. As we are having
much hotter weather than usual overheating may well be the problem, although
the CPU and PSU fans seem to be working correctly, I will have a go at
running the computer with covers remved to get more air to it to see if that
makes any difference.

The errors noted in the log file are as follows :-

Log Name: System
Source: Microsoft-Windows-HttpEvent
Date: 28/07/2008 08:22:08
Event ID: 15016
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Business
Description:
Unable to initialize the security package Kerberos for server side
authentication. The data field contains the error number.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-HttpEvent"
Guid="{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}" EventSourceName="HTTP" />
<EventID Qualifiers="49152">15016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-07-28T07:22:08.537Z" />
<EventRecordID>520707</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="68" />
<Channel>System</Channel>
<Computer>Business</Computer>
<Security />
</System>
<EventData>
<Data Name="DeviceObject">\Device\Http\ReqQueue</Data>
<Data Name="SecurityPackage">Kerberos</Data>

<Binary>000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980</Binary>
</EventData>
</Event>

_____________________________________________________________________

Log Name: System
Source: EventLog
Date: 28/07/2008 08:21:51
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Business
Description:
The previous system shutdown at 00:08:18 on 28/07/2008 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-07-28T07:21:51.000Z" />
<EventRecordID>520701</EventRecordID>
<Channel>System</Channel>
<Computer>Business</Computer>
<Security />
</System>
<EventData>
<Data>00:08:18</Data>
<Data>28/07/2008</Data>
<Data>
</Data>
<Data>
</Data>
<Data>955524</Data>
<Data>
</Data>
<Data>
</Data>

<Binary>D807070001001C000000080012009800D807070000001B001700080012009800600900003C000000010000006009000000000000B004000001000000DEFFFFFF</Binary>
</EventData>
</Event>

____________________________________________________________________

Log Name: System
Source: Microsoft-Windows-HttpEvent
Date: 28/07/2008 09:10:43
Event ID: 15016
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Business
Description:
Unable to initialize the security package Kerberos for server side
authentication. The data field contains the error number.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-HttpEvent"
Guid="{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}" EventSourceName="HTTP" />
<EventID Qualifiers="49152">15016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-07-28T08:10:43.591Z" />
<EventRecordID>520824</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="56" />
<Channel>System</Channel>
<Computer>Business</Computer>
<Security />
</System>
<EventData>
<Data Name="DeviceObject">\Device\Http\ReqQueue</Data>
<Data Name="SecurityPackage">Kerberos</Data>

<Binary>000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980</Binary>
</EventData>
</Event>
___________________________________________________________________-

Log Name: Microsoft-Windows-CodeIntegrity/Operational
Source: Microsoft-Windows-CodeIntegrity
Date: 28/07/2008 09:11:21
Event ID: 3002
Task Category: (1)
Level: Error
Keywords:
User: SYSTEM
Computer: Business
Description:
Code Integrity is unable to verify the image integrity of the file
\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of
per-page image hashes could not be found on the system.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CodeIntegrity"
Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
<EventID>3002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>1</Task>
<Opcode>102</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2008-07-28T08:11:21.705Z" />
<EventRecordID>638</EventRecordID>
<Correlation />
<Execution ProcessID="3160" ThreadID="3244" />
<Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
<Computer>Business</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FileNameLength">58</Data>
<Data
Name="FileNameBuffer">\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys</Data>
</EventData>
</Event>

___________________________________________________________________

Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Microsoft-Windows-Diagnostics-Performance
Date: 28/07/2008 08:27:02
Event ID: 100
Task Category: Boot Performance Monitoring
Level: Critical
Keywords: Event Log
User: LOCAL SERVICE
Computer: Business
Description:
Windows has started up:
Boot Duration : 146480ms
IsDegradation : false
Incident Time (UTC) : 28/07/2008 07:21:12
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnostics-Performance"
Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
<EventID>100</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>4002</Task>
<Opcode>34</Opcode>
<Keywords>0x8000000000010000</Keywords>
<TimeCreated SystemTime="2008-07-28T07:27:02.512Z" />
<EventRecordID>964</EventRecordID>
<Correlation ActivityID="{00000000-E6C8-0000-0B3D-BB8382F0C801}" />
<Execution ProcessID="476" ThreadID="768" />
<Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
<Computer>Business</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="BootTsVersion">2</Data>
<Data Name="BootStartTime">2008-07-28T07:21:12.656Z</Data>
<Data Name="BootEndTime">2008-07-28T07:26:43.742Z</Data>
<Data Name="SystemBootInstance">110</Data>
<Data Name="UserBootInstance">104</Data>
<Data Name="BootTime">146480</Data>
<Data Name="MainPathBootTime">52880</Data>
<Data Name="BootKernelInitTime">23</Data>
<Data Name="BootDriverInitTime">14804</Data>
<Data Name="BootDevicesInitTime">3375</Data>
<Data Name="BootPrefetchInitTime">61559</Data>
<Data Name="BootPrefetchBytes">539680768</Data>
<Data Name="BootAutoChkTime">0</Data>
<Data Name="BootSmssInitTime">14417</Data>
<Data Name="BootCriticalServicesInitTime">1481</Data>
<Data Name="BootUserProfileProcessingTime">5907</Data>
<Data Name="BootMachineProfileProcessingTime">76</Data>
<Data Name="BootExplorerInitTime">7070</Data>
<Data Name="BootNumStartupApps">13</Data>
<Data Name="BootPostBootTime">93600</Data>
<Data Name="BootIsRebootAfterInstall">false</Data>
<Data Name="BootRootCauseStepImprovementBits">0</Data>
<Data Name="BootRootCauseGradualImprovementBits">8</Data>
<Data Name="BootRootCauseStepDegradationBits">0</Data>
<Data Name="BootRootCauseGradualDegradationBits">64</Data>
<Data Name="BootIsDegradation">false</Data>
<Data Name="BootIsStepDegradation">false</Data>
<Data Name="BootIsGradualDegradation">false</Data>
<Data Name="BootImprovementDelta">0</Data>
<Data Name="BootDegradationDelta">0</Data>
<Data Name="BootIsRootCauseIdentified">true</Data>
</EventData>
</Event>

I think the first one has appeared just before shutting down the last couple
of times but I only seem to have about half an hour in which to work with the
computer before it shuts down.

Viv




"Viv" wrote:

> I have a Vista Business 32-bit computer which shuts down after about 20
> minutes with no warning of any kind, as if the power has suddenly been shut
> off. Are there any log files I can look at to see if there is any indication
> what the problem is?
>
> My guess is that it is the power supply, but I am reluctant to buy a new
> supply in case it is something else.
>
> The computer is permanently on, (apart from a couple of hours every week),
> and has been working correctly for nearly a year, so has probably been
> switched on for over 7,000 hours. Is that the life expectancy of a power
> supply?
>
> Viv

"Viv" <Viv@xxxxxx> wrote in message
news:5E93D3B8-22F1-4B94-9848-8D31AB1FC60A@xxxxxx

>
> Thanks to the four people who have posted suggestions. As we are having
> much hotter weather than usual overheating may well be the problem,
> although
> the CPU and PSU fans seem to be working correctly, I will have a go at
> running the computer with covers remved to get more air to it to see if
> that
> makes any difference.
>
> The errors noted in the log file are as follows :-
>
> Log Name: System
> Source: Microsoft-Windows-HttpEvent
> Date: 28/07/2008 08:22:08
> Event ID: 15016
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: Business
> Description:
> Unable to initialize the security package Kerberos for server side
> authentication. The data field contains the error number.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-HttpEvent"
> Guid="{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}" EventSourceName="HTTP" />
> <EventID Qualifiers="49152">15016</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2008-07-28T07:22:08.537Z" />
> <EventRecordID>520707</EventRecordID>
> <Correlation />
> <Execution ProcessID="4" ThreadID="68" />
> <Channel>System</Channel>
> <Computer>Business</Computer>
> <Security />
> </System>
> <EventData>
> <Data Name="DeviceObject">\Device\Http\ReqQueue</Data>
> <Data Name="SecurityPackage">Kerberos</Data>
>
> <Binary>000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980</Binary>
> </EventData>
> </Event>
>
> _____________________________________________________________________
>
> Log Name: System
> Source: EventLog
> Date: 28/07/2008 08:21:51
> Event ID: 6008
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: Business
> Description:
> The previous system shutdown at 00:08:18 on 28/07/2008 was unexpected.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="EventLog" />
> <EventID Qualifiers="32768">6008</EventID>
> <Level>2</Level>
> <Task>0</Task>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2008-07-28T07:21:51.000Z" />
> <EventRecordID>520701</EventRecordID>
> <Channel>System</Channel>
> <Computer>Business</Computer>
> <Security />
> </System>
> <EventData>
> <Data>00:08:18</Data>
> <Data>28/07/2008</Data>
> <Data>
> </Data>
> <Data>
> </Data>
> <Data>955524</Data>
> <Data>
> </Data>
> <Data>
> </Data>
>
> <Binary>D807070001001C000000080012009800D807070000001B001700080012009800600900003C000000010000006009000000000000B004000001000000DEFFFFFF</Binary>
> </EventData>
> </Event>
>
> ____________________________________________________________________
>
> Log Name: System
> Source: Microsoft-Windows-HttpEvent
> Date: 28/07/2008 09:10:43
> Event ID: 15016
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: Business
> Description:
> Unable to initialize the security package Kerberos for server side
> authentication. The data field contains the error number.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-HttpEvent"
> Guid="{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}" EventSourceName="HTTP" />
> <EventID Qualifiers="49152">15016</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2008-07-28T08:10:43.591Z" />
> <EventRecordID>520824</EventRecordID>
> <Correlation />
> <Execution ProcessID="4" ThreadID="56" />
> <Channel>System</Channel>
> <Computer>Business</Computer>
> <Security />
> </System>
> <EventData>
> <Data Name="DeviceObject">\Device\Http\ReqQueue</Data>
> <Data Name="SecurityPackage">Kerberos</Data>
>
> <Binary>000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980</Binary>
> </EventData>
> </Event>
> ___________________________________________________________________-
>
> Log Name: Microsoft-Windows-CodeIntegrity/Operational
> Source: Microsoft-Windows-CodeIntegrity
> Date: 28/07/2008 09:11:21
> Event ID: 3002
> Task Category: (1)
> Level: Error
> Keywords:
> User: SYSTEM
> Computer: Business
> Description:
> Code Integrity is unable to verify the image integrity of the file
> \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set
> of
> per-page image hashes could not be found on the system.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-CodeIntegrity"
> Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
> <EventID>3002</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>1</Task>
> <Opcode>102</Opcode>
> <Keywords>0x8000000000000000</Keywords>
> <TimeCreated SystemTime="2008-07-28T08:11:21.705Z" />
> <EventRecordID>638</EventRecordID>
> <Correlation />
> <Execution ProcessID="3160" ThreadID="3244" />
> <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
> <Computer>Business</Computer>
> <Security UserID="S-1-5-18" />
> </System>
> <EventData>
> <Data Name="FileNameLength">58</Data>
> <Data
> Name="FileNameBuffer">\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys</Data>
> </EventData>
> </Event>
>
> ___________________________________________________________________
>
> Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
> Source: Microsoft-Windows-Diagnostics-Performance
> Date: 28/07/2008 08:27:02
> Event ID: 100
> Task Category: Boot Performance Monitoring
> Level: Critical
> Keywords: Event Log
> User: LOCAL SERVICE
> Computer: Business
> Description:
> Windows has started up:
> Boot Duration : 146480ms
> IsDegradation : false
> Incident Time (UTC) : 28/07/2008 07:21:12
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-Diagnostics-Performance"
> Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
> <EventID>100</EventID>
> <Version>1</Version>
> <Level>1</Level>
> <Task>4002</Task>
> <Opcode>34</Opcode>
> <Keywords>0x8000000000010000</Keywords>
> <TimeCreated SystemTime="2008-07-28T07:27:02.512Z" />
> <EventRecordID>964</EventRecordID>
> <Correlation ActivityID="{00000000-E6C8-0000-0B3D-BB8382F0C801}" />
> <Execution ProcessID="476" ThreadID="768" />
>
> <Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
> <Computer>Business</Computer>
> <Security UserID="S-1-5-19" />
> </System>
> <EventData>
> <Data Name="BootTsVersion">2</Data>
> <Data Name="BootStartTime">2008-07-28T07:21:12.656Z</Data>
> <Data Name="BootEndTime">2008-07-28T07:26:43.742Z</Data>
> <Data Name="SystemBootInstance">110</Data>
> <Data Name="UserBootInstance">104</Data>
> <Data Name="BootTime">146480</Data>
> <Data Name="MainPathBootTime">52880</Data>
> <Data Name="BootKernelInitTime">23</Data>
> <Data Name="BootDriverInitTime">14804</Data>
> <Data Name="BootDevicesInitTime">3375</Data>
> <Data Name="BootPrefetchInitTime">61559</Data>
> <Data Name="BootPrefetchBytes">539680768</Data>
> <Data Name="BootAutoChkTime">0</Data>
> <Data Name="BootSmssInitTime">14417</Data>
> <Data Name="BootCriticalServicesInitTime">1481</Data>
> <Data Name="BootUserProfileProcessingTime">5907</Data>
> <Data Name="BootMachineProfileProcessingTime">76</Data>
> <Data Name="BootExplorerInitTime">7070</Data>
> <Data Name="BootNumStartupApps">13</Data>
> <Data Name="BootPostBootTime">93600</Data>
> <Data Name="BootIsRebootAfterInstall">false</Data>
> <Data Name="BootRootCauseStepImprovementBits">0</Data>
> <Data Name="BootRootCauseGradualImprovementBits">8</Data>
> <Data Name="BootRootCauseStepDegradationBits">0</Data>
> <Data Name="BootRootCauseGradualDegradationBits">64</Data>
> <Data Name="BootIsDegradation">false</Data>
> <Data Name="BootIsStepDegradation">false</Data>
> <Data Name="BootIsGradualDegradation">false</Data>
> <Data Name="BootImprovementDelta">0</Data>
> <Data Name="BootDegradationDelta">0</Data>
> <Data Name="BootIsRootCauseIdentified">true</Data>
> </EventData>
> </Event>
>
> I think the first one has appeared just before shutting down the last
> couple
> of times but I only seem to have about half an hour in which to work with
> the
> computer before it shuts down.
>
> Viv
>
>
>
>
> "Viv" wrote:
>

>> I have a Vista Business 32-bit computer which shuts down after about 20
>> minutes with no warning of any kind, as if the power has suddenly been
>> shut
>> off. Are there any log files I can look at to see if there is any
>> indication
>> what the problem is?
>>
>> My guess is that it is the power supply, but I am reluctant to buy a new
>> supply in case it is something else.
>>
>> The computer is permanently on, (apart from a couple of hours every
>> week),
>> and has been working correctly for nearly a year, so has probably been
>> switched on for over 7,000 hours. Is that the life expectancy of a power
>> supply?
>>
>> Viv

The fans may well be turning, but if the CPU heatsink and power supply are
full of dust, they will have little or no effect.

Removing the side of the case will make a small difference maybe, but it
also changes the flow pattern inside of the case which can make hard drives
run hotter than they should..


--
Mike Hall - MVP
How to construct a good post..
http://dts-l.com/goodpost.htm
How to use the Microsoft Product Support Newsgroups..
http://support.microsoft.com/default...help&style=toc
Mike's Window - My Blog..
http://msmvps.com/blogs/mikehall/default.aspx