- 当我在晚上 10 点 46 分合上盖子时,Windows 10 进入睡眠状态。
- 上午 8:06 我唤醒了计算机,但根据事件日志,唤醒时间是在计算机进入睡眠状态 9 秒之后(在事件日志查看器行和事件详细信息中均有显示)
- 然后,系统时钟与硬件时钟重新同步,它会在系统处于休眠状态的小时内关闭。
这是正常行为吗?我试图排除这是下面提到的 BSOD 的原因。
更新:这台笔记本电脑使用不到 1 年,因此我认为 CMOS 电池电量不足。当然,我可能买到了坏电池,但这会导致硬件时钟漂移,而不是系统时钟。
然后,计算机稍后崩溃,然后重新启动(其间有大量正确计时的事件日志条目),但在条目详细信息中显示错误的时钟时间(事件日志查看器窗口中的时间正确):“上次系统在 2017 年 6 月 29 日晚上 10:35:16 关闭是意外的。” BSOD 大约发生在 8:08。
Log Name: System
Source: Microsoft-Windows-Power-Troubleshooter
Date: 2017-06-30 08:06:26 AM
Event ID: 1
Task Category: None
Level: Information
Keywords:
User: LOCAL SERVICE
Computer: Ceres
Description:
The system has returned from a low power state.
Sleep Time: 2017-06-30T05:46:04.542174700Z
Wake Time: 2017-06-30T15:06:25.350267000Z
Wake Source: Device -Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Power-Troubleshooter" Guid="{CDC05E28-C449-49C6-B9D2-88CF761644DF}" />
<EventID>1</EventID>
<Version>2</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-06-30T15:06:26.918654100Z" />
<EventRecordID>22414</EventRecordID>
<Correlation ActivityID="{297A7523-4DAA-4F2F-B986-85E257766E56}" />
<Execution ProcessID="4832" ThreadID="8424" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security UserID="SID" />
</System>
<EventData>
<Data Name="SleepTime">2017-06-30T05:46:04.542174700Z</Data>
<Data Name="WakeTime">2017-06-30T15:06:25.350267000Z</Data>
<Data Name="SleepDuration">1451</Data>
<Data Name="WakeDuration">4849</Data>
<Data Name="DriverInitDuration">4211</Data>
<Data Name="BiosInitDuration">699</Data>
<Data Name="HiberWriteDuration">0</Data>
<Data Name="HiberReadDuration">0</Data>
<Data Name="HiberPagesWritten">0</Data>
<Data Name="Attributes">33574956</Data>
<Data Name="TargetState">4</Data>
<Data Name="EffectiveState">4</Data>
<Data Name="WakeSourceType">5</Data>
<Data Name="WakeSourceTextLength">61</Data>
<Data Name="WakeSourceText">Intel(R) USB 3.0 eXtensible Host Controller - 1.0 (Microsoft)</Data>
<Data Name="WakeTimerOwnerLength">0</Data>
<Data Name="WakeTimerContextLength">0</Data>
<Data Name="NoMultiStageResumeReason">0</Data>
<Data Name="WakeTimerOwner">
</Data>
<Data Name="WakeTimerContext">
</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2017-06-30 08:06:20 AM
Event ID: 130
Task Category: (33)
Level: Information
Keywords: (1024),(4)
User: N/A
Computer: Ceres
Description:
Firmware S3 times. SuspendStart: 36729617, SuspendEnd: 36729624
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>130</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>33</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000404</Keywords>
<TimeCreated SystemTime="2017-06-30T15:06:20.707483500Z" />
<EventRecordID>22413</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="16764" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="SuspendStart">36729617</Data>
<Data Name="SuspendEnd">36729624</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2017-06-30 08:06:20 AM
Event ID: 131
Task Category: (33)
Level: Information
Keywords: (1024),(4)
User: N/A
Computer: Ceres
Description:
Firmware S3 times. ResumeCount: 2, FullResume: 533, AverageResume: 534
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>131</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>33</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000404</Keywords>
<TimeCreated SystemTime="2017-06-30T15:06:20.707481900Z" />
<EventRecordID>22412</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="16764" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="ResumeCount">2</Data>
<Data Name="FullResume">533</Data>
<Data Name="AverageResume">534</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 2017-06-30 08:06:20 AM
Event ID: 1
Task Category: (5)
Level: Information
Keywords: Time
User: N/A
Computer: Ceres
Description:
The system time has changed to 2017-06-30T15:06:20.500000000Z from 2017-06-30T05:46:14.018104300Z.
Change Reason: System time synchronized with the hardware clock.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>1</EventID>
<Version>1</Version>
<Level>4</Level>
<Task>5</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2017-06-30T15:06:20.500040300Z" />
<EventRecordID>22411</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="16764" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="NewTime">2017-06-30T15:06:20.500000000Z</Data>
<Data Name="OldTime">2017-06-30T05:46:14.018104300Z</Data>
<Data Name="Reason">2</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2017-06-29 10:46:14 PM
Event ID: 107
Task Category: (102)
Level: Information
Keywords: (1024),(64),(4)
User: N/A
Computer: Ceres
Description:
The system has resumed from sleep.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>107</EventID>
<Version>1</Version>
<Level>4</Level>
<Task>102</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000444</Keywords>
<TimeCreated SystemTime="2017-06-30T05:46:14.017891800Z" />
<EventRecordID>22410</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="16764" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="TargetState">4</Data>
<Data Name="EffectiveState">4</Data>
<Data Name="WakeFromState">4</Data>
<Data Name="ProgrammedWakeTimeAc">2017-07-02T17:46:05.993264500Z</Data>
<Data Name="ProgrammedWakeTimeDc">2017-07-02T17:46:05.993264500Z</Data>
<Data Name="WakeRequesterTypeAc">4</Data>
<Data Name="WakeRequesterTypeDc">4</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2017-06-29 10:46:05 PM
Event ID: 42
Task Category: (64)
Level: Information
Keywords: (1024),(4)
User: N/A
Computer: Ceres
Description:
The system is entering sleep.
Sleep Reason: Button or Lid
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>42</EventID>
<Version>3</Version>
<Level>4</Level>
<Task>64</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000404</Keywords>
<TimeCreated SystemTime="2017-06-30T05:46:05.993364100Z" />
<EventRecordID>22409</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="16764" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="TargetState">4</Data>
<Data Name="EffectiveState">4</Data>
<Data Name="Reason">0</Data>
<Data Name="Flags">4</Data>
<Data Name="TransitionsToOn">2</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2017-06-29 10:46:05 PM
Event ID: 40
Task Category: (36)
Level: Information
Keywords: (1024),(4)
User: N/A
Computer: Ceres
Description:
The driver \Driver\WSDScan for device SWD\DAFWSDProvider\urn:uuid:e3248000-80ce-11db-8000-30055c9740fd/uri:e3248000-80ce-11db-8000-30055c9740fd/ScannerService stopped the power transition.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>40</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>36</Task>
<Opcode>35</Opcode>
<Keywords>0x8000000000000404</Keywords>
<TimeCreated SystemTime="2017-06-30T05:46:05.992397700Z" />
<EventRecordID>22408</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="6364" />
<Channel>System</Channel>
<Computer>Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="DriverNameLength">15</Data>
<Data Name="DriverName">\Driver\WSDScan</Data>
<Data Name="InstanceNameLength">120</Data>
<Data Name="InstanceName">SWD\DAFWSDProvider\urn:uuid:e3248000-80ce-11db-8000-30055c9740fd/uri:e3248000-80ce-11db-8000-30055c9740fd/ScannerService</Data>
</EventData>
</Event>