Vino's Event Viewer v01c run on Windows 7 in English Report run at 09/10/2017 7:19:03 PM Note: All dates below are in the format dd/mm/yyyy ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'Application' Log - Critical Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'Application' Log - Error Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Log: 'Application' Date/Time: 09/10/2017 11:16:52 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:16:52 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:16:52 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Faulting module name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Exception code: 0xc000027b Fault offset: 0x000000000011bc57 Faulting process id: 0x560 Faulting application start time: 0x01d34154b0ae51d7 Faulting application path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Faulting module path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Report Id: edcd5267-498d-4e31-a85a-e6276657164a Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.15063.608_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: App Log: 'Application' Date/Time: 09/10/2017 11:16:51 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:16:51 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Faulting module name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Exception code: 0xc000027b Fault offset: 0x000000000011bc57 Faulting process id: 0x334 Faulting application start time: 0x01d34154b05a1723 Faulting application path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Faulting module path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Report Id: 4609c38e-07fc-4637-8a73-b52230bc2518 Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.15063.608_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: App Log: 'Application' Date/Time: 09/10/2017 11:16:50 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Faulting module name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Exception code: 0xc000027b Fault offset: 0x000000000011bc57 Faulting process id: 0x8d8 Faulting application start time: 0x01d34154afe5ed53 Faulting application path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Faulting module path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Report Id: 27916309-934d-4aee-841c-ba26a2315fac Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.15063.608_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: App Log: 'Application' Date/Time: 09/10/2017 11:15:41 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:15:40 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:15:30 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:15:30 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:15:30 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Faulting module name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Exception code: 0xc000027b Fault offset: 0x00000000001ae3e1 Faulting process id: 0x1684 Faulting application start time: 0x01d341547fdb0758 Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Faulting module path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Report Id: fceae259-a9f8-40a3-a73b-dad2f598aef4 Faulting package full name: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: CortanaUI Log: 'Application' Date/Time: 09/10/2017 11:15:30 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Faulting module name: ShellExperienceHost.exe, version: 10.0.15063.0, time stamp: 0x58ccbd2e Exception code: 0xc000027b Fault offset: 0x000000000011bc57 Faulting process id: 0x1bd8 Faulting application start time: 0x01d341547fd9b356 Faulting application path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Faulting module path: C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe Report Id: 095752b9-cabf-419f-bcb5-ffffe7ddb919 Faulting package full name: Microsoft.Windows.ShellExperienceHost_10.0.15063.608_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: App Log: 'Application' Date/Time: 09/10/2017 11:15:25 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:15:24 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Faulting module name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Exception code: 0xc000027b Fault offset: 0x00000000001ae3e1 Faulting process id: 0xd9c Faulting application start time: 0x01d341547c7f3c7d Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Faulting module path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Report Id: 6b858ef6-40e4-40d8-9527-7b7125a0f45a Faulting package full name: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: CortanaUI Log: 'Application' Date/Time: 09/10/2017 11:15:02 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:15:02 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Faulting module name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Exception code: 0xc000027b Fault offset: 0x00000000001ae3e1 Faulting process id: 0x102c Faulting application start time: 0x01d341546f09dc4f Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Faulting module path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Report Id: 2037b565-db7e-42c5-b79e-93893fb14171 Faulting package full name: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: CortanaUI Log: 'Application' Date/Time: 09/10/2017 11:14:59 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:14:59 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Faulting module name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Exception code: 0xc000027b Fault offset: 0x00000000001ae3e1 Faulting process id: 0xde8 Faulting application start time: 0x01d341546d7058e2 Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Faulting module path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Report Id: 8b3c134c-26ca-444f-89f6-ab7cc2eb68e1 Faulting package full name: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: CortanaUI Log: 'Application' Date/Time: 09/10/2017 11:14:57 PM Type: Error Category: 5973 Event: 5973 Source: Microsoft-Windows-Immersive-Shell Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information. Log: 'Application' Date/Time: 09/10/2017 11:14:56 PM Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Faulting module name: SearchUI.exe, version: 10.0.15063.332, time stamp: 0x591fdafc Exception code: 0xc000027b Fault offset: 0x00000000001ae3e1 Faulting process id: 0xa00 Faulting application start time: 0x01d341546bd56de4 Faulting application path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Faulting module path: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Report Id: 359fba6f-1811-4883-8d22-8d6c02f2e622 Faulting package full name: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy Faulting package-relative application ID: CortanaUI ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'Application' Log - Warning Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Log: 'Application' Date/Time: 09/10/2017 11:16:22 PM Type: Warning Category: 7 Event: 508 Source: ESENT wuaueng.dll (2336) SUS20ClientDataStore: A request to write to the file "C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log" at offset 229376 (0x0000000000038000) for 4096 (0x00001000) bytes succeeded, but took an abnormally long time (15 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem. Log: 'Application' Date/Time: 08/10/2017 3:43:09 PM Type: Warning Category: 0 Event: 2006 Source: Microsoft-Windows-LoadPerf The LastCounter and LastHelp values of the performance registry are corrupted and need to be updated. The first and second DWORDs in the Data Section contain the original LastCounter and LastHelp values, respectively, while the third and fourth DWORDs in the Data Section contain the updated new values. Log: 'Application' Date/Time: 08/10/2017 3:35:53 PM Type: Warning Category: 0 Event: 6005 Source: Microsoft-Windows-Winlogon The winlogon notification subscriber is taking long time to handle the notification event (Logoff). Log: 'Application' Date/Time: 08/10/2017 3:28:33 PM Type: Warning Category: 0 Event: 6000 Source: Microsoft-Windows-Winlogon The winlogon notification subscriber was unavailable to handle a notification event. Log: 'Application' Date/Time: 08/10/2017 3:28:32 PM Type: Warning Category: 0 Event: 6000 Source: Microsoft-Windows-Winlogon The winlogon notification subscriber was unavailable to handle a notification event. Log: 'Application' Date/Time: 08/10/2017 1:55:14 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, WsmAgent, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\winrm to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:14 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, WsmAgent, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\winrm to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:12 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_UserStateConfigurationProvider, has been registered in the Windows Management Instrumentation namespace root\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:12 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_UserStateConfigurationProvider, has been registered in the Windows Management Instrumentation namespace root\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:07 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_OfflineFilesConfigurationProvider, has been registered in the Windows Management Instrumentation namespace ROOT\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:07 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_OfflineFilesConfigurationProvider, has been registered in the Windows Management Instrumentation namespace ROOT\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:07 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_OfflineFilesConfigurationProvider, has been registered in the Windows Management Instrumentation namespace ROOT\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:01 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_FolderRedirectionConfiguration, has been registered in the Windows Management Instrumentation namespace root\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:01 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, Win32_FolderRedirectionConfiguration, has been registered in the Windows Management Instrumentation namespace root\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:01 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, DSCCoreProviders, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:01 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, DSCCoreProviders, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:55:01 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, DSCCoreProviders, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:54:20 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, WsmAgent, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\winrm to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:54:20 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, WsmAgent, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\winrm to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Log: 'Application' Date/Time: 08/10/2017 1:54:17 PM Type: Warning Category: 0 Event: 63 Source: Microsoft-Windows-WMI A provider, HiPerfCooker_v1, has been registered in the Windows Management Instrumentation namespace Root\WMI to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.