Following fatal error alert was received: 40 in Win7

Topic

New Reply

Hoping someone can help me figure this out. I am running Windows 7 and my computer will randomly shut down without warning or error; no BSOD just appears as if it lost power but I do not believe that is the case. I am fairly certain that it is related to the following Event Log:

Following fatal error alert was received: 40

Event ID: 36887, Schannel

From what I read online fatal code error 40 relates to: TLS1_ALERT_HANDSHAKE_FAILURE (40)

Also users have reported that the error is related  to the TLS protocol and triggers when visiting websites that upgraded to https from http – “when this happens connections are dropped and processes hang” and my computer shuts down. I ran a performance check and it reported that the following services are abnormally stopped:

Net.msmq Listener Adapter – Exit Code 1075

Net.Pipe Listener Adapter – Exit Code 1075

Net.Tcp Listener Adapter – Exit Code 1075

I am unable to manually start these services. There is a security bulletin (MS14-066) related to this which specifies updates KB2992611, KB3042058, 3000850, 3018238 (but these updates may not be specific to windows 7). From what I understand the bulletin says to download and install the latest updates to remedy the issue but I can not do so because the update fails and I think it fails because of the services that are abnormally stopped.

Lastly, as I am sure it is related, the following are updates that I do not have installed (I purposely have not installed these updates)

KB2923545
KB3006137
KB3021917
KB3068708
KB3080149
KB3150513

These are the updates that are optional but fail when I try to install them:

KB4516048
KB4493132

These are the updates that are important but fail when I try to install them:

KB4516065
KB4535102

If anyone knows how to fix this problem or has any advice on my windows updates, please advise.

Windows 7 Ultimate x64

Gateway P-7811FX, Nvidia GeForce 9800M GTS, 2.93 GHz (T9800), 8GB RAM

Browser: Google Chrome

Source: https://support.microsoft.com/en-us/help/2992611/ms14-066-vulnerability-in-schannel-could-allow-remote-code-execution-n?ranMID=43674&ranEAID=je6NUbpObpQ&ranSiteID=je6NUbpObpQ-DVYj.yHxKqkScfFbKyuO2A&epi=je6NUbpObpQ-DVYj.yHxKqkScfFbKyuO2A&irgwc=1&OCID=AID2000142_aff_7795_1243925&tduid=(ir__waqj99ln29kfth2bkk0sohziz32xnaaauto21zrx00)(7795)(1243925)(je6NUbpObpQ-DVYj.yHxKqkScfFbKyuO2A)()&irclickid=_waqj99ln29kfth2bkk0sohziz32xnaaauto21zrx00

 

Reply | Quote

Replies

To sort out the random shutdown problem view the Event Log for shutdown and startup messages. Download Nirsoft FullEventLogView for an easier view of the event messages.

cheers, Paul

Reply | Quote

On your Event ID: 36887, Schannel Exit code 40
I found this solution:

In regedit, try locate key fipsalgorithmpolicy
here:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

If your fipsalgorithmpolicy is set to 1 set it to 0, restart and observe.

Source:
Spiceworks solution

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote

I see this error about once a month but it does not have any impact on my system (famous last words).

Can I suggest you run the following two commands in an administrative command window and tell us the results?

dism /online /cleanup-image /scanhealth

and

sfc /scannow

Reply | Quote

Paul, I downloaded FullEventLogView from Nirsoft and the errors are as follows:

The following fatal alert was received: 70 Schannel 36887 (Appears frequently)

The following fatal alert was received: 40 Schannel 36887 (Appears frequently)

The previous system shutdown was unexpected. 6008 EventLog

The Net.Msmq Listener Adapter service depends the following service: msmq. This service might not be installed. 7003

The Net.Tcp Listener Adapter service depends the following service: was. This service might not be installed. 7003

The Net.Pipe Listener Adapter service depends the following service: was. This service might not be installed. 7003

Event filter with query “SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage > 99″ could not be reactivated in namespace “//./root/CIMV2” because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Event ID 10

The following boot-start or system-start driver(s) failed to load: FileDisk   Event ID: 7026

Doriel, I also found that bit of information while researching this problem and have it set to zero.

Anonymous, I ran the first command but I don’t know how to check the logs at  %windir%\logs\CBS\Checksur.log. I ran the second command which resulted in Windows Resource Protection did not find any integrity violations.

Reply | Quote

The previous system shutdown was unexpected

Your machine is definitely crashing.
Download NirSoft BlueScreenView and run it immediately post crash to see what went wrong.
If nothing is shown it may be a power or CPU overheating issue.

You can check CPU temperature with CPUID HWMonitor.

Power supply failure would likely result in your HDD powering down. Is the HDD still spinning post crash? You can listen to it by putting a screwdriver handle to your ear and the tip on the disk.

cheers, Paul

Reply | Quote

[Elart Coello]

I have my laptop charging when I use it but it has a fully charged battery connected so if the power supply failed or the charging cord disconnects the computer would resort to the battery for power. When the computer shuts down, it lags a little bit and then just shuts off. I don’t think its a power supply issue. It really does seem like what I mentioned in my original post; the processes hang and the computer has an unexpected shut down. The event log doesn’t get a chance to report what went wrong, it only reports an unexpected shut down. I believe every time it has happened I have had a chrome browser open. I am not always around when the computer turns off, but if I manage to see it happen I will listen for the HDD spinning.
Does anyone know if the KB updates I have purposely not installed are the cause of the cumulative updates failing to install?

• This reply was modified 4 years, 9 months ago by Elart Coello.
• This reply was modified 4 years, 9 months ago by Elart Coello.

Reply | Quote

It could still be power supply, the battery only supplies power to the power supply.

It could be dust in the cooling vents. Can you hear the fan running at all / prior to shutdown?
Let us know what temperatures you are getting.

cheers, Paul

Reply | Quote

Paul, hello again; still dealing with this. the last time it crashed (just now) i did hear the fan running but I also noticed and I should have mentioned this initially, the computer doesnt actually turn off, its my screen that goes black. the computer lights are still on and the hdd is spinning everything seems normal but I have a black screen and cant do anything and I am forced to shut down the computer by holding the power button down. I dont know why I didn’t mention this when I first asked the question…

Reply | Quote

the computer doesnt actually turn off

I don’t have any suggestions for re-lighting you monitor, however using the Ctrl+Alt+Del keyboard command instead of a “press and hold” the power button restart is more hardware friendly.

And as Paul said, “Let us know what temperatures you are getting.”

He’s right. As others have suggested, I use this:  https://www.nirsoft.net/

 

If you have a desktop, you could try unplugging the the video cable from the back of your monitor, pausing a moment, and plugging it back in.

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

Reply | Quote

Here is some of the requested information I saved from HWMonitor, FullEventLogView and BlueScreenView.

Reply | Quote

This probably wont solve the issue, but according to HWMonitor.txt you have 4% free space on your C:\ (I mean 7GB seems to be low. Depending on your virtual memory setting and hybernation settings, this may be too low)

I recommend to clean files you are not using.
Click Start
Go to All Programs > Accessories > System Tools
Click Disk Cleanup
Choose what type of files and folders to delete at the Files to delete section
Click OK
To delete system files that are no longer needed, click Clean up system files.

Click Delete Files

Also program TreeSize can be useful to find what is eating your space.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote

Are those CPU temperatures at idle? If so they seem a bit high.

Download the “stand alone” version (under other downloads…) of Core Temp and turn the logging on. It will write to a CSV file in the same directory as Core Temp. Post the file after the next crash.

I’d be cleaning the fan / ducts anyway.

cheers, Paul

Reply | Quote

I haven’t had a system crash for awhile now, in the meantime I did manage to install a few updates that would fail with help from this site. I have no idea if the problem is actually no longer an issue or if the updates were effective, time will tell. I do still get the Schannel errors frequently. I have a bluetooth device to intsall on this laptop so I will reapply thermal paste and clean out the fans etc in the process.

 

*temps were at idle

Reply | Quote

Occasionally  I am also getting  Event ID: 36887, Schannel …

Following fatal error alert was received: 40

Following fatal error alert was received: 70

TLS1_ALERT_HANDSHAKE_FAILURE (40)

TLS1_ALERT_PROTOCOL_VERSION (70)

Therefore it appears to be configuration issues with the mail server that outlook retrieves emails from.

If the problem this is not permanent, then your Internet service provider, it might have bad moments and network packets get corrupted.

My vote goes to ISP caused issues, because the specific day and time, neither on-line gaming was problem free.

Win7 Pro (Blue Retail Box) i7 4770 - 16GB DDR3 2400XMP - GTX1060 6GB - Professional Workstation

Reply | Quote