T
twicave
Event Viewer
1)System
Event Type: Error
Event Source: Serial
Event Category: None
Event ID: 18
Date: 4/11/2006
Time: 12:40:20 AM
User: N/A
Computer: MACHINENAME
Description:
No Parameters subkey was found for user defined data. This is odd, and it
also means no user configuration can be found.
Data:
0000: 00 00 00 00 01 00 56 00 ......V.
0008: 00 00 00 00 12 00 06 c0 .......?
0010: 53 00 00 00 00 00 00 00 S.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: Workstation
Event Category: None
Event ID: 5728
Date: 4/11/2006
Time: 12:43:41 AM
User: N/A
Computer: MACHINENAME
Description:
Could not load any transport.
Event Type: Information
Event Source: MrxSmb
Event Category: None
Event ID: 8029
Date: 4/11/2006
Time: 12:43:41 AM
User: N/A
Computer: MACHINENAME
Description:
The browser driver was unable to initialize variables from the Registry.
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 00 00 00 00 5d 1f 00 40 ....]..@
0010: 00 00 00 00 34 00 00 c0 ....4..?
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
2)Application
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6009
Date: 4/11/2006
Time: 12:40:30 AM
User: N/A
Computer: MACHINENAME
Description:
The description for Event ID ( 6009 ) in Source ( EventLog ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: 5.01.,
2600, Service Pack 2, Uniprocessor Free.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 4/11/2006
Time: 12:44:41 AM
User: NT AUTHORITY\SYSTEM
Computer: MACHINENAME
Description:
A provider, HiPerfCooker_v1, has been registered in the WMI namespace,
Root\WMI, to use the LocalSystem account. This account is privileged and
the provider may cause a security violation if it does not correctly
impersonate user requests.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 4/11/2006
Time: 12:45:23 AM
User: NT AUTHORITY\SYSTEM
Computer: MACHINENAME
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI
namespace, root\RSOP, but did not specify the HostingModel property. This
provider will be run using the LocalSystem account. This account is
privileged and the provider may cause a security violation if it does not
correctly impersonate user requests. Ensure that provider has been reviewed
for security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 4/11/2006
Time: 12:45:23 AM
User: NT AUTHORITY\SYSTEM
Computer: MACHINENAME
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI
namespace, root\RSOP, but did not specify the HostingModel property. This
provider will be run using the LocalSystem account. This account is
privileged and the provider may cause a security violation if it does not
correctly impersonate user requests. Ensure that provider has been reviewed
for security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 8193
Date: 4/11/2006
Time: 12:45:25 AM
User: N/A
Computer: MACHINENAME
Description:
Volume Shadow Copy Service error: Unexpected error calling routine
CoCreateInstance. hr = 0x80040154.
Data:
0000: 45 56 54 45 56 54 43 43 EVTEVTCC
0008: 31 31 37 00 00 00 00 00 117.....
0010: 45 56 54 45 56 54 43 43 EVTEVTCC
0018: 31 30 31 00 00 00 00 00 101.....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 4097
Date: 4/11/2006
Time: 12:45:25 AM
User: N/A
Computer: MACHINENAME
Description:
Volume Shadow Copy Service error: The COM+ Admin catalog instance cannot be
created [0x80040154].
Data:
0000: 43 41 44 43 41 44 4d 43 CADCADMC
0008: 31 33 34 00 00 00 00 00 134.....
0010: 43 41 44 43 41 44 4d 43 CADCADMC
0018: 31 31 37 00 00 00 00 00 117.....
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1041
Date: 4/11/2006
Time: 12:47:52 AM
User: NT AUTHORITY\SYSTEM
Computer: OEM-EZM3P4DIA0A
Description:
The description for Event ID ( 1041 ) in Source ( Userenv ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event:
{c6dc5466-785a-11d2-84d0-00c04fb169f7}.
Event Type: Error
Event Source: Windows Product Activation
Event Category: None
Event ID: 1010
Date: 4/11/2006
Time: 12:47:53 AM
User: N/A
Computer: OEM-EZM3P4DIA0A
Description:
The description for Event ID ( 1010 ) in Source ( Windows Product
Activation ) cannot be found. The local computer may not have the necessary
registry information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following information is
part of the event: The event log file is corrupt..
Event Type: Warning
Event Source: MSMQ
Event Category: Kernel
Event ID: 2024
Date: 4/11/2006
Time: 12:48:02 AM
User: N/A
Computer: OEM-EZM3P4DIA0A
Description:
Message Queuing performance counter data are not available because the
performance counter module failed to initialize. Please run 'lodctr.exe
mqperf.ini' from the command console and restart the service, or contact
Microsoft support.
1)System
Event Type: Error
Event Source: Serial
Event Category: None
Event ID: 18
Date: 4/11/2006
Time: 12:40:20 AM
User: N/A
Computer: MACHINENAME
Description:
No Parameters subkey was found for user defined data. This is odd, and it
also means no user configuration can be found.
Data:
0000: 00 00 00 00 01 00 56 00 ......V.
0008: 00 00 00 00 12 00 06 c0 .......?
0010: 53 00 00 00 00 00 00 00 S.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: Workstation
Event Category: None
Event ID: 5728
Date: 4/11/2006
Time: 12:43:41 AM
User: N/A
Computer: MACHINENAME
Description:
Could not load any transport.
Event Type: Information
Event Source: MrxSmb
Event Category: None
Event ID: 8029
Date: 4/11/2006
Time: 12:43:41 AM
User: N/A
Computer: MACHINENAME
Description:
The browser driver was unable to initialize variables from the Registry.
Data:
0000: 00 00 00 00 01 00 5a 00 ......Z.
0008: 00 00 00 00 5d 1f 00 40 ....]..@
0010: 00 00 00 00 34 00 00 c0 ....4..?
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
2)Application
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6009
Date: 4/11/2006
Time: 12:40:30 AM
User: N/A
Computer: MACHINENAME
Description:
The description for Event ID ( 6009 ) in Source ( EventLog ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: 5.01.,
2600, Service Pack 2, Uniprocessor Free.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 4/11/2006
Time: 12:44:41 AM
User: NT AUTHORITY\SYSTEM
Computer: MACHINENAME
Description:
A provider, HiPerfCooker_v1, has been registered in the WMI namespace,
Root\WMI, to use the LocalSystem account. This account is privileged and
the provider may cause a security violation if it does not correctly
impersonate user requests.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 4/11/2006
Time: 12:45:23 AM
User: NT AUTHORITY\SYSTEM
Computer: MACHINENAME
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI
namespace, root\RSOP, but did not specify the HostingModel property. This
provider will be run using the LocalSystem account. This account is
privileged and the provider may cause a security violation if it does not
correctly impersonate user requests. Ensure that provider has been reviewed
for security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 4/11/2006
Time: 12:45:23 AM
User: NT AUTHORITY\SYSTEM
Computer: MACHINENAME
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI
namespace, root\RSOP, but did not specify the HostingModel property. This
provider will be run using the LocalSystem account. This account is
privileged and the provider may cause a security violation if it does not
correctly impersonate user requests. Ensure that provider has been reviewed
for security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 8193
Date: 4/11/2006
Time: 12:45:25 AM
User: N/A
Computer: MACHINENAME
Description:
Volume Shadow Copy Service error: Unexpected error calling routine
CoCreateInstance. hr = 0x80040154.
Data:
0000: 45 56 54 45 56 54 43 43 EVTEVTCC
0008: 31 31 37 00 00 00 00 00 117.....
0010: 45 56 54 45 56 54 43 43 EVTEVTCC
0018: 31 30 31 00 00 00 00 00 101.....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 4097
Date: 4/11/2006
Time: 12:45:25 AM
User: N/A
Computer: MACHINENAME
Description:
Volume Shadow Copy Service error: The COM+ Admin catalog instance cannot be
created [0x80040154].
Data:
0000: 43 41 44 43 41 44 4d 43 CADCADMC
0008: 31 33 34 00 00 00 00 00 134.....
0010: 43 41 44 43 41 44 4d 43 CADCADMC
0018: 31 31 37 00 00 00 00 00 117.....
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1041
Date: 4/11/2006
Time: 12:47:52 AM
User: NT AUTHORITY\SYSTEM
Computer: OEM-EZM3P4DIA0A
Description:
The description for Event ID ( 1041 ) in Source ( Userenv ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event:
{c6dc5466-785a-11d2-84d0-00c04fb169f7}.
Event Type: Error
Event Source: Windows Product Activation
Event Category: None
Event ID: 1010
Date: 4/11/2006
Time: 12:47:53 AM
User: N/A
Computer: OEM-EZM3P4DIA0A
Description:
The description for Event ID ( 1010 ) in Source ( Windows Product
Activation ) cannot be found. The local computer may not have the necessary
registry information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE= flag to retrieve this
description; see Help and Support for details. The following information is
part of the event: The event log file is corrupt..
Event Type: Warning
Event Source: MSMQ
Event Category: Kernel
Event ID: 2024
Date: 4/11/2006
Time: 12:48:02 AM
User: N/A
Computer: OEM-EZM3P4DIA0A
Description:
Message Queuing performance counter data are not available because the
performance counter module failed to initialize. Please run 'lodctr.exe
mqperf.ini' from the command console and restart the service, or contact
Microsoft support.