Hi,
Shutdown problems, and system freezes, application event log:
Event Type: Information
Event Source: COM+
Event Category: None
Event ID: 781
Date: 25-5-2007
Time: 22:17:51
User: N/A
Computer: CP1098857-A
Description:
The COM+ sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\COM3\Eventlog.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: EventSystem
Event Category: None
Event ID: 4625
Date: 25-5-2007
Time: 22:17:40
User: N/A
Computer: CP1098857-A
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: ESENT
Event Category: General
Event ID: 100
Date: 25-5-2007
Time: 22:13:19
User: N/A
Computer: CP1098857-A
Description:
svchost (952) The database engine 5.02.3790.3959 started.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 25-5-2007
Time: 21:45:46
User: NT AUTHORITY\SYSTEM
Computer: CP1098857-A
Description:
Windows saved user CP1098857-A\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 25-5-2007
Time: 21:45:21
User: CP1098857-A\Administrator
Computer: CP1098857-A
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Microsoft Windows [Version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>tasklist /svc
Image Name PID Services
========================= ========
============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 464 N/A
csrss.exe 524 N/A
winlogon.exe 548 N/A
services.exe 604 Eventlog, PlugPlay
lsass.exe 616 ProtectedStorage
svchost.exe 800 DcomLaunch
svchost.exe 880 RpcSs
svchost.exe 952 AeLookupSvc, AudioSrv, dmserver,
EventSystem, helpsvc, Netman, Nla,
NtmsSvc,
seclogon, SENS, ShellHWDetection,
TermService, Themes, winmgmt, Wmi
svchost.exe 1016 Dhcp, Dnscache
scardsvr.exe 1116 SCardSvr
mdm.exe 1168 MDM
nvsvc64.exe 1232 NVSvc
svchost.exe 1268 stisvc
svchost.exe 1360 W32Time
dllhost.exe 1416 COMSysApp
explorer.exe 1816 N/A
ctfmon.exe 2020 N/A
CTDetect.exe 2044 N/A
ctfmon.exe 228 N/A
SetPoint.exe 236 N/A
AMD_PwrMon.exe 1092 N/A
daemon.exe 1140 N/A
CTHELPER.EXE 760 N/A
CTXFIHLP.EXE 1084 N/A
DLLML.exe 1204 N/A
VolPanel.exe 1344 N/A
CTXFISPI.EXE 1692 N/A
SetPoint32.exe 1696 N/A
KHALMNPR.EXE 872 N/A
NotiMan.exe 2796 N/A
mmc.exe 2636 N/A
wmiprvse.exe 2684 N/A
iexplore.exe 2352 N/A
AcroRd32.exe 3040 N/A
iexplore.exe 2656 N/A
TextPad.exe 284 N/A
iexplore.exe 2224 N/A
taskmgr.exe 2440 N/A
cmd.exe 712 N/A
tasklist.exe 2768 N/A
wmiprvse.exe 2396 N/A
C:\Documents and Settings\Administrator>
Could this be the cause of bad system shutdown's and/or system freezes ?
Latest addition: Logitech G3 mouse to Skybuck's Dream PC.
Bye,
Bookmarks