locked
Errors during shutdown?

    Question

  • I had been getting probable crashes during shutdown--something about Date and Time but kept forgetting to try to investigate it because it was during shutdown.   Today I got a new one in the same circumstance--something about Charms.

    I tried restarting and looking for details about these with Event Viewer, e.g. Find but if it's there I don't know how to find it and that won't be helped by my strong aversion to its new UI anyway.   (Somehow it seems even more unusable and irritating than W7's which is horrible enough to me compared to XP's.)

    I just realized.   Maybe this is why Shut Down is hidden functionality?   <eg>

    ICIM my usual method is to use an elevated cmd window but it's not the only one and I'm not sure if the crashes only happen when using one method or what other factors might be involved for making a definite repro case.

    I have not reported any of this using the feedback tool since it is so unclear.   I'm curious to know though if there will have been some telemetry sent back about this?   If I can remember I'll try checking the router and modem lights during shutdown.

     

    ---

    Thursday, November 03, 2011 4:10 PM

Answers

  • Hey Robert,

     

    If you would like to take these events and submit them as feedback for a crash you are receiving, the following steps will allow you to save those events (essentially exporting their information):

    • Enter Event Viewer and view the events that are referenced above
    • Ctrl + Click the events in question to select them all in the list
    • Right click any of the selected events
    • Click Save Selected Events...

     

    This will allow you to save the selected events as one .evtx file that can be attached to the feedback submission on the last page of the process that has the Add... button available.


    Steven
    Wednesday, November 09, 2011 10:58 PM
    Moderator

All replies

  • Hey Robert,

     

    You may find information regarding this problem in the Reliability Monitor. Warnings, informational events, critical events, etc. are captured there and sorted chronologically. You'll need to click the day that you want to view the entries for in the top portion of the window to display the event information in the bottom portion of the window.

     

    The Reliability Monitor can be found in the Action Center under the expanded Maintenance section, but I find that it is easier to get to by entering the Start screen and typing Reliability Monitor and then clicking the Settings listing in the right column. The entry to "View reliability history" will take you into the Reliability Monitor.

     

    Hope that helps.


    Steven
    Saturday, November 05, 2011 12:26 AM
    Moderator
  • You may find information regarding this problem in the Reliability Monitor.

    I find that it is easier to get to by entering the Start screen and typing Reliability Monitor and then clicking the Settings listing in the right column. The entry to "View reliability history" will take you into the Reliability Monitor. 


    Also in W7 (which I am in now.)   I did not know that.   Thanks!   Much easier to deal with than Event Viewer.

    BTW I told BrianUp in another thread that my Shutdown crashes seem to have stopped since I discovered the "proper" way to do  Restart (e.g. using the Settings "charm".)

    Thanks, again.

     

    Robert
    ---

    Saturday, November 05, 2011 3:18 AM
  • Hey Robert,

     

    Thanks for the update and I'm glad to have helped!


    Steven
    Sunday, November 06, 2011 1:53 AM
    Moderator
  • I had been getting probable crashes during shutdown--something about Date and Time

     

    I tried restarting and looking for details about these with Event Viewer, e.g. Find but if it's there I don't know how to find it


    I have not reported any of this using the feedback tool since it is so unclear.   I'm curious to know though if there will have been some telemetry sent back about this?   If I can remember I'll try checking the router and modem lights during shutdown.

     

    ---



    The crash is actually in explorer.exe  Clock and Time.   I had another one today after the "proper" Restart procedure.

    No sign of this comes up in Reliability History so, as I suspected, I think I am going to need some guidance on how to interpret Event Viewer UI to check if is there and to check if any telemetry gets sent when it happens.  It is too hard to tell just from router and modem lights whether anything significant is happening that way after the crash is noticed.

    BTW following the crash today I updated my n-Trig firmware via W7.  It seems to have made a difference for W8 too (e.g. for some of my touch screen problems.)   So whatever symptoms that follow related to this may not be the same as they were previously.

    Nevertheless, whatever info about the crashes that could have been found via Event Viewer should still be there, I assume, so I am reopening this for that.

    Anyway I have unmarked this thread as Answered but marked the information about Reliability History as useful info.


    Robert
    ---

    Monday, November 07, 2011 10:41 PM
  • Hey Robert,

     

    Check to see if there are any events listed by navigating to the following location in the left column: Event Viewer (Local) > Windows Logs > System

     

    Once the list of events loads in the center section (this could take a while), scroll down to the approximate time that the crash occurred when you restarted your computer. Then try to find an event that is related to the crash that you experienced.


    Steven
    Tuesday, November 08, 2011 1:41 AM
    Moderator
  • Check to see if there are any events listed by navigating to the following location in the left column: Event Viewer (Local) > Windows Logs > System

     

    try to find an event that is related to the crash that you experienced.


    Thanks.   This helped.   In spite of the dreadful usability of the Find tool (modal dialog, no Previous, no Wrap) and the lack of any obvious ability to link a find to a viewer (as in XP) I am able to find records of all instances of the problem symptom with Find...  explorer.exe.   Because of the modal dialog I can't even reverse the sort order of the log listing in order to effect a workaround for the other two deficiencies.   Another obvious deficiency of it then too is that it needs a specific context to start in because I am positive that I originally tried doing searches for these things that are being found but without knowing which context to start looking for them in.   I guess I was probably only searching in the Application log instead of the System log.  So how can we interleave all records and get all of this premature (IMO) summarization and compartmentalization out of the way?   I think I would much rather do that and then be able to easily exclude stuff than be so restricted in how we need to try to find it.   BTW I recognize that it will not be possible to bug any of these deficiencies; it's WAD/BAD but as I mentioned I have a hard time controlling my rising bile while trying to use this tool's UI.   Having to doubleclick everything just adds to the irritation.  ; ]

    Anyway, thanks to your tip here are my summary details for this symptom:

    Event 26, Application Popup

    8 instances of   Clock and Date:  explorer.exe  - instruction at 0x....d59c

    1 instance of  Charm (sic) Bar:  explorer.exe  -  instruction at  0x....d59c 

     

    Robert
    ---

    Tuesday, November 08, 2011 1:59 PM
  • Hey Robert,

     

    If you would like to take these events and submit them as feedback for a crash you are receiving, the following steps will allow you to save those events (essentially exporting their information):

    • Enter Event Viewer and view the events that are referenced above
    • Ctrl + Click the events in question to select them all in the list
    • Right click any of the selected events
    • Click Save Selected Events...

     

    This will allow you to save the selected events as one .evtx file that can be attached to the feedback submission on the last page of the process that has the Add... button available.


    Steven
    Wednesday, November 09, 2011 10:58 PM
    Moderator
  • take these events and submit them as feedback


    Done.  Shoehorned into Performance category.   ; )

     

    ---

    Thursday, November 10, 2011 5:29 PM