Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Audit events have been dropped by the transport error


  • Please log in to reply
3 replies to this topic

#1 enchantingsylph

enchantingsylph

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 19 June 2014 - 12:10 PM

Audit events have been dropped by the transport.  0

I keep getting this error in my event log after the computer shuts itself off.  It is getting more and more often and has happened twice in the last hour.  This is a computer I have set up as a media server for the household running constantly, so this is a huge problem.  Can someone help me figure out what is going on and keep this thing up and running? I have tried updating everything and deleting all non essential startup items.  I am having no luck.  It ran for five days straight the last time and suddenly is having problems again.  I am running windows 7 home premium 32 bit.



BC AdBot (Login to Remove)

 


m

#2 hamluis

hamluis

    Moderator


  • Moderator
  • 54,855 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:20 PM

Posted 19 June 2014 - 12:22 PM

Seems difficult to get a handle on cause...possibilities include damaged registry, hardware, malware.

 

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis


Edited by hamluis, 05 November 2014 - 04:05 PM.


#3 enchantingsylph

enchantingsylph
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 19 June 2014 - 06:20 PM

MiniToolBox by Farbar  Version: 18-06-2014 01
Ran by Beth (administrator) on 19-06-2014 at 18:14:12
Running from "C:\Users\Beth\Downloads"
Microsoft Windows 7 Home Premium   (X86)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (02/23/2014 01:42:31 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:31 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:28 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:27 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:26 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:24 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:18 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (02/23/2014 01:42:16 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (06/19/2014 11:52:49 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 11:40:51 AM on ‎6/‎19/‎2014 was unexpected.

Error: (06/19/2014 11:25:04 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 11:03:54 AM on ‎6/‎19/‎2014 was unexpected.

Error: (06/18/2014 04:28:01 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 2:35:07 AM on ‎6/‎18/‎2014 was unexpected.

Error: (06/12/2014 01:38:26 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 6:07:03 AM on ‎6/‎11/‎2014 was unexpected.

Error: (06/11/2014 01:26:25 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 1:23:50 AM on ‎6/‎11/‎2014 was unexpected.

Error: (06/04/2014 05:29:21 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 3:25:16 AM on ‎6/‎4/‎2014 was unexpected.

Error: (05/31/2014 00:55:08 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 12:51:20 AM on ‎5/‎31/‎2014 was unexpected.

Error: (05/26/2014 10:31:57 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 9:24:32 PM on ‎5/‎26/‎2014 was unexpected.

Error: (05/22/2014 05:30:17 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 5:28:34 PM on ‎5/‎22/‎2014 was unexpected.

Error: (05/13/2014 09:10:55 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 9:08:51 PM on ‎5/‎13/‎2014 was unexpected.


Microsoft Office Sessions:
=========================
Error: (02/23/2014 01:42:31 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\Windows\regedit.exe

Error: (02/23/2014 01:42:31 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\program files\windows sidebar\sidebar.exe

Error: (02/23/2014 01:42:28 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\Windows\System32\oobe\msoobe.exe

Error: (02/23/2014 01:42:27 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\Windows\System32\regsvr32.exe

Error: (02/23/2014 01:42:26 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\Windows\System32\oobe\msoobe.exe

Error: (02/23/2014 01:42:24 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\Windows\System32\sysprep\sysprep.exe

Error: (02/23/2014 01:42:18 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\Windows\System32\oobe\msoobe.exe

Error: (02/23/2014 01:42:16 PM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"d:\program files\windows mail\WinMail.exe



=========================== Installed Programs ============================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.30740 - BitTorrent Inc.)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.20.100.31206 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{C2796CF4-6517-00C1-9F70-6A9C50680D29}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.81206.1620 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.1206.1602.28764 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2013.1206.1603.28764 - Advanced Micro Devices, Inc.) Hidden
Deluge 1.3.6 (HKLM\...\Deluge) (Version:  - )
FileBot (HKLM\...\{FBCF5D70-D9AD-444F-9270-B540319D2A49}) (Version: 3.8 - Reinhard Pointner)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 en-US) (HKLM\...\Mozilla Firefox 30.0 (x86 en-US)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
Newshosting (HKLM\...\{DCA97FF3-B0E9-4B73-AF4D-8457F0CE0AC0}) (Version: 1.5.3 - Newshosting)
NzbDrone version 2.0 (HKLM\...\{56C1065D-3523-4025-B76D-6F73F67F7F71}_is1) (Version: 2.0 - NzbDrone)
OpenOffice 4.1.0 (HKLM\...\{C87EF11D-36E9-479D-9898-7541EA1E8A6A}) (Version: 4.10.9764 - Apache Software Foundation)
Plex Media Server (HKLM\...\{bcb7db0e-500f-445b-8200-bdde7f3c7f08}) (Version: 0.9.910 - Plex, Inc.)
Plex Media Server (Version: 0.9.910 - Plex, Inc.) Hidden
SABnzbd 0.7.16 (HKLM\...\SABnzbd) (Version: 0.7.16 - The SABnzbd Team)
Seagate DiscWizard (HKLM\...\{AC5BFE42-B72A-467C-B9B2-8BF77C6D4D70}) (Version: 16.0.5840 - Seagate)
Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
TorGuard 1.0.0 (1050) (HKLM\...\{6B859FAA-B180-4779-A754-086A308C49CC-ViscosityV~7814C94C_is1) (Version: 1.0.0 - VPNetworks LLC)
TorGuard 4.1.3-Z1 (HKLM\...\1277-7310-4370-8957) (Version: 4.1.3-Z1 - TorGuard)
TorGuard Proxy (HKLM\...\{A2040DEB-1AC2-4474-8E86-EA89CE0E0D2B}) (Version: 1.0.1 - TorGuard)
VLC media player 2.0.7 (HKLM\...\VLC media player) (Version: 2.0.7 - VideoLAN)

========================= Memory info: ===================================

Percentage of memory in use: 68%
Total physical RAM: 3327.3 MB
Available physical RAM: 1050 MB
Total Pagefile: 6652.89 MB
Available Pagefile: 4307.25 MB
Total Virtual: 2047.88 MB
Available Virtual: 1950.82 MB

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:298.09 GB) (Free:266.88 GB) NTFS
3 Drive d: (OS 7) (Fixed) (Total:300 GB) (Free:170.7 GB) NTFS
4 Drive f: (Storage 7) (Fixed) (Total:1097.26 GB) (Free:1041.36 GB) NTFS
6 Drive m: (Media) (Fixed) (Total:2794.39 GB) (Free:1078.11 GB) NTFS
7 Drive t: (Television) (Fixed) (Total:2794.39 GB) (Free:1686.4 GB) NTFS

========================= Users: ========================================

User accounts for \\MEDIABOX

Administrator            Beth                     Guest                    


**** End of log ****

 

http://speccy.piriform.com/results/6ErgR36o6BuWF5QwaO2h8mo

 


Edited by enchantingsylph, 19 June 2014 - 06:37 PM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 54,855 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:20 PM

Posted 19 June 2014 - 08:17 PM

CPU temp is in the max operating range (55-70Celsius).  That may explain the abrupt system shutdowns.

 

No AV installed, no firewall active, hotfixes not installed until yesterday...system is good candidate for intrusion/infection, IMO.

 

Louis

 

 

 

 






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users