Hi Alan,
Here are some screen shots and
Event Viewer entries Let me know if you need more
( ForwardedEvents had no entries at all )
Also have installed
Sysinternals Autoruns if that will help us sort out the issues
Cheers
Windows Logs
Warning
Log Name: Application
Source: MsiInstaller
Date: 9/06/2009 4:03:13 PM
Event ID: 1001
Task Category: None
Level: Warning
Keywords: Classic
User: MAIN\Gino
Computer: MAIN
Description:
Detection of product '{AC76BA86-1033-F400-7761-000000000004}', feature 'AcrobatElements' failed during request for component '{551570F5-5C50-4312-9247-B6919900D522}'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">1001</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T06:03:13.000Z" />
<EventRecordID>150018</EventRecordID>
<Channel>Application</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data>{AC76BA86-1033-F400-7761-000000000004}</Data>
<Data>AcrobatElements</Data>
<Data>{551570F5-5C50-4312-9247-B6919900D522}</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: MsiInstaller
Date: 9/06/2009 3:58:14 PM
Event ID: 1001
Task Category: None
Level: Warning
Keywords: Classic
User: MAIN\Gino
Computer: MAIN
Description:
Detection of product '{AC76BA86-1033-F400-7761-000000000004}', feature 'AcrobatElements' failed during request for component '{551570F5-5C50-4312-9247-B6919900D522}'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">1001</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T05:58:14.000Z" />
<EventRecordID>150015</EventRecordID>
<Channel>Application</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data>{AC76BA86-1033-F400-7761-000000000004}</Data>
<Data>AcrobatElements</Data>
<Data>{551570F5-5C50-4312-9247-B6919900D522}</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: MsiInstaller
Date: 9/06/2009 3:53:59 PM
Event ID: 1001
Task Category: None
Level: Warning
Keywords: Classic
User: MAIN\Gino
Computer: MAIN
Description:
Detection of product '{AC76BA86-1033-F400-7761-000000000004}', feature 'PDFMaker' failed during request for component '{20441490-7C3D-48D7-9116-3EED4AFB30BF}'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">1001</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T05:53:59.000Z" />
<EventRecordID>150012</EventRecordID>
<Channel>Application</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data>{AC76BA86-1033-F400-7761-000000000004}</Data>
<Data>PDFMaker</Data>
<Data>{20441490-7C3D-48D7-9116-3EED4AFB30BF}</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: MsiInstaller
Date: 9/06/2009 2:30:30 PM
Event ID: 1001
Task Category: None
Level: Warning
Keywords: Classic
User: MAIN\Gino
Computer: MAIN
Description:
Detection of product '{AC76BA86-1033-F400-7761-000000000004}', feature 'AcrobatElements' failed during request for component '{551570F5-5C50-4312-9247-B6919900D522}'
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">1001</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T04:30:30.000Z" />
<EventRecordID>150005</EventRecordID>
<Channel>Application</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data>{AC76BA86-1033-F400-7761-000000000004}</Data>
<Data>AcrobatElements</Data>
<Data>{551570F5-5C50-4312-9247-B6919900D522}</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Search
Date: 9/06/2009 11:28:24 AM
Event ID: 3036
Task Category: Gatherer
Level: Warning
Keywords: Classic
User: N/A
Computer: MAIN
Description:
The content source <csc://{s-1-5-21-1247667063-1742806101-3523994643-1000}/> cannot be accessed.
Context: Application, SystemIndex Catalog
Details:
The object was not found. (0x80041201)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
<EventID Qualifiers="32768">3036</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:28:24.000Z" />
<EventRecordID>149999</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="ExtraInfo">
Context: Application, SystemIndex Catalog
Details:
The object was not found. (0x80041201)
</Data>
<Data Name="URL">csc://{s-1-5-21-1247667063-1742806101-3523994643-1000}/</Data>
</EventData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 9/06/2009 11:26:48 AM
Event ID: 5038
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: MAIN
Description:
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume2\Windows\System32\drivers\psi_mf.sys
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5038</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:26:48.618Z" />
<EventRecordID>384209</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="48" />
<Channel>Security</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume2\Windows\System32\drivers\psi_mf.sys</Data>
</EventData>
</Event>
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 9/06/2009 11:23:54 AM
Event ID: 5038
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: MAIN
Description:
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
File Name: \Device\HarddiskVolume2\Program Files\CyberLink\PowerDVD\000.fcl
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5038</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:23:54.446Z" />
<EventRecordID>384208</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="48" />
<Channel>Security</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume2\Program Files\CyberLink\PowerDVD\000.fcl</Data>
</EventData>
</Event>
Log Name: Setup
Source: Microsoft-Windows-WUSA
Date: 2/04/2009 11:31:24 AM
Event ID: 3
Task Category: None
Level: Error
Keywords:
User: MAIN\Gino
Computer: MAIN
Description:
The Windows update "Hotfix for Windows (KB954708)" could not be installed because of an error: 2149842966 "" (Command line: ""C:\Windows\system32\wusa.exe" "C:\Program Files\Common Files\Windows Live\.cache\346b33901c9b328\Windows6.0-KB954708-x86.msu" /quiet /norestart ")
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WUSA" Guid="{09608c12-c1da-4104-a6fe-b959cf57560a}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-04-02T00:31:24.224Z" />
<EventRecordID>9</EventRecordID>
<Correlation />
<Execution ProcessID="5936" ThreadID="2920" />
<Channel>Setup</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data Name="UpdateTitle">"Hotfix for Windows (KB954708)"</Data>
<Data Name="ErrorCode">2149842966</Data>
<Data Name="ErrorString">
</Data>
<Data Name="CommandLine">"C:\Windows\system32\wusa.exe" "C:\Program Files\Common Files\Windows Live\.cache\346b33901c9b328\Windows6.0-KB954708-x86.msu" /quiet /norestart </Data>
</EventData>
</Event>
Log Name: Setup
Source: Microsoft-Windows-WUSA
Date: 20/03/2009 9:38:46 AM
Event ID: 4
Task Category: None
Level: Warning
Keywords:
User: MAIN\Gino
Computer: MAIN
Description:
The Windows update Update for Windows (KB944036) requires reboot. (Command line: "wusa.exe /quiet /norestart e:\06ee8258d60914375538b4e10315ff\ie8.msu")
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WUSA" Guid="{09608c12-c1da-4104-a6fe-b959cf57560a}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-03-19T22:38:46.028Z" />
<EventRecordID>7</EventRecordID>
<Correlation />
<Execution ProcessID="4160" ThreadID="4748" />
<Channel>Setup</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data Name="UpdateTitle">Update for Windows (KB944036)</Data>
<Data Name="CommandLine">wusa.exe /quiet /norestart e:\06ee8258d60914375538b4e10315ff\ie8.msu</Data>
</EventData>
</Event>
Log Name: Setup
Source: Microsoft-Windows-WUSA
Date: 20/01/2009 9:19:44 PM
Event ID: 4
Task Category: None
Level: Warning
Keywords:
User: MAIN\Gino
Computer: MAIN
Description:
The Windows update Update for Windows (KB948610) requires reboot. (Command line: ""C:\Windows\system32\WUSA.exe" "e:\95e6cf9149bef45113a6f4db00ce\wcu\dotNetFramework\dotnetmsp\x86\NetFX3.0-KB948610-v6001-x86.msu" /quiet /norestart")
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WUSA" Guid="{09608c12-c1da-4104-a6fe-b959cf57560a}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T10:19:44.066Z" />
<EventRecordID>5</EventRecordID>
<Correlation />
<Execution ProcessID="4544" ThreadID="5172" />
<Channel>Setup</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data Name="UpdateTitle">Update for Windows (KB948610)</Data>
<Data Name="CommandLine">"C:\Windows\system32\WUSA.exe" "e:\95e6cf9149bef45113a6f4db00ce\wcu\dotNetFramework\dotnetmsp\x86\NetFX3.0-KB948610-v6001-x86.msu" /quiet /norestart</Data>
</EventData>
</Event>
Log Name: Setup
Source: Microsoft-Windows-WUSA
Date: 20/01/2009 9:03:52 PM
Event ID: 4
Task Category: None
Level: Warning
Keywords:
User: MAIN\Gino
Computer: MAIN
Description:
The Windows update Update for Windows (KB948609) requires reboot. (Command line: ""C:\Windows\system32\WUSA.exe" "e:\95e6cf9149bef45113a6f4db00ce\wcu\dotNetFramework\dotnetmsp\x86\NetFX2.0-KB948609-v6001-x86.msu" /quiet /norestart")
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WUSA" Guid="{09608c12-c1da-4104-a6fe-b959cf57560a}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-01-20T10:03:52.124Z" />
<EventRecordID>3</EventRecordID>
<Correlation />
<Execution ProcessID="3732" ThreadID="5680" />
<Channel>Setup</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data Name="UpdateTitle">Update for Windows (KB948609)</Data>
<Data Name="CommandLine">"C:\Windows\system32\WUSA.exe" "e:\95e6cf9149bef45113a6f4db00ce\wcu\dotNetFramework\dotnetmsp\x86\NetFX2.0-KB948609-v6001-x86.msu" /quiet /norestart</Data>
</EventData>
</Event>
Log Name: Setup
Source: Microsoft-Windows-WUSA
Date: 22/10/2007 11:01:24 AM
Event ID: 4
Task Category: None
Level: Error
Keywords:
User: MAIN\Gino
Computer: MAIN
Description:
The Windows update Update for Windows (KB941649) requires reboot. (Command line: ""C:\Windows\system32\wusa.exe" "C:\Users\Gino\Desktop\Microsoft update\Windows6.0-KB941649-x86.msu" ")
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WUSA" Guid="{09608c12-c1da-4104-a6fe-b959cf57560a}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2007-10-22T00:01:24.473Z" />
<EventRecordID>1</EventRecordID>
<Correlation />
<Execution ProcessID="3700" ThreadID="2912" />
<Channel>Setup</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-21-1247667063-1742806101-3523994643-1000" />
</System>
<EventData>
<Data Name="UpdateTitle">Update for Windows (KB941649)</Data>
<Data Name="CommandLine">"C:\Windows\system32\wusa.exe" "C:\Users\Gino\Desktop\Microsoft update\Windows6.0-KB941649-x86.msu" </Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 9/06/2009 11:51:57 AM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MAIN
Description:
The server {0002DF01-0000-0000-C000-000000000046} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:51:57.000Z" />
<EventRecordID>532884</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">{0002DF01-0000-0000-C000-000000000046}</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-FilterManager
Date: 9/06/2009 11:26:48 AM
Event ID: 5
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: MAIN
Description:
File System Filter 'PSI' (Version 6.0, 24/03/2009 9:03:08 PM) failed to register with Filter Manager. The final status for this operation was 0xc01c0011.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" />
<EventID>5</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:26:48.634Z" />
<EventRecordID>532865</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="56" />
<Channel>System</Channel>
<Computer>MAIN</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0xc01c0011</Data>
<Data Name="DeviceVersionMajor">6</Data>
<Data Name="DeviceVersionMinor">0</Data>
<Data Name="DeviceNameLength">3</Data>
<Data Name="DeviceName">PSI</Data>
<Data Name="DeviceTime">2009-03-24T21:03:08.000Z</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 9/06/2009 11:24:22 AM
Event ID: 7026
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MAIN
Description:
The following boot-start or system-start driver(s) failed to load:
i8042prt
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7026</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:24:22.000Z" />
<EventRecordID>532846</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">
i8042prt</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 9/06/2009 11:24:06 AM
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MAIN
Description:
The windrvNT service failed to start due to the following error:
The system cannot find the file specified.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:24:06.000Z" />
<EventRecordID>532838</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">windrvNT</Data>
<Data Name="param2">%%2</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 9/06/2009 11:24:06 AM
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MAIN
Description:
The Webroot Spy Sweeper Engine service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:24:06.000Z" />
<EventRecordID>532837</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Webroot Spy Sweeper Engine</Data>
<Data Name="param2">%%1053</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 9/06/2009 11:24:06 AM
Event ID: 7009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MAIN
Description:
A timeout was reached (30000 milliseconds) while waiting for the Webroot Spy Sweeper Engine service to connect.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7009</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-06-09T01:24:06.000Z" />
<EventRecordID>532836</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>MAIN</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">Webroot Spy Sweeper Engine</Data>
</EventData>
</Event>
This post has been edited by ucmego: 09 June 2009 - 05:21 AM