Attachment 602326 Details for Bug 835023 – system log

system log

system.txt (text/plain), 41.34 KB, created by Xiaoqing Wei on 2012-08-05 03:41:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Xiaoqing Wei

Created: 2012-08-05 03:41:49 UTC

Size: 41.34 KB

patch

obsolete

>Event[0]:
>  Log Name: System
>  Source: Microsoft-Windows-Eventlog
>  Date: 2012-08-03T02:58:16.421
>  Event ID: 104
>  Task: Log clear
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-21-2977140086-2522391929-1200171140-500
>  User Name: WIN-NDRQPM0224U\Administrator
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The System log file was cleared.
>
>Event[1]:
>  Log Name: System
>  Source: USER32
>  Date: 2012-08-03T02:58:23.000
>  Event ID: 1074
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: S-1-5-21-2977140086-2522391929-1200171140-500
>  User Name: WIN-NDRQPM0224U\Administrator
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The process C:\Windows\system32\shutdown.exe (WIN-NDRQPM0224U) has initiated the shutdown of computer WIN-NDRQPM0224U on behalf of user WIN-NDRQPM0224U\Administrator for the following reason: No title for this reason could be found
> Reason Code: 0x800000ff
> Shutdown Type: shutdown
> Comment: 
>
>Event[2]:
>  Log Name: System
>  Source: Virtual Disk Service
>  Date: 2012-08-03T02:58:24.000
>  Event ID: 4
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Service stopped.
>
>Event[3]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:24.156
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Virtual Disk service entered the stopped state.
>
>Event[4]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:25.103
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Multimedia Class Scheduler service entered the running state.
>
>Event[5]:
>  Log Name: System
>  Source: Microsoft-Windows-Winlogon
>  Date: 2012-08-03T02:58:27.181
>  Event ID: 7002
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>User Logoff Notification for Customer Experience Improvement Program
>
>Event[6]:
>  Log Name: System
>  Source: EventLog
>  Date: 2012-08-03T02:58:27.000
>  Event ID: 6006
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Event log service was stopped.
>
>Event[7]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.478
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Update service entered the stopped state.
>
>Event[8]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.556
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Group Policy Client service entered the stopped state.
>
>Event[9]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.666
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Microsoft .NET Framework NGEN v2.0.50727_X86 service entered the stopped state.
>
>Event[10]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.666
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Microsoft .NET Framework NGEN v2.0.50727_X64 service entered the stopped state.
>
>Event[11]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.712
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Certificate Propagation service entered the stopped state.
>
>Event[12]:
>  Log Name: System
>  Source: Microsoft-Windows-DHCPv6-Client
>  Date: 2012-08-03T02:58:27.728
>  Event ID: 51047
>  Task: Service State Event
>  Level: Information
>  Opcode: ServiceStop
>  Keyword: N/A
>  User: S-1-5-19
>  User Name: NT AUTHORITY\LOCAL SERVICE
>  Computer: WIN-NDRQPM0224U
>  Description: 
>DHCPv6 client service is stopped. ShutDown Flag value is 1
>
>Event[13]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.744
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Diagnostic Service Host service entered the stopped state.
>
>Event[14]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.744
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Diagnostic System Host service entered the stopped state.
>
>Event[15]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.759
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Font Cache Service service entered the stopped state.
>
>Event[16]:
>  Log Name: System
>  Source: EventLog
>  Date: 2012-08-03T02:59:55.000
>  Event ID: 6009
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Microsoft (R) Windows (R) 6.01. 7601 Service Pack 1 Multiprocessor Free.
>
>Event[17]:
>  Log Name: System
>  Source: EventLog
>  Date: 2012-08-03T02:59:55.000
>  Event ID: 6005
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Event log service was started.
>
>Event[18]:
>  Log Name: System
>  Source: EventLog
>  Date: 2012-08-03T02:59:55.000
>  Event ID: 6013
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The system uptime is 29 seconds.
>
>Event[19]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.806
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Event Log service entered the stopped state.
>
>Event[20]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.806
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Power service entered the stopped state.
>
>Event[21]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.822
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Remote Desktop Services UserMode Port Redirector service entered the stopped state.
>
>Event[22]:
>  Log Name: System
>  Source: Microsoft-Windows-Dhcp-Client
>  Date: 2012-08-03T02:58:27.822
>  Event ID: 50037
>  Task: Service State Event
>  Level: Information
>  Opcode: ServiceStop
>  Keyword: N/A
>  User: S-1-5-19
>  User Name: NT AUTHORITY\LOCAL SERVICE
>  Computer: WIN-NDRQPM0224U
>  Description: 
>DHCPv4 client service is stopped. ShutDown Flag value is 1
>
>Event[23]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.822
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Diagnostic Policy Service service entered the stopped state.
>
>Event[24]:
>  Log Name: System
>  Source: Microsoft-Windows-UserPnp
>  Date: 2012-08-03T02:58:27.822
>  Event ID: 20010
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>One or more of the Plug and Play service's subsystems has changed state. 
>
>PlugPlay install subsystem enabled: 'false' 
>PlugPlay caching subsystem enabled: 'false' 
>
>
>Event[25]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.822
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Plug and Play service entered the stopped state.
>
>Event[26]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.822
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Desktop Window Manager Session Manager service entered the stopped state.
>
>Event[27]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.884
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The DHCP Client service entered the stopped state.
>
>Event[28]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.900
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The SSDP Discovery service entered the stopped state.
>
>Event[29]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.900
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Time service entered the stopped state.
>
>Event[30]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.916
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The User Profile Service service entered the stopped state.
>
>Event[31]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.916
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The IPsec Policy Agent service entered the stopped state.
>
>Event[32]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:27.931
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Remote Desktop Services service entered the stopped state.
>
>Event[33]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.025
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Defender service entered the stopped state.
>
>Event[34]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.025
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Distributed Link Tracking Client service entered the stopped state.
>
>Event[35]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.103
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Management Instrumentation service entered the stopped state.
>
>Event[36]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.119
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Software Protection service entered the stopped state.
>
>Event[37]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.134
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Cryptographic Services service entered the stopped state.
>
>Event[38]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.197
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The IKE and AuthIP IPsec Keying Modules service entered the stopped state.
>
>Event[39]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.228
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Security Center service entered the stopped state.
>
>Event[40]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.337
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Superfetch service entered the stopped state.
>
>Event[41]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:58:28.806
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Search service entered the stopped state.
>
>Event[42]:
>  Log Name: System
>  Source: Microsoft-Windows-Kernel-Power
>  Date: 2012-08-03T02:58:28.947
>  Event ID: 109
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The kernel power manager has initiated a shutdown transition.
>
>Event[43]:
>  Log Name: System
>  Source: Microsoft-Windows-Kernel-General
>  Date: 2012-08-03T02:58:33.041
>  Event ID: 13
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The operating system is shutting down at system time ?2012?-?08?-?03T09:58:33.041015600Z.
>
>Event[44]:
>  Log Name: System
>  Source: Microsoft-Windows-Kernel-General
>  Date: 2012-08-03T02:59:26.906
>  Event ID: 12
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The operating system started at system time ?2012?-?08?-?03T09:59:26.375000000Z.
>
>Event[45]:
>  Log Name: System
>  Source: Microsoft-Windows-FilterManager
>  Date: 2012-08-03T02:59:28.046
>  Event ID: 6
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>File System Filter 'FileInfo' (6.1, ?2009?-?07?-?13T16:34:25.000000000Z) has successfully loaded and registered with Filter Manager.
>
>Event[46]:
>  Log Name: System
>  Source: Microsoft-Windows-Kernel-Processor-Power
>  Date: 2012-08-03T02:59:34.609
>  Event ID: 26
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Processor 0 in group 0 exposes the following:
>
>1 idle state(s)
>0 performance state(s)
>0 throttle state(s)
>
>Event[47]:
>  Log Name: System
>  Source: Microsoft-Windows-Kernel-Processor-Power
>  Date: 2012-08-03T02:59:34.609
>  Event ID: 26
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Processor 1 in group 0 exposes the following:
>
>1 idle state(s)
>0 performance state(s)
>0 throttle state(s)
>
>Event[48]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:51.328
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Plug and Play service entered the running state.
>
>Event[49]:
>  Log Name: System
>  Source: Microsoft-Windows-UserPnp
>  Date: 2012-08-03T02:59:51.328
>  Event ID: 20010
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>One or more of the Plug and Play service's subsystems has changed state. 
>
>PlugPlay install subsystem enabled: 'true' 
>PlugPlay caching subsystem enabled: 'true' 
>
>
>Event[50]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:51.562
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Power service entered the running state.
>
>Event[51]:
>  Log Name: System
>  Source: Microsoft-Windows-FilterManager
>  Date: 2012-08-03T02:59:52.812
>  Event ID: 6
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>File System Filter 'luafv' (6.1, ?2009?-?07?-?13T16:26:13.000000000Z) has successfully loaded and registered with Filter Manager.
>
>Event[52]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:52.953
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The DCOM Server Process Launcher service entered the running state.
>
>Event[53]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:52.968
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The RPC Endpoint Mapper service entered the running state.
>
>Event[54]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:53.031
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Remote Procedure Call (RPC) service entered the running state.
>
>Event[55]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:55.562
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Event Log service entered the running state.
>
>Event[56]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:55.593
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Multimedia Class Scheduler service entered the running state.
>
>Event[57]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:55.703
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Audio Endpoint Builder service entered the running state.
>
>Event[58]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:55.734
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Audio service entered the running state.
>
>Event[59]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:55.921
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Offline Files service entered the running state.
>
>Event[60]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T02:59:56.062
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The COM+ Event System service entered the running state.
>
>Event[61]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.546
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Themes service entered the running state.
>
>Event[62]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.546
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The System Event Notification Service service entered the running state.
>
>Event[63]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.562
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The User Profile Service service entered the running state.
>
>Event[64]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.609
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Group Policy Client service entered the running state.
>
>Event[65]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.640
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Desktop Window Manager Session Manager service entered the running state.
>
>Event[66]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.640
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Security Accounts Manager service entered the running state.
>
>Event[67]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.671
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Network Store Interface Service service entered the running state.
>
>Event[68]:
>  Log Name: System
>  Source: Microsoft-Windows-Dhcp-Client
>  Date: 2012-08-03T03:00:00.750
>  Event ID: 50036
>  Task: Service State Event
>  Level: Information
>  Opcode: ServiceStart
>  Keyword: N/A
>  User: S-1-5-19
>  User Name: NT AUTHORITY\LOCAL SERVICE
>  Computer: WIN-NDRQPM0224U
>  Description: 
>DHCPv4 client service is started
>
>Event[69]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.750
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The TCP/IP NetBIOS Helper service entered the running state.
>
>Event[70]:
>  Log Name: System
>  Source: Microsoft-Windows-DHCPv6-Client
>  Date: 2012-08-03T03:00:00.859
>  Event ID: 51046
>  Task: Service State Event
>  Level: Information
>  Opcode: ServiceStart
>  Keyword: N/A
>  User: S-1-5-19
>  User Name: NT AUTHORITY\LOCAL SERVICE
>  Computer: WIN-NDRQPM0224U
>  Description: 
>DHCPv6 client service is started
>
>Event[71]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.875
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The DHCP Client service entered the running state.
>
>Event[72]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.937
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The DNS Client service entered the running state.
>
>Event[73]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:00.937
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Shell Hardware Detection service entered the running state.
>
>Event[74]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:01.515
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Task Scheduler service entered the running state.
>
>Event[75]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:01.828
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Print Spooler service entered the running state.
>
>Event[76]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:01.984
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Base Filtering Engine service entered the running state.
>
>Event[77]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:02.328
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Firewall service entered the running state.
>
>Event[78]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:02.421
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Workstation service entered the running state.
>
>Event[79]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:02.437
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Cryptographic Services service entered the running state.
>
>Event[80]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:02.515
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Diagnostic Policy Service service entered the running state.
>
>Event[81]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:02.765
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The IKE and AuthIP IPsec Keying Modules service entered the running state.
>
>Event[82]:
>  Log Name: System
>  Source: Microsoft-Windows-Application-Experience
>  Date: 2012-08-03T03:00:02.765
>  Event ID: 201
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Program Compatibility Assistant service started successfully.
>
>Event[83]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:02.765
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Program Compatibility Assistant Service service entered the running state.
>
>Event[84]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:03.046
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Superfetch service entered the running state.
>
>Event[85]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:03.046
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Distributed Link Tracking Client service entered the running state.
>
>Event[86]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:05.281
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Network Location Awareness service entered the running state.
>
>Event[87]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:05.703
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Management Instrumentation service entered the running state.
>
>Event[88]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.062
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The IP Helper service entered the running state.
>
>Event[89]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.203
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Server service entered the running state.
>
>Event[90]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.234
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Diagnostic Service Host service entered the running state.
>
>Event[91]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.453
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Computer Browser service entered the running state.
>
>Event[92]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.718
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Remote Desktop Services service entered the running state.
>
>Event[93]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.890
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The IPsec Policy Agent service entered the running state.
>
>Event[94]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:06.953
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Network List Service service entered the running state.
>
>Event[95]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:07.750
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
>
>Event[96]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:08.125
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Certificate Propagation service entered the running state.
>
>Event[97]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:08.250
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Remote Desktop Configuration service entered the running state.
>
>Event[98]:
>  Log Name: System
>  Source: Microsoft-Windows-Winlogon
>  Date: 2012-08-03T03:00:09.625
>  Event ID: 7001
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>User Logon Notification for Customer Experience Improvement Program
>
>Event[99]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:10.875
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Diagnostic System Host service entered the running state.
>
>Event[100]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:10.968
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Portable Device Enumerator Service service entered the running state.
>
>Event[101]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:12.234
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Remote Desktop Services UserMode Port Redirector service entered the running state.
>
>Event[102]:
>  Log Name: System
>  Source: Microsoft-Windows-UserPnp
>  Date: 2012-08-03T03:00:17.781
>  Event ID: 20003
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Driver Management has concluded the process to add Service volsnap for Device Instance ID STORAGE\VOLUME\{E91B1542-DD51-11E1-9DA0-806E6F6E6963}#0000000000100000 with the following status: 0.
>
>Event[103]:
>  Log Name: System
>  Source: Microsoft-Windows-UserPnp
>  Date: 2012-08-03T03:00:17.796
>  Event ID: 20001
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Driver Management concluded the process to install driver FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volume.inf for Device Instance ID STORAGE\VOLUME\{E91B1542-DD51-11E1-9DA0-806E6F6E6963}#0000000000100000 with the following status: 0x0.
>
>Event[104]:
>  Log Name: System
>  Source: Microsoft-Windows-UserPnp
>  Date: 2012-08-03T03:00:18.265
>  Event ID: 20003
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Driver Management has concluded the process to add Service disk for Device Instance ID IDE\DISKQEMU_HARDDISK___________________________0.9.1___\5&2770A7AF&0&0.0.0 with the following status: 0.
>
>Event[105]:
>  Log Name: System
>  Source: Microsoft-Windows-UserPnp
>  Date: 2012-08-03T03:00:18.406
>  Event ID: 20001
>  Task: N/A
>  Level: Information
>  Opcode: Info
>  Keyword: N/A
>  User: S-1-5-18
>  User Name: NT AUTHORITY\SYSTEM
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Driver Management concluded the process to install driver FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.inf for Device Instance ID IDE\DISKQEMU_HARDDISK___________________________0.9.1___\5&2770A7AF&0&0.0.0 with the following status: 0x0.
>
>Event[106]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:26.687
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Network Connections service entered the running state.
>
>Event[107]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:27.500
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Application Experience service entered the running state.
>
>Event[108]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:00:32.984
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Search service entered the running state.
>
>Event[109]:
>  Log Name: System
>  Source: Virtual Disk Service
>  Date: 2012-08-03T03:01:09.000
>  Event ID: 3
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Service started.
>
>Event[110]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:01:09.468
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Virtual Disk service entered the running state.
>
>Event[111]:
>  Log Name: System
>  Source: Virtual Disk Service
>  Date: 2012-08-03T03:01:48.000
>  Event ID: 4
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>Service stopped.
>
>Event[112]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:01:48.196
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Virtual Disk service entered the stopped state.
>
>Event[113]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:06.421
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Background Intelligent Transfer Service service entered the running state.
>
>Event[114]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:08.333
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The SSDP Discovery service entered the running state.
>
>Event[115]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:08.349
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Microsoft .NET Framework NGEN v2.0.50727_X86 service entered the running state.
>
>Event[116]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:11.109
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Microsoft .NET Framework NGEN v2.0.50727_X64 service entered the running state.
>
>Event[117]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:11.407
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Font Cache Service service entered the running state.
>
>Event[118]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:12.283
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Portable Device Enumerator Service service entered the stopped state.
>
>Event[119]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:12.438
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Software Protection service entered the running state.
>
>Event[120]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:12.886
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Defender service entered the running state.
>
>Event[121]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:13.219
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Security Center service entered the running state.
>
>Event[122]:
>  Log Name: System
>  Source: Service Control Manager
>  Date: 2012-08-03T03:02:15.283
>  Event ID: 7036
>  Task: N/A
>  Level: Information
>  Opcode: N/A
>  Keyword: Classic
>  User: N/A
>  User Name: N/A
>  Computer: WIN-NDRQPM0224U
>  Description: 
>The Windows Update service entered the running state.
>

Actions: View

Attachments on bug 835023: 594145 | 594146 | 602324 | 602325 | 602326 | 602674 | 603253