Windows event ID 6008

My computer Crashes and I get a screen with Static, computer shuts down, or I get lines across the screen.
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider
Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated
SystemTime="2012-06-02T02:45:23.000000000Z" />
<EventRecordID>65331</EventRecordID>
<Channel>System</Channel>
<Computer>Christopher-PC</Computer>
<Security
/>
</System>
- <EventData>
<Data>10:43:07 PM</Data>
<Data>‎6/‎1/‎2012</Data>
<Data
/>
<Data
/>
<Data>27950</Data>
<Data
/>
<Data
/>
<Binary>DC0706000500010016002B0007002201DC0706000600020002002B0007002201080700003C000000010000000807000000000000580200000100000000000000</Binary>
</EventData>
</Event>
any ideas?

Hi,
When the Windows system shut down unexpectedly, the Windows system create a Event which is ID 6008 in System log. The event provides the date and time for last unexpected shut down.
For more information:
How to check unexpectedly shut down on Windows (Event ID 6008)
http://terrytlslau.tls1.cc/2012/05/how-to-check-unexpectedly-shut-down-on.html
Event ID 6008 (Windows 2008 R2 & Exchange 2010 SP1)
http://social.technet.microsoft.com/Forums/lv-LV/exchange2010/thread/0f2bb539-1871-4e27-a8c2-9a0778e21656
Regards, Terry | My Blog: http://terrytlslau.tls1.cc
This posting is provided “AS IS”
with no warranties, and confers no rights.

Similar Messages

Windows 7 Freeze with EVENT ID 6008

My computer freeze up at whatever thing i was doing, with no BSOD. Mouse can't move, tapping keyboard does do a thing either, only manually reboot the computer fixes the freezing.
then i check my Event Viewer:
it has many of this event id :
Event ID :6008
and
Event ID : 1000
Error Code:126
Tried memtest x86 with no errors, hard disk checked without bad sectors.
Help?

Check :
http://support.microsoft.com/kb/326564/en-us
http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/infrequent-windows-7-crashes-related-to-event-id/8f4ea81a-2798-4f48-ad01-c30afdb86a77
Arnav Sharma |
Facebook | Twitter Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other
community members reading the thread.

Windows 8.1 Event ID 6008 when shutting down normally

Hi, I have this problem starting 11 Feb, whenever i shut down my pc normally, the event ID 6008 is logged with Event ID 41
This happend everytime i shutdown... Please help. please. really need working solutions.
Thanks!

Stuart
Please run a window performance recorder trace using the re-boot configuration and upload the event viewer logs
In order to diagnose your problem we need to run Windows performance toolkit the instructions for which can be found in this
wiki
If you have any questions feel free to ask
Please provide us with your Event Viewer administrative logs by following these steps:
Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file to Onedrive or a file sharing service and put a link to it in your next post
If you have updated to win 8.1 and you get the error message "the system cannot find the file specified" it is a known problem.
The work around is to edit the registry. If you are not comfortable doing this DONT. If you are, backup the key before you do
Press Win+"R" and input regedit
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels. Delete "Microsoft-Windows-DxpTaskRingtone/Analytic"
here : http://www.mediafire.com/download/xlwdssnudbwv8j7/Error.evtx

AZURE VM Shutdown unexpected with event id 6008

Today my Azure vm shutdown unexpectedly when I review the event log there is event id 6008. How I know the exact reson of shutdown

Hi,
In addition, the shutdown that you have noticed in the event log may be due to the Windows Azure platform deploying an update that required a reboot of the physical machine
to provides a reliable, efficient and secure platform for hosting your applications. This type pre-maintenance notification is provided to users who have VMs which are not running in an availability set.
You can check if you have received the notification with the Account administrators. Besides, it is recommended to add VMs into availability sets if you don’t want the VMs shutdown at the same time.
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Lots of Anyconnect Error Message in Windows Event Log

Hi Community.
We have lots of Anyconnect Error Messages in the Windows Event Log. Following two examples.
Can anyone tell me why these errors appears and how do I fix them ? I already installed the newest Anyconnect on my machine.
Thanks in advance and Kind Regards Patrick
Example 1
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97564</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::logProbeFailure File: .\NetEnvironment.cpp Line: 1432 Invoked Function: CHttpProbeAsync::SendProbe Return Code: -27066354 (0xFE63000E) Description: HTTP_PROBE_ASYNC_ERROR_CANNOT_CONNECT HTTP (host: 109.164.211.237)</Data>
</EventData>
Example 2
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97565</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::TestAccessToSG File: .\NetEnvironment.cpp Line: 1385 Invoked Function: CNetEnvironment::analyzeHttpResponse Return Code: -28966899 (0xFE46000D) Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target</Data>
</EventData>

HI and welcome to Discussions,
in my personal opinion there is not much for you to worry about.
The 'Windows Tool for the elimination of malware' is nothing you miss as long as you have a decent Anti-Virus Software running.
The update for the IE 7 might be missing an installed IE 7, which can do by downloading it yourself from Microsofts webpage.
If you don't use the IE but something like Firefox or Opera or Safari, than don't bother with these update.
Stefan

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

Window.event does not working in Firefox 4.0 and also window.event.ctrlKey ?

hi,
I'm using Microsoft virtual earth map 6.2 (bing Map) in my application.On map showing number of images.On Each image there is onClick event that select image if user press left mouse button while holding Ctrl key .For this I wrote java-script function where I'm using Window.event.button (To check mouse button) and window.event. ctrlKey(To check control key) But these both are not working in Firefox 4.0 ,the same is working in Firefox 3.6X version perfectly.
Thanks

The same problem is in Firefox 5.0 version too

Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

Hi,
I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
again and again i.e. Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
Most recent error details: The RPC server is unavailable.
Please suggest me how to resolve this so that my management server will again come back in healthy state.
Thanks
Abhishek

Hi Abhishek,
As i mentioned earlier the Alert resolution says the same points.
Can you give details on the below ?
Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
Did you recently configure any new alert where you mentioned "Dhcpadminevents"
as a event log location ?
If yes then what is the target you selected for the rule / monitor there ?
Can you post the results for analysis ?
Gautam.75801

While Installation of 11g database creation time error ORA-28056: Writing audit records to Windows Event Log failed Error

Hi Friends,
OS = Windows XP 3
Database = Oracle 11g R2 32 bit
Processor= intel p4 2.86 Ghz
Ram = 2 gb
Virtual memory = 4gb
I was able to install the oracle 11g successfully, but during installation at the time of database creation I got the following error many times and I ignored it many times... but at 55% finally My installation was hanged nothing was happening after it.....
ORA-28056: Writing audit records to Windows Event Log failed Error and at 55% my Installation got hung,,,, I end the installation and tried to create the database afterward by DBCA but same thing happened....
Please some one help me out, as i need to install on the same machine .....
Thanks and Regards

AAP wrote:
Thanks Now I am able to Create a database , but with one error,
When I created a database using DBCA, at the last stage I got this error,
Database Configuration Assistant : Warning
Enterprise Manager Configuration Failed due to the Following error Listener is not up or database service is not registered with it. Start the listener & Registered database service & run EM Configuration Assistant again....
But when I checked the listener was up.....
Now what was the problem, I am able to connect and work through sqlplus,
But I didnt got the link of EM and when try to create a new connection in sql developer it is giving error ( Status : failure - Test Failed the Network Adapter could not establish the connection )
Thanks & Regards
Creation of the dbcontrol requires a connection via the listener. When configuring the dbcontrol as part of database creation, it appears that the dbcontrol creation step runs before the dynamic registration of the databsase with the listener is complete. Now that the database itself is completed and enough time (really, just a minute or two) has passed to allow the instance to register, use dbca or emca to create the dbcontrol.
Are you able to get a sqlplus connection via the listener (sqlplus scott/tiger@orcl)? That needs to be the first order of business.

Urgent help needed on writing errors in to windows events application logs

Hi all,
we have web based application. Whenever there is critical errors encounters in our application we need to write that errors in to windows
event viewer, application logs. Please help me on how to do this.
do we have any specific API for this ?
thanks in advance
Shivakumar

You should use WinAPI to do so. Asking in JNI forum (or specialized WinAPI forum) for more details is good idea I think.

Illustrator CC crashes on startup(windows event viewer message included)

Windows event viewer shows like this...
System
Provider
[ Name]
Application Error
EventID
1000
[ Qualifiers]
0
Level
2
Task
100
Keywords
0x80000000000000
TimeCreated
[ SystemTime]
2013-12-09T06:35:08.000000000Z
EventRecordID
71639
Channel
Application
Computer
HPNB-dhleeNB
Security
EventData
Illustrator.exe
17.0.0.260
52822426
ntdll.dll
6.1.7601.18247
521ea8e7
c0000374
000ce753
a690
01cef4a8afb2dd09
C:\Program Files (x86)\Adobe\Adobe Illustrator CC\Support Files\Contents\Windows\Illustrator.exe
C:\Windows\SysWOW64\ntdll.dll
0b8a3ab7-609c-11e3-8e0d-005056c00008
Please help.

Problem solved.   Refer to below.
3 posts
Nov 25, 2013
2.AlanDrVita,
Nov 26, 2013 9:16 AM   in reply to outdoorz
Report
I may have been able to resolve my issue. I held shift while opening Illustrator and opened it in a bare bones mode, then closed it and reopened it without getting the error message. Good luck to you.
Was this helpful? Yes   No

Error in starting nidevldu and nipxirmu services (windows event viewer)

A computer running Windows XP SP1 and a Visual basic (V6.0) application that I've developped had crashed several times. I've seen lots of errors in the Windows event viewer saying that the nidevldu and nipxirmu services were trying to start (exact french message : Le service nidevldu est en attente de démarrage et Le service nipxirmu est en attente de démarrage). These messages are real errors (not warning or informations).
I use a 6034E PCI card, Visual basic V6.0 and NI-DAQ 7.4.
The crashes I've seen may be linked with this problem.
Is there a solution?

Hi,
I think that you are not going to be starting and stopping the devldu service in normal circumstances... due to crashes !
The firsts steps you have to focus on is to optimize your program in order to avoid crashes, which is not a normal way of work I guess. Then you will be able to avoid these messages!
Regards,
David D. - Application Engineer - NI

Can't be modify the value of window.event.keyCode in IE 11(Windows 7 Premium) where as in IE 8 (Windows XP) its working fine

The following is the sample code whcih I have used to check.<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
pageEncoding="ISO-8859-1"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Sample Form</title>
<script type="text/javascript">
function keyDownEvent() {
alert("KD:"+window.event.keyCode);
window.event.keyCode=0;
alert("KD:"+window.event.keyCode);
function keyPressEvent() {
alert("KP:"+window.event.keyCode);
window.event.keyCode=0;
alert("KP:"+window.event.keyCode);
</script>
</head>
<body>
<form>
<input type="text" onkeydown="keyDownEvent()" onkeypress="keyPressEvent()" />
</form>
</body>
</html>
Kindly post your answers, am waiting for answers...

This is the TechNet Forum for questions regarding
Internet Explorer 8, 9, 10, 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions.
For better assistance please ask for help in the MSDN
IE Development Forums.
Thanks & Regards,
Vincenzo Di Russo
Microsoft® MVP Windows Internet Explorer, Windows & Security Expert - since 2003.
Moderator in the Microsoft Community and TechNet Forums
My MVP Profile

Cannot open eventlog service on computer '.'. (Windows Event Log service doesn't exist)

This problem used to be solved after moving a computer object into the appropriate OU and restarting, and if that didn't work, it used to be solved when uninstalling and reinstalling Microsoft FEP (restarts in-between). Now, the only way to access
event logs is by logging in as a domain admin, or by accessing event logs through remote manage.
If a machine object is added to the domain, dropped into the computers container, and restarted, we get this error when going into Computer Management:
"Cannot open eventlog service on computer '.'."
The original problem was noticed on our VMs, but I also tried it with a Lenovo Windows 7 build out of the box, added it to our domain, and the problem occurred. When our desktops are built, SCCM's task manager drops it into the appropriate OU immediately,
so desktops don't have issues. With VMs, they are dropped into the computers container and restarted, so once this problem occurs, it almost never leaves. SOMETIMES, removing it from the domain solves the problem, but not always.
I've tried all of the suggestions I've seen online and none of them have worked, such as cleaning up the policies (through registry, and the appropriate system folders), adding the proper NTFS permissions on the RtBackup folder and %SystemRoot%\System32\winevt\logs, netsh
winsock reset, cleanboot, etc.
I did notice that I'm unable to find the NT Service\EventLog user group. I wanted to add it to %systemroot%\system32\winevt\logs, but the group cannot be found on the local computer. Even if that's the problem, why is it missing?
It doesn't seem like anyone else on the internet gets this exact error.

Hi Kate!
Yes, the Windows Event Log service is missing. I had already tried your method (#3), and I did try it again. This is the error I get:
"The specified service already exists."
If you check services.msc, it's still not there. If you try to start the Event Viewer, the same error comes up:
Cannot open eventlog service on computer '.'.
Hi,
Please check for the existence of this key. If not found, create a *.reg file from another machine and import.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
Then, check the issue again.
If this doesn't work, let's run System file checker tool to repair system:
Run SFC command in elevated command prompt
SFC /scannow
Any error message, please post here to let me know.
Keep post.
Kate Li
TechNet Community Support

Connection Timeout Expired in Windows Event Logs

I just recently installed SharePoint 2013 SP1 on a Windows Server 2008 R2 SP1 server and have been receiving this error message in the Windows Event logs:
Cannot connect to SQL Server. <database server name> not found. Additional error information from SQL Server is included below.
Connection Timeout Expired. The timeout period elapsed during the post-login phase. The connection could have timed out while waiting for server to complete the login process and respond; Or it could have timed out while attempting to create
multiple active connections. The duration spent while attempting to connect to this server was - [Pre-Login] initialization=12; handshake=6; [Login] initialization=0; authentication=0; [Post-Login] complete=14000;
I have never seen this error message before in my life on any prior installation of SharePoint that I have ever done. It is only occurring on this one particular installation of SharePoint. The environment is corporate built, so I have no idea
as to how to troubleshoot or determine the root cause of this error message.
I looked at the value of the database-connection-timeout in stsadm and it gets back a value of 15, however, I am unable to alter the database connection timeout using stsadm since I either get an "Object reference not sent to an instance of an object"
error message or "This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To connect this server to the server farm, use the SharePoint
Products Configuration Wizard, located on the Start menu in Microsoft SharePoint 2010 Products."
Please advise.

What is specification of your SQL server? i think its more CPU, RAM, I/O issue with SQL server.
under which account you are running the stsadm command?
check this one
http://stackoverflow.com/questions/21230927/sql-azure-the-timeout-period-elapsed-during-the-post-login-phase
may be you fall in this bug
http://connect.microsoft.com/VisualStudio/feedback/details/821803/connection-timeout-expired-the-timeout-period-elapsed-during-the-post-login-phase
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Windows event ID 6008

Similar Messages

Maybe you are looking for