Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Problems with Windows 7


  • Please log in to reply
11 replies to this topic

#1 carinsharon

carinsharon

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 08 March 2012 - 06:37 PM

I am having a lot of problems with Windows Explorer. I do a lot of work in Win Exp for transferring a lot of files. I can select a few files to move them to another folder and then a message pops up that Win Exp has quit working and will close. Sometimes I can just one file to transfer before I get the message and then other times I start to select files and it quits working before I even have a chance to transfer them. Drag and drop just doesn't work at all. I get the dreaded message everytime I try to use it. I have even gone to edit and move file to and still get the message that Win Exp has quit working. It is very frustrating. Is there some way I can fix this? As I am lost without being able to use Windows Explorer.



CarinSharon

Edit: Moved topic from XP to the more appropriate forum. ~ Animal

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,876 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:25 AM

Posted 08 March 2012 - 06:47 PM

Try the following, so that members might get some background data: Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792

Louis

#3 ReviverSoft

ReviverSoft

    Happy to help!


  • Members
  • 1,552 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on this planet...
  • Local time:10:25 PM

Posted 08 March 2012 - 07:43 PM

If this is a recent issue, you might want to consider the following steps:

1. Restart your system in the Windows Safe Mode (use the F8 key at boot)

2. Use the Windows System Restore feature to restore your computer to a point in time when you didn't have such problems.

Please let us know how you go.
ReviverSoft - Happy to help!

#4 carinsharon

carinsharon
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 08 March 2012 - 07:47 PM

Here is my Speecy http://speccy.piriform.com/results/PMfunwg7fc7zplzvnWBrRs2



CarinSharon

#5 carinsharon

carinsharon
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 08 March 2012 - 07:53 PM

A system restore didn't work...



CarinSharon

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,876 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:25 AM

Posted 08 March 2012 - 08:34 PM

Lots of chatter on the Web circa this error situation...none of it pointing in a clear direction, IMO.

Aside from a guess that it's likely a corruption/conflict issue of some sort, I don't have anything to offer.

Let's try the following:

Download/install BlueScreenView, http://www.nirsoft.net/utils/blue_screen_view.html .

Double-click BlueScreenView.exe file.

When autoscan is done (screen comes up), click Edit/Select All...then File/Save Selected Items.

Save the report as BSOD.txt.

Open BSOD.txt, copy all content and paste it into your next reply.

Louis

#7 carinsharon

carinsharon
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 08 March 2012 - 09:37 PM

Hmmmmmmm...it is showing 0 crashes..even though Windows explorer says it quit working and then closes itself out..



CarinSharon

#8 hamluis

hamluis

    Moderator


  • Moderator
  • 55,876 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:25 AM

Posted 09 March 2012 - 08:55 AM

That's not unusual, in fact...I expected such :). I wss just hoping to get an easy trail to follow.

My next step would be to review Event Viewer entries for possible clues.

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/topic40108.html

I would focus on errors, ignoring items which are designated "information" or "warning" and see if there are any pointing to problems with explorer.exe. If there are such, note the error number assigned...and double-click on that line item to see what the detail might reveal.

Louis

#9 carinsharon

carinsharon
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 10 March 2012 - 11:24 AM

Here are a few of the events...I won't list them all as a lot of them are repeated over and over again...Anyways this will give you an idea of the errors I have been getting.



Windowslogs-Application

ERROR #1:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 3/1/2012 1:23:19 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-01T19:23:19.000000000Z" />
<EventRecordID>4163</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

Error #2:
Log Name: Application
Source: Application Error
Date: 3/1/2012 11:11:13 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000003e003c
Faulting process id: 0x7d4
Faulting application start time: 0x01ccf75d2a8434ec
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: unknown
Report Id: 8c2d56ed-63c1-11e1-918e-6c626d42f2c8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-01T17:11:13.000000000Z" />
<EventRecordID>4123</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>Explorer.EXE</Data>
<Data>6.1.7601.17567</Data>
<Data>4d672ee4</Data>
<Data>unknown</Data>
<Data>0.0.0.0</Data>
<Data>00000000</Data>
<Data>c0000005</Data>
<Data>00000000003e003c</Data>
<Data>7d4</Data>
<Data>01ccf75d2a8434ec</Data>
<Data>C:\Windows\Explorer.EXE</Data>
<Data>unknown</Data>
<Data>8c2d56ed-63c1-11e1-918e-6c626d42f2c8</Data>
</EventData>
</Event>

Error #3:
Log Name: Application
Source: SideBySide
Date: 3/1/2012 12:31:01 AM
Event ID: 72
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Activation context generation failed for "c:\program files\microsoft security client\MSESysprep.dll".Error in manifest or policy file "c:\program files\microsoft security client\MSESysprep.dll" on line 10. The element imaging appears as a child of element urn:schemas-microsoft-com:asm.v1^assembly which is not supported by this version of Windows.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="SideBySide" />
<EventID Qualifiers="49409">72</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-01T06:31:01.000000000Z" />
<EventRecordID>4120</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>imaging</Data>
<Data>urn:schemas-microsoft-com:asm.v1^assembly</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>c:\program files\microsoft security client\MSESysprep.dll</Data>
<Data>c:\program files\microsoft security client\MSESysprep.dll</Data>
<Data>10</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>

Error #4:
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 2/29/2012 9:43:00 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-01T03:43:00.000000000Z" />
<EventRecordID>4079</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

Error #5:

Log Name: Application
Source: SideBySide
Date: 2/29/2012 12:31:06 AM
Event ID: 72
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Activation context generation failed for "c:\program files\microsoft security client\MSESysprep.dll".Error in manifest or policy file "c:\program files\microsoft security client\MSESysprep.dll" on line 10. The element imaging appears as a child of element urn:schemas-microsoft-com:asm.v1^assembly which is not supported by this version of Windows.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="SideBySide" />
<EventID Qualifiers="49409">72</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-02-29T06:31:06.000000000Z" />
<EventRecordID>4044</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>imaging</Data>
<Data>urn:schemas-microsoft-com:asm.v1^assembly</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>c:\program files\microsoft security client\MSESysprep.dll</Data>
<Data>c:\program files\microsoft security client\MSESysprep.dll</Data>
<Data>10</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>

Error #6:
Log Name: Application
Source: Application Error
Date: 2/28/2012 6:07:08 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: SHELL32.dll, version: 6.1.7601.17755, time stamp: 0x4f042c80
Exception code: 0xc0000005
Fault offset: 0x000000000008202c
Faulting process id: 0x2dc
Faulting application start time: 0x01ccf67509c223a9
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\system32\SHELL32.dll
Report Id: 513c556b-6269-11e1-a2b4-6c626d42f2c8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-02-29T00:07:08.000000000Z" />
<EventRecordID>3953</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>explorer.exe</Data>
<Data>6.1.7601.17567</Data>
<Data>4d672ee4</Data>
<Data>SHELL32.dll</Data>
<Data>6.1.7601.17755</Data>
<Data>4f042c80</Data>
<Data>c0000005</Data>
<Data>000000000008202c</Data>
<Data>2dc</Data>
<Data>01ccf67509c223a9</Data>
<Data>C:\Windows\explorer.exe</Data>
<Data>C:\Windows\system32\SHELL32.dll</Data>
<Data>513c556b-6269-11e1-a2b4-6c626d42f2c8</Data>
</EventData>
</Event>

Error #7:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 2/27/2012 10:00:58 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-02-28T04:00:58.000000000Z" />
<EventRecordID>3913</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

Error #8:

Log Name: Application
Source: Application Error
Date: 2/27/2012 7:43:33 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e
Exception code: 0xc0000420
Fault offset: 0x00000000000c40f2
Faulting process id: 0x148
Faulting application start time: 0x01ccf502c82e8156
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 09f6c05f-6149-11e1-b570-6c626d42f2c8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-02-27T13:43:33.000000000Z" />
<EventRecordID>3845</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>Explorer.EXE</Data>
<Data>6.1.7601.17567</Data>
<Data>4d672ee4</Data>
<Data>ntdll.dll</Data>
<Data>6.1.7601.17725</Data>
<Data>4ec4aa8e</Data>
<Data>c0000420</Data>
<Data>00000000000c40f2</Data>
<Data>148</Data>
<Data>01ccf502c82e8156</Data>
<Data>C:\Windows\Explorer.EXE</Data>
<Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
<Data>09f6c05f-6149-11e1-b570-6c626d42f2c8</Data>
</EventData>
</Event>

Error #9:

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 3/10/2012 8:42:37 AM
Event ID: 3
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: Sharon-PC
Description:
Session "Microsoft Security Client OOBE" stopped due to the following error: 0xC000000D
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>14</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2012-03-10T14:42:37.534014100Z" />
<EventRecordID>72</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="172" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Sharon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Microsoft Security Client OOBE</Data>
<Data Name="FileName">C:\ProgramData\Microsoft\Microsoft Security Client\Support\EppOobe.etl</Data>
<Data Name="ErrorCode">3221225485</Data>
<Data Name="LoggingMode">5</Data>
</EventData>
</Event>

Error #10:

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/10/2012 8:41:51 AM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
The server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-10T14:41:51.000000000Z" />
<EventRecordID>33593</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}</Data>
</EventData>
</Event>

Error #11:

Log Name: Application
Source: SideBySide
Date: 3/10/2012 12:30:56 AM
Event ID: 72
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Activation context generation failed for "c:\program files\microsoft security client\MSESysprep.dll".Error in manifest or policy file "c:\program files\microsoft security client\MSESysprep.dll" on line 10. The element imaging appears as a child of element urn:schemas-microsoft-com:asm.v1^assembly which is not supported by this version of Windows.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="SideBySide" />
<EventID Qualifiers="49409">72</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-10T06:30:56.000000000Z" />
<EventRecordID>5117</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>imaging</Data>
<Data>urn:schemas-microsoft-com:asm.v1^assembly</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>c:\program files\microsoft security client\MSESysprep.dll</Data>
<Data>c:\program files\microsoft security client\MSESysprep.dll</Data>
<Data>10</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>

Error #12:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 3/9/2012 6:54:02 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-09T12:54:02.000000000Z" />
<EventRecordID>5049</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

Error #13:

Log Name: Application
Source: Application Error
Date: 3/9/2012 2:38:24 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Faulting application name: wsftpgui.exe, version: 12.3.0.1, time stamp: 0x4cca0f74
Faulting module name: LIBEAY32.dll, version: 0.0.0.0, time stamp: 0x4921cfb5
Exception code: 0xc0000005
Fault offset: 0x00082553
Faulting process id: 0x460
Faulting application start time: 0x01ccfd7eafb37372
Faulting application path: C:\Program Files (x86)\Ipswitch\WS_FTP 12\wsftpgui.exe
Faulting module path: C:\Program Files (x86)\Ipswitch\WS_FTP 12\LIBEAY32.dll
Report Id: 3b4c49e7-69c3-11e1-a50a-6c626d42f2c8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-09T08:38:24.000000000Z" />
<EventRecordID>5022</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>wsftpgui.exe</Data>
<Data>12.3.0.1</Data>
<Data>4cca0f74</Data>
<Data>LIBEAY32.dll</Data>
<Data>0.0.0.0</Data>
<Data>4921cfb5</Data>
<Data>c0000005</Data>
<Data>00082553</Data>
<Data>460</Data>
<Data>01ccfd7eafb37372</Data>
<Data>C:\Program Files (x86)\Ipswitch\WS_FTP 12\wsftpgui.exe</Data>
<Data>C:\Program Files (x86)\Ipswitch\WS_FTP 12\LIBEAY32.dll</Data>
<Data>3b4c49e7-69c3-11e1-a50a-6c626d42f2c8</Data>
</EventData>
</Event>

Error #14:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 3/8/2012 4:57:04 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-08T22:57:04.000000000Z" />
<EventRecordID>4967</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

Error #15:

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 3/8/2012 4:55:13 PM
Event ID: 3
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: Sharon-PC
Description:
Session "Microsoft Security Client OOBE" stopped due to the following error: 0xC000000D
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>14</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2012-03-08T22:55:13.222013600Z" />
<EventRecordID>69</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="172" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Sharon-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Microsoft Security Client OOBE</Data>
<Data Name="FileName">C:\ProgramData\Microsoft\Microsoft Security Client\Support\EppOobe.etl</Data>
<Data Name="ErrorCode">3221225485</Data>
<Data Name="LoggingMode">5</Data>
</EventData>
</Event>

Error #16:

Log Name: Application
Source: Application Error
Date: 3/8/2012 1:19:46 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Sharon-PC
Description:
Faulting application name: explorer.exe, version: 6.1.7601.17567, time stamp: 0x4d672ee4
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e
Exception code: 0xc0000420
Fault offset: 0x00000000000c40f2
Faulting process id: 0x1378
Faulting application start time: 0x01ccfd600940e26b
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: aa4c7f63-6953-11e1-8ed8-6c626d42f2c8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-08T19:19:46.000000000Z" />
<EventRecordID>4860</EventRecordID>
<Channel>Application</Channel>
<Computer>Sharon-PC</Computer>
<Security />
</System>
<EventData>
<Data>explorer.exe</Data>
<Data>6.1.7601.17567</Data>
<Data>4d672ee4</Data>
<Data>ntdll.dll</Data>
<Data>6.1.7601.17725</Data>
<Data>4ec4aa8e</Data>
<Data>c0000420</Data>
<Data>00000000000c40f2</Data>
<Data>1378</Data>
<Data>01ccfd600940e26b</Data>
<Data>C:\Windows\explorer.exe</Data>
<Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
<Data>aa4c7f63-6953-11e1-8ed8-6c626d42f2c8</Data>
</EventData>
</Event>

Error #17:

Thanks for looking,

CarinSharon



#10 hamluis

hamluis

    Moderator


  • Moderator
  • 55,876 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:25 AM

Posted 10 March 2012 - 01:08 PM

Worth a look, http://support.microsoft.com/default.aspx?scid=kb;en-US;2545227 . I'd try the FixIt option before doing anything else.

Louis

#11 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,946 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:25 AM

Posted 10 March 2012 - 01:59 PM

Also, it looks like you are running 'Nero Scout' which can tie into Windows Explorer. You can try turning it off and see if it helps.

James

#12 carinsharon

carinsharon
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 AM

Posted 10 March 2012 - 02:13 PM

Ok I have tried the fix it option so will see if that does the trick..I will let you know, but it probably won't be until Monday unless something happens between now and then.



Thank You for your help,

CarinSharon




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users