WHEA Event ID 5

J

John

I have looked for this Event ID 5 here:
http://msdn2.microsoft.com/en-us/library/aa939074.aspx but without success.
It shows in the Kernel-WHEA log under Applications and Services--Windows.
Thanks for any help.

Here is the Event Log detailed report:

- System

- Provider

[ Name] Microsoft-Windows-Kernel-WHEA
[ Guid] {7b563579-53c8-44e7-8236-0f87b9fe6594}

EventID 5

Version 0

Level 4

Task 0

Opcode 0

Keywords 0x4000000000000000

- TimeCreated

[ SystemTime] 2007-09-21T15:20:49.904Z

EventRecordID 237

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel Microsoft-Windows-Kernel-WHEA


- Security

[ UserID] S-1-5-18


- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable
5441424CEC00000004000000FE6FF5E89C91C54CBA8865ABE14913BB000000000000000000000000000000000200000008030000576865610000000078067485900C7485B18BCE2DD7BD0E45B9AD9CF4EBD4F890000000000000000000000000000000000100000008030000576865610100000068037485C00D7485FF89AD5BE6B7C942814ACF2485D6E98A000000000000000000000000000000000100000008030000576865610300000008107485F00E74851FC093CF161AFC4DB8BC9C4DAF67C1040000000000000000000000000000000001000000400200005768656104000000C01D7485780F7485
 
M

Michael Solomon

John said:
I have looked for this Event ID 5 here:
http://msdn2.microsoft.com/en-us/library/aa939074.aspx but without success.
It shows in the Kernel-WHEA log under Applications and Services--Windows.
Thanks for any help.

Here is the Event Log detailed report:

- System

- Provider

[ Name] Microsoft-Windows-Kernel-WHEA
[ Guid] {7b563579-53c8-44e7-8236-0f87b9fe6594}

EventID 5

Version 0

Level 4

Task 0

Opcode 0

Keywords 0x4000000000000000

- TimeCreated

[ SystemTime] 2007-09-21T15:20:49.904Z

EventRecordID 237

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel Microsoft-Windows-Kernel-WHEA


- Security

[ UserID] S-1-5-18


- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable
5441424CEC00000004000000FE6FF5E89C91C54CBA8865ABE14913BB000000000000000000000000000000000200000008030000576865610000000078067485900C7485B18BCE2DD7BD0E45B9AD9CF4EBD4F890000000000000000000000000000000000100000008030000576865610100000068037485C00D7485FF89AD5BE6B7C942814ACF2485D6E98A000000000000000000000000000000000100000008030000576865610300000008107485F00E74851FC093CF161AFC4DB8BC9C4DAF67C1040000000000000000000000000000000001000000400200005768656104000000C01D7485780F7485
WHEA-Windows Hardware Error Architecture

Coupled with Event ID5, the error is indicative of a hardware issue. Start
by checking manufacturer websites for all your hardware, both internal and
external for the latest Vista compatible drivers for your various devices.
 
J

John

Thanks, Michael, I appreciate your help.

Shouldn't a hardware issue show up in Device Manager? Unfortunately the WHEA
report doesn't specify what piece of hardware. Any idea as to how the WHEA
detects hardware problems? Is it possible to have a false detection?


Thanks again.


Michael Solomon said:
John said:
I have looked for this Event ID 5 here:
http://msdn2.microsoft.com/en-us/library/aa939074.aspx but without
success. It shows in the Kernel-WHEA log under Applications and
Services--Windows. Thanks for any help.

Here is the Event Log detailed report:

- System

- Provider

[ Name] Microsoft-Windows-Kernel-WHEA
[ Guid] {7b563579-53c8-44e7-8236-0f87b9fe6594}

EventID 5

Version 0

Level 4

Task 0

Opcode 0

Keywords 0x4000000000000000

- TimeCreated

[ SystemTime] 2007-09-21T15:20:49.904Z

EventRecordID 237

Correlation

- Execution

[ ProcessID] 4
[ ThreadID] 8

Channel Microsoft-Windows-Kernel-WHEA


- Security

[ UserID] S-1-5-18


- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable
5441424CEC00000004000000FE6FF5E89C91C54CBA8865ABE14913BB000000000000000000000000000000000200000008030000576865610000000078067485900C7485B18BCE2DD7BD0E45B9AD9CF4EBD4F890000000000000000000000000000000000100000008030000576865610100000068037485C00D7485FF89AD5BE6B7C942814ACF2485D6E98A000000000000000000000000000000000100000008030000576865610300000008107485F00E74851FC093CF161AFC4DB8BC9C4DAF67C1040000000000000000000000000000000001000000400200005768656104000000C01D7485780F7485
WHEA-Windows Hardware Error Architecture

Coupled with Event ID5, the error is indicative of a hardware issue.
Start by checking manufacturer websites for all your hardware, both
internal and external for the latest Vista compatible drivers for your
various devices.
 
M

Michael Solomon

John said:
Thanks, Michael, I appreciate your help.

Shouldn't a hardware issue show up in Device Manager? Unfortunately the
WHEA report doesn't specify what piece of hardware. Any idea as to how the
WHEA detects hardware problems? Is it possible to have a false detection?


Thanks again.

You're welcome.

No, a hardware issue will only show up in device manager if there is an
issue with the device itself or something preventing it from functioning.
Compatibility is a broad range of things and is a moving target. That's why
you need to make sure drivers are compatible and up to date. Also, this is
a relatively new operating system, many devices came with drivers that only
supported basic functionality and were only expanded later with later
updated drivers. Other things have changed, you have other devices, other
software, all of which can create issues that may need to be addressed with
updated drivers.

Obviously, if a user is having no issues, they probably should leave well
enough alone. But that said, as you expand your system, add devices, add
other software, increase your own functionality, using devices for different
things and as other devices are updated as well, all these things can impact
any other device on the system. It may be quite capable of functioning but
under certain circumstances, it might crash or cause some kind of system
error. It will look fine in Device Manager and it will seem fine until the
issue presents itself.
 
R

Ronnie Vernon MVP

John

A better way to post these event viewer reports is to double click the event
in the center screen. This will open a separate window with a Copy Button.
Click the Copy button and paste the results in your next post.

On my system, this eventid 5, Level4 shows as an informational message that
just shows that the WHEA was started successfully?

Are you having any hardware related problems?
 
J

John

Thanks for the help, Ronnie. All seems to be working. My concern is this
part of the ID5 error report:
- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable

It would appear there are 4 sources of errors... somewhere. Am I reading the
data incorrectly?

Thanks again.
 
R

Ronnie Vernon MVP

John said:
Thanks for the help, Ronnie. All seems to be working. My concern is this
part of the ID5 error report:
- EventData

ErrorSourceCount 4
ErrorRecordFormat 10
ErrorSourceTableLength 236
ErrorSourceTable

It would appear there are 4 sources of errors... somewhere. Am I reading
the data incorrectly?

Thanks again.

Yes, it is saying that there are 4 sources being monitored for errors. I
have the same exact entries that you are showing, including the exact source
table. As long as you don't see a red "X" icon on one of the events, you are
in good shape.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top