Jump to content

Computer Infected With Tricky Virus


Recommended Posts

This log looks clean actually. Your Java however is now one update behind and causes a slight security risk as a result.

Please follow these steps to remove older version Java components:

  • Close any open programs you may have running, especially your web browser.
  • Click Start-->Control Panel-->Add or Remove Programs.
  • Click once on any item having Java Runtime Environment in it's name then click the "Remove" button.

Not every version of Java will begin with "Java" so be sure to read each entry in the list.

Repeat the third step above as many times as necessary to remove all versions of Java.

***NOTE***

If you are asked to reboot at any point during the uninstallations, please do so. Then go back to Add/Remove and continue with the rest of the removals...when finished uninstalling all of them, reboot the computer.

  • Navigate to and delete: C:\Program Files\Java<--the Java folder indicated in Bold Red Text (if found)
  • Then go to this page.
    Scroll down to where it says "The Java Runtime Environment (JRE) allows end-users to run Java applications" and click the "Download" button to the right. Select the platform for "Windows".
  • Check the box that says: "I agree to the Java SE Runtime Environment # License Agreement", then click Continue...The page will refresh

Then, click on the link to download Windows Offline Installation. Save it to your desktop.

Now, from your desktop, double-click on the executable to install the newest version.

Next, with the issues you were having, you may need to tidy up and defrag the drive.

  • Go to Control Panel-->Internet Options-->General tab
  • Click the "Settings" button under the Browsing history section.
  • Make sure the bullet is in the option for "Everytime I visit the webpage"
  • In the Disk space to use section, click the down arrow to reduce the disk space to use size to 50MB's.
  • Under the History section at the bottom, reduce the number of days to keep the websites you visit to whatever suits your needs...I use "0" so I won't even have to bother with deleting my history.
  • When finished, click the OK button.

Next, let's click the Security tab:

Click the "Default level" button at the bottom...do this for each of the 4 zones listed.

Next, click the Privacy tab. In the "Settings" section, make sure the slider is set to Medium. Under the Pop-up Blocker section at the bottom, be sure there is a check in the box for "Turn on Pop-up Blocker.

Next, click the Advanced tab. Scroll down to the "Security" section and check the box for the option to Empty Temporary Internet Files folder when browser is closed.

Next, please return to the General tab. In the Browsing history section, click the "Delete" button. Click to delete files, cookies, and history. When finished, click the close button at the bottom.

Next, to close Internet Properties and record the changes you've made, you must now Click "Apply" and "OK".

Clean other Temporary files + Recycle bin...Go to start-->run, then type: cleanmgr and click ok.

  • Let it scan your system for files to remove.
  • Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked then click "OK"

Next, click start-->run, then in the run box type defrag c: and click "OK". A command window will open and a defragmentation of the disk will begin. Do nothing else with the computer while the scan is in progress. When the defrag completes, the command window will just disappear. Reboot at that point.

We still need to repair your nVidia Display Driver Service that combofix removed. See if you can locate your device here and download the latest driver. Post back and advise how the system behaves now. Thanks!

Link to post
Share on other sites

  • Replies 54
  • Created
  • Last Reply

Top Posters In This Topic

Okay.... I have downloaded and updated the NVidia drivers, done what you asked about my internet settings, but when i typed in the command to defrag the disk it didnt run properly a black screen flashed up and then nothing happened, so i tried to use disk keeper lite and that wouldnt defrag it either. its strange the windows installer is still not working...Matt

Link to post
Share on other sites

when i typed in the command to defrag the disk it didnt run properly a black screen flashed up and then nothing happened, so i tried to use disk keeper lite and that wouldnt defrag it either. its strange the windows installer is still not working...Matt

While diskkeeper lite is installed, the microsoft windows on board defrag utility will not work. Uninstall diskkeeper lite and try the defrag again using windows.

Next, click-->Start-->Run then type cmd...in the command window copy and paste the following one at a time pressing enter after each:

msiexec /unregister

msiexec /regserver

After you receive a "successful" message, reboot the computer. Post back your results. Thanks!

Link to post
Share on other sites

Go to Start-->Run, type: Regedit and click "OK"... then navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer

Click on the folder "MSIServer and you will see the entries in the right pane. Look for the entry named ImagePath

Does the value data correctly point to?:

(modify drive letter as needed)

C:\Windows\System32\Msiexec.exe /V

Link to post
Share on other sites

Are you logged in with an administrative account?

Download the Windows Installer Clean-up Package Here. Install and run the tool. Look in the list for the windows installer (not the clean-up utility). If it's listed, click to remove it and download the latest version again from the previous instruction.

Post back your results. I'm just about out of suggestions...if this doesn't work for you either then my next thought is to perform a repair install of windows. This will reinstall a copy of windows over itself without loosing any files/folders you've created previously.

Link to post
Share on other sites

Please post the System event log:

  • Click start-->run then paste or type eventvwr.msc and hit Enter.
  • When the Event Viewer opens, click System in the left pane.
  • From the Menu at the top, Click Action-->Save Log File As
  • Change the Save As Type to "Text" (.txt)
  • then save the system event log as mysystem.txt
  • Save the log to your Desktop
  • Open the log and delete all the events NOT HAVING TODAY'S DATE.
  • The log that remains will be all of your system events having todays date. Paste THAT information back here on your next reply.

Thanks!

Link to post
Share on other sites

Ok mate all done here is the log cheers...Matt

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Avira AntiVir Personal - Free Antivirus Scheduler service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Avira AntiVir Personal - Free Antivirus Scheduler service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Avira AntiVir Personal - Free Antivirus Guard service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Avira AntiVir Personal - Free Antivirus Guard service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Avira AntiVir Personal - Free Antivirus Scheduler service entered the stopped state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Avira AntiVir Personal - Free Antivirus Guard service entered the stopped state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Computer Browser service entered the stopped state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Remote Access Connection Manager service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Remote Access Connection Manager service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Telephony service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Application Layer Gateway Service service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Application Layer Gateway Service service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Terminal Services service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7036 N/A MATT-17DD1A18BC The Network Location Awareness (NLA) service entered the running state.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The BOClean Kernel Monitor. service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Network Location Awareness (NLA) service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Terminal Services service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The Logitech LVPr2Mon Driver service was successfully sent a start control.

2/11/2008 5:44:45 PM Service Control Manager Error None 7000 N/A MATT-17DD1A18BC The LogMeIn Kernel Information Provider service failed to start due to the following error:

The system cannot find the path specified.

2/11/2008 5:44:45 PM Service Control Manager Error None 7023 N/A MATT-17DD1A18BC The HID Input Service service terminated with the following error:

The specified module could not be found.

2/11/2008 5:43:23 PM avgntflt Information None 17 N/A MATT-17DD1A18BC AVGNTFLT successfully loaded

2/11/2008 5:43:12 PM EventLog Information None 6005 N/A MATT-17DD1A18BC The Event log service was started.

2/11/2008 5:43:12 PM EventLog Information None 6009 N/A MATT-17DD1A18BC Microsoft ® Windows ® 5.01. 2600 Service Pack 3 Multiprocessor Free.

Link to post
Share on other sites

...still can uninstall anything...

Please post the Application event log:

OK, I don't see anything in that log that would explain the Microsoft Windows Installer issues...

Let's take a look at the "Application" log.

  • Click start-->run then paste or type eventvwr.msc and hit Enter.

  • When the Event Viewer opens, click Application in the left pane.

  • From the Menu at the top, Click Action-->Save Log File As

  • Change the Save As Type to "Text" (.txt)

  • then save the system event log as myapplicationlog.txt

  • Save the log to your Desktop

  • Open the log and delete all the events except for the last week of October.

  • The log that remains will be all of your "Application" events having dates from the last week of October. Paste THAT information back here on your next reply.

Link to post
Share on other sites

okay mate here is that log ...cheers..Matt

2/11/2008 5:47:37 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

2/11/2008 5:47:37 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

2/11/2008 5:44:13 PM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

2/11/2008 5:44:09 PM Avira AntiVir Information AntiVir 4097 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been stopped!

2/11/2008 5:43:27 PM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

2/11/2008 5:43:26 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

2/11/2008 5:43:26 PM SecurityCenter Error None 1802 N/A MATT-17DD1A18BC The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall.

2/11/2008 5:43:23 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

2/11/2008 5:43:22 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

1/11/2008 9:41:52 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

1/11/2008 9:41:51 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

1/11/2008 9:38:07 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

1/11/2008 9:37:38 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

1/11/2008 9:37:37 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

1/11/2008 9:37:37 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

1/11/2008 9:37:33 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

1/11/2008 9:34:56 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

1/11/2008 9:34:32 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

1/11/2008 9:33:23 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

1/11/2008 9:33:22 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

1/11/2008 9:33:21 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

1/11/2008 9:33:18 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

1/11/2008 6:33:30 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

1/11/2008 6:33:30 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

1/11/2008 6:29:22 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

1/11/2008 6:29:21 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

1/11/2008 6:29:17 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

1/11/2008 6:29:16 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

31/10/2008 6:57:02 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

31/10/2008 5:17:15 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

31/10/2008 5:17:14 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

31/10/2008 5:13:15 PM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

31/10/2008 5:13:13 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

31/10/2008 5:13:10 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

31/10/2008 5:13:10 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

31/10/2008 5:27:28 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

31/10/2008 5:27:28 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

31/10/2008 5:23:22 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

31/10/2008 5:23:20 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

31/10/2008 5:23:16 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

31/10/2008 5:23:16 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

30/10/2008 4:29:29 PM Diskeeper Information None 25 N/A MATT-17DD1A18BC "DCOM error. The Diskeeper Module mmc.exe has reported the error ""Class not registered""(0x80040154) while calling CoCreateInstanceEx on clsid {86E0DDF2-5A4E-11D2-80B5-00104BC8AA27}"

30/10/2008 4:25:29 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 4:24:33 PM Diskeeper Information None 24 N/A MATT-17DD1A18BC Failed while trying to launch the application from outside the Service Control Manager.

30/10/2008 4:24:31 PM Diskeeper Information None 24 N/A MATT-17DD1A18BC Failed while trying to launch the application from outside the Service Control Manager.

30/10/2008 4:24:25 PM Diskeeper Information None 25 N/A MATT-17DD1A18BC "DCOM error. The Diskeeper Module mmc.exe has reported the error ""Class not registered""(0x80040154) while calling CoCreateInstanceEx on clsid {86E0DDF2-5A4E-11D2-80B5-00104BC8AA27}"

30/10/2008 4:24:03 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 4:23:51 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 4:20:05 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

30/10/2008 4:20:05 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

30/10/2008 4:16:46 PM Diskeeper Information None 25 N/A MATT-17DD1A18BC "DCOM error. The Diskeeper Module mmc.exe has reported the error ""Class not registered""(0x80040154) while calling CoCreateInstanceEx on clsid {86E0DDF2-5A4E-11D2-80B5-00104BC8AA27}"

30/10/2008 4:16:34 PM Diskeeper Information None 25 N/A MATT-17DD1A18BC "DCOM error. The Diskeeper Module mmc.exe has reported the error ""Class not registered""(0x80040154) while calling CoCreateInstanceEx on clsid {86E0DDF2-5A4E-11D2-80B5-00104BC8AA27}"

30/10/2008 4:16:13 PM Diskeeper Information None 25 N/A MATT-17DD1A18BC "DCOM error. The Diskeeper Module mmc.exe has reported the error ""Class not registered""(0x80040154) while calling CoCreateInstanceEx on clsid {86E0DDF2-5A4E-11D2-80B5-00104BC8AA27}"

30/10/2008 4:15:57 PM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

30/10/2008 4:15:54 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

30/10/2008 4:15:50 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

30/10/2008 4:15:49 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

30/10/2008 4:14:16 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 2:23:45 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 2:22:25 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 2:22:05 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

30/10/2008 10:53:28 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

30/10/2008 10:53:28 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

30/10/2008 10:49:26 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

30/10/2008 10:49:23 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

30/10/2008 10:49:19 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

30/10/2008 10:49:19 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

30/10/2008 10:03:31 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

30/10/2008 10:03:31 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

30/10/2008 9:29:56 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

30/10/2008 9:29:55 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

30/10/2008 9:27:08 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

30/10/2008 9:27:00 AM Avira AntiVir Information AntiVir 4097 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been stopped!

30/10/2008 9:25:38 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

30/10/2008 9:25:30 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

30/10/2008 9:25:26 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

30/10/2008 9:25:25 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

30/10/2008 1:28:59 AM Application Hang Error (101) 1002 N/A MATT-17DD1A18BC Hanging application SDUpdate.exe, version 1.6.0.9, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

30/10/2008 1:04:25 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

30/10/2008 1:04:25 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

30/10/2008 1:00:14 AM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

30/10/2008 1:00:09 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

30/10/2008 1:00:06 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

30/10/2008 1:00:06 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

30/10/2008 12:32:17 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

30/10/2008 12:32:16 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

29/10/2008 11:08:39 PM Avira AntiVir Information AntiVir 4096 NT AUTHORITY\SYSTEM MATT-17DD1A18BC The AntiVir service has been started successfully!

29/10/2008 11:05:09 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

29/10/2008 11:05:09 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

29/10/2008 11:00:55 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

29/10/2008 11:00:51 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

29/10/2008 11:00:51 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

29/10/2008 10:57:52 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

29/10/2008 10:57:52 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

29/10/2008 10:53:49 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

29/10/2008 10:53:46 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

29/10/2008 10:53:45 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

29/10/2008 6:53:41 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

29/10/2008 6:53:41 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

29/10/2008 6:52:47 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 6:50:56 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 6:49:55 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 6:49:39 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

29/10/2008 6:49:35 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

29/10/2008 6:49:35 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

29/10/2008 2:34:47 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 2:32:16 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 10:59:10 AM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

29/10/2008 10:57:46 AM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

29/10/2008 10:27:39 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 9:08:56 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 9:00:29 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 8:49:39 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

29/10/2008 8:49:39 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

29/10/2008 8:45:38 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

29/10/2008 8:45:37 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

29/10/2008 8:45:34 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

29/10/2008 8:43:19 AM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

29/10/2008 8:33:32 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

29/10/2008 8:33:32 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

29/10/2008 8:29:24 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

29/10/2008 8:29:20 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

29/10/2008 8:29:20 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 9:00:26 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 9:00:18 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 8:59:14 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 8:57:14 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 8:55:20 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 8:38:06 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 8:38:06 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 8:33:59 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 8:33:59 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 8:33:55 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 8:32:04 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 8:31:56 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 8:30:07 PM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 6:46:32 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 6:46:32 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 6:42:31 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 6:42:27 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 6:42:26 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 6:40:43 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 6:40:43 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 6:36:43 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 6:36:38 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 6:36:38 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 6:26:28 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 6:26:28 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 6:22:23 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 6:22:23 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 6:22:19 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 5:27:49 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 5:27:49 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 5:23:48 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 5:23:45 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 5:23:44 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 7:48:46 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 7:48:46 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 7:44:44 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 7:44:43 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 7:44:40 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 7:37:04 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 7:37:04 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 7:33:03 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 7:32:59 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 7:32:59 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 7:26:03 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 7:26:03 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 7:22:01 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 7:22:01 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 7:21:57 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 7:17:30 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 7:17:30 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 7:13:27 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 7:13:23 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 7:13:23 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 7:03:40 AM Winlogon Information None 1002 N/A MATT-17DD1A18BC The shell stopped unexpectedly and Explorer.exe was restarted.

28/10/2008 7:03:15 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 7:03:14 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 6:58:51 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 6:58:47 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 6:58:47 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 6:55:21 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 6:55:17 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 6:55:17 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

28/10/2008 6:44:33 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

28/10/2008 6:44:33 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

28/10/2008 6:40:30 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

28/10/2008 6:40:26 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

28/10/2008 6:40:26 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

27/10/2008 5:48:55 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

27/10/2008 5:48:39 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

27/10/2008 5:48:09 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

27/10/2008 5:09:18 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

27/10/2008 5:07:40 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL), (NULL), , .

27/10/2008 5:05:37 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

27/10/2008 5:05:37 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

27/10/2008 5:01:35 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

27/10/2008 5:01:35 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

27/10/2008 5:01:32 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

27/10/2008 4:54:04 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

27/10/2008 4:54:04 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

27/10/2008 4:50:02 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

27/10/2008 4:49:59 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

27/10/2008 4:49:59 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

23/11/2009 4:22:34 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

23/11/2009 4:21:34 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

23/11/2009 12:56:57 PM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive C:

23/11/2009 12:56:50 PM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive C:

23/11/2009 12:00:51 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

23/11/2009 12:00:51 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

23/11/2009 11:56:50 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

23/11/2009 11:56:49 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

23/11/2009 11:56:48 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

22/11/2009 4:58:25 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook3.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:56:05 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:55:56 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook1.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:55:50 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:54:46 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\archive2.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:28:55 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

22/11/2009 4:28:55 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

22/11/2009 4:24:34 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

22/11/2009 4:24:30 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

22/11/2009 4:24:30 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

22/11/2009 4:16:52 PM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive G:

22/11/2009 4:16:51 PM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive G:

22/11/2009 4:16:28 PM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive C:

22/11/2009 4:15:58 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook3.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:15:53 PM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive C:

22/11/2009 4:15:21 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook2.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:15:19 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook1.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

22/11/2009 4:15:18 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

21/11/2009 4:14:59 PM Outlook Information None 30 N/A MATT-17DD1A18BC The store C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Outlook\archive2.pst is being reconciled with the indexer for the following reason: Non-matching max change numbers.

21/11/2009 4:03:00 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

21/11/2009 3:49:57 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

21/11/2009 3:49:57 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

21/11/2009 3:45:55 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

21/11/2009 3:45:54 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

21/11/2009 3:45:51 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

21/11/2009 3:38:19 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

21/11/2009 3:38:19 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

21/11/2009 3:34:17 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

21/11/2009 3:34:16 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

21/11/2009 3:34:13 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

21/11/2009 3:29:39 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

21/11/2009 3:29:20 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

21/11/2009 3:21:59 PM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive G:

21/11/2009 3:21:58 PM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive G:

21/11/2009 2:26:02 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

21/11/2009 2:26:02 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

21/11/2009 2:22:00 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

21/11/2009 2:22:00 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

21/11/2009 2:21:56 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

21/11/2009 1:34:26 PM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive C:

21/11/2009 1:34:09 PM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive C:

21/11/2009 1:19:32 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

21/11/2009 12:38:14 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

21/11/2009 12:38:14 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

21/11/2009 12:34:05 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

21/11/2009 12:34:01 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

21/11/2009 12:34:00 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

20/11/2009 6:31:08 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:30:51 PM Application Error Error None 1000 N/A MATT-17DD1A18BC Faulting application spybotsd.exe, version 1.6.0.31, faulting module spybotsd.exe, version 1.6.0.31, fault address 0x0001e606.

20/11/2009 6:24:20 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:19:15 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

20/11/2009 6:19:15 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

20/11/2009 6:16:52 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:15:21 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:14:58 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

20/11/2009 6:14:57 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

20/11/2009 6:14:54 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

20/11/2009 6:10:28 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:09:34 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:09:18 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

20/11/2009 6:03:38 PM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

20/11/2009 6:03:37 PM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

20/11/2009 5:59:36 PM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

20/11/2009 5:59:32 PM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

20/11/2009 5:59:31 PM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

20/11/2009 5:47:28 PM MBAMService Information None 1 N/A MATT-17DD1A18BC The description for Event ID ( 1 ) in Source ( MBAMService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: MBAMService, Info: MBAM realtime monitor started successfully.

20/11/2009 9:36:42 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

20/11/2009 9:36:42 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

20/11/2009 9:32:39 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

20/11/2009 9:32:38 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

20/11/2009 9:32:35 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

20/11/2009 9:15:31 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

20/11/2009 9:15:31 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

20/11/2009 9:11:29 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

20/11/2009 9:11:26 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

20/11/2009 9:11:26 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

20/11/2009 9:05:55 AM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive C:

20/11/2009 9:05:50 AM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive C:

1/11/2008 8:44:54 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

1/11/2008 8:44:54 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

1/11/2008 8:40:53 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

1/11/2008 8:40:49 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

1/11/2008 8:40:49 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

1/11/2008 7:29:43 AM EventSystem Error (50) 4609 N/A MATT-17DD1A18BC The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80070005 from line 44 of d:\comxp_sp3\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

22/10/2008 1:46:29 PM Microsoft Office 12 Error None 5000 N/A MATT-17DD1A18BC EventType officelifeboathang, P1 outlook.exe, P2 12.0.6316.5000, P3 ntdll.dll, P4 5.1.2600.5512, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 NIL, P10 NIL.

22/10/2008 8:19:40 AM Diskeeper Information None 26 N/A MATT-17DD1A18BC The Diskeeper defragmentation has stopped for drive C:

0 files were skipped because they could not be opened.

16 files were skipped because they were on the exclusion list.

The most common reason Diskeeper cannot open files is because the permissions on the files are set to deny the SYSTEM logon full control.

First 16 file(s) skipped:

\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe [Excluded]

\WINDOWS\system32\ntoskrnl.exe [Excluded]

\WINDOWS\SoftwareDistribution\Down...\ntoskrnl.exe [Excluded]

\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe [Excluded]

\WINDOWS\Driver Cache\i386\ntoskrnl.exe [Excluded]

\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe [Excluded]

\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe [Excluded]

\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe [Excluded]

\WINDOWS\ServicePackFiles\i386\ntldr [Excluded]

\WINDOWS\SoftwareDistribution\Down...\ntoskrnl.exe [Excluded]

\WINDOWS\SoftwareDistribution\Down...\ntoskrnl.exe [Excluded]

\WINDOWS\system32\dllcache\ntoskrnl.exe [Excluded]

\WINDOWS\SoftwareDistribution\Down...\ntoskrnl.exe [Excluded]

\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe [Excluded]

\WINDOWS\$NtServicePackUninstall$\ntldr [Excluded]

\WINDOWS\ServicePackFiles\i386\ntdetect.com [Excluded]

Note: A file appears on this list only if it could have been moved, but had to be skipped.

22/10/2008 7:24:17 AM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive C:

22/10/2008 7:24:06 AM Diskeeper Information None 28 N/A MATT-17DD1A18BC The Diskeeper analysis has stopped for drive C:

22/10/2008 7:24:01 AM Diskeeper Information None 7 N/A MATT-17DD1A18BC The Diskeeper Engine has started for drive C:

21/10/2008 4:41:21 PM MsiInstaller Information None 11724 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 11724 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Product: OpenOffice.org Installer 1.0 -- Removal completed successfully., (NULL), (NULL), (NULL).

21/10/2008 2:28:33 PM MsiInstaller Information None 11728 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 11728 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Product: Microsoft Silverlight -- Configuration completed successfully., (NULL), (NULL), (NULL).

21/10/2008 2:28:33 PM MsiInstaller Information None 1022 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1022 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Microsoft Silverlight, Microsoft Silverlight 2.0.31005.0, (NULL), (NULL).

21/10/2008 11:55:55 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

21/10/2008 11:55:55 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

21/10/2008 11:51:41 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

21/10/2008 11:51:40 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

21/10/2008 11:51:37 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

21/10/2008 8:22:02 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

21/10/2008 8:22:02 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

21/10/2008 8:18:00 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

21/10/2008 8:17:57 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

21/10/2008 8:17:52 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

20/10/2008 3:48:07 PM Application Hang Error (101) 1002 N/A MATT-17DD1A18BC Hanging application DriveDefrag.exe, version 7.0.8004.296, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

20/10/2008 8:34:36 AM LoadPerf Information None 1000 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.

20/10/2008 8:34:35 AM LoadPerf Information None 1001 N/A MATT-17DD1A18BC Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

20/10/2008 8:30:34 AM SecurityCenter Information None 1800 N/A MATT-17DD1A18BC The Windows Security Center Service has started.

20/10/2008 8:30:33 AM LVCOMSer Information None 0 N/A MATT-17DD1A18BC The description for Event ID ( 0 ) in Source ( LVCOMSer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.

20/10/2008 8:30:30 AM Diskeeper Information None 2 N/A MATT-17DD1A18BC The Diskeeper Control Center has been started. Diskeeper service started

Link to post
Share on other sites

These events:

23/11/2009 4:22:34 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: 0x80040154, (NULL), (NULL), (NULL).

23/11/2009 4:21:34 PM MsiInstaller Warning None 1015 MATT-17DD1A18BC\Owner MATT-17DD1A18BC The description for Event ID ( 1015 ) in Source ( MsiInstaller )

...and quite a few more are all dated 2009. Check your system's date and time to be sure it's correct.

Download "Dial-a-fix" from Here and save it to your Desktop. Right-click on the .zip file and select Extract All...open the folder and double-click the Dial-a-fix.exe icon. Place a check in the box for the option titled "Fix Windows Installer" under the heading MSI, then click the Go button at the bottom. Follow the prompts. When completed post back your results. Thanks!

Link to post
Share on other sites

ok sweet i have done that but no prompts popped up for me to follow, here is the log for dial a fix cheers...Matt

Notes about this log:

1) "->" denotes an external command being executed, and "-> (number)" indicates

the return code from the previous command

2) Not all external command return codes are accurate, or useful

3) Sometimes commands return 0 (no error) even when they fail or crash

4) If an error occurs while registering an object, please send an email to:

dial-a-fix@DjLizard.net and include a copy of this log

DAF version: v0.60.0.24

--- System info ---

OS: Microsoft Windows XP Service Pack 3

IE version: 7.0.5730.13

MPC: 76477-OEM

CPU: Intel® Core2 Duo CPU E6750 @ 2.66GHz (~2666MHz)

CPU: CPU is 64-bit or has 64-bit extensions

CPU: 2 CPU cores present

BIOS: 11/03/2008

Memory (approx): 2046MB

Uptime: 23 hour(s)

Current directory: C:\DOCUME~1\Owner\LOCALS~1\Temp\Rar$EX00.172\Dial-a-fix-v0.60.0.24

---

3/11/2008 5:41:22 PM -- Dial-a-fix : [v0.60.0.24] -- started

5:41:22 PM | Policy scan started

5:41:22 PM | Policy scan ended - no restrictive policies were found

--- MSI ---

5:41:37 PM | Registered: C:\WINDOWS\system32\msi.dll

Link to post
Share on other sites

OK...to this point, we had to confirm the location of the windows installer, unregister and register the service and downloaded and installed (which sounds contrary to the issue) the latest version. These next suggestions will confirm that the service is running.

Click Start-->Run, type services.msc in the run box, and then click OK.

Click the Standard tab at the bottom to expand the window.

Scroll down the list to locate Windows Installer, right-click Windows Installer, and then click Properties.

If the Startup type drop-down list is set to a value of Disable, select the Manual option from the Startup type drop-down list, and then click "Apply" and "OK".

Click the File menu, and then click Exit.

If you found that the Startup type was already set to manual, then let's consider performing a repair install of windows on your next reply...otherwise, as it stands, you will not be able to install any of the Windows Updates. Thanks!

Link to post
Share on other sites

Hey again mate, i have downloaded and updated 21 windows updates (inc sp3) updated to the latest adobe acrobat reader and am about to defrag and virus scan the drive....cheers..Matt

Good work! When you've installed ALL of the latest critical updates and finished up with your virus and defrag scans, post a fresh HijackThis log and let us know how the system is behaving for you.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.