bsod after windows 7 install HELP PLEASE!

hi i have an isse with my comp not sure were to start but here it goes.

initial problem with it was http://forums.whatthetech.com/index.php?showtopic=121213

so i decided to install windows 7 now the issue im having is random bsod crash not sure what is causing it.
have verious different event id

Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

572


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

589


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

590


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

571


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

568


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

569


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

570


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

595


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

596


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

613


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

594


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

591


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

592


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:14:24
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

593


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

538


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

539


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

540


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

537


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: MsiInstaller
Date: 29/11/2011 14:04:59
Event ID: 11712
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Shez-PC
Description:
Product: Microsoft Fix it 50736 – Error 1712. One or more of the files required to restore your computer to its previous state could not be found. Restoration will not be possible.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


11712
2
0
0x80000000000000

525
Application
Shez-PC



Product: Microsoft Fix it 50736 – Error 1712. One or more of the files required to restore your computer to its previous state could not be found. Restoration will not be possible.
(NULL)
(NULL)
(NULL)
(NULL)
(NULL)


7B38424539423643422D304432322D343535322D413244392D3731384638353135463334427D



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

535


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

536


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

565


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

566


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:11:22
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

567


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:10:57
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

562


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

541


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:06:39
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

542


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:10:57
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

561


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 20:10:48
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

689


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 20:10:48
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

690


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 21:12:06
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

713


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: VSS
Date: 29/11/2011 20:08:47
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {26f0e127-309b-4e81-984d-5dcd2035e78d}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

681
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {26f0e127-309b-4e81-984d-5dcd2035e78d}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313037322D205449443A202030303030313436
382D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

650


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-WMI
Date: 28/11/2011 23:44:23
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

153


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 20:08:12
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

679


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:22
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

730


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:23
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

731


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:23
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

732


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:22
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

729


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: VSS
Date: 29/11/2011 21:12:45
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {4219566a-f36f-4fb5-96e8-b3f696dca16e}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

714
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {4219566a-f36f-4fb5-96e8-b3f696dca16e}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313034302D205449443A202030303030303938
342D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:22
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

727


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:22
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

728


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

618


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

619


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

620


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

617


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: VSS
Date: 29/11/2011 12:01:34
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {2d4282dd-f0f9-4e1c-87dd-efb95e0ac619}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

380
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {2d4282dd-f0f9-4e1c-87dd-efb95e0ac619}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313039362D205449443A202030303030323131
322D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

615


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

616


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

647


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

648


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

649


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

646


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

643


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

644


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:20:15
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

645


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: MsiInstaller
Date: 29/11/2011 14:04:59
Event ID: 11704
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Shez-PC
Description:
Product: Microsoft Fix it 50736 – Error 1704. An installation for Microsoft .NET Framework 4 Client Profile is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


11704
2
0
0x80000000000000

524
Application
Shez-PC



Product: Microsoft Fix it 50736 – Error 1704. An installation for Microsoft .NET Framework 4 Client Profile is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?
(NULL)
(NULL)
(NULL)
(NULL)
(NULL)


7B38424539423643422D304432322D343535322D413244392D3731384638353135463334427D



Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

307


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

306


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

305


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 13:43:32
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

457


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

310


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

309


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

308


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

300


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

299


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

298


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

301


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

304


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

303


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

302


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: VSS
Date: 29/11/2011 13:09:45
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {9beaa20f-1d77-46a4-94e8-9cef1296a14a}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

432
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {9beaa20f-1d77-46a4-94e8-9cef1296a14a}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313036302D205449443A202030303030313933
362D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: VSS
Date: 29/11/2011 05:36:44
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {a5eacebf-e12e-4ff5-bd4a-620dc247ae75}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

330
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {a5eacebf-e12e-4ff5-bd4a-620dc247ae75}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030303938342D205449443A202030303030323633
322D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 05:35:56
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

328


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 13:08:49
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

431


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 12:01:03
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

378


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: VSS
Date: 29/11/2011 11:46:13
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {f2c74654-a573-4b01-a96f-36c5d852c134}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

362
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {f2c74654-a573-4b01-a96f-36c5d852c134}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313034382D205449443A202030303030313037
362D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 11:45:43
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

360


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

313


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

312


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

311


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

314


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:10
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

317


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

316


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:09
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

315


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:15
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

273


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

272


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

271


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:16
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

274


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:23
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

278


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:20
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

277


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:19
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

276


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

266


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

265


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 14:04:50
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

520


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

267


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

270


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

269


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:14
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

268


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: VSS
Date: 29/11/2011 05:21:33
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {8069c3f8-5893-47eb-9aaf-506ba959b97e}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

291
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {8069c3f8-5893-47eb-9aaf-506ba959b97e}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030303432342D205449443A202030303030323038
302D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:25
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

287


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

286


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:55
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

294


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

297


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:22:08
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

296


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:55
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

295


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

281


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

280


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:23
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

279


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

282


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

285


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

284


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 29/11/2011 05:21:24
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


4107
0
2
0
0
0x8080000000000000

283


Application
Shez-PC



http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:23
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

733


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:24:55
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

770


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 21:50:10
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

790


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 29/11/2011 21:22:18
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

766


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: VSS
Date: 29/11/2011 21:22:54
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {4a5febf0-a637-443d-b958-c46049d6b784}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

767
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {4a5febf0-a637-443d-b958-c46049d6b784}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313038342D205449443A202030303030313130
382D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:17:08
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

741


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:17:08
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

740


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:24:55
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

771


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 30/11/2011 12:34:30
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

844


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-WMI
Date: 30/11/2011 12:22:52
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

814


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: Microsoft-Windows-WMI
Date: 30/11/2011 12:31:01
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


10
0
2
0
0
0x80000000000000

837


Application
Shez-PC



//./root/CIMV2
SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99
0x80041003



Log Name: Application
Source: VSS
Date: 30/11/2011 12:31:29
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {6528baa0-df0a-4abe-999d-f3f87dc48493}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

839
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {6528baa0-df0a-4abe-999d-f3f87dc48493}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313033322D205449443A202030303030313035
322D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 30/11/2011 12:25:14
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

815


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 30/11/2011 12:25:14
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

816


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: VSS
Date: 29/11/2011 21:50:42
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Shez-PC
Description:
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {685f9cc6-ba67-4bef-9d9b-3cce5de5973b}
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


8194
2
0
0x80000000000000

792
Application
Shez-PC



0x80070005, Access is denied.



Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {685f9cc6-ba67-4bef-9d9b-3cce5de5973b}
2D20436F64653A20575254575254494330303030313236302D2043616C6C3A205752545752544
94330303030313231342D205049443A202030303030313037322D205449443A202030303030313935
322D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E6578652
02D6B204E6574776F726B53657276696365202020202020202D20557365723A204E616D653A204E54
20415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230



Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 30/11/2011 12:34:30
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

843


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:52:48
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

796


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
WmiApRpl
WmiApRpl
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:52:48
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3012
0
2
0
0
0x8000000000000000

795


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
Performance
16
37070000000000000000000009030000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 14:16:20
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service SMSvcHost 4.0.0.0 (SMSvcHost 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

614


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
SMSvcHost 4.0.0.0
SMSvcHost 4.0.0.0
8
F20300004D070000




Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 29/11/2011 21:15:23
Event ID: 3011
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Shez-PC
Description:
Unloading the performance counter strings for service MSDTC Bridge 4.0.0.0 (MSDTC Bridge 4.0.0.0) failed. The first DWORD in the Data section contains the error code.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">


3011
0
2
0
0
0x8000000000000000

734


Application
Shez-PC



http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
MSDTC Bridge 4.0.0.0
MSDTC Bridge 4.0.0.0
8
F20300004D070000