Thousands of event log Warnings from source WHEA-Logger Event ID 17

[seanbirkhead]

Hi, 

I have literally thousands of these warnings occurring several times per minute.

Can anyone direct me towards a solution?

Laptop is a MEDION ERAZER P15805 (MD 61593) UK

This is what is in the event log :

A corrected hardware error has occurred.

Component: PCI Express Root Port

Error Source: Advanced Error Reporting (PCI Express)

Primary Bus:Device:Function: 0x0:0x1D:0x0

Secondary Bus:Device:Function: 0x0:0x0:0x0

Primary Device Name:PCI\VEN_8086&DEV_A336&SUBSYS_85501558&REV_F0

Secondary Device Name:

>

- <System>

  <Provider Name="Microsoft-Windows-WHEA-Logger" Guid="{c26c4f3c-3f66-4e99-8f8a-39405cfed220}" />

  <EventID>17</EventID>

  <Version>1</Version>

  <Level>3</Level>

  <Task>0</Task>

  <Opcode>0</Opcode>

  <Keywords>0x8000000000000000</Keywords>

  <TimeCreated SystemTime="2020-12-09T22:48:55.9590600Z" />

  <EventRecordID>661862</EventRecordID>

  <Correlation ActivityID="{7e1e7ee5-ec71-44d6-b42d-da86c315a368}" />

  <Execution ProcessID="6200" ThreadID="8024" />

  <Channel>System</Channel>

  <Computer>ERAZER</Computer>

  <Security UserID="S-1-5-19" />

  </System>

- <EventData>

  <Data Name="ErrorSource">4</Data>

  <Data Name="FRUId">{00000000-0000-0000-0000-000000000000}</Data>

  <Data Name="FRUText" />

  <Data Name="ValidBits">0xdf</Data>

  <Data Name="PortType">4</Data>

  <Data Name="Version">0x101</Data>

  <Data Name="Command">0x10</Data>

  <Data Name="Status">0x407</Data>

  <Data Name="Bus">0x0</Data>

  <Data Name="Device">0x1d</Data>

  <Data Name="Function">0x0</Data>

  <Data Name="Segment">0x0</Data>

  <Data Name="SecondaryBus">0x0</Data>

  <Data Name="SecondaryDevice">0x0</Data>

  <Data Name="SecondaryFunction">0x0</Data>

  <Data Name="VendorID">0x8086</Data>

  <Data Name="DeviceID">0xa336</Data>

  <Data Name="ClassCode">0x30400</Data>

  <Data Name="DeviceSerialNumber">0x0</Data>

  <Data Name="BridgeControl">0x0</Data>

  <Data Name="BridgeStatus">0x0</Data>

  <Data Name="UncorrectableErrorStatus">0x0</Data>

  <Data Name="CorrectableErrorStatus">0x1000</Data>

  <Data Name="HeaderLog">00000000000000000000000000000000</Data>

  <Data Name="PrimaryDeviceName">PCI\VEN_8086&DEV_A336&SUBSYS_85501558&REV_F0</Data>

  <Data Name="SecondaryDeviceName" />

  </EventData>

  </Event>

[sweetpoison]

Hi @seanbirkhead, welcome to the forum

This kind of error it's strictly related to your machine/os and without a direct inspection of the problem can be only a lot of guessing.

So here's my guess: most likely a background app using WI-FI (like One-drive or such).

Before everything, clear the logs and restart the machine because the process that cause problems might get a different ID after restart.

Check again the logs and find the current process ID (example:  <Execution ProcessID="6200" ThreadID="8024" />)

To go to task manager. 

Locate the process ID (PID) 6200 (or whatever ID is at that moment). Once you found it, right-click on that and at the bottom of menu select "Go to details" to see the app which calls for that process. 

More actions can be suggested once you find that information.

Cheers. 

[seanbirkhead]

Thanks for the reply.

The process is Service Host: Diagnostic Policy Service ,   svchost.exe.

That doesn't tell us much.

So , I have begun the laborious process of disconnecting all peripherals and terminating all non-essential programs.

I have it at the point where I have stopped the warnings so now i will gradually restart programs and reconnect peripherals until I find the culprit.

I fill post any findings or solutions here as I go along.

[sweetpoison]

That service can be stopped and switched for Start-up Type: Manual. Meaning the service will start only on demand (like windows error reporting, finding solution for errors, searching for missing drivers or other things) and will not affect windows stability or integrity.

Since it's a network related problem, if reappears try to connect the laptop via Ethernet cable instead of wi-fi just to be sure is not some address conflict on wi-fi card's driver.

[seanbirkhead]

As it happens I have not managed  to stop the warnings completely , I have just reduced the frequency. I still get one randomly and around 20 per hour even though i have terminated every non-essential program where i am comfortable that I know what it does.  

I would prefer not to stop the service.

Instead I would like to understand if I have a potential hardware fault or a driver issue.

My laptop has never been on wifi. I have always been on ethernet.

For troubleshooting I turned off wifi in settings anyway but it had no effect.

I then turned back on wifi and connected it and unplugged the ethernet. Again, no effect. I still have intermittent warnings.

I have tracked the device ID in the warning messages through device manager and it appears to be linked with this device :   Intel(R) PCI Express Root Port #15 - A336

I rolled back the driver on that device and it did not stop the warnings. I also uninstalled the device , removed the driver, and allowed it to re-install but I still have warnings.

Maybe if there is a Medion Engineer reading this thread you could suggest more troubleshooting?

Thanks,

Sean

[sweetpoison]

What you can do in the mean time is to remove driver=>windows restart=>install driver=>windows restart  for all networks adapters (including bluetooth) one at the time. The restart is for windows to see unallocated addresses where the "new found" device can be installed (under another version of windows I use this procedure to correct the problem where am address was shared between sound card and network card) . 

A physical fault is less probable because in most of the cases it's cut and dry: it works or not.

Also about services switching Start-up Type from Automatic to Manual does not disable the service but just switch the way that service will start, at windows start-up or only when is called. 

Cheers.

[seanbirkhead]

I don't think it is a networking issue.

I have disabled both the LAN adapter and the wifi adapter in device manager and I still have the problem so it has to be somewhere else.

My next plan is to set windows update to only notify of updates but not to install them and then to re-install the chipset drivers from the recovery partition i.e. the drivers the machine presumably came with originally.

[seanbirkhead]

Just got this reply from microsoft so I am on the right track already I think :

You have problems with Intel(R) PCI Express Root Port. Please update motherboard driver and/or firmware from PC/motherboard support site.

[seanbirkhead]

My last plan (re-install old chipset drivers) didn't work.

While maybe a little overkill,  what I ended up doing was the following:

I booted into safe mode (no networking)

Then in device manager I uninstalled every peripheral device (except for my c: drive) and at the same time chose the option to uninstall the driver for the device.

I then immediately rebooted normally.

All the uninstalled devices got re-installed and now I have no WHEA warnings.

So, unfortunately, I can't pinpoint exactly where the problem was but that process seems to have fixed it.

[seanbirkhead]

Update :

Windows update just installed this driver and the problem immediately returned :

Realtek - Net - 10.42.526.2020

I rolled back the driver and the problem went away again.