regsamp
asked on
Windows 7 system keeps locking up first thing in the morning
We have a Windows 7 system that keeps locking up and sometimes it does not have any Event IDs or there anything found with scans. Device Manager does not indicate any errors or warnings. The only indication today was an Event ID. After it is rebooted it is fine for the rest of the day. The Event ID is below:
Log Name: System
Source: Microsoft-Windows-Kernel-P nP
Date: 7/8/2015 7:56:03 AM
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: SYSTEM
Computer: LTONEY7.dwma.com
Description:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c18 6b&0&STORA GE#VOLUME# _??_USBSTO R#DISK&VEN _GENERIC&P ROD_STORAG E_DEVICE&R EV_9732#00 0000009732 &0#.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Ke rnel-PnP" Guid="{9C205A39-1250-487D- ABD7-E831C 6290539}" />
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000 00</Keywor ds>
<TimeCreated SystemTime="2015-07-08T11: 56:03.2534 48100Z" />
<EventRecordID>124220</Eve ntRecordID >
<Correlation />
<Execution ProcessID="4" ThreadID="64" />
<Channel>System</Channel>
<Computer>LTONEY7.dwma.com </Computer >
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriverNameLength">11 9</Data>
<Data Name="DriverName">WpdBusEn umRoot\UMB \2&37c 186b&0 &STORA GE#VOLUME# _??_USBSTO R#DISK& ;VEN_GENER IC&PRO D_STORAGE_ DEVICE& ;REV_9732# 0000000097 32&0#< /Data>
<Data Name="Status">3221226341</ Data>
<Data Name="FailureNameLength">1 4</Data>
<Data Name="FailureName">\Driver \WUDFRd</D ata>
<Data Name="Version">0</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-P
Date: 7/8/2015 7:56:03 AM
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: SYSTEM
Computer: LTONEY7.dwma.com
Description:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c18
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Ke
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-08T11:
<EventRecordID>124220</Eve
<Correlation />
<Execution ProcessID="4" ThreadID="64" />
<Channel>System</Channel>
<Computer>LTONEY7.dwma.com
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriverNameLength">11
<Data Name="DriverName">WpdBusEn
<Data Name="Status">3221226341</
<Data Name="FailureNameLength">1
<Data Name="FailureName">\Driver
<Data Name="Version">0</Data>
</EventData>
</Event>
ASKER
Intermittently every other morning I would say. It is never left on at night. It will be first thing in the morning after the person has logged on to the network and apps are starting where it will lock up.
The event id 219 is saying you have an out dated driver for the USB device that is connected
remove the device and the error will not appear. Update the driver or get a newer usb drive and replace.
For the computer hanging when the user starts up I would try this
run msconfig
go to the Services Tab
hide all Microsoft services check that
then disable all
go to the Startup tab
disable all
apply
OK
then restart see what happens
if it does not hang then a service or startup program is causing the problem
look them over and put a few back on and try again till you find the bad one.
Another thing is when did this start happening? Any changes?
Go to control panel and do a system restore of an earlier date
remove the device and the error will not appear. Update the driver or get a newer usb drive and replace.
For the computer hanging when the user starts up I would try this
run msconfig
go to the Services Tab
hide all Microsoft services check that
then disable all
go to the Startup tab
disable all
apply
OK
then restart see what happens
if it does not hang then a service or startup program is causing the problem
look them over and put a few back on and try again till you find the bad one.
Another thing is when did this start happening? Any changes?
Go to control panel and do a system restore of an earlier date
ASKER
They just have a wireless keyboard so I will look into that usb driver. I will try the msconfig option and see what happens after that. This has started happening since they received the system so we can't really do the restore option.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Okay, will do on the anti virus.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I will check the Hard Disk too and I am going over the anti-virus software now. It has new RAM put in but like you said, a good tester cannot hurt. Thank you.
also - is that usb device always connected? or sometimes not?
it may simply be trying to boot from it
it may simply be trying to boot from it
ASKER
It is just a usb keyboard so it is always connected. I ran a chkdsk and that came back okay. I have turned off the anti-virus and now the system has "not" locked up. I am monitoring it for that.
anti virus?? starnge that it intervenes at boot
If the antivirus exacerbates I would lean toward disk instability, since AV scans can often run at startup. Have you run a full disk check with something like Victoria or Crystal Disk?
You can get Victoria here: http://www.majorgeeks.com/mg/getmirror/victoria_for_windows,1.html
You can get Victoria here: http://www.majorgeeks.com/mg/getmirror/victoria_for_windows,1.html
What antivirus product you running?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It is Kaspersky and it seems to happen when the user was in Outlook. When we disable Kaspersky the lockups do not occur. We just did a regular chkdsk and did not find any issues. We were going to try a good software app to test the disk but since the lockup had not happened for over a day we think it might have been Kaspersky.
regsamp
Like I said check antivirus first. right on track
We used Kasperky in the past but removed it and we just use Microsoft Security Essentials now
Have never had an issue with that product.
Third Party anti Virus programs due tend to cause issues down the road.
Like I said check antivirus first. right on track
We used Kasperky in the past but removed it and we just use Microsoft Security Essentials now
Have never had an issue with that product.
Third Party anti Virus programs due tend to cause issues down the road.
Chkdsk will not locate and find bad blocks unless you specify the /R switch. Otherwise you're just checking for logical corruption not physical issues.
To properly check the disk, a solution that tests at the block level is needed.
- Tim
To properly check the disk, a solution that tests at the block level is needed.
- Tim
ASKER
Right, it just seemed that Kaspersky was killing Outlook.exe and hanging up the system. I will look into just using MS Essentials for that computer. We did the /R switch Chkdsk and the drive came back fine but always a good idea like you said.
If so.. Does anything run at night such as a windows backup job?