Schannel EventID 36887

[Falcon Speed]

Recently, my computer has been crashing in the last two weeks. Everything just freeze. When logged back in and check the Event Log, I see this (started showing up two weeks ago and now it is repeating every 20 minutes):

- System
- Provider
[ Name] Schannel
[ Guid] {1F678132-5938-4686-9FDC-C8FF68F15C85}
EventID 36887
Version 0
Level 2

[Midknyte]

Have you installed all current Windows Updates?

https://www.zdnet.com/article/micros...curity-update/
https://support.microsoft.com/en-us/...de-execution-n

[Falcon Speed]

Hi Midknyte,

What would be all the current windows update? I have installed the Convience Rollup which is pseudo SP2 for WIndows 7.
https://support.microsoft.com/en-us/...server-2008-r2

I have read those articles before I posted this question.

I request to install these too:

KB3018238
KB2992611
KB3011780
KB3000850
KB3042058

But one of the articles that you posted said to avoid KB2992611. Therefore, I have not installed the above yet.

[Midknyte]

The convenience rollup does NOT include all current updates. You'd still need to run Windows Update to see what is missing.

This rollup package includes most updates that were released after the release of SP1 for Windows 7 and Windows Server 2008 R2, through April 2016.

KB2992611 is pretty old, so there is a good chance that it was superceded by a later update.

[Falcon Speed]

Would there be a download, like the convenience rollup, with all the latest updates? The reason I asked is because each time I reimage/restore my computer, I don't want to download each time, but rather just run a package.

Otherwise, where does Microsoft Update downloads to and can I save them?

Thank you

[Falcon Speed]

After I ran Microsoft Windows Update, the "Schannel EventID 36887" issue is still there.

[Midknyte]

Would there be a download, like the convenience rollup, with all the latest updates?

Not that I'm aware of. You could try something like Autopatcher to bulk download the updates.
http://www.autopatcher.net/forum/viewforum.php?f=3

Did you check if the specific updates you listed were installed or not? Is there anything more to the error than what you posted? Like an error code?

What browser are you using? It seems like that error can appear when you open https sites with http.

[Falcon Speed]

Actually, I found a way to download each update one by one. After doing the Windows Update from Control Panel, I go to it and "View Update History". When you right click on each update, you can copy the details which shows the link where the KB is located. Then you can download individually for 32 and 64. I plan to do this for both my main image (host) and my virtualbox images (guest) so that I don't have to update each time after restoration. Of course, I understand new ones will come out each month.

I checked and those updates that have been listed were not installed.

I don't have a browser in my host environment for security protection. I uninstalled all browsers. I use both Chrome and IE to browse in Virtualbox to contain malware. However, this issue is happening in the host.

Solution: I think it is clearing the cookies/cache in Internet Option from Control Panel. The issue was showing up every 20 minutes and when the PC wakes up/reboot/shutdown... It has been almost an hour and it has no longer been showing up even after waking up.

Remember last week when I had that certificate problem and you suggested to do a Window Updates to clear it up? Well, I think the root cause of this one is from the same topic where Google and Microsoft have upgraded everything from http to https. I was able to find the above solution from one of the sites mentioned about http to https so I decided to clear the SSL Certificates and Cookies from Internet Options.

https://www.sevenforums.com/general-...ived-40-a.html

My PC has been crashing sporadically for days. Hopefully, this will fix it because it is considered as a fatal alert.

Regardless, thank you again. You have open up my eyes on keeping an eye on Windows Update.

[Falcon Speed]

It has been more than an hour and the issue is still not showing up again. So the question is, why would clearing the Internet Option cache and cookies fixed this issue?

[Midknyte]

That's a weird one. It's possible you had an old cookie that used http instead of https.

I don't have a browser in my host environment for security protection. I uninstalled all browsers. I use both Chrome and IE to browse in Virtualbox to contain malware. However, this issue is happening in the host.

Is the VM using NAT or bridged mode? I'm not sure if Virtualbox uses the same terms as VMWare, though. NAT means it shares the host's IP and network connection. Bridged means the VM has it's own IP and connection, almost like a separate machine.

[Falcon Speed]

For those who needs to download the Windows Updates separately, go here and type in the KB number, with or without "KB": https://www.catalog.update.microsoft.com/Home.aspx

Run a "Check for Updates" in Windows Updates first and it will list all of the updates that you will need as well as optional needs.

That's a weird one. It's possible you had an old cookie that used http instead of https.

But the strange thing is that I don't have any browsers in the host environment so what would be using cookies or so? It is now confirmed that the issue has not showed up for over 10 hours.

Is the VM using NAT or bridged mode? I'm not sure if Virtualbox uses the same terms as VMWare, though. NAT means it shares the host's IP and network connection. Bridged means the VM has it's own IP and connection, almost like a separate machine.

The VM is using NAT. I know where you are going with this. You might be wondering if the guest browsers firing off the issue right? I don't believe so because when the SChannel issue came up in Event Log, VM was not running.

Virtualbox has the following:

• NAT
• Nat Network
• Bridged Adapter
• Internal Network
• Host-Only Adapter
• Generic