New
#1
Big probs with Boot, many errors,hard disk and so on!
Long OP Please bear with me!
A few weeks back my computer started having problems. The system was slow in starting up and failed a few minutes after. Light on base of mouse would die and monitor would switch to power saving. The light of the front switch on my Inspiron 560 remained steady. Switching the machine off was nigh impossible meaning I had to switch off at the mains wall switch.
To some extent things improved following a relative's intervention: he refreshed the BIOS, I believe.
After about a week problems returned as before and with a plethora of errors
Code:Log Name: System Source: Service Control Manager Date: 14/11/2011 13:09:48 Event ID: 7001 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7001</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:09:48.210060900Z" /> <EventRecordID>37370</EventRecordID> <Correlation /> <Execution ProcessID="412" ThreadID="544" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">Network List Service</Data> <Data Name="param2">Network Location Awareness</Data> <Data Name="param3">%%1068</Data> </EventData> </Event> ====================================================================== Log Name: System Source: Microsoft-Windows-DistributedCOM Date: 14/11/2011 13:09:47 Event ID: 10005 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89} Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /> <EventID Qualifiers="49152">10005</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:09:47.000000000Z" /> <EventRecordID>37363</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">1068</Data> <Data Name="param2">netprofm</Data> <Data Name="param3"> </Data> <Data Name="param4">{A47979D2-C419-11D9-A5B4-001185AD2B89}</Data> </EventData> </Event> ==================================================================== Log Name: System Source: Microsoft-Windows-DistributedCOM Date: 14/11/2011 13:09:47 Event ID: 10005 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030} Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /> <EventID Qualifiers="49152">10005</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:09:47.000000000Z" /> <EventRecordID>37365</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">1084</Data> <Data Name="param2">WSearch</Data> <Data Name="param3"> </Data> <Data Name="param4">{9E175B6D-F52A-11D8-B9A5-505054503030}</Data> </EventData> </Event> ==================================================================== Log Name: System Source: Service Control Manager Date: 14/11/2011 13:09:30 Event ID: 7001 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7001</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:09:30.831630400Z" /> <EventRecordID>37352</EventRecordID> <Correlation /> <Execution ProcessID="412" ThreadID="416" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">SMB MiniRedirector Wrapper and Engine</Data> <Data Name="param2">Redirected Buffering Sub Sysytem</Data> <Data Name="param3">%%31</Data> </EventData> </Event> =================================================================================== Log Name: System Source: Microsoft-Windows-WER-SystemErrorReporting Date: 14/11/2011 13:09:30 Event ID: 1001 Task Category: None Level: Error Keywords: Classic User: N/A Computer: GORDON-PC Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0xfffff28007c7e880, 0x0000000000000002, 0x0000000000000000, 0xfffff8000228dd94). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: . Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:09:30.000000000Z" /> <EventRecordID>37334</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>GORDON-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">0x0000000a (0xfffff28007c7e880, 0x0000000000000002, 0x0000000000000000, 0xfffff8000228dd94)</Data> <Data Name="param2">C:\Windows\MEMORY.DMP</Data> <Data Name="param3"> </Data> </EventData> </Event> ============================================================================================== Log Name: System Source: Microsoft-Windows-WER-SystemErrorReporting Date: 14/11/2011 13:09:30 Event ID: 1005 Task Category: None Level: Error Keywords: Classic User: N/A Computer: GORDON-PC Description: Unable to produce a minidump file from the full dump file. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" /> <EventID Qualifiers="16384">1005</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:09:30.000000000Z" /> <EventRecordID>37333</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>GORDON-PC</Computer> <Security /> </System> <EventData> </EventData> </Event> ================================================================================================== Log Name: Application Source: Application Error Date: 14/11/2011 13:24:19 Event ID: 1000 Task Category: (100) Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: Faulting application name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808 Faulting module name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808 Exception code: 0xc0000094 Fault offset: 0x0000000000034f82 Faulting process id: 0x4ec Faulting application start time: 0x01cca2d086052264 Faulting application path: C:\Windows\system32\mmc.exe Faulting module path: C:\Windows\system32\mmc.exe Report Id: f49cd4c6-0ec3-11e1-8830-9bd613533ee6 Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Application Error" /> <EventID Qualifiers="0">1000</EventID> <Level>2</Level> <Task>100</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:24:19.000000000Z" /> <EventRecordID>10883</EventRecordID> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data>mmc.exe</Data> <Data>6.1.7600.16385</Data> <Data>4a5bc808</Data> <Data>mmc.exe</Data> <Data>6.1.7600.16385</Data> <Data>4a5bc808</Data> <Data>c0000094</Data> <Data>0000000000034f82</Data> <Data>4ec</Data> <Data>01cca2d086052264</Data> <Data>C:\Windows\system32\mmc.exe</Data> <Data>C:\Windows\system32\mmc.exe</Data> <Data>f49cd4c6-0ec3-11e1-8830-9bd613533ee6</Data> </EventData> </Event> Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 14/11/2011 13:13:41 Event ID: 3011 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Gordon-PC Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" /> <EventID>3011</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:13:41.290070300Z" /> <EventRecordID>10879</EventRecordID> <Correlation /> <Execution ProcessID="1584" ThreadID="1588" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf"> <param1>WmiApRpl</param1> <param2>WmiApRpl</param2> <binaryDataSize>8</binaryDataSize> <binaryData>F20300004D070000</binaryData> </EventXML> </UserData> </Event ======================================================================== Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 14/11/2011 13:13:41 Event ID: 3011 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Gordon-PC Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" /> <EventID>3011</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T13:13:41.290070300Z" /> <EventRecordID>10879</EventRecordID> <Correlation /> <Execution ProcessID="1584" ThreadID="1588" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf"> <param1>WmiApRpl</param1> <param2>WmiApRpl</param2> <binaryDataSize>8</binaryDataSize> <binaryData>F20300004D070000</binaryData> </EventXML> </UserData> </Event> Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 14/11/2011 18:25:53 Event ID: 3011 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Gordon-PC Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" /> <EventID>3011</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T18:25:53.954603900Z" /> <EventRecordID>10963</EventRecordID> <Correlation /> <Execution ProcessID="2528" ThreadID="1564" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf"> <param1>WmiApRpl</param1> <param2>WmiApRpl</param2> <binaryDataSize>8</binaryDataSize> <binaryData>F20300004D070000</binaryData> </EventXML> </UserData> </Event> ================================================================================ Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 14/11/2011 18:25:53 Event ID: 3011 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Gordon-PC Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" /> <EventID>3011</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T18:25:53.954603900Z" /> <EventRecordID>10963</EventRecordID> <Correlation /> <Execution ProcessID="2528" ThreadID="1564" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf"> <param1>WmiApRpl</param1> <param2>WmiApRpl</param2> <binaryDataSize>8</binaryDataSize> <binaryData>F20300004D070000</binaryData> </EventXML> </UserData> </Event> ============================================================================== Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 14/11/2011 18:25:53 Event ID: 3012 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Gordon-PC Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" /> <EventID>3012</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T18:25:53.954603900Z" /> <EventRecordID>10962</EventRecordID> <Correlation /> <Execution ProcessID="2528" ThreadID="1564" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf"> <param1>Performance</param1> <binaryDataSize>16</binaryDataSize> <binaryData>37070000000000000000000009030000</binaryData> </EventXML> </UserData> </Event> =========================================================================== Log Name: Application Source: Microsoft-Windows-Search Date: 14/11/2011 14:48:11 Event ID: 3030 Task Category: Gatherer Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The gatherer service cannot be initialized. Details: The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660) Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" /> <EventID Qualifiers="49152">3030</EventID> <Version>0</Version> <Level>2</Level> <Task>3</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-14T14:48:11.000000000Z" /> <EventRecordID>10923</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="ExtraInfo"> Details: The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660) </Data> </EventData> </Event>[/QUOTE] Finally, it was impossible to reboot and the light on the front of machine remained ON but with no activity light. All that happened when I powered OFF/ON at the wall was a plop from my power strip and a bleep from the system. Same relative came and told me all he had heard was a click from the hard disk but no sound of it spinning up. We gave the innards a spring clean, vac and air spray, and ensured that everything was seated properly, just in case. The disk remained stuck until he tapped lightly the outside of the disk a few times. Since then everything seems to be working and boot this morning was swift with only two errors.(Just had a power glitch of some sort whilst posting:eek:) I am confused about these as I believe one is concerned with SuperAntispyware which I had removed, and there is no trace ATAICS in the registry. As to the other the Temp folder was cleared a few days ago. What advice can you give of next steps need I take for the error messages? Do you think the hard disk's problem, although seemingly cured, needs further attention, and how, what? Thank you in anticipation of your responses.:) EDIT At glitch whilst posting there were incidences of the two errors at this mornings boot and also theseLog Name: System Source: Service Control Manager Date: 19/11/2011 07:22:29 Event ID: 7000 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The !SASCORE service failed to start due to the following error: The system cannot find the path specified. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7000</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-11-19T07:22:29.909461100Z" /> <EventRecordID>40745</EventRecordID> <Correlation /> <Execution ProcessID="516" ThreadID="520" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">!SASCORE</Data> <Data Name="param2">%%3</Data> </EventData> </Event> ========================================= Log Name: Application Source: Microsoft-Windows-Search Date: 19/11/2011 07:22:54 Event ID: 3030 Task Category: Gatherer Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The gatherer service cannot be initialized. Details: The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660) Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" /> <EventID Qualifiers="49152">3030</EventID> <Version>0</Version> <Level>2</Level> <Task>3</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-19T07:22:54.000000000Z" /> <EventRecordID>11556</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data Name="ExtraInfo"> Details: The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder. (HRESULT : 0x80070660) (0x80070660) </Data> </EventData> </Event>Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 19/11/2011 09:53:28 Event ID: 41 Task Category: (63) Level: Critical Keywords: (2) User: SYSTEM Computer: Gordon-PC Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> <EventID>41</EventID> <Version>2</Version> <Level>1</Level> <Task>63</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000002</Keywords> <TimeCreated SystemTime="2011-11-19T09:53:28.396810300Z" /> <EventRecordID>40835</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="8" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="BugcheckCode">0</Data> <Data Name="BugcheckParameter1">0x0</Data> <Data Name="BugcheckParameter2">0x0</Data> <Data Name="BugcheckParameter3">0x0</Data> <Data Name="BugcheckParameter4">0x0</Data> <Data Name="SleepInProgress">false</Data> <Data Name="PowerButtonTimestamp">0</Data> </EventData> </Event>Log Name: System Source: EventLog Date: 19/11/2011 09:53:40 Event ID: 6008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The previous system shutdown at 09:52:24 on 19/11/2011 was unexpected. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EventLog" /> <EventID Qualifiers="32768">6008</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" /> <EventRecordID>40836</EventRecordID> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data>09:52:24</Data> <Data>19/11/2011</Data> <Data> </Data> <Data> </Data> <Data>9019</Data> <Data> </Data> <Data> </Data> ============================================================================================================================================ Log Name: Application Source: Microsoft-Windows-EventSystem Date: 19/11/2011 09:53:40 Event ID: 4625 Task Category: None Level: Information Keywords: Classic User: N/A Computer: GORDON-PC Description: The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" /> <EventID Qualifiers="16384">4625</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" /> <EventRecordID>11580</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>GORDON-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">86400</Data> <Data Name="param2">SuppressDuplicateDuration</Data> <Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data> </EventData> </Event> <Binary>DB070B0006001300090034001800D300DB070B0006001300090034001800D300600900003C000000010000006009000000000000B00400000100000000000000</Binary> </EventData> </Event>[/QUOTE]Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 19/11/2011 09:53:28 Event ID: 41 Task Category: (63) Level: Critical Keywords: (2) User: SYSTEM Computer: Gordon-PC Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> <EventID>41</EventID> <Version>2</Version> <Level>1</Level> <Task>63</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000002</Keywords> <TimeCreated SystemTime="2011-11-19T09:53:28.396810300Z" /> <EventRecordID>40835</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="8" /> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="BugcheckCode">0</Data> <Data Name="BugcheckParameter1">0x0</Data> <Data Name="BugcheckParameter2">0x0</Data> <Data Name="BugcheckParameter3">0x0</Data> <Data Name="BugcheckParameter4">0x0</Data> <Data Name="SleepInProgress">false</Data> <Data Name="PowerButtonTimestamp">0</Data> </EventData> </Event>Log Name: System Source: EventLog Date: 19/11/2011 09:53:40 Event ID: 6008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Gordon-PC Description: The previous system shutdown at 09:52:24 on 19/11/2011 was unexpected. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EventLog" /> <EventID Qualifiers="32768">6008</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" /> <EventRecordID>40836</EventRecordID> <Channel>System</Channel> <Computer>Gordon-PC</Computer> <Security /> </System> <EventData> <Data>09:52:24</Data> <Data>19/11/2011</Data> <Data> </Data> <Data> </Data> <Data>9019</Data> <Data> </Data> <Data> </Data> ============================================================================================================================================ Log Name: Application Source: Microsoft-Windows-EventSystem Date: 19/11/2011 09:53:40 Event ID: 4625 Task Category: None Level: Information Keywords: Classic User: N/A Computer: GORDON-PC Description: The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" /> <EventID Qualifiers="16384">4625</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-19T09:53:40.000000000Z" /> <EventRecordID>11580</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>GORDON-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">86400</Data> <Data Name="param2">SuppressDuplicateDuration</Data> <Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data> </EventData> </Event> <Binary>DB070B0006001300090034001800D300DB070B0006001300090034001800D300600900003C000000010000006009000000000000B00400000100000000000000</Binary> </EventData> </Event>
Last edited by rundwald; 19 Nov 2011 at 05:34. Reason: Info re event log whilst posting OP