Windows will not go to desktop

By Umbrello
in Microsoft (Windows)

 Share

Recommended Posts

Veteran

Umbrello

Posted
Posted

Issue started today. When to boot up my Asus laptop. It goes through the bootup process, Welcome screen, then after that it freezes at a black screen and nothing happens. Mouse cursor is moveable but that's it. I ran the Windows Memory diagnostics, everything was clean. I am running in safe mode. Any help on this?

Windows 7 Home Premium 64-bit

Intel Core i7

6GB RAM

Link to comment
https://www.neowin.net/forum/topic/1119006-windows-will-not-go-to-desktop/
Share on other sites
Veteran

Shane Nokes

Posted
Posted

Have you tried running a system restore back to your last save point? It sounds like something installed that doesn't want to work properly if Safe Mode is working.

Also running SFC /scannow from command prompt would probably be wise...just in case it's a system file responsible for it.

Grand Master

Som

Posted
Posted

if you can open the task manager (CTRL, Shift & Escape) go to run and type control userpasswords and create a new user account, log out and see if you can access the desktop in the new account. Also try running combofix.. handy piece of software...

another thing i would recommend is to run a diagnostic on your hard drive ... actually do that first. Seatools is pretty good and works with most makes of hard drive... hope something there helps :)

Grand Master

Marshall Veteran

Posted
  • Veteran
Posted

if you can open the task manager (CTRL, Shift & Escape) go to run and type control userpasswords and create a new user account, log out and see if you can access the desktop in the new account. Also try running combofix.. handy piece of software...

Good advice, but I wouldn't recommend to any one to use combo fix unless they're familiar with it's workings. Especially since we're unaware of the OP's level of expertise.

From ComboFix's website:

Please note that running this program without supervision can cause your computer to not operate correctly. Therefore only run this program at the request of an experienced helper.

Just an FYI :)

Community Regular

brink668

Posted
Posted

I have seen this happen and sometimes the computer takes a few minutes to boot into. How long have you waited?

I too have a laptop with the same issue but it does boot into Windows eventually. I have a bigger problem though I have a Ghost Image of Windows 7 of a laptop issue and I have not had any success in fixing this. However, I am rebuilding to see if a driver maybe cause of this. I have done some performance analysis with the Windows Developer software kit and can't identify any issue.

Veteran

Umbrello

Posted
  • Author
Posted

C:\Users\*********>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.

Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

I have seen this happen and sometimes the computer takes a few minutes to boot into. How long have you waited?

I too have a laptop with the same issue but it does boot into Windows eventually. I have a bigger problem though I have a Ghost Image of Windows 7 of a laptop issue and I have not had any success in fixing this. However, I am rebuilding to see if a driver maybe cause of this. I have done some performance analysis with the Windows Developer software kit and can't identify any issue.

Enough time, really. I powered up the laptop, left to watch some TV and take care of some things, came back and it was still at the blank black screen with the cursor. Gave it about 10 full minutes to do its thing.

@Detection, where can I view the Event Logs here in safe mode?

Edit: Ok, I'm in Event Viewer. What should I be looking at/for?

Grand Master

Detection

Posted
Posted

C:\Users\*********>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.

Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

Enough time, really. I powered up the laptop, left to watch some TV and take care of some things, came back and it was still at the blank black screen with the cursor. Gave it about 10 full minutes to do its thing.

@Detection, where can I view the Event Logs here in safe mode?

Edit: Ok, I'm in Event Viewer. What should I be looking at/for?

I'd have a look in Windows Logs > System

Look for any ! critical errors or warnings

If you're able to log in using safemode, chances are it is a driver issue, possible a service that is hanging, event logs should show that

You could open MSCONFIG and disable any non microsoft services and see if it allows you to log in normally, then enable them 1 by 1

Veteran

Shane Nokes

Posted
Posted

You should be able to run it by pulling up Eventvwr.msc

That should give you the Event logs and let you see if anything odd is happening. My next step would be to run System Restore and just go back to the newest restore point.

After that I'd start doing the usual troubleshooting via Diskcheck, Memtest, and other utilities.

Grand Master

Detection

Posted
Posted

Uhmm, there are a ton of !Error events. ;| What do?

Have a look at the ones that appeared at the time of your last failed login, or clear the event log, reboot normally to cause the error, then boot back into safe mode and see what errors appear

Grand Master

Marshall Veteran

Posted
  • Veteran
Posted

You could open MSCONFIG and disable any non microsoft services and see if it allows you to log in normally, then enable them 1 by 1

This is what I would recommend, have you done this yet?

Start>Run type Msconfig, then choose Startups tab. Disable anything that doesn't need to boot with the machine.

If you aren't sure what processes can be disabled safely, take a screenshot and post it, or PM it to me.

Regards

Grand Master

Detection

Posted
Posted

This is what I would recommend, have you done this yet?

Start>Run type Msconfig, then choose Startups tab. Disable anything that doesn't need to boot with the machine.

If you aren't sure what processes can be disabled safely, take a screenshot and post it, or PM it to me.

Regards

Clicking "Hide all Microsoft Services" check box in msconfig should allow for completely safe disabling of any remaining services too

Grand Master

Marshall Veteran

Posted
  • Veteran
Posted

Clicking "Hide all Microsoft Services" check box in msconfig should allow for completely safe disabling of any remaining services too

Good point (Y)

Also you could just choose Diagnostic Startup from the main page of Msconfig.

Veteran

Umbrello

Posted
  • Author
Posted

Ok, so the process was so lengthy I let it sit overnight. Desk check seems to have passed. Woke up this morning, opened up my laptop and it was sitting at desktop. However... it was nonresponsive. Mouse cursor would move, but if I moved my cursor over the taskbar or icons there would be a loading indication displayed. You know, the rotating circle windows gives. So, I did a hard reboot in safe mode. Here is what the event viewer says beginning from where the Warning!'s start(sorry for the lengthiness):

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:16 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />

<EventRecordID>32507</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:16 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />

<EventRecordID>32506</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:16 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />

<EventRecordID>32505</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:16 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />

<EventRecordID>32504</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:16 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />

<EventRecordID>32503</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:16 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />

<EventRecordID>32502</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:14 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.930858700Z" />

<EventRecordID>32501</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">HomeGroup Provider</Data>

<Data Name="param2">Function Discovery Provider Host</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:14 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.509658000Z" />

<EventRecordID>32500</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:14 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.509658000Z" />

<EventRecordID>32499</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:14 AM

Event ID: 7001

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Computer Browser service depends on the Server service which failed to start because of the following error:

The dependency service or group failed to start.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7001</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.509658000Z" />

<EventRecordID>32498</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Computer Browser</Data>

<Data Name="param2">Server</Data>

<Data Name="param3">%%1068</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:14 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Network List Service service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.228857500Z" />

<EventRecordID>32497</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Network List Service</Data>

<Data Name="param2">running</Data>

<Binary>6E0065007400700072006F0066006D002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:14 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Network Connections service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.197657400Z" />

<EventRecordID>32496</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Network Connections</Data>

<Data Name="param2">running</Data>

<Binary>4E00650074006D0061006E002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 11/13/2012 6:13:14 AM

Event ID: 10005

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:

{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />

<EventID Qualifiers="49152">10005</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.000000000Z" />

<EventRecordID>32495</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">1084</Data>

<Data Name="param2">WSearch</Data>

<Data Name="param3">

</Data>

<Data Name="param4">{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 11/13/2012 6:13:14 AM

Event ID: 10005

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:

{9E175B6D-F52A-11D8-B9A5-505054503030}

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />

<EventID Qualifiers="49152">10005</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:14.000000000Z" />

<EventRecordID>32494</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">1084</Data>

<Data Name="param2">WSearch</Data>

<Data Name="param3">

</Data>

<Data Name="param4">{9E175B6D-F52A-11D8-B9A5-505054503030}</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 11/13/2012 6:13:13 AM

Event ID: 10005

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />

<EventID Qualifiers="49152">10005</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:13.000000000Z" />

<EventRecordID>32493</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">1084</Data>

<Data Name="param2">EventSystem</Data>

<Data Name="param3">

</Data>

<Data Name="param4">{1BE1F766-5536-11D1-B726-00C04FB926AF}</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:06 AM

Event ID: 7026

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The following boot-start or system-start driver(s) failed to load:

aswSnx

aswSP

aswTdi

discache

spldr

Wanarpv6

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="49152">7026</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:06.616044100Z" />

<EventRecordID>32492</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="516" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">

aswSnx

aswSP

aswTdi

discache

spldr

Wanarpv6</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:06 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Network Location Awareness service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:06.616044100Z" />

<EventRecordID>32491</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="1164" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Network Location Awareness</Data>

<Data Name="param2">running</Data>

<Binary>4E006C0061005300760063002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:06 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Cryptographic Services service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:06.600444100Z" />

<EventRecordID>32490</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Cryptographic Services</Data>

<Data Name="param2">running</Data>

<Binary>430072007900700074005300760063002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:05 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Ad-Aware Service service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:05.945242900Z" />

<EventRecordID>32489</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Ad-Aware Service</Data>

<Data Name="param2">running</Data>

<Binary>410064002D0041007700610072006500200053006500720076006900630065002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 11/13/2012 6:13:06 AM

Event ID: 10005

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server:

{DD522ACC-F821-461A-A407-50B198B896DC}

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />

<EventID Qualifiers="49152">10005</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:06.000000000Z" />

<EventRecordID>32488</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">1084</Data>

<Data Name="param2">ShellHWDetection</Data>

<Data Name="param3">

</Data>

<Data Name="param4">{DD522ACC-F821-461A-A407-50B198B896DC}</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:03 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The IKE and AuthIP IPsec Keying Modules service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:03.012437800Z" />

<EventRecordID>32487</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">IKE and AuthIP IPsec Keying Modules</Data>

<Data Name="param2">running</Data>

<Binary>49004B0045004500580054002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:02 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Windows Management Instrumentation service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:02.996837800Z" />

<EventRecordID>32486</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Management Instrumentation</Data>

<Data Name="param2">running</Data>

<Binary>570069006E006D0067006D0074002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:13:02 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Workstation service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:02.029636100Z" />

<EventRecordID>32485</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Workstation</Data>

<Data Name="param2">running</Data>

<Binary>4C0061006E006D0061006E0057006F0072006B00730074006100740069006F006E002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Winlogon

Date: 11/13/2012 6:13:00 AM

Event ID: 7001

Task Category: (1101)

Level: Information

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

User Logon Notification for Customer Experience Improvement Program

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />

<EventID>7001</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>1101</Task>

<Opcode>0</Opcode>

<Keywords>0x2000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:13:00.251232900Z" />

<EventRecordID>32484</EventRecordID>

<Correlation ActivityID="{67144949-5132-4859-8036-A737B43825D8}" />

<Execution ProcessID="608" ThreadID="620" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="TSId">1</Data>

<Data Name="UserSid">S-1-5-21-2671568636-964789203-112779275-1000</Data>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:59 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Windows Firewall service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:59.954832400Z" />

<EventRecordID>32483</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="672" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Firewall</Data>

<Data Name="param2">running</Data>

<Binary>4D00700073005300760063002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:59 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Base Filtering Engine service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:59.908032300Z" />

<EventRecordID>32482</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="672" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Base Filtering Engine</Data>

<Data Name="param2">running</Data>

<Binary>4200460045002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-WLAN-AutoConfig

Date: 11/13/2012 6:12:59 AM

Event ID: 4000

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

WLAN AutoConfig service has successfully started.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />

<EventID>4000</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>1</Opcode>

<Keywords>0x4000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:59.502431600Z" />

<EventRecordID>32481</EventRecordID>

<Correlation />

<Execution ProcessID="932" ThreadID="468" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:59 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The WLAN AutoConfig service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:59.502431600Z" />

<EventRecordID>32480</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="672" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">WLAN AutoConfig</Data>

<Data Name="param2">running</Data>

<Binary>57006C0061006E007300760063002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:58 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Extensible Authentication Protocol service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:58.925230600Z" />

<EventRecordID>32479</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="672" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Extensible Authentication Protocol</Data>

<Data Name="param2">running</Data>

<Binary>45006100700048006F00730074002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The DNS Client service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.224827600Z" />

<EventRecordID>32478</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="672" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">DNS Client</Data>

<Data Name="param2">running</Data>

<Binary>44006E007300630061006300680065002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The DHCP Client service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.224827600Z" />

<EventRecordID>32477</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">DHCP Client</Data>

<Data Name="param2">running</Data>

<Binary>44006800630070002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-DHCPv6-Client

Date: 11/13/2012 6:12:57 AM

Event ID: 51046

Task Category: Service State Event

Level: Information

Keywords:

User: LOCAL SERVICE

Computer: Matthew-PC

Description:

DHCPv6 client service is started

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />

<EventID>51046</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>4</Task>

<Opcode>62</Opcode>

<Keywords>0x2000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.224827600Z" />

<EventRecordID>32476</EventRecordID>

<Correlation />

<Execution ProcessID="840" ThreadID="152" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-19" />

</System>

<EventData>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Dhcp-Client

Date: 11/13/2012 6:12:57 AM

Event ID: 50036

Task Category: Service State Event

Level: Information

Keywords:

User: LOCAL SERVICE

Computer: Matthew-PC

Description:

DHCPv4 client service is started

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />

<EventID>50036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>4</Task>

<Opcode>68</Opcode>

<Keywords>0x2000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.131227500Z" />

<EventRecordID>32475</EventRecordID>

<Correlation />

<Execution ProcessID="840" ThreadID="996" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-19" />

</System>

<EventData>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The TCP/IP NetBIOS Helper service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.131227500Z" />

<EventRecordID>32474</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">TCP/IP NetBIOS Helper</Data>

<Data Name="param2">running</Data>

<Binary>6C006D0068006F007300740073002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The CNG Key Isolation service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.115627400Z" />

<EventRecordID>32473</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">CNG Key Isolation</Data>

<Data Name="param2">running</Data>

<Binary>4B0065007900490073006F002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Network Store Interface Service service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.100027400Z" />

<EventRecordID>32472</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Network Store Interface Service</Data>

<Data Name="param2">running</Data>

<Binary>6E00730069002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:57 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Windows Driver Foundation - User-mode Driver Framework service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:57.006427200Z" />

<EventRecordID>32471</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Driver Foundation - User-mode Driver Framework</Data>

<Data Name="param2">running</Data>

<Binary>77007500640066007300760063002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The User Profile Service service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.975227200Z" />

<EventRecordID>32470</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">User Profile Service</Data>

<Data Name="param2">running</Data>

<Binary>500072006F0066005300760063002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Windows Event Log service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.210825900Z" />

<EventRecordID>32469</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Windows Event Log</Data>

<Data Name="param2">running</Data>

<Binary>6500760065006E0074006C006F0067002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Remote Procedure Call (RPC) service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.148425700Z" />

<EventRecordID>32468</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Remote Procedure Call (RPC)</Data>

<Data Name="param2">running</Data>

<Binary>520070006300530073002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The RPC Endpoint Mapper service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.117225700Z" />

<EventRecordID>32467</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">RPC Endpoint Mapper</Data>

<Data Name="param2">running</Data>

<Binary>5200700063004500700074004D00610070007000650072002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The DCOM Server Process Launcher service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.101625700Z" />

<EventRecordID>32466</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">DCOM Server Process Launcher</Data>

<Data Name="param2">running</Data>

<Binary>440063006F006D004C00610075006E00630068002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Power service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.086025600Z" />

<EventRecordID>32465</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Power</Data>

<Data Name="param2">running</Data>

<Binary>50006F007700650072002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-UserPnp

Date: 11/13/2012 6:12:56 AM

Event ID: 20010

Task Category: (7010)

Level: Information

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

One or more of the Plug and Play service's subsystems has changed state.

PlugPlay install subsystem enabled: 'true'

PlugPlay caching subsystem enabled: 'true'

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />

<EventID>20010</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>7010</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.039225500Z" />

<EventRecordID>32464</EventRecordID>

<Correlation />

<Execution ProcessID="684" ThreadID="700" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<UserData>

<INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">

<InstallSubsystemState>true</InstallSubsystemState>

<CachingSubsystemState>true</CachingSubsystemState>

</INFO_PNP_STATE>

</UserData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/13/2012 6:12:56 AM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Plug and Play service entered the running state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.039225500Z" />

<EventRecordID>32463</EventRecordID>

<Correlation />

<Execution ProcessID="512" ThreadID="664" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Plug and Play</Data>

<Data Name="param2">running</Data>

<Binary>50006C007500670050006C00610079002F0034000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Power

Date: 11/13/2012 6:12:49 AM

Event ID: 89

Task Category: (86)

Level: Information

Keywords: (32)

User: SYSTEM

Computer: Matthew-PC

Description:

ACPI thermal zone ACPI\ThermalZone\THRM has been enumerated.

_PSV = 358K

_TC1 = 2

_TC2 = 10

_TSP = 10000ms

_AC0 = 0K

_AC1 = 0K

_AC2 = 0K

_AC3 = 0K

_AC4 = 0K

_AC5 = 0K

_AC6 = 0K

_AC7 = 0K

_AC8 = 0K

_AC9 = 0K

_CRT = 366K

_HOT = 0K

_PSL - see event data.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>89</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>86</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000020</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:49.346813800Z" />

<EventRecordID>32462</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="44" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="ThermalZoneDeviceInstanceLength">21</Data>

<Data Name="ThermalZoneDeviceInstance">ACPI\ThermalZone\THRM</Data>

<Data Name="AffinityCount">1</Data>

<Data Name="_PSV">358</Data>

<Data Name="_TC1">2</Data>

<Data Name="_TC2">10</Data>

<Data Name="_TSP">10000</Data>

<Data Name="_AC0">0</Data>

<Data Name="_AC1">0</Data>

<Data Name="_AC2">0</Data>

<Data Name="_AC3">0</Data>

<Data Name="_AC4">0</Data>

<Data Name="_AC5">0</Data>

<Data Name="_AC6">0</Data>

<Data Name="_AC7">0</Data>

<Data Name="_AC8">0</Data>

<Data Name="_AC9">0</Data>

<Data Name="_CRT">366</Data>

<Data Name="_HOT">0</Data>

<ComplexData Name="_PSL">0000000000000000</ComplexData>

</EventData>

</Event>

Log Name: System

Source: HECIx64

Date: 11/13/2012 6:12:48 AM

Event ID: 2

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

Intel® Management Engine Interface driver has started successfully.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="HECIx64" />

<EventID Qualifiers="16391">2</EventID>

<Level>4</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:48.488812300Z" />

<EventRecordID>32461</EventRecordID>

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data>

</Data>

<Binary>00000000010000000000000002000740000000000000000000000000000000000000000000000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Power

Date: 11/13/2012 6:12:47 AM

Event ID: 41

Task Category: (63)

Level: Critical

Keywords: (2)

User: SYSTEM

Computer: Matthew-PC

Description:

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />

<EventID>41</EventID>

<Version>2</Version>

<Level>1</Level>

<Task>63</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000002</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:47.896011200Z" />

<EventRecordID>32460</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="BugcheckCode">0</Data>

<Data Name="BugcheckParameter1">0x0</Data>

<Data Name="BugcheckParameter2">0x0</Data>

<Data Name="BugcheckParameter3">0x0</Data>

<Data Name="BugcheckParameter4">0x0</Data>

<Data Name="SleepInProgress">false</Data>

<Data Name="PowerButtonTimestamp">129972787273526098</Data>

</EventData>

</Event>

Log Name: System

Source: EventLog

Date: 11/13/2012 6:12:56 AM

Event ID: 6013

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The system uptime is 15 seconds.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="EventLog" />

<EventID Qualifiers="32768">6013</EventID>

<Level>4</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />

<EventRecordID>32459</EventRecordID>

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data>

</Data>

<Data>

</Data>

<Data>

</Data>

<Data>

</Data>

<Data>15</Data>

<Data>60</Data>

<Data>300 Eastern Standard Time</Data>

<Binary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inary>

</EventData>

</Event>

Log Name: System

Source: EventLog

Date: 11/13/2012 6:12:56 AM

Event ID: 6005

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Event log service was started.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="EventLog" />

<EventID Qualifiers="32768">6005</EventID>

<Level>4</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />

<EventRecordID>32458</EventRecordID>

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Binary>DC070B0002000D000B000C003800B3000000000002000000</Binary>

</EventData>

</Event>

Log Name: System

Source: EventLog

Date: 11/13/2012 6:12:56 AM

Event ID: 6009

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

Microsoft ® Windows ® 6.01. 7601 Service Pack 1 Multiprocessor Free.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="EventLog" />

<EventID Qualifiers="32768">6009</EventID>

<Level>4</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />

<EventRecordID>32457</EventRecordID>

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data>6.01.</Data>

<Data>7601</Data>

<Data>Service Pack 1</Data>

<Data>Multiprocessor Free</Data>

<Data>17514</Data>

</EventData>

</Event>

Log Name: System

Source: EventLog

Date: 11/13/2012 6:12:56 AM

Event ID: 6008

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The previous system shutdown at 6:11:37 AM on ?11/?13/?2012 was unexpected.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="EventLog" />

<EventID Qualifiers="32768">6008</EventID>

<Level>2</Level>

<Task>0</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />

<EventRecordID>32456</EventRecordID>

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data>6:11:37 AM</Data>

<Data>?11/?13/?2012</Data>

<Data>

</Data>

<Data>

</Data>

<Data>24913</Data>

<Data>

</Data>

<Data>

</Data>

<Binary>DC070B0002000D0006000B002500B600DC070B0002000D000B000B002500B600600900003C000000010000006009000000000000B00400000100000000000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-FilterManager

Date: 11/13/2012 6:12:42 AM

Event ID: 6

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

File System Filter 'FileInfo' (6.1, ?2009?-?07?-?13T18:34:25.000000000Z) has successfully loaded and registered with Filter Manager.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />

<EventID>6</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:42.451601700Z" />

<EventRecordID>32455</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="FinalStatus">0x0</Data>

<Data Name="DeviceVersionMajor">6</Data>

<Data Name="DeviceVersionMinor">1</Data>

<Data Name="DeviceNameLength">8</Data>

<Data Name="DeviceName">FileInfo</Data>

<Data Name="DeviceTime">2009-07-13T18:34:25.000000000Z</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-General

Date: 11/13/2012 6:12:41 AM

Event ID: 12

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The operating system started at system time ?2012?-?11?-?13T11:12:40.610798500Z.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />

<EventID>12</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T11:12:41.687200300Z" />

<EventRecordID>32454</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="8" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="MajorVersion">6</Data>

<Data Name="MinorVersion">1</Data>

<Data Name="BuildVersion">7601</Data>

<Data Name="QfeVersion">17944</Data>

<Data Name="ServiceVersion">1</Data>

<Data Name="BootMode">2</Data>

<Data Name="StartTime">2012-11-13T11:12:40.610798500Z</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-General

Date: 11/13/2012 2:16:24 AM

Event ID: 4

Task Category: None

Level: Information

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

License policy-cache has expired because it was not updated within expected duration.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />

<EventID>4</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T07:16:24.648569500Z" />

<EventRecordID>32453</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="44" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

</EventData>

</Event>

Log Name: System

Source: Service Control Manager

Date: 11/12/2012 11:18:53 PM

Event ID: 7036

Task Category: None

Level: Information

Keywords: Classic

User: N/A

Computer: Matthew-PC

Description:

The Skype Updater service entered the stopped state.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

<EventID Qualifiers="16384">7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:53.308661400Z" />

<EventRecordID>32452</EventRecordID>

<Correlation />

<Execution ProcessID="700" ThreadID="3656" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security />

</System>

<EventData>

<Data Name="param1">Skype Updater</Data>

<Data Name="param2">stopped</Data>

<Binary>53006B007900700065005500700064006100740065002F0031000000</Binary>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 6 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.338194700Z" />

<EventRecordID>32451</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="512" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">6</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.338194700Z" />

<EventRecordID>32450</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="44" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">1</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />

<EventRecordID>32449</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="44" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">3</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 7 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />

<EventRecordID>32448</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="512" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">7</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />

<EventRecordID>32447</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="48" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">0</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />

<EventRecordID>32446</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="60" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">2</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />

<EventRecordID>32445</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="64" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">4</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Log Name: System

Source: Microsoft-Windows-Kernel-Processor-Power

Date: 11/12/2012 11:18:15 PM

Event ID: 37

Task Category: (7)

Level: Warning

Keywords:

User: SYSTEM

Computer: Matthew-PC

Description:

The speed of processor 5 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />

<EventID>37</EventID>

<Version>0</Version>

<Level>3</Level>

<Task>7</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />

<EventRecordID>32444</EventRecordID>

<Correlation />

<Execution ProcessID="4" ThreadID="48" />

<Channel>System</Channel>

<Computer>Matthew-PC</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData>

<Data Name="Group">0</Data>

<Data Name="Number">5</Data>

<Data Name="CapDurationInSeconds">71</Data>

<Data Name="PpcChanges">1</Data>

<Data Name="TpcChanges">0</Data>

<Data Name="PccChanges">0</Data>

</EventData>

</Event>

Grand Master

MarkusDarkus

Posted
Posted
I would check the status of Services. Click on the Start buton and select Control Panel, Administrative Tools, Services. Locate Computer Browser in the list and check that the StartUp type is Manual. Also note whether the Service has started. If it has not started right click and select Start. If it does not start you will need to check the Services which the Computer Browser service depends on. You can make changes to the StartUp type of any service by right clicking on the service in the list and selecting Properties. The StartUp options are on the General tab.

The next step is to check that the StartUp type is correct for the three services the Computer Browser service needs to start. They are Server -Automatic, Security Accounts Manager -Automatic and Workstation -Automatic. All these services should show as Started as they should start when the computer is booted. If the Start Up type of any is not set to Automatic then change it to Automatic and click on Apply and OK. Start the service.

http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/event-7001-service-control-management/c12e55db-90c1-4200-8aea-1d2db7bdf7dd

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Microsoft explains why PowerToys 0.100.0 is faster and slimmer, there are new features too

      By matthiew · Posted

      I just looked on my computer and there are settings and log files for utilities I have never even turned on!
    • O&O ShutUp10 3.1.1104

      By Copernic · Posted

      O&O ShutUp10 3.1.1104 by Razvan Serea O&O ShutUp10 offers a simple yet effective way to take control of your Windows privacy. It provides access to almost 50 privacy-related tweaks, most of them hidden or not easily accessible to the average computer users. Using a very simple interface, you decide how Windows 10/11 should respect your privacy by deciding which unwanted functions should be deactivated. Using ShutUp10 you can easily disable Windows Defender, turn off telemetry, disable peer-to-peer updates, turn off Wi-Fi Sense, disable automatic Windows updates, turn off and reset Cortana and more. ShutUp10 allows you to create a System Restore point before you apply any changes, so that you can revert your system at any time if you run into problems. O&O ShutUp10 is entirely free and does not have to be installed – it can be simply run directly and immediately on your PC. And it will not install or download retrospectively unwanted or unnecessary software, like so many other programs do these days! O&O ShutUp10 Free and Premium The latest version brings O&O ShutUp10 Premium, expanding the app’s long-standing privacy controls with automatic enforcement of user-defined settings. Instead of manually rechecking options after every Windows update, users can set their preferred privacy configuration once—or apply recommended settings in a single click—and the tool continuously monitors them in the background. If Windows 10 or 11 re-enables disabled features or introduces new data collection paths, Premium restores the chosen settings automatically without user intervention. The free version remains available and fully functional for manual adjustments, offering the same core privacy controls for Windows. However, the Premium tier is aimed at users who want long-term, hands-off protection, adding automatic reapplication after updates, ongoing monitoring, and optional notifications to ensure privacy settings remain consistent over time. O&O ShutUp10 3.1.1104 changelog: Added “Show Differences” button in the overview panel “Don’t show again” option for the restore point prompt Ctrl+F keyboard shortcut for search/filter functionality Detection and linking of system-wide and user-specific setting associations Automatic search while typing PREM: Option to preserve notification counters and timestamps across application restarts PREM: Reset blocked settings button in the Settings dialog PREM: Informational message when no settings are blocked PREM: Update check can also be triggered from the menu PREM: Notification deduplication and activity log summary feature Improved L005 “Disable Windows Location Service”: Version-specific split (up to Windows 11 23H2) and new variant for Windows 11 24H2+ L001 (Disable Location): Added Night Light warning to the description in all languages Search now detects setting IDs even when ID display is disabled and offers to enable it Detection and removal of Copilot/AI desktop apps in RecallTerminator Optimized High DPI support PREM: Reset button is now only enabled when blocked items exist – setting IDs are shown in the confirmation dialog PREM: Updated tray icons with higher-resolution versions PREM: Activity Log timestamps now use localized date and time formats PREM: Tray icon status now uses OK/Warning indicators and localized tooltips PREM: Recall folder detection switched to service-based detection PREM: Copilot uninstallation now provides UI feedback and improved verification Fixed Description text was not displayed correctly for the last item and disappeared when clicking the scrollbar Crash when clicking a search result heading or the […] button PREM: Installation path is now correctly preserved during upgrades PREM: Tray icon was not reliably removed when exiting the application PREM: Main window was not displayed correctly in single-instance mode PREM: Incorrect display of the & symbol in tray icon tooltips on Windows 10 PREM: Fixed notification flooding after sleep/standby PREM: Dashboard was not refreshed after applying recommended settings during onboarding PREM: Progress bar was not reset after deleting Recall folders PREM: Fixed service startup failures PREM: Fixed incorrect drift detection when Automatic Protection was disabled PREM: Notifications now correctly count all deviating settings when protection is enabled PREM: Registration Wizard was shown after sleep/standby despite a valid license Download: O&O ShutUp10 3.1.1104 | 76.4 MB (Freeware) Download: O&O ShutUp10 32-bit | ARM64 View: O&O ShutUp10 Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • New Site Moderation

      By +Edouard · Posted

      Fascinating...W h i t e P o w e r is now also asterisks out.  
    • New Site Moderation

      By +Edouard · Posted

      In the past few days I have noticed two odd moderation activities. First, when I posted the term 'White Nationist Christian' it was asterisk's out. When I changed it to **** it was allowed! Second, in the Politics is a ###business thread I was allowed to post that the GOP is a party of p e d ophiles but I was censored  when I posted the GOP are a party of p e d ophile protectors. Wtf Neowin. Please explain.
    • Latest Rufus update improves new Windows 11 install method

      By WITHOUT-ME · Posted

      send him paypal

  • Recent Achievements

    • One Month Later
      Vincian earned a badge
      One Month Later
    • First Post
      Jocimo earned a badge
      First Post
    • Week One Done
      suprememobiles48 earned a badge
      Week One Done
    • One Month Later
      Windows Guy earned a badge
      One Month Later
    • One Month Later
      Prasann earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      547
    2. 2
      +Edouard
      166
    3. 3
      PsYcHoKiLLa
      86
    4. 4
      Steven P.
      66
    5. 5
      ATLien_0
      64
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!