My computer fails to start normally, but will run in safe mode with networking and a higher than normal display resolution. I would appreciate some help in fixing the problem . No hardware or software changes were made by me prior to the problem arrising. The error logs show Crtical Error Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 13/09/2010 09:15:40 Event ID: 41 Task Category: (63) Level: Critical Keywords: (2) User: SYSTEM Computer: chris-PC.bundy.co.uk Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> <EventID>41</EventID> <Version>2</Version> <Level>1</Level> <Task>63</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000002</Keywords> <TimeCreated SystemTime="2010-09-13T08:15:40.238829400Z" /> <EventRecordID>285073</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="8" /> <Channel>System</Channel> <Computer>chris-PC.bundy.co.uk</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="BugcheckCode">0</Data> <Data Name="BugcheckParameter1">0x0</Data> <Data Name="BugcheckParameter2">0x0</Data> <Data Name="BugcheckParameter3">0x0</Data> <Data Name="BugcheckParameter4">0x0</Data> <Data Name="SleepInProgress">false</Data> <Data Name="PowerButtonTimestamp">0</Data> </EventData> </Event> the last item in the boot log is Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb20.sys The computer is a Desktop with Windows 7 Ultimate . 4GB ram Chris Bundy in the UK

Very strange. That dll is normally used for filesharing, but Event ID signals a power issue. Here's a few things to try: - Disable File & Folder Sharing in Safe Mode, see if persists - Try running checkdisk by typing: chkdsk /r C: You could also go to Network and Sharing Center, Change Adapter Settings, bring up the properties for your network card, and disable everything but IPv4.

Hi, Thanks for posting in Microsoft TechNet forums. You encountered the following problem: Windows Kernel event ID 41 error in Windows 7 or in Windows Server 2008 R2: “The system has rebooted without cleanly shutting down first” It seems to be more related to mrxsmb20.sys file. Commonly this is caused by installing or uninstalling programs recently. As you said you didn’t do some hardware or software changes recently, I am assuming whether you installed some updates for windows or software. To resolve this, it is recommended to restore the system to the previous state: 1) Please click on Start and choose All Programs, Accessories, System Tools, and then Windows Backup. 2) Click Restore on the left pane. 3) Choose Basic Restore. 4) Follow the wizard and click Next. 5) If you would like to restore everything in the backup, we can check the box “Restore everything in this backup” on the top of the window. 6) We can also browse and choose certain files and folders to restore. Then, click Next. 7) Then choose the folder to save the recovered files and click Next. 8) When we see a “Restore is complete!” message, click Finish. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, System Restore not working. Shadow copy service error 0x80042301 Chris

Hi, As you can boot in Safe Mode with networking, please perform a Device Clean Boot and Clean Boot to see how it works. How to perform a Device Clean Boot ======================= 1) Click "Start", type "DEVMGMT.MSC" in the Search textbox and press Enter. 2) Expand "Sound, video and game controllers". 3) Right click on your Sound Card, select "Properties" 4) Click "Driver" tab, click Disable (Disable the selected device). Click OK 5) Please use the same method to disable other hardware such as: Modem, network card, CD-R drive. Please note some devices such as video adapter are not available to be disabled. 6) Please restart the computer. Moreover, the error code 0x80042301 is mainly caused by VSS provider. Do you have other third party backup programs installed on your computer? Please locate to the following registry and see if any third party provider is used: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers If so, manually delete the third party provider to test. Please note: it is always to back up your registry settings before taking any modification. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Have done that no change . Just a thought, at the time the machine went down I thought it may have been a windows update that failed. I could not find a current update , perhaps i would not if it did not finish. This was an error around the time it stopped working Log Name: Application Source: Microsoft-Windows-WMI Date: 11/09/2010 17:31:30 Event ID: 10 Task Category: None Level: Error Keywords: Classic User: N/A Computer: chris-PC.bundy.co.uk Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" /> <EventID Qualifiers="49152">10</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2010-09-11T16:31:30.000000000Z" /> <EventRecordID>50962</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>chris-PC.bundy.co.uk</Computer> <Security /> </System> <EventData> <Data>//./root/CIMV2</Data> <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data> <Data>0x80041003</Data> </EventData> </Event> Chris

Please visit the following link to run the script to stop the Event ID 10 message: Event ID 10 is logged in the Application log after you install Windows Vista Service Pack 1 or Windows Server 2008 Note: though the KB is written for Windows Vista, it may apply to Windows 7 as well. Moreover, try using the DISM command to see what update is in a problem state: dism.exe /image:d:\ /get-packages When you run this command, you should see one or more packages listed in a Pending state. Check for known issues with the particular update or package. There may be a more direct workaround. If you are unable to find another solution, use the /cleanup-image switch with DISM to revert the pending actions: dism.exe /image:d:\ /cleanup-image /revertpendingactions Once this is complete, try starting the PC into Windows. If Windows starts successfully, check for other issues on the computer – disk issues, memory issues, etc. You may need to perform an in-place reinstall to repair problems with the Windows installation to prevent similar issues in the future. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Best Regards Dale Qiao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.