The last couple System errors look like:
1.
User: NT AUTHORITY\SYSTEM
Computer: COMPAQ
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to
start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
2.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 7/26/2008
Time: 11:18:18 AM
User: COMPAQ\Lorraine Kain
Computer: COMPAQ
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to
start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
And the last few from the application error log look like:
1.
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 7/26/2008
Time: 12:16:40 PM
User: N/A
Computer: COMPAQ
Description:
Failed auto update retrieval of third-party root list sequence number from:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The specified server cannot perform the requested operation.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
2.
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 11
Date: 7/26/2008
Time: 12:16:40 PM
User: N/A
Computer: COMPAQ
Description:
Failed extract of third-party root list from auto update cab at:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: Access is denied.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
3.
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 7/26/2008
Time: 12:16:40 PM
User: N/A
Computer: COMPAQ
Description:
Failed auto update retrieval of third-party root list sequence number from:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
4.
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 11
Date: 7/26/2008
Time: 12:16:25 PM
User: N/A
Computer: COMPAQ
Description:
Failed extract of third-party root list from auto update cab at:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: Access is denied.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
5.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/26/2008
Time: 11:15:46 AM
User: NT AUTHORITY\SYSTEM
Computer: COMPAQ
Description:
Windows saved user COMPAQ\Administrator registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.
This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
