Attachment 602324 Details for Bug 835023 – application log

application log

application.txt (text/plain), 12.98 KB, created by Xiaoqing Wei on 2012-08-05 03:40:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Xiaoqing Wei

Created: 2012-08-05 03:40:41 UTC

Size: 12.98 KB

patch

obsolete

>Event[0]:
>  Log Name: Application
>  Source: Desktop Window Manager
>  Date: 2012-08-03T02:58:26.000
>  Event ID: 9009
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Desktop Window Manager has exited with code (0x40010004)
>
>Event[1]:
>  Log Name: Application
>  Source: Microsoft-Windows-User Profiles Service
>  Date: 2012-08-03T02:58:26.994
>  Event ID: 1530
>  Task: N/A
>  Level: Warning
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  
>
> DETAIL - 
> 2 user registry handles leaked from \Registry\User\S-1-5-21-2977140086-2522391929-1200171140-500:
>Process 440 (\Device\HarddiskVolume1\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-2977140086-2522391929-1200171140-500
>Process 820 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2977140086-2522391929-1200171140-500\Printers\DevModePerUser
>
>
>Event[2]:
>  Log Name: Application
>  Source: Microsoft-Windows-EventSystem
>  Date: 2012-08-03T02:59:56.000
>  Event ID: 4625
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
>
>Event[3]:
>  Log Name: Application
>  Source: Microsoft-Windows-User Profiles Service
>  Date: 2012-08-03T02:58:27.916
>  Event ID: 1532
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The User Profile Service has stopped.  
>
>
>
>Event[4]:
>  Log Name: Application
>  Source: Microsoft-Windows-User Profiles Service
>  Date: 2012-08-03T03:00:00.562
>  Event ID: 1531
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The User Profile Service has started successfully.  
>
>
>
>Event[5]:
>  Log Name: Application
>  Source: Microsoft-Windows-WMI
>  Date: 2012-08-03T03:00:06.000
>  Event ID: 5615
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows Management Instrumentation Service started sucessfully
>
>Event[6]:
>  Log Name: Application
>  Source: Microsoft-Windows-WMI
>  Date: 2012-08-03T03:00:09.000
>  Event ID: 5617
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows Management Instrumentation Service subsystems initialized successfully
>
>Event[7]:
>  Log Name: Application
>  Source: Microsoft-Windows-Winlogon
>  Date: 2012-08-03T03:00:12.000
>  Event ID: 4101
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows license validated.
>
>Event[8]:
>  Log Name: Application
>  Source: Desktop Window Manager
>  Date: 2012-08-03T03:00:13.000
>  Event ID: 9004
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Desktop Window Manager was unable to start because of an insufficient display mode color depth
>
>Event[9]:
>  Log Name: Application
>  Source: ESENT
>  Date: 2012-08-03T03:00:30.000
>  Event ID: 102
>  Task: General
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows (2080) Windows: The database engine (6.01.7601.0000) started a new instance (0).
>
>Event[10]:
>  Log Name: Application
>  Source: ESENT
>  Date: 2012-08-03T03:00:30.000
>  Event ID: 300
>  Task: Logging/Recovery
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows (2080) Windows: The database engine is initiating recovery steps.
>
>Event[11]:
>  Log Name: Application
>  Source: ESENT
>  Date: 2012-08-03T03:00:30.000
>  Event ID: 301
>  Task: Logging/Recovery
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows (2080) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00002.log.
>
>Event[12]:
>  Log Name: Application
>  Source: ESENT
>  Date: 2012-08-03T03:00:30.000
>  Event ID: 301
>  Task: Logging/Recovery
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows (2080) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.
>
>Event[13]:
>  Log Name: Application
>  Source: ESENT
>  Date: 2012-08-03T03:00:30.000
>  Event ID: 302
>  Task: Logging/Recovery
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Windows (2080) Windows: The database engine has successfully completed recovery steps.
>
>Event[14]:
>  Log Name: Application
>  Source: Microsoft-Windows-Search
>  Date: 2012-08-03T03:00:32.000
>  Event ID: 1003
>  Task: Search service
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Search Service started.
>
>
>Event[15]:
>  Log Name: Application
>  Source: Microsoft-Windows-WMI
>  Date: 2012-08-03T03:01:24.000
>  Event ID: 10
>  Task: N/A
>  Level: Error
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
>
>Event[16]:
>  Log Name: Application
>  Source: Microsoft-Windows-Security-SPP
>  Date: 2012-08-03T03:02:12.000
>  Event ID: 900
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Software Protection service is starting.
>
>
>Event[17]:
>  Log Name: Application
>  Source: Microsoft-Windows-Security-SPP
>  Date: 2012-08-03T03:02:13.000
>  Event ID: 1066
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Initialization status for service objects.
>C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
>C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
>C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
>C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
>C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
>C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000
>
>
>Event[18]:
>  Log Name: Application
>  Source: SecurityCenter
>  Date: 2012-08-03T03:02:13.000
>  Event ID: 1
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Security Center Service has started.
>
>Event[19]:
>  Log Name: Application
>  Source: Microsoft-Windows-Security-SPP
>  Date: 2012-08-03T03:02:14.000
>  Event ID: 1003
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Software Protection service has completed licensing status check.
>Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
>Licensing Status=
>1: 022a1afb-b893-4190-92c3-8f69a49839fb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>2: 436cef53-8387-4692-bb4a-9492cd82260e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>3: 57a232fe-0931-48fe-9389-e4586967c661, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>4: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>5: 8ec16e01-e86f-415f-b333-1819f4145294, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>6: a0cde89c-3304-4157-b61c-c8ad785d1fad, 1, 1 [(0 )(1 )(2 [0x00000000, 0, 1], [(?)( 5 0x00000000 30 39420)( 1 0x00000000 0 0 msft:rm/algorithm/flags/1.0 0x00000000 0)(?)(?)(?)])]
>7: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>8: b2c4b9f6-3ee6-4a2a-a361-64ad3b61ded5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>9: bba42084-cacd-4ad4-b606-9f3d6c93b2c5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>10: c619d61c-c2f2-40c3-ab3f-c5924314b0f3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>11: cfb3e52c-d707-4861-af51-11b27ee6169c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>12: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>13: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
>
>
>
>Event[20]:
>  Log Name: Application
>  Source: Microsoft-Windows-Security-SPP
>  Date: 2012-08-03T03:02:14.000
>  Event ID: 902
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Software Protection service has started.
>6.1.7601.17514
>
>Event[21]:
>  Log Name: Application
>  Source: Chkdsk
>  Date: 2012-08-03T03:04:23.000
>  Event ID: 26214
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Chkdsk was executed in read/write mode.  
>
>Checking file system on D:
>The type of the file system is NTFS.
>Volume label is OS_Install.
>
>CHKDSK is verifying files (stage 1 of 3)...
>  59136 file records processed.

>File verification completed.
>  32 large file records processed.

>  0 bad file records processed.

>  0 EA records processed.

>  44 reparse records processed.

>CHKDSK is verifying indexes (stage 2 of 3)...
>  86794 index entries processed.

>Index verification completed.
>  0 unindexed files scanned.

>  0 unindexed files recovered.

>CHKDSK is verifying security descriptors (stage 3 of 3)...
>  59136 file SDs/SIDs processed.

>Cleaning up 55 unused index entries from index $SII of file 0x9.
>Cleaning up 55 unused index entries from index $SDH of file 0x9.
>Cleaning up 55 unused security descriptors.
>Security descriptor verification completed.
>  13829 data files processed.

>Windows has checked the file system and found no problems.
>
>  30719999 KB total disk space.
>   7809624 KB in 45197 files.
>     36320 KB in 13831 indexes.
>         0 KB in bad sectors.
>    126135 KB in use by the system.
>     65536 KB occupied by the log file.
>  22747920 KB available on disk.
>
>      4096 bytes in each allocation unit.
>   7679999 total allocation units on disk.
>   5686980 allocation units available on disk.
>
>
>Event[22]:
>  Log Name: Application
>  Source: Microsoft-Windows-LoadPerf
>  Date: 2012-08-03T03:04:50.296
>  Event ID: 1001
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.
>
>Event[23]:
>  Log Name: Application
>  Source: Microsoft-Windows-LoadPerf
>  Date: 2012-08-03T03:04:50.342
>  Event ID: 1000
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
>

Actions: View

Attachments on bug 835023: 594145 | 594146 | 602324 | 602325 | 602326 | 602674 | 603253