[讨论] win8 开机bug，求高人分析 [复制链接]
电梯直达
复制

Rank: 7 Rank: 7 Rank: 7

UID: 916519
帖子: 2082
PB币: 4781
贡献: 0
技术: 7
活跃: 1537

楼主

发表于 2012-10-1 10:31:26 IP属地未知 |只看该作者 |倒序浏览

本帖最后由 Magol 于 2012-10-1 10:31 编辑

状况和该帖一样 https://bbs.pcbeta.com/forum.php?mod=viewthread&tid=1153748

先是开机登陆后即出现xp式鼠标，然后是配置界面，五颜六色准备完以后，进入空白的metro界面
按ctrl+alt+del通过任务管理器进入桌面后，看到桌面背景为黑色，弹出错误提示框，具体没看清楚，
后来有点紧张，怕数据丢失，搜索一下程序，结果显示无法使用，最后再次重启就正常了

一直觉得郁闷，上次关机前什么也没动，也没更新驱动，就是使用了快速启动，不知道有无关系
翻了翻系统日志，发现了一堆error，希望大神能帮忙分析（计算机名已隐去）

9:22:05 （进入系统）出现19个ID为7034、7031意外终止错误，源是 Service Control Manager

7034

Log Name: System
Source: Service Control Manager
Date: 2012/10/1 9:22:05
Event ID: 7034
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
The Application Information service terminated unexpectedly. It has done this 1 time(s).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7034</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-10-01T01:22:05.495430600Z" />
<EventRecordID>4474</EventRecordID>
<Correlation />
<Execution ProcessID="760" ThreadID="6260" />
<Channel>System</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Application Information</Data>
<Data Name="param2">1</Data>
<Binary>41007000700069006E0066006F000000</Binary>
</EventData>
</Event>

复制代码

7031

Log Name: System
Source: Service Control Manager
Date: 2012/10/1 9:22:05
Event ID: 7031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
The Certificate Propagation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7031</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-10-01T01:22:05.495430600Z" />
<EventRecordID>4475</EventRecordID>
<Correlation />
<Execution ProcessID="760" ThreadID="6260" />
<Channel>System</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Certificate Propagation</Data>
<Data Name="param2">1</Data>
<Data Name="param3">120000</Data>
<Data Name="param4">1</Data>
<Data Name="param5">Restart the service</Data>
<Binary>4300650072007400500072006F0070005300760063000000</Binary>
</EventData>
</Event>

复制代码

其他类似

9:23:05-9:24:06 出现7032错误（共7个），同样是Service Control Manager

Log Name: System
Source: Service Control Manager
Date: 2012/10/1 9:23:05
Event ID: 7032
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ----
Description:
The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Server service, but this action failed with the following error:
An instance of the service is already running.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7032</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-10-01T01:23:05.503425200Z" />
<EventRecordID>4500</EventRecordID>
<Correlation />
<Execution ProcessID="760" ThreadID="6916" />
<Channel>System</Channel>
<Computer>----</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1</Data>
<Data Name="param2">Restart the service</Data>
<Data Name="param3">Server</Data>
<Data Name="param4">%%1056</Data>
</EventData>
</Event>

复制代码

9:25:08 10016错误, DistributedCOM

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 2012/10/1 9:25:08
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer:
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-10-01T01:25:08.250215700Z" />
<EventRecordID>4507</EventRecordID>
<Correlation />
<Execution ProcessID="140" ThreadID="3208" />
<Channel>System</Channel>
<Computer></Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
<Data Name="param6">NT AUTHORITY</Data>
<Data Name="param7">SYSTEM</Data>
<Data Name="param8">S-1-5-18</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>

复制代码

9:25:51 7011, Service Control Manager

Log Name: System
Source: Service Control Manager
Date: 2012/10/1 9:25:51
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ----
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-10-01T01:25:51.780394600Z" />
<EventRecordID>4509</EventRecordID>
<Correlation />
<Execution ProcessID="760" ThreadID="1312" />
<Channel>System</Channel>
<Computer>----</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">iphlpsvc</Data>
</EventData>
</Event>