perfmon shows network issues (the following service stopped abnormally):
FDResPub
Display Name:Function Discovery Resource PublicationExit Code:-2147014847Service Name:FDResPubPath:C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonationService Code:0Started:FalseState:Stopped
This service is required for Homegroups on Win7
Please do this:
1. Click Start – Search, type “Services.msc”
2. Look for Function Discovery Resource Publication, right-click and select properties.
3. Set the service to start as “Automatic (Delayed)” as against the default “Automatic”
From this link:
Function Discovery Resource Publication Service Fail to start in Windows 7 | Windows Reference
Why was BITS changed to On-Demand start?
Event[269]:
Log Name: System
Source: Service Control Manager
Date: 2011-08-04T06:31:35.915
Event ID: 7040
Task: N/A
Level: Information
Opcode: N/A
Keyword: Classic
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: main
Description:
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.
Could this be a problem with your DNS server(s)?
What are you using for DNS server(s)?
Event[34]:
Log Name: System
Source: Microsoft-Windows-DNS-Client
Date: 2011-08-04T22:34:02.743
Event ID: 1014
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-20
User Name: NT AUTHORITY\NETWORK SERVICE
Computer: main
Description:
Name resolution for the name war2.warcraft.org timed out after none of the configured DNS servers responded.
Please install the latest video driver available from the nVidia download site (install even if you have the latest version):
NVIDIA DRIVERS 275.33 WHQL
Event[45]:
Log Name: System
Source: Display
Date: 2011-08-04T21:50:45.000
Event ID: 4101
Task: N/A
Level: Warning
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: main
Description:
Display driver nvlddmkm stopped responding and has successfully recovered.
Check your video card:
- see if any power connectors are firmly seated
- see that the fan is spinning freely
- see that the cooler is clear and free of dust/dirt
- see that airflow is letting cool air get into the video card cooler
There's many of these Warnings (which could, IMO, be a cause of this freeze) 30-40 entries within one (1) minute:
Event[85]:
Log Name: System
Source: nvstor64
Date: 2011-08-04T14:03:00.118
Event ID: 8
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: main
Description:
A request to this device has been cancelled.
Device: \Device\RaidPort0
Model: INTEL SSDSA2M160G2GC
Firmware Version: 2CV1
Serial Number: CVPO010302UB160AGN
Port: 0
Please update:
- nVidia chipset drivers
- storage controller drivers
- RAID drivers
- firmware on SSD(s)
This error concerns me as it sounds like something is trying to gain access to your system. Have you scanned for malware? Have you visited any sites that would try to attack your system?
Event[1112]:
Log Name: System
Source: LsaSrv
Date: 2011-08-02T20:28:16.464
Event ID: 40968
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: main
Description:
The Security System has received an authentication request that could not be decoded. The request has failed.
Call of Duty 4 - Modern Warfare is crashing regularly, please uninstall it until we're done troubleshooting. When you reinstall it, please immediately get the latest patches for it. The error is a memory access error (c0000005), so it's likely to be a driver/application that's misbehaving - and it's likely related to the gaming.
This error suggests to me that my previous recommendations for drivers are likely to be the "fix" for your problems. Other possibilities are that there are problems in the storage sub-system that could be hardware based, compatibility, or software.
Event[251]:
Log Name: Application
Source: Application Error
Date: 2011-08-02T22:56:30.000
Event ID: 1005
Task: Application Crashing Events
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: main
Description:
Windows cannot access the file for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program Windows Explorer because of this error.
Program: Windows Explorer
File:
The error value is listed in the Additional Data section.
User Action
1. Open the file again. This situation might be a temporary problem that corrects itself when the program runs again.
2. If the file still cannot be accessed and
- It is on the network, your network administrator should verify that there is not a problem with the network and that the server can be contacted.
- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for further assistance.
Additional Data
Error value: 00000000
Disk type: 0
This is likely to be the security access problem that I mentioned earlier:
Event[325]:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 2011-08-02T22:35:00.000
Event ID: 63
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: S-1-5-21-2867749724-3701689050-859502455-1000
User Name: main\Sheepa
Computer: main
Description:
A provider, NPU Management Provider, has been registered in the Windows Management Instrumentation namespace root\NVIDIA\NS_Eth1\NS_EthStat to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Update/replace nVidia video drivers
It looks like Windows Live is causing registry issues. Please uninstall all Live stuff from your system. Reinstall the latest version if you need it.
Event[524]:
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 2011-08-01T16:52:24.006
Event ID: 1530
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: main
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2867749724-3701689050-859502455-1000:
Process 1732 (\Device\HarddiskVolume2\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-2867749724-3701689050-859502455-1000\Software\Microsoft\SystemCertificates\Root
Good Luck!
