APPLICATION
1.
Event Type: Error
Event Source: comHost
Event Category: None
Event ID: 65535
Date: 1/19/2008
Time: 1:03:10 PM
User: N/A
Computer: SCOTT123
Description:
The description for Event ID ( 65535 ) in Source ( comHost ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be able
to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: Cannot
get Components key from ccSettings Manager.Is it really there? Error code:
0x80000205.
2.
Event Type: Error
Event Source: Microsoft Office 12
Event Category: None
Event ID: 1000
Date: 1/9/2008
Time: 12:07:43 PM
User: N/A
Computer: SCOTT123
Description:
Faulting application winword.exe, version 12.0.6211.1000, stamp 46d4a7df,
faulting module kernel32.dll, version 5.1.2600.3119, stamp 46239bd5, debug?
0, fault address 0x00012a5b.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 77 00 69 00 6e 00 .w.i.n.
0030: 77 00 6f 00 72 00 64 00 w.o.r.d.
0038: 2e 00 65 00 78 00 65 00 ..e.x.e.
0040: 20 00 31 00 32 00 2e 00 .1.2...
0048: 30 00 2e 00 36 00 32 00 0...6.2.
0050: 31 00 31 00 2e 00 31 00 1.1...1.
0058: 30 00 30 00 30 00 20 00 0.0.0. .
0060: 34 00 36 00 64 00 34 00 4.6.d.4.
0068: 61 00 37 00 64 00 66 00 a.7.d.f.
0070: 20 00 69 00 6e 00 20 00 .i.n. .
0078: 6b 00 65 00 72 00 6e 00 k.e.r.n.
0080: 65 00 6c 00 33 00 32 00 e.l.3.2.
0088: 2e 00 64 00 6c 00 6c 00 ..d.l.l.
0090: 20 00 35 00 2e 00 31 00 .5...1.
0098: 2e 00 32 00 36 00 30 00 ..2.6.0.
00a0: 30 00 2e 00 33 00 31 00 0...3.1.
00a8: 31 00 39 00 20 00 34 00 1.9. .4.
00b0: 36 00 32 00 33 00 39 00 6.2.3.9.
00b8: 62 00 64 00 35 00 20 00 b.d.5. .
00c0: 66 00 44 00 65 00 62 00 f.D.e.b.
00c8: 75 00 67 00 20 00 30 00 u.g. .0.
00d0: 20 00 61 00 74 00 20 00 .a.t. .
00d8: 6f 00 66 00 66 00 73 00 o.f.f.s.
00e0: 65 00 74 00 20 00 30 00 e.t. .0.
00e8: 30 00 30 00 31 00 32 00 0.0.1.2.
00f0: 61 00 35 00 62 00 0d 00 a.5.b...
00f8: 0a 00 ..
3.
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 12/22/2007
Time: 10:22:56 AM
User: N/A
Computer: SCOTT123
Description:
Failed auto update retrieval of third-party root list sequence number from:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
SECURITY (FAILURE AUDIT)
1.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 1/20/2008
Time: 12:50:59 PM
User: NT AUTHORITY\SYSTEM
Computer: SCOTT123
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: j scott
Domain: SCOTT123
Logon Type: 2
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: SCOTT123
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
2.
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 1/20/2008
Time: 12:50:59 PM
User: NT AUTHORITY\SYSTEM
Computer: SCOTT123
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: j scott
Source Workstation: SCOTT123
Error Code: 0xC000006A
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
SYSTEM
1.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 1/20/2008
Time: 12:54:22 PM
User: N/A
Computer: SCOTT123
Description:
The PCAMPR5 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
2.
Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 1/20/2008
Time: 12:50:17 PM
User: N/A
Computer: SCOTT123
Description:
The System Restore filter encountered the unexpected error '0xC0000034'
while processing the file '_filelst.cfg' on the volume 'HarddiskVolume2'. It
has stopped monitoring the volume.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0e 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
3.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 1/19/2008
Time: 1:16:25 PM
User: N/A
Computer: SCOTT123
Description:
The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
4.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 1/19/2008
Time: 1:15:59 PM
User: N/A
Computer: SCOTT123
Description:
Timeout (30000 milliseconds) waiting for the LiveUpdate service to connect.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
5.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/19/2008
Time: 1:15:46 PM
User: NT AUTHORITY\SYSTEM
Computer: SCOTT123
Description:
DCOM got error "The service did not respond to the start or control request
in a timely fashion. " attempting to start the service LiveUpdate with
arguments "" in order to run the server:
{0D4C11A3-6BD0-11D3-B542-00902771A435}
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
6.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 1/19/2008
Time: 1:03:56 PM
User: N/A
Computer: SCOTT123
Description:
The COM Host service terminated with the following error:
Catastrophic failure
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
7.
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/15/2008
Time: 7:16:05 PM
User: SCOTT123\j scott
Computer: SCOTT123
Description:
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM
within the required timeout.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
8.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 1/9/2008
Time: 12:07:17 PM
User: N/A
Computer: SCOTT123
Description:
The Print Spooler service terminated unexpectedly. It has done this 1
time(s). The following corrective action will be taken in 60000
milliseconds: Restart the service.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
9.
Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1001
Date: 1/6/2008
Time: 12:17:16 PM
User: N/A
Computer: SCOTT123
Description:
Your computer was not assigned an address from the network (by the DHCP
Server) for the Network Card with network address 0004E27C4906. The
following error occurred:
The operation was canceled by the user. . Your computer will continue to try
and obtain an address on its own from the network address (DHCP) server.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c7 04 00 00 Ç...
10.
Event Type: Error
Event Source: Application Popup
Event Category: None
Event ID: 877
Date: 1/5/2008
Time: 9:46:00 AM
User: N/A
Computer: SCOTT123
Description:
There was error [DATABASE OPEN FAILED] processing the driver database.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 64 00 ......d.
0008: 00 00 00 00 6d 03 00 c0 ....m..À
0010: 00 00 00 00 6d 03 00 c0 ....m..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
11.
Event Type: Error
Event Source: Dhcp
Event Category: None
Event ID: 1002
Date: 12/27/2007
Time: 3:30:50 PM
User: N/A
Computer: SCOTT123
Description:
The IP address lease 64.195.65.187 for the Network Card with network address
0007E95E0E3F has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
12.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 12/26/2007
Time: 11:40:14 AM
User: N/A
Computer: SCOTT123
Description:
The following boot-start or system-start driver(s) failed to load:
SYMTDI
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
..
--
JSS
nass said:
Please copy & paste the error messages to a notepad as Highlighted in my
previous post and paste them in your next post.
Note: If the error reapeated don't copy it as one will suffice!.
For example:
<Quote from another post::>
Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 14/01/2008
Time: 18:29:05
User: N/A
Computer: JON
Description:
Fault bucket 504754043.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 35 30 34 37 35 34 30 34 50475404
0010: 33 0d 0a 3..
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 04/01/2008
Time: 18:39:52
User: NT AUTHORITY\SYSTEM
Computer: JON
Description:
Windows saved user JON\Jonathan registry while an application or service was
still using the registry during log off. The memory used by the user's
registry has not been freed. The registry will be unloaded when it is no
longer in use.
</Quote from another post::>
HTH
Scott said:
I've got a list of errors going back a few months.
I printed out the boot procedurers.
What do I do with them?
--
JSS
nass said:
:
xp home - on startup i get this "The system could not log you on....." with
a username and filled out password (black dots) in the background. I then
kill the message and get a screen with my username symbol, click it, and
thigns then go normal. What can I do to get rid of the error message.
Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us
Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.
How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us
HTH.
nass
