Computer Reboots when doing in-depth scan

[Silverboi 0]

Hi, my Computer keep Reboots when doing in-depth scan on C drive i have no idea why can u please assist me on this matter

[Marcos 5,468]

Please provide logs collected with ESET Log Collector  with on-demand scanner logs included:

[Silverboi 0]

12 minutes ago, Marcos said:

Please provide logs collected with ESET Log Collector  with on-demand scanner logs included:

hello here you go please let me know if i didnt include anything else

essp_logs.zip

[Marcos 5,468]

Does the problem not occur if you don't run an on-demand scan for several days? I see some svchost.exe crashes but I don't think they are ESET related:

5. 11. 2024 21:13:59,,Windows Events - Application,"Fault bucket 2051913750287823588, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0  Problem signature: P1: svchost.exe_WpnUserService P2: 10.0.22621.1 P3: 6dc5c2a5 P4: wpncore.dll P5: 10.0.22621.2070 P6: 3258466e P7: c0000005 P8: 00000000000a462c P9:  P10:   Attached files: \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.0dc31616-cdb3-4e94-8c69-43ff5943015d.tmp.dmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1057fcb2-2e10-4161-8710-155fd2cbda5c.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.3af9b3d2-7b8c-40c3-a5d5-60602551b6cc.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.854dc8eb-b86e-4159-8b88-da64685b1667.tmp.txt \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.fbc8eae2-06e9-4b27-8319-8e3721a044a0.tmp.xml  These files may be available here: \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_svchost.exe_WpnU_182593de74b310e2826d4750550be305a72f710_c39e0384_53fbbefb-7a94-4c0f-9763-e4cffa9ce5b7  Analysis symbol:  Rechecking for solution: 0 Report Id: 3137bc9d-9b05-4421-b24f-77a598bec7c3 Report Status: 268435456 Hashed bucket: 6dccb67790ac667e1c79dcaf33a532e4 Cab Guid: 0",Neutral,
5. 11. 2024 21:13:59,,Windows Events - System,The WpnUserService_47cc5 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.,Serious / Error,
5. 11. 2024 21:13:57,,Windows Events - Application,"Faulting application name: svchost.exe_WpnUserService, version: 10.0.22621.1, time stamp: 0x6dc5c2a5 Faulting module name: wpncore.dll, version: 10.0.22621.2070, time stamp: 0x3258466e Exception code: 0xc0000005 Fault offset: 0x00000000000a462c Faulting process id: 0x0x168c Faulting application start time: 0x0x1db2f848c8947c8 Faulting application path: C:\Windows\system32\svchost.exe Faulting module path: C:\Windows\System32\wpncore.dll Report Id: 3137bc9d-9b05-4421-b24f-77a598bec7c3 Faulting package full name:  Faulting package-relative application ID:",Serious / Error,

Also it looks like there some hardware failures were detected:
5. 11. 2024 21:15:20,,Windows Events - System,The system cannot read from the specified device.,Neutral,
5. 11. 2024 21:15:20,,Windows Events - System,The drive cannot find the sector requested.,Neutral,
5. 11. 2024 21:15:20,,Windows Events - System,The drive cannot locate a specific area or track on the disk.,Neutral,

Try checking the disk for errors using chkdsk.exe.

 

[Silverboi 0]

2 minutes ago, Marcos said:

Does the problem not occur if you don't run an on-demand scan for several days? I see some svchost.exe crashes but I don't think they are ESET related:

5. 11. 2024 21:13:59,,Windows Events - Application,"Fault bucket 2051913750287823588, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0  Problem signature: P1: svchost.exe_WpnUserService P2: 10.0.22621.1 P3: 6dc5c2a5 P4: wpncore.dll P5: 10.0.22621.2070 P6: 3258466e P7: c0000005 P8: 00000000000a462c P9:  P10:   Attached files: \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.0dc31616-cdb3-4e94-8c69-43ff5943015d.tmp.dmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.1057fcb2-2e10-4161-8710-155fd2cbda5c.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.3af9b3d2-7b8c-40c3-a5d5-60602551b6cc.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.854dc8eb-b86e-4159-8b88-da64685b1667.tmp.txt \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER.fbc8eae2-06e9-4b27-8319-8e3721a044a0.tmp.xml  These files may be available here: \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_svchost.exe_WpnU_182593de74b310e2826d4750550be305a72f710_c39e0384_53fbbefb-7a94-4c0f-9763-e4cffa9ce5b7  Analysis symbol:  Rechecking for solution: 0 Report Id: 3137bc9d-9b05-4421-b24f-77a598bec7c3 Report Status: 268435456 Hashed bucket: 6dccb67790ac667e1c79dcaf33a532e4 Cab Guid: 0",Neutral,
5. 11. 2024 21:13:59,,Windows Events - System,The WpnUserService_47cc5 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.,Serious / Error,
5. 11. 2024 21:13:57,,Windows Events - Application,"Faulting application name: svchost.exe_WpnUserService, version: 10.0.22621.1, time stamp: 0x6dc5c2a5 Faulting module name: wpncore.dll, version: 10.0.22621.2070, time stamp: 0x3258466e Exception code: 0xc0000005 Fault offset: 0x00000000000a462c Faulting process id: 0x0x168c Faulting application start time: 0x0x1db2f848c8947c8 Faulting application path: C:\Windows\system32\svchost.exe Faulting module path: C:\Windows\System32\wpncore.dll Report Id: 3137bc9d-9b05-4421-b24f-77a598bec7c3 Faulting package full name:  Faulting package-relative application ID:",Serious / Error,

Also it looks like there some hardware failures were detected:
5. 11. 2024 21:15:20,,Windows Events - System,The drive cannot find the sector requested.,Neutral,
5. 11. 2024 21:15:20,,Windows Events - System,The drive cannot locate a specific area or track on the disk.,Neutral,

Try checking the disk for errors using chkdsk.exe.

 

well i just checked it seems like if i do scan for c drive for all scans it does crashes i not sure if it my C drive issue or what since i just brought this c drive like 1 weeks ago

[itman 1,807]

11 minutes ago, Marcos said:

Try checking the disk for errors using chkdsk.exe.

+1 👍

9 minutes ago, Silverboi said:

i just brought this c drive like 1 weeks ago

I have had past instances of new drives failing shortly after installation.

[Silverboi 0]

Just now, itman said:

+1 👍

I have had past instances of new drives failing shortly after installation.

WELL checkdisk says no problem found

[itman 1,807]

Just now, Silverboi said:

WELL checkdisk says no problem found

Best way to check drive operational status is to download the manufacturer's utility software for this purpose.

[Silverboi 0]

21 minutes ago, itman said:

Best way to check drive operational status is to download the manufacturer's utility software for this purpose.

hi i checked and all is okay fine and healthy

[Marcos 5,468]

If you are able to reproduce the crash, does it happen also when you scan an arbitrary folder? Or if you do not scan the registry and WMI?

[Silverboi 0]

2 minutes ago, Marcos said:

If you are able to reproduce the crash, does it happen also when you scan an arbitrary folder? Or if you do not scan the registry and WMI?

well the scans happens to fast for me to notice on which part it scans then it crashes

[Silverboi 0]

9 minutes ago, Marcos said:

If you are able to reproduce the crash, does it happen also when you scan an arbitrary folder? Or if you do not scan the registry and WMI?

well i just tried and it seem s like on edge view? then it crashes but this pc is also just fresh insta;ll also

[itman 1,807]

1 hour ago, Silverboi said:

well i just tried and it seem s like on edge view?

I assume you're referring to Microsoft Edge WebView2 : https://learn.microsoft.com/en-us/microsoft-edge/webview2/ .

It showed up on my Win 10 22H2 PC as part of Oct., 2024 Cumulative Update. It was doing all kinds of weird activity. I repaired the app via Win 10 app settings which fixed the "weirdness" it was doing. Thereafter, it always ran at system startup time but shortly thereafter suspended itself; except for one child process instance running under Win searchapp process?

However, I recently noticed that WebView2 app no longer running at system startup or anytime thereafter. More stinking Microsoft weirdness.

[Silverboi 0]

2 hours ago, itman said:

I assume you're referring to Microsoft Edge WebView2 : https://learn.microsoft.com/en-us/microsoft-edge/webview2/ .

It showed up on my Win 10 22H2 PC as part of Oct., 2024 Cumulative Update. It was doing all kinds of weird activity. I repaired the app via Win 10 app settings which fixed the "weirdness" it was doing. Thereafter, it always ran at system startup time but shortly thereafter suspended itself; except for one child process instance running under Win searchapp process?

However, I recently noticed that WebView2 app no longer running at system startup or anytime thereafter. More stinking Microsoft weirdness.

Could u give me a guide about how to fix it thanks

[itman 1,807]

59 minutes ago, Silverboi said:

Could u give me a guide about how to fix it thanks

I have serious doubts that Microsoft Edge WebView2 by itself was somehow interacting with Eset In-Depth scan to abort it and cause a system restart. A more likely scenario is you were running other Windows apps at the time the In-Depth scan was running. One of those apps might have deployed Microsoft Edge WebView2. It's possible that there was sometime of conflict with files being accessed concurrently with Microsoft Edge WebView2 and Eset In-Depth scanning processing.

First, run an In-Depth scan with no other non-Windows apps running and see if this system restart behavior repeats.

[Silverboi 0]

16 minutes ago, itman said:

I have serious doubts that Microsoft Edge WebView2 by itself was somehow interacting with Eset In-Depth scan to abort it and cause a system restart. A more likely scenario is you were running other Windows apps at the time the In-Depth scan was running. One of those apps might have deployed Microsoft Edge WebView2. It's possible that there was sometime of conflict with files being accessed concurrently with Microsoft Edge WebView2 and Eset In-Depth scanning processing.

First, run an In-Depth scan with no other non-Windows apps running and see if this system restart behavior repeats.

tried that still happens even with no apps open

 

[itman 1,807]

Since repairing Microsoft Edge WebView2 should do no harm, here's how to do it;

1. Open Win 10/11 Settings.

2. Select Apps.

3. Navigate to Microsoft Edge WebView2 Runtime. Open it by mouse clicking on it.

4. Select Modify tab.

5. When the Microsoft Edge WebView2 Runtime GUI appears, select Repair tab.

When the repair completes, reboot the PC.

[Silverboi 0]

On 11/6/2024 at 6:08 AM, itman said:

Since repairing Microsoft Edge WebView2 should do no harm, here's how to do it;

1. Open Win 10/11 Settings.

2. Select Apps.

3. Navigate to Microsoft Edge WebView2 Runtime. Open it by mouse clicking on it.

4. Select Modify tab.

5. When the Microsoft Edge WebView2 Runtime GUI appears, select Repair tab.

When the repair completes, reboot the PC.

still same

[Swamp Yankee 8]

With those Windows Push Notifications errors (Faulting application name: svchost.exe_WpnUserService)

Try running  sfc /scannow  from an elevated Command prompt (Run as administrator) reboot when finished

[Silverboi 0]

7 hours ago, Swamp Yankee said:

With those Windows Push Notifications errors (Faulting application name: svchost.exe_WpnUserService)

Try running  sfc /scannow  from an elevated Command prompt (Run as administrator) reboot when finished

 

i tried that it say no errors found

[Marcos 5,468]

Are you able to reproduce it when running a custom scan of a folder that contains a few files and neither WMI nor registry are selected to scan?

Also I assume that you have no after-scan action selected in the computer scan panel:

 

[Silverboi 0]

6 minutes ago, Marcos said:

Are you able to reproduce it when running a custom scan of a folder that contains a few files and neither WMI nor registry are selected to scan?

Also I assume that you have no after-scan action selected in the computer scan panel:

 

well from what i remember if i select custom folder in a c drive it still crashes. yes the action after scan is no action

[itman 1,807]

Review your Windows Event logs; Errors and Warnings, for log entries which time syncs when these system reboots occur while Eset In-Depth is running.

Everything stated to date in this thread point to a SSD/HDD issue. Or more likely, a NTFS or Win file directory issue;

Quote

Also it looks like there some hardware failures were detected:
5. 11. 2024 21:15:20,,Windows Events - System,The drive cannot find the sector requested.,Neutral,
5. 11. 2024 21:15:20,,Windows Events - System,The drive cannot locate a specific area or track on the disk.,Neutral,

Edited November 7 by itman

[Silverboi 0]

but the ssd i checked with tools it stated fine and healthy?

[itman 1,807]

From an admin command prompt window, run chkdsk for Win install drive with /f /r parameters. This could take hours to complete on a large capacity drive.