API tools faq
paste
Phylum

Windows Update System Reboot

Phylum
Jun 28th, 2011
2,590
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 203.44 KB | None | 0 0
raw download clone embed print report
  1. ######################### WindowsUpdate.Log BEGIN ###########################
  2. 2011-06-29 06:49:37:113 924 474 AU Successfully wrote event for AU health state:0
  3. 2011-06-29 06:49:42:110 924 1734 Report CWERReporter finishing event handling. (00000000)
  4. 2011-06-29 06:49:45:850 924 474 Shutdwn user declined update at shutdown
  5. 2011-06-29 06:49:45:850 924 474 AU Successfully wrote event for AU health state:0
  6. 2011-06-29 06:49:45:850 924 474 AU AU initiates service shutdown
  7. 2011-06-29 06:49:45:850 924 474 AU ########### AU: Uninitializing Automatic Updates ###########
  8. 2011-06-29 06:49:45:990 924 474 Report CWERReporter finishing event handling. (00000000)
  9. 2011-06-29 06:49:46:037 924 474 Service *********
  10. 2011-06-29 06:49:46:037 924 474 Service ** END ** Service: Service exit [Exit code = 0x240001]
  11. 2011-06-29 06:49:46:037 924 474 Service *************
  12. 2011-06-29 07:14:24:268 932 1090 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  13. 2011-06-29 07:14:26:249 932 1090 Misc = Process: C:\Windows\system32\svchost.exe
  14. 2011-06-29 07:14:27:248 932 1090 Misc = Module: c:\windows\system32\wuaueng.dll
  15. 2011-06-29 07:14:24:268 932 1090 Service *************
  16. 2011-06-29 07:14:28:355 932 1090 Service ** START ** Service: Service startup
  17. 2011-06-29 07:14:29:276 932 1090 Service *********
  18. 2011-06-29 07:14:43:340 932 1090 Agent * WU client version 7.5.7601.17514
  19. 2011-06-29 07:14:43:340 932 1090 Agent * Base directory: C:\Windows\SoftwareDistribution
  20. 2011-06-29 07:14:43:340 932 1090 Agent * Access type: No proxy
  21. 2011-06-29 07:14:43:340 932 1090 Agent * Network state: Connected
  22. 2011-06-29 07:15:43:124 932 1090 Report CWERReporter::Init succeeded
  23. 2011-06-29 07:15:43:124 932 1090 Agent *********** Agent: Initializing Windows Update Agent ***********
  24. 2011-06-29 07:15:43:124 932 1090 Agent *********** Agent: Initializing global settings cache ***********
  25. 2011-06-29 07:15:43:124 932 1090 Agent * WSUS server: http://ourwsusserver
  26. 2011-06-29 07:15:43:124 932 1090 Agent * WSUS status server: http://ourwsusserver
  27. 2011-06-29 07:15:43:124 932 1090 Agent * Target group: IT
  28. 2011-06-29 07:15:43:124 932 1090 Agent * Windows Update access disabled: No
  29. 2011-06-29 07:15:43:159 932 1090 Agent * Found 1 persisted download calls to restore
  30. 2011-06-29 07:15:43:186 932 1090 DnldMgr Download manager restoring 0 downloads
  31. 2011-06-29 07:15:43:186 932 1090 Agent * Successfully loaded 1 persisted download calls.
  32. 2011-06-29 07:15:43:200 932 1090 AU ########### AU: Initializing Automatic Updates ###########
  33. 2011-06-29 07:15:43:201 932 1090 AU # WSUS server: http://ourwsusserver
  34. 2011-06-29 07:15:43:201 932 1090 AU # Detection frequency: 22
  35. 2011-06-29 07:15:43:201 932 1090 AU # Target group: IT
  36. 2011-06-29 07:15:43:201 932 1090 AU # Approval type: Scheduled (Policy)
  37. 2011-06-29 07:15:43:201 932 1090 AU # Scheduled install day/time: Every day at 12:00
  38. 2011-06-29 07:15:43:201 932 1090 AU # Auto-install minor updates: Yes (Policy)
  39. 2011-06-29 07:15:43:250 932 1090 AU Setting AU scheduled install time to 2011-06-29 16:00:00
  40. 2011-06-29 07:15:43:611 932 1090 Report *********** Report: Initializing static reporting data ***********
  41. 2011-06-29 07:15:43:612 932 1090 Report * OS Version = 6.1.7601.1.0.65792
  42. 2011-06-29 07:15:43:612 932 1090 Report * OS Product Type = 0x00000004
  43. 2011-06-29 07:15:43:625 932 1090 Report * Computer Brand = Dell Inc.
  44. 2011-06-29 07:15:43:625 932 1090 Report * Computer Model = Latitude E6400
  45. 2011-06-29 07:15:43:628 932 1090 Report * Bios Revision = A26
  46. 2011-06-29 07:15:43:628 932 1090 Report * Bios Name = Phoenix ROM BIOS PLUS Version 1.10 A26
  47. 2011-06-29 07:15:43:628 932 1090 Report * Bios Release Date = 2010-07-30T00:00:00
  48. 2011-06-29 07:15:43:628 932 1090 Report * Locale ID = 1033
  49. 2011-06-29 07:15:43:699 932 1090 AU Successfully wrote event for AU health state:0
  50. 2011-06-29 07:15:43:699 932 1090 AU Initializing featured updates
  51. 2011-06-29 07:15:43:699 932 1090 AU Found 0 cached featured updates
  52. 2011-06-29 07:15:43:699 932 1090 AU Successfully wrote event for AU health state:0
  53. 2011-06-29 07:15:43:700 932 1090 AU Successfully wrote event for AU health state:0
  54. 2011-06-29 07:15:43:700 932 1090 AU AU finished delayed initialization
  55. 2011-06-29 07:15:43:701 932 1090 AU #############
  56. 2011-06-29 07:15:43:701 932 1090 AU ## START ## AU: Search for updates
  57. 2011-06-29 07:15:43:701 932 1090 AU #########
  58. 2011-06-29 07:15:43:860 932 1090 AU <<## SUBMITTED ## AU: Search for updates [CallId = {9E40D367-5BE6-4F14-B10A-75ADD25BCA74}]
  59. 2011-06-29 07:15:43:983 932 8f4 Agent *************
  60. 2011-06-29 07:15:43:983 932 8f4 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  61. 2011-06-29 07:15:43:983 932 8f4 Agent *********
  62. 2011-06-29 07:15:43:983 932 8f4 Agent * Online = No; Ignore download priority = No
  63. 2011-06-29 07:15:43:983 932 8f4 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  64. 2011-06-29 07:15:43:983 932 8f4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  65. 2011-06-29 07:15:43:983 932 8f4 Agent * Search Scope = {Machine}
  66. 2011-06-29 07:15:45:903 932 8f4 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1598 deployed entities
  67. 2011-06-29 07:15:45:919 932 8f4 Agent *********
  68. 2011-06-29 07:15:45:919 932 8f4 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  69. 2011-06-29 07:15:45:919 932 8f4 Agent *************
  70. 2011-06-29 07:15:45:934 932 15e8 AU >>## RESUMED ## AU: Search for updates [CallId = {9E40D367-5BE6-4F14-B10A-75ADD25BCA74}]
  71. 2011-06-29 07:15:45:934 932 15e8 AU # 0 updates detected
  72. 2011-06-29 07:15:45:934 932 15e8 AU #########
  73. 2011-06-29 07:15:45:934 932 15e8 AU ## END ## AU: Search for updates [CallId = {9E40D367-5BE6-4F14-B10A-75ADD25BCA74}]
  74. 2011-06-29 07:15:45:934 932 15e8 AU #############
  75. 2011-06-29 07:15:45:934 932 15e8 AU Featured notifications is disabled.
  76. 2011-06-29 07:15:45:934 932 15e8 AU Setting AU scheduled install time to 2011-06-29 16:00:00
  77. 2011-06-29 07:15:45:934 932 15e8 AU Successfully wrote event for AU health state:0
  78. 2011-06-29 07:15:45:935 932 15e8 AU Successfully wrote event for AU health state:0
  79. 2011-06-29 07:15:48:721 932 8f4 Report REPORT EVENT: {9AA0DCDF-6BDE-43E0-B1AB-C8454A3D07D6} 2011-06-29 07:15:43:700-0400 1 202 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Content Install Reboot completed.
  80. 2011-06-29 07:15:48:765 932 8f4 Report CWERReporter finishing event handling. (00000000)
  81. 2011-06-29 07:21:48:000 932 1090 AU #############
  82. 2011-06-29 07:21:48:000 932 1090 AU ## START ## AU: Search for updates
  83. 2011-06-29 07:21:48:000 932 1090 AU #########
  84. 2011-06-29 07:21:48:004 932 1090 AU <<## SUBMITTED ## AU: Search for updates [CallId = {677A77F6-65CA-43A3-9B87-B62D14017C0F}]
  85. 2011-06-29 07:21:48:004 932 8f4 Agent *************
  86. 2011-06-29 07:21:48:004 932 8f4 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  87. 2011-06-29 07:21:48:004 932 8f4 Agent *********
  88. 2011-06-29 07:21:48:004 932 8f4 Agent * Online = Yes; Ignore download priority = No
  89. 2011-06-29 07:21:48:004 932 8f4 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  90. 2011-06-29 07:21:48:004 932 8f4 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  91. 2011-06-29 07:21:48:004 932 8f4 Agent * Search Scope = {Machine}
  92. 2011-06-29 07:21:48:050 932 8f4 Setup Checking for agent SelfUpdate
  93. 2011-06-29 07:21:48:050 932 8f4 Setup Client version: Core: 7.5.7601.17514 Aux: 7.5.7601.17514
  94. 2011-06-29 07:21:48:050 932 8f4 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
  95. 2011-06-29 07:21:48:088 932 8f4 Misc Microsoft signed: Yes
  96. 2011-06-29 07:22:04:140 932 8f4 Misc WARNING: Send failed with hr = 80072ee7.
  97. 2011-06-29 07:22:04:141 932 8f4 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  98. 2011-06-29 07:22:04:141 932 8f4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ourwsusserver/selfupdate/wuident.cab>. error 0x8024402c
  99. 2011-06-29 07:22:04:141 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
  100. 2011-06-29 07:22:04:141 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
  101. 2011-06-29 07:22:04:141 932 8f4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
  102. 2011-06-29 07:22:08:663 932 8f4 Misc WARNING: Send failed with hr = 80072ee7.
  103. 2011-06-29 07:22:08:663 932 8f4 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  104. 2011-06-29 07:22:08:663 932 8f4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ourwsusserver/selfupdate/wuident.cab>. error 0x8024402c
  105. 2011-06-29 07:22:08:663 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
  106. 2011-06-29 07:22:08:663 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
  107. 2011-06-29 07:22:08:664 932 8f4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
  108. 2011-06-29 07:22:13:180 932 8f4 Misc WARNING: Send failed with hr = 80072ee7.
  109. 2011-06-29 07:22:13:180 932 8f4 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  110. 2011-06-29 07:22:13:180 932 8f4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ourwsusserver/selfupdate/wuident.cab>. error 0x8024402c
  111. 2011-06-29 07:22:13:180 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
  112. 2011-06-29 07:22:13:180 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
  113. 2011-06-29 07:22:13:180 932 8f4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
  114. 2011-06-29 07:22:17:696 932 8f4 Misc WARNING: Send failed with hr = 80072ee7.
  115. 2011-06-29 07:22:17:696 932 8f4 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  116. 2011-06-29 07:22:17:696 932 8f4 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://ourwsusserver/selfupdate/wuident.cab>. error 0x8024402c
  117. 2011-06-29 07:22:17:696 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
  118. 2011-06-29 07:22:17:696 932 8f4 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
  119. 2011-06-29 07:22:17:696 932 8f4 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
  120. 2011-06-29 07:22:17:697 932 8f4 Misc WARNING: DownloadFileInternal failed for http://ourwsusserver/selfupdate/wuident.cab: error 0x8024402c
  121. 2011-06-29 07:22:17:697 932 8f4 Setup WARNING: SelfUpdate check failed to download package information, error = 0x8024402C
  122. 2011-06-29 07:22:17:697 932 8f4 Setup FATAL: SelfUpdate check failed, err = 0x8024402C
  123. 2011-06-29 07:22:17:697 932 8f4 Agent * WARNING: Skipping scan, self-update check returned 0x8024402C
  124. 2011-06-29 07:22:17:705 932 8f4 Agent * WARNING: Exit code = 0x8024402C
  125. 2011-06-29 07:22:17:705 932 8f4 Agent *********
  126. 2011-06-29 07:22:17:705 932 8f4 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  127. 2011-06-29 07:22:17:705 932 8f4 Agent *************
  128. 2011-06-29 07:22:17:705 932 8f4 Agent WARNING: WU client failed Searching for update with error 0x8024402c
  129. 2011-06-29 07:22:17:705 932 15e8 AU >>## RESUMED ## AU: Search for updates [CallId = {677A77F6-65CA-43A3-9B87-B62D14017C0F}]
  130. 2011-06-29 07:22:17:705 932 15e8 AU # WARNING: Search callback failed, result = 0x8024402C
  131. 2011-06-29 07:22:17:705 932 15e8 AU # WARNING: Failed to find updates with error code 8024402C
  132. 2011-06-29 07:22:17:705 932 15e8 AU #########
  133. 2011-06-29 07:22:17:705 932 15e8 AU ## END ## AU: Search for updates [CallId = {677A77F6-65CA-43A3-9B87-B62D14017C0F}]
  134. 2011-06-29 07:22:17:705 932 15e8 AU #############
  135. 2011-06-29 07:22:17:706 932 15e8 AU Successfully wrote event for AU health state:0
  136. 2011-06-29 07:22:17:706 932 15e8 AU AU setting next detection timeout to 2011-06-29 16:22:17
  137. 2011-06-29 07:22:17:706 932 15e8 AU Setting AU scheduled install time to 2011-06-29 16:00:00
  138. 2011-06-29 07:22:17:707 932 15e8 AU Successfully wrote event for AU health state:0
  139. 2011-06-29 07:22:17:707 932 15e8 AU Successfully wrote event for AU health state:0
  140. 2011-06-29 07:22:22:707 932 8f4 Report CWERReporter finishing event handling. (00000000)
  141. 2011-06-29 07:24:32:222 932 8f4 PT WARNING: Cached cookie has expired or new PID is available
  142. 2011-06-29 07:24:32:223 932 8f4 PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  143. 2011-06-29 07:24:32:223 932 8f4 PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  144. 2011-06-29 07:24:47:747 932 8f4 Misc WARNING: Send failed with hr = 80072ee7.
  145. 2011-06-29 07:24:47:747 932 8f4 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  146. 2011-06-29 07:24:47:747 932 8f4 PT + Last proxy send request failed with hr = 0x80072EE7, HTTP status code = 0
  147. 2011-06-29 07:24:47:747 932 8f4 PT + Caller provided credentials = No
  148. 2011-06-29 07:24:47:747 932 8f4 PT + Impersonate flags = 0
  149. 2011-06-29 07:24:47:748 932 8f4 PT + Possible authorization schemes used =
  150. 2011-06-29 07:24:47:748 932 8f4 PT WARNING: GetAuthorizationCookie failure, error = 0x8024402C, soap client error = 5, soap error code = 0, HTTP status code = 200
  151. 2011-06-29 07:24:47:748 932 8f4 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024402c
  152. 2011-06-29 07:24:47:748 932 8f4 PT WARNING: PopulateAuthCookies failed: 0x8024402c
  153. 2011-06-29 07:24:47:748 932 8f4 PT WARNING: RefreshCookie failed: 0x8024402c
  154. 2011-06-29 07:24:47:748 932 8f4 PT WARNING: RefreshPTState failed: 0x8024402c
  155. 2011-06-29 07:24:47:748 932 8f4 PT WARNING: PTError: 0x8024402c
  156. 2011-06-29 07:24:47:748 932 8f4 Report WARNING: Reporter failed to upload events with hr = 8024402c.
  157. 2011-06-29 07:42:37:810 932 d84 PT WARNING: Cached cookie has expired or new PID is available
  158. 2011-06-29 07:42:37:810 932 d84 PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  159. 2011-06-29 07:42:37:810 932 d84 PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  160. 2011-06-29 07:42:54:336 932 d84 Misc WARNING: Send failed with hr = 80072ee7.
  161. 2011-06-29 07:42:54:336 932 d84 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  162. 2011-06-29 07:42:54:336 932 d84 PT + Last proxy send request failed with hr = 0x80072EE7, HTTP status code = 0
  163. 2011-06-29 07:42:54:336 932 d84 PT + Caller provided credentials = No
  164. 2011-06-29 07:42:54:336 932 d84 PT + Impersonate flags = 0
  165. 2011-06-29 07:42:54:336 932 d84 PT + Possible authorization schemes used =
  166. 2011-06-29 07:42:54:336 932 d84 PT WARNING: GetAuthorizationCookie failure, error = 0x8024402C, soap client error = 5, soap error code = 0, HTTP status code = 200
  167. 2011-06-29 07:42:54:337 932 d84 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024402c
  168. 2011-06-29 07:42:54:337 932 d84 PT WARNING: PopulateAuthCookies failed: 0x8024402c
  169. 2011-06-29 07:42:54:337 932 d84 PT WARNING: RefreshCookie failed: 0x8024402c
  170. 2011-06-29 07:42:54:337 932 d84 PT WARNING: RefreshPTState failed: 0x8024402c
  171. 2011-06-29 07:42:54:337 932 d84 PT WARNING: PTError: 0x8024402c
  172. 2011-06-29 07:42:54:337 932 d84 Report WARNING: Reporter failed to upload events with hr = 8024402c.
  173. 2011-06-29 08:06:11:418 932 c78 PT WARNING: Cached cookie has expired or new PID is available
  174. 2011-06-29 08:06:11:418 932 c78 PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  175. 2011-06-29 08:06:11:418 932 c78 PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  176. 2011-06-29 08:06:27:985 932 c78 Misc WARNING: Send failed with hr = 80072ee7.
  177. 2011-06-29 08:06:27:985 932 c78 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  178. 2011-06-29 08:06:27:985 932 c78 PT + Last proxy send request failed with hr = 0x80072EE7, HTTP status code = 0
  179. 2011-06-29 08:06:27:985 932 c78 PT + Caller provided credentials = No
  180. 2011-06-29 08:06:27:985 932 c78 PT + Impersonate flags = 0
  181. 2011-06-29 08:06:27:985 932 c78 PT + Possible authorization schemes used =
  182. 2011-06-29 08:06:27:985 932 c78 PT WARNING: GetAuthorizationCookie failure, error = 0x8024402C, soap client error = 5, soap error code = 0, HTTP status code = 200
  183. 2011-06-29 08:06:27:986 932 c78 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024402c
  184. 2011-06-29 08:06:27:986 932 c78 PT WARNING: PopulateAuthCookies failed: 0x8024402c
  185. 2011-06-29 08:06:27:986 932 c78 PT WARNING: RefreshCookie failed: 0x8024402c
  186. 2011-06-29 08:06:27:986 932 c78 PT WARNING: RefreshPTState failed: 0x8024402c
  187. 2011-06-29 08:06:27:986 932 c78 PT WARNING: PTError: 0x8024402c
  188. 2011-06-29 08:06:27:986 932 c78 Report WARNING: Reporter failed to upload events with hr = 8024402c.
  189. 2011-06-29 08:17:27:122 932 c78 PT WARNING: Cached cookie has expired or new PID is available
  190. 2011-06-29 08:17:27:122 932 c78 PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  191. 2011-06-29 08:17:27:122 932 c78 PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  192. 2011-06-29 08:17:43:643 932 c78 Misc WARNING: Send failed with hr = 80072ee7.
  193. 2011-06-29 08:17:43:643 932 c78 Misc WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
  194. 2011-06-29 08:17:43:643 932 c78 PT + Last proxy send request failed with hr = 0x80072EE7, HTTP status code = 0
  195. 2011-06-29 08:17:43:643 932 c78 PT + Caller provided credentials = No
  196. 2011-06-29 08:17:43:643 932 c78 PT + Impersonate flags = 0
  197. 2011-06-29 08:17:43:644 932 c78 PT + Possible authorization schemes used =
  198. 2011-06-29 08:17:43:644 932 c78 PT WARNING: GetAuthorizationCookie failure, error = 0x8024402C, soap client error = 5, soap error code = 0, HTTP status code = 200
  199. 2011-06-29 08:17:43:644 932 c78 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024402c
  200. 2011-06-29 08:17:43:644 932 c78 PT WARNING: PopulateAuthCookies failed: 0x8024402c
  201. 2011-06-29 08:17:43:644 932 c78 PT WARNING: RefreshCookie failed: 0x8024402c
  202. 2011-06-29 08:17:43:644 932 c78 PT WARNING: RefreshPTState failed: 0x8024402c
  203. 2011-06-29 08:17:43:644 932 c78 PT WARNING: PTError: 0x8024402c
  204. 2011-06-29 08:17:43:644 932 c78 Report WARNING: Reporter failed to upload events with hr = 8024402c.
  205. 2011-06-29 08:27:53:995 932 1090 Shutdwn user declined update at shutdown
  206. 2011-06-29 08:27:53:995 932 1090 AU Successfully wrote event for AU health state:0
  207. 2011-06-29 08:27:53:995 932 1090 AU AU initiates service shutdown
  208. 2011-06-29 08:27:53:995 932 1090 AU ########### AU: Uninitializing Automatic Updates ###########
  209. 2011-06-29 08:27:55:477 932 1090 Report CWERReporter finishing event handling. (00000000)
  210. 2011-06-29 08:27:55:524 932 1090 Service *********
  211. 2011-06-29 08:27:55:524 932 1090 Service ** END ** Service: Service exit [Exit code = 0x240001]
  212. 2011-06-29 08:27:55:524 932 1090 Service *************
  213. 2011-06-29 08:53:23:810 1056 1120 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  214. 2011-06-29 08:53:24:468 1056 1120 Misc = Process: C:\Windows\system32\svchost.exe
  215. 2011-06-29 08:53:24:546 1056 1120 Misc = Module: c:\windows\system32\wuaueng.dll
  216. 2011-06-29 08:53:23:810 1056 1120 Service *************
  217. 2011-06-29 08:53:24:562 1056 1120 Service ** START ** Service: Service startup
  218. 2011-06-29 08:53:24:562 1056 1120 Service *********
  219. 2011-06-29 08:53:24:952 1056 1120 Agent * WU client version 7.5.7601.17514
  220. 2011-06-29 08:53:24:968 1056 1120 Agent * Base directory: C:\Windows\SoftwareDistribution
  221. 2011-06-29 08:53:24:968 1056 1120 Agent * Access type: No proxy
  222. 2011-06-29 08:53:24:968 1056 1120 Agent * Network state: Connected
  223. 2011-06-29 08:54:12:095 1056 1120 Report CWERReporter::Init succeeded
  224. 2011-06-29 08:54:12:095 1056 1120 Agent *********** Agent: Initializing Windows Update Agent ***********
  225. 2011-06-29 08:54:12:095 1056 1120 Agent *********** Agent: Initializing global settings cache ***********
  226. 2011-06-29 08:54:12:095 1056 1120 Agent * WSUS server: http://ourwsusserver
  227. 2011-06-29 08:54:12:095 1056 1120 Agent * WSUS status server: http://ourwsusserver
  228. 2011-06-29 08:54:12:095 1056 1120 Agent * Target group: IT
  229. 2011-06-29 08:54:12:095 1056 1120 Agent * Windows Update access disabled: No
  230. 2011-06-29 08:54:12:142 1056 1120 Agent * Found 1 persisted download calls to restore
  231. 2011-06-29 08:54:12:158 1056 1120 DnldMgr Download manager restoring 0 downloads
  232. 2011-06-29 08:54:12:158 1056 1120 Agent * Successfully loaded 1 persisted download calls.
  233. 2011-06-29 08:54:12:173 1056 1120 AU ########### AU: Initializing Automatic Updates ###########
  234. 2011-06-29 08:54:12:173 1056 1120 AU # WSUS server: http://ourwsusserver
  235. 2011-06-29 08:54:12:173 1056 1120 AU # Detection frequency: 22
  236. 2011-06-29 08:54:12:173 1056 1120 AU # Target group: IT
  237. 2011-06-29 08:54:12:173 1056 1120 AU # Approval type: Scheduled (Policy)
  238. 2011-06-29 08:54:12:173 1056 1120 AU # Scheduled install day/time: Every day at 12:00
  239. 2011-06-29 08:54:12:173 1056 1120 AU # Auto-install minor updates: Yes (Policy)
  240. 2011-06-29 08:54:12:220 1056 1120 AU Setting AU scheduled install time to 2011-06-29 16:00:00
  241. 2011-06-29 08:54:12:454 1056 1120 Report *********** Report: Initializing static reporting data ***********
  242. 2011-06-29 08:54:12:454 1056 1120 Report * OS Version = 6.1.7601.1.0.65792
  243. 2011-06-29 08:54:12:454 1056 1120 Report * OS Product Type = 0x00000004
  244. 2011-06-29 08:54:12:454 1056 1120 Report * Computer Brand = Dell Inc.
  245. 2011-06-29 08:54:12:454 1056 1120 Report * Computer Model = Latitude E6400
  246. 2011-06-29 08:54:12:454 1056 1120 Report * Bios Revision = A26
  247. 2011-06-29 08:54:12:454 1056 1120 Report * Bios Name = Phoenix ROM BIOS PLUS Version 1.10 A26
  248. 2011-06-29 08:54:12:454 1056 1120 Report * Bios Release Date = 2010-07-30T00:00:00
  249. 2011-06-29 08:54:12:454 1056 1120 Report * Locale ID = 1033
  250. 2011-06-29 08:54:12:532 1056 1120 AU Successfully wrote event for AU health state:0
  251. 2011-06-29 08:54:12:532 1056 1120 AU Initializing featured updates
  252. 2011-06-29 08:54:12:532 1056 1120 AU Found 0 cached featured updates
  253. 2011-06-29 08:54:12:532 1056 1120 AU Successfully wrote event for AU health state:0
  254. 2011-06-29 08:54:12:532 1056 1120 AU Successfully wrote event for AU health state:0
  255. 2011-06-29 08:54:12:532 1056 1120 AU AU finished delayed initialization
  256. 2011-06-29 08:54:12:798 1056 16cc PT WARNING: Cached cookie has expired or new PID is available
  257. 2011-06-29 08:54:12:798 1056 16cc PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  258. 2011-06-29 08:54:12:798 1056 16cc PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  259. 2011-06-29 08:54:15:186 1056 16cc Report Uploading 1 events using cached cookie, reporting URL = http://ourwsusserver/ReportingWebService/ReportingWebService.asmx
  260. 2011-06-29 08:54:15:186 1056 16cc Report Reporter successfully uploaded 1 events.
  261. 2011-06-29 08:54:17:605 1056 16cc Report CWERReporter finishing event handling. (00000000)
  262. 2011-06-29 10:09:25:040 1056 1120 AU Successfully wrote event for AU health state:0
  263. 2011-06-29 10:09:30:040 1056 1c74 Report CWERReporter finishing event handling. (00000000)
  264. 2011-06-29 11:04:49:963 1056 1120 AU AU setting next sqm report timeout to 2011-06-30 15:04:49
  265. 2011-06-29 12:00:10:087 1056 1120 AU Forced install timer expired for scheduled install
  266. 2011-06-29 12:00:10:135 1056 1120 AU UpdateDownloadProperties: 0 download(s) are still in progress.
  267. 2011-06-29 12:00:10:136 1056 1120 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  268. 2011-06-29 12:00:10:137 1056 1120 AU Successfully wrote event for AU health state:0
  269. 2011-06-29 12:00:15:138 1056 1858 Report CWERReporter finishing event handling. (00000000)
  270. 2011-06-29 12:21:52:137 2964 1c98 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  271. 2011-06-29 12:21:52:137 2964 1c98 Misc = Process: C:\Windows\system32\DrvInst.exe
  272. 2011-06-29 12:21:52:137 2964 1c98 Misc = Module: C:\Windows\system32\wuapi.dll
  273. 2011-06-29 12:21:52:136 2964 1c98 COMAPI -------------
  274. 2011-06-29 12:21:52:137 2964 1c98 COMAPI -- START -- COMAPI: Search [ClientId = ChkWuDrv]
  275. 2011-06-29 12:21:52:137 2964 1c98 COMAPI ---------
  276. 2011-06-29 12:21:52:284 2964 1c98 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = ChkWuDrv]
  277. 2011-06-29 12:21:52:288 1056 1bb8 Agent *************
  278. 2011-06-29 12:21:52:288 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = ChkWuDrv]
  279. 2011-06-29 12:21:52:288 1056 1bb8 Agent *********
  280. 2011-06-29 12:21:52:288 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  281. 2011-06-29 12:21:52:288 1056 1bb8 Agent * Criteria = "Type='Driver' and DriverMatch='Best' and DeviceInstance='USB\VID_0A5C&PID_5800&MI_00\6&66DE6C9&0&0000' and DriverIsBetterThanInStore=1"
  282. 2011-06-29 12:21:52:288 1056 1bb8 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
  283. 2011-06-29 12:21:52:288 1056 1bb8 Agent * Search Scope = {Machine}
  284. 2011-06-29 12:21:54:714 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  285. 2011-06-29 12:21:54:769 1056 1bb8 Misc Microsoft signed: Yes
  286. 2011-06-29 12:21:57:096 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  287. 2011-06-29 12:21:57:101 1056 1bb8 Misc Microsoft signed: Yes
  288. 2011-06-29 12:21:57:106 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  289. 2011-06-29 12:21:57:106 1056 1bb8 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  290. 2011-06-29 12:21:57:111 1056 1bb8 PT WARNING: Cached cookie has expired or new PID is available
  291. 2011-06-29 12:21:57:111 1056 1bb8 PT WARNING: PTWarn: Anonymous plug-in skipped for WU
  292. 2011-06-29 12:22:01:697 1056 1bb8 PT WARNING: GetCookie failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
  293. 2011-06-29 12:22:01:697 1056 1bb8 PT WARNING: SOAP Fault: 0x00012c
  294. 2011-06-29 12:22:01:697 1056 1bb8 PT WARNING: faultstring:Fault occurred
  295. 2011-06-29 12:22:01:697 1056 1bb8 PT WARNING: ErrorCode:ConfigChanged(2)
  296. 2011-06-29 12:22:01:697 1056 1bb8 PT WARNING: Message:(null)
  297. 2011-06-29 12:22:01:698 1056 1bb8 PT WARNING: Method:"http://www.microsoft.com/SoftwareDistribution/Server/ClientWebService/GetCookie"
  298. 2011-06-29 12:22:01:698 1056 1bb8 PT WARNING: ID:90d80049-b728-4ba4-a9df-551b02b07eb1
  299. 2011-06-29 12:22:01:719 1056 1bb8 PT WARNING: Cached cookie has expired or new PID is available
  300. 2011-06-29 12:22:01:719 1056 1bb8 PT WARNING: PTWarn: Anonymous plug-in skipped for WU
  301. 2011-06-29 12:22:10:230 1056 1120 AU Triggering Offline detection (non-interactive)
  302. 2011-06-29 12:22:10:230 1056 1120 AU #############
  303. 2011-06-29 12:22:10:230 1056 1120 AU ## START ## AU: Search for updates
  304. 2011-06-29 12:22:10:230 1056 1120 AU #########
  305. 2011-06-29 12:22:10:233 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {3FDBD16D-D6D9-4A01-B350-94357CBA6B88}]
  306. 2011-06-29 12:22:10:266 1056 1bb8 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 188 out of 591 deployed entities
  307. 2011-06-29 12:22:10:465 1056 1bb8 Agent *********
  308. 2011-06-29 12:22:10:465 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = ChkWuDrv]
  309. 2011-06-29 12:22:10:465 1056 1bb8 Agent *************
  310. 2011-06-29 12:22:10:468 1056 1bb8 Agent *************
  311. 2011-06-29 12:22:10:468 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  312. 2011-06-29 12:22:10:468 1056 1bb8 Agent *********
  313. 2011-06-29 12:22:10:468 1056 1bb8 Agent * Online = No; Ignore download priority = No
  314. 2011-06-29 12:22:10:468 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  315. 2011-06-29 12:22:10:468 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  316. 2011-06-29 12:22:10:468 1056 1bb8 Agent * Search Scope = {Machine}
  317. 2011-06-29 12:22:10:469 2964 8e0 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ChkWuDrv]
  318. 2011-06-29 12:22:10:470 2964 8e0 COMAPI - Updates found = 0
  319. 2011-06-29 12:22:10:470 2964 8e0 COMAPI ---------
  320. 2011-06-29 12:22:10:470 2964 8e0 COMAPI -- END -- COMAPI: Search [ClientId = ChkWuDrv]
  321. 2011-06-29 12:22:10:470 2964 8e0 COMAPI -------------
  322. 2011-06-29 12:22:17:657 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1598 deployed entities
  323. 2011-06-29 12:22:17:658 1056 1bb8 Agent *********
  324. 2011-06-29 12:22:17:658 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  325. 2011-06-29 12:22:17:658 1056 1bb8 Agent *************
  326. 2011-06-29 12:22:17:665 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {3FDBD16D-D6D9-4A01-B350-94357CBA6B88}]
  327. 2011-06-29 12:22:17:665 1056 1c84 AU # 0 updates detected
  328. 2011-06-29 12:22:17:665 1056 1c84 AU #########
  329. 2011-06-29 12:22:17:665 1056 1c84 AU ## END ## AU: Search for updates [CallId = {3FDBD16D-D6D9-4A01-B350-94357CBA6B88}]
  330. 2011-06-29 12:22:17:665 1056 1c84 AU #############
  331. 2011-06-29 12:22:17:665 1056 1c84 AU Featured notifications is disabled.
  332. 2011-06-29 12:22:17:665 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  333. 2011-06-29 12:22:17:666 1056 1c84 AU Successfully wrote event for AU health state:0
  334. 2011-06-29 12:22:17:687 1056 1bb8 Report REPORT EVENT: {51CCFB34-E210-4580-A1C6-A39738E2AD81} 2011-06-29 12:22:10:465-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
  335. 2011-06-29 12:22:17:687 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  336. 2011-06-29 12:22:17:736 1056 1c84 AU Successfully wrote event for AU health state:0
  337. 2011-06-29 12:22:17:736 1056 1120 AU #############
  338. 2011-06-29 12:22:17:736 1056 1120 AU ## START ## AU: Search for updates
  339. 2011-06-29 12:22:17:736 1056 1120 AU #########
  340. 2011-06-29 12:22:17:738 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {0CD47DC6-546B-4FA6-9197-67DA27C8FCEB}]
  341. 2011-06-29 12:22:17:738 1056 1bb8 Agent *************
  342. 2011-06-29 12:22:17:738 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  343. 2011-06-29 12:22:17:738 1056 1bb8 Agent *********
  344. 2011-06-29 12:22:17:738 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  345. 2011-06-29 12:22:17:738 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  346. 2011-06-29 12:22:17:738 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  347. 2011-06-29 12:22:17:738 1056 1bb8 Agent * Search Scope = {Machine}
  348. 2011-06-29 12:22:17:738 1056 1bb8 Setup Checking for agent SelfUpdate
  349. 2011-06-29 12:22:17:738 1056 1bb8 Setup Client version: Core: 7.5.7601.17514 Aux: 7.5.7601.17514
  350. 2011-06-29 12:22:17:739 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
  351. 2011-06-29 12:22:17:954 1056 1bb8 Misc Microsoft signed: Yes
  352. 2011-06-29 12:22:20:246 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
  353. 2011-06-29 12:22:20:251 1056 1bb8 Misc Microsoft signed: Yes
  354. 2011-06-29 12:22:20:266 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
  355. 2011-06-29 12:22:20:287 1056 1bb8 Misc Microsoft signed: Yes
  356. 2011-06-29 12:22:20:289 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
  357. 2011-06-29 12:22:20:295 1056 1bb8 Misc Microsoft signed: Yes
  358. 2011-06-29 12:22:20:383 1056 1bb8 Setup Determining whether a new setup handler needs to be downloaded
  359. 2011-06-29 12:22:20:405 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe:
  360. 2011-06-29 12:22:20:425 1056 1bb8 Misc Microsoft signed: Yes
  361. 2011-06-29 12:22:20:425 1056 1bb8 Setup SelfUpdate handler update NOT required: Current version: 7.4.7600.226, required version: 7.4.7600.226
  362. 2011-06-29 12:22:20:425 1056 1bb8 Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226"
  363. 2011-06-29 12:22:20:499 1056 1bb8 Setup Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.4.7600.226" is already installed.
  364. 2011-06-29 12:22:20:536 1056 1bb8 Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226"
  365. 2011-06-29 12:22:20:726 1056 1bb8 Setup Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226" is already installed.
  366. 2011-06-29 12:22:20:727 1056 1bb8 Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226"
  367. 2011-06-29 12:22:20:803 1056 1bb8 Setup Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.4.7600.226" is already installed.
  368. 2011-06-29 12:22:20:804 1056 1bb8 Setup SelfUpdate check completed. SelfUpdate is NOT required.
  369. 2011-06-29 12:22:21:146 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  370. 2011-06-29 12:22:21:146 1056 1bb8 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ourwsusserver/ClientWebService/client.asmx
  371. 2011-06-29 12:22:21:157 1056 1bb8 PT WARNING: Cached cookie has expired or new PID is available
  372. 2011-06-29 12:22:21:157 1056 1bb8 PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  373. 2011-06-29 12:22:21:157 1056 1bb8 PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  374. 2011-06-29 12:22:47:113 6564 187c Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  375. 2011-06-29 12:22:47:113 6564 187c Misc = Process: C:\Windows\system32\DrvInst.exe
  376. 2011-06-29 12:22:47:113 6564 187c Misc = Module: C:\Windows\system32\wuapi.dll
  377. 2011-06-29 12:22:47:112 6564 187c COMAPI -------------
  378. 2011-06-29 12:22:47:113 6564 187c COMAPI -- START -- COMAPI: Search [ClientId = ChkWuDrv]
  379. 2011-06-29 12:22:47:113 6564 187c COMAPI ---------
  380. 2011-06-29 12:22:47:124 6564 187c COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = ChkWuDrv]
  381. 2011-06-29 12:24:33:379 1056 1bb8 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
  382. 2011-06-29 12:24:33:379 1056 1bb8 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ourwsusserver/ClientWebService/client.asmx
  383. 2011-06-29 12:24:37:415 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 1126 out of 1690 deployed entities
  384. 2011-06-29 12:24:37:420 1056 1bb8 Agent *********
  385. 2011-06-29 12:24:37:421 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  386. 2011-06-29 12:24:37:421 1056 1bb8 Agent *************
  387. 2011-06-29 12:24:37:479 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {0CD47DC6-546B-4FA6-9197-67DA27C8FCEB}]
  388. 2011-06-29 12:24:37:479 1056 1c84 AU # 0 updates detected
  389. 2011-06-29 12:24:37:480 1056 1c84 AU #########
  390. 2011-06-29 12:24:37:480 1056 1c84 AU ## END ## AU: Search for updates [CallId = {0CD47DC6-546B-4FA6-9197-67DA27C8FCEB}]
  391. 2011-06-29 12:24:37:480 1056 1c84 AU #############
  392. 2011-06-29 12:24:37:481 1056 1c84 AU Successfully wrote event for AU health state:0
  393. 2011-06-29 12:24:37:481 1056 1c84 AU Featured notifications is disabled.
  394. 2011-06-29 12:24:37:481 1056 1c84 AU AU setting next detection timeout to 2011-06-30 14:08:50
  395. 2011-06-29 12:24:37:481 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  396. 2011-06-29 12:24:37:482 1056 1c84 AU Successfully wrote event for AU health state:0
  397. 2011-06-29 12:24:37:484 1056 1c84 AU Successfully wrote event for AU health state:0
  398. 2011-06-29 12:24:37:485 1056 1bb8 Agent *************
  399. 2011-06-29 12:24:37:485 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = ChkWuDrv]
  400. 2011-06-29 12:24:37:485 1056 1bb8 Agent *********
  401. 2011-06-29 12:24:37:485 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  402. 2011-06-29 12:24:37:485 1056 1bb8 Agent * Criteria = "Type='Driver' and DriverMatch='Best' and DeviceInstance='USB\VID_0A5C&PID_5800&MI_00\6&66DE6C9&0&0000' and DriverIsBetterThanInStore=1"
  403. 2011-06-29 12:24:37:485 1056 1bb8 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
  404. 2011-06-29 12:24:37:485 1056 1bb8 Agent * Search Scope = {Machine}
  405. 2011-06-29 12:24:39:518 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  406. 2011-06-29 12:24:39:548 1056 1bb8 Misc Microsoft signed: Yes
  407. 2011-06-29 12:24:39:584 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  408. 2011-06-29 12:24:39:615 1056 1bb8 Misc Microsoft signed: Yes
  409. 2011-06-29 12:24:39:688 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  410. 2011-06-29 12:24:39:689 1056 1bb8 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  411. 2011-06-29 12:24:47:160 1056 1120 AU Triggering Offline detection (non-interactive)
  412. 2011-06-29 12:24:47:160 1056 1120 AU #############
  413. 2011-06-29 12:24:47:160 1056 1120 AU ## START ## AU: Search for updates
  414. 2011-06-29 12:24:47:160 1056 1120 AU #########
  415. 2011-06-29 12:24:47:166 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {86A19980-BDF8-4AD1-8CE3-2EE0C55BFB7C}]
  416. 2011-06-29 12:24:47:173 1056 1bb8 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 185 out of 591 deployed entities
  417. 2011-06-29 12:24:47:175 1056 1bb8 Agent *********
  418. 2011-06-29 12:24:47:175 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = ChkWuDrv]
  419. 2011-06-29 12:24:47:175 1056 1bb8 Agent *************
  420. 2011-06-29 12:24:47:180 1056 1bb8 Agent *************
  421. 2011-06-29 12:24:47:180 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  422. 2011-06-29 12:24:47:184 1056 1bb8 Agent *********
  423. 2011-06-29 12:24:47:184 1056 1bb8 Agent * Online = No; Ignore download priority = No
  424. 2011-06-29 12:24:47:185 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  425. 2011-06-29 12:24:47:185 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  426. 2011-06-29 12:24:47:185 1056 1bb8 Agent * Search Scope = {Machine}
  427. 2011-06-29 12:24:47:187 6564 19c4 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ChkWuDrv]
  428. 2011-06-29 12:24:47:188 6564 19c4 COMAPI - Updates found = 0
  429. 2011-06-29 12:24:47:188 6564 19c4 COMAPI ---------
  430. 2011-06-29 12:24:47:188 6564 19c4 COMAPI -- END -- COMAPI: Search [ClientId = ChkWuDrv]
  431. 2011-06-29 12:24:47:188 6564 19c4 COMAPI -------------
  432. 2011-06-29 12:24:51:410 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1690 deployed entities
  433. 2011-06-29 12:24:51:411 1056 1bb8 Agent *********
  434. 2011-06-29 12:24:51:411 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  435. 2011-06-29 12:24:51:411 1056 1bb8 Agent *************
  436. 2011-06-29 12:24:51:439 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {86A19980-BDF8-4AD1-8CE3-2EE0C55BFB7C}]
  437. 2011-06-29 12:24:51:439 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  438. 2011-06-29 12:24:51:439 1056 1c84 AU # 0 updates detected
  439. 2011-06-29 12:24:51:440 1056 1bb8 Report REPORT EVENT: {54DDA02A-6860-4265-89B2-59FC70D75E0C} 2011-06-29 12:24:37:418-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software Synchronization Windows Update Client successfully detected 0 updates.
  440. 2011-06-29 12:24:51:440 1056 1c84 AU #########
  441. 2011-06-29 12:24:51:440 1056 1bb8 Report REPORT EVENT: {98B1E33D-258E-4187-A316-33CBD85BE86D} 2011-06-29 12:24:37:420-0400 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Pre-Deployment Check Reporting client status.
  442. 2011-06-29 12:24:51:440 1056 1c84 AU ## END ## AU: Search for updates [CallId = {86A19980-BDF8-4AD1-8CE3-2EE0C55BFB7C}]
  443. 2011-06-29 12:24:51:442 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  444. 2011-06-29 12:24:51:442 1056 1c84 AU #############
  445. 2011-06-29 12:24:51:444 1056 1c84 AU Featured notifications is disabled.
  446. 2011-06-29 12:24:51:444 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  447. 2011-06-29 12:24:51:445 1056 1c84 AU Successfully wrote event for AU health state:0
  448. 2011-06-29 12:24:51:447 1056 1c84 AU Successfully wrote event for AU health state:0
  449. 2011-06-29 12:24:51:448 1056 1bb8 Report REPORT EVENT: {DEBE8B0B-92AD-4BF3-88DA-1912426078BD} 2011-06-29 12:24:47:174-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
  450. 2011-06-29 12:24:51:449 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  451. 2011-06-29 12:24:56:452 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  452. 2011-06-29 12:27:18:631 7808 1a68 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  453. 2011-06-29 12:27:18:632 7808 1a68 Misc = Process: C:\Windows\system32\DrvInst.exe
  454. 2011-06-29 12:27:18:632 7808 1a68 Misc = Module: C:\Windows\system32\wuapi.dll
  455. 2011-06-29 12:27:18:629 7808 1a68 COMAPI -------------
  456. 2011-06-29 12:27:18:632 7808 1a68 COMAPI -- START -- COMAPI: Search [ClientId = ChkWuDrv]
  457. 2011-06-29 12:27:18:632 7808 1a68 COMAPI ---------
  458. 2011-06-29 12:27:18:656 1056 1bb8 Agent *************
  459. 2011-06-29 12:27:18:657 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = ChkWuDrv]
  460. 2011-06-29 12:27:18:657 1056 1bb8 Agent *********
  461. 2011-06-29 12:27:18:657 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  462. 2011-06-29 12:27:18:657 7808 1a68 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = ChkWuDrv]
  463. 2011-06-29 12:27:18:657 1056 1bb8 Agent * Criteria = "Type='Driver' and DriverMatch='Best' and DeviceInstance='USB\VID_0A5C&PID_5800&MI_00\6&66DE6C9&0&0000' and DriverIsBetterThanInStore=1"
  464. 2011-06-29 12:27:18:657 1056 1bb8 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
  465. 2011-06-29 12:27:18:658 1056 1bb8 Agent * Search Scope = {Machine}
  466. 2011-06-29 12:27:20:761 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  467. 2011-06-29 12:27:20:800 1056 1bb8 Misc Microsoft signed: Yes
  468. 2011-06-29 12:27:20:877 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  469. 2011-06-29 12:27:20:908 1056 1bb8 Misc Microsoft signed: Yes
  470. 2011-06-29 12:27:20:940 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  471. 2011-06-29 12:27:20:941 1056 1bb8 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  472. 2011-06-29 12:27:39:054 1056 1120 AU Triggering Offline detection (non-interactive)
  473. 2011-06-29 12:27:39:054 1056 1120 AU #############
  474. 2011-06-29 12:27:39:055 1056 1120 AU ## START ## AU: Search for updates
  475. 2011-06-29 12:27:39:055 1056 1120 AU #########
  476. 2011-06-29 12:27:39:068 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {02CB9DB5-43FD-4307-ABB0-BD141C332100}]
  477. 2011-06-29 12:27:39:080 1056 1bb8 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 185 out of 591 deployed entities
  478. 2011-06-29 12:27:39:089 1056 1bb8 Agent *********
  479. 2011-06-29 12:27:39:089 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = ChkWuDrv]
  480. 2011-06-29 12:27:39:090 1056 1bb8 Agent *************
  481. 2011-06-29 12:27:39:107 1056 1bb8 Agent *************
  482. 2011-06-29 12:27:39:108 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  483. 2011-06-29 12:27:39:108 1056 1bb8 Agent *********
  484. 2011-06-29 12:27:39:108 1056 1bb8 Agent * Online = No; Ignore download priority = No
  485. 2011-06-29 12:27:39:108 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  486. 2011-06-29 12:27:39:108 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  487. 2011-06-29 12:27:39:108 1056 1bb8 Agent * Search Scope = {Machine}
  488. 2011-06-29 12:27:39:209 7808 1550 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ChkWuDrv]
  489. 2011-06-29 12:27:39:217 7808 1550 COMAPI - Updates found = 0
  490. 2011-06-29 12:27:39:217 7808 1550 COMAPI ---------
  491. 2011-06-29 12:27:39:217 7808 1550 COMAPI -- END -- COMAPI: Search [ClientId = ChkWuDrv]
  492. 2011-06-29 12:27:39:217 7808 1550 COMAPI -------------
  493. 2011-06-29 12:27:47:580 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1690 deployed entities
  494. 2011-06-29 12:27:47:619 1056 1bb8 Agent *********
  495. 2011-06-29 12:27:47:620 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  496. 2011-06-29 12:27:47:620 1056 1bb8 Agent *************
  497. 2011-06-29 12:27:47:743 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {02CB9DB5-43FD-4307-ABB0-BD141C332100}]
  498. 2011-06-29 12:27:47:744 1056 1c84 AU # 0 updates detected
  499. 2011-06-29 12:27:47:744 1056 1c84 AU #########
  500. 2011-06-29 12:27:47:744 1056 1c84 AU ## END ## AU: Search for updates [CallId = {02CB9DB5-43FD-4307-ABB0-BD141C332100}]
  501. 2011-06-29 12:27:47:744 1056 1c84 AU #############
  502. 2011-06-29 12:27:47:744 1056 1c84 AU Featured notifications is disabled.
  503. 2011-06-29 12:27:47:745 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  504. 2011-06-29 12:27:47:747 1056 1c84 AU Successfully wrote event for AU health state:0
  505. 2011-06-29 12:27:47:750 1056 1c84 AU Successfully wrote event for AU health state:0
  506. 2011-06-29 12:27:47:754 1056 1bb8 Report REPORT EVENT: {3B4FC5A8-CD96-43D5-BA63-7B835BBA4C43} 2011-06-29 12:27:39:088-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
  507. 2011-06-29 12:27:47:754 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  508. 2011-06-29 12:27:52:748 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  509. 2011-06-29 12:29:58:412 5960 106c Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  510. 2011-06-29 12:29:58:412 5960 106c Misc = Process: C:\Windows\system32\DrvInst.exe
  511. 2011-06-29 12:29:58:412 5960 106c Misc = Module: C:\Windows\system32\wuapi.dll
  512. 2011-06-29 12:29:58:411 5960 106c COMAPI -------------
  513. 2011-06-29 12:29:58:412 5960 106c COMAPI -- START -- COMAPI: Search [ClientId = ChkWuDrv]
  514. 2011-06-29 12:29:58:413 5960 106c COMAPI ---------
  515. 2011-06-29 12:29:58:424 1056 1bb8 Agent *************
  516. 2011-06-29 12:29:58:424 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = ChkWuDrv]
  517. 2011-06-29 12:29:58:425 1056 1bb8 Agent *********
  518. 2011-06-29 12:29:58:425 5960 106c COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = ChkWuDrv]
  519. 2011-06-29 12:29:58:425 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  520. 2011-06-29 12:29:58:425 1056 1bb8 Agent * Criteria = "Type='Driver' and DriverMatch='Best' and DeviceInstance='USB\VID_0A5C&PID_5800&MI_00\6&66DE6C9&0&0000' and DriverIsBetterThanInStore=1"
  521. 2011-06-29 12:29:58:425 1056 1bb8 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
  522. 2011-06-29 12:29:58:425 1056 1bb8 Agent * Search Scope = {Machine}
  523. 2011-06-29 12:29:59:354 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  524. 2011-06-29 12:29:59:372 1056 1bb8 Misc Microsoft signed: Yes
  525. 2011-06-29 12:29:59:409 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  526. 2011-06-29 12:29:59:426 1056 1bb8 Misc Microsoft signed: Yes
  527. 2011-06-29 12:29:59:443 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  528. 2011-06-29 12:29:59:443 1056 1bb8 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  529. 2011-06-29 12:30:04:376 1056 1120 AU Triggering Offline detection (non-interactive)
  530. 2011-06-29 12:30:04:376 1056 1120 AU #############
  531. 2011-06-29 12:30:04:376 1056 1120 AU ## START ## AU: Search for updates
  532. 2011-06-29 12:30:04:377 1056 1120 AU #########
  533. 2011-06-29 12:30:04:383 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {FBE6FD7F-DE30-46AD-B91B-DDD2284ACE9A}]
  534. 2011-06-29 12:30:04:392 1056 1bb8 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 185 out of 591 deployed entities
  535. 2011-06-29 12:30:04:393 1056 1bb8 Agent *********
  536. 2011-06-29 12:30:04:393 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = ChkWuDrv]
  537. 2011-06-29 12:30:04:393 1056 1bb8 Agent *************
  538. 2011-06-29 12:30:04:400 1056 1bb8 Agent *************
  539. 2011-06-29 12:30:04:400 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  540. 2011-06-29 12:30:04:400 1056 1bb8 Agent *********
  541. 2011-06-29 12:30:04:400 1056 1bb8 Agent * Online = No; Ignore download priority = No
  542. 2011-06-29 12:30:04:400 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  543. 2011-06-29 12:30:04:400 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  544. 2011-06-29 12:30:04:400 1056 1bb8 Agent * Search Scope = {Machine}
  545. 2011-06-29 12:30:04:402 5960 df0 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ChkWuDrv]
  546. 2011-06-29 12:30:04:404 5960 df0 COMAPI - Updates found = 0
  547. 2011-06-29 12:30:04:404 5960 df0 COMAPI ---------
  548. 2011-06-29 12:30:04:404 5960 df0 COMAPI -- END -- COMAPI: Search [ClientId = ChkWuDrv]
  549. 2011-06-29 12:30:04:404 5960 df0 COMAPI -------------
  550. 2011-06-29 12:30:06:660 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1690 deployed entities
  551. 2011-06-29 12:30:06:661 1056 1bb8 Agent *********
  552. 2011-06-29 12:30:06:662 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  553. 2011-06-29 12:30:06:662 1056 1bb8 Agent *************
  554. 2011-06-29 12:30:06:693 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {FBE6FD7F-DE30-46AD-B91B-DDD2284ACE9A}]
  555. 2011-06-29 12:30:06:693 1056 1c84 AU # 0 updates detected
  556. 2011-06-29 12:30:06:693 1056 1c84 AU #########
  557. 2011-06-29 12:30:06:693 1056 1c84 AU ## END ## AU: Search for updates [CallId = {FBE6FD7F-DE30-46AD-B91B-DDD2284ACE9A}]
  558. 2011-06-29 12:30:06:693 1056 1c84 AU #############
  559. 2011-06-29 12:30:06:693 1056 1c84 AU Featured notifications is disabled.
  560. 2011-06-29 12:30:06:694 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  561. 2011-06-29 12:30:06:695 1056 1c84 AU Successfully wrote event for AU health state:0
  562. 2011-06-29 12:30:06:697 1056 1c84 AU Successfully wrote event for AU health state:0
  563. 2011-06-29 12:30:09:393 1056 1bb8 Report REPORT EVENT: {F2D40944-4A21-4DA5-BB15-7C1CBDCF21DA} 2011-06-29 12:30:04:393-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
  564. 2011-06-29 12:30:09:394 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  565. 2011-06-29 12:31:03:975 4596 1df0 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  566. 2011-06-29 12:31:03:975 4596 1df0 Misc = Process: C:\Windows\system32\DrvInst.exe
  567. 2011-06-29 12:31:03:975 4596 1df0 Misc = Module: C:\Windows\system32\wuapi.dll
  568. 2011-06-29 12:31:03:974 4596 1df0 COMAPI -------------
  569. 2011-06-29 12:31:03:975 4596 1df0 COMAPI -- START -- COMAPI: Search [ClientId = ChkWuDrv]
  570. 2011-06-29 12:31:03:975 4596 1df0 COMAPI ---------
  571. 2011-06-29 12:31:03:980 1056 1bb8 Agent *************
  572. 2011-06-29 12:31:03:980 4596 1df0 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = ChkWuDrv]
  573. 2011-06-29 12:31:03:980 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = ChkWuDrv]
  574. 2011-06-29 12:31:03:980 1056 1bb8 Agent *********
  575. 2011-06-29 12:31:03:980 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  576. 2011-06-29 12:31:03:980 1056 1bb8 Agent * Criteria = "Type='Driver' and DriverMatch='Best' and DeviceInstance='USB\VID_0A5C&PID_5800&MI_00\6&66DE6C9&0&0000' and DriverIsBetterThanInStore=1"
  577. 2011-06-29 12:31:03:980 1056 1bb8 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
  578. 2011-06-29 12:31:03:980 1056 1bb8 Agent * Search Scope = {Machine}
  579. 2011-06-29 12:31:04:346 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  580. 2011-06-29 12:31:04:353 1056 1bb8 Misc Microsoft signed: Yes
  581. 2011-06-29 12:31:04:378 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  582. 2011-06-29 12:31:04:385 1056 1bb8 Misc Microsoft signed: Yes
  583. 2011-06-29 12:31:04:392 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  584. 2011-06-29 12:31:04:392 1056 1bb8 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  585. 2011-06-29 12:31:06:866 1056 1120 AU Triggering Offline detection (non-interactive)
  586. 2011-06-29 12:31:06:867 1056 1120 AU #############
  587. 2011-06-29 12:31:06:867 1056 1120 AU ## START ## AU: Search for updates
  588. 2011-06-29 12:31:06:867 1056 1120 AU #########
  589. 2011-06-29 12:31:06:869 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {4F0933EF-8FEC-43F6-BF48-6394EF81E585}]
  590. 2011-06-29 12:31:06:871 1056 1bb8 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 185 out of 591 deployed entities
  591. 2011-06-29 12:31:06:872 1056 1bb8 Agent *********
  592. 2011-06-29 12:31:06:872 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = ChkWuDrv]
  593. 2011-06-29 12:31:06:872 1056 1bb8 Agent *************
  594. 2011-06-29 12:31:06:875 1056 1bb8 Agent *************
  595. 2011-06-29 12:31:06:875 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  596. 2011-06-29 12:31:06:875 1056 1bb8 Agent *********
  597. 2011-06-29 12:31:06:875 1056 1bb8 Agent * Online = No; Ignore download priority = No
  598. 2011-06-29 12:31:06:875 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  599. 2011-06-29 12:31:06:875 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  600. 2011-06-29 12:31:06:875 1056 1bb8 Agent * Search Scope = {Machine}
  601. 2011-06-29 12:31:06:876 4596 19e8 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ChkWuDrv]
  602. 2011-06-29 12:31:06:877 4596 19e8 COMAPI - Updates found = 0
  603. 2011-06-29 12:31:06:877 4596 19e8 COMAPI ---------
  604. 2011-06-29 12:31:06:877 4596 19e8 COMAPI -- END -- COMAPI: Search [ClientId = ChkWuDrv]
  605. 2011-06-29 12:31:06:877 4596 19e8 COMAPI -------------
  606. 2011-06-29 12:31:08:422 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1690 deployed entities
  607. 2011-06-29 12:31:08:423 1056 1bb8 Agent *********
  608. 2011-06-29 12:31:08:423 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  609. 2011-06-29 12:31:08:423 1056 1bb8 Agent *************
  610. 2011-06-29 12:31:08:436 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {4F0933EF-8FEC-43F6-BF48-6394EF81E585}]
  611. 2011-06-29 12:31:08:436 1056 1c84 AU # 0 updates detected
  612. 2011-06-29 12:31:08:436 1056 1c84 AU #########
  613. 2011-06-29 12:31:08:436 1056 1c84 AU ## END ## AU: Search for updates [CallId = {4F0933EF-8FEC-43F6-BF48-6394EF81E585}]
  614. 2011-06-29 12:31:08:436 1056 1c84 AU #############
  615. 2011-06-29 12:31:08:436 1056 1c84 AU Featured notifications is disabled.
  616. 2011-06-29 12:31:08:436 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  617. 2011-06-29 12:31:08:436 1056 1c84 AU Successfully wrote event for AU health state:0
  618. 2011-06-29 12:31:08:437 1056 1c84 AU Successfully wrote event for AU health state:0
  619. 2011-06-29 12:31:11:871 1056 1bb8 Report REPORT EVENT: {841C86C1-AD84-4168-BA97-CD9D34234F37} 2011-06-29 12:31:06:872-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
  620. 2011-06-29 12:31:11:871 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  621. 2011-06-29 12:31:36:372 7140 1b40 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  622. 2011-06-29 12:31:36:372 7140 1b40 Misc = Process: C:\Windows\system32\DrvInst.exe
  623. 2011-06-29 12:31:36:372 7140 1b40 Misc = Module: C:\Windows\system32\wuapi.dll
  624. 2011-06-29 12:31:36:372 7140 1b40 COMAPI -------------
  625. 2011-06-29 12:31:36:373 7140 1b40 COMAPI -- START -- COMAPI: Search [ClientId = ChkWuDrv]
  626. 2011-06-29 12:31:36:373 7140 1b40 COMAPI ---------
  627. 2011-06-29 12:31:36:376 1056 1bb8 Agent *************
  628. 2011-06-29 12:31:36:376 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = ChkWuDrv]
  629. 2011-06-29 12:31:36:376 1056 1bb8 Agent *********
  630. 2011-06-29 12:31:36:376 1056 1bb8 Agent * Online = Yes; Ignore download priority = No
  631. 2011-06-29 12:31:36:376 7140 1b40 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = ChkWuDrv]
  632. 2011-06-29 12:31:36:376 1056 1bb8 Agent * Criteria = "Type='Driver' and DriverMatch='Best' and DeviceInstance='USB\VID_0A5C&PID_5800&MI_00\6&66DE6C9&0&0000' and DriverIsBetterThanInStore=1"
  633. 2011-06-29 12:31:36:376 1056 1bb8 Agent * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
  634. 2011-06-29 12:31:36:376 1056 1bb8 Agent * Search Scope = {Machine}
  635. 2011-06-29 12:31:36:660 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  636. 2011-06-29 12:31:36:665 1056 1bb8 Misc Microsoft signed: Yes
  637. 2011-06-29 12:31:36:688 1056 1bb8 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  638. 2011-06-29 12:31:36:692 1056 1bb8 Misc Microsoft signed: Yes
  639. 2011-06-29 12:31:36:697 1056 1bb8 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  640. 2011-06-29 12:31:36:697 1056 1bb8 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  641. 2011-06-29 12:31:38:454 1056 1120 AU Triggering Offline detection (non-interactive)
  642. 2011-06-29 12:31:38:454 1056 1120 AU #############
  643. 2011-06-29 12:31:38:454 1056 1120 AU ## START ## AU: Search for updates
  644. 2011-06-29 12:31:38:454 1056 1120 AU #########
  645. 2011-06-29 12:31:38:456 1056 1120 AU <<## SUBMITTED ## AU: Search for updates [CallId = {B668913F-2A4D-494A-8756-C1F610D02570}]
  646. 2011-06-29 12:31:38:456 1056 1bb8 Agent * Found 0 updates and 16 categories in search; evaluated appl. rules of 185 out of 591 deployed entities
  647. 2011-06-29 12:31:38:457 1056 1bb8 Agent *********
  648. 2011-06-29 12:31:38:457 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = ChkWuDrv]
  649. 2011-06-29 12:31:38:457 1056 1bb8 Agent *************
  650. 2011-06-29 12:31:38:459 1056 1bb8 Agent *************
  651. 2011-06-29 12:31:38:459 1056 1bb8 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
  652. 2011-06-29 12:31:38:459 1056 1bb8 Agent *********
  653. 2011-06-29 12:31:38:459 1056 1bb8 Agent * Online = No; Ignore download priority = No
  654. 2011-06-29 12:31:38:459 1056 1bb8 Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
  655. 2011-06-29 12:31:38:459 1056 1bb8 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
  656. 2011-06-29 12:31:38:459 1056 1bb8 Agent * Search Scope = {Machine}
  657. 2011-06-29 12:31:38:460 7140 1978 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = ChkWuDrv]
  658. 2011-06-29 12:31:38:461 7140 1978 COMAPI - Updates found = 0
  659. 2011-06-29 12:31:38:461 7140 1978 COMAPI ---------
  660. 2011-06-29 12:31:38:461 7140 1978 COMAPI -- END -- COMAPI: Search [ClientId = ChkWuDrv]
  661. 2011-06-29 12:31:38:461 7140 1978 COMAPI -------------
  662. 2011-06-29 12:31:39:083 1056 1bb8 Agent * Found 0 updates and 70 categories in search; evaluated appl. rules of 162 out of 1690 deployed entities
  663. 2011-06-29 12:31:39:083 1056 1bb8 Agent *********
  664. 2011-06-29 12:31:39:083 1056 1bb8 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
  665. 2011-06-29 12:31:39:083 1056 1bb8 Agent *************
  666. 2011-06-29 12:31:39:093 1056 1c84 AU >>## RESUMED ## AU: Search for updates [CallId = {B668913F-2A4D-494A-8756-C1F610D02570}]
  667. 2011-06-29 12:31:39:093 1056 1c84 AU # 0 updates detected
  668. 2011-06-29 12:31:39:094 1056 1c84 AU #########
  669. 2011-06-29 12:31:39:094 1056 1c84 AU ## END ## AU: Search for updates [CallId = {B668913F-2A4D-494A-8756-C1F610D02570}]
  670. 2011-06-29 12:31:39:094 1056 1c84 AU #############
  671. 2011-06-29 12:31:39:094 1056 1c84 AU Featured notifications is disabled.
  672. 2011-06-29 12:31:39:094 1056 1c84 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  673. 2011-06-29 12:31:39:094 1056 1c84 AU Successfully wrote event for AU health state:0
  674. 2011-06-29 12:31:39:095 1056 1c84 AU Successfully wrote event for AU health state:0
  675. 2011-06-29 12:31:43:456 1056 1bb8 Report REPORT EVENT: {A475F664-1D6F-4A0A-996A-402346C4D647} 2011-06-29 12:31:38:457-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 ChkWuDrv Success Software Synchronization Windows Update Client successfully detected 0 updates.
  676. 2011-06-29 12:31:43:456 1056 1bb8 Report CWERReporter finishing event handling. (00000000)
  677. 2011-06-29 12:36:09:633 1056 1bb8 Report Uploading 2 events using cached cookie, reporting URL = http://ourwsusserver/ReportingWebService/ReportingWebService.asmx
  678. 2011-06-29 12:36:09:657 1056 1bb8 Report Reporter successfully uploaded 2 events.
  679. 2011-06-29 14:29:56:183 1052 d40 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  680. 2011-06-29 14:29:56:199 1052 d40 Misc = Process: C:\Windows\system32\svchost.exe
  681. 2011-06-29 14:29:56:199 1052 d40 Misc = Module: c:\windows\system32\wuaueng.dll
  682. 2011-06-29 14:29:56:183 1052 d40 Service *************
  683. 2011-06-29 14:29:56:199 1052 d40 Service ** START ** Service: Service startup
  684. 2011-06-29 14:29:56:199 1052 d40 Service *********
  685. 2011-06-29 14:29:56:480 1052 d40 Agent * WU client version 7.5.7601.17514
  686. 2011-06-29 14:29:56:480 1052 d40 Agent * Base directory: C:\Windows\SoftwareDistribution
  687. 2011-06-29 14:29:56:480 1052 d40 Agent * Access type: No proxy
  688. 2011-06-29 14:29:56:480 1052 d40 Agent * Network state: Connected
  689. 2011-06-29 14:30:42:072 1052 d40 Report CWERReporter::Init succeeded
  690. 2011-06-29 14:30:42:072 1052 d40 Agent *********** Agent: Initializing Windows Update Agent ***********
  691. 2011-06-29 14:30:42:072 1052 d40 Agent *********** Agent: Initializing global settings cache ***********
  692. 2011-06-29 14:30:42:072 1052 d40 Agent * WSUS server: http://ourwsusserver
  693. 2011-06-29 14:30:42:072 1052 d40 Agent * WSUS status server: http://ourwsusserver
  694. 2011-06-29 14:30:42:072 1052 d40 Agent * Target group: IT
  695. 2011-06-29 14:30:42:072 1052 d40 Agent * Windows Update access disabled: No
  696. 2011-06-29 14:30:42:088 1052 d40 Agent * Found 1 persisted download calls to restore
  697. 2011-06-29 14:30:42:103 1052 d40 DnldMgr Download manager restoring 0 downloads
  698. 2011-06-29 14:30:42:103 1052 d40 Agent * Successfully loaded 1 persisted download calls.
  699. 2011-06-29 14:30:42:119 1052 d40 AU ########### AU: Initializing Automatic Updates ###########
  700. 2011-06-29 14:30:42:119 1052 d40 AU # WSUS server: http://ourwsusserver
  701. 2011-06-29 14:30:42:119 1052 d40 AU # Detection frequency: 22
  702. 2011-06-29 14:30:42:119 1052 d40 AU # Target group: IT
  703. 2011-06-29 14:30:42:119 1052 d40 AU # Approval type: Scheduled (Policy)
  704. 2011-06-29 14:30:42:119 1052 d40 AU # Scheduled install day/time: Every day at 12:00
  705. 2011-06-29 14:30:42:119 1052 d40 AU # Auto-install minor updates: Yes (Policy)
  706. 2011-06-29 14:30:42:134 1052 d40 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  707. 2011-06-29 14:30:42:337 1052 d40 Report *********** Report: Initializing static reporting data ***********
  708. 2011-06-29 14:30:42:337 1052 d40 Report * OS Version = 6.1.7601.1.0.65792
  709. 2011-06-29 14:30:42:337 1052 d40 Report * OS Product Type = 0x00000004
  710. 2011-06-29 14:30:42:353 1052 d40 Report * Computer Brand = Dell Inc.
  711. 2011-06-29 14:30:42:353 1052 d40 Report * Computer Model = Latitude E6400
  712. 2011-06-29 14:30:42:353 1052 d40 Report * Bios Revision = A26
  713. 2011-06-29 14:30:42:353 1052 d40 Report * Bios Name = Phoenix ROM BIOS PLUS Version 1.10 A26
  714. 2011-06-29 14:30:42:353 1052 d40 Report * Bios Release Date = 2010-07-30T00:00:00
  715. 2011-06-29 14:30:42:353 1052 d40 Report * Locale ID = 1033
  716. 2011-06-29 14:30:42:415 1052 d40 AU Successfully wrote event for AU health state:0
  717. 2011-06-29 14:30:42:415 1052 d40 AU Initializing featured updates
  718. 2011-06-29 14:30:42:415 1052 d40 AU Found 0 cached featured updates
  719. 2011-06-29 14:30:42:415 1052 d40 AU Successfully wrote event for AU health state:0
  720. 2011-06-29 14:30:42:415 1052 d40 AU Successfully wrote event for AU health state:0
  721. 2011-06-29 14:30:42:415 1052 d40 AU AU finished delayed initialization
  722. 2011-06-29 14:30:47:504 1052 e28 Report CWERReporter finishing event handling. (00000000)
  723. 2011-06-29 15:38:03:612 7592 1dac Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  724. 2011-06-29 15:38:03:613 7592 1dac Misc = Process: C:\Program Files\Microsoft System Center Online Client\SCOnlineClient.exe
  725. 2011-06-29 15:38:03:614 7592 1dac Misc = Module: C:\Windows\system32\wuapi.dll
  726. 2011-06-29 15:38:03:612 7592 1dac COMAPI -------------
  727. 2011-06-29 15:38:03:615 7592 1dac COMAPI -- START -- COMAPI: Search [ClientId = System Center Online Client]
  728. 2011-06-29 15:38:03:616 7592 1dac COMAPI ---------
  729. 2011-06-29 15:38:03:717 7592 1dac COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = System Center Online Client]
  730. 2011-06-29 15:38:03:717 1052 1e00 Agent *************
  731. 2011-06-29 15:38:03:768 1052 1e00 Agent ** START ** Agent: Finding updates [CallerId = System Center Online Client]
  732. 2011-06-29 15:38:03:768 1052 1e00 Agent *********
  733. 2011-06-29 15:38:03:768 1052 1e00 Agent * Online = Yes; Ignore download priority = No
  734. 2011-06-29 15:38:03:768 1052 1e00 Agent * Criteria = "IsInstalled=0 AND (CategoryIDs contains '236c566b-aaa6-482c-89a6-1e6c5cac6ed8')"
  735. 2011-06-29 15:38:03:768 1052 1e00 Agent * ServiceID = {00000000-0000-0000-0000-000000000000} Third party service
  736. 2011-06-29 15:38:03:768 1052 1e00 Agent * Search Scope = {Machine}
  737. 2011-06-29 15:38:03:959 1052 1e00 PT WARNING: Cached cookie has expired or new PID is available
  738. 2011-06-29 15:38:03:960 1052 1e00 PT Initializing simple targeting cookie, clientId = 680d53f3-c5f2-41c9-9aaf-d87398390887, target group = IT, DNS name = computername.fqdn
  739. 2011-06-29 15:38:03:960 1052 1e00 PT Server URL = http://ourwsusserver/SimpleAuthWebService/SimpleAuth.asmx
  740. 2011-06-29 15:38:06:257 1052 1e00 PT +++++++++++ PT: Starting category scan +++++++++++
  741. 2011-06-29 15:38:06:257 1052 1e00 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ourwsusserver/ClientWebService/client.asmx
  742. 2011-06-29 15:38:06:410 1052 1e00 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  743. 2011-06-29 15:38:06:410 1052 1e00 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://ourwsusserver/ClientWebService/client.asmx
  744. 2011-06-29 15:38:06:479 1052 1e00 Agent * Found 0 updates and 3 categories in search; evaluated appl. rules of 3 out of 3 deployed entities
  745. 2011-06-29 15:38:06:542 1052 1e00 Agent *********
  746. 2011-06-29 15:38:06:542 1052 1e00 Agent ** END ** Agent: Finding updates [CallerId = System Center Online Client]
  747. 2011-06-29 15:38:06:542 1052 1e00 Agent *************
  748. 2011-06-29 15:38:06:544 7592 1ddc COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = System Center Online Client]
  749. 2011-06-29 15:38:06:595 7592 1ddc COMAPI - Updates found = 0
  750. 2011-06-29 15:38:06:596 7592 1ddc COMAPI ---------
  751. 2011-06-29 15:38:06:597 7592 1ddc COMAPI -- END -- COMAPI: Search [ClientId = System Center Online Client]
  752. 2011-06-29 15:38:06:597 7592 1ddc COMAPI -------------
  753. 2011-06-29 15:38:06:601 7592 1dac COMAPI -------------
  754. 2011-06-29 15:38:06:602 7592 1dac COMAPI -- START -- COMAPI: Search [ClientId = System Center Online Client]
  755. 2011-06-29 15:38:06:603 7592 1dac COMAPI ---------
  756. 2011-06-29 15:38:06:606 1052 1e00 Agent *************
  757. 2011-06-29 15:38:06:606 1052 1e00 Agent ** START ** Agent: Finding updates [CallerId = System Center Online Client]
  758. 2011-06-29 15:38:06:606 7592 1dac COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = System Center Online Client]
  759. 2011-06-29 15:38:06:606 1052 1e00 Agent *********
  760. 2011-06-29 15:38:06:607 1052 1e00 Agent * Online = Yes; Ignore download priority = No
  761. 2011-06-29 15:38:06:607 1052 1e00 Agent * Criteria = "IsInstalled=0 AND (CategoryIDs contains '236c566b-aaa6-482c-89a6-1e6c5cac6ed8')"
  762. 2011-06-29 15:38:06:607 1052 1e00 Agent * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
  763. 2011-06-29 15:38:06:607 1052 1e00 Agent * Search Scope = {Machine}
  764. 2011-06-29 15:38:06:656 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  765. 2011-06-29 15:38:06:706 1052 1e00 Misc Microsoft signed: Yes
  766. 2011-06-29 15:38:09:113 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
  767. 2011-06-29 15:38:09:118 1052 1e00 Misc Microsoft signed: Yes
  768. 2011-06-29 15:38:09:148 1052 1e00 Agent Checking for updated auth cab for service 7971f918-a847-4430-9279-4a52d1efe18d at http://download.windowsupdate.com/v9/microsoftupdate/redir/muauth.cab
  769. 2011-06-29 15:38:09:148 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
  770. 2011-06-29 15:38:09:153 1052 1e00 Misc Microsoft signed: Yes
  771. 2011-06-29 15:38:09:249 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\AuthCabs\authcab.cab:
  772. 2011-06-29 15:38:09:253 1052 1e00 Misc Microsoft signed: Yes
  773. 2011-06-29 15:38:09:408 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
  774. 2011-06-29 15:38:09:419 1052 1e00 Misc Microsoft signed: Yes
  775. 2011-06-29 15:38:09:510 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
  776. 2011-06-29 15:38:09:514 1052 1e00 Misc Microsoft signed: Yes
  777. 2011-06-29 15:38:09:519 1052 1e00 PT +++++++++++ PT: Starting category scan +++++++++++
  778. 2011-06-29 15:38:09:519 1052 1e00 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  779. 2011-06-29 15:38:11:906 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
  780. 2011-06-29 15:38:11:910 1052 1e00 Misc Microsoft signed: Yes
  781. 2011-06-29 15:38:11:994 1052 1e00 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\muv4muredir.cab:
  782. 2011-06-29 15:38:11:998 1052 1e00 Misc Microsoft signed: Yes
  783. 2011-06-29 15:38:12:003 1052 1e00 PT +++++++++++ PT: Synchronizing server updates +++++++++++
  784. 2011-06-29 15:38:12:003 1052 1e00 PT + ServiceId = {7971F918-A847-4430-9279-4A52D1EFE18D}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
  785. 2011-06-29 15:38:12:322 1052 1e00 Agent * Found 0 updates and 3 categories in search; evaluated appl. rules of 8 out of 9 deployed entities
  786. 2011-06-29 15:38:12:324 1052 1e00 Agent *********
  787. 2011-06-29 15:38:12:324 1052 1e00 Agent ** END ** Agent: Finding updates [CallerId = System Center Online Client]
  788. 2011-06-29 15:38:12:324 1052 1e00 Agent *************
  789. 2011-06-29 15:38:12:324 7592 1de0 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = System Center Online Client]
  790. 2011-06-29 15:38:12:340 1052 1e00 Report REPORT EVENT: {BD2FFC35-5B9B-4259-9877-730122B2D316} 2011-06-29 15:38:06:542-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 System Center Online Client Success Software Synchronization Windows Update Client successfully detected 0 updates.
  791. 2011-06-29 15:38:12:375 7592 1de0 COMAPI - Updates found = 0
  792. 2011-06-29 15:38:12:396 1052 1e00 Report CWERReporter finishing event handling. (00000000)
  793. 2011-06-29 15:38:12:425 7592 1de0 COMAPI ---------
  794. 2011-06-29 15:38:12:476 7592 1de0 COMAPI -- END -- COMAPI: Search [ClientId = System Center Online Client]
  795. 2011-06-29 15:38:12:477 7592 1de0 COMAPI -------------
  796. 2011-06-29 15:38:17:324 1052 1e00 Report REPORT EVENT: {536CB791-EBD1-4A67-A111-005923EAA523} 2011-06-29 15:38:12:323-0400 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 System Center Online Client Success Software Synchronization Windows Update Client successfully detected 0 updates.
  797. 2011-06-29 15:38:17:324 1052 1e00 Report CWERReporter finishing event handling. (00000000)
  798. 2011-06-29 15:51:59:467 1052 1e00 Report Uploading 1 events using cached cookie, reporting URL = http://ourwsusserver/ReportingWebService/ReportingWebService.asmx
  799. 2011-06-29 15:51:59:472 1052 1e00 Report Reporter successfully uploaded 1 events.
  800. 2011-06-29 16:26:30:848 1052 d40 Shutdwn user declined update at shutdown
  801. 2011-06-29 16:26:30:848 1052 d40 AU Successfully wrote event for AU health state:0
  802. 2011-06-29 16:26:30:848 1052 d40 AU AU initiates service shutdown
  803. 2011-06-29 16:26:30:848 1052 d40 AU ########### AU: Uninitializing Automatic Updates ###########
  804. 2011-06-29 16:26:32:751 1052 d40 Report CWERReporter finishing event handling. (00000000)
  805. 2011-06-29 16:26:32:798 1052 d40 Service *********
  806. 2011-06-29 16:26:32:798 1052 d40 Service ** END ** Service: Service exit [Exit code = 0x240001]
  807. 2011-06-29 16:26:32:798 1052 d40 Service *************
  808. 2011-06-29 16:53:50:475 928 1230 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  809. 2011-06-29 16:53:50:810 928 1230 Misc = Process: C:\Windows\system32\svchost.exe
  810. 2011-06-29 16:53:51:310 928 1230 Misc = Module: c:\windows\system32\wuaueng.dll
  811. 2011-06-29 16:53:50:475 928 1230 Service *************
  812. 2011-06-29 16:53:52:054 928 1230 Service ** START ** Service: Service startup
  813. 2011-06-29 16:53:52:117 928 1230 Service *********
  814. 2011-06-29 16:53:52:444 928 1230 Agent * WU client version 7.5.7601.17514
  815. 2011-06-29 16:53:52:444 928 1230 Agent * Base directory: C:\Windows\SoftwareDistribution
  816. 2011-06-29 16:53:52:444 928 1230 Agent * Access type: No proxy
  817. 2011-06-29 16:53:52:444 928 1230 Agent * Network state: Connected
  818. 2011-06-29 16:54:52:093 928 1230 Report CWERReporter::Init succeeded
  819. 2011-06-29 16:54:52:093 928 1230 Agent *********** Agent: Initializing Windows Update Agent ***********
  820. 2011-06-29 16:54:52:093 928 1230 Agent *********** Agent: Initializing global settings cache ***********
  821. 2011-06-29 16:54:52:093 928 1230 Agent * WSUS server: http://ourwsusserver
  822. 2011-06-29 16:54:52:094 928 1230 Agent * WSUS status server: http://ourwsusserver
  823. 2011-06-29 16:54:52:094 928 1230 Agent * Target group: IT
  824. 2011-06-29 16:54:52:094 928 1230 Agent * Windows Update access disabled: No
  825. 2011-06-29 16:54:52:135 928 1230 Agent * Found 1 persisted download calls to restore
  826. 2011-06-29 16:54:52:161 928 1230 DnldMgr Download manager restoring 0 downloads
  827. 2011-06-29 16:54:52:161 928 1230 Agent * Successfully loaded 1 persisted download calls.
  828. 2011-06-29 16:54:52:184 928 1230 AU ########### AU: Initializing Automatic Updates ###########
  829. 2011-06-29 16:54:52:186 928 1230 AU # WSUS server: http://ourwsusserver
  830. 2011-06-29 16:54:52:186 928 1230 AU # Detection frequency: 22
  831. 2011-06-29 16:54:52:186 928 1230 AU # Target group: IT
  832. 2011-06-29 16:54:52:186 928 1230 AU # Approval type: Scheduled (Policy)
  833. 2011-06-29 16:54:52:186 928 1230 AU # Scheduled install day/time: Every day at 12:00
  834. 2011-06-29 16:54:52:187 928 1230 AU # Auto-install minor updates: Yes (Policy)
  835. 2011-06-29 16:54:52:205 928 1230 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  836. 2011-06-29 16:54:52:470 928 1230 Report *********** Report: Initializing static reporting data ***********
  837. 2011-06-29 16:54:52:470 928 1230 Report * OS Version = 6.1.7601.1.0.65792
  838. 2011-06-29 16:54:52:470 928 1230 Report * OS Product Type = 0x00000004
  839. 2011-06-29 16:54:52:484 928 1230 Report * Computer Brand = Dell Inc.
  840. 2011-06-29 16:54:52:484 928 1230 Report * Computer Model = Latitude E6400
  841. 2011-06-29 16:54:52:487 928 1230 Report * Bios Revision = A26
  842. 2011-06-29 16:54:52:487 928 1230 Report * Bios Name = Phoenix ROM BIOS PLUS Version 1.10 A26
  843. 2011-06-29 16:54:52:487 928 1230 Report * Bios Release Date = 2010-07-30T00:00:00
  844. 2011-06-29 16:54:52:487 928 1230 Report * Locale ID = 1033
  845. 2011-06-29 16:54:52:566 928 1230 AU Successfully wrote event for AU health state:0
  846. 2011-06-29 16:54:52:566 928 1230 AU Initializing featured updates
  847. 2011-06-29 16:54:52:566 928 1230 AU Found 0 cached featured updates
  848. 2011-06-29 16:54:52:567 928 1230 AU Successfully wrote event for AU health state:0
  849. 2011-06-29 16:54:52:568 928 1230 AU Successfully wrote event for AU health state:0
  850. 2011-06-29 16:54:52:568 928 1230 AU AU finished delayed initialization
  851. 2011-06-29 16:54:57:592 928 e68 Report CWERReporter finishing event handling. (00000000)
  852. 2011-06-29 17:22:36:470 928 1230 Shutdwn user declined update at shutdown
  853. 2011-06-29 17:22:36:470 928 1230 AU Successfully wrote event for AU health state:0
  854. 2011-06-29 17:22:36:470 928 1230 AU AU initiates service shutdown
  855. 2011-06-29 17:22:36:470 928 1230 AU ########### AU: Uninitializing Automatic Updates ###########
  856. 2011-06-29 17:22:38:046 928 1230 Report CWERReporter finishing event handling. (00000000)
  857. 2011-06-29 17:22:38:093 928 1230 Service *********
  858. 2011-06-29 17:22:38:093 928 1230 Service ** END ** Service: Service exit [Exit code = 0x240001]
  859. 2011-06-29 17:22:38:093 928 1230 Service *************
  860. 2011-06-29 21:47:28:152 1040 c70 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0400) ===========
  861. 2011-06-29 21:47:29:181 1040 c70 Misc = Process: C:\Windows\system32\svchost.exe
  862. 2011-06-29 21:47:29:688 1040 c70 Misc = Module: c:\windows\system32\wuaueng.dll
  863. 2011-06-29 21:47:28:152 1040 c70 Service *************
  864. 2011-06-29 21:47:30:641 1040 c70 Service ** START ** Service: Service startup
  865. 2011-06-29 21:47:30:692 1040 c70 Service *********
  866. 2011-06-29 21:47:31:105 1040 c70 Agent * WU client version 7.5.7601.17514
  867. 2011-06-29 21:47:31:107 1040 c70 Agent * Base directory: C:\Windows\SoftwareDistribution
  868. 2011-06-29 21:47:31:108 1040 c70 Agent * Access type: No proxy
  869. 2011-06-29 21:47:31:109 1040 c70 Agent * Network state: Connected
  870. 2011-06-29 21:48:17:009 1040 c70 Report CWERReporter::Init succeeded
  871. 2011-06-29 21:48:17:010 1040 c70 Agent *********** Agent: Initializing Windows Update Agent ***********
  872. 2011-06-29 21:48:17:010 1040 c70 Agent *********** Agent: Initializing global settings cache ***********
  873. 2011-06-29 21:48:17:010 1040 c70 Agent * WSUS server: http://ourwsusserver
  874. 2011-06-29 21:48:17:010 1040 c70 Agent * WSUS status server: http://ourwsusserver
  875. 2011-06-29 21:48:17:010 1040 c70 Agent * Target group: IT
  876. 2011-06-29 21:48:17:010 1040 c70 Agent * Windows Update access disabled: No
  877. 2011-06-29 21:48:17:044 1040 c70 Agent * Found 1 persisted download calls to restore
  878. 2011-06-29 21:48:17:070 1040 c70 DnldMgr Download manager restoring 0 downloads
  879. 2011-06-29 21:48:17:070 1040 c70 Agent * Successfully loaded 1 persisted download calls.
  880. 2011-06-29 21:48:17:085 1040 c70 AU ########### AU: Initializing Automatic Updates ###########
  881. 2011-06-29 21:48:17:086 1040 c70 AU # WSUS server: http://ourwsusserver
  882. 2011-06-29 21:48:17:086 1040 c70 AU # Detection frequency: 22
  883. 2011-06-29 21:48:17:086 1040 c70 AU # Target group: IT
  884. 2011-06-29 21:48:17:086 1040 c70 AU # Approval type: Scheduled (Policy)
  885. 2011-06-29 21:48:17:086 1040 c70 AU # Scheduled install day/time: Every day at 12:00
  886. 2011-06-29 21:48:17:086 1040 c70 AU # Auto-install minor updates: Yes (Policy)
  887. 2011-06-29 21:48:17:109 1040 c70 AU Setting AU scheduled install time to 2011-06-30 16:00:00
  888. 2011-06-29 21:48:18:096 1040 c70 Report *********** Report: Initializing static reporting data ***********
  889. 2011-06-29 21:48:18:096 1040 c70 Report * OS Version = 6.1.7601.1.0.65792
  890. 2011-06-29 21:48:18:096 1040 c70 Report * OS Product Type = 0x00000004
  891. 2011-06-29 21:48:18:109 1040 c70 Report * Computer Brand = Dell Inc.
  892. 2011-06-29 21:48:18:109 1040 c70 Report * Computer Model = Latitude E6400
  893. 2011-06-29 21:48:18:112 1040 c70 Report * Bios Revision = A26
  894. 2011-06-29 21:48:18:112 1040 c70 Report * Bios Name = Phoenix ROM BIOS PLUS Version 1.10 A26
  895. 2011-06-29 21:48:18:112 1040 c70 Report * Bios Release Date = 2010-07-30T00:00:00
  896. 2011-06-29 21:48:18:112 1040 c70 Report * Locale ID = 1033
  897. 2011-06-29 21:48:18:183 1040 c70 AU Successfully wrote event for AU health state:0
  898. 2011-06-29 21:48:18:183 1040 c70 AU Initializing featured updates
  899. 2011-06-29 21:48:18:183 1040 c70 AU Found 0 cached featured updates
  900. 2011-06-29 21:48:18:183 1040 c70 AU Successfully wrote event for AU health state:0
  901. 2011-06-29 21:48:18:184 1040 c70 AU Successfully wrote event for AU health state:0
  902. 2011-06-29 21:48:18:184 1040 c70 AU AU finished delayed initialization
  903. 2011-06-29 21:48:23:287 1040 a08 Report CWERReporter finishing event handling. (00000000)
  904. 2011-06-29 22:04:53:328 1040 c70 Shutdwn user declined update at shutdown
  905. 2011-06-29 22:04:53:328 1040 c70 AU Successfully wrote event for AU health state:0
  906. 2011-06-29 22:04:53:328 1040 c70 AU AU initiates service shutdown
  907. 2011-06-29 22:04:53:328 1040 c70 AU ########### AU: Uninitializing Automatic Updates ###########
  908. 2011-06-29 22:04:55:746 1040 c70 Report CWERReporter finishing event handling. (00000000)
  909. 2011-06-29 22:04:55:778 1040 c70 Service *********
  910. 2011-06-29 22:04:55:778 1040 c70 Service ** END ** Service: Service exit [Exit code = 0x240001]
  911. 2011-06-29 22:04:55:778 1040 c70 Service *************
  912. ######################### WindowsUpdate.log END #########################
  913.  
  914.  
  915. ######################### Application Log BEGIN #########################
  916. Level Date and Time Source Event ID Task Category
  917. Information 6/28/2011 2:53:17 PM Microsoft-Windows-User Profiles Service 1532 None "The description for Event ID 1532 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  918.  
  919. If the event originated on another computer, the display information had to be saved with the event.
  920.  
  921. The following information was included with the event:
  922.  
  923.  
  924. The handle is invalid
  925. "
  926. Error 6/28/2011 2:53:16 PM Sophos Anti-Virus 1 None "No versions of component 'MessageResDSFactory' are registered. MessageResDSFactory cannot be returned.
  927. "
  928. Error 6/28/2011 2:53:16 PM Sophos Anti-Virus 1 None "No versions of component 'MessageResDSFactory' are registered. MessageResDSFactory cannot be returned.
  929. "
  930. Warning 6/28/2011 2:53:12 PM Microsoft-Windows-User Profiles Service 1530 None "The description for Event ID 1530 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  931.  
  932. If the event originated on another computer, the display information had to be saved with the event.
  933.  
  934. The following information was included with the event:
  935.  
  936. 6 user registry handles leaked from \Registry\User\S-1-5-21-1343024091-725345543-839522115-27904:
  937. Process 612 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904
  938. Process 612 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904
  939. Process 680 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904
  940. Process 612 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904\Software\Microsoft\SystemCertificates\Disallowed
  941. Process 612 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904\Software\Microsoft\SystemCertificates\My
  942. Process 612 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904\Software\Microsoft\SystemCertificates\CA
  943.  
  944.  
  945. The handle is invalid
  946. "
  947. Information 6/28/2011 2:53:12 PM Microsoft-Windows-Winlogon 6000 None "The description for Event ID 6000 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  948.  
  949. If the event originated on another computer, the display information had to be saved with the event.
  950.  
  951. The following information was included with the event:
  952.  
  953. SessionEnv
  954.  
  955. The handle is invalid
  956. "
  957. Information 6/28/2011 2:53:12 PM Desktop Window Manager 9009 None "The description for Event ID 9009 from source Desktop Window Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  958.  
  959. If the event originated on another computer, the display information had to be saved with the event.
  960.  
  961. The following information was included with the event:
  962.  
  963. 0x40010004
  964.  
  965. The handle is invalid
  966. "
  967. Warning 6/28/2011 2:53:10 PM Application Virtualization Client 3219 (3) "The description for Event ID 3219 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  968.  
  969. If the event originated on another computer, the display information had to be saved with the event.
  970.  
  971. The following information was included with the event:
  972.  
  973. {tid=544}
  974.  
  975. 997
  976.  
  977. The handle is invalid
  978. "
  979. Information 6/28/2011 2:30:05 PM Microsoft-Windows-RestartManager 10001 None "The description for Event ID 10001 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  980.  
  981. If the event originated on another computer, the display information had to be saved with the event.
  982.  
  983. The following information was included with the event:
  984.  
  985. 0
  986. 6/28/2011 6:30:02 PM
  987.  
  988. The handle is invalid
  989. "
  990. Information 6/28/2011 2:30:05 PM MsiInstaller 1042 None "The description for Event ID 1042 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  991.  
  992. If the event originated on another computer, the display information had to be saved with the event.
  993.  
  994. The following information was included with the event:
  995.  
  996. \\SOMESERVER01\npc\install\Advantage_NPC_1.53.2.msi
  997. 2184
  998. (NULL)
  999. (NULL)
  1000. (NULL)
  1001. (NULL)
  1002.  
  1003. The handle is invalid
  1004. "
  1005. Information 6/28/2011 2:30:05 PM MsiInstaller 1033 None "The description for Event ID 1033 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1006.  
  1007. If the event originated on another computer, the display information had to be saved with the event.
  1008.  
  1009. The following information was included with the event:
  1010.  
  1011. Advantage NPC 1.53.2
  1012. 1.53.2
  1013. 1033
  1014. 0
  1015. Advanced Professional Solutions Pty Ltd
  1016. (NULL)
  1017.  
  1018. The handle is invalid
  1019. "
  1020. Information 6/28/2011 2:30:05 PM MsiInstaller 11707 None "The description for Event ID 11707 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1021.  
  1022. If the event originated on another computer, the display information had to be saved with the event.
  1023.  
  1024. The following information was included with the event:
  1025.  
  1026. Product: Advantage NPC 1.53.2 -- Installation operation completed successfully.
  1027. (NULL)
  1028. (NULL)
  1029. (NULL)
  1030. (NULL)
  1031. (NULL)
  1032.  
  1033. The handle is invalid
  1034. "
  1035. Information 6/28/2011 2:30:02 PM Microsoft-Windows-RestartManager 10000 None "The description for Event ID 10000 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1036.  
  1037. If the event originated on another computer, the display information had to be saved with the event.
  1038.  
  1039. The following information was included with the event:
  1040.  
  1041. 0
  1042. 6/28/2011 6:30:02 PM
  1043.  
  1044. The handle is invalid
  1045. "
  1046. Information 6/28/2011 2:30:02 PM MsiInstaller 1040 None "The description for Event ID 1040 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1047.  
  1048. If the event originated on another computer, the display information had to be saved with the event.
  1049.  
  1050. The following information was included with the event:
  1051.  
  1052. \\SOMESERVER01\npc\install\Advantage_NPC_1.53.2.msi
  1053. 2184
  1054. (NULL)
  1055. (NULL)
  1056. (NULL)
  1057. (NULL)
  1058.  
  1059. The handle is invalid
  1060. "
  1061. Information 6/28/2011 1:13:24 PM Windows Error Reporting 1001 None "The description for Event ID 1001 from source Windows Error Reporting cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1062.  
  1063. If the event originated on another computer, the display information had to be saved with the event.
  1064.  
  1065. The following information was included with the event:
  1066.  
  1067. 0
  1068. APPCRASH
  1069. Not available
  1070. 0
  1071. token.exe
  1072. 2.4.1.4004
  1073. 4dcd86bf
  1074. ntdll.dll
  1075. 6.1.7601.17514
  1076. 4ce7b96e
  1077. c0000005
  1078. 00056ae5
  1079. C:\Users\username\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_token.exe_7f5b71fcb9d67cd2d2c83aab9ef81f4f33b2737_126215f1
  1080. 0
  1081. ed0a683c-a1a9-11e0-945d-005056c00008
  1082. 0
  1083.  
  1084. The handle is invalid
  1085. "
  1086. Error 6/28/2011 1:13:22 PM Application Error 1000 (100) "The description for Event ID 1000 from source Application Error cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1087.  
  1088. If the event originated on another computer, the display information had to be saved with the event.
  1089.  
  1090. The following information was included with the event:
  1091.  
  1092. token.exe
  1093. 2.4.1.4004
  1094. 4dcd86bf
  1095. ntdll.dll
  1096. 6.1.7601.17514
  1097. 4ce7b96e
  1098. c0000005
  1099. 00056ae5
  1100. 1140
  1101. 01cc35afa0060c49
  1102. C:\Program Files\CRYPTOCard\BlackShield ID\Software Tools\token.exe
  1103. C:\Windows\SYSTEM32\ntdll.dll
  1104. ed0a683c-a1a9-11e0-945d-005056c00008
  1105.  
  1106. The handle is invalid
  1107. "
  1108. Information 6/28/2011 12:34:03 PM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1109.  
  1110. If the event originated on another computer, the display information had to be saved with the event.
  1111.  
  1112. The following information was included with the event:
  1113.  
  1114. Service stopped
  1115. "
  1116. Information 6/28/2011 12:34:00 PM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1117.  
  1118. If the event originated on another computer, the display information had to be saved with the event.
  1119.  
  1120. The following information was included with the event:
  1121.  
  1122. Service started
  1123. "
  1124. Information 6/28/2011 11:35:10 AM Microsoft-Windows-Security-SPP 903 None "The description for Event ID 903 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1125.  
  1126. If the event originated on another computer, the display information had to be saved with the event.
  1127.  
  1128. The following information was included with the event:
  1129.  
  1130.  
  1131. The handle is invalid
  1132. "
  1133. Information 6/28/2011 11:35:10 AM Microsoft-Windows-Security-SPP 16384 None "The description for Event ID 16384 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1134.  
  1135. If the event originated on another computer, the display information had to be saved with the event.
  1136.  
  1137. The following information was included with the event:
  1138.  
  1139. 2011-07-04T12:37:09Z
  1140. GVLK
  1141.  
  1142. The handle is invalid
  1143. "
  1144. Information 6/28/2011 11:30:09 AM Microsoft-Windows-Security-SPP 902 None "The description for Event ID 902 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1145.  
  1146. If the event originated on another computer, the display information had to be saved with the event.
  1147.  
  1148. The following information was included with the event:
  1149.  
  1150. 6.1.7601.17514
  1151.  
  1152. The handle is invalid
  1153. "
  1154. Information 6/28/2011 11:30:09 AM Microsoft-Windows-Security-SPP 1003 None "The description for Event ID 1003 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1155.  
  1156. If the event originated on another computer, the display information had to be saved with the event.
  1157.  
  1158. The following information was included with the event:
  1159.  
  1160. 55c92734-d682-4d71-983e-d6ec3f16059f
  1161.  
  1162. 1: 358fb95b-0090-44fb-883a-75734e060c30, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1163. 2: 4f00134f-b514-4626-a74b-a8ec7c8dfe92, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1164. 3: 8dffd6e4-0497-4c35-b7d7-e47cf464cf30, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1165. 4: 92f9d22a-65f5-49a7-90fe-06491b4fc379, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1166. 5: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1167. 6: ae2ee509-1b34-41c0-acb7-6d4650168915, 1, 1 [(0 [0x00000000, 1, 0], [( 2 0xC004F005)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 257640)(?)(?)(?)])(1 )(2 )]
  1168. 7: b793ff2d-9d80-407c-b521-85111c51028c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1169. 8: cff07cac-7534-4cc3-b3f3-99e1a0aa3c20, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1170. 9: d188820a-cb63-4bad-a9a2-40b843ee23b7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1171. 10: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1172. 11: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  1173.  
  1174.  
  1175.  
  1176. The handle is invalid
  1177. "
  1178. Information 6/28/2011 11:30:08 AM Microsoft-Windows-Security-SPP 1066 None "The description for Event ID 1066 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1179.  
  1180. If the event originated on another computer, the display information had to be saved with the event.
  1181.  
  1182. The following information was included with the event:
  1183.  
  1184. C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
  1185. C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
  1186. C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
  1187. C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
  1188. C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
  1189. C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000
  1190.  
  1191.  
  1192. The handle is invalid
  1193. "
  1194. Information 6/28/2011 11:30:06 AM SecurityCenter 1 None The Windows Security Center Service has started.
  1195. Information 6/28/2011 11:30:05 AM Microsoft-Windows-Security-SPP 900 None "The description for Event ID 900 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1196.  
  1197. If the event originated on another computer, the display information had to be saved with the event.
  1198.  
  1199. The following information was included with the event:
  1200.  
  1201.  
  1202. The handle is invalid
  1203. "
  1204. Information 6/28/2011 11:29:49 AM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1205.  
  1206. If the event originated on another computer, the display information had to be saved with the event.
  1207.  
  1208. The following information was included with the event:
  1209.  
  1210. Service stopped
  1211. "
  1212. Information 6/28/2011 11:29:49 AM Microsoft-Windows-Search 1003 Search service "The description for Event ID 1003 from source Microsoft-Windows-Search cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1213.  
  1214. If the event originated on another computer, the display information had to be saved with the event.
  1215.  
  1216. The following information was included with the event:
  1217.  
  1218.  
  1219.  
  1220.  
  1221. The handle is invalid
  1222. "
  1223. Information 6/28/2011 11:28:59 AM ESENT 302 Logging/Recovery "The description for Event ID 302 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1224.  
  1225. If the event originated on another computer, the display information had to be saved with the event.
  1226.  
  1227. The following information was included with the event:
  1228.  
  1229. Windows
  1230. 5208
  1231. Windows:
  1232.  
  1233. The handle is invalid
  1234. "
  1235. Information 6/28/2011 11:28:49 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1236.  
  1237. If the event originated on another computer, the display information had to be saved with the event.
  1238.  
  1239. The following information was included with the event:
  1240.  
  1241. Windows
  1242. 5208
  1243. Windows:
  1244. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log
  1245.  
  1246. The handle is invalid
  1247. "
  1248. Information 6/28/2011 11:28:38 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1249.  
  1250. If the event originated on another computer, the display information had to be saved with the event.
  1251.  
  1252. The following information was included with the event:
  1253.  
  1254. Windows
  1255. 5208
  1256. Windows:
  1257. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00DE4.log
  1258.  
  1259. The handle is invalid
  1260. "
  1261. Information 6/28/2011 11:28:17 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1262.  
  1263. If the event originated on another computer, the display information had to be saved with the event.
  1264.  
  1265. The following information was included with the event:
  1266.  
  1267. Windows
  1268. 5208
  1269. Windows:
  1270. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00DE3.log
  1271.  
  1272. The handle is invalid
  1273. "
  1274. Information 6/28/2011 11:28:17 AM ESENT 300 Logging/Recovery "The description for Event ID 300 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1275.  
  1276. If the event originated on another computer, the display information had to be saved with the event.
  1277.  
  1278. The following information was included with the event:
  1279.  
  1280. Windows
  1281. 5208
  1282. Windows:
  1283.  
  1284. The handle is invalid
  1285. "
  1286. Information 6/28/2011 11:28:17 AM ESENT 102 General "The description for Event ID 102 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1287.  
  1288. If the event originated on another computer, the display information had to be saved with the event.
  1289.  
  1290. The following information was included with the event:
  1291.  
  1292. Windows
  1293. 5208
  1294. Windows:
  1295. 0
  1296. 6
  1297. 01
  1298. 7601
  1299. 0000
  1300.  
  1301. The handle is invalid
  1302. "
  1303. Information 6/28/2011 11:27:39 AM Application Virtualization Client 2001 None "The description for Event ID 2001 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1304.  
  1305. If the event originated on another computer, the display information had to be saved with the event.
  1306.  
  1307. The following information was included with the event:
  1308.  
  1309.  
  1310. The handle is invalid
  1311. "
  1312. Warning 6/28/2011 11:27:39 AM Application Virtualization Client 3057 (6) "The description for Event ID 3057 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1313.  
  1314. If the event originated on another computer, the display information had to be saved with the event.
  1315.  
  1316. The following information was included with the event:
  1317.  
  1318. {tid=EAC}
  1319.  
  1320. Microsoft Application Virtualization Desktop Client
  1321. 4.6.0.1523
  1322. C:\Program Files\Microsoft Application Virtualization Client
  1323. C:\ProgramData\Microsoft\Application Virtualization Client\
  1324. DC-E64-DMYK4K1
  1325. Windows 7 32-bit Service Pack 1.0 Build 7601
  1326.  
  1327. The handle is invalid
  1328. "
  1329. Warning 6/28/2011 11:27:37 AM Application Virtualization Client 3191 (3) "The description for Event ID 3191 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1330.  
  1331. If the event originated on another computer, the display information had to be saved with the event.
  1332.  
  1333. The following information was included with the event:
  1334.  
  1335. {tid=EAC}
  1336.  
  1337. C:\ProgramData\Microsoft\Application Virtualization Client\sftlog.txt
  1338.  
  1339. The handle is invalid
  1340. "
  1341. Information 6/28/2011 11:27:37 AM sftvsa 0 None "The description for Event ID 0 from source sftvsa cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1342.  
  1343. If the event originated on another computer, the display information had to be saved with the event.
  1344.  
  1345. The following information was included with the event:
  1346.  
  1347. Service started
  1348. "
  1349. Information 6/28/2011 11:27:27 AM Microsoft-Windows-CertificateServicesClient-CertEnroll 64 None Certificate enrollment for domain\username successfully load policy from policy server
  1350. Information 6/28/2011 11:27:27 AM Microsoft-Windows-CertificateServicesClient-CertEnroll 65 None Certificate enrollment for domain\username is successfully authenticated by policy server {F87257BD-A8A9-4F39-BE7C-28BA3959000C}
  1351. Information 6/28/2011 11:27:25 AM Microsoft-Windows-Winlogon 6000 None "The description for Event ID 6000 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1352.  
  1353. If the event originated on another computer, the display information had to be saved with the event.
  1354.  
  1355. The following information was included with the event:
  1356.  
  1357. SessionEnv
  1358.  
  1359. The handle is invalid
  1360. "
  1361. Information 6/28/2011 11:27:25 AM Microsoft-Windows-Winlogon 4101 None "The description for Event ID 4101 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1362.  
  1363. If the event originated on another computer, the display information had to be saved with the event.
  1364.  
  1365. The following information was included with the event:
  1366.  
  1367. 0x00000000
  1368. 0x00000001
  1369.  
  1370. The handle is invalid
  1371. "
  1372. Warning 6/28/2011 11:27:04 AM Microsoft-Windows-CertificateServicesClient-AutoEnrollment 64 None "The description for Event ID 64 from source Microsoft-Windows-CertificateServicesClient-AutoEnrollment cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1373.  
  1374. If the event originated on another computer, the display information had to be saved with the event.
  1375.  
  1376. The following information was included with the event:
  1377.  
  1378. local system
  1379. cc a5 c6 2e ef 91 4f 54 e4 c2 b2 de b2 51 51 fd 81 24 4e 41
  1380.  
  1381. The handle is invalid
  1382. "
  1383. Information 6/28/2011 11:26:57 AM Microsoft-Windows-WMI 5617 None "The description for Event ID 5617 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1384.  
  1385. If the event originated on another computer, the display information had to be saved with the event.
  1386.  
  1387. The following information was included with the event:
  1388.  
  1389.  
  1390. The handle is invalid
  1391. "
  1392. Information 6/28/2011 11:26:56 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1393.  
  1394. If the event originated on another computer, the display information had to be saved with the event.
  1395.  
  1396. The following information was included with the event:
  1397.  
  1398. WLIDInitializationTimerQueue. QueueWorkItem started (26:56:362)
  1399. "
  1400. Information 6/28/2011 11:26:56 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1401.  
  1402. If the event originated on another computer, the display information had to be saved with the event.
  1403.  
  1404. The following information was included with the event:
  1405.  
  1406. g_ WLIDInitializationTimerQueue.Initialize started (26:56:362)
  1407. "
  1408. Information 6/28/2011 11:26:56 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1409.  
  1410. If the event originated on another computer, the display information had to be saved with the event.
  1411.  
  1412. The following information was included with the event:
  1413.  
  1414. g_WLIDTimerQueue.Initialize started (26:56:362)
  1415. "
  1416. Information 6/28/2011 11:26:55 AM Microsoft-Windows-WMI 5615 None "The description for Event ID 5615 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1417.  
  1418. If the event originated on another computer, the display information had to be saved with the event.
  1419.  
  1420. The following information was included with the event:
  1421.  
  1422.  
  1423. The handle is invalid
  1424. "
  1425. Information 6/28/2011 11:26:55 AM VMware NAT Service 1000 None "The description for Event ID 1000 from source VMware NAT Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1426.  
  1427. If the event originated on another computer, the display information had to be saved with the event.
  1428.  
  1429. The following information was included with the event:
  1430.  
  1431. Using configuration file: C:\ProgramData\VMware\vmnetnat.conf.
  1432. IP address: 192.168.117.2
  1433. Subnet: 255.255.255.0
  1434. External IP address: 0.0.0.0
  1435. Device: vmnet8.
  1436. MAC address: 00:50:56:ED:62:6F.
  1437. Ignoring host MAC address: 00:50:56:C0:00:08.
  1438.  
  1439.  
  1440. The handle is invalid
  1441. "
  1442. Information 6/28/2011 11:26:55 AM VMware NAT Service 1000 None "The description for Event ID 1000 from source VMware NAT Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1443.  
  1444. If the event originated on another computer, the display information had to be saved with the event.
  1445.  
  1446. The following information was included with the event:
  1447.  
  1448. Service started
  1449.  
  1450. The handle is invalid
  1451. "
  1452. Information 6/28/2011 11:26:53 AM btwdins 0 None "The description for Event ID 0 from source btwdins cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1453.  
  1454. If the event originated on another computer, the display information had to be saved with the event.
  1455.  
  1456. The following information was included with the event:
  1457.  
  1458. Service started
  1459. "
  1460. Information 6/28/2011 11:26:39 AM Microsoft-Windows-User Profiles Service 1531 None "The description for Event ID 1531 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1461.  
  1462. If the event originated on another computer, the display information had to be saved with the event.
  1463.  
  1464. The following information was included with the event:
  1465.  
  1466.  
  1467. The handle is invalid
  1468. "
  1469. Information 6/28/2011 11:26:39 AM Microsoft-Windows-EventSystem 4625 None "The description for Event ID 4625 from source Microsoft-Windows-EventSystem cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1470.  
  1471. If the event originated on another computer, the display information had to be saved with the event.
  1472.  
  1473. The following information was included with the event:
  1474.  
  1475. 86400
  1476. SuppressDuplicateDuration
  1477. Software\Microsoft\EventSystem\EventLog
  1478.  
  1479. The handle is invalid
  1480. "
  1481. Information 6/28/2011 11:25:49 AM Microsoft-Windows-User Profiles Service 1532 None "The description for Event ID 1532 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1482.  
  1483. If the event originated on another computer, the display information had to be saved with the event.
  1484.  
  1485. The following information was included with the event:
  1486.  
  1487.  
  1488. The handle is invalid
  1489. "
  1490. Warning 6/28/2011 11:25:42 AM Microsoft-Windows-User Profiles Service 1530 None "The description for Event ID 1530 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1491.  
  1492. If the event originated on another computer, the display information had to be saved with the event.
  1493.  
  1494. The following information was included with the event:
  1495.  
  1496. 1 user registry handles leaked from \Registry\User\S-1-5-21-1343024091-725345543-839522115-27904:
  1497. Process 636 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904
  1498.  
  1499.  
  1500. The handle is invalid
  1501. "
  1502. Information 6/28/2011 11:25:42 AM Microsoft-Windows-Winlogon 6000 None "The description for Event ID 6000 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1503.  
  1504. If the event originated on another computer, the display information had to be saved with the event.
  1505.  
  1506. The following information was included with the event:
  1507.  
  1508. SessionEnv
  1509.  
  1510. The handle is invalid
  1511. "
  1512. Information 6/28/2011 11:25:42 AM Desktop Window Manager 9009 None "The description for Event ID 9009 from source Desktop Window Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1513.  
  1514. If the event originated on another computer, the display information had to be saved with the event.
  1515.  
  1516. The following information was included with the event:
  1517.  
  1518. 0x40010004
  1519.  
  1520. The handle is invalid
  1521. "
  1522. Warning 6/28/2011 11:25:39 AM Application Virtualization Client 3219 (3) "The description for Event ID 3219 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1523.  
  1524. If the event originated on another computer, the display information had to be saved with the event.
  1525.  
  1526. The following information was included with the event:
  1527.  
  1528. {tid=684}
  1529.  
  1530. 997
  1531.  
  1532. The handle is invalid
  1533. "
  1534. Information 6/28/2011 11:25:10 AM Microsoft-Windows-RestartManager 10001 None "The description for Event ID 10001 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1535.  
  1536. If the event originated on another computer, the display information had to be saved with the event.
  1537.  
  1538. The following information was included with the event:
  1539.  
  1540. 0
  1541. 6/28/2011 3:24:16 PM
  1542.  
  1543. The handle is invalid
  1544. "
  1545. Information 6/28/2011 11:25:09 AM Microsoft-Windows-LoadPerf 1002 None "The description for Event ID 1002 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1546.  
  1547. If the event originated on another computer, the display information had to be saved with the event.
  1548.  
  1549. The following information was included with the event:
  1550.  
  1551. .NET Data Provider for Oracle
  1552. .NET Data Provider for Oracle
  1553. 4
  1554.  
  1555. The handle is invalid
  1556. "
  1557. Information 6/28/2011 11:25:10 AM MsiInstaller 1042 None "The description for Event ID 1042 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1558.  
  1559. If the event originated on another computer, the display information had to be saved with the event.
  1560.  
  1561. The following information was included with the event:
  1562.  
  1563. C:\Windows\Installer\45133c.msi
  1564. 5864
  1565. (NULL)
  1566. (NULL)
  1567. (NULL)
  1568. (NULL)
  1569.  
  1570. The handle is invalid
  1571. "
  1572. Information 6/28/2011 11:25:10 AM MsiInstaller 1035 None "The description for Event ID 1035 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1573.  
  1574. If the event originated on another computer, the display information had to be saved with the event.
  1575.  
  1576. The following information was included with the event:
  1577.  
  1578. Microsoft .NET Framework 4 Extended
  1579. 4.0.30320
  1580. 0
  1581. 0
  1582. Microsoft Corporation
  1583. (NULL)
  1584.  
  1585. The handle is invalid
  1586. "
  1587. Information 6/28/2011 11:25:10 AM MsiInstaller 11728 None "The description for Event ID 11728 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1588.  
  1589. If the event originated on another computer, the display information had to be saved with the event.
  1590.  
  1591. The following information was included with the event:
  1592.  
  1593. Product: Microsoft .NET Framework 4 Extended -- Configuration completed successfully.
  1594. (NULL)
  1595. (NULL)
  1596. (NULL)
  1597. (NULL)
  1598. (NULL)
  1599.  
  1600. The handle is invalid
  1601. "
  1602. Information 6/28/2011 11:25:10 AM MsiInstaller 1036 None "The description for Event ID 1036 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1603.  
  1604. If the event originated on another computer, the display information had to be saved with the event.
  1605.  
  1606. The following information was included with the event:
  1607.  
  1608. Microsoft .NET Framework 4 Extended
  1609. 4.0.30320
  1610. 0
  1611. KB971891
  1612. 0
  1613. Microsoft Corporation
  1614.  
  1615. The handle is invalid
  1616. "
  1617. Information 6/28/2011 11:25:10 AM MsiInstaller 1022 None "The description for Event ID 1022 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1618.  
  1619. If the event originated on another computer, the display information had to be saved with the event.
  1620.  
  1621. The following information was included with the event:
  1622.  
  1623. Microsoft .NET Framework 4 Extended
  1624. KB971891
  1625. (NULL)
  1626. (NULL)
  1627. (NULL)
  1628. (NULL)
  1629.  
  1630. The handle is invalid
  1631. "
  1632. Information 6/28/2011 11:24:51 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1633.  
  1634. If the event originated on another computer, the display information had to be saved with the event.
  1635.  
  1636. The following information was included with the event:
  1637.  
  1638. ASP.NET
  1639. ASP.NET
  1640. 16
  1641.  
  1642. The handle is invalid
  1643. "
  1644. Information 6/28/2011 11:24:51 AM ASP.NET 4.0.30319.0 1019 Setup "The description for Event ID 1019 from source ASP.NET 4.0.30319.0 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1645.  
  1646. If the event originated on another computer, the display information had to be saved with the event.
  1647.  
  1648. The following information was included with the event:
  1649.  
  1650. 4.0.30319.0
  1651. C:\Users\username\AppData\Local\Temp\ASPNETSetup_00000.log
  1652.  
  1653. The handle is invalid
  1654. "
  1655. Warning 6/28/2011 11:24:51 AM ASP.NET 4.0.30319.0 1064 Setup "The description for Event ID 1064 from source ASP.NET 4.0.30319.0 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1656.  
  1657. If the event originated on another computer, the display information had to be saved with the event.
  1658.  
  1659. The following information was included with the event:
  1660.  
  1661. C:\inetpub\wwwroot\aspnet_client
  1662. 80070003
  1663.  
  1664. The handle is invalid
  1665. "
  1666. Information 6/28/2011 11:24:49 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1667.  
  1668. If the event originated on another computer, the display information had to be saved with the event.
  1669.  
  1670. The following information was included with the event:
  1671.  
  1672. ASP.NET
  1673. ASP.NET
  1674. 12
  1675.  
  1676. The handle is invalid
  1677. "
  1678. Information 6/28/2011 11:24:49 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1679.  
  1680. If the event originated on another computer, the display information had to be saved with the event.
  1681.  
  1682. The following information was included with the event:
  1683.  
  1684. ASP.NET_4.0.30319
  1685. ASP.NET_4.0.30319
  1686. 16
  1687.  
  1688. The handle is invalid
  1689. "
  1690. Information 6/28/2011 11:24:46 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1691.  
  1692. If the event originated on another computer, the display information had to be saved with the event.
  1693.  
  1694. The following information was included with the event:
  1695.  
  1696. aspnet_state
  1697. ASP.NET State Service
  1698. 16
  1699.  
  1700. The handle is invalid
  1701. "
  1702. Information 6/28/2011 11:24:46 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1703.  
  1704. If the event originated on another computer, the display information had to be saved with the event.
  1705.  
  1706. The following information was included with the event:
  1707.  
  1708. aspnet_state
  1709. ASP.NET State Service
  1710. 12
  1711.  
  1712. The handle is invalid
  1713. "
  1714. Information 6/28/2011 11:24:45 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1715.  
  1716. If the event originated on another computer, the display information had to be saved with the event.
  1717.  
  1718. The following information was included with the event:
  1719.  
  1720. ASP.NET_4.0.30319
  1721. ASP.NET_4.0.30319
  1722. 12
  1723.  
  1724. The handle is invalid
  1725. "
  1726. Information 6/28/2011 11:24:44 AM ASP.NET 4.0.30319.0 1017 Setup "The description for Event ID 1017 from source ASP.NET 4.0.30319.0 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1727.  
  1728. If the event originated on another computer, the display information had to be saved with the event.
  1729.  
  1730. The following information was included with the event:
  1731.  
  1732. 4.0.30319.0
  1733. 0x00000404
  1734.  
  1735. The handle is invalid
  1736. "
  1737. Information 6/28/2011 11:24:35 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1738.  
  1739. If the event originated on another computer, the display information had to be saved with the event.
  1740.  
  1741. The following information was included with the event:
  1742.  
  1743. Windows Workflow Foundation 4.0.0.0
  1744. Windows Workflow Foundation 4.0.0.0
  1745. 16
  1746.  
  1747. The handle is invalid
  1748. "
  1749. Information 6/28/2011 11:24:35 AM Microsoft-Windows-LoadPerf 1002 None "The description for Event ID 1002 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1750.  
  1751. If the event originated on another computer, the display information had to be saved with the event.
  1752.  
  1753. The following information was included with the event:
  1754.  
  1755. .NET Memory Cache 4.0
  1756. .NET Memory Cache 4.0
  1757. 4
  1758.  
  1759. The handle is invalid
  1760. "
  1761. Information 6/28/2011 11:24:26 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1762.  
  1763. If the event originated on another computer, the display information had to be saved with the event.
  1764.  
  1765. The following information was included with the event:
  1766.  
  1767. Windows Workflow Foundation 4.0.0.0
  1768. Windows Workflow Foundation 4.0.0.0
  1769. 12
  1770.  
  1771. The handle is invalid
  1772. "
  1773. Information 6/28/2011 11:24:16 AM Microsoft-Windows-RestartManager 10000 None "The description for Event ID 10000 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1774.  
  1775. If the event originated on another computer, the display information had to be saved with the event.
  1776.  
  1777. The following information was included with the event:
  1778.  
  1779. 0
  1780. 6/28/2011 3:24:16 PM
  1781.  
  1782. The handle is invalid
  1783. "
  1784. Information 6/28/2011 11:24:15 AM Microsoft-Windows-RestartManager 10001 None "The description for Event ID 10001 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1785.  
  1786. If the event originated on another computer, the display information had to be saved with the event.
  1787.  
  1788. The following information was included with the event:
  1789.  
  1790. 1
  1791. 6/28/2011 3:20:39 PM
  1792.  
  1793. The handle is invalid
  1794. "
  1795. Information 6/28/2011 11:24:15 AM Microsoft-Windows-RestartManager 10001 None "The description for Event ID 10001 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1796.  
  1797. If the event originated on another computer, the display information had to be saved with the event.
  1798.  
  1799. The following information was included with the event:
  1800.  
  1801. 0
  1802. 6/28/2011 3:20:20 PM
  1803.  
  1804. The handle is invalid
  1805. "
  1806. Information 6/28/2011 11:24:15 AM MsiInstaller 1040 None "The description for Event ID 1040 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1807.  
  1808. If the event originated on another computer, the display information had to be saved with the event.
  1809.  
  1810. The following information was included with the event:
  1811.  
  1812. C:\Windows\Installer\45133c.msi
  1813. 5864
  1814. (NULL)
  1815. (NULL)
  1816. (NULL)
  1817. (NULL)
  1818.  
  1819. The handle is invalid
  1820. "
  1821. Information 6/28/2011 11:24:15 AM MsiInstaller 1042 None "The description for Event ID 1042 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1822.  
  1823. If the event originated on another computer, the display information had to be saved with the event.
  1824.  
  1825. The following information was included with the event:
  1826.  
  1827. C:\Windows\Installer\451337.msi
  1828. 5864
  1829. (NULL)
  1830. (NULL)
  1831. (NULL)
  1832. (NULL)
  1833.  
  1834. The handle is invalid
  1835. "
  1836. Information 6/28/2011 11:24:15 AM MsiInstaller 1029 None "The description for Event ID 1029 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1837.  
  1838. If the event originated on another computer, the display information had to be saved with the event.
  1839.  
  1840. The following information was included with the event:
  1841.  
  1842. Microsoft .NET Framework 4 Client Profile
  1843. (NULL)
  1844. (NULL)
  1845. (NULL)
  1846. (NULL)
  1847. (NULL)
  1848.  
  1849. The handle is invalid
  1850. "
  1851. Information 6/28/2011 11:24:15 AM MsiInstaller 1038 None "The description for Event ID 1038 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1852.  
  1853. If the event originated on another computer, the display information had to be saved with the event.
  1854.  
  1855. The following information was included with the event:
  1856.  
  1857. Microsoft .NET Framework 4 Client Profile
  1858. 4.0.30320
  1859. 0
  1860. 2
  1861. 1
  1862. Microsoft Corporation
  1863.  
  1864. The handle is invalid
  1865. "
  1866. Information 6/28/2011 11:24:15 AM MsiInstaller 1035 None "The description for Event ID 1035 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1867.  
  1868. If the event originated on another computer, the display information had to be saved with the event.
  1869.  
  1870. The following information was included with the event:
  1871.  
  1872. Microsoft .NET Framework 4 Client Profile
  1873. 4.0.30320
  1874. 0
  1875. 0
  1876. Microsoft Corporation
  1877. (NULL)
  1878.  
  1879. The handle is invalid
  1880. "
  1881. Information 6/28/2011 11:24:15 AM MsiInstaller 11728 None "The description for Event ID 11728 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1882.  
  1883. If the event originated on another computer, the display information had to be saved with the event.
  1884.  
  1885. The following information was included with the event:
  1886.  
  1887. Product: Microsoft .NET Framework 4 Client Profile -- Configuration completed successfully.
  1888. (NULL)
  1889. (NULL)
  1890. (NULL)
  1891. (NULL)
  1892. (NULL)
  1893.  
  1894. The handle is invalid
  1895. "
  1896. Information 6/28/2011 11:24:15 AM MsiInstaller 1036 None "The description for Event ID 1036 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1897.  
  1898. If the event originated on another computer, the display information had to be saved with the event.
  1899.  
  1900. The following information was included with the event:
  1901.  
  1902. Microsoft .NET Framework 4 Client Profile
  1903. 4.0.30320
  1904. 0
  1905. KB2461678
  1906. 0
  1907. Microsoft Corporation
  1908.  
  1909. The handle is invalid
  1910. "
  1911. Information 6/28/2011 11:24:15 AM MsiInstaller 1022 None "The description for Event ID 1022 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1912.  
  1913. If the event originated on another computer, the display information had to be saved with the event.
  1914.  
  1915. The following information was included with the event:
  1916.  
  1917. Microsoft .NET Framework 4 Client Profile
  1918. KB2461678
  1919. (NULL)
  1920. (NULL)
  1921. (NULL)
  1922. (NULL)
  1923.  
  1924. The handle is invalid
  1925. "
  1926. Information 6/28/2011 11:24:15 AM MsiInstaller 1036 None "The description for Event ID 1036 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1927.  
  1928. If the event originated on another computer, the display information had to be saved with the event.
  1929.  
  1930. The following information was included with the event:
  1931.  
  1932. Microsoft .NET Framework 4 Client Profile
  1933. 4.0.30320
  1934. 0
  1935. KB971891
  1936. 0
  1937. Microsoft Corporation
  1938.  
  1939. The handle is invalid
  1940. "
  1941. Information 6/28/2011 11:24:15 AM MsiInstaller 1022 None "The description for Event ID 1022 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1942.  
  1943. If the event originated on another computer, the display information had to be saved with the event.
  1944.  
  1945. The following information was included with the event:
  1946.  
  1947. Microsoft .NET Framework 4 Client Profile
  1948. KB971891
  1949. (NULL)
  1950. (NULL)
  1951. (NULL)
  1952. (NULL)
  1953.  
  1954. The handle is invalid
  1955. "
  1956. Information 6/28/2011 11:24:15 AM Microsoft-Windows-LoadPerf 1002 None "The description for Event ID 1002 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1957.  
  1958. If the event originated on another computer, the display information had to be saved with the event.
  1959.  
  1960. The following information was included with the event:
  1961.  
  1962. .NET CLR Networking 4.0.0.0
  1963. .NET CLR Networking 4.0.0.0
  1964. 4
  1965.  
  1966. The handle is invalid
  1967. "
  1968. Information 6/28/2011 11:21:08 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1969.  
  1970. If the event originated on another computer, the display information had to be saved with the event.
  1971.  
  1972. The following information was included with the event:
  1973.  
  1974. MSDTC Bridge 4.0.0.0
  1975. MSDTC Bridge 4.0.0.0
  1976. 16
  1977.  
  1978. The handle is invalid
  1979. "
  1980. Information 6/28/2011 11:21:08 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1981.  
  1982. If the event originated on another computer, the display information had to be saved with the event.
  1983.  
  1984. The following information was included with the event:
  1985.  
  1986. SMSvcHost 4.0.0.0
  1987. SMSvcHost 4.0.0.0
  1988. 16
  1989.  
  1990. The handle is invalid
  1991. "
  1992. Information 6/28/2011 11:21:07 AM Microsoft-Windows-LoadPerf 1000 None "The description for Event ID 1000 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  1993.  
  1994. If the event originated on another computer, the display information had to be saved with the event.
  1995.  
  1996. The following information was included with the event:
  1997.  
  1998. {890c10c3-8c2a-4fe3-a36a-9eca153d47cb}
  1999. ServiceModel 4.0.0.0
  2000. 0
  2001.  
  2002. The handle is invalid
  2003. "
  2004. Information 6/28/2011 11:21:03 AM MsiInstaller 1025 None "The description for Event ID 1025 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2005.  
  2006. If the event originated on another computer, the display information had to be saved with the event.
  2007.  
  2008. The following information was included with the event:
  2009.  
  2010. Microsoft .NET Framework 4 Client Profile
  2011. C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
  2012. OUTLOOK
  2013. 5232
  2014. (NULL)
  2015. (NULL)
  2016.  
  2017. The handle is invalid
  2018. "
  2019. Information 6/28/2011 11:20:47 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2020.  
  2021. If the event originated on another computer, the display information had to be saved with the event.
  2022.  
  2023. The following information was included with the event:
  2024.  
  2025. MSDTC Bridge 4.0.0.0
  2026. MSDTC Bridge 4.0.0.0
  2027. 12
  2028.  
  2029. The handle is invalid
  2030. "
  2031. Information 6/28/2011 11:20:47 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2032.  
  2033. If the event originated on another computer, the display information had to be saved with the event.
  2034.  
  2035. The following information was included with the event:
  2036.  
  2037. SMSvcHost 4.0.0.0
  2038. SMSvcHost 4.0.0.0
  2039. 12
  2040.  
  2041. The handle is invalid
  2042. "
  2043. Information 6/28/2011 11:20:46 AM Microsoft-Windows-LoadPerf 1001 None "The description for Event ID 1001 from source Microsoft-Windows-LoadPerf cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2044.  
  2045. If the event originated on another computer, the display information had to be saved with the event.
  2046.  
  2047. The following information was included with the event:
  2048.  
  2049. {890c10c3-8c2a-4fe3-a36a-9eca153d47cb}
  2050. ServiceModel 4.0.0.0
  2051. 0
  2052.  
  2053. The handle is invalid
  2054. "
  2055. Information 6/28/2011 11:20:39 AM Microsoft-Windows-RestartManager 10000 None "The description for Event ID 10000 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2056.  
  2057. If the event originated on another computer, the display information had to be saved with the event.
  2058.  
  2059. The following information was included with the event:
  2060.  
  2061. 1
  2062. 6/28/2011 3:20:39 PM
  2063.  
  2064. The handle is invalid
  2065. "
  2066. Information 6/28/2011 11:20:39 AM Microsoft-Windows-RestartManager 10005 None "The description for Event ID 10005 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2067.  
  2068. If the event originated on another computer, the display information had to be saved with the event.
  2069.  
  2070. The following information was included with the event:
  2071.  
  2072. 0
  2073. 1
  2074. 2
  2075.  
  2076. The handle is invalid
  2077. "
  2078. Warning 6/28/2011 11:20:39 AM Microsoft-Windows-RestartManager 10010 None "The description for Event ID 10010 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2079.  
  2080. If the event originated on another computer, the display information had to be saved with the event.
  2081.  
  2082. The following information was included with the event:
  2083.  
  2084. 0
  2085. 5232
  2086. C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
  2087. Microsoft Office Outlook
  2088. 0
  2089. 0
  2090. 1
  2091. 67108865
  2092. 1
  2093.  
  2094. The handle is invalid
  2095. "
  2096. Information 6/28/2011 11:20:20 AM Microsoft-Windows-RestartManager 10000 None "The description for Event ID 10000 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2097.  
  2098. If the event originated on another computer, the display information had to be saved with the event.
  2099.  
  2100. The following information was included with the event:
  2101.  
  2102. 0
  2103. 6/28/2011 3:20:20 PM
  2104.  
  2105. The handle is invalid
  2106. "
  2107. Information 6/28/2011 11:20:19 AM MsiInstaller 1040 None "The description for Event ID 1040 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2108.  
  2109. If the event originated on another computer, the display information had to be saved with the event.
  2110.  
  2111. The following information was included with the event:
  2112.  
  2113. C:\Windows\Installer\451337.msi
  2114. 5864
  2115. (NULL)
  2116. (NULL)
  2117. (NULL)
  2118. (NULL)
  2119.  
  2120. The handle is invalid
  2121. "
  2122. Information 6/28/2011 11:11:45 AM Windows Error Reporting 1001 None "The description for Event ID 1001 from source Windows Error Reporting cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2123.  
  2124. If the event originated on another computer, the display information had to be saved with the event.
  2125.  
  2126. The following information was included with the event:
  2127.  
  2128. 0
  2129. PnPGenericDriverFound
  2130. Not available
  2131. 0
  2132. x86
  2133. USB\MS_COMP_MTP
  2134. C:\Users\username\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_x86_49f61fd554f67663c71731a0d3554ee4e165f734_cab_0e155b9a
  2135. 0
  2136. ef802259-a198-11e0-9461-005056c00008
  2137. 4
  2138.  
  2139. The handle is invalid
  2140. "
  2141. Information 6/28/2011 11:07:58 AM MsiInstaller 1035 None "The description for Event ID 1035 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2142.  
  2143. If the event originated on another computer, the display information had to be saved with the event.
  2144.  
  2145. The following information was included with the event:
  2146.  
  2147. Samsung Kies
  2148. 2.0.1.11053_66
  2149. 1033
  2150. 0
  2151. Samsung Electronics Co., Ltd.
  2152. (NULL)
  2153.  
  2154. The handle is invalid
  2155. "
  2156. Information 6/28/2011 11:07:58 AM MsiInstaller 11728 None "The description for Event ID 11728 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2157.  
  2158. If the event originated on another computer, the display information had to be saved with the event.
  2159.  
  2160. The following information was included with the event:
  2161.  
  2162. Product: Samsung Kies -- Configuration completed successfully.
  2163. (NULL)
  2164. (NULL)
  2165. (NULL)
  2166. (NULL)
  2167. (NULL)
  2168.  
  2169. The handle is invalid
  2170. "
  2171. Information 6/28/2011 11:03:50 AM Microsoft-Windows-RestartManager 10001 None "The description for Event ID 10001 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2172.  
  2173. If the event originated on another computer, the display information had to be saved with the event.
  2174.  
  2175. The following information was included with the event:
  2176.  
  2177. 0
  2178. 6/28/2011 3:03:11 PM
  2179.  
  2180. The handle is invalid
  2181. "
  2182. Information 6/28/2011 11:03:50 AM MsiInstaller 1042 None "The description for Event ID 1042 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2183.  
  2184. If the event originated on another computer, the display information had to be saved with the event.
  2185.  
  2186. The following information was included with the event:
  2187.  
  2188. C:\Users\username\AppData\Local\Downloaded Installations\{415BC127-3C7F-473E-A5F4-EB6AFED543CB}\Samsung Kies.msi
  2189. 4508
  2190. (NULL)
  2191. (NULL)
  2192. (NULL)
  2193. (NULL)
  2194.  
  2195. The handle is invalid
  2196. "
  2197. Information 6/28/2011 11:03:50 AM MsiInstaller 1033 None "The description for Event ID 1033 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2198.  
  2199. If the event originated on another computer, the display information had to be saved with the event.
  2200.  
  2201. The following information was included with the event:
  2202.  
  2203. Samsung Kies
  2204. 2.0.1.11053_66
  2205. 1033
  2206. 0
  2207. Samsung Electronics Co., Ltd.
  2208. (NULL)
  2209.  
  2210. The handle is invalid
  2211. "
  2212. Information 6/28/2011 11:03:50 AM MsiInstaller 11707 None "The description for Event ID 11707 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2213.  
  2214. If the event originated on another computer, the display information had to be saved with the event.
  2215.  
  2216. The following information was included with the event:
  2217.  
  2218. Product: Samsung Kies -- Installation operation completed successfully.
  2219. (NULL)
  2220. (NULL)
  2221. (NULL)
  2222. (NULL)
  2223. (NULL)
  2224.  
  2225. The handle is invalid
  2226. "
  2227. Information 6/28/2011 11:03:11 AM Microsoft-Windows-RestartManager 10000 None "The description for Event ID 10000 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2228.  
  2229. If the event originated on another computer, the display information had to be saved with the event.
  2230.  
  2231. The following information was included with the event:
  2232.  
  2233. 0
  2234. 6/28/2011 3:03:11 PM
  2235.  
  2236. The handle is invalid
  2237. "
  2238. Information 6/28/2011 11:03:10 AM MsiInstaller 1040 None "The description for Event ID 1040 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2239.  
  2240. If the event originated on another computer, the display information had to be saved with the event.
  2241.  
  2242. The following information was included with the event:
  2243.  
  2244. C:\Users\username\AppData\Local\Downloaded Installations\{415BC127-3C7F-473E-A5F4-EB6AFED543CB}\Samsung Kies.msi
  2245. 4508
  2246. (NULL)
  2247. (NULL)
  2248. (NULL)
  2249. (NULL)
  2250.  
  2251. The handle is invalid
  2252. "
  2253. Information 6/28/2011 11:03:10 AM MsiInstaller 1033 None "The description for Event ID 1033 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2254.  
  2255. If the event originated on another computer, the display information had to be saved with the event.
  2256.  
  2257. The following information was included with the event:
  2258.  
  2259. Samsung Kies
  2260. 2.0.1.11053_66
  2261. 1033
  2262. 0
  2263. Samsung Electronics Co., Ltd.
  2264. (NULL)
  2265.  
  2266. The handle is invalid
  2267. "
  2268. Information 6/28/2011 11:03:10 AM MsiInstaller 11707 None "The description for Event ID 11707 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2269.  
  2270. If the event originated on another computer, the display information had to be saved with the event.
  2271.  
  2272. The following information was included with the event:
  2273.  
  2274. Product: Samsung Kies -- Installation operation completed successfully.
  2275. (NULL)
  2276. (NULL)
  2277. (NULL)
  2278. (NULL)
  2279. (NULL)
  2280.  
  2281. The handle is invalid
  2282. "
  2283. Information 6/28/2011 11:02:59 AM MsiInstaller 1033 None "The description for Event ID 1033 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2284.  
  2285. If the event originated on another computer, the display information had to be saved with the event.
  2286.  
  2287. The following information was included with the event:
  2288.  
  2289. Samsung Kies
  2290. 2.0.1.11053_66
  2291. 1033
  2292. 0
  2293. Samsung Electronics Co., Ltd.
  2294. (NULL)
  2295.  
  2296. The handle is invalid
  2297. "
  2298. Information 6/28/2011 10:26:16 AM Desktop Window Manager 9013 None "The description for Event ID 9013 from source Desktop Window Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2299.  
  2300. If the event originated on another computer, the display information had to be saved with the event.
  2301.  
  2302. The following information was included with the event:
  2303.  
  2304.  
  2305. The handle is invalid
  2306. "
  2307. Information 6/28/2011 10:26:16 AM Desktop Window Manager 9010 None "The description for Event ID 9010 from source Desktop Window Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2308.  
  2309. If the event originated on another computer, the display information had to be saved with the event.
  2310.  
  2311. The following information was included with the event:
  2312.  
  2313. GoToMeeting/GoToWebinar
  2314.  
  2315. The handle is invalid
  2316. "
  2317. Information 6/28/2011 9:54:13 AM Windows Error Reporting 1001 None "The description for Event ID 1001 from source Windows Error Reporting cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2318.  
  2319. If the event originated on another computer, the display information had to be saved with the event.
  2320.  
  2321. The following information was included with the event:
  2322.  
  2323. 0
  2324. APPCRASH
  2325. Not available
  2326. 0
  2327. token.exe
  2328. 2.4.1.4004
  2329. 4dcd86bf
  2330. ntdll.dll
  2331. 6.1.7601.17514
  2332. 4ce7b96e
  2333. c0000005
  2334. 00055f99
  2335. C:\Users\username\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_token.exe_d174df49fa89a1239fb2c29e3bf4c32e73eb_1bb65f7f
  2336. 0
  2337. 19860900-a18e-11e0-9461-005056c00008
  2338. 0
  2339.  
  2340. The handle is invalid
  2341. "
  2342. Error 6/28/2011 9:54:11 AM Application Error 1000 (100) "The description for Event ID 1000 from source Application Error cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2343.  
  2344. If the event originated on another computer, the display information had to be saved with the event.
  2345.  
  2346. The following information was included with the event:
  2347.  
  2348. token.exe
  2349. 2.4.1.4004
  2350. 4dcd86bf
  2351. ntdll.dll
  2352. 6.1.7601.17514
  2353. 4ce7b96e
  2354. c0000005
  2355. 00055f99
  2356. 1cf4
  2357. 01cc3595c5f1b8ab
  2358. C:\Program Files\CRYPTOCard\BlackShield ID\Software Tools\token.exe
  2359. C:\Windows\SYSTEM32\ntdll.dll
  2360. 19860900-a18e-11e0-9461-005056c00008
  2361.  
  2362. The handle is invalid
  2363. "
  2364. Information 6/28/2011 9:49:52 AM VSS 8224 None The VSS service is shutting down due to idle timeout.
  2365. Warning 6/28/2011 9:46:46 AM VSS 12348 None Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{b08bd651-e2aa-11df-9896-96c7d16b94ce}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again.
  2366.  
  2367. Operation:
  2368. Removing auto-release shadow copies
  2369. Loading provider
  2370.  
  2371. Context:
  2372. Execution Context: System Provider
  2373. Error 6/28/2011 9:43:33 AM SideBySide 72 None "The description for Event ID 72 from source SideBySide cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2374.  
  2375. If the event originated on another computer, the display information had to be saved with the event.
  2376.  
  2377. The following information was included with the event:
  2378.  
  2379. asmv2:clrClassInvocation
  2380. urn:schemas-microsoft-com:asm.v1^entryPoint
  2381. C:\Program Files\Payne Consulting Group\Forms Assistant\PCG.FormsAssistant.AddInVSTO.dll.Manifest
  2382. C:\Program Files\Payne Consulting Group\Forms Assistant\PCG.FormsAssistant.AddInVSTO.dll.Manifest
  2383. 4
  2384.  
  2385. The handle is invalid
  2386. "
  2387. Error 6/28/2011 9:42:51 AM SideBySide 72 None "The description for Event ID 72 from source SideBySide cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2388.  
  2389. If the event originated on another computer, the display information had to be saved with the event.
  2390.  
  2391. The following information was included with the event:
  2392.  
  2393. asmv2:clrClassInvocation
  2394. urn:schemas-microsoft-com:asm.v1^entryPoint
  2395. C:\Program Files\Payne Consulting Group\Numbering Assistant\NumberingAssistantVSTO.dll.Manifest
  2396. C:\Program Files\Payne Consulting Group\Numbering Assistant\NumberingAssistantVSTO.dll.Manifest
  2397. 4
  2398.  
  2399. The handle is invalid
  2400. "
  2401. Information 6/28/2011 8:29:29 AM Microsoft-Windows-Security-SPP 903 None "The description for Event ID 903 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2402.  
  2403. If the event originated on another computer, the display information had to be saved with the event.
  2404.  
  2405. The following information was included with the event:
  2406.  
  2407.  
  2408. The handle is invalid
  2409. "
  2410. Information 6/28/2011 8:29:29 AM Microsoft-Windows-Security-SPP 16384 None "The description for Event ID 16384 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2411.  
  2412. If the event originated on another computer, the display information had to be saved with the event.
  2413.  
  2414. The following information was included with the event:
  2415.  
  2416. 2011-07-04T12:37:29Z
  2417. GVLK
  2418.  
  2419. The handle is invalid
  2420. "
  2421. Information 6/28/2011 8:24:29 AM Microsoft-Windows-Security-SPP 902 None "The description for Event ID 902 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2422.  
  2423. If the event originated on another computer, the display information had to be saved with the event.
  2424.  
  2425. The following information was included with the event:
  2426.  
  2427. 6.1.7601.17514
  2428.  
  2429. The handle is invalid
  2430. "
  2431. Information 6/28/2011 8:24:29 AM Microsoft-Windows-Security-SPP 1003 None "The description for Event ID 1003 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2432.  
  2433. If the event originated on another computer, the display information had to be saved with the event.
  2434.  
  2435. The following information was included with the event:
  2436.  
  2437. 55c92734-d682-4d71-983e-d6ec3f16059f
  2438.  
  2439. 1: 358fb95b-0090-44fb-883a-75734e060c30, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2440. 2: 4f00134f-b514-4626-a74b-a8ec7c8dfe92, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2441. 3: 8dffd6e4-0497-4c35-b7d7-e47cf464cf30, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2442. 4: 92f9d22a-65f5-49a7-90fe-06491b4fc379, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2443. 5: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2444. 6: ae2ee509-1b34-41c0-acb7-6d4650168915, 1, 1 [(0 [0x00000000, 1, 0], [( 2 0xC004F005)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 257820)(?)(?)(?)])(1 )(2 )]
  2445. 7: b793ff2d-9d80-407c-b521-85111c51028c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2446. 8: cff07cac-7534-4cc3-b3f3-99e1a0aa3c20, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2447. 9: d188820a-cb63-4bad-a9a2-40b843ee23b7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2448. 10: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2449. 11: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2450.  
  2451.  
  2452.  
  2453. The handle is invalid
  2454. "
  2455. Information 6/28/2011 8:24:27 AM Microsoft-Windows-Security-SPP 1066 None "The description for Event ID 1066 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2456.  
  2457. If the event originated on another computer, the display information had to be saved with the event.
  2458.  
  2459. The following information was included with the event:
  2460.  
  2461. C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
  2462. C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
  2463. C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
  2464. C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
  2465. C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
  2466. C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000
  2467.  
  2468.  
  2469. The handle is invalid
  2470. "
  2471. Information 6/28/2011 8:24:18 AM Microsoft-Windows-Search 1003 Search service "The description for Event ID 1003 from source Microsoft-Windows-Search cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2472.  
  2473. If the event originated on another computer, the display information had to be saved with the event.
  2474.  
  2475. The following information was included with the event:
  2476.  
  2477.  
  2478.  
  2479.  
  2480. The handle is invalid
  2481. "
  2482. Information 6/28/2011 8:23:38 AM SecurityCenter 1 None The Windows Security Center Service has started.
  2483. Information 6/28/2011 8:23:38 AM ESENT 302 Logging/Recovery "The description for Event ID 302 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2484.  
  2485. If the event originated on another computer, the display information had to be saved with the event.
  2486.  
  2487. The following information was included with the event:
  2488.  
  2489. Windows
  2490. 3488
  2491. Windows:
  2492.  
  2493. The handle is invalid
  2494. "
  2495. Information 6/28/2011 8:23:32 AM Microsoft-Windows-Security-SPP 900 None "The description for Event ID 900 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2496.  
  2497. If the event originated on another computer, the display information had to be saved with the event.
  2498.  
  2499. The following information was included with the event:
  2500.  
  2501.  
  2502. The handle is invalid
  2503. "
  2504. Information 6/28/2011 8:23:27 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2505.  
  2506. If the event originated on another computer, the display information had to be saved with the event.
  2507.  
  2508. The following information was included with the event:
  2509.  
  2510. Windows
  2511. 3488
  2512. Windows:
  2513. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log
  2514.  
  2515. The handle is invalid
  2516. "
  2517. Information 6/28/2011 8:23:27 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2518.  
  2519. If the event originated on another computer, the display information had to be saved with the event.
  2520.  
  2521. The following information was included with the event:
  2522.  
  2523. Windows
  2524. 3488
  2525. Windows:
  2526. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00DD4.log
  2527.  
  2528. The handle is invalid
  2529. "
  2530. Information 6/28/2011 8:23:11 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2531.  
  2532. If the event originated on another computer, the display information had to be saved with the event.
  2533.  
  2534. The following information was included with the event:
  2535.  
  2536. Windows
  2537. 3488
  2538. Windows:
  2539. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00DD3.log
  2540.  
  2541. The handle is invalid
  2542. "
  2543. Information 6/28/2011 8:23:10 AM ESENT 300 Logging/Recovery "The description for Event ID 300 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2544.  
  2545. If the event originated on another computer, the display information had to be saved with the event.
  2546.  
  2547. The following information was included with the event:
  2548.  
  2549. Windows
  2550. 3488
  2551. Windows:
  2552.  
  2553. The handle is invalid
  2554. "
  2555. Information 6/28/2011 8:23:10 AM ESENT 102 General "The description for Event ID 102 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2556.  
  2557. If the event originated on another computer, the display information had to be saved with the event.
  2558.  
  2559. The following information was included with the event:
  2560.  
  2561. Windows
  2562. 3488
  2563. Windows:
  2564. 0
  2565. 6
  2566. 01
  2567. 7601
  2568. 0000
  2569.  
  2570. The handle is invalid
  2571. "
  2572. Information 6/28/2011 8:23:09 AM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2573.  
  2574. If the event originated on another computer, the display information had to be saved with the event.
  2575.  
  2576. The following information was included with the event:
  2577.  
  2578. Service stopped
  2579. "
  2580. Information 6/28/2011 8:22:57 AM Application Virtualization Client 2001 None "The description for Event ID 2001 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2581.  
  2582. If the event originated on another computer, the display information had to be saved with the event.
  2583.  
  2584. The following information was included with the event:
  2585.  
  2586.  
  2587. The handle is invalid
  2588. "
  2589. Warning 6/28/2011 8:22:57 AM Application Virtualization Client 3057 (6) "The description for Event ID 3057 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2590.  
  2591. If the event originated on another computer, the display information had to be saved with the event.
  2592.  
  2593. The following information was included with the event:
  2594.  
  2595. {tid=87C}
  2596.  
  2597. Microsoft Application Virtualization Desktop Client
  2598. 4.6.0.1523
  2599. C:\Program Files\Microsoft Application Virtualization Client
  2600. C:\ProgramData\Microsoft\Application Virtualization Client\
  2601. DC-E64-DMYK4K1
  2602. Windows 7 32-bit Service Pack 1.0 Build 7601
  2603.  
  2604. The handle is invalid
  2605. "
  2606. Warning 6/28/2011 8:22:36 AM Application Virtualization Client 3191 (3) "The description for Event ID 3191 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2607.  
  2608. If the event originated on another computer, the display information had to be saved with the event.
  2609.  
  2610. The following information was included with the event:
  2611.  
  2612. {tid=87C}
  2613.  
  2614. C:\ProgramData\Microsoft\Application Virtualization Client\sftlog.txt
  2615.  
  2616. The handle is invalid
  2617. "
  2618. Information 6/28/2011 8:22:33 AM sftvsa 0 None "The description for Event ID 0 from source sftvsa cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2619.  
  2620. If the event originated on another computer, the display information had to be saved with the event.
  2621.  
  2622. The following information was included with the event:
  2623.  
  2624. Service started
  2625. "
  2626. Warning 6/28/2011 8:22:30 AM Microsoft-Windows-Winlogon 6006 None "The description for Event ID 6006 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2627.  
  2628. If the event originated on another computer, the display information had to be saved with the event.
  2629.  
  2630. The following information was included with the event:
  2631.  
  2632. GPClient
  2633. 77
  2634. StartShell
  2635.  
  2636. The handle is invalid
  2637. "
  2638. Information 6/28/2011 8:22:26 AM Microsoft-Windows-RestartManager 10001 None "The description for Event ID 10001 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2639.  
  2640. If the event originated on another computer, the display information had to be saved with the event.
  2641.  
  2642. The following information was included with the event:
  2643.  
  2644. 0
  2645. 6/28/2011 12:21:24 PM
  2646.  
  2647. The handle is invalid
  2648. "
  2649. Information 6/28/2011 8:22:26 AM MsiInstaller 1042 None "The description for Event ID 1042 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2650.  
  2651. If the event originated on another computer, the display information had to be saved with the event.
  2652.  
  2653. The following information was included with the event:
  2654.  
  2655. \\domain\install\Software\PSShip\2.0\PSShipSetup.msi
  2656. 2508
  2657. (NULL)
  2658. (NULL)
  2659. (NULL)
  2660. (NULL)
  2661.  
  2662. The handle is invalid
  2663. "
  2664. Information 6/28/2011 8:22:26 AM MsiInstaller 1033 None "The description for Event ID 1033 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2665.  
  2666. If the event originated on another computer, the display information had to be saved with the event.
  2667.  
  2668. The following information was included with the event:
  2669.  
  2670. PS|Ship for Outlook
  2671. 2.1.0
  2672. 1033
  2673. 0
  2674. Lynch Marks LLC
  2675. (NULL)
  2676.  
  2677. The handle is invalid
  2678. "
  2679. Information 6/28/2011 8:22:26 AM MsiInstaller 11707 None "The description for Event ID 11707 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2680.  
  2681. If the event originated on another computer, the display information had to be saved with the event.
  2682.  
  2683. The following information was included with the event:
  2684.  
  2685. Product: PS|Ship for Outlook -- Installation completed successfully.
  2686. (NULL)
  2687. (NULL)
  2688. (NULL)
  2689. (NULL)
  2690. (NULL)
  2691.  
  2692. The handle is invalid
  2693. "
  2694. Warning 6/28/2011 8:22:13 AM Microsoft-Windows-Winlogon 6005 None "The description for Event ID 6005 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2695.  
  2696. If the event originated on another computer, the display information had to be saved with the event.
  2697.  
  2698. The following information was included with the event:
  2699.  
  2700. GPClient
  2701. StartShell
  2702.  
  2703. The handle is invalid
  2704. "
  2705. Information 6/28/2011 8:21:24 AM Microsoft-Windows-RestartManager 10000 None "The description for Event ID 10000 from source Microsoft-Windows-RestartManager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2706.  
  2707. If the event originated on another computer, the display information had to be saved with the event.
  2708.  
  2709. The following information was included with the event:
  2710.  
  2711. 0
  2712. 6/28/2011 12:21:24 PM
  2713.  
  2714. The handle is invalid
  2715. "
  2716. Information 6/28/2011 8:21:22 AM MsiInstaller 1040 None "The description for Event ID 1040 from source MsiInstaller cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2717.  
  2718. If the event originated on another computer, the display information had to be saved with the event.
  2719.  
  2720. The following information was included with the event:
  2721.  
  2722. \\domain\install\Software\PSShip\2.0\PSShipSetup.msi
  2723. 2508
  2724. (NULL)
  2725. (NULL)
  2726. (NULL)
  2727. (NULL)
  2728.  
  2729. The handle is invalid
  2730. "
  2731. Information 6/28/2011 8:21:13 AM Microsoft-Windows-CertificateServicesClient-CertEnroll 64 None Certificate enrollment for domain\username successfully load policy from policy server
  2732. Information 6/28/2011 8:21:13 AM Microsoft-Windows-CertificateServicesClient-CertEnroll 65 None Certificate enrollment for domain\username is successfully authenticated by policy server {F87257BD-A8A9-4F39-BE7C-28BA3959000C}
  2733. Information 6/28/2011 8:21:13 AM Microsoft-Windows-Winlogon 6000 None "The description for Event ID 6000 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2734.  
  2735. If the event originated on another computer, the display information had to be saved with the event.
  2736.  
  2737. The following information was included with the event:
  2738.  
  2739. SessionEnv
  2740.  
  2741. The handle is invalid
  2742. "
  2743. Information 6/28/2011 8:21:12 AM Microsoft-Windows-Winlogon 4101 None "The description for Event ID 4101 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2744.  
  2745. If the event originated on another computer, the display information had to be saved with the event.
  2746.  
  2747. The following information was included with the event:
  2748.  
  2749. 0x00000000
  2750. 0x00000001
  2751.  
  2752. The handle is invalid
  2753. "
  2754. Information 6/28/2011 8:20:46 AM SceCli 1704 None Security policy in the Group policy objects has been applied successfully.
  2755. Warning 6/28/2011 8:20:38 AM Microsoft-Windows-CertificateServicesClient-AutoEnrollment 64 None "The description for Event ID 64 from source Microsoft-Windows-CertificateServicesClient-AutoEnrollment cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2756.  
  2757. If the event originated on another computer, the display information had to be saved with the event.
  2758.  
  2759. The following information was included with the event:
  2760.  
  2761. local system
  2762. cc a5 c6 2e ef 91 4f 54 e4 c2 b2 de b2 51 51 fd 81 24 4e 41
  2763.  
  2764. The handle is invalid
  2765. "
  2766. Information 6/28/2011 8:20:31 AM Microsoft-Windows-WMI 5617 None "The description for Event ID 5617 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2767.  
  2768. If the event originated on another computer, the display information had to be saved with the event.
  2769.  
  2770. The following information was included with the event:
  2771.  
  2772.  
  2773. The handle is invalid
  2774. "
  2775. Information 6/28/2011 8:20:30 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2776.  
  2777. If the event originated on another computer, the display information had to be saved with the event.
  2778.  
  2779. The following information was included with the event:
  2780.  
  2781. WLIDInitializationTimerQueue. QueueWorkItem started (20:30:17)
  2782. "
  2783. Information 6/28/2011 8:20:30 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2784.  
  2785. If the event originated on another computer, the display information had to be saved with the event.
  2786.  
  2787. The following information was included with the event:
  2788.  
  2789. g_ WLIDInitializationTimerQueue.Initialize started (20:30:17)
  2790. "
  2791. Information 6/28/2011 8:20:30 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2792.  
  2793. If the event originated on another computer, the display information had to be saved with the event.
  2794.  
  2795. The following information was included with the event:
  2796.  
  2797. g_WLIDTimerQueue.Initialize started (20:30:17)
  2798. "
  2799. Information 6/28/2011 8:20:29 AM Microsoft-Windows-WMI 5615 None "The description for Event ID 5615 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2800.  
  2801. If the event originated on another computer, the display information had to be saved with the event.
  2802.  
  2803. The following information was included with the event:
  2804.  
  2805.  
  2806. The handle is invalid
  2807. "
  2808. Information 6/28/2011 8:20:29 AM VMware NAT Service 1000 None "The description for Event ID 1000 from source VMware NAT Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2809.  
  2810. If the event originated on another computer, the display information had to be saved with the event.
  2811.  
  2812. The following information was included with the event:
  2813.  
  2814. Using configuration file: C:\ProgramData\VMware\vmnetnat.conf.
  2815. IP address: 192.168.117.2
  2816. Subnet: 255.255.255.0
  2817. External IP address: 0.0.0.0
  2818. Device: vmnet8.
  2819. MAC address: 00:50:56:ED:62:6F.
  2820. Ignoring host MAC address: 00:50:56:C0:00:08.
  2821.  
  2822.  
  2823. The handle is invalid
  2824. "
  2825. Information 6/28/2011 8:20:29 AM VMware NAT Service 1000 None "The description for Event ID 1000 from source VMware NAT Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2826.  
  2827. If the event originated on another computer, the display information had to be saved with the event.
  2828.  
  2829. The following information was included with the event:
  2830.  
  2831. Service started
  2832.  
  2833. The handle is invalid
  2834. "
  2835. Information 6/28/2011 8:20:27 AM btwdins 0 None "The description for Event ID 0 from source btwdins cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2836.  
  2837. If the event originated on another computer, the display information had to be saved with the event.
  2838.  
  2839. The following information was included with the event:
  2840.  
  2841. Service started
  2842. "
  2843. Information 6/28/2011 8:20:15 AM Microsoft-Windows-User Profiles Service 1531 None "The description for Event ID 1531 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2844.  
  2845. If the event originated on another computer, the display information had to be saved with the event.
  2846.  
  2847. The following information was included with the event:
  2848.  
  2849.  
  2850. The handle is invalid
  2851. "
  2852. Information 6/28/2011 8:20:15 AM Microsoft-Windows-EventSystem 4625 None "The description for Event ID 4625 from source Microsoft-Windows-EventSystem cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2853.  
  2854. If the event originated on another computer, the display information had to be saved with the event.
  2855.  
  2856. The following information was included with the event:
  2857.  
  2858. 86400
  2859. SuppressDuplicateDuration
  2860. Software\Microsoft\EventSystem\EventLog
  2861.  
  2862. The handle is invalid
  2863. "
  2864. Information 6/28/2011 7:56:02 AM Microsoft-Windows-User Profiles Service 1532 None "The description for Event ID 1532 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2865.  
  2866. If the event originated on another computer, the display information had to be saved with the event.
  2867.  
  2868. The following information was included with the event:
  2869.  
  2870.  
  2871. The handle is invalid
  2872. "
  2873. Warning 6/28/2011 7:56:00 AM Microsoft-Windows-User Profiles Service 1530 None "The description for Event ID 1530 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2874.  
  2875. If the event originated on another computer, the display information had to be saved with the event.
  2876.  
  2877. The following information was included with the event:
  2878.  
  2879. 3 user registry handles leaked from \Registry\User\S-1-5-21-1343024091-725345543-839522115-27904:
  2880. Process 776 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904
  2881. Process 984 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  2882. Process 984 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1343024091-725345543-839522115-27904\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
  2883.  
  2884.  
  2885. The handle is invalid
  2886. "
  2887. Information 6/28/2011 7:56:00 AM Microsoft-Windows-Winlogon 6000 None "The description for Event ID 6000 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2888.  
  2889. If the event originated on another computer, the display information had to be saved with the event.
  2890.  
  2891. The following information was included with the event:
  2892.  
  2893. SessionEnv
  2894.  
  2895. The handle is invalid
  2896. "
  2897. Information 6/28/2011 7:55:59 AM Desktop Window Manager 9009 None "The description for Event ID 9009 from source Desktop Window Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2898.  
  2899. If the event originated on another computer, the display information had to be saved with the event.
  2900.  
  2901. The following information was included with the event:
  2902.  
  2903. 0x40010004
  2904.  
  2905. The handle is invalid
  2906. "
  2907. Warning 6/28/2011 7:55:57 AM Application Virtualization Client 3219 (3) "The description for Event ID 3219 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2908.  
  2909. If the event originated on another computer, the display information had to be saved with the event.
  2910.  
  2911. The following information was included with the event:
  2912.  
  2913. {tid=5CC}
  2914.  
  2915. 997
  2916.  
  2917. The handle is invalid
  2918. "
  2919. Information 6/28/2011 7:34:14 AM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2920.  
  2921. If the event originated on another computer, the display information had to be saved with the event.
  2922.  
  2923. The following information was included with the event:
  2924.  
  2925. Service stopped
  2926. "
  2927. Information 6/28/2011 7:34:00 AM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2928.  
  2929. If the event originated on another computer, the display information had to be saved with the event.
  2930.  
  2931. The following information was included with the event:
  2932.  
  2933. Service started
  2934. "
  2935. Information 6/28/2011 7:19:56 AM Microsoft-Windows-Security-SPP 903 None "The description for Event ID 903 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2936.  
  2937. If the event originated on another computer, the display information had to be saved with the event.
  2938.  
  2939. The following information was included with the event:
  2940.  
  2941.  
  2942. The handle is invalid
  2943. "
  2944. Information 6/28/2011 7:19:56 AM Microsoft-Windows-Security-SPP 16384 None "The description for Event ID 16384 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2945.  
  2946. If the event originated on another computer, the display information had to be saved with the event.
  2947.  
  2948. The following information was included with the event:
  2949.  
  2950. 2011-07-04T12:36:56Z
  2951. GVLK
  2952.  
  2953. The handle is invalid
  2954. "
  2955. Error 6/28/2011 7:17:01 AM Sophos Message Router 8005 Runtime environment "DNS lookup failure trying to resolve the following addresses: SOMESERVER02,SOMESERVER02.fqdn.
  2956.  
  2957. For more information, see the RMS status report. To open the report, click Start, point to All Programs, point to Sophos, point to Sophos Endpoint Security and Control, and then click View Sophos Network Communications Report.
  2958. "
  2959. Warning 6/28/2011 7:16:58 AM Sophos Message Router 8004 Runtime environment "Failed to communicate with parent router ""SOME.IP.ADD.RESS"".
  2960.  
  2961. For more information, see the RMS status report. To open the report, click Start, point to All Programs, point to Sophos, point to Sophos Endpoint Security and Control, and then click View Sophos Network Communications Report.
  2962. "
  2963. Information 6/28/2011 7:14:56 AM Microsoft-Windows-Security-SPP 902 None "The description for Event ID 902 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2964.  
  2965. If the event originated on another computer, the display information had to be saved with the event.
  2966.  
  2967. The following information was included with the event:
  2968.  
  2969. 6.1.7601.17514
  2970.  
  2971. The handle is invalid
  2972. "
  2973. Information 6/28/2011 7:14:56 AM Microsoft-Windows-Security-SPP 1003 None "The description for Event ID 1003 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2974.  
  2975. If the event originated on another computer, the display information had to be saved with the event.
  2976.  
  2977. The following information was included with the event:
  2978.  
  2979. 55c92734-d682-4d71-983e-d6ec3f16059f
  2980.  
  2981. 1: 358fb95b-0090-44fb-883a-75734e060c30, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2982. 2: 4f00134f-b514-4626-a74b-a8ec7c8dfe92, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2983. 3: 8dffd6e4-0497-4c35-b7d7-e47cf464cf30, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2984. 4: 92f9d22a-65f5-49a7-90fe-06491b4fc379, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2985. 5: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2986. 6: ae2ee509-1b34-41c0-acb7-6d4650168915, 1, 1 [(0 [0x00000000, 1, 0], [( 2 0xC004F005)(?)( 1 0x00000000 30 0 msft:rm/algorithm/volume/1.0 0x00000000 257880)(?)(?)(?)])(1 )(2 )]
  2987. 7: b793ff2d-9d80-407c-b521-85111c51028c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2988. 8: cff07cac-7534-4cc3-b3f3-99e1a0aa3c20, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2989. 9: d188820a-cb63-4bad-a9a2-40b843ee23b7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2990. 10: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2991. 11: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
  2992.  
  2993.  
  2994.  
  2995. The handle is invalid
  2996. "
  2997. Information 6/28/2011 7:14:55 AM Microsoft-Windows-Search 1003 Search service "The description for Event ID 1003 from source Microsoft-Windows-Search cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  2998.  
  2999. If the event originated on another computer, the display information had to be saved with the event.
  3000.  
  3001. The following information was included with the event:
  3002.  
  3003.  
  3004.  
  3005.  
  3006. The handle is invalid
  3007. "
  3008. Information 6/28/2011 7:14:55 AM Microsoft-Windows-Security-SPP 1066 None "The description for Event ID 1066 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3009.  
  3010. If the event originated on another computer, the display information had to be saved with the event.
  3011.  
  3012. The following information was included with the event:
  3013.  
  3014. C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
  3015. C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
  3016. C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
  3017. C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
  3018. C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
  3019. C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000
  3020.  
  3021.  
  3022. The handle is invalid
  3023. "
  3024. Information 6/28/2011 7:14:29 AM ESENT 302 Logging/Recovery "The description for Event ID 302 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3025.  
  3026. If the event originated on another computer, the display information had to be saved with the event.
  3027.  
  3028. The following information was included with the event:
  3029.  
  3030. Windows
  3031. 4948
  3032. Windows:
  3033.  
  3034. The handle is invalid
  3035. "
  3036. Information 6/28/2011 7:14:25 AM SecurityCenter 1 None The Windows Security Center Service has started.
  3037. Information 6/28/2011 7:14:23 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3038.  
  3039. If the event originated on another computer, the display information had to be saved with the event.
  3040.  
  3041. The following information was included with the event:
  3042.  
  3043. Windows
  3044. 4948
  3045. Windows:
  3046. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log
  3047.  
  3048. The handle is invalid
  3049. "
  3050. Information 6/28/2011 7:14:19 AM Microsoft-Windows-Security-SPP 900 None "The description for Event ID 900 from source Microsoft-Windows-Security-SPP cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3051.  
  3052. If the event originated on another computer, the display information had to be saved with the event.
  3053.  
  3054. The following information was included with the event:
  3055.  
  3056.  
  3057. The handle is invalid
  3058. "
  3059. Information 6/28/2011 7:14:14 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3060.  
  3061. If the event originated on another computer, the display information had to be saved with the event.
  3062.  
  3063. The following information was included with the event:
  3064.  
  3065. Windows
  3066. 4948
  3067. Windows:
  3068. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00DCC.log
  3069.  
  3070. The handle is invalid
  3071. "
  3072. Information 6/28/2011 7:14:02 AM gupdate 0 None "The description for Event ID 0 from source gupdate cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3073.  
  3074. If the event originated on another computer, the display information had to be saved with the event.
  3075.  
  3076. The following information was included with the event:
  3077.  
  3078. Service stopped
  3079. "
  3080. Information 6/28/2011 7:13:50 AM ESENT 301 Logging/Recovery "The description for Event ID 301 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3081.  
  3082. If the event originated on another computer, the display information had to be saved with the event.
  3083.  
  3084. The following information was included with the event:
  3085.  
  3086. Windows
  3087. 4948
  3088. Windows:
  3089. C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00DCB.log
  3090.  
  3091. The handle is invalid
  3092. "
  3093. Information 6/28/2011 7:13:49 AM ESENT 300 Logging/Recovery "The description for Event ID 300 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3094.  
  3095. If the event originated on another computer, the display information had to be saved with the event.
  3096.  
  3097. The following information was included with the event:
  3098.  
  3099. Windows
  3100. 4948
  3101. Windows:
  3102.  
  3103. The handle is invalid
  3104. "
  3105. Information 6/28/2011 7:13:48 AM ESENT 102 General "The description for Event ID 102 from source ESENT cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3106.  
  3107. If the event originated on another computer, the display information had to be saved with the event.
  3108.  
  3109. The following information was included with the event:
  3110.  
  3111. Windows
  3112. 4948
  3113. Windows:
  3114. 0
  3115. 6
  3116. 01
  3117. 7601
  3118. 0000
  3119.  
  3120. The handle is invalid
  3121. "
  3122. Information 6/28/2011 7:13:11 AM Application Virtualization Client 2001 None "The description for Event ID 2001 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3123.  
  3124. If the event originated on another computer, the display information had to be saved with the event.
  3125.  
  3126. The following information was included with the event:
  3127.  
  3128.  
  3129. The handle is invalid
  3130. "
  3131. Warning 6/28/2011 7:13:11 AM Application Virtualization Client 3057 (6) "The description for Event ID 3057 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3132.  
  3133. If the event originated on another computer, the display information had to be saved with the event.
  3134.  
  3135. The following information was included with the event:
  3136.  
  3137. {tid=5C8}
  3138.  
  3139. Microsoft Application Virtualization Desktop Client
  3140. 4.6.0.1523
  3141. C:\Program Files\Microsoft Application Virtualization Client
  3142. C:\ProgramData\Microsoft\Application Virtualization Client\
  3143. DC-E64-DMYK4K1
  3144. Windows 7 32-bit Service Pack 1.0 Build 7601
  3145.  
  3146. The handle is invalid
  3147. "
  3148. Warning 6/28/2011 7:13:09 AM Application Virtualization Client 3191 (3) "The description for Event ID 3191 from source Application Virtualization Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3149.  
  3150. If the event originated on another computer, the display information had to be saved with the event.
  3151.  
  3152. The following information was included with the event:
  3153.  
  3154. {tid=5C8}
  3155.  
  3156. C:\ProgramData\Microsoft\Application Virtualization Client\sftlog.txt
  3157.  
  3158. The handle is invalid
  3159. "
  3160. Information 6/28/2011 7:13:08 AM sftvsa 0 None "The description for Event ID 0 from source sftvsa cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3161.  
  3162. If the event originated on another computer, the display information had to be saved with the event.
  3163.  
  3164. The following information was included with the event:
  3165.  
  3166. Service started
  3167. "
  3168. Information 6/28/2011 7:13:06 AM Microsoft-Windows-Winlogon 6000 None "The description for Event ID 6000 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3169.  
  3170. If the event originated on another computer, the display information had to be saved with the event.
  3171.  
  3172. The following information was included with the event:
  3173.  
  3174. SessionEnv
  3175.  
  3176. The handle is invalid
  3177. "
  3178. Error 6/28/2011 7:12:56 AM Microsoft-Windows-CertificateServicesClient-AutoEnrollment 6 None "The description for Event ID 6 from source Microsoft-Windows-CertificateServicesClient-AutoEnrollment cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3179.  
  3180. If the event originated on another computer, the display information had to be saved with the event.
  3181.  
  3182. The following information was included with the event:
  3183.  
  3184. domain\username
  3185. 0x8007003a
  3186. The specified server cannot perform the requested operation.
  3187.  
  3188.  
  3189. The handle is invalid
  3190. "
  3191. Information 6/28/2011 7:12:56 AM Microsoft-Windows-Winlogon 4101 None "The description for Event ID 4101 from source Microsoft-Windows-Winlogon cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3192.  
  3193. If the event originated on another computer, the display information had to be saved with the event.
  3194.  
  3195. The following information was included with the event:
  3196.  
  3197. 0x00000000
  3198. 0x00000001
  3199.  
  3200. The handle is invalid
  3201. "
  3202. Information 6/28/2011 7:11:52 AM Microsoft-Windows-WMI 5617 None "The description for Event ID 5617 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3203.  
  3204. If the event originated on another computer, the display information had to be saved with the event.
  3205.  
  3206. The following information was included with the event:
  3207.  
  3208.  
  3209. The handle is invalid
  3210. "
  3211. Information 6/28/2011 7:11:42 AM Microsoft-Windows-WMI 5611 None "The description for Event ID 5611 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3212.  
  3213. If the event originated on another computer, the display information had to be saved with the event.
  3214.  
  3215. The following information was included with the event:
  3216.  
  3217.  
  3218. The handle is invalid
  3219. "
  3220. Information 6/28/2011 7:11:42 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3221.  
  3222. If the event originated on another computer, the display information had to be saved with the event.
  3223.  
  3224. The following information was included with the event:
  3225.  
  3226. WLIDInitializationTimerQueue. QueueWorkItem started (11:42:715)
  3227. "
  3228. Information 6/28/2011 7:11:42 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3229.  
  3230. If the event originated on another computer, the display information had to be saved with the event.
  3231.  
  3232. The following information was included with the event:
  3233.  
  3234. g_ WLIDInitializationTimerQueue.Initialize started (11:42:715)
  3235. "
  3236. Information 6/28/2011 7:11:42 AM SignInAssistant 0 None "The description for Event ID 0 from source SignInAssistant cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3237.  
  3238. If the event originated on another computer, the display information had to be saved with the event.
  3239.  
  3240. The following information was included with the event:
  3241.  
  3242. g_WLIDTimerQueue.Initialize started (11:42:668)
  3243. "
  3244. Information 6/28/2011 7:11:42 AM Microsoft-Windows-WMI 5615 None "The description for Event ID 5615 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3245.  
  3246. If the event originated on another computer, the display information had to be saved with the event.
  3247.  
  3248. The following information was included with the event:
  3249.  
  3250.  
  3251. The handle is invalid
  3252. "
  3253. Information 6/28/2011 7:11:42 AM VMware NAT Service 1000 None "The description for Event ID 1000 from source VMware NAT Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3254.  
  3255. If the event originated on another computer, the display information had to be saved with the event.
  3256.  
  3257. The following information was included with the event:
  3258.  
  3259. Using configuration file: C:\ProgramData\VMware\vmnetnat.conf.
  3260. IP address: 192.168.117.2
  3261. Subnet: 255.255.255.0
  3262. External IP address: 0.0.0.0
  3263. Device: vmnet8.
  3264. MAC address: 00:50:56:ED:62:6F.
  3265. Ignoring host MAC address: 00:50:56:C0:00:08.
  3266.  
  3267.  
  3268. The handle is invalid
  3269. "
  3270. Information 6/28/2011 7:11:42 AM VMware NAT Service 1000 None "The description for Event ID 1000 from source VMware NAT Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3271.  
  3272. If the event originated on another computer, the display information had to be saved with the event.
  3273.  
  3274. The following information was included with the event:
  3275.  
  3276. Service started
  3277.  
  3278. The handle is invalid
  3279. "
  3280. Information 6/28/2011 7:11:39 AM btwdins 0 None "The description for Event ID 0 from source btwdins cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3281.  
  3282. If the event originated on another computer, the display information had to be saved with the event.
  3283.  
  3284. The following information was included with the event:
  3285.  
  3286. Service started
  3287. "
  3288. Information 6/28/2011 7:11:28 AM Microsoft-Windows-User Profiles Service 1531 None "The description for Event ID 1531 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3289.  
  3290. If the event originated on another computer, the display information had to be saved with the event.
  3291.  
  3292. The following information was included with the event:
  3293.  
  3294.  
  3295. The handle is invalid
  3296. "
  3297. Information 6/28/2011 7:11:28 AM Microsoft-Windows-EventSystem 4625 None "The description for Event ID 4625 from source Microsoft-Windows-EventSystem cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
  3298.  
  3299. If the event originated on another computer, the display information had to be saved with the event.
  3300.  
  3301. The following information was included with the event:
  3302.  
  3303. 86400
  3304. SuppressDuplicateDuration
  3305. Software\Microsoft\EventSystem\EventLog
  3306.  
  3307. The handle is invalid
  3308. "
  3309. ######################### Application Log END #########################
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!