Windows 8.1 Microsoft-Windows-Kernel-PnP EventID 219
This event shows up in event Viewer and I do not find a fix for it that applay for Windows 8.1.
Can I use the Windows 7 hotfix?
AS
That depends on what the fix you mention is. That error is because a PNP device failed to load/start. BTW that is only a warning not an error so you can probably ignore it
Wanikiya and Dyami--Team Zigzag
Similar Messages
-
Hello,
I upgraded my machine to Win7 x64 Pro about 3 weeks ago. My HW is an Asus mobo, Intel Q9450 w/8GB RAM. The boot drives are two Raptors configured as RAID01. All the drivers are the latest available from Intel, Asus and 3rd party vendors. My WEI is 5.9, limited by the disk transfer rates, otherwise 7.1 and 7.2 on the other indexes.
I've been receiving these errors at boot;
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 11/10/2009 7:51:03 AM
Event ID: 4
Task Category: Logging
Level: Warning
Keywords: Session
User: SYSTEM
Computer: herbt-PC
Description:
The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>10</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2009-11-10T12:51:03.393985600Z" />
<EventRecordID>28</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="164" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>herbt-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">ReadyBoot</Data>
<Data Name="FileName">C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">0</Data>
<Data Name="MaxFileSize">20971520</Data>
</EventData>
</Event>
The image for PID 4 is listed as System.
My searches have turned up similar events listed but no solutions.
Any help would be appreciated.
Cheers!Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035
As suggested above I assume this is a microsoft issue? It has been discussed here and other forums for quite some time. I never have seen a fix? I wish when we received errors of this nature microsoft would tell us what they were. How is this related to superfetch? What is superfetch? Why would superfetch have changed?
BY THE WAY.... Superfetch is on(started) is on automatic and logs on as local system. So this is not the cause of my issue. Also what is readyboot? Does the average computer really know what these programs/services or unique microsoft words/terms are?
System
Provider
[ Name]
Microsoft-Windows-Kernel-EventTracing
[ Guid]
{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
EventID
2
Version
0
Level
2
Task
2
Opcode
12
Keywords
0x8000000000000010
TimeCreated
[ SystemTime]
2010-04-11T14:35:49.829600000Z
EventRecordID
25
Correlation
Execution
[ ProcessID]
4
[ ThreadID]
48
Channel
Microsoft-Windows-Kernel-EventTracing/Admin
Computer
Daddy-PC
Security
[ UserID]
S-1-5-18
EventData
SessionName
Circular Kernel Context Logger
FileName
ErrorCode
3221225525
LoggingMode
268436608
Windows7, Windows, Win7 -
Microsoft-Windows-Kernel-EventTracing Error 2 happens twice at boot EX2013CU7
Not sure what it is. The server is running Server 2012 R2 and it is a VM. It has exchange and associated necessary features, roles, and prerequisites and nothing else installed. I have uninstalled and reinstalled Exchange 2013 CU7 3 times
and each time this error has been present. It happens twice at boot and seems to cause no problems.
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 12/23/2014 10:06:53 AM
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: myserver.mydomain.local
Description:
Session "FastDocTracingSession" failed to start with the following error: 0xC0000035
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2014-12-23T17:06:53.273839900Z" />
<EventRecordID>2</EventRecordID>
<Correlation />
<Execution ProcessID="3640" ThreadID="10016" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Valis.PBJFS.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">FastDocTracingSession</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225525</Data>
<Data Name="LoggingMode">9</Data>
</EventData>
</Event>Hi,
This Event can be ignored. To prevent this Event prompt, please follow steps below:
1. Set the MetricsSelfSelectionSelected value in the registry to
2.
2. Restart the
Windows Azure Telemetry Service service.
3. Stop the
WindowsAzure-GuestAgent-Metrics event trace session.
More details, please refer following blog:
Event ID 2: Session "WindowsAzure-GuestAgent-Metrics" failed to start with the following error: 0xC0000035
http://blogs.msdn.com/b/mast/archive/2014/07/09/event-id-2-session-quot-windowsazure-guestagent-metrics-quot-failed-to-start-with-the-following-error-0xc0000035.aspx
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support -
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 11/10/2010 4:31:37 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: Felix-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2010-10-11T06:31:37.175213500Z" />
<EventRecordID>96455</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Felix-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">244</Data>
<Data Name="BugcheckParameter1">0x3</Data>
<Data Name="BugcheckParameter2">0xfffffa8002d20b30</Data>
<Data Name="BugcheckParameter3">0xfffffa8002d20e10</Data>
<Data Name="BugcheckParameter4">0xfffff80002fcd5d0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event><Data Name="BugcheckCode">244</Data>
244 (dez) = F4 (hex)
Bug Check 0xF4: CRITICAL_OBJECT_TERMINATION -
This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.
Cause
Several processes and threads are necessary for the operation of the system. When they are terminated for any reason, the system can no longer function.
Please copy the dmp files from the folder C:\Windows\Minidump first to your desktop, zip all dmp into 1 zip file and upload the zip file to your Skydrive [1] and post a link here, so that I can look at the dumps with the debugger and to to see the cause of
the crash.
André
[1]
http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/ -
Question about the Filter type for the trace provide "Microsoft-Windows-Kernel-File"
Hello all,
I have moved this question from the Windows
Server General Forum accorfing to the suggestion from Mr. Justin Gu
I have a question about the Filter function for the trace provider "Microsoft-Windows-Kernel-File".
I can find the Filter function with the following operation.
Mr. Justin Gu wrote:
> You create a Data Collector Set for the trace provider "Microsoft-Windows-Kernel-File" and finish completely, then you > can right click it and select Properties.
In the Properties dialog box, click Filter and
then select ‘Edit…’. You will be> able
to see the Filter type and Filter data in the Filter dialog box.
What
Kind of Filter can
I use in this Filter dialog box?
And, how can I set to exclude the some kind of datas?
Could you give me your suggestion?
Thank you.What
Kind of Filter can
I use in this Filter dialog box?
And, how can I set to exclude the some kind of datas?
Could you give me your suggestion?
Thank you.
I'm looking for the same information. -
I keep having my screen go black and then Win 7 pro gives me this error:
"Display driver NVIDIA Windows Kernel Mode Driver, Version 188.80 stopped responding and successfully recovered."
everything is fine after that.
happens 3 or 4 times a day.
'''doesn't '''seem to be on graphics or flash heavy sites.
driver is up to date and tried reloading driver.I keep having my screen go black and then Win 7 pro gives me this error:
"Display driver NVIDIA Windows Kernel Mode Driver, Version 188.80 stopped responding and successfully recovered."
everything is fine after that.
happens 3 or 4 times a day.
'''doesn't '''seem to be on graphics or flash heavy sites.
driver is up to date and tried reloading driver. -
Windows 8.1 Nvidia Windows Kernel Mode Driver Driver stopped responding and recovered?
I have the newst version of the 15" MBP Retina with the Haswell chip and Nvidia GT 750m. The problem I started having about 1 week ago is intermittent it seems, but involves the graphics driver when I'm in windows.
The screen goes flashes to black for about 5 seconds then recovers and the display comes back up. It just continues to do this every 10-15 seconds and the error messages displayed is "Display driver stopped responding and has recovered" below that it says Display driver Nvidia Windows Kernel Mode Driver Vers.####### stopped responding and has successfully recoverd.
What's crazy is the problem is not limited to any particular version of the driver! I used system restore and went back a few weeks just to make sure, thinking it was just a conflict with a new update somewhere. I have tried to install old versions of the 64-bit Geforce driver and it is irrelevant, the problem keeps cropping back up. I dont' know what to do, and can't even function in the Windows side hardly at all for very long.
Please help
Thanks
RobertHi Robert,
I dont know if this will help you, but yesterday when I logged into Win 8.1 on the same rMBP as you I got an update notice for a new driver for the NVIDIA graphics card.
This is the driver that I got the notice for. http://www.nvidia.com/download/driverResults.aspx/73780/en-us
You may want to download this and try installing it.
Good Luck -
Not able to deploy windows kernel driver on target machine from visual studio
I have created windows kernel driver, and signed it with production certificate. Now I could install this driver on my target machine manually(copying inf, cat and sys).
I want to make use of the visual studio 2013's deployment facility to deploy the driver automatically. But when I try to add the target computer(with administrative account) it failed with error message "The account credentials used to connect to the
target computer could not gain administrator access to the target computer. Try using the built-in Administrator account".
what possibly could be wrong?Pavel The host machine is on a domain(say ABC) and I am logged In as the domain administrator. On The target machine I am logged in as the local administrator. Now while adding the target computer from visual studio I am asked for the administrator account
credentials and I am providing the local administrator credentials there.
Pavel I found it is necessary to install "WDK Test Target Setup x64-x64_en-us.msi" on the target machine which I had not run. Once installing that I passed through the previously mentioned steps and after performing few installations target machine
got rebooted. And then the deployment process hanged on step a "Attempting to connect...". Tried this for multiple times but result in to the same problem. -
Nvidia Windows Kernel Driver Mode 347.52
I play World of Warcraft and recently my game has been crashing and this message keeps coming up Nvidia Windows Kernel Driver Mode 347.52 has stopped working. It also tells me my computer was unable to download the solution and to do it later but
it doesn't give me a site to go and re download what I am supposed to download. Can someone direct me to a site where I might be able to fix this problem.Here is the forum for you
-
I am a noob and need help.nvidia windows kernel mode driver stopped responding
Hello
I am a noob and need help. It happens when I run in SLI.
I keep on getting this error message: "nvidia windows kernel mode driver stopped responding and has been recovered." In most cases, screen freezes so I have to reboot.
Thanks for the help
S/N602-V282-22SB1307082992
602-V282-22SB1307082991
601--7811-010B1306093332
BennoSne
Video card driver version 337.88
Board: MSI z87 xpower
Bios: Version 1.7
VGA:2 MSI 770GTX Twin Frozr 4gb oc SLI
Intel Core i74770k 3.5GHz
MEM: Kingston KHX21C11T3K4/32X 32GB
HDD: Samsung 256gb SSD pro
COOLER: Corsair 80HWater Cooler
OC: (3,5) Normal mode
OS: Windows 8,1 64bit Professional
PSU: SilverStone ST1500
3.3V +5V +12V1 +12V2 +12V3 +12V4 +12V5 +12V6 +12V7 +12V8 +5VSB -12V
40A 40A 25A 25A 25A 25A 25A 25A 25A 25A 6.0A 0.5
Benchmark 3D Mark 11 score 12831 SLIdo you have any OC applied?
does it worked before or its a new build? -
Windows Kernel Debbuging: Debug over virtual serial port with WDK 8.1
I'm currently having some issues doing kernel debugging of a Windows 7 x64 target from my Windows 8.1 x64 host machine. I'm running Visual Studio 2013 with WDK 8.1 on my host and have provisioned my target machine running in VMWare.
Here are my configurations for the target machine. It was configured by reading mostly from here - http://www.codeproject.com/Tips/545835/Kernel-Mode-Debugging-in-a-VM-using-Visual-Studio :
Windows 7 x64
Serial port COM2 with VMWare with name \\.\pipe\com2. All proper options in VMWare are checked
Debug flag for OS enabled through msconfig. Debug port is COM2 running at 115200 baud.
I ran the test target client "WDK Test Target Setup x64-x64_en-us.exe" on the machine before provisioning the computer
I was able to provision the computer properly -- it created the WDK Remove User account. However, I'm running into some issues actually debugging. Below are the steps
Launch the Windows 7 x64 target image in VMWare and wait on the boot menu
In Visual Studio (host machine), go to Debug -> Attach to process -> Select my computer -> Select process "Kernel" -> Attach
In VMWare, press enter to boot Windows
It takes a while, but on my host machine, Visual Studio eventually connects. I can choose to "Break All" and actually use the debugger.
However, I can't seem to connect to the debugger if I don't do it before booting the kernel. And I can only attach once. For example, I can't let Windows initialize to the desktop and then build my driver and begin debugging. The debugger will always hang on
"Waiting to reconnect...". The same goes for if I begin debugging on kernel initialization, decide to stop debugging, then try to reconnect or reattach; it will hang on "Waiting to reconnect..." indefinitely as well.Follow the directions here: https://msdn.microsoft.com/en-us/library/windows/hardware/jj200334%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
You are using user mode debug setup menus, that won't work.
Mark Roddy Windows Driver and OS consultant www.hollistech.com -
Issues with windows kernel mode debugging in Win8 RTM
Here is the setup:
Host: Win8 x64 RTM, supported Realtek NIC, Visual Studio 2012, WDK8, Latest Coinstallers
Target: Win8 x64 RTM, supported Realtek NIC
Clean install, no firewall, no UAC, in a workgroup
Netgear router with DHCP, CAT 5.
We used the following document:
Configuring a Computer for Driver Deployment, Testing, and Debugging
http://msdn.microsoft.com/en-us/library/windows/hardware/hh698272%28v=vs.85%29.aspx
Automatic provisioning of the target completes without errors, but trying to attach the debugger does not work. It never connects.
Am I missing something?I am encountering the same issue debugging a KMDF driver on VS2012. Both machines are in the same workgroup and both are running WS2012 Data Center Edition. I tried running a command prompt and various other items on the target, but
it never connects. I even tried running a VM on the local machine in Hyper-V. Same issue.
Kernel debugger connection works fine in WinDBG, just never connects in VS2012.
Any updates on this from Microsoft?
Kevin -
Server 2012 R2 Configure Windows Server Essentials" fails at 87%
I've tried all the suggestions here https://social.technet.microsoft.com/Forums/windowsserver/en-US/3273ae3f-4952-4f96-be48-07bee6986e57/error-server-essentials-post-deployment-fails-at-0?forum=winserveressentials
and https://social.technet.microsoft.com/Forums/en-US/b8caa9c7-ba91-475a-bf83-91aad9f0ba03/essentials-experience-postdeployment-configuration-fails?forum=winserveressentials
short of a reformat, but it still fails for me at 87%. I have no ServerFolders folder to delete or rename, although I did at one point have an additional disk attached that had an old installation. possibly with ServerFolders, but I don't recall trying to
install the Essentials role with that drive attached.
I can provide the CBS log if preferred. I have been unable to find anything of use myself there.
www.sflesch.comcontinued:
[2488] 150112.181156.8910: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ApplicabilityEngine%4Operational.evtx.
[2488] 150112.181156.8930: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application Server-Applications%4Admin.evtx.
[2488] 150112.181156.8939: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application Server-Applications%4Operational.evtx.
[2488] 150112.181156.8959: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.
[2488] 150112.181156.8978: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx.
[2488] 150112.181156.8988: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx.
[2488] 150112.181156.9281: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx.
[2488] 150112.181156.9350: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx.
[2488] 150112.181156.9613: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.
[2488] 150112.181156.9633: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.
[2488] 150112.181156.9643: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx.
[2488] 150112.181156.9662: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.
[2488] 150112.181156.9672: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.
[2488] 150112.181156.9691: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.
[2488] 150112.181156.9711: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.
[2488] 150112.181156.9936: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx.
[2488] 150112.181156.9955: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.
[2488] 150112.181156.9975: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.
[2488] 150112.181156.9994: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.
[2488] 150112.181157.0004: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.
[2488] 150112.181157.0023: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4CaptureMonitor.evtx.
[2488] 150112.181157.0033: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4GlitchDetection.evtx.
[2488] 150112.181157.0053: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx.
[2488] 150112.181157.0062: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx.
[2488] 150112.181157.0082: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Authentication User Interface%4Operational.evtx.
[2488] 150112.181157.0092: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.
[2488] 150112.181157.0111: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Backup.evtx.
[2488] 150112.181157.0131: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Base-Filtering-Engine-Connections%4Operational.evtx.
[2488] 150112.181157.0141: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Base-Filtering-Engine-Resource-Flows%4Operational.evtx.
[2488] 150112.181157.0160: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-BestPractices%4Operational.evtx.
[2488] 150112.181157.0521: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.
[2488] 150112.181157.0531: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bluetooth-MTPEnum%4Operational.evtx.
[2488] 150112.181157.0551: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-BranchCache%4Operational.evtx.
[2488] 150112.181157.0570: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-BranchCacheSMB%4Operational.evtx.
[2488] 150112.181157.0590: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CertificateServices-Deployment%4Operational.evtx.
[2488] 150112.181157.0600: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CertificateServicesClient-Lifecycle-System%4Operational.evtx.
[2488] 150112.181157.0619: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CertificateServicesClient-Lifecycle-User%4Operational.evtx.
[2488] 150112.181157.0629: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.
[2488] 150112.181157.0648: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Connected-Search%4Operational.evtx.
[2488] 150112.181157.0668: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CoreApplication%4Operational.evtx.
[2488] 150112.181157.0678: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Client%4Operational.evtx.
[2488] 150112.181157.0697: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Server%4Operational.evtx.
[2488] 150112.181157.0707: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.
[2488] 150112.181157.0727: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.
[2488] 150112.181157.0746: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DAL-Provider%4Operational.evtx.
[2488] 150112.181157.0756: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DataIntegrityScan%4Admin.evtx.
[2488] 150112.181157.0775: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DataIntegrityScan%4CrashRecovery.evtx.
[2488] 150112.181157.0785: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DateTimeControlPanel%4Operational.evtx.
[2488] 150112.181157.0805: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Deduplication%4Diagnostic.evtx.
[2488] 150112.181157.0814: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Deduplication%4Operational.evtx.
[2488] 150112.181157.0844: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Deduplication%4Scrubbing.evtx.
[2488] 150112.181157.1059: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.
[2488] 150112.181157.1273: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.
[2488] 150112.181157.1283: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSync%4Operational.evtx.
[2488] 150112.181157.1508: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DFSN-Server%4Admin.evtx.
[2488] 150112.181157.1518: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx.
[2488] 150112.181157.1537: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DhcpNap%4Admin.evtx.
[2488] 150112.181157.1547: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.
[2488] 150112.181157.1566: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.
[2488] 150112.181157.1820: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PCW%4Operational.evtx.
[2488] 150112.181157.1840: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx.
[2488] 150112.181157.1850: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx.
[2488] 150112.181157.1869: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx.
[2488] 150112.181157.1889: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider%4Operational.evtx.
[2488] 150112.181157.1899: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx.
[2488] 150112.181157.2113: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DirectoryServices-Deployment%4Operational.evtx.
[2488] 150112.181157.2123: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnostic%4Operational.evtx.
[2488] 150112.181157.2143: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx.
[2488] 150112.181157.2152: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticResolver%4Operational.evtx.
[2488] 150112.181157.2172: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DNSServer%4Audit.evtx.
[2488] 150112.181157.2191: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-DSC%4Operational.evtx.
[2488] 150112.181157.2201: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EapHost%4Operational.evtx.
[2488] 150112.181157.2221: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-RasChap%4Operational.evtx.
[2488] 150112.181157.2231: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-RasTls%4Operational.evtx.
[2488] 150112.181157.2250: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EapMethods-Ttls%4Operational.evtx.
[2488] 150112.181157.2270: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EnrollmentPolicyWebService%4Admin.evtx.
[2488] 150112.181157.2299: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EnrollmentWebService%4Admin.evtx.
[2488] 150112.181157.2309: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-EventCollector%4Operational.evtx.
[2488] 150112.181157.2328: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-FederationServices-Deployment%4Operational.evtx.
[2488] 150112.181157.2338: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-FileServices-ServerManager-EventProvider%4Admin.evtx.
[2488] 150112.181157.2357: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-FileServices-ServerManager-EventProvider%4Operational.evtx.
[2488] 150112.181157.2367: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-FileShareShadowCopyProvider%4Operational.evtx.
[2488] 150112.181157.2387: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-FMS%4Operational.evtx.
[2488] 150112.181157.2397: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Folder Redirection%4Operational.evtx.
[2488] 150112.181157.2416: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Forwarding%4Operational.evtx.
[2488] 150112.181157.2426: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-GenericRoaming%4Admin.evtx.
[2488] 150112.181157.3822: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.
[2488] 150112.181157.3842: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx.
[2488] 150112.181157.3852: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Control Panel%4Operational.evtx.
[2488] 150112.181157.3871: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-IdCtrls%4Operational.evtx.
[2488] 150112.181157.3881: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-IKE%4Operational.evtx.
[2488] 150112.181157.3900: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx.
[2488] 150112.181157.3920: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-International-RegionalOptionsControlPanel%4Operational.evtx.
[2488] 150112.181157.3930: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Iphlpsvc%4Operational.evtx.
[2488] 150112.181157.4438: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Iphlpsvc%4Trace.etl.
[2488] 150112.181157.4467: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-KdsSvc%4Operational.evtx.
[2488] 150112.181157.4486: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ApphelpCache%4Operational.evtx.
[2488] 150112.181157.4516: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx.
[2488] 150112.181157.4545: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.
[2488] 150112.181157.4984: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.
[2488] 150112.181157.5346: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnPConfig%4Configuration.evtx.
[2488] 150112.181157.5365: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.
[2488] 150112.181157.5385: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.
[2488] 150112.181157.5395: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.
[2488] 150112.181157.5414: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WDI%4Operational.evtx.
[2488] 150112.181157.5424: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.
[2488] 150112.181157.5629: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.
[2488] 150112.181157.5834: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx.
[2488] 150112.181157.5854: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx.
[2488] 150112.181157.5873: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx.
[2488] 150112.181157.5883: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-MemoryDiagnostics-Results%4Debug.evtx.
[2488] 150112.181157.5902: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-MiStreamProvider%4Operational.evtx.
[2488] 150112.181157.5912: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Mprddm%4Operational.evtx.
[2488] 150112.181157.5932: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-MsLbfoProvider%4Operational.evtx.
[2488] 150112.181157.5941: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-MSSHAV-SHV%4Operational.evtx.
[2488] 150112.181157.5961: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Admin.evtx.
[2488] 150112.181157.5981: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx.
[2488] 150112.181157.6000: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx.
[2488] 150112.181157.6010: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NdisImPlatform%4Operational.evtx.
[2488] 150112.181157.6029: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx.
[2488] 150112.181157.6049: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4WHC.evtx.
[2488] 150112.181157.6068: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkLocationWizard%4Operational.evtx.
[2488] 150112.181157.6088: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.
[2488] 150112.181157.6098: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NlaSvc%4Operational.evtx.
[2488] 150112.181157.6117: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.
[2488] 150112.181157.6137: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx.
[2488] 150112.181157.6156: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-NTLM%4Operational.evtx.
[2488] 150112.181157.6166: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-OfflineFiles%4Operational.evtx.
[2488] 150112.181157.6186: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-OOBE-Machine-DUI%4Operational.evtx.
[2488] 150112.181157.6195: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Policy%4Operational.evtx.
[2488] 150112.181157.6215: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Admin.evtx.
[2488] 150112.181157.6479: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx.
[2488] 150112.181157.6488: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager%4Operational.evtx.
[2488] 150112.181157.6508: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-PrintService%4Admin.evtx.
[2488] 150112.181157.6527: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx.
[2488] 150112.181157.6547: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx.
[2488] 150112.181157.6557: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RasClusterResource%4Operational.evtx.
[2488] 150112.181157.6576: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx.
[2488] 150112.181157.6586: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Regsvr32%4Operational.evtx.
[2488] 150112.181157.6606: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx.
[2488] 150112.181157.6615: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAccess-MgmtClient%4Operational.evtx.
[2488] 150112.181157.6635: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAccess-RemoteAccessServer%4Admin.evtx.
[2488] 150112.181157.6654: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAccess-RemoteAccessServer%4Operational.evtx.
[2488] 150112.181157.6674: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteApp and Desktop Connections%4Admin.evtx.
[2488] 150112.181157.6684: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteApp and Desktop Connections%4Operational.evtx.
[2488] 150112.181157.6703: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Admin.evtx.
[2488] 150112.181157.6713: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Operational.evtx.
[2488] 150112.181157.6732: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Admin.evtx.
[2488] 150112.181157.7016: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-RdpCoreTS%4Operational.evtx.
[2488] 150112.181157.7035: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteDesktopServices-SessionServices%4Operational.evtx.
[2488] 150112.181157.7055: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.
[2488] 150112.181157.7084: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx.
[2488] 150112.181157.7094: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SearchUI%4Operational.evtx.
[2488] 150112.181157.7113: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Audit-Configuration-Client%4Operational.evtx.
[2488] 150112.181157.7123: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Configuration-Wizard%4Operational.evtx.
[2488] 150112.181157.7143: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-EnterpriseData-FileRevocationManager%4Operational.evtx.
[2488] 150112.181157.7152: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Netlogon%4Operational.evtx.
[2488] 150112.181157.7172: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging%4Operational.evtx.
[2488] 150112.181157.7192: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx.
[2488] 150112.181157.7201: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-UserConsentVerifier%4Audit.evtx.
[2488] 150112.181157.7221: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerEssentials%4Admin.evtx.
[2488] 150112.181157.7426: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerEssentials-Deployment%4Deploy.evtx.
[2488] 150112.181157.7445: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerManager-ConfigureSMRemoting%4Operational.evtx.
[2488] 150112.181157.7777: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerManager-DeploymentProvider%4Operational.evtx.
[2488] 150112.181157.8090: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerManager-MgmtProvider%4Operational.evtx.
[2488] 150112.181157.8100: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerManager-MultiMachine%4Admin.evtx.
[2488] 150112.181157.8393: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-ServerManager-MultiMachine%4Operational.evtx.
[2488] 150112.181157.8422: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx.
[2488] 150112.181157.8442: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.
[2488] 150112.181157.8764: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx.
[2488] 150112.181157.8774: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SilProvider%4Operational.evtx.
[2488] 150112.181157.8793: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-Audit%4Authentication.evtx.
[2488] 150112.181157.8813: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-DeviceEnum%4Operational.evtx.
[2488] 150112.181157.8822: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-TPM-VCard-Module%4Admin.evtx.
[2488] 150112.181157.8842: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-TPM-VCard-Module%4Operational.evtx.
[2488] 150112.181157.9057: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx.
[2488] 150112.181157.9076: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx.
[2488] 150112.181157.9096: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx.
[2488] 150112.181157.9106: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBDirect%4Admin.evtx.
[2488] 150112.181157.9125: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBHashGeneration%4Operational.evtx.
[2488] 150112.181157.9135: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx.
[2488] 150112.181157.9350: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.
[2488] 150112.181157.9369: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx.
[2488] 150112.181157.9389: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Tiering%4Admin.evtx.
[2488] 150112.181157.9399: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-Driver%4Operational.evtx.
[2488] 150112.181157.9418: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx.
[2488] 150112.181157.9838: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx.
[2488] 150112.181157.9858: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Superfetch%4AgmcOperation.evtx.
[2488] 150112.181157.9877: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-SystemSettings%4Operational.evtx.
[2488] 150112.181158.0092: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.
[2488] 150112.181158.2026: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx.
[2488] 150112.181158.2035: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TCPIP%4Operational.evtx.
[2488] 150112.181158.2055: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-ClientUSBDevices%4Admin.evtx.
[2488] 150112.181158.2065: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-ClientUSBDevices%4Operational.evtx.
[2488] 150112.181158.2084: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.
[2488] 150112.181158.2299: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.
[2488] 150112.181158.2319: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-PnPDevices%4Admin.evtx.
[2488] 150112.181158.2328: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-PnPDevices%4Operational.evtx.
[2488] 150112.181158.2348: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-Printers%4Admin.evtx.
[2488] 150112.181158.2367: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-Printers%4Operational.evtx.
[2488] 150112.181158.2377: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx.
[2488] 150112.181158.2397: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.
[2488] 150112.181158.2416: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.
[2488] 150112.181158.2426: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-ServerUSBDevices%4Admin.evtx.
[2488] 150112.181158.2446: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-ServerUSBDevices%4Operational.evtx.
[2488] 150112.181158.2455: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-SessionBroker-Client%4Admin.evtx.
[2488] 150112.181158.2475: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-SessionBroker-Client%4Operational.evtx.
[2488] 150112.181158.2494: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TWinUI%4Operational.evtx.
[2488] 150112.181158.2543: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TZSync%4Operational.evtx.
[2488] 150112.181158.2563: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-TZUtil%4Operational.evtx.
[2488] 150112.181158.2572: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx.
[2488] 150112.181158.2592: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx.
[2488] 150112.181158.2602: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-User Control Panel%4Operational.evtx.
[2488] 150112.181158.2826: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.
[2488] 150112.181158.2846: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-User-Loader%4Operational.evtx.
[2488] 150112.181158.2865: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx.
[2488] 150112.181158.2875: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.
[2488] 150112.181158.2895: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-VDRVROOT%4Operational.evtx.
[2488] 150112.181158.2905: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-VerifyHardwareSecurity%4Admin.evtx.
[2488] 150112.181158.2924: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP%4Operational.evtx.
[2488] 150112.181158.2934: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-VPN%4Operational.evtx.
[2488] 150112.181158.2953: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-VPN-Client%4Operational.evtx.
[2488] 150112.181158.3158: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.
[2488] 150112.181158.3178: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WER-Diag%4Operational.evtx.
[2488] 150112.181158.3197: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WFP%4Operational.evtx.
[2488] 150112.181158.3227: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.
[2488] 150112.181158.3500: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.
[2488] 150112.181158.3715: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx.
[2488] 150112.181158.3735: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.
[2488] 150112.181158.3744: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.
[2488] 150112.181158.3764: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WinNat%4Oper.evtx.
[2488] 150112.181158.4037: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx.
[2488] 150112.181158.4047: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx.
[2488] 150112.181158.4067: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Wired-AutoConfig%4Operational.evtx.
[2488] 150112.181158.4399: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.
[2488] 150112.181158.4418: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-Workplace Join%4Admin.evtx.
[2488] 150112.181158.4438: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-ClassInstaller%4Operational.evtx.
[2488] 150112.181158.4448: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-CompositeClassDriver%4Operational.evtx.
[2488] 150112.181158.4467: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-MTPClassDriver%4Operational.evtx.
[2488] 150112.181158.4477: General: Compressed C:\Windows\System32\winevt\Logs\Microsoft-WS-Licensing%4Admin.evtx.
[2488] 150112.181202.7583: General: Compressed C:\Windows\System32\winevt\Logs\Security.evtx.
[2488] 150112.181202.7866: General: Compressed C:\Windows\System32\winevt\Logs\Setup.evtx.
[2488] 150112.181202.9897: General: Compressed C:\Windows\System32\winevt\Logs\System.evtx.
[2488] 150112.181203.0474: General: Compressed C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx.
[2488] 150112.181203.0503: General: Compressed C:\Windows\System32\winevt\Logs\WitnessClientAdmin.evtx.
[2488] 150112.181203.0532: General: Compressed C:\Windows\logs\CBS\CBS.log.
[2488] 150112.181203.2661: General: Compressed C:\Windows\logs\CBS\CbsPersist_20150108005133.cab.
[2488] 150112.181203.4175: General: Compressed C:\Windows\logs\CBS\CbsPersist_20150108024300.cab.
[2488] 150112.181207.5201: General: Compressed C:\Windows\logs\CBS\CbsPersist_20150111204958.log.
[2488] 150112.181209.5103: General: Compressed C:\Windows\logs\CBS\CbsPersist_20150111210433.log.
[2488] 150112.181211.4420: General: Compressed C:\Windows\logs\CBS\CbsPersist_20150112181704.log.
[2488] 150112.181211.4430: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\CA_ROLE_INSTALL.log.
[2488] 150112.181211.4440: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\Errors.log.
[2488] 150112.181211.6510: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\ProviderRegistryService.log.
[2488] 150112.181211.6686: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\SetupCmdlets.log.
[2488] 150112.181211.6783: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\SharedServiceHost-ManagementServiceConfig.log.
[2488] 150112.181211.6793: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\SharedServiceHost-NotificationServiceConfig.log.
[2488] 150112.181211.7535: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\storageservice.011115.log.
[2488] 150112.181211.9244: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\storageservice.011215.log.
[2488] 150112.181211.9264: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\storageservice.log.
[2488] 150112.181211.9274: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\storageutil.011115.log.
[2488] 150112.181211.9274: General: Compressed C:\ProgramData\Microsoft\Windows Server\Logs\storageutil.011215.log.
[2488] 150112.181211.9283: General: Compressed C:\Windows\Panther\cbs.log.
[2488] 150112.181211.9283: General: Compressed C:\Windows\Panther\Contents0.dir.
[2488] 150112.181211.9283: General: Compressed C:\Windows\Panther\Contents1.dir.
[2488] 150112.181211.9293: General: Compressed C:\Windows\Panther\diagerr.xml.
[2488] 150112.181211.9293: General: Compressed C:\Windows\Panther\diagwrn.xml.
[2488] 150112.181211.9313: General: Compressed C:\Windows\Panther\MainQueueOnline0.que.
[2488] 150112.181211.9332: General: Compressed C:\Windows\Panther\MainQueueOnline1.que.
[2488] 150112.181211.9401: General: Compressed C:\Windows\Panther\setup.etl.
[2488] 150112.181211.9528: General: Compressed C:\Windows\Panther\setupact.log.
[2488] 150112.181211.9528: General: Compressed C:\Windows\Panther\setuperr.log.
[2488] 150112.181211.9664: General: Compressed C:\Windows\Panther\setupinfo.
[2488] 150112.181212.0406: General: Compressed C:\Windows\Panther\_s_2C40.tmp.
[2488] 150112.181212.0543: General: Compressed C:\Windows\Panther\_s_2D0D.tmp.
[2488] 150112.181212.1295: General: Compressed C:\Windows\Panther\_s_5380.tmp.
[2488] 150112.181212.1422: General: Compressed C:\Windows\Panther\_s_56CD.tmp.
[2488] 150112.181212.3043: DeploymentService: Zipping log files to: C:\ProgramData\Microsoft\Windows Server\Data\HSBSLogs-01-12-2015-18-11-56.zip
[2488] 150112.181212.3053: DeploymentService: Setting ResultsFile value to C:\ProgramData\Microsoft\Windows Server\Data\TME\Results\TaskStatusResults635566831166879400.xml
[2488] 150112.181212.3053: DeploymentService: Checking the results from the Initial Configuration run
[2488] 150112.181212.3209: DeploymentService: Found the result file: C:\ProgramData\Microsoft\Windows Server\Data\TME\Results\TaskStatusResults635566831166879400.xml
[2488] 150112.181212.3698: DeploymentService: Results:
[2488] 150112.181212.3698: DeploymentService: Task: SetSKUTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3698: DeploymentService: Task: ConfigSqmTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3698: DeploymentService: Task: ConfigWERTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3698: DeploymentService: Task: SetFolderPermission, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ProcessHostingInfoTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: LoadOEMInfoTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: EnableWFNetworkDiscovery, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: NetTcpPortMappingIPv4, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: NetTcpPortMappingIPv6, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: DisableAdminPwdExpiration, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ConfigureW32TimeService, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: SetDomainRegionTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: CreateLocalNewUserTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ADBinaries_INSTALL, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ChangeAdminPassword, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ChangeComputerName, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: RebootForComputerName, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: DCPromoTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: DCReadyTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ADPowershell_Install, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: SetDnsServerForwarders, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: CA_ROLE_INSTALL, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: StartMustHaveMgmtSvcTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: RestartServiceAfterCARoleInstalled, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3707: DeploymentService: Task: ConfigureCATask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: CATESTHOOK1, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: CATESTHOOK2, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigCRLDistributionListTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: CreateServerCertTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: CreateDefaultWebSiteTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigRAWebsiteDeploymentTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigWebApiApplication, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigureClientWebsiteTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigureCertWebServiceTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: UpdateRemoteAccessWebConfig, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: CreateDownloadVdirTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigureClientSSLsiteTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: CreateMacWebServerTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: OEMBrandingTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: ConfigureRAMGroupsTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: AddTrustedSite, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: RegisterUAL, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: SetSysEnvVar_WebAddIns, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: SetWebBrowserControlEmulation, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: Install_Password_Filter, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3717: DeploymentService: Task: SetSANPolicy, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Task: EnableRemoteDesktop, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Task: STORAGE_ENABLE, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Task: ConfigDfsRootNameSpaceTask, Succeeded: True, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Ignore Task status: InitializeStorage, Succeeded: False, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Ignore Task status: InitializeStorage, Succeeded: False, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Task: InitializeStorage, Succeeded: False, Warning: False, Continue: True
[2488] 150112.181212.3727: DeploymentService: Here is the list of errors we encountered during setup:
[2488] 150112.181212.3727: DeploymentService: FATAL: InitializeStorage:
[2488] 150112.181212.4059: DeploymentService: Creating ISqmProviderClient
[2488] 150112.181212.4059: DeploymentService: Getting IC Start Time
[2488] 150112.181212.4069: DeploymentService: Retrieved IC Start Time is 01/12/2015 18:11:49
[2488] 150112.181212.4088: DeploymentService: SQM value DATAID_WSE_DEPLOYMENT_TASKFAIL set to InitializeStorage
[2488] 150112.181212.4147: DeploymentService: SQM value DATAID_WSE_IS_HOSTED set to 4
[2488] 150112.181212.5163: DeploymentService: SQM value DATAID_WSE_Deployment_Container set to 3
[2488] 150112.181212.5485: DeploymentService: SQM value DATAID_WSE_Deployment_ADEnv set to 34
[2488] 150112.181212.5621: General: Search for object with query: Select * FROM SoftwareLicensingService
[2488] 150112.181213.6784: General: Search for object with query: Select * FROM SoftwareLicensingProduct WHERE ApplicationId="55c92734-d682-4d71-983e-d6ec3f16059f" AND PartialProductKey <> null
[2488] 150112.181213.8317: General: ActivationStatus.ReArmCount = 1000
[2488] 150112.181213.8327: General: ActivationStatus.LicenseStatus = 1
[2488] 150112.181213.8327: General: ActivationStatus.GracePeriod (minutes) = 0
[2488] 150112.181213.8376: DeploymentService: Setup stage changing to ICDone
[2488] 150112.181213.8493: Notifications: Information: [0] : LNx01: ClearNotifications: source SNx03 is clearing 1 Notification(s).
[2488] 150112.181213.8561: Notifications: Information: [0] : LNx01: Cleared:
Notification Category: Setup
Id: SetupStageChange
Source: notifier:SharedServiceHost.exe:p8272:mt4:1; Local-TARDIS:SharedServiceHost.exe:p8272:mt4:1
[2488] 150112.181213.8561: Notifications: Information: [0] : LNx01: (Will clear 1 Notifications on RNx04 (breadcrumb LNx01_ClearNotifications_0x4))
[9048] 150112.181213.8600: Notifications: Information: [0] : Clearing 1 Notification(s) on neighbor RNx04. (LNx01_ClearNotifications_0x4)
[2488] 150112.181213.8854: Notifications: Information: [0] : LNx01: RaiseNotifications: source SNx03 is raising 1 Notification(s).
[2488] 150112.181213.8854: Notifications: Information: [0] : LNx01: (0 are replacing previously raised Notification(s))
[2488] 150112.181213.8854: Notifications: Information: [0] : LNx01: Adding:
Notification Category: Setup
Id: SetupStageChange
Source: notifier:SharedServiceHost.exe:p8272:mt4:1; Local-TARDIS:SharedServiceHost.exe:p8272:mt4:1
[2488] 150112.181213.8854: Notifications: Information: [0] : LNx01: (Will send 1 Notification(s) on to RNx04 (breadcrumb LNx01_RaiseNotifications_0x5))
[3764] 150112.181213.8864: Notifications: Information: [0] : Sending 1 Notification(s) to neighbor RNx04. (LNx01_RaiseNotifications_0x5)
www.sflesch.com -
Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035
fresh install and configure on A Dell optiplex3010 running window 7 pro 64 bit running can anyone tell what this is ?
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin Source: Microsoft-Windows-Kernel-EventTracing Date: 4/16/2014 12:04:17 PM Event ID: 2 Task Category: Session Level: Error Keywords: Session User: SYSTEM Computer: HMCServer Description: Session "Circular
Kernel Context Logger" failed to start with the following error: 0xC0000035 Event Xml: <event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><system><provider guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}"
name="Microsoft-Windows-Kernel-EventTracing"><eventid>2</eventid> <version>0</version> <level>2</level> <task>2</task> <opcode>12</opcode> <keywords>0x8000000000000010</keywords>
<timecreated systemtime="2014-04-16T16:04:17.657816300Z"><eventrecordid>44</eventrecordid> <correlation><execution processid="4" threadid="60"><channel>Microsoft-Windows-Kernel-EventTracing/Admin</channel>
<computer>HMCServer</computer> <security userid="S-1-5-18"></security></execution></correlation></timecreated></provider></system> <eventdata><data name="SessionName">Circular
Kernel Context Logger</data> <data name="FileName"></data> <data name="ErrorCode">3221225525</data> <data name="LoggingMode">268436608</data> </eventdata> </event>The error is implying there is a naming conflict. This could be 2 or more PCs with the same SID or Computer Name, or two different objects (shares/drives) attempting to use the same drive letter. There is one thing I found of renaming a file that has helped
some people:
http://social.technet.microsoft.com/Forums/windows/en-US/2eab69ac-7537-40c4-916e-6f6d41c05d4b/session-circular-kernel-context-logger-failed-to-start-with-the-following-error-0xc0000035?forum=w7itprogeneral -
The driver WUDFRd failed to load...
I'm getting a warning in the event log upon startup. Windows 8.1 Pro. This is a IdeaCenter B750 AIO.
I have no idea what driver this is so I need help fixing this error. What is WUDFRd ? All the information I can locate refers users to their OEM for a driver update.. Some mention a fingerprint reader but this system doesn't have one of those.
Thanks
Bryan
Log Name: System
Source: Microsoft-Windows-Kernel-PnP
Date: 2/10/2015 11:24:03 AM
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: MYPC
Description:
The driver \Driver\WUDFRd failed to load for the device ROOT\SYSTEM\0004.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2015-02-10T16:24:03.240396600Z" />
<EventRecordID>22787</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="224" />
<Channel>System</Channel>
<Computer>MYPC</Computer>
<Security UserID="USERSID>
</System>
<EventData>
<Data Name="DriverNameLength">16</Data>
<Data Name="DriverName">ROOT\SYSTEM\0004</Data>
<Data Name="Status">3221226341</Data>
<Data Name="FailureNameLength">14</Data>
<Data Name="FailureName">\Driver\WUDFRd</Data>
<Data Name="Version">0</Data>
</EventData>
</Event>Apparently I've received a "private message" here about this topic but can't locate how to get to that message,,
Maybe you are looking for
-
So, some of UEV 2.0 clients are syncing. This one isn't. So I'm in the event logs, and the App Agent piece shows An exception has occurred while synchronizing settings packages. Exception message: "Could not find a part of the path '\\dc\UEVSETTINGS\
-
Pages in iWeb always needed to be re-uploaded
I have my domain name with Host Excellence. When I upload my iWeb pages iWeb always tells me my connection to the server broke and the upload could not be completed. When I go to my site it all seems to work fine. All the files have been uploaded. Wh
-
Query 1)I am creating table in oracle 8.1.7 as Create table tablea (fielda INTEGER NULL Can anybody tell me what is max number of digits that can be stored in fielda.? I mean INTEGER stands for what in terms of NUMBER datatype. Query 2)I would be pla
-
What is the use of FOR ALL ?
What is the use of FOR ALL ?. Need clear explanation with examples
-
Photoshop CS5 & Maverick -- App crashes while printing
Using Photoshop CS5 12.0 and just upgraded to Maverick. ´Print One Copy´ prints fine but really no use. When trying to print normally or trying to change settings in the dialog box PS just crashes. Am using Brother MFC-6490CW A3 printer. Other ap