Level Date and Time Source Event ID Task Category Information 11/20/2008 2:39:06 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:39:06 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:36:46 PM MySQL 100 None "Fatal error: Can't open and lock privilege tables: Table 'mysql.host' doesn't exist For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 2:35:56 PM MySQL 100 None "MYSQLD: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:35:56 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:33:32 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:33:32 PM MySQL 100 None "Can't find messagefile 'C:\PROGRA~1\SQUEEZ~1\SERVER\BIN\share\english\errmsg.sys' For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:32:39 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:32:39 PM MySQL 100 None "Can't find messagefile 'C:\Program Files\SqueezeCenter\server\Bin\share\english\errmsg.sys' For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 2:15:37 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:15:37 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 2:09:22 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 2:09:22 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:56:48 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 1:56:48 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:54:13 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 1:54:13 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:53:26 PM Microsoft-Windows-Search 4121 Search service A master merge has restarted for catalog SystemIndex. Error 11/20/2008 1:52:12 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/20/2008 1:52:12 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/20/2008 1:50:17 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/20/2008 1:50:17 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/20/2008 1:49:20 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 1:49:20 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:47:44 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 1:47:43 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 1:46:44 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 1:46:44 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:44:38 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/20/2008 1:43:44 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:42:43 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 1:42:42 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 1:42:42 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/20/2008 1:42:33 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 1:42:26 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 1:42:25 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 1:42:23 PM ESENT 102 General Windows (2860) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 1:42:20 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 1:42:18 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:42:17 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 1:42:17 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 1:42:17 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:42:17 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:42:17 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 1:42:16 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 1:42:15 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 1:42:15 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 1:42:15 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 1:42:12 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 1:42:12 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 1:42:12 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 1:41:25 PM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/20/2008 1:41:24 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/20/2008 1:41:21 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 1:41:21 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Error 11/20/2008 1:37:18 PM Application 0 None "The description for Event ID 0 from source Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: OpenService failed: The specified service does not exist as an installed service the message resource is present but the message is not found in the string/message table " Information 11/20/2008 1:33:35 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 1:33:35 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:32:36 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 1:32:36 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 1:30:56 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 1:30:56 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 1:29:44 PM SecurityCenter 1 None The Windows Security Center Service has started. Error 11/20/2008 1:29:03 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/20/2008 1:29:03 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/20/2008 1:29:02 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/20/2008 1:29:02 PM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/20/2008 1:28:46 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Warning 11/20/2008 1:28:16 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: The URL was already processed during this update. If you received this message while processing alerts, then the alerts are redundant, or else Modify should be used instead of Add. (0x80040d0d) " Information 11/20/2008 1:27:52 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 1:27:50 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/20/2008 1:27:46 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 1:27:35 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 1:27:27 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 1:27:26 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 1:27:25 PM ESENT 102 General Windows (2828) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 1:27:23 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 1:27:21 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:27:20 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 1:27:20 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 1:27:20 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:27:20 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 1:27:19 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 1:27:19 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 1:27:18 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 1:27:18 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 1:27:18 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 1:27:15 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 1:27:15 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 1:27:15 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Error 11/20/2008 1:20:43 PM ESENT 604 General svchost (1180) Locale ID 0x00000409 (English (United States) English) is either invalid or not installed on this machine. Information 11/20/2008 1:20:43 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 1:20:43 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Error 11/20/2008 12:52:47 PM Application 0 None "The description for Event ID 0 from source Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: OpenService failed: The specified service does not exist as an installed service the message resource is present but the message is not found in the string/message table " Information 11/20/2008 12:49:57 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/20/2008 12:29:20 PM Microsoft-Windows-Search 4121 Search service A master merge has restarted for catalog SystemIndex. Information 11/20/2008 12:24:17 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/20/2008 12:21:49 PM MsiInstaller 1033 None Windows Installer installed the product. Product Name: VMware Converter. Product Version: 3.0.3. Product Language: 1033. Installation success or error status: 0. Information 11/20/2008 12:21:49 PM MsiInstaller 11707 None Product: VMware Converter -- Installation operation completed successfully. Information 11/20/2008 12:21:44 PM Microsoft-Windows-RestartManager 10001 None Ending session 1 started 11/20/2008 8:20:44 PM. Information 11/20/2008 12:21:44 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = ). Information 11/20/2008 12:21:43 PM ufad-p2v 1 None "The description for Event ID 1 from source ufad-p2v cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: ufad-p2v service started " Information 11/20/2008 12:20:44 PM Microsoft-Windows-RestartManager 10000 None Starting session 1 - 11/20/2008 8:20:44 PM. Information 11/20/2008 12:20:44 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed VMware Converter). Information 11/20/2008 12:14:56 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 12:14:56 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 12:13:14 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/20/2008 12:12:52 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 12:12:52 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 12:12:36 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 12:11:33 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:11:32 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/20/2008 12:11:20 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 12:11:07 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 12:11:01 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 12:10:59 PM ESENT 102 General Windows (2776) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 12:10:59 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 12:10:57 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 12:10:54 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 12:10:54 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 12:10:54 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 12:10:54 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 12:10:54 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 12:10:54 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 12:10:53 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 12:10:52 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 12:10:52 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 12:10:52 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 12:10:49 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 12:10:49 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 12:10:49 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 12:10:14 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Warning 11/20/2008 12:10:14 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:10:14 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:10:14 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Warning 11/20/2008 12:10:13 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:08:05 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:07:58 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:07:58 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 12:06:44 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:56:43 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:56:26 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:56:26 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:54:27 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:39:40 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 11:39:40 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 11:35:45 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 11:35:45 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 11:32:30 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 11:32:29 AM VSS 8211 None Volume Shadow Copy Service error: Writer with name WMI Writer and ID {a6ad56c2-b509-4e6c-bb19-49d8f43532f0} attempted to subscribe in safe mode. Operation: Initializing Writer Context: Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0} Writer Name: WMI Writer Error 11/20/2008 11:32:00 AM Microsoft-Windows-EventSystem 4609 Event System The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043c from line 45 of d:\vistasp1_gdr\com\complus\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error. Information 11/20/2008 11:31:52 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Warning 11/20/2008 11:31:52 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:31:52 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:31:29 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 11:31:27 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 11:30:25 AM SecurityCenter 2 None The Windows Security Center Service has stopped. Information 11/20/2008 11:30:23 AM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/20/2008 11:30:23 AM VSS 8225 None The VSS service is shutting down due to shutdown event from the Service Control Manager. Information 11/20/2008 11:30:16 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 11:30:16 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/20/2008 11:09:10 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 11:09:10 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 10:58:09 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 10:58:09 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 10:52:30 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 10:52:30 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 10:51:56 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\SERVER\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 10:51:56 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 10:50:31 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/20/2008 10:39:07 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 10:39:07 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 10:36:19 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/20/2008 10:35:50 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 10:35:50 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 10:35:22 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:34:50 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 10:34:50 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/20/2008 10:34:23 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 10:34:11 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 10:34:05 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 10:34:05 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 10:34:04 AM ESENT 102 General Windows (2788) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 10:34:01 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 10:34:00 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 10:33:59 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 10:33:59 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 10:33:59 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 10:33:59 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:33:59 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 10:33:59 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:33:58 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 10:33:58 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:33:58 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 10:33:54 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 10:33:53 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 10:33:53 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 10:29:29 AM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/20/2008 10:29:25 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 10:29:14 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 10:29:10 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 10:29:09 AM ESENT 102 General Windows (2828) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 10:29:08 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 10:29:03 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 10:29:02 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 10:29:01 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:29:00 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 10:29:00 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:29:00 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 10:29:00 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 10:28:59 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 10:28:58 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 10:28:58 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 10:28:58 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 10:28:56 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 10:28:55 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 10:28:55 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 8:14:39 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/20/2008 8:14:35 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 8:14:35 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/20/2008 8:12:44 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 8:12:44 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 8:09:51 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/20/2008 8:09:50 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 8:09:50 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 8:09:23 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 8:09:23 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 8:08:37 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 8:08:30 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/20/2008 8:08:00 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/20/2008 8:07:57 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 8:07:56 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/20/2008 8:07:55 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 8:07:45 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 8:07:38 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 8:07:37 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 8:07:35 AM ESENT 102 General Windows (2832) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 8:07:33 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 8:07:31 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 8:07:31 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 8:07:31 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 8:07:31 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 8:07:31 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 8:07:29 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 8:07:21 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 8:07:21 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 8:07:21 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 8:07:21 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 8:07:18 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 8:07:18 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 8:07:18 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 8:06:15 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/20/2008 8:06:07 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 8:06:06 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/20/2008 8:05:20 AM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/20/2008 8:05:20 AM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/20/2008 8:03:59 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/20/2008 8:03:58 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/20/2008 8:00:45 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/20/2008 7:59:53 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 7:59:26 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/20/2008 7:59:24 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/20/2008 7:59:24 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 7:59:23 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/20/2008 7:58:51 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 7:58:19 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/20/2008 7:58:09 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/20/2008 7:58:08 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/20/2008 7:58:06 AM ESENT 102 General Windows (2828) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/20/2008 7:58:05 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/20/2008 7:58:02 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 7:58:02 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 7:58:02 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/20/2008 7:58:02 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 7:58:02 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/20/2008 7:58:01 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/20/2008 7:57:53 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/20/2008 7:57:52 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/20/2008 7:57:52 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/20/2008 7:57:52 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/20/2008 7:57:50 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/20/2008 7:57:50 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/20/2008 7:57:50 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/20/2008 7:52:38 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/20/2008 7:52:32 AM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/20/2008 7:52:29 AM VSS 8225 None The VSS service is shutting down due to shutdown event from the Service Control Manager. Information 11/20/2008 7:52:08 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/20/2008 7:52:07 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/20/2008 6:16:47 AM Microsoft-Windows-Backup 754 None Block level backup engine service has stopped. Information 11/20/2008 12:03:02 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/19/2008 9:32:24 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/19/2008 7:46:49 PM Microsoft-Windows-Backup 753 None Block level backup engine service successfully started. Information 11/19/2008 7:46:18 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 7:46:18 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/19/2008 7:43:14 PM Microsoft-Windows-Backup 754 None Block level backup engine service has stopped. Information 11/19/2008 7:39:28 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 7:39:28 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/19/2008 7:36:36 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/19/2008 7:33:14 PM Microsoft-Windows-Backup 753 None Block level backup engine service successfully started. Information 11/19/2008 7:32:15 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 7:32:15 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Warning 11/19/2008 6:47:35 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/19/2008 6:45:21 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 6:45:20 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/19/2008 6:43:24 PM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/19/2008 6:37:43 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/19/2008 6:37:43 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/19/2008 6:37:36 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/19/2008 4:32:07 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5439.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/19/2008 11:40:08 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/19/2008 10:18:42 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 10:18:42 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/19/2008 10:16:01 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/19/2008 10:14:45 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 10:14:46 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 10:14:05 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 10:14:05 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 10:14:04 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 10:14:02 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/19/2008 10:13:55 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/19/2008 10:13:49 AM ESENT 102 General Windows (2868) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/19/2008 10:13:48 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5438.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/19/2008 10:13:45 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/19/2008 10:13:44 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/19/2008 10:13:41 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 10:13:41 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 10:13:41 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 10:13:41 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 10:13:41 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 10:13:40 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/19/2008 10:13:35 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/19/2008 10:13:35 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/19/2008 10:13:35 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/19/2008 10:13:35 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/19/2008 10:13:32 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/19/2008 10:13:32 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/19/2008 10:13:32 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/19/2008 10:12:09 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/19/2008 10:12:06 AM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/19/2008 10:11:59 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 10:11:58 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/19/2008 10:11:50 AM Microsoft-Windows-Winsrv 10002 None The following application was terminated because it was hung: mmc.exe. Information 11/19/2008 10:11:50 AM Microsoft-Windows-Winsrv 10002 None The following application was terminated because it was hung: mmc.exe. Information 11/19/2008 10:00:30 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/19/2008 9:57:58 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 9:57:57 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/19/2008 9:55:02 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/19/2008 9:53:41 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 9:53:31 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:53:07 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 9:53:07 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 9:53:05 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 9:53:05 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/19/2008 9:52:54 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/19/2008 9:52:48 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5438.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/19/2008 9:52:47 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/19/2008 9:52:46 AM ESENT 102 General Windows (2848) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/19/2008 9:52:44 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/19/2008 9:52:41 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:52:41 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 9:52:41 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:52:41 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 9:52:41 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:52:40 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/19/2008 9:52:32 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/19/2008 9:52:32 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/19/2008 9:52:32 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/19/2008 9:52:32 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/19/2008 9:52:29 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/19/2008 9:52:29 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/19/2008 9:52:29 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/19/2008 9:48:16 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/19/2008 9:48:14 AM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/19/2008 9:48:09 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 9:48:08 AM Microsoft-Windows-Winsrv 10002 None The following application was terminated because it was hung: explorer.exe. Information 11/19/2008 9:48:09 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/19/2008 9:47:04 AM Windows Error Reporting 1001 None "Fault bucket 161531441, type 5 Event Name: AppHangB1 Response: None Cab Id: 0 Problem signature: P1: Explorer.EXE P2: 6.0.6001.18000 P3: 47918e5d P4: 0f6a P5: 0 P6: P7: P8: P9: P10: Attached files: C:\Users\Bill\AppData\Local\Temp\WERBAA7.tmp.version.txt C:\Users\Bill\AppData\Local\Temp\WERD24D.tmp.appcompat.txt These files may be available here: C:\Users\Bill\AppData\Local\Microsoft\Windows\WER\ReportArchive\Report14eddef8" Error 11/19/2008 9:47:04 AM Application Hang 1002 (101) The program Explorer.EXE version 6.0.6001.18000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: fa0 Start Time: 01c94a6d78c57782 Termination Time: 0 Information 11/19/2008 9:46:58 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 9:46:58 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Error 11/19/2008 9:46:10 AM Application Hang 1002 (101) The program mmc.exe version 6.0.6001.18000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: 6e4 Start Time: 01c94a6debe64692 Termination Time: 71 Information 11/19/2008 9:46:08 AM Windows Error Reporting 1001 None "Fault bucket 169827388, type 5 Event Name: AppHangXProcB1 Response: None Cab Id: 0 Problem signature: P1: mmc.exe P2: 6.0.6001.18000 P3: 47918d09 P4: 97dd P5: 65 P6: vds.exe P7: 0.0.0.0 P8: P9: P10: Attached files: C:\Users\Bill\AppData\Local\Temp\WERF97A.tmp.version.txt C:\Users\Bill\AppData\Local\Temp\WER36A.tmp.appcompat.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report16310472" Information 11/19/2008 9:42:11 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 9:42:11 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/19/2008 9:39:13 AM SecurityCenter 1 None The Windows Security Center Service has started. Error 11/19/2008 9:38:24 AM Application Error 1000 (100) Faulting application sidebar.exe, version 6.0.6001.18000, time stamp 0x4791952a, faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791a7a6, exception code 0xc0000005, fault offset 0x00043387, process id 0xf44, application start time 0x01c94a6d83e955a2. Information 11/19/2008 9:38:20 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:37:51 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 9:37:22 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 9:37:18 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 9:37:17 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/19/2008 9:37:17 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 9:37:05 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/19/2008 9:37:00 AM ESENT 102 General Windows (2828) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/19/2008 9:37:00 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5438.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/19/2008 9:36:57 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/19/2008 9:36:55 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/19/2008 9:36:52 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:36:52 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 9:36:52 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:36:52 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 9:36:52 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 9:36:51 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/19/2008 9:36:43 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/19/2008 9:36:43 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/19/2008 9:36:43 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/19/2008 9:36:42 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/19/2008 9:36:40 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/19/2008 9:36:40 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/19/2008 9:36:40 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/19/2008 8:43:36 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/19/2008 8:43:21 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 8:43:21 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Warning 11/19/2008 8:07:06 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Error 11/19/2008 8:06:22 AM Microsoft-Windows-Search 3079 Gatherer "Notifications for the volume h:\ are not active. Context: Windows Application Details: The device is not ready. (0x80070015) " Information 11/19/2008 8:02:18 AM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/19/2008 8:01:02 AM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/19/2008 7:53:04 AM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/19/2008 7:33:03 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Error 11/19/2008 6:38:44 AM Application Error 1000 (100) Faulting application wmplayer.exe, version 11.0.6001.7000, time stamp 0x47919356, faulting module quartz.dll_unloaded, version 0.0.0.0, time stamp 0x4812e26d, exception code 0xc0000005, fault offset 0x6eb4d1ee, process id 0xaf4, application start time 0x01c94a5468d97510. Information 11/19/2008 6:03:03 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 6:02:21 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 6:02:19 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 6:02:18 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/19/2008 5:54:40 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/19/2008 5:54:40 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Error 11/19/2008 5:52:46 AM Microsoft-Windows-Search 3024 Gatherer The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again. Context: Application, SystemIndex Catalog Warning 11/19/2008 5:52:46 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: Unspecified error (0x80004005) " Information 11/19/2008 5:51:50 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/19/2008 5:50:24 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/19/2008 5:49:50 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 5:49:38 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/19/2008 5:49:32 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5438.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/19/2008 5:49:29 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/19/2008 5:49:29 AM ESENT 102 General Windows (2868) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/19/2008 5:49:27 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/19/2008 5:49:24 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 5:49:24 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 5:49:24 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/19/2008 5:49:24 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 5:49:24 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/19/2008 5:49:23 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/19/2008 5:49:16 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/19/2008 5:49:15 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/19/2008 5:49:15 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/19/2008 5:49:15 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/19/2008 5:49:12 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/19/2008 5:49:12 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/19/2008 5:49:12 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/19/2008 5:47:50 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/19/2008 5:47:50 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/19/2008 5:47:16 AM System Restore 8194 None Successfully created restore point (Process = \\375SMS-XPSMEDIA\Installs\AnyDVD\SetupAnyDVD6485.exe ; Description = Install AnyDVD). Information 11/19/2008 5:46:45 AM System Restore 8194 None Successfully created restore point (Process = \\375SMS-XPSMEDIA\Installs\AnyDVD\SetupAnyDVD6485.exe ; Description = Install AnyDVD). Error 11/19/2008 5:46:16 AM VSS 8194 None Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005. This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {41042d27-6363-4d7f-b5dd-c939acb7dc85} Error 11/19/2008 5:44:47 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:44:21 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:44:21 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:43:26 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:43:26 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:43:25 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:42:02 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:42:02 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:42:02 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:42:02 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:41:25 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/19/2008 5:41:25 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/19/2008 5:37:32 AM Outlook 29 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being re-pushed to the indexer for the following reason: Index reset, re-push entire store. Information 11/19/2008 5:37:32 AM Outlook 29 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/19/2008 5:37:32 AM Outlook 31 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog rebuild. Information 11/19/2008 5:35:52 AM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/19/2008 5:35:47 AM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/19/2008 5:35:47 AM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/19/2008 5:35:37 AM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/19/2008 12:03:01 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/18/2008 10:26:40 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/18/2008 7:27:37 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/18/2008 7:27:37 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/18/2008 7:04:08 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/18/2008 7:04:08 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/18/2008 7:00:58 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/18/2008 7:00:12 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 6:59:43 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 6:59:37 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 6:59:33 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 6:59:32 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/18/2008 6:59:04 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 6:58:52 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/18/2008 6:58:46 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5438.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/18/2008 6:58:46 PM ESENT 102 General Windows (2844) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/18/2008 6:58:44 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/18/2008 6:58:41 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/18/2008 6:58:39 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 6:58:39 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 6:58:39 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 6:58:39 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 6:58:39 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 6:58:37 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/18/2008 6:58:33 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/18/2008 6:58:32 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/18/2008 6:58:32 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/18/2008 6:58:32 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/18/2008 6:58:30 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/18/2008 6:58:30 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/18/2008 6:58:30 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/18/2008 6:57:03 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 6:57:03 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/18/2008 5:44:11 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5438.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/18/2008 4:10:49 PM Microsoft-Windows-Backup 754 None Block level backup engine service has stopped. Information 11/18/2008 4:03:27 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/18/2008 3:24:38 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/18/2008 1:47:20 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/18/2008 1:47:20 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/18/2008 1:45:50 PM Microsoft-Windows-Backup 753 None Block level backup engine service successfully started. Information 11/18/2008 1:39:59 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/18/2008 1:39:59 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Error 11/18/2008 1:37:26 PM Application 0 None "The description for Event ID 0 from source Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: OpenService failed: The specified service does not exist as an installed service the message resource is present but the message is not found in the string/message table " Information 11/18/2008 1:36:43 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/18/2008 1:36:43 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/18/2008 1:36:38 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/18/2008 1:35:55 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:35:14 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 1:34:58 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 1:34:55 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 1:34:55 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/18/2008 1:34:40 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:34:28 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/18/2008 1:34:23 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/18/2008 1:34:23 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5437.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/18/2008 1:34:21 PM ESENT 102 General Windows (2840) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/18/2008 1:34:17 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/18/2008 1:34:15 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:34:15 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:34:15 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:34:15 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:34:15 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:34:14 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/18/2008 1:34:06 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/18/2008 1:34:05 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/18/2008 1:34:05 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/18/2008 1:34:05 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/18/2008 1:34:03 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/18/2008 1:34:03 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/18/2008 1:34:03 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/18/2008 1:33:05 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/18/2008 1:33:03 PM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/18/2008 1:33:03 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/18/2008 1:33:00 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 1:33:00 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/18/2008 1:32:56 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/18/2008 1:30:58 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/18/2008 1:30:58 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Information 11/18/2008 1:30:41 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/18/2008 1:30:21 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:29:30 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 1:29:29 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 1:29:28 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/18/2008 1:29:18 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 1:28:42 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:28:32 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/18/2008 1:28:25 PM ESENT 102 General Windows (2848) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/18/2008 1:28:25 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5437.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/18/2008 1:28:23 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/18/2008 1:28:20 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/18/2008 1:28:18 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:28:18 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:28:18 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:28:18 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:28:18 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:28:16 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/18/2008 1:28:09 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/18/2008 1:28:09 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/18/2008 1:28:09 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/18/2008 1:28:09 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/18/2008 1:28:06 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/18/2008 1:28:06 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/18/2008 1:28:06 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/18/2008 1:26:28 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/18/2008 1:26:27 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/18/2008 1:26:27 PM SecurityCenter 2 None The Windows Security Center Service has stopped. Information 11/18/2008 1:26:21 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 1:26:21 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/18/2008 1:26:17 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/18/2008 1:23:59 PM MySQL 100 None "C:\PROGRA~1\SQUEEZ~1\server\Bin\MSWIN3~1\mysqld.exe: Shutdown complete For more information, see Help and Support Center at http://www.mysql.com. " Error 11/18/2008 1:23:59 PM MySQL 100 None "Aborting For more information, see Help and Support Center at http://www.mysql.com. " Error 11/18/2008 1:23:55 PM Microsoft-Windows-Search 3079 Gatherer "Notifications for the volume h:\ are not active. Context: Windows Application Details: The device is not ready. (0x80070015) " Error 11/18/2008 1:23:33 PM Microsoft-Windows-Search 3024 Gatherer The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again. Context: Application, SystemIndex Catalog Information 11/18/2008 1:22:49 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/18/2008 1:22:48 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/18/2008 1:19:59 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:19:47 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/18/2008 1:19:10 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 1:19:10 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 1:19:09 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Warning 11/18/2008 1:18:27 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: Unspecified error (0x80004005) " Information 11/18/2008 1:18:15 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/18/2008 1:17:40 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:17:29 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/18/2008 1:17:24 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/18/2008 1:17:22 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5437.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/18/2008 1:17:21 PM ESENT 102 General Windows (2832) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/18/2008 1:17:18 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/18/2008 1:17:15 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:17:15 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:17:15 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:17:15 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/18/2008 1:17:15 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/18/2008 1:17:14 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/18/2008 1:17:06 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/18/2008 1:17:06 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/18/2008 1:17:06 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/18/2008 1:17:06 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/18/2008 1:17:03 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/18/2008 1:17:03 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/18/2008 1:17:03 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/18/2008 1:15:45 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/18/2008 1:15:44 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/18/2008 1:12:59 PM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/18/2008 1:12:00 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/18/2008 1:12:00 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/18/2008 1:11:52 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/18/2008 6:57:30 AM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/18/2008 6:56:22 AM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Warning 11/18/2008 5:38:50 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/18/2008 5:35:08 AM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/18/2008 5:34:04 AM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/18/2008 12:03:02 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/17/2008 9:07:29 PM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/17/2008 7:28:56 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5437.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 7:17:35 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/17/2008 6:48:17 PM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Warning 11/17/2008 6:19:40 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/17/2008 6:12:06 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 6:12:06 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 6:08:28 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 6:07:13 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:07:06 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 6:06:35 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 6:06:34 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 6:06:33 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 6:06:31 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 6:06:21 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 6:06:14 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 6:06:14 PM ESENT 102 General Windows (2864) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 6:06:14 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 6:06:09 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 6:06:07 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:06:07 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 6:06:07 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 6:06:07 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:06:07 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:06:06 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 6:05:58 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 6:05:57 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 6:05:57 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 6:05:57 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 6:05:54 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 6:05:54 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 6:05:54 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 6:04:40 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 6:04:40 PM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/17/2008 6:04:40 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/17/2008 6:04:37 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 6:04:37 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 6:03:15 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 6:01:49 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:01:39 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 6:01:20 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 6:01:17 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 6:01:15 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 6:01:14 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 6:00:48 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 6:00:46 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 6:00:43 PM ESENT 102 General Windows (2628) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 6:00:43 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 6:00:42 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 6:00:39 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:00:39 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 6:00:39 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:00:39 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 6:00:39 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 6:00:38 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 6:00:29 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 6:00:29 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 6:00:29 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 6:00:29 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 6:00:27 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 6:00:27 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 6:00:27 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 5:58:57 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/17/2008 5:58:35 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:58:23 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 5:58:18 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 5:58:15 PM ESENT 102 General Windows (2820) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 5:58:15 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 5:58:14 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 5:58:11 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:58:11 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:58:11 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:58:11 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:58:11 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:58:10 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 5:58:01 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 5:58:01 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 5:58:01 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 5:58:01 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 5:57:58 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 5:57:58 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 5:57:58 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 5:46:09 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 5:46:09 PM Microsoft-Windows-Security-Licensing-SLC 903 None "The Software Licensing service has stopped. " Information 11/17/2008 5:46:09 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/17/2008 5:46:09 PM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/17/2008 5:46:08 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:46:08 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 5:45:23 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:45:08 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 5:44:37 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 5:44:36 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:44:35 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 5:44:32 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:44:22 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 5:44:17 PM ESENT 102 General Windows (2796) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 5:44:16 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 5:44:12 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 5:44:11 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 5:44:08 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:44:08 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:44:08 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:44:08 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:44:08 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:44:07 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 5:43:59 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 5:43:59 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 5:43:59 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 5:43:59 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 5:43:56 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 5:43:56 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 5:43:56 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 5:39:02 PM Microsoft-Windows-Security-Licensing-SLC 903 None "The Software Licensing service has stopped. " Information 11/17/2008 5:39:02 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/17/2008 5:39:02 PM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/17/2008 5:38:54 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:38:42 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 5:38:37 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 5:38:36 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 5:38:36 PM ESENT 102 General Windows (2936) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 5:38:32 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 5:38:30 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:38:30 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:38:30 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:38:30 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:38:30 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:38:28 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 5:38:21 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 5:38:20 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 5:38:20 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 5:38:20 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 5:38:18 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 5:38:18 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 5:38:18 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 5:37:05 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:37:04 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 5:35:14 PM Outlook 29 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/17/2008 5:35:13 PM Outlook 31 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog rebuild. Information 11/17/2008 5:35:09 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/17/2008 5:34:36 PM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/17/2008 5:34:36 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/17/2008 5:34:35 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/17/2008 5:34:26 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/17/2008 5:28:18 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 5:28:18 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 5:25:38 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 5:24:39 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:24:16 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 5:24:09 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 5:24:07 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:24:07 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 5:23:42 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:23:29 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 5:23:24 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 5:23:23 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 5:23:22 PM ESENT 102 General Windows (2904) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 5:23:20 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 5:23:17 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:23:17 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:23:17 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:23:17 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:23:17 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:23:16 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 5:23:08 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 5:23:07 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 5:23:07 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 5:23:07 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 5:23:05 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 5:23:05 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 5:23:05 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 5:15:19 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 5:15:16 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:15:16 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 5:10:51 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 5:10:50 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 5:08:52 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 5:08:52 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 5:07:44 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 5:07:17 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:06:30 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 5:06:29 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:06:29 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 5:06:21 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 5:05:46 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:05:35 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 5:05:29 PM ESENT 102 General Windows (2924) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 5:05:29 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 5:05:28 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 5:05:24 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 5:05:22 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:05:22 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:05:22 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:05:22 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 5:05:22 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 5:05:20 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 5:05:13 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 5:05:13 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 5:05:13 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 5:05:13 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 5:05:09 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 5:05:09 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 5:05:09 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 5:04:17 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 5:04:14 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 5:04:13 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 4:52:09 PM Windows Error Reporting 1001 None "Fault bucket 634558657, type 1 Event Name: APPCRASH Response: None Cab Id: 0 Problem signature: P1: mobsync.exe P2: 6.0.6001.18000 P3: 47918e41 P4: StackHash_655d P5: 6.0.6001.18000 P6: 4791a7a6 P7: c0000374 P8: 000b015d P9: P10: Attached files: C:\Users\Bill\AppData\Local\Temp\WER88AF.tmp.version.txt These files may be available here: C:\Users\Bill\AppData\Local\Microsoft\Windows\WER\ReportArchive\Report0f92e954" Error 11/17/2008 4:51:44 PM Application Error 1000 (100) Faulting application mobsync.exe, version 6.0.6001.18000, time stamp 0x47918e41, faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791a7a6, exception code 0xc0000374, fault offset 0x000b015d, process id 0x11b0, application start time 0x01c94917d26cc2cc. Information 11/17/2008 4:51:02 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 4:51:02 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 4:47:59 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 4:47:59 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 4:47:43 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 4:46:33 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:46:21 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 4:45:53 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 4:45:52 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 4:45:50 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 4:45:46 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 4:45:35 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 4:45:27 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 4:45:25 PM ESENT 102 General Windows (2820) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 4:45:25 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 4:45:23 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 4:45:20 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:45:20 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 4:45:20 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:45:20 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 4:45:20 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:45:19 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 4:45:11 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 4:45:09 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 4:45:09 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 4:45:09 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 4:45:08 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 4:45:08 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 4:45:08 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 4:38:58 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 4:38:57 PM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/17/2008 4:38:57 PM VSS 8225 None The VSS service is shutting down due to shutdown event from the Service Control Manager. Information 11/17/2008 4:38:52 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 4:38:52 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 4:36:47 PM System Restore 8194 None "Successfully created restore point (Process = C:\Windows\system32\DrvInst.exe ""4"" ""0"" ""C:\Users\Bill\{3e426a6b-85d7-4e5f-b7c1-50ac75f7e6d2}\nv_disp2.inf"" ""0"" ""5c20e37cb"" ""000005D4"" ""WinSta0\Default"" ""00000624"" ""208"" ""g:\drivers\vista\175.16""; Description = Device Driver Package Install: NVIDIA Display adapters)." Information 11/17/2008 4:36:46 PM System Restore 8194 None "Successfully created restore point (Process = C:\Windows\system32\DrvInst.exe ""4"" ""0"" ""C:\Users\Bill\{3e426a6b-85d7-4e5f-b7c1-50ac75f7e6d2}\nv_disp2.inf"" ""0"" ""5c20e37cb"" ""000005D4"" ""WinSta0\Default"" ""00000624"" ""208"" ""g:\drivers\vista\175.16""; Description = Device Driver Package Install: NVIDIA Display adapters)." Information 11/17/2008 4:36:41 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 4:36:40 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 4:33:29 PM Microsoft-Windows-RestartManager 10001 None Ending session 1 started 11/18/2008 12:32:51 AM. Information 11/17/2008 4:33:29 PM MsiInstaller 1033 None Windows Installer installed the product. Product Name: NVIDIA PhysX v8.09.04. Product Version: 8.09.04. Product Language: 1033. Installation success or error status: 0. Information 11/17/2008 4:33:29 PM MsiInstaller 11707 None Product: NVIDIA PhysX v8.09.04 -- Installation operation completed successfully. Information 11/17/2008 4:33:22 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 4:32:51 PM Microsoft-Windows-RestartManager 10000 None Starting session 1 - 11/18/2008 12:32:51 AM. Information 11/17/2008 4:32:09 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:31:50 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 4:31:28 PM Desktop Window Manager 9007 None The Desktop Window Manager was unable to start because WDDM is not in use Information 11/17/2008 4:31:26 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 4:31:25 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 4:31:24 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 4:31:14 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 4:31:14 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 4:31:07 PM ESENT 302 Logging/Recovery Windows (2752) Windows: The database engine has successfully completed recovery steps. Information 11/17/2008 4:31:05 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log. Information 11/17/2008 4:31:04 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB8.log. Information 11/17/2008 4:31:04 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB7.log. Information 11/17/2008 4:31:02 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB6.log. Information 11/17/2008 4:31:02 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB5.log. Information 11/17/2008 4:31:01 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB4.log. Information 11/17/2008 4:31:01 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB3.log. Information 11/17/2008 4:31:00 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB2.log. Information 11/17/2008 4:31:00 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB1.log. Information 11/17/2008 4:30:59 PM ESENT 301 Logging/Recovery Windows (2752) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BBB0.log. Information 11/17/2008 4:30:58 PM ESENT 300 Logging/Recovery Windows (2752) Windows: The database engine is initiating recovery steps. Information 11/17/2008 4:30:57 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 4:30:55 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 4:30:55 PM ESENT 102 General Windows (2752) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 4:30:52 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 4:30:50 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:30:50 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 4:30:50 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 4:30:50 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:30:50 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 4:30:48 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 4:30:40 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 4:30:40 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 4:30:40 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 4:30:40 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 4:30:37 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 4:30:37 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 4:30:37 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 3:14:56 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 3:14:37 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 3:14:34 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 3:14:34 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 3:08:40 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 3:08:40 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Warning 11/17/2008 3:06:42 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: Unspecified error (0x80004005) " Information 11/17/2008 3:06:11 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 3:04:25 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 3:04:08 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 3:03:33 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 3:03:32 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 3:03:29 PM ESENT 102 General Windows (2628) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 3:03:28 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 3:03:27 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 3:03:25 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 3:03:25 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 3:03:25 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 3:03:25 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 3:03:25 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 3:03:24 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 3:03:15 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 3:03:14 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 3:03:14 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 3:03:14 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 3:03:12 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 3:03:12 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 3:03:12 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 3:02:15 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 3:02:11 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 3:02:11 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Error 11/17/2008 3:01:44 PM Application Error 1000 (100) Faulting application nvcplui.exe, version 2.1.270.0, time stamp 0x48ebc8c1, faulting module nvdisps.dll, version 7.15.11.7824, time stamp 0x48ebdf18, exception code 0xc0000005, fault offset 0x00032050, process id 0x1404, application start time 0x01c949086bc748c3. Information 11/17/2008 3:00:55 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 3:00:55 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 3:00:43 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 3:00:12 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 3:00:10 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 3:00:09 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 2:59:36 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 2:57:49 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 2:57:32 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:56:59 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 2:56:55 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 2:56:55 PM ESENT 302 Logging/Recovery Windows (2660) Windows: The database engine has successfully completed recovery steps. Information 11/17/2008 2:56:54 PM ESENT 301 Logging/Recovery Windows (2660) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log. Information 11/17/2008 2:56:53 PM ESENT 301 Logging/Recovery Windows (2660) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BB03.log. Information 11/17/2008 2:56:53 PM ESENT 301 Logging/Recovery Windows (2660) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS0BB02.log. Information 11/17/2008 2:56:53 PM ESENT 300 Logging/Recovery Windows (2660) Windows: The database engine is initiating recovery steps. Information 11/17/2008 2:56:52 PM ESENT 102 General Windows (2660) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 2:56:52 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 2:56:51 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 2:56:49 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:56:49 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:56:49 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:56:49 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:56:49 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:56:47 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 2:56:39 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 2:56:38 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 2:56:38 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 2:56:38 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 2:56:36 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 2:56:36 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 2:56:36 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 2:18:40 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 2:18:37 PM ESENT 102 General Windows (2652) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 2:18:37 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 2:18:35 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 2:18:33 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:18:33 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:18:33 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:18:33 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:18:33 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:18:32 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 2:18:23 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 2:18:23 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 2:18:23 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 2:18:23 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 2:18:20 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 2:18:20 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 2:18:20 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 2:15:29 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 2:14:53 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:14:42 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 2:14:36 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 2:14:36 PM ESENT 102 General Windows (2868) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 2:14:36 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 2:14:32 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 2:14:29 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:14:29 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:14:29 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:14:29 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:14:29 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:14:28 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 2:14:20 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 2:14:19 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 2:14:19 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 2:14:19 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 2:14:17 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 2:14:17 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 2:14:17 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 2:13:09 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 2:13:06 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 2:13:06 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 2:13:02 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 2:09:00 PM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 2:09:00 PM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 2:06:05 PM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 2:05:52 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:05:26 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 2:05:25 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 2:05:24 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 2:04:49 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 2:04:10 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:03:57 PM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 2:03:52 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 2:03:52 PM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 2:03:50 PM ESENT 102 General Windows (2820) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 2:03:48 PM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 2:03:45 PM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:03:45 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:03:45 PM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:03:45 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 2:03:45 PM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 2:03:44 PM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 2:03:40 PM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 2:03:39 PM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 2:03:39 PM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 2:03:39 PM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 2:03:36 PM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 2:03:36 PM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 2:03:36 PM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 2:02:33 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 2:02:23 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 2:02:22 PM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 2:02:16 PM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 10:50:02 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Warning 11/17/2008 10:16:14 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Warning 11/17/2008 10:14:04 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/17/2008 10:07:49 AM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/17/2008 10:07:16 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 10:07:16 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 10:04:17 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 10:03:54 AM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/17/2008 10:03:54 AM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/17/2008 10:03:44 AM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/17/2008 10:03:00 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 10:02:52 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 10:02:16 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 10:02:17 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 10:02:15 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 10:02:14 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 10:02:05 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 10:01:59 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 10:01:59 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 10:01:56 AM ESENT 102 General Windows (2876) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 10:01:54 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 10:01:52 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 10:01:52 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 10:01:52 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 10:01:52 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 10:01:52 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 10:01:50 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 10:01:43 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 10:01:42 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 10:01:42 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 10:01:42 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 10:01:40 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 10:01:40 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 10:01:40 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 10:00:55 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 10:00:50 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 10:00:49 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 9:49:14 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 9:49:13 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 9:45:59 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 9:45:38 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:45:06 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 9:45:06 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 9:45:05 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 9:44:39 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 9:44:02 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 9:43:51 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 9:43:44 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 9:43:44 AM ESENT 102 General Windows (2888) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 9:43:43 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 9:43:39 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 9:43:36 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:43:36 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 9:43:36 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:43:36 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 9:43:36 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:43:35 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 9:43:31 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 10:01:52 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 10:01:50 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 10:01:43 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 10:01:42 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 10:01:42 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 10:01:42 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 10:01:40 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 10:01:40 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 10:01:40 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 10:00:55 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 10:00:50 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 10:00:49 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 9:49:14 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 9:49:13 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 9:45:59 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 9:45:38 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:45:06 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 9:45:06 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 9:45:05 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 9:44:39 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 9:44:02 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 9:43:51 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 9:43:44 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 9:43:44 AM ESENT 102 General Windows (2888) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 9:43:43 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 9:43:39 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 9:43:36 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:43:36 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 9:43:36 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:43:36 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 9:43:36 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 9:43:35 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 9:43:31 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 9:43:30 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 9:43:30 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 9:43:30 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 9:43:27 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 9:43:27 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 9:43:27 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 9:42:17 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 9:42:03 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 9:42:03 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 9:41:59 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 9:41:33 AM Desktop Window Manager 9002 None The Desktop Window Manager was unable to start Information 11/17/2008 9:41:22 AM Desktop Window Manager 9007 None The Desktop Window Manager was unable to start because WDDM is not in use Information 11/17/2008 9:41:19 AM Desktop Window Manager 9002 None The Desktop Window Manager was unable to start Information 11/17/2008 9:40:27 AM System Restore 8194 None "Successfully created restore point (Process = C:\Windows\system32\DrvInst.exe ""4"" ""0"" ""C:\Users\Bill\{34875502-2a0a-4608-a899-72a9b497cf62}\nv_disp.inf"" ""0"" ""5fef1b27f"" ""00000478"" ""WinSta0\Default"" ""00000508"" ""208"" ""c:\nvidia\winvista\178.24\english""; Description = Device Driver Package Install: NVIDIA Display adapters)." Information 11/17/2008 9:40:26 AM System Restore 8194 None "Successfully created restore point (Process = C:\Windows\system32\DrvInst.exe ""4"" ""0"" ""C:\Users\Bill\{34875502-2a0a-4608-a899-72a9b497cf62}\nv_disp.inf"" ""0"" ""5fef1b27f"" ""00000478"" ""WinSta0\Default"" ""00000508"" ""208"" ""c:\nvidia\winvista\178.24\english""; Description = Device Driver Package Install: NVIDIA Display adapters)." Information 11/17/2008 9:33:40 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 9:33:40 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 8:58:56 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 8:58:56 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 8:56:29 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:56:09 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 8:56:07 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 8:56:07 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 8:53:07 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 8:53:07 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Error 11/17/2008 8:52:43 AM Microsoft-Windows-Search 3079 Gatherer "Notifications for the volume h:\ are not active. Context: Windows Application Details: The device is not ready. (0x80070015) " Information 11/17/2008 8:50:47 AM SecurityCenter 1 None The Windows Security Center Service has started. Warning 11/17/2008 8:50:28 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: Unspecified error (0x80004005) " Information 11/17/2008 8:49:25 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 8:48:51 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 8:48:39 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 8:48:32 AM ESENT 102 General Windows (2836) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 8:48:32 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 8:48:30 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 8:48:28 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 8:48:26 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:48:26 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 8:48:26 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:48:26 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 8:48:26 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:48:24 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 8:48:17 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 8:48:16 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 8:48:16 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 8:48:16 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 8:48:13 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 8:48:13 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 8:48:13 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 8:46:02 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 8:46:00 AM Microsoft-Windows-User Profiles Service 1532 None "The User Profile Service has stopped. " Information 11/17/2008 8:46:00 AM Microsoft-Windows-Security-Licensing-SLC 901 None "The Software Licensing service is stopping. " Information 11/17/2008 8:45:58 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 8:45:58 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 8:45:33 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/17/2008 8:45:33 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/17/2008 8:41:45 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/17/2008 8:41:21 AM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:40:57 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 8:40:57 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 8:40:56 AM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/17/2008 8:40:25 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/17/2008 8:39:51 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 8:39:40 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/17/2008 8:39:33 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/17/2008 8:39:29 AM ESENT 102 General Windows (2804) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/17/2008 8:39:28 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/17/2008 8:39:27 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/17/2008 8:39:26 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:39:25 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 8:39:25 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/17/2008 8:39:25 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:39:25 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/17/2008 8:39:24 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/17/2008 8:39:19 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/17/2008 8:39:19 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/17/2008 8:39:19 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/17/2008 8:39:19 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/17/2008 8:39:13 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/17/2008 8:39:13 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/17/2008 8:39:13 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/17/2008 8:18:06 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Warning 11/17/2008 8:17:34 AM Microsoft-Windows-User Profiles Service 1530 None "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 2 user registry handles leaked from \Registry\User\S-1-5-21-971874790-3817014305-1507390587-1000_Classes: Process 4 () has opened key \REGISTRY\USER\S-1-5-21-971874790-3817014305-1507390587-1000_CLASSES Process 1824 (\Device\HarddiskVolume3\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-971874790-3817014305-1507390587-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache " Information 11/17/2008 8:17:33 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/17/2008 8:17:32 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/17/2008 8:17:27 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/17/2008 7:11:56 AM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/17/2008 5:34:39 AM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/17/2008 5:33:33 AM Outlook 32 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog checkpoint. Information 11/17/2008 5:31:21 AM Outlook 31 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog rebuild. Information 11/17/2008 5:29:15 AM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/17/2008 5:29:11 AM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/17/2008 5:29:11 AM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/17/2008 5:29:02 AM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/17/2008 12:04:06 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/17/2008 12:01:06 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/17/2008 12:01:06 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/16/2008 4:19:40 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5436.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Warning 11/16/2008 3:10:12 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/16/2008 3:07:02 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/16/2008 3:07:02 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/16/2008 3:06:54 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/16/2008 12:03:48 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/16/2008 12:00:48 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/16/2008 12:00:48 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/15/2008 6:13:21 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5435.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/15/2008 12:03:43 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/15/2008 12:00:43 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/15/2008 12:00:43 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/14/2008 12:03:03 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/13/2008 9:33:53 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/13/2008 9:31:24 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\svchost.exe -k netsvcs; Description = Windows Update). Information 11/13/2008 9:31:24 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = ). Information 11/13/2008 9:31:19 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = Windows Modules Installer). Information 11/13/2008 9:31:01 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = ). Information 11/13/2008 9:30:54 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = Windows Modules Installer). Information 11/13/2008 9:30:33 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = ). Information 11/13/2008 9:30:30 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = Windows Modules Installer). Information 11/13/2008 9:30:27 PM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\svchost.exe -k netsvcs; Description = Windows Update). Information 11/13/2008 4:13:42 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5433.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/13/2008 12:03:54 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/13/2008 12:00:54 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/13/2008 12:00:54 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/12/2008 11:22:08 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5432.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/12/2008 6:37:52 PM iPod Service 0 None "The description for Event ID 0 from source iPod Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/12/2008 6:36:57 PM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/12/2008 6:36:56 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/12/2008 6:36:54 PM Microsoft-Windows-Winlogon 4101 None Windows license validated. Information 11/12/2008 3:52:07 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/12/2008 3:18:04 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/12/2008 3:18:04 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/12/2008 3:15:14 AM SecurityCenter 1 None The Windows Security Center Service has started. Information 11/12/2008 3:13:44 AM Microsoft-Windows-CertificateServicesClient 1 None Certificate Services Client has been started successfully. Information 11/12/2008 3:13:18 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/12/2008 3:13:04 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/12/2008 3:12:57 AM Microsoft-Windows-WMI 5617 None Windows Management Instrumentation Service subsystems initialized successfully Information 11/12/2008 3:12:57 AM ESENT 102 General Windows (2864) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/12/2008 3:12:57 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5430.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/12/2008 3:12:53 AM Microsoft-Windows-WMI 5615 None Windows Management Instrumentation Service started sucessfully Information 11/12/2008 3:12:51 AM RoxSniffer10 0 None "The description for Event ID 0 from source RoxSniffer10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/12/2008 3:12:51 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/12/2008 3:12:51 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service stopped " Information 11/12/2008 3:12:51 AM RoxLiveShare10 0 None "The description for Event ID 0 from source RoxLiveShare10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/12/2008 3:12:51 AM Roxio Upnp Server 10 0 None "The description for Event ID 0 from source Roxio Upnp Server 10 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: Service started " Information 11/12/2008 3:12:49 AM Bonjour Service 1 None "The description for Event ID 1 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mDNSResponder started The specified resource type cannot be found in the image file " Information 11/12/2008 3:12:36 AM Microsoft-Windows-Security-Licensing-SLC 902 None "The Software Licensing service has started. " Information 11/12/2008 3:12:34 AM Microsoft-Windows-Security-Licensing-SLC 1005 None "The result of Windows Right consumption is: hr=0x0 " Information 11/12/2008 3:12:34 AM Microsoft-Windows-Security-Licensing-SLC 1003 None "The Software Licensing service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= {1,[1f59edc8-ad79-4d96-a62d-c33ee78da2ec, 8, 0xC004F014,0x0]} {1,[30fab9cc-8614-4339-989f-7ce61fb7a5c4, 8, 0xC004F014,0x0]} {1,[33a7e8d3-e2ab-413b-96a6-27c83b21c695, 8, 0xC004F014,0x0]} {1,[56a13760-2b9c-406f-be8a-8f2ef22f10b5, 8, 0xC004F014,0x0]} {1,[5e802570-4657-4e84-bfbc-6a0e531b84af, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]} {1,[a79a48fc-70d9-4413-ab47-81cf5d08f7ee, 8, 0xC004F014,0x0]} {1,[d6a70f3f-2052-4633-a9aa-25ea0cdff672, 8, 0xC004F014,0x0]} {1,[f00fa8e9-ac0f-4f43-a259-a26c110cbbf9, 8, 0xC004F014,0x0]} {1,[f79b5e33-4a4e-451c-9e8a-55dcc9bdb89d, 8, 0xC004F014,0x0]} {1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]} " Information 11/12/2008 3:12:34 AM Microsoft-Windows-Security-Licensing-SLC 1033 None "These policies are being excluded since they are only defined with override-only attribute. Policy Names=(IIS-W3SVC-MaxConcurrentRequests) (Telnet-Client-EnableTelnetClient) (Telnet-Client-EnableTelnetClient_w) (Telnet-Server-EnableTelnetServer) (Telnet-Server-EnableTelnetServer_w) (nfs-admincmdtools-enabled) (nfs-adminmmc-enabled) (nfs-clientcmdtools-enabled) (nfs-clientcore-enabled) (sua-EnableSUA) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=5e802570-4657-4e84-bfbc-6a0e531b84af" Information 11/12/2008 3:12:31 AM Microsoft-Windows-EventSystem 4625 None The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Information 11/12/2008 3:12:30 AM Microsoft-Windows-Security-Licensing-SLC 900 None "The Software Licensing service is starting. " Information 11/12/2008 3:12:30 AM Microsoft-Windows-User Profiles Service 1531 None "The User Profile Service has started successfully. " Information 11/12/2008 3:11:00 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/12/2008 3:10:54 AM ESENT 103 General Windows (5176) Windows: The database engine stopped the instance (0). Information 11/12/2008 3:10:54 AM Microsoft-Windows-Search 1013 Search service Windows Search Service stopped normally. Information 11/12/2008 3:10:39 AM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber was unavailable to handle a notification event. Information 11/12/2008 3:10:38 AM Desktop Window Manager 9009 None The Desktop Window Manager has exited with code (0x40010004) Information 11/12/2008 3:10:33 AM Microsoft-Windows-CertificateServicesClient 2 None Certificate Services Client has been stopped. Information 11/12/2008 3:05:23 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\svchost.exe -k netsvcs; Description = Windows Update). Information 11/12/2008 3:05:23 AM MsiInstaller 1035 None Windows Installer reconfigured the product. Product Name: Microsoft Office Shared MUI (English) 2007. Product Version: 12.0.6215.1000. Product Language: 1033. Reconfiguration success or error status: 0. Information 11/12/2008 3:05:23 AM MsiInstaller 11728 None Product: Microsoft Office Shared MUI (English) 2007 -- Configuration completed successfully. Information 11/12/2008 3:05:23 AM MsiInstaller 1036 None Windows Installer installed an update. Product Name: Microsoft Office Shared MUI (English) 2007. Product Version: 12.0.6215.1000. Product Language: 1033. Update Name: Update for Microsoft Script Editor Help (KB957253). Installation success or error status: 0. Information 11/12/2008 3:05:23 AM MsiInstaller 1022 None Product: Microsoft Office Shared MUI (English) 2007 - Update 'Update for Microsoft Script Editor Help (KB957253)' installed successfully. Error 11/12/2008 3:05:11 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/12/2008 3:05:10 AM MsiInstaller 1035 None Windows Installer reconfigured the product. Product Name: Microsoft Office Enterprise 2007. Product Version: 12.0.6215.1000. Product Language: 0. Reconfiguration success or error status: 0. Information 11/12/2008 3:05:10 AM MsiInstaller 11728 None Product: Microsoft Office Enterprise 2007 -- Configuration completed successfully. Information 11/12/2008 3:05:10 AM MsiInstaller 1036 None Windows Installer installed an update. Product Name: Microsoft Office Enterprise 2007. Product Version: 12.0.6215.1000. Product Language: 0. Update Name: Update for Outlook 2007 Junk Email Filter (kb957829). Installation success or error status: 0. Information 11/12/2008 3:05:10 AM MsiInstaller 1022 None Product: Microsoft Office Enterprise 2007 - Update 'Update for Outlook 2007 Junk Email Filter (kb957829)' installed successfully. Information 11/12/2008 3:05:10 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Information 11/12/2008 3:05:05 AM ESENT 102 General Windows (5176) Windows: The database engine (6.00.6001.0000) started a new instance (0). Information 11/12/2008 3:05:05 AM ESENT 103 General Windows (7208) Windows: The database engine stopped the instance (0). Information 11/12/2008 3:05:04 AM Microsoft-Windows-Search 1013 Search service Windows Search Service stopped normally. Error 11/12/2008 3:04:59 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/12/2008 3:04:44 AM MsiInstaller 1035 None Windows Installer reconfigured the product. Product Name: Microsoft Office OneNote MUI (English) 2007. Product Version: 12.0.6215.1000. Product Language: 1033. Reconfiguration success or error status: 0. Information 11/12/2008 3:04:44 AM MsiInstaller 11728 None Product: Microsoft Office OneNote MUI (English) 2007 -- Configuration completed successfully. Information 11/12/2008 3:04:44 AM MsiInstaller 1036 None Windows Installer installed an update. Product Name: Microsoft Office OneNote MUI (English) 2007. Product Version: 12.0.6215.1000. Product Language: 1033. Update Name: Update for Microsoft Office OneNote 2007 Help (KB957245). Installation success or error status: 0. Information 11/12/2008 3:04:44 AM MsiInstaller 1022 None Product: Microsoft Office OneNote MUI (English) 2007 - Update 'Update for Microsoft Office OneNote 2007 Help (KB957245)' installed successfully. Information 11/12/2008 3:04:15 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/12/2008 3:02:50 AM MsiInstaller 1035 None Windows Installer reconfigured the product. Product Name: Microsoft Office Enterprise 2007. Product Version: 12.0.6215.1000. Product Language: 0. Reconfiguration success or error status: 0. Information 11/12/2008 3:02:50 AM MsiInstaller 11728 None Product: Microsoft Office Enterprise 2007 -- Configuration completed successfully. Information 11/12/2008 3:02:50 AM MsiInstaller 1036 None Windows Installer installed an update. Product Name: Microsoft Office Enterprise 2007. Product Version: 12.0.6215.1000. Product Language: 0. Update Name: Security Update for 2007 Microsoft Office System (KB951550). Installation success or error status: 0. Information 11/12/2008 3:02:50 AM MsiInstaller 1022 None Product: Microsoft Office Enterprise 2007 - Update 'Security Update for 2007 Microsoft Office System (KB951550)' installed successfully. Information 11/12/2008 3:02:50 AM Microsoft-Windows-Search 1003 Search service The Windows Search Service started. Error 11/12/2008 3:02:49 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Error 11/12/2008 3:02:49 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/12/2008 3:02:43 AM ESENT 102 General Windows (7208) Windows: The database engine (6.00.6001.0000) started a new instance (0). Error 11/12/2008 3:02:42 AM Microsoft-Windows-Search 3007 Gatherer Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer. Context: Application, SystemIndex Catalog Error 11/12/2008 3:02:41 AM Microsoft-Windows-Search 3006 Gatherer Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer. Information 11/12/2008 3:02:41 AM ESENT 103 General Windows (2776) Windows: The database engine stopped the instance (0). Information 11/12/2008 3:02:40 AM Microsoft-Windows-Search 1013 Search service Windows Search Service stopped normally. Error 11/12/2008 3:01:52 AM Microsoft-Windows-Search 3013 Gatherer "The entry in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) " Information 11/12/2008 3:01:48 AM Microsoft-Windows-RestartManager 10001 None Ending session 1 started 11/12/2008 11:01:29 AM. Information 11/12/2008 3:01:48 AM Microsoft-Windows-RestartManager 10001 None Ending session 1 started 11/12/2008 11:01:29 AM. Information 11/12/2008 3:01:48 AM Microsoft-Windows-RestartManager 10003 None Restarting application or service 'McAfee Network Agent'. Information 11/12/2008 3:01:46 AM Microsoft-Windows-RestartManager 10003 None Restarting application or service 'McAfee Services'. Information 11/12/2008 3:01:43 AM MsiInstaller 1029 None Product: MSXML 4.0 SP2 (KB954430). Restart required. The installation or update for the product required a restart for all changes to take effect. The restart was deferred to a later time. Information 11/12/2008 3:01:43 AM MsiInstaller 1038 None Windows Installer requires a system restart. Product Name: MSXML 4.0 SP2 (KB954430). Product Version: 4.20.9870.0. Product Language: 1033. Type of System Restart: 2. Reason for Restart: 1. Information 11/12/2008 3:01:43 AM MsiInstaller 1033 None Windows Installer installed the product. Product Name: MSXML 4.0 SP2 (KB954430). Product Version: 4.20.9870.0. Product Language: 1033. Installation success or error status: 0. Information 11/12/2008 3:01:43 AM MsiInstaller 11707 None Product: MSXML 4.0 SP2 (KB954430) -- Installation completed successfully. Information 11/12/2008 3:01:43 AM MsiInstaller 1031 None "Product: MSXML 4.0 SP2 (KB954430). The assembly 'policy.4.1.Microsoft.MSXML2R,type=""win32-policy"",version=""4.1.1.0"",publicKeyToken=""6bd6b9abf345378f"",processorArchitecture=""x86""' for component '{31CDA6DB-15C0-8B7B-A06B-D6B9ABF34537}' is in use. You must restart to update the assembly. " Information 11/12/2008 3:01:43 AM MsiInstaller 1031 None "Product: MSXML 4.0 SP2 (KB954430). The assembly 'policy.4.20.Microsoft.MSXML2,type=""win32-policy"",version=""4.20.9870.0"",publicKeyToken=""6bd6b9abf345378f"",processorArchitecture=""x86""' for component '{0EA08098-A5DC-A6DE-A06B-D6B9ABF34537}' is in use. You must restart to update the assembly. " Information 11/12/2008 3:01:42 AM MsiInstaller 1031 None "Product: MSXML 4.0 SP2 (KB954430). The assembly 'Microsoft.MSXML2R,type=""win32"",version=""4.1.1.0"",publicKeyToken=""6bd6b9abf345378f"",processorArchitecture=""x86""' for component '{DA656E4D-45B9-3659-A06B-D6B9ABF34537}' is in use. You must restart to update the assembly. " Information 11/12/2008 3:01:42 AM MsiInstaller 1031 None "Product: MSXML 4.0 SP2 (KB954430). The assembly 'Microsoft.MSXML2,type=""win32"",version=""4.20.9870.0"",publicKeyToken=""6bd6b9abf345378f"",processorArchitecture=""x86""' for component '{7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}' is in use. You must restart to update the assembly. " Information 11/12/2008 3:01:32 AM Microsoft-Windows-RestartManager 10002 None Shutting down application or service 'McAfee Network Agent'. Information 11/12/2008 3:01:31 AM Microsoft-Windows-RestartManager 10002 None Shutting down application or service 'McAfee Services'. Information 11/12/2008 3:01:29 AM Microsoft-Windows-RestartManager 10005 None Machine restart is required. Warning 11/12/2008 3:01:29 AM Microsoft-Windows-RestartManager 10010 None Application 'C:\PROGRA~1\McAfee.com\Agent\mcagent.exe' (pid 3836) cannot be restarted - Application SID does not match Conductor SID.. Information 11/12/2008 3:01:29 AM Microsoft-Windows-RestartManager 10000 None Starting session 1 - 11/12/2008 11:01:29 AM. Information 11/12/2008 3:01:29 AM Microsoft-Windows-RestartManager 10005 None Machine restart is required. Warning 11/12/2008 3:01:29 AM Microsoft-Windows-RestartManager 10010 None Application 'C:\PROGRA~1\McAfee.com\Agent\mcagent.exe' (pid 3836) cannot be restarted - Application SID does not match Conductor SID.. Information 11/12/2008 3:01:29 AM Microsoft-Windows-RestartManager 10000 None Starting session 1 - 11/12/2008 11:01:29 AM. Information 11/12/2008 3:01:26 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = ). Information 11/12/2008 3:01:23 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\servicing\TrustedInstaller.exe; Description = Windows Modules Installer). Information 11/12/2008 3:01:16 AM MsiInstaller 1035 None Windows Installer reconfigured the product. Product Name: Microsoft Office Publisher MUI (English) 2007. Product Version: 12.0.6215.1000. Product Language: 1033. Reconfiguration success or error status: 0. Information 11/12/2008 3:01:16 AM MsiInstaller 11728 None Product: Microsoft Office Publisher MUI (English) 2007 -- Configuration completed successfully. Information 11/12/2008 3:01:16 AM MsiInstaller 1036 None Windows Installer installed an update. Product Name: Microsoft Office Publisher MUI (English) 2007. Product Version: 12.0.6215.1000. Product Language: 1033. Update Name: Update for Microsoft Office Publisher 2007 Help (KB957249). Installation success or error status: 0. Information 11/12/2008 3:01:16 AM MsiInstaller 1022 None Product: Microsoft Office Publisher MUI (English) 2007 - Update 'Update for Microsoft Office Publisher 2007 Help (KB957249)' installed successfully. Information 11/12/2008 3:00:51 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\svchost.exe -k netsvcs; Description = Windows Update). Information 11/12/2008 12:03:40 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/12/2008 12:00:40 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/12/2008 12:00:40 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/11/2008 12:03:49 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/11/2008 12:00:49 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/11/2008 12:00:49 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/10/2008 9:03:20 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5430.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/10/2008 7:44:52 PM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/10/2008 7:44:26 PM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/10/2008 7:26:16 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/10/2008 7:26:16 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/10/2008 7:26:05 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/10/2008 7:23:01 PM Microsoft-Windows-CAPI2 13 None Successful auto property update of third-party root certificate:: Subject: Sha1 thumbprint: <0483ED3399AC3608058722EDBC5E4600E3BEF9D7>. Information 11/10/2008 7:23:01 PM Microsoft-Windows-CAPI2 13 None Successful auto property update of third-party root certificate:: Subject: Sha1 thumbprint: . Information 11/10/2008 2:33:34 AM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5429.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/10/2008 12:03:28 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/10/2008 12:00:28 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/10/2008 12:00:28 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/9/2008 12:03:40 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/9/2008 12:00:40 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/9/2008 12:00:40 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/8/2008 8:10:13 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5428.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/8/2008 5:02:22 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/8/2008 5:02:22 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/8/2008 5:02:15 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/8/2008 4:27:00 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/8/2008 10:05:37 AM Outlook 29 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/8/2008 10:05:37 AM Outlook 31 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog rebuild. Information 11/8/2008 10:05:33 AM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/8/2008 10:01:26 AM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/8/2008 10:01:26 AM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/8/2008 10:01:20 AM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/8/2008 12:03:45 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/8/2008 12:00:45 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/8/2008 12:00:45 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/7/2008 5:05:42 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5427.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/7/2008 2:14:12 PM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/7/2008 12:50:52 PM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/7/2008 12:47:35 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/7/2008 12:47:35 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/7/2008 12:47:28 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/7/2008 12:04:31 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/7/2008 12:01:31 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/7/2008 12:01:31 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Information 11/6/2008 6:39:16 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5426.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Information 11/6/2008 2:25:07 PM McLogEvent 5000 None "McShield service started. Engine version : 5300.2777 DAT version : 5425.0000 Number of signatures in EXTRA.DAT : None Names of threats that EXTRA.DAT can detect : None" Warning 11/6/2008 8:24:03 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Warning 11/6/2008 8:21:43 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/6/2008 8:18:12 AM Outlook 29 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/6/2008 8:18:12 AM Outlook 31 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog rebuild. Information 11/6/2008 8:18:08 AM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/6/2008 8:06:51 AM Microsoft-Windows-LoadPerf 1000 None Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Information 11/6/2008 8:06:51 AM Microsoft-Windows-LoadPerf 1001 None Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Information 11/6/2008 8:00:25 AM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/6/2008 8:00:25 AM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/6/2008 8:00:12 AM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/6/2008 12:03:01 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/5/2008 4:56:03 PM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/5/2008 4:41:45 PM System Restore 8194 None Successfully created restore point (Process = \\375SMS-XPSMEDIA\Installs\AnyDVD\SetupAnyDVD6479.exe ; Description = Install AnyDVD). Information 11/5/2008 4:41:21 PM System Restore 8194 None Successfully created restore point (Process = \\375SMS-XPSMEDIA\Installs\AnyDVD\SetupAnyDVD6479.exe ; Description = Install AnyDVD). Error 11/5/2008 4:41:02 PM VSS 8194 None Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005. This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {986c5aff-3bd5-469e-9adb-87ed15b41bd6} Information 11/5/2008 4:23:25 PM Outlook 32 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog checkpoint. Information 11/5/2008 3:54:02 PM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/5/2008 3:53:59 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/5/2008 3:53:59 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/5/2008 3:53:55 PM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Warning 11/5/2008 9:23:01 AM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/5/2008 9:18:12 AM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/5/2008 9:18:12 AM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild. Information 11/5/2008 9:18:07 AM Outlook 30 None The store C:\BillElle\Outlook\OUTLOOK.PST is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/5/2008 12:03:47 AM VSS 8224 None The VSS service is shutting down due to idle timeout. Information 11/5/2008 12:00:47 AM System Restore 8211 None Successfully created scheduled restore point. Information 11/5/2008 12:00:47 AM System Restore 8194 None Successfully created restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint). Warning 11/4/2008 9:48:01 PM Microsoft-Windows-Search 3036 Gatherer "The content source cannot be accessed. Context: Application, SystemIndex Catalog Details: A server error occurred. Check that the server is available. (0x80041206) " Information 11/4/2008 9:42:41 PM Outlook 29 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/4/2008 9:42:41 PM Outlook 31 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst has detected a catalog rebuild. Information 11/4/2008 9:41:49 PM Outlook 30 None The store C:\WryteSystems,Inc\Outlook\Personal Folders.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers. Information 11/4/2008 9:41:47 PM Outlook 29 None The store C:\BillElle\Outlook\OUTLOOK.PST is being re-pushed to the indexer for the following reason: MAPI Start Page deleted. Information 11/4/2008 9:41:47 PM Outlook 31 None The store C:\BillElle\Outlook\OUTLOOK.PST has detected a catalog rebuild.