38 replies to this topic

[Detection]

Umbrello, on 13 November 2012 - 01:25, said:

Uhmm, there are a ton of !Error events. ;| What do?

Have a look at the ones that appeared at the time of your last failed login, or clear the event log, reboot normally to cause the error, then boot back into safe mode and see what errors appear

[Marshall]

Detection, on 13 November 2012 - 01:22, said:

You could open MSCONFIG and disable any non microsoft services and see if it allows you to log in normally, then enable them 1 by 1

This is what I would recommend, have you done this yet?

Start>Run type Msconfig, then choose Startups tab. Disable anything that doesn't need to boot with the machine.

If you aren't sure what processes can be disabled safely, take a screenshot and post it, or PM it to me.

Regards

[Detection]

Marshall, on 13 November 2012 - 01:44, said:

This is what I would recommend, have you done this yet?

Start>Run type Msconfig, then choose Startups tab. Disable anything that doesn't need to boot with the machine.

If you aren't sure what processes can be disabled safely, take a screenshot and post it, or PM it to me.

Regards

Clicking "Hide all Microsoft Services" check box in msconfig should allow for completely safe disabling of any remaining services too

[Marshall]

Detection, on 13 November 2012 - 01:55, said:

Clicking "Hide all Microsoft Services" check box in msconfig should allow for completely safe disabling of any remaining services too

Good point

Also you could just choose Diagnostic Startup from the main page of Msconfig.

[Umbrello]

Running disk chk at the moment. Long process, seems to be taking awhile. On step 5/5. Will attempt previous suggestions if everything passes and I am back in safe mode.

[Umbrello]

Ok, so the process was so lengthy I let it sit overnight. Desk check seems to have passed. Woke up this morning, opened up my laptop and it was sitting at desktop. However... it was nonresponsive. Mouse cursor would move, but if I moved my cursor over the taskbar or icons there would be a loading indication displayed. You know, the rotating circle windows gives. So, I did a hard reboot in safe mode. Here is what the event viewer says beginning from where the Warning!'s start(sorry for the lengthiness):

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:16 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />
<EventRecordID>32507</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:16 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />
<EventRecordID>32506</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:16 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />
<EventRecordID>32505</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:16 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />
<EventRecordID>32504</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:16 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />
<EventRecordID>32503</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:16 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:16.506461500Z" />
<EventRecordID>32502</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:14 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.930858700Z" />
<EventRecordID>32501</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">HomeGroup Provider</Data>
<Data Name="param2">Function Discovery Provider Host</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:14 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.509658000Z" />
<EventRecordID>32500</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:14 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.509658000Z" />
<EventRecordID>32499</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:14 AM
Event ID: 7001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.509658000Z" />
<EventRecordID>32498</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Computer Browser</Data>
<Data Name="param2">Server</Data>
<Data Name="param3">%%1068</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:14 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Network List Service service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.228857500Z" />
<EventRecordID>32497</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Network List Service</Data>
<Data Name="param2">running</Data>
<Binary>6E0065007400700072006F0066006D002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:14 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Network Connections service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.197657400Z" />
<EventRecordID>32496</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Network Connections</Data>
<Data Name="param2">running</Data>
<Binary>4E00650074006D0061006E002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/13/2012 6:13:14 AM
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.000000000Z" />
<EventRecordID>32495</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1084</Data>
<Data Name="param2">WSearch</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/13/2012 6:13:14 AM
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:14.000000000Z" />
<EventRecordID>32494</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1084</Data>
<Data Name="param2">WSearch</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{9E175B6D-F52A-11D8-B9A5-505054503030}</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/13/2012 6:13:13 AM
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:13.000000000Z" />
<EventRecordID>32493</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1084</Data>
<Data Name="param2">EventSystem</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{1BE1F766-5536-11D1-B726-00C04FB926AF}</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:06 AM
Event ID: 7026
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The following boot-start or system-start driver(s) failed to load:
aswSnx
aswSP
aswTdi
discache
spldr
Wanarpv6
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7026</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:06.616044100Z" />
<EventRecordID>32492</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="516" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">
aswSnx
aswSP
aswTdi
discache
spldr
Wanarpv6</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:06 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Network Location Awareness service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:06.616044100Z" />
<EventRecordID>32491</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="1164" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Network Location Awareness</Data>
<Data Name="param2">running</Data>
<Binary>4E006C0061005300760063002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:06 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Cryptographic Services service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:06.600444100Z" />
<EventRecordID>32490</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Cryptographic Services</Data>
<Data Name="param2">running</Data>
<Binary>430072007900700074005300760063002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:05 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Ad-Aware Service service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:05.945242900Z" />
<EventRecordID>32489</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Ad-Aware Service</Data>
<Data Name="param2">running</Data>
<Binary>410064002D0041007700610072006500200053006500720076006900630065002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 11/13/2012 6:13:06 AM
Event ID: 10005
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10005</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:06.000000000Z" />
<EventRecordID>32488</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">1084</Data>
<Data Name="param2">ShellHWDetection</Data>
<Data Name="param3">
</Data>
<Data Name="param4">{DD522ACC-F821-461A-A407-50B198B896DC}</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:03 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The IKE and AuthIP IPsec Keying Modules service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:03.012437800Z" />
<EventRecordID>32487</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">IKE and AuthIP IPsec Keying Modules</Data>
<Data Name="param2">running</Data>
<Binary>49004B0045004500580054002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:02 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Windows Management Instrumentation service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:02.996837800Z" />
<EventRecordID>32486</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Management Instrumentation</Data>
<Data Name="param2">running</Data>
<Binary>570069006E006D0067006D0074002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:13:02 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Workstation service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:02.029636100Z" />
<EventRecordID>32485</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Workstation</Data>
<Data Name="param2">running</Data>
<Binary>4C0061006E006D0061006E0057006F0072006B00730074006100740069006F006E002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Winlogon
Date: 11/13/2012 6:13:00 AM
Event ID: 7001
Task Category: (1101)
Level: Information
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
User Logon Notification for Customer Experience Improvement Program
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" />
<EventID>7001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>1101</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:13:00.251232900Z" />
<EventRecordID>32484</EventRecordID>
<Correlation ActivityID="{67144949-5132-4859-8036-A737B43825D8}" />
<Execution ProcessID="608" ThreadID="620" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="TSId">1</Data>
<Data Name="UserSid">S-1-5-21-2671568636-964789203-112779275-1000</Data>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:59 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Windows Firewall service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:59.954832400Z" />
<EventRecordID>32483</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="672" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Firewall</Data>
<Data Name="param2">running</Data>
<Binary>4D00700073005300760063002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:59 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Base Filtering Engine service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:59.908032300Z" />
<EventRecordID>32482</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="672" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Base Filtering Engine</Data>
<Data Name="param2">running</Data>
<Binary>4200460045002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-WLAN-AutoConfig
Date: 11/13/2012 6:12:59 AM
Event ID: 4000
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
WLAN AutoConfig service has successfully started.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
<EventID>4000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:59.502431600Z" />
<EventRecordID>32481</EventRecordID>
<Correlation />
<Execution ProcessID="932" ThreadID="468" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:59 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The WLAN AutoConfig service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:59.502431600Z" />
<EventRecordID>32480</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="672" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">WLAN AutoConfig</Data>
<Data Name="param2">running</Data>
<Binary>57006C0061006E007300760063002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:58 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Extensible Authentication Protocol service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:58.925230600Z" />
<EventRecordID>32479</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="672" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Extensible Authentication Protocol</Data>
<Data Name="param2">running</Data>
<Binary>45006100700048006F00730074002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:57 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The DNS Client service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.224827600Z" />
<EventRecordID>32478</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="672" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">DNS Client</Data>
<Data Name="param2">running</Data>
<Binary>44006E007300630061006300680065002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:57 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The DHCP Client service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.224827600Z" />
<EventRecordID>32477</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">DHCP Client</Data>
<Data Name="param2">running</Data>
<Binary>44006800630070002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DHCPv6-Client
Date: 11/13/2012 6:12:57 AM
Event ID: 51046
Task Category: Service State Event
Level: Information
Keywords:
User: LOCAL SERVICE
Computer: Matthew-PC
Description:
DHCPv6 client service is started
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DHCPv6-Client" Guid="{6A1F2B00-6A90-4C38-95A5-5CAB3B056778}" />
<EventID>51046</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>4</Task>
<Opcode>62</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.224827600Z" />
<EventRecordID>32476</EventRecordID>
<Correlation />
<Execution ProcessID="840" ThreadID="152" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Dhcp-Client
Date: 11/13/2012 6:12:57 AM
Event ID: 50036
Task Category: Service State Event
Level: Information
Keywords:
User: LOCAL SERVICE
Computer: Matthew-PC
Description:
DHCPv4 client service is started
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
<EventID>50036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>4</Task>
<Opcode>68</Opcode>
<Keywords>0x2000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.131227500Z" />
<EventRecordID>32475</EventRecordID>
<Correlation />
<Execution ProcessID="840" ThreadID="996" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:57 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The TCP/IP NetBIOS Helper service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.131227500Z" />
<EventRecordID>32474</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">TCP/IP NetBIOS Helper</Data>
<Data Name="param2">running</Data>
<Binary>6C006D0068006F007300740073002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:57 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The CNG Key Isolation service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.115627400Z" />
<EventRecordID>32473</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">CNG Key Isolation</Data>
<Data Name="param2">running</Data>
<Binary>4B0065007900490073006F002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:57 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Network Store Interface Service service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.100027400Z" />
<EventRecordID>32472</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Network Store Interface Service</Data>
<Data Name="param2">running</Data>
<Binary>6E00730069002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:57 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Windows Driver Foundation - User-mode Driver Framework service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:57.006427200Z" />
<EventRecordID>32471</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Driver Foundation - User-mode Driver Framework</Data>
<Data Name="param2">running</Data>
<Binary>77007500640066007300760063002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The User Profile Service service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.975227200Z" />
<EventRecordID>32470</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">User Profile Service</Data>
<Data Name="param2">running</Data>
<Binary>500072006F0066005300760063002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Windows Event Log service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.210825900Z" />
<EventRecordID>32469</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Event Log</Data>
<Data Name="param2">running</Data>
<Binary>6500760065006E0074006C006F0067002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Remote Procedure Call (RPC) service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.148425700Z" />
<EventRecordID>32468</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Remote Procedure Call (RPC)</Data>
<Data Name="param2">running</Data>
<Binary>520070006300530073002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The RPC Endpoint Mapper service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.117225700Z" />
<EventRecordID>32467</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">RPC Endpoint Mapper</Data>
<Data Name="param2">running</Data>
<Binary>5200700063004500700074004D00610070007000650072002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The DCOM Server Process Launcher service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.101625700Z" />
<EventRecordID>32466</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">DCOM Server Process Launcher</Data>
<Data Name="param2">running</Data>
<Binary>440063006F006D004C00610075006E00630068002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Power service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.086025600Z" />
<EventRecordID>32465</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Power</Data>
<Data Name="param2">running</Data>
<Binary>50006F007700650072002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-UserPnp
Date: 11/13/2012 6:12:56 AM
Event ID: 20010
Task Category: (7010)
Level: Information
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
One or more of the Plug and Play service's subsystems has changed state.

PlugPlay install subsystem enabled: 'true'
PlugPlay caching subsystem enabled: 'true'

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-UserPnp" Guid="{96F4A050-7E31-453C-88BE-9634F4E02139}" />
<EventID>20010</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>7010</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.039225500Z" />
<EventRecordID>32464</EventRecordID>
<Correlation />
<Execution ProcessID="684" ThreadID="700" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<INFO_PNP_STATE xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/userpnp">
<InstallSubsystemState>true</InstallSubsystemState>
<CachingSubsystemState>true</CachingSubsystemState>
</INFO_PNP_STATE>
</UserData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/13/2012 6:12:56 AM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Plug and Play service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.039225500Z" />
<EventRecordID>32463</EventRecordID>
<Correlation />
<Execution ProcessID="512" ThreadID="664" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Plug and Play</Data>
<Data Name="param2">running</Data>
<Binary>50006C007500670050006C00610079002F0034000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 11/13/2012 6:12:49 AM
Event ID: 89
Task Category: (86)
Level: Information
Keywords: (32)
User: SYSTEM
Computer: Matthew-PC
Description:
ACPI thermal zone ACPI\ThermalZone\THRM has been enumerated.
_PSV = 358K
_TC1 = 2
_TC2 = 10
_TSP = 10000ms
_AC0 = 0K
_AC1 = 0K
_AC2 = 0K
_AC3 = 0K
_AC4 = 0K
_AC5 = 0K
_AC6 = 0K
_AC7 = 0K
_AC8 = 0K
_AC9 = 0K
_CRT = 366K
_HOT = 0K
_PSL - see event data.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>89</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>86</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000020</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:49.346813800Z" />
<EventRecordID>32462</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ThermalZoneDeviceInstanceLength">21</Data>
<Data Name="ThermalZoneDeviceInstance">ACPI\ThermalZone\THRM</Data>
<Data Name="AffinityCount">1</Data>
<Data Name="_PSV">358</Data>
<Data Name="_TC1">2</Data>
<Data Name="_TC2">10</Data>
<Data Name="_TSP">10000</Data>
<Data Name="_AC0">0</Data>
<Data Name="_AC1">0</Data>
<Data Name="_AC2">0</Data>
<Data Name="_AC3">0</Data>
<Data Name="_AC4">0</Data>
<Data Name="_AC5">0</Data>
<Data Name="_AC6">0</Data>
<Data Name="_AC7">0</Data>
<Data Name="_AC8">0</Data>
<Data Name="_AC9">0</Data>
<Data Name="_CRT">366</Data>
<Data Name="_HOT">0</Data>
<ComplexData Name="_PSL">0000000000000000</ComplexData>
</EventData>
</Event>

Log Name: System
Source: HECIx64
Date: 11/13/2012 6:12:48 AM
Event ID: 2
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
Intel® Management Engine Interface driver has started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="HECIx64" />
<EventID Qualifiers="16391">2</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:48.488812300Z" />
<EventRecordID>32461</EventRecordID>
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Binary>00000000010000000000000002000740000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 11/13/2012 6:12:47 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Matthew-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:47.896011200Z" />
<EventRecordID>32460</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">129972787273526098</Data>
</EventData>
</Event>

Log Name: System
Source: EventLog
Date: 11/13/2012 6:12:56 AM
Event ID: 6013
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The system uptime is 15 seconds.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6013</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />
<EventRecordID>32459</EventRecordID>
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>15</Data>
<Data>60</Data>
<Data>300 Eastern Standard Time</Data>
<Binary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inary>
</EventData>
</Event>

Log Name: System
Source: EventLog
Date: 11/13/2012 6:12:56 AM
Event ID: 6005
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Event log service was started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6005</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />
<EventRecordID>32458</EventRecordID>
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Binary>DC070B0002000D000B000C003800B3000000000002000000</Binary>
</EventData>
</Event>

Log Name: System
Source: EventLog
Date: 11/13/2012 6:12:56 AM
Event ID: 6009
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
Microsoft ® Windows ® 6.01. 7601 Service Pack 1 Multiprocessor Free.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6009</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />
<EventRecordID>32457</EventRecordID>
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data>6.01.</Data>
<Data>7601</Data>
<Data>Service Pack 1</Data>
<Data>Multiprocessor Free</Data>
<Data>17514</Data>
</EventData>
</Event>

Log Name: System
Source: EventLog
Date: 11/13/2012 6:12:56 AM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The previous system shutdown at 6:11:37 AM on ‎11/‎13/‎2012 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:56.000000000Z" />
<EventRecordID>32456</EventRecordID>
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data>6:11:37 AM</Data>
<Data>‎11/‎13/‎2012</Data>
<Data>
</Data>
<Data>
</Data>
<Data>24913</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DC070B0002000D0006000B002500B600DC070B0002000D000B000B002500B600600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-FilterManager
Date: 11/13/2012 6:12:42 AM
Event ID: 6
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
File System Filter 'FileInfo' (6.1, ‎2009‎-‎07‎-‎13T18:34:25.000000000Z) has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:42.451601700Z" />
<EventRecordID>32455</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x0</Data>
<Data Name="DeviceVersionMajor">6</Data>
<Data Name="DeviceVersionMinor">1</Data>
<Data Name="DeviceNameLength">8</Data>
<Data Name="DeviceName">FileInfo</Data>
<Data Name="DeviceTime">2009-07-13T18:34:25.000000000Z</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 11/13/2012 6:12:41 AM
Event ID: 12
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The operating system started at system time ‎2012‎-‎11‎-‎13T11:12:40.610798500Z.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>12</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T11:12:41.687200300Z" />
<EventRecordID>32454</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="MajorVersion">6</Data>
<Data Name="MinorVersion">1</Data>
<Data Name="BuildVersion">7601</Data>
<Data Name="QfeVersion">17944</Data>
<Data Name="ServiceVersion">1</Data>
<Data Name="BootMode">2</Data>
<Data Name="StartTime">2012-11-13T11:12:40.610798500Z</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 11/13/2012 2:16:24 AM
Event ID: 4
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
License policy-cache has expired because it was not updated within expected duration.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T07:16:24.648569500Z" />
<EventRecordID>32453</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>

Log Name: System
Source: Service Control Manager
Date: 11/12/2012 11:18:53 PM
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Matthew-PC
Description:
The Skype Updater service entered the stopped state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:53.308661400Z" />
<EventRecordID>32452</EventRecordID>
<Correlation />
<Execution ProcessID="700" ThreadID="3656" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Skype Updater</Data>
<Data Name="param2">stopped</Data>
<Binary>53006B007900700065005500700064006100740065002F0031000000</Binary>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 6 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.338194700Z" />
<EventRecordID>32451</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="512" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">6</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 1 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.338194700Z" />
<EventRecordID>32450</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">1</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />
<EventRecordID>32449</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="44" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">3</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 7 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />
<EventRecordID>32448</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="512" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">7</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />
<EventRecordID>32447</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="48" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">0</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 2 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />
<EventRecordID>32446</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="60" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">2</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />
<EventRecordID>32445</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="64" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">4</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 11/12/2012 11:18:15 PM
Event ID: 37
Task Category: (7)
Level: Warning
Keywords:
User: SYSTEM
Computer: Matthew-PC
Description:
The speed of processor 5 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>37</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>7</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-11-13T04:18:15.322594700Z" />
<EventRecordID>32444</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="48" />
<Channel>System</Channel>
<Computer>Matthew-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">5</Data>
<Data Name="CapDurationInSeconds">71</Data>
<Data Name="PpcChanges">1</Data>
<Data Name="TpcChanges">0</Data>
<Data Name="PccChanges">0</Data>
</EventData>
</Event>

[MarkusDarkus]

Quote

I would check the status of Services. Click on the Start buton and select Control Panel, Administrative Tools, Services. Locate Computer Browser in the list and check that the StartUp type is Manual. Also note whether the Service has started. If it has not started right click and select Start. If it does not start you will need to check the Services which the Computer Browser service depends on. You can make changes to the StartUp type of any service by right clicking on the service in the list and selecting Properties. The StartUp options are on the General tab.
The next step is to check that the StartUp type is correct for the three services the Computer Browser service needs to start. They are Server -Automatic, Security Accounts Manager -Automatic and Workstation -Automatic. All these services should show as Started as they should start when the computer is booted. If the Start Up type of any is not set to Automatic then change it to Automatic and click on Apply and OK. Start the service.

http://answers.micro...ea-1d2db7bdf7dd

[Shane Nokes]

Definitely a time then when I would use System Restore to go back to the last date when you know everything was working, and then run virus and malware scans.

Sounds like something hit the system and screwed with the system services.

[+abysal]

Are you running Avast! AV by any chance?

[Umbrello]

Yes, I have avast installed. Why?

[Shane Nokes]

Umbrello, on 13 November 2012 - 18:03, said:

Yes, I have avast installed. Why?

Far be it from me to presume what another user is planning on saying, but I assume it's related to the troubles that Avast has been having of late.

They have caused all sorts of havoc on Windows 8 machines. I actually recommend staying away from them for a while until they work out their issues, especially considering that Windows 8 has a very robust AV/AM tool built right into the OS.

[Kalint]

Shane Nokes, on 13 November 2012 - 18:17, said:

Far be it from me to presume what another user is planning on saying, but I assume it's related to the troubles that Avast has been having of late.

They have caused all sorts of havoc on Windows 8 machines. I actually recommend staying away from them for a while until they work out their issues, especially considering that Windows 8 has a very robust AV/AM tool built right into the OS.

OP has Windows 7

OP, have you tried Microsoft FixIt! http://fixitcenter.s...oft.com/Portal/

See if that thing finds out whats up.

[Shane Nokes]

Kalint, on 13 November 2012 - 18:21, said:

OP has Windows 7

Doh. I noted that while working with them on earlier posts, but forgot about that during this latest reply. Thanks for spotting that.

So based on that I would still say to find something other than Avast for the time being.

SafeSurf over on the Avast forums posted up the following information in this thread:

Quote

I suggest an uninstall and clean install if you are still having problems.
1. Save a copy of Avast and save it to your HDD:
Version 7.0.1456:
Avast Free AV: http://files.avast.c...virus_setup.exe
Avast Pro AV : http://files.avast.c...virus_setup.exe
AIS: http://files.avast.c...urity_setup.exe

2. Download the Avast Uninstall Utility http://www.avast.com/uninstall-utility and save it to your HDD.
3. Disconnect from the Internet at this time.
4. Go into Safe Mode (hit F8 repeatedly) and run the Avast Uninstall Tool. Uninstall ALL previous versions and products of Avast you had on this machine and reboot in between each uninstall.
6. Reboot.
7. Install the newest version of Avast and reboot.
8. Get Internet access and register your copy or add the license key for Free, Pro, or AIS online.
Free – http://www.avast.com...e-antivirus.php
9. Update the Avast definitions.

I would follow things up to the point of actually uninstalling Avast, and then when you're back in to the machine install something else. I generally recommend Microsoft Security Essentials, but it's really up to you.

My point about Avast have numerous issues of late is still valid for Win7.

[Detection]

Yea its a service hanging, the suggestion to uninstall Avast seems to help other similar cases

Also uninstalling any Virtual Drive softwares such as Daemon tools / Virtual Clone Drive etc were suggested as possible causes


Don't quote me on this, but from what I have just read on other forums with the same error, "Computer Browser service" is not essential and can be disabled until you work out what was causing the issue, it seems that service is the cause of the black screen

[Umbrello]

I am at work all day today. I will take your suggestions to heart and get back to you tomorrow. Thanks.