Event IDs 106 and 107 may be logged in the System log on a Windows Server 2003-based computer


Symptoms


When you use Event Viewer to view the System log on a Microsoft Windows Server 2003-based computer, you may see event messages that are similar to the following:

Cause


These event messages may be logged in the System log in response to a Machine Check Architecture exception. A Machine Check Architecture exception is sent by the CPU in the computer in response to a computer error. The computer error may cause the computer to restart. After the computer has restarted, the CPU reports the Machine Check Architecture exception to the hardware abstraction layer (HAL). The HAL uses Windows Management Instrumentation (WMI) to report the Machine Check Architecture exception to the operating system. The operating system then logs the Machine Check Architecture exception in the System log as an event ID.

Resolution


To resolve this issue, you must read the data at the bottom of the event ID to determine the number of the CPU that reported the Machine Check Architecture exception. For example, event ID 107 may contain the following data:
0000: 01 00 00 00 01 00 00 00   ........
0008: 4a d3 bd a4 be b4 c4 01 JÓ½¤¾´Ä.
0010: 02 00 00 00 00 00 00 00
The offset 0010 reveals the number of the CPU that reported the Machine Check Architecture exception. In this example, the CPU that caused the exception is CPU number 2.

After you have determined the number of the CPU that reported the Machine Check Architecture exception, contact the manufacturer of the CPU to determine how to troubleshoot the issue.

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

For information about your hardware manufacturer, visit the following Web site:

More Information


Machine Check Architecture exceptions are classified into the following two categories:

  • Fatal errors
  • Corrected errors
Fatal errors are errors that cannot be corrected by the computer. When a fatal error occurs, the computer may restart unexpectedly or may stop unexpectedly.

Corrected errors are errors that are corrected by the computer. Corrected errors may also be corrected by the firmware, such as the processor abstraction layer or the system abstraction layer. The firmware is provided by the manufacturer of the computer. Corrected errors do not cause the computer to stop unexpectedly.

Fatal errors and corrected errors are logged in the System log as event IDs. You can use the information that is contained in the event IDs to understand why the computer stops and to prevent future issues with the computer.