windows only starts in safe mode

[azevon]

Greetings All,

User was working on PC (WinXPSP2) all day yesterday, no issues (or so he
says), shuts down with no errors. Turns on PC this morning, boots up, logs
into network (using Novell client32), login window successfully disappears
(so he's into the network), wallpaper appears, but doesn't get passed that.
No desktop icons.

I've tried: removing Novell client, removing all SpyWare, nothing. I CAN
however, boot up into Safe Mode (with or without networking). I can bring up
task manager and run any app I want. For example, I just launched Excel and
accessed a Netware file. So something is preventing the desktop from fully
loading. Anything I can look at in Task manager that would be a clue?

Thanks in advance,

-andy-

 

[nass]

This looks like a hardware issue, did you tried System restore to an earlier
date?, did you checked it isn't a video card problem?.

Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us
HTH.
nass

 

[Paradoxdb3]

I had this problem (or similar anyway) when I had an SD card in the card
reader while XP loaded. It took an aweful long time to load. I think I also
encountered a similar problem when I deleted an account that "control
userpasswords2" was trying to remember the password for. There were times
that the desktop icons took 25 minutes to show!

 

[azevon]

Naas - can't do a restore as the user made no valid restore points. Video
card seems fine. Here is the only RED X alert besides those concerning apps
not being to run in Safe Mode:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 1/28/2008
Time: 7:21:20 AM
User: N/A
Computer: HSTEINHPCOMPAQ
Description:
The following boot-start or system-start driver(s) failed to load:
Cinemsup
Fips
intelppm

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

This looks like a hardware issue, did you tried System restore to an earlier
date?, did you checked it isn't a video card problem?.

Open a Notepad, customize or minimize to the taskbar as you will need it
later for this step to copy the error message on it.
Open a run command and type in:
eventvwr.msc click [OK] you will get the Event viewer control Panel.
click on each of these:
Application
System
Security
Look in the right Pane/window for error message with red (X) or Yellow
exclamation mark /!\ , double click each one to get more info about the
causer.
On the Event error properties message you will see:
Up Arrow
Down arrow
Two pages
Click on the two pages to copy the error message then bring up the Notepad
you opened earlier and right click on the first line and select Paste from
the list, this will paste the error message on a Notepad.
Please don't duplicate the error message one of each kind will be sufficient.
HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Please we need just the error messages with Red (X) and don't repeat the
error, just one of each kind and post them back in your next post.

How to perform a clean boot in Windows XP
http://support.microsoft.com/?id=310353
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/kb/315222/en-us
HTH.
nass
----
http://www.nasstec.co.uk

Greetings All,

User was working on PC (WinXPSP2) all day yesterday, no issues (or so he
says), shuts down with no errors. Turns on PC this morning, boots up, logs
into network (using Novell client32), login window successfully disappears
(so he's into the network), wallpaper appears, but doesn't get passed that.
No desktop icons.

I've tried: removing Novell client, removing all SpyWare, nothing. I CAN
however, boot up into Safe Mode (with or without networking). I can bring up
task manager and run any app I want. For example, I just launched Excel and
accessed a Netware file. So something is preventing the desktop from fully
loading. Anything I can look at in Task manager that would be a clue?

Thanks in advance,

-andy-

 

[Bill5678]

My pc will start in safe mode only. When I try to start in normal pc will
boot up I can see desktop icons then after about 1.5 minutes pc will shut
down then cycle back on.

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1008
Date: 2/24/2008
Time: 3:04:02 PM
User: YOUR-F3C642DE4A\Administrator
Computer: YOUR-F3C642DE4A
Description:
The installation of
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\msrdpcli.msi is not permitted
due to an error in software restriction policy processing. The object cannot
be trusted.

Event type: Error
Event Source: Media Center Scheduler
Event Category: None
Event ID: 0
Date: 2/14/2008
Time: 5:30:42 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The description for Event ID ( 0 ) in Source ( Media Center Scheduler )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote computer.
You may be able to use the /AUXSOURCE= flag to retrieve this description; see
Help and Support for details. The following information is part of the event:
The recordings store has been determined to be corrupt, and was
unrecoverable. It has been copied to a backup file..
Object Name: Media Center Guide
Event Type: Error
Event Source: Media Center Guide
Event Category: None
Event ID: 82
Date: 2/12/2008
Time: 8:33:07 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The description for Event ID ( 82 ) in Source ( Media Center Guide ) cannot
be found. The local computer may not have the necessary registry information
or message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: Event
Info: Exception opening connection to database.
Program Guide info not available. Data may be corrupt. Media Center could
not load the Guide. Please restart the computer and try again. If the problem
persists, see Help for more information.
Process: DefaultDomain
Object Name: Microsoft.Ehome.Epg.Database.GuideDbConnection
..
Data:
0000: 25 a8 16 5f 50 61 91 53 %¨._Pa‘S
0008: d6 6e a5 a5 ed 4f 52 45 Ön¥¥íORE
0010: 0b ca 24 82 63 60 1c 83 .Ê$‚c`.ƒ
0018: 2f 2d c9 cb de e1 91 68 /-ÉËÞá‘h
0020: 15 57 39 a0 f4 47 24 47 .W9 ôG$G
0028: ad ed 18 be 9f f5 07 c6 ­í.¾Ÿõ.Æ
0030: d2 c2 68 07 6d fa 29 8f ÒÂh.mú)Â
0038: 5e a9 34 a7 61 ce 41 f6 ^©4§aÎAö
0040: ec 2d 43 2a 6e 82 ce 16 ì-C*n‚Î.
0048: d4 63 6f bf 89 3a 4a 95 Ôco¿‰:J•
0050: 51 44 8b 2c f5 c1 3f f0 QD‹,õ�ð
0058: 00 6b 3c 77 7c e3 74 13 .k<w|ãt.
0060: ff fd 2a 1d f5 74 f5 6d ÿý*.õtõm
0068: e6 2c 17 93 f1 6a 12 42 æ,.“ñj.B
0070: d9 15 39 b5 52 7b 15 0a Ù.9µR{..
0078: 90 1f 2e 7e 36 74 30 c1 Â..~6t0Ã
0080: 91 a0 a2 01 43 ce 7d 8e ‘ ¢.CÎ}Ž
0088: bb 26 dc 60 dd a9 20 3b »&Ãœ`é ;
0090: 7f 54 84 2c 86 13 a0 fd T„,†. ý
0098: 7d 90 76 98 4f 2d ac 15 }Âv˜O-¬.
00a0: 60 d3 88 14 e3 5c 5c 07 `ӈ.ã\\.
00a8: ac 9f 71 ed d6 fd 74 d6 ¬ŸqíÖýtÖ
00b0: a1 a0 a0 8b 19 6d 94 db ¡ ‹.m”Û
00b8: bc 50 87 ba 8c 4d 86 c3 ¼P‡ºŒM†Ã
00c0: 5a b9 65 ce 96 ea 55 f1 Z¹eΖêUñ
00c8: f4 d3 5f ee ef 82 11 04 ôÓ_îï‚..
00d0: d8 7b 6f 1a df 3e 35 94 Ø{o.ß>5”
00d8: 10 e9 94 9b 95 a7 06 a0 .锛•§.
00e0: 91 23 93 29 3a 3a 0b e4 ‘#“)::.ä
00e8: 26 ef 08 e1 ff e2 1d be &ï.áÿâ.¾
00f0: 42 7d a3 5e 1c 5a 24 44 B}£^.Z$D
00f8: f1 ff fb 47 f8 a1 87 d9 ñÿûGø¡‡Ù
0100: a0 7d 40 2e 2f e9 0b 55 }@./é.U
0108: a3 45 ed 25 be 6b 6a 53 £Eí%¾kjS
0110: 2b 30 9b d9 12 46 a1 5b +0›Ù.F¡[
0118: 38 a5 96 fc 52 a8 98 94 8¥–üR¨˜”
0120: c0 e1 45 12 c6 11 89 b3 ÀáE.Æ.‰³
0128: 68 9b df 51 b7 da 31 8c h›ßQ·Ú1Œ
0130: 86 e3 83 94 80 eb ad 6c †ãƒ”€ë­l
0138: aa ec 75 28 7f 01 99 62 ªìu(.™b
0140: 7c 4d b0 2a 9c b5 33 32 |M°*œµ32
0148: cb c3 17 77 2e 0e 75 6f ËÃ.w..uo
0150: 8c 5e d3 f5 00 89 bd 39 Œ^Óõ.‰½9
0158: 75 97 35 aa 16 c9 68 7a u—5ª.Éhz
0160: 1a fd 50 0b 53 78 bb 7f .ýP.Sx»
0168: 7c b8 fb 77 33 b9 7e 9f |¸ûw3¹~Ÿ
0170: 07 40 82 dc df b8 60 aa .@‚Ü߸`ª
0178: 2d e2 1e 50 7d d3 64 b4 -â.P}Ód´
0180: 1c 50 a7 f7 88 9d c0 52 .P§÷ˆÂÀR
0188: 28 74 b1 2e bc 9e c8 13 (t±.¼žÈ.
0190: fe 27 ab 32 a1 71 65 30 þ'«2¡qe0
0198: 4d dd 46 20 88 54 d1 50 MÃF ˆTÑP
01a0: 6d 8b 75 ff d9 3a 5a 7f m‹uÿÙ:Z
01a8: dd 22 7d dd 8e 44 02 a9 Ã"}ÃÂŽD.©
01b0: e2 a7 0c ad 2f 3a 28 7d â§.­/}
01b8: f1 e3 8c f0 93 0d bc 24 ñãŒð“.¼$
01c0: 14 7e 2a cb 32 d1 0f 5f .~*Ë2Ñ._
01c8: 26 65 a6 f4 ee 0e 60 ed &e¦ôî.`í
01d0: e2 64 cf bd 98 1f df 3f âdý˜.ß?
01d8: b9 19 05 d0 6e a1 0c c8 ¹..Ãn¡.È
01e0: aa 9d 91 ce 3e 1f e0 f8 ªÂ‘Î>.àø
01e8: b0 3a 97 74 12 72 fb 4c °:—t.rûL
01f0: d0 99 00 d5 b1 b4 fd 74 Ù.Õ±´ýt
01f8: 10 3f f1 05 5c b6 ab 62 .?ñ.\¶«b
0200: 0a 71 f4 b7 b0 a3 38 02 .qô·°£8.
0208: 99 a8 a8 20 32 fb 6c e1 ™¨¨ 2ûlá


Event Type: Error
Event Source: COM+
Event Category: Unknown
Event ID: 4689
Date: 2/12/2008
Time: 8:30:41 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The run-time environment has detected an inconsistency in its internal
state. This indicates a potential instability in the process that could be
caused by the custom components running in the COM+ application, the
components they make use of, or other factors. Error in
d:\qxp_slp\com\com1x\src\comsvcs\events\evregistrar.cpp(213), hr = 80040205:
Failed to CoCreate EventSystem object.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4618
Date: 2/12/2008
Time: 8:30:41 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The COM+ Event System raised an unexpected access violation at address
0x00000000, attempting to access address 0x00000000. Please contact
Microsoft Product Support Services to report this error.

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4618
Date: 2/12/2008
Time: 8:30:41 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The COM+ Event System raised an unexpected access violation at address
0x00000000, attempting to access address 0x00000000. Please contact
Microsoft Product Support Services to report this error.

Event Type: Information
Event Source: STacSV
Event Category: None
Event ID: 65535
Date: 2/12/2008
Time: 8:12:58 PM
User: YOUR-F3C642DE4A\Owner
Computer: YOUR-F3C642DE4A
Description:
The description for Event ID ( 65535 ) in Source ( STacSV ) cannot be found.
The local computer may not have the necessary registry information or message
DLL files to display messages from a remote computer. You may be able to use
the /AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: Service installed.

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1023
Date: 2/12/2008
Time: 6:42:12 PM
User: NT AUTHORITY\SYSTEM
Computer: YOUR-F3C642DE4A
Description:
Product: Microsoft .NET Framework 2.0 Service Pack 1 - Update '.NET
Framework PreXP' could not be installed. Error code 1603. Additional
information is available in the log file
C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0815.txt.

Data:
0000: 7b 42 35 30 38 42 33 46 {B508B3F
0008: 31 2d 41 32 34 41 2d 33 1-A24A-3
0010: 32 43 30 2d 42 33 31 30 2C0-B310
0018: 2d 38 35 37 38 36 39 31 -8578691
0020: 39 45 46 32 38 7d 20 7b 9EF28} {
0028: 31 32 35 46 30 41 43 43 125F0ACC
0030: 2d 44 33 46 43 2d 34 30 -D3FC-40
0038: 32 42 2d 38 44 39 36 2d 2B-8D96-
0040: 32 37 46 36 45 34 36 44 27F6E46D
0048: 30 30 44 35 7d 20 31 36 00D5} 16
0050: 30 33 03

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1023
Date: 2/12/2008
Time: 6:42:12 PM
User: NT AUTHORITY\SYSTEM
Computer: YOUR-F3C642DE4A
Description:
Product: Microsoft .NET Framework 2.0 Service Pack 1 - Update '.NET
Framework CLR' could not be installed. Error code 1603. Additional
information is available in the log file
C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0815.txt.

Data:
0000: 7b 42 35 30 38 42 33 46 {B508B3F
0008: 31 2d 41 32 34 41 2d 33 1-A24A-3
0010: 32 43 30 2d 42 33 31 30 2C0-B310
0018: 2d 38 35 37 38 36 39 31 -8578691
0020: 39 45 46 32 38 7d 20 7b 9EF28} {
0028: 34 35 44 36 38 46 30 38 45D68F08
0030: 2d 35 36 41 30 2d 34 34 -56A0-44
0038: 31 32 2d 42 42 30 46 2d 12-BB0F-
0040: 38 34 39 32 42 45 39 37 8492BE97
0048: 38 41 43 37 7d 20 31 36 8AC7} 16
0050: 30 33 03


Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1023
Date: 2/12/2008
Time: 6:42:12 PM
User: NT AUTHORITY\SYSTEM
Computer: YOUR-F3C642DE4A
Description:
Product: Microsoft .NET Framework 2.0 Service Pack 1 - Update '.NET
Framework 1' could not be installed. Error code 1603. Additional information
is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0815.txt.

Data:
0000: 7b 42 35 30 38 42 33 46 {B508B3F
0008: 31 2d 41 32 34 41 2d 33 1-A24A-3
0010: 32 43 30 2d 42 33 31 30 2C0-B310
0018: 2d 38 35 37 38 36 39 31 -8578691
0020: 39 45 46 32 38 7d 20 7b 9EF28} {
0028: 35 35 38 43 44 30 41 37 558CD0A7
0030: 2d 30 35 34 38 2d 34 32 -0548-42
0038: 32 30 2d 38 38 46 45 2d 20-88FE-
0040: 30 31 43 43 31 34 37 37 01CC1477
0048: 44 46 36 31 7d 20 31 36 DF61} 16
0050: 30 33 03


Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1023
Date: 2/12/2008
Time: 6:42:12 PM
User: NT AUTHORITY\SYSTEM
Computer: YOUR-F3C642DE4A
Description:
Product: Microsoft .NET Framework 2.0 Service Pack 1 - Update 'Dr. Watson'
could not be installed. Error code 1603. Additional information is available
in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup0815.txt.

Data:
0000: 7b 42 35 30 38 42 33 46 {B508B3F
0008: 31 2d 41 32 34 41 2d 33 1-A24A-3
0010: 32 43 30 2d 42 33 31 30 2C0-B310
0018: 2d 38 35 37 38 36 39 31 -8578691
0020: 39 45 46 32 38 7d 20 7b 9EF28} {
0028: 35 41 43 39 46 34 34 45 5AC9F44E
0030: 2d 30 36 43 37 2d 34 31 -06C7-41
0038: 45 33 2d 41 34 36 34 2d E3-A464-
0040: 33 37 31 37 37 41 42 39 37177AB9
0048: 31 30 35 44 7d 20 31 36 105D} 16
0050: 30 33 03


Event Type: Information
Event Source: ESENT
Event Category: Logging/Recovery
Event ID: 302
Date: 2/12/2008
Time: 3:17:23 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
MsnMsgr (3564) \\.\C:\Documents and Settings\Owner\Local
Settings\Application
Data\Microsoft\Messenger\[email protected]\SharingMetadata\Working\database_A68_972F_6897_1891\dfsr.db:
The database engine has successfully completed recovery steps.

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 2/12/2008
Time: 3:13:20 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
Hanging application firefox.exe, version 1.8.20071.12718, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 66 69 72 65 66 6f firefo
0018: 78 2e 65 78 65 20 31 2e x.exe 1.
0020: 38 2e 32 30 30 37 31 2e 8.20071.
0028: 31 32 37 31 38 20 69 6e 12718 in
0030: 20 68 75 6e 67 61 70 70 hungapp
0038: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 30 30 et 00000
0050: 30 30 30 000


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 2/12/2008
Time: 5:16:47 AM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
Fault bucket 24097034.

Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 34 30 39 37 30 33 34 24097034
0010: 0d 0a ..



Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 2/10/2008
Time: 11:59:19 AM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
Failed auto update retrieval of third-party root list sequence number from:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.

Data:
0000: 63 00 6c 00 72 00 32 00 c.l.r.2.
0008: 30 00 72 00 33 00 2c 00 0.r.3.,.
0010: 20 00 69 00 6e 00 66 00 .i.n.f.
0018: 6f 00 63 00 61 00 72 00 o.c.a.r.
0020: 64 00 2e 00 65 00 78 00 d...e.x.
0028: 65 00 2c 00 20 00 33 00 e.,. .3.
0030: 2e 00 30 00 2e 00 34 00 ..0...4.
0038: 35 00 30 00 36 00 2e 00 5.0.6...
0040: 33 00 30 00 2c 00 20 00 3.0.,. .
0048: 34 00 35 00 34 00 35 00 4.5.4.5.
0050: 61 00 33 00 35 00 37 00 a.3.5.7.
0058: 2c 00 20 00 69 00 6e 00 ,. .i.n.
0060: 66 00 6f 00 63 00 61 00 f.o.c.a.
0068: 72 00 64 00 2c 00 20 00 r.d.,. .
0070: 33 00 2e 00 30 00 2e 00 3...0...
0078: 30 00 2e 00 30 00 2c 00 0...0.,.
0080: 20 00 34 00 35 00 34 00 .4.5.4.
0088: 35 00 61 00 33 00 35 00 5.a.3.5.
0090: 37 00 2c 00 20 00 36 00 7.,. .6.
0098: 63 00 30 00 2c 00 20 00 c.0.,. .
00a0: 35 00 66 00 2c 00 20 00 5.f.,. .
00a8: 73 00 79 00 73 00 74 00 s.y.s.t.
00b0: 65 00 6d 00 2e 00 74 00 e.m...t.
00b8: 79 00 70 00 65 00 6c 00 y.p.e.l.
00c0: 6f 00 61 00 64 00 65 00 o.a.d.e.
00c8: 78 00 63 00 65 00 70 00 x.c.e.p.
00d0: 74 00 69 00 6f 00 6e 00 t.i.o.n.
00d8: 20 00 4e 00 49 00 4c 00 .N.I.L.
00e0: 0d 00 0a 00 ....


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 2/24/2008
Time: 3:51:00 PM
User: YOUR-F3C642DE4A\Administrator
Computer: YOUR-F3C642DE4A
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to
start the service netman with arguments "" in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 2/24/2008
Time: 2:22:51 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
Fips
intelppm
IPSec
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 2/24/2008
Time: 2:22:51 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The IPSEC Services service depends on the IPSEC driver service which failed
to start because of the following error:
A device attached to the system is not functioning.

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 21
Date: 2/16/2008
Time: 7:47:24 AM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The time service is configured to use one or more input providers, however,
none of the input providers are available. The time service has no source of
accurate time.

Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 4
Date: 2/16/2008
Time: 7:47:24 AM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The time provider 'NtpClient' failed to start due to the following error:
Catastrophic failure (0x8000FFFF)

Event Type: Error
Event Source: System Error
Event Category: (102)
Event ID: 1003
Date: 2/15/2008
Time: 7:20:56 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
Error code 1000008e, parameter1 c0000005, parameter2 f7308ff4, parameter3
f6df5ba8, parameter4 00000000.

Data:
0000: 53 79 73 74 65 6d 20 45 System E
0008: 72 72 6f 72 20 20 45 72 rror Er
0010: 72 6f 72 20 63 6f 64 65 ror code
0018: 20 31 30 30 30 30 30 38 1000008
0020: 65 20 20 50 61 72 61 6d e Param
0028: 65 74 65 72 73 20 63 30 eters c0
0030: 30 30 30 30 30 35 2c 20 000005,
0038: 66 37 33 30 38 66 66 34 f7308ff4
0040: 2c 20 66 36 64 66 35 62 , f6df5b
0048: 61 38 2c 20 30 30 30 30 a8, 0000
0050: 30 30 30 30 0000

Data:
0000: 79 00 00 00 y...


Event Type: Error
Event Source: Recording
Event Category: None
Event ID: 19
Date: 2/14/2008
Time: 5:30:41 PM
User: N/A
Computer: YOUR-F3C642DE4A
Description:
The description for Event ID ( 19 ) in Source ( Recording ) cannot be found.
The local computer may not have the necessary registry information or message
DLL files to display messages from a remote computer. You may be able to use
the /AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: The recording
schedule has been corrupted and was automatically deleted on 2/14/2008
5:30:41 PM. You may need to reschedule your recordings..
Data:
0000: 5f 00 43 00 3a 00 5c 00 _.C.:.\.
0008: 44 00 6f 00 63 00 75 00 D.o.c.u.
0010: 6d 00 65 00 6e 00 74 00 m.e.n.t.
0018: 73 00 20 00 61 00 6e 00 s. .a.n.
0020: 64 00 20 00 53 00 65 00 d. .S.e.
0028: 74 00 74 00 69 00 6e 00 t.t.i.n.
0030: 67 00 73 00 5c 00 41 00 g.s.\.A.
0038: 6c 00 6c 00 20 00 55 00 l.l. .U.
0040: 73 00 65 00 72 00 73 00 s.e.r.s.
0048: 5c 00 41 00 70 00 70 00 \.A.p.p.
0050: 6c 00 69 00 63 00 61 00 l.i.c.a.
0058: 74 00 69 00 6f 00 6e 00 t.i.o.n.
0060: 20 00 44 00 61 00 74 00 .D.a.t.
0068: 61 00 5c 00 4d 00 69 00 a.\.M.i.
0070: 63 00 72 00 6f 00 73 00 c.r.o.s.
0078: 6f 00 66 00 74 00 5c 00 o.f.t.\.
0080: 65 00 48 00 6f 00 6d 00 e.H.o.m.
0088: 65 00 5c 00 52 00 65 00 e.\.R.e.
0090: 63 00 6f 00 72 00 64 00 c.o.r.d.
0098: 69 00 6e 00 67 00 5c 00 i.n.g.\.
00a0: 52 00 65 00 63 00 6f 00 R.e.c.o.
00a8: 72 00 64 00 69 00 6e 00 r.d.i.n.
00b0: 67 00 73 00 2e 00 78 00 g.s...x.
00b8: 6d 00 6c 00 2e 00 30 00


Any help appreciated