Level Date and Time Source Event ID Task Category Information 2018-01-23 12:00:00 EventLog 6013 None The system uptime is 4926 seconds. Information 2018-01-23 11:58:07 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2018-01-23 11:54:01 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2018-01-23 11:48:01 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2018-01-23 11:06:12 Service Control Manager 7045 None "A service was installed in the system. Service Name: TVService Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TVService.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2018-01-23 10:54:47 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-23 10:54:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-23 10:54:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-23 10:54:23 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-23 10:54:23 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎23T09:53:42.356083100Z Wake Time: ‎2018‎-‎01‎-‎23T09:54:21.045631500Z Wake Source: Unknown" Warning 2018-01-23 10:54:21 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-23 10:54:21 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-23 10:54:21 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-23 10:54:21 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-23 10:54:21 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-23 10:54:21 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-23 10:54:21 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-23 10:54:19 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎23T09:54:19.500000000Z from ‎2018‎-‎01‎-‎23T09:53:44.819363200Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-23 10:53:44 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-23 10:53:42 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-23 10:53:41 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-23 10:53:38 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-23 10:42:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-23 10:40:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-23 10:40:37 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-23 10:40:36 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-23 10:38:37 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-23 10:38:27 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-23 10:38:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-23 10:38:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-23 10:38:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-23 10:38:13 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-23 10:38:10 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-23 10:38:10 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-23 10:38:06 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-23 10:38:05 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-23 10:38:05 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-23 10:38:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:38:05 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:38:05 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:38:05 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:38:05 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:38:06 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-23 10:38:02 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-23 10:38:01 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-23 10:37:58 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-23 10:37:58 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-23 10:37:58 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-23 10:37:57 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-23 10:37:57 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-23 10:37:57 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-23 10:37:57 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-23 10:37:57 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-23 10:37:57 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-23 10:37:57 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-23 10:37:57 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-23 10:37:56 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:37:56 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:37:56 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:37:56 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:37:56 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-23 10:37:55 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:37:55 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-23 10:37:54 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎23T09:37:54.487225900Z. Information 2018-01-23 10:37:40 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎23T09:37:40.574027800Z. Information 2018-01-23 10:37:38 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-23 10:37:34 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-23 10:38:04 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-23 10:38:04 EventLog 6005 None The Event log service was started. Information 2018-01-23 10:38:04 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-23 10:37:33 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-23 10:37:33 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-23 10:37:33 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-23 10:37:33 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-23 10:37:33 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-23 10:37:33 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-23 10:37:33 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-23 10:37:33 EventLog 6006 None The Event log service was stopped. Information 2018-01-23 10:37:30 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-23 10:37:20 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Error 2018-01-23 10:37:19 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-23 10:37:19 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-23 10:37:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-23 09:51:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-23 09:48:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-23 09:41:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-23 09:33:52 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 6090752 bytes and an ending size of 6082560 bytes. Information 2018-01-23 09:33:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-23 09:31:12 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-23 09:30:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-23 09:30:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-23 09:30:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-23 09:30:42 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎22T23:50:16.577431500Z Wake Time: ‎2018‎-‎01‎-‎23T08:30:40.890969500Z Wake Source: Unknown" Warning 2018-01-23 09:30:41 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-23 09:30:41 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-23 09:30:40 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-23 09:30:40 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-23 09:30:40 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-23 09:30:40 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-23 09:30:40 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-23 09:30:37 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎23T08:30:37.500000000Z from ‎2018‎-‎01‎-‎22T23:50:20.663910900Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-23 00:50:20 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-23 00:50:17 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-23 00:50:16 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-23 00:50:10 Application Popup 26 None "Application popup: SetupTv.exe - Application Error : The exception unknown software exception (0xe0434352) occurred in the application at location 0x0000000076FB08B2. " Error 2018-01-23 00:50:09 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-23 00:50:09 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-23 00:50:07 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-23 00:50:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-23 00:37:07 Service Control Manager 7045 None "A service was installed in the system. Service Name: TVService Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TVService.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2018-01-23 00:14:22 Service Control Manager 7045 None "A service was installed in the system. Service Name: TVService Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TVService.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Error 2018-01-22 23:48:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 23:48:36 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 23:48:35 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-22 23:46:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 23:46:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 23:46:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 23:46:10 Service Control Manager 7040 None The start type of the cphs service was changed from auto start to demand start. Error 2018-01-22 23:46:01 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 23:46:00 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 23:45:58 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 23:45:57 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 23:45:53 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 23:45:53 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 23:45:53 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 23:45:53 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 23:45:52 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:52 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:52 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:52 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:52 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:49 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 23:45:48 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-22 23:45:46 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 23:45:45 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 23:45:45 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-22 23:45:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 23:45:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 23:45:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 23:45:44 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 23:45:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 23:45:44 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 23:45:44 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 23:45:44 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-22 23:45:43 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:43 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:43 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 23:45:42 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:42 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 23:45:41 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T22:45:41.488137300Z. Information 2018-01-22 23:45:28 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎22T22:45:28.553787900Z. Information 2018-01-22 23:45:25 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-22 23:45:21 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-22 23:45:51 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-22 23:45:51 EventLog 6005 None The Event log service was started. Information 2018-01-22 23:45:51 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-22 23:45:21 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 23:45:21 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 23:45:21 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 23:45:21 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 23:45:21 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-22 23:45:20 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-22 23:45:20 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-22 23:45:21 EventLog 6006 None The Event log service was stopped. Information 2018-01-22 23:45:17 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-22 23:45:14 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-22 23:45:14 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Warning 2018-01-22 23:45:09 Display 4101 None Display driver igfxLP stopped responding and has successfully recovered. Information 2018-01-22 23:43:07 Service Control Manager 7045 None "A service was installed in the system. Service Name: TVService Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TVService.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Error 2018-01-22 23:12:00 Service Control Manager 7034 None The TVService service terminated unexpectedly. It has done this 1 time(s). Information 2018-01-22 23:02:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-22 23:01:54 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: Intel Corporation driver update for Intel(R) HD Graphics Information 2018-01-22 23:01:54 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_66e0a5048e30f9c5\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Information 2018-01-22 23:01:53 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2018-01-22 23:01:46 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver igdlh64.inf_amd64_a89617337ce7436c\igdlh64.inf for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0x0. Information 2018-01-22 23:01:30 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxCUIService2.0.0.0 for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-22 23:01:30 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service cphs for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-22 23:01:30 Service Control Manager 7040 None The start type of the Intel(R) Content Protection HECI Service service was changed from demand start to auto start. Information 2018-01-22 23:01:30 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxLP for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-22 23:00:59 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2018-01-22 23:00:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 23:00:57 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-22 23:00:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 23:00:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 23:00:09 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 23:00:07 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎22T21:59:23.110561200Z Wake Time: ‎2018‎-‎01‎-‎22T22:00:05.453239500Z Wake Source: Unknown" Warning 2018-01-22 23:00:06 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 23:00:06 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 23:00:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 23:00:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 23:00:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-22 23:00:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 23:00:05 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 23:00:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎22T22:00:04.500000000Z from ‎2018‎-‎01‎-‎22T21:59:38.414326800Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-22 22:59:38 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-22 22:59:24 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-22 22:59:22 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-22 22:59:20 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: Intel Corporation driver update for Intel(R) HD Graphics Information 2018-01-22 22:59:16 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy14) is healthy. No action is needed. Information 2018-01-22 22:59:15 Volsnap 33 None The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. Information 2018-01-22 22:59:11 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-22 22:58:09 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 22:57:52 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 22:57:43 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Error 2018-01-22 22:57:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:57:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 22:57:38 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 22:57:36 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 22:57:32 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 22:57:32 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 22:57:32 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 22:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:29 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 22:57:29 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-22 22:57:25 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-22 22:57:25 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 22:57:25 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 22:57:24 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:57:24 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 22:57:24 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:57:24 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:57:24 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 22:57:24 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:57:24 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 22:57:23 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-22 22:57:23 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-22 22:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:23 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 22:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:21 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:57:32 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 22:57:31 EventLog 6013 None The system uptime is 11 seconds. Information 2018-01-22 22:57:31 EventLog 6005 None The Event log service was started. Information 2018-01-22 22:57:31 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-22 22:57:31 EventLog 6008 None The previous system shutdown at 22:49:04 on ‎2018-‎01-‎22 was unexpected. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 22:57:20 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T21:57:20.487442200Z. Information 2018-01-22 22:56:01 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-22 22:53:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-22 22:51:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 22:51:48 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 22:51:47 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-22 22:49:45 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2018-01-22 22:49:31 Service Control Manager 7040 None The start type of the cphs service was changed from auto start to demand start. Error 2018-01-22 22:49:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:49:20 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 22:49:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:49:11 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 22:49:10 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 22:49:07 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 22:49:06 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 22:49:06 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 22:49:05 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 22:49:05 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 22:49:04 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:49:04 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:49:04 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:49:04 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:49:04 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:49:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 22:49:02 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-22 22:49:00 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 22:48:59 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 22:48:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-22 22:48:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:48:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:48:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:48:58 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 22:48:58 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 22:48:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:48:58 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 22:48:57 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-22 22:48:57 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:48:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:48:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:48:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:48:57 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 22:48:56 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:48:56 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 22:48:55 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T21:48:55.487316100Z. Information 2018-01-22 22:48:42 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎22T21:48:42.584838200Z. Information 2018-01-22 22:48:38 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-22 22:48:35 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-22 22:49:04 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-22 22:49:04 EventLog 6005 None The Event log service was started. Information 2018-01-22 22:49:04 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-22 22:48:34 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 22:48:34 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 22:48:34 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 22:48:34 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 22:48:34 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-22 22:48:34 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-22 22:48:34 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-22 22:48:34 EventLog 6006 None The Event log service was stopped. Information 2018-01-22 22:48:30 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-22 22:48:28 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-22 22:48:28 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-22 22:47:52 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver igdlh64.inf_amd64_cae9d8ead495b5a6\igdlh64.inf for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0x0. Information 2018-01-22 22:47:51 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxCUIService2.0.0.0 for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-22 22:47:51 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service cphs for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-22 22:47:51 Service Control Manager 7040 None The start type of the Intel(R) Content Protection HECI Service service was changed from demand start to auto start. Information 2018-01-22 22:47:51 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxLP for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-22 22:47:05 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_f76199cadbc2cd99\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Information 2018-01-22 22:47:03 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2018-01-22 22:39:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-22 22:39:14 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-22 22:38:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:38:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 22:38:47 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎22T21:38:06.031272100Z Wake Time: ‎2018‎-‎01‎-‎22T21:38:45.984452600Z Wake Source: Unknown" Information 2018-01-22 22:38:47 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Warning 2018-01-22 22:38:46 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 22:38:46 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 22:38:45 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 22:38:45 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 22:38:45 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-22 22:38:45 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 22:38:45 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 22:38:44 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎22T21:38:44.500000000Z from ‎2018‎-‎01‎-‎22T21:38:08.445076400Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-22 22:38:08 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-22 22:38:06 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-22 22:38:05 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-22 22:38:00 Application Popup 26 None "Application popup: MicrosoftEdge.exe - Application Error : The instruction at 0x00007FFD3E1E8F8E referenced memory at 0x0000000000000000. The memory could not be read. Click on OK to terminate the program" Error 2018-01-22 22:37:59 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-22 22:37:59 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-22 22:37:56 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Error 2018-01-22 22:29:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 22:29:08 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 22:29:07 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-22 22:26:50 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 22:26:39 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 22:26:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:26:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:26:14 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 22:26:12 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 22:26:10 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 22:26:07 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 22:26:07 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 22:26:07 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 22:26:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:26:05 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:26:05 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:26:05 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:26:05 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:26:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 22:26:03 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-22 22:25:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-22 22:25:59 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 22:25:59 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 22:25:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:25:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:25:58 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 22:25:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:25:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:25:58 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 22:25:58 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 22:25:58 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-22 22:25:58 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-22 22:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:25:57 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 22:25:56 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:25:56 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:26:07 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 22:26:07 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 22:26:06 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-22 22:26:06 EventLog 6005 None The Event log service was started. Information 2018-01-22 22:26:06 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-22 22:26:06 EventLog 6008 None The previous system shutdown at 22:00:51 on ‎2018-‎01-‎22 was unexpected. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 22:25:55 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T21:25:55.487675100Z. Error 2018-01-22 22:03:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 22:03:26 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 22:03:25 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-22 22:01:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 22:01:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 22:01:24 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 22:01:01 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 22:00:59 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 22:00:58 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 22:00:57 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 22:00:52 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:52 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:52 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:52 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:52 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 22:00:52 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:52 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 22:00:52 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 22:00:49 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 22:00:49 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-22 22:00:45 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-22 22:00:45 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 22:00:45 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 22:00:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:00:44 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 22:00:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:00:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 22:00:44 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 22:00:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 22:00:44 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 22:00:44 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-22 22:00:44 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-22 22:00:44 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:43 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:43 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 22:00:53 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 22:00:42 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:42 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 22:00:51 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-22 22:00:51 EventLog 6005 None The Event log service was started. Information 2018-01-22 22:00:51 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-22 22:00:51 EventLog 6008 None The previous system shutdown at 21:51:09 on ‎2018-‎01-‎22 was unexpected. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 22:00:41 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T21:00:41.487302700Z. Error 2018-01-22 21:53:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 21:53:48 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 21:53:47 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-22 21:51:45 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 21:51:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 21:51:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 21:51:20 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 21:51:16 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 21:51:15 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 21:51:12 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 21:51:10 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 21:51:10 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 21:51:10 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 21:51:11 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 21:51:09 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:09 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:09 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:09 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:09 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:07 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 21:51:07 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-22 21:51:04 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-22 21:51:04 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 21:51:04 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 21:51:03 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 21:51:03 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 21:51:03 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 21:51:03 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 21:51:03 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 21:51:03 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 21:51:03 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 21:51:02 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-22 21:51:02 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:02 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:02 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:02 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:02 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 21:51:01 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:01 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 21:51:00 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T20:51:00.487888900Z. Information 2018-01-22 21:50:47 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎22T20:50:47.681717100Z. Information 2018-01-22 21:50:45 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-22 21:50:41 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-22 21:51:09 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-22 21:51:09 EventLog 6005 None The Event log service was started. Information 2018-01-22 21:51:09 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-22 21:50:41 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 21:50:41 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 21:50:41 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 21:50:41 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 21:50:41 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-22 21:50:40 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-22 21:50:40 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-22 21:50:40 EventLog 6006 None The Event log service was stopped. Information 2018-01-22 21:50:37 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-22 21:50:37 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Information 2018-01-22 21:50:34 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-22 21:45:09 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-22 21:44:44 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy10\Windows\System32\config\DRIVERS (TM: {A6BEEC7F-FFB2-11E7-BC4D-4851B7BD102C}, RM: {A6BEEC7E-FFB2-11E7-BC4D-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-22 21:44:44 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy10\Windows\System32\config\SYSTEM (TM: {A6BEEC7D-FFB2-11E7-BC4D-4851B7BD102C}, RM: {A6BEEC7C-FFB2-11E7-BC4D-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-22 21:44:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-22 21:39:22 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Error 2018-01-22 21:30:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 21:30:15 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 21:30:14 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-22 21:28:12 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 21:28:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 21:28:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 21:27:45 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 21:27:40 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 21:27:39 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 21:27:39 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 21:27:34 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:34 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:34 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:34 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:34 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:33 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 21:27:33 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 21:27:33 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 21:27:31 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 21:27:31 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-22 21:27:27 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-22 21:27:27 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 21:27:27 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 21:27:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 21:27:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 21:27:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 21:27:26 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 21:27:26 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 21:27:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 21:27:26 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 21:27:25 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-22 21:27:25 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-22 21:27:25 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:25 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:24 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 21:27:35 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 21:27:23 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:23 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:27:33 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-22 21:27:33 EventLog 6005 None The Event log service was started. Information 2018-01-22 21:27:33 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-22 21:27:33 EventLog 6008 None The previous system shutdown at 21:15:50 on ‎2018-‎01-‎22 was unexpected. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 21:27:22 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T20:27:22.488059200Z. Information 2018-01-22 21:20:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-22 21:18:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 21:18:22 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-22 21:18:21 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-22 21:16:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 21:16:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 21:16:19 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-22 21:15:58 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-22 21:15:56 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-22 21:15:56 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-22 21:15:53 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-22 21:15:51 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-22 21:15:50 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-22 21:15:50 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:50 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:50 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:50 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:50 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:50 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-22 21:15:50 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-22 21:15:48 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-22 21:15:48 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-22 21:15:45 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-22 21:15:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 21:15:44 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 21:15:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 21:15:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 21:15:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-22 21:15:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-22 21:15:44 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-22 21:15:44 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-22 21:15:43 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-22 21:15:43 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-22 21:15:43 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:43 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:42 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-22 21:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-22 21:15:40 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎22T20:15:40.488035500Z. Information 2018-01-22 21:15:27 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎22T20:15:27.870612300Z. Information 2018-01-22 21:15:26 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-22 21:15:22 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-22 21:15:50 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-22 21:15:50 EventLog 6005 None The Event log service was started. Information 2018-01-22 21:15:50 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-22 21:15:22 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 21:15:22 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-22 21:15:22 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-22 21:15:22 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-22 21:15:21 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-22 21:15:21 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-22 21:15:22 EventLog 6006 None The Event log service was stopped. Information 2018-01-22 21:15:18 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-22 21:15:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-22 20:16:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-22 20:14:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-22 20:07:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 386 keys and creating 34 modified pages. Information 2018-01-22 16:44:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 61 keys and creating 10 modified pages. Information 2018-01-22 16:14:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 14 keys and creating 2 modified pages. Information 2018-01-22 12:00:00 EventLog 6013 None The system uptime is 82295 seconds. Information 2018-01-22 10:59:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-22 10:57:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-22 08:08:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-22 08:06:24 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-22 08:05:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-22 08:05:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-22 08:05:52 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Warning 2018-01-22 08:05:51 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-22 08:05:50 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎21T21:29:39.594002900Z Wake Time: ‎2018‎-‎01‎-‎22T07:05:48.201814200Z Wake Source: Unknown" Warning 2018-01-22 08:05:48 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-22 08:05:48 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-22 08:05:48 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-22 08:05:48 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-22 08:05:48 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-22 08:05:48 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-22 08:05:48 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2018-01-22 08:05:47 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-22 08:05:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎22T07:05:46.500000000Z from ‎2018‎-‎01‎-‎21T21:29:42.444521200Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-21 22:29:42 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-21 22:29:40 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-21 22:29:39 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-21 22:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-21 22:29:26 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-21 22:29:24 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-21 22:29:22 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-21 20:24:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-21 18:00:33 Service Control Manager 7045 None "A service was installed in the system. Service Name: PHYMEM2 Service File Name: C:\Program Files (x86)\imElfin\Total Media Converter\phymem_ext64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Error 2018-01-21 18:00:32 Service Control Manager 7000 None "The PHYMEM2 service failed to start due to the following error: The system cannot find the file specified." Information 2018-01-21 18:00:32 Service Control Manager 7045 None "A service was installed in the system. Service Name: PHYMEM2 Service File Name: C:\Program Files (x86)\imElfin\Total Media Converter\phymem_ext64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Error 2018-01-21 18:00:32 Service Control Manager 7000 None "The PHYMEM2 service failed to start due to the following error: The system cannot find the file specified." Information 2018-01-21 18:00:32 Service Control Manager 7045 None "A service was installed in the system. Service Name: PHYMEM2 Service File Name: C:\Program Files (x86)\imElfin\Total Media Converter\phymem_ext64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2018-01-21 17:57:35 Service Control Manager 7045 None "A service was installed in the system. Service Name: PHYMEM2 Service File Name: C:\Program Files (x86)\imElfin\Total Media Converter\phymem_ext64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Error 2018-01-21 17:57:34 Service Control Manager 7000 None "The PHYMEM2 service failed to start due to the following error: The system cannot find the file specified." Information 2018-01-21 17:57:34 Service Control Manager 7045 None "A service was installed in the system. Service Name: PHYMEM2 Service File Name: C:\Program Files (x86)\imElfin\Total Media Converter\phymem_ext64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Error 2018-01-21 17:57:34 Service Control Manager 7000 None "The PHYMEM2 service failed to start due to the following error: The system cannot find the file specified." Information 2018-01-21 17:57:34 Service Control Manager 7045 None "A service was installed in the system. Service Name: PHYMEM2 Service File Name: C:\Program Files (x86)\imElfin\Total Media Converter\phymem_ext64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Warning 2018-01-21 17:52:15 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name kat.cr timed out after none of the configured DNS servers responded. Information 2018-01-21 14:27:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-21 14:10:52 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-21 13:53:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-21 13:36:44 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-21 13:19:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-21 13:19:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-21 13:13:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-21 13:11:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-21 13:11:06 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-21 13:11:05 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-21 13:09:04 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-21 13:09:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-21 13:09:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-21 13:08:44 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-21 13:08:42 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-21 13:08:40 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-21 13:08:37 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-21 13:08:35 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-21 13:08:36 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-21 13:08:35 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:35 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:35 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:35 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:35 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-21 13:08:35 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-21 13:08:35 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:33 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-21 13:08:32 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-21 13:08:29 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-21 13:08:29 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-21 13:08:29 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-21 13:08:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-21 13:08:28 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-21 13:08:28 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-21 13:08:28 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-21 13:08:28 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-21 13:08:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-21 13:08:28 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-21 13:08:28 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-21 13:08:28 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:27 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-21 13:08:26 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:26 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-21 13:08:25 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎21T12:08:25.487161300Z. Information 2018-01-21 13:08:13 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎21T12:08:13.237897800Z. Information 2018-01-21 13:08:11 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-21 13:08:07 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-21 13:08:34 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-21 13:08:34 EventLog 6005 None The Event log service was started. Information 2018-01-21 13:08:34 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-21 13:08:06 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-21 13:08:06 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-21 13:08:06 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-21 13:08:06 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-21 13:08:06 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-21 13:08:06 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-21 13:08:06 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-21 13:08:06 EventLog 6006 None The Event log service was stopped. Information 2018-01-21 13:08:02 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-21 13:07:59 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-21 13:07:59 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-21 13:07:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-21 12:00:00 EventLog 6013 None The system uptime is 149846 seconds. Information 2018-01-21 08:56:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-21 08:54:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-21 00:40:44 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml Information 2018-01-21 00:40:39 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml Information 2018-01-21 00:40:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1801.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-21 00:40:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1801.1.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-21 00:40:20 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Warning 2018-01-20 19:53:29 Microsoft-Windows-Time-Service 36 None The time service has not synchronized the system time for the last 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients after 0 seconds. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization. You can control the frequency of the time source rediscovery using ClockHoldoverPeriod W32time config setting. Modify the EventLogFlags W32time config setting if you wish to disable this message. Information 2018-01-20 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-20 14:57:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-20 12:00:00 EventLog 6013 None The system uptime is 63446 seconds. Information 2018-01-20 11:32:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-20 11:30:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-20 04:27:31 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore Information 2018-01-20 04:27:26 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore Information 2018-01-20 04:27:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11712.1001.13.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-20 04:26:38 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRDJMH1-46928bounde.EclipseManager Information 2018-01-20 04:26:38 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRDJMH1-46928bounde.EclipseManager Information 2018-01-20 04:26:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\46928bounde.EclipseManager_3.1.11.0_x64__a5h4egax66k6y\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-20 04:26:28 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-20 04:26:24 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-19 21:02:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-19 20:44:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-19 20:27:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-19 20:10:49 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-19 19:53:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-19 19:53:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-19 18:53:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. Information 2018-01-19 18:41:23 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-19 18:41:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 18:41:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-19 18:40:58 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-19 18:40:57 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎19T17:40:23.180339400Z Wake Time: ‎2018‎-‎01‎-‎19T17:40:55.776976300Z Wake Source: Unknown" Warning 2018-01-19 18:40:56 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-19 18:40:56 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-19 18:40:55 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-19 18:40:55 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-19 18:40:55 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-19 18:40:55 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-19 18:40:55 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-19 18:40:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎19T17:40:54.500000000Z from ‎2018‎-‎01‎-‎19T17:40:25.842876600Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-19 18:40:25 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-19 18:40:23 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-19 18:40:22 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-19 18:40:14 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-19 18:34:03 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 2018-01-19 18:27:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-19 18:25:53 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Error 2018-01-19 18:25:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-19 18:25:22 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-19 18:25:20 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-19 18:23:19 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-19 18:23:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 18:23:04 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-19 18:22:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 18:22:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 18:22:50 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-19 18:22:48 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-19 18:22:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-19 18:22:44 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-19 18:22:44 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-19 18:22:43 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-19 18:22:43 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-19 18:22:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:43 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:43 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:43 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:43 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:41 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-19 18:22:40 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-19 18:22:39 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-19 18:22:37 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-19 18:22:37 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-19 18:22:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-19 18:22:36 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-19 18:22:36 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-19 18:22:36 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP3 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-19 18:22:36 NETwNb64 7036 None The \Device\NDMP3 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-19 18:22:36 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-19 18:22:36 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-19 18:22:36 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-19 18:22:35 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:35 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:35 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:35 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:35 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-19 18:22:34 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:34 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-19 18:22:33 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎19T17:22:33.488090500Z. Information 2018-01-19 18:22:20 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎19T17:22:20.412377200Z. Information 2018-01-19 18:22:18 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-19 18:22:14 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-19 18:22:13 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-19 18:22:43 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-19 18:22:43 EventLog 6005 None The Event log service was started. Information 2018-01-19 18:22:43 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-19 18:22:13 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-19 18:22:13 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-19 18:22:13 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-19 18:22:13 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-19 18:22:13 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-19 18:22:13 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-19 18:22:13 EventLog 6006 None The Event log service was stopped. Information 2018-01-19 18:22:09 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-19 18:21:57 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-19 18:21:57 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-19 18:21:55 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-19 18:21:44 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-19 15:16:02 Service Control Manager 7045 None "A service was installed in the system. Service Name: nordvpn-service Service File Name: ""C:\Program Files (x86)\NordVPN\nordvpn-service.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2018-01-19 15:11:55 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy13) is healthy. No action is needed. Information 2018-01-19 15:11:08 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver oemvista.inf_amd64_ce3e1a6bc41f90db\oemvista.inf for Device Instance ID ROOT\NET\0000 with the following status: 0x0. Information 2018-01-19 15:11:07 Service Control Manager 7045 None "A service was installed in the system. Service Name: TAP-NordVPN Windows Adapter V9 Service File Name: \SystemRoot\System32\drivers\tapnordvpn.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2018-01-19 13:36:59 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy11\Windows\System32\config\DRIVERS (TM: {E58348E5-FD13-11E7-BC49-4851B7BD102C}, RM: {E58348E4-FD13-11E7-BC49-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-19 13:36:59 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy11\Windows\System32\config\SYSTEM (TM: {E58348E3-FD13-11E7-BC49-4851B7BD102C}, RM: {E58348E2-FD13-11E7-BC49-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-19 13:36:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-19 13:31:08 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-19 13:28:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-19 13:28:46 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-19 13:28:45 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-19 13:27:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-19 13:26:44 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-19 13:26:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 13:26:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 13:26:18 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-19 13:26:14 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-19 13:26:12 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-19 13:26:11 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-19 13:26:06 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:26:06 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:26:06 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:26:06 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:26:06 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:26:06 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-19 13:26:06 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-19 13:26:06 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-19 13:26:04 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-19 13:26:03 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-19 13:25:59 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-19 13:25:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-19 13:25:59 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-19 13:25:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-19 13:25:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-19 13:25:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-19 13:25:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-19 13:25:58 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-19 13:25:58 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-19 13:25:58 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-19 13:25:58 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-19 13:25:58 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-19 13:25:58 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:25:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:25:57 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-19 13:25:56 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:25:56 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-19 13:26:06 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-19 13:26:06 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-19 13:26:06 EventLog 6005 None The Event log service was started. Information 2018-01-19 13:26:06 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-19 13:26:06 EventLog 6008 None The previous system shutdown at 10:49:44 on ‎2018-‎01-‎19 was unexpected. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-19 13:25:55 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎19T12:25:55.488114200Z. Information 2018-01-19 08:13:58 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps Information 2018-01-19 08:13:51 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps Information 2018-01-19 08:13:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8730.21865.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-19 08:11:44 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PKDZBMV1H3T-Microsoft.GetHelp Information 2018-01-19 08:11:35 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PKDZBMV1H3T-Microsoft.GetHelp Information 2018-01-19 08:11:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-19 08:11:05 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted Information 2018-01-19 08:10:56 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted Information 2018-01-19 08:10:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 2018-01-19 08:09:18 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-19 08:09:10 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera Information 2018-01-19 08:09:00 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera Information 2018-01-19 08:08:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 2018-01-19 08:08:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.1117.10.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-19 08:08:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.1706.3471.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-19 08:07:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_6.7.3462.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-19 08:06:58 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-19 08:06:58 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-19 08:06:49 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-19 08:04:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-19 08:03:21 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-19 08:02:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-19 08:02:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-19 08:02:50 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-19 08:02:50 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎18T21:35:44.824267100Z Wake Time: ‎2018‎-‎01‎-‎19T07:02:47.991218900Z Wake Source: Unknown" Warning 2018-01-19 08:02:48 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-19 08:02:48 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-19 08:02:47 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-19 08:02:47 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-19 08:02:47 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-19 08:02:47 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-19 08:02:47 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-19 08:02:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎19T07:02:46.500000000Z from ‎2018‎-‎01‎-‎18T21:35:47.067062600Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-18 22:35:47 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-18 22:35:45 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-18 22:35:43 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-18 22:35:41 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-18 22:35:41 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-18 22:35:34 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2018-01-18 22:05:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 22:05:40 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-18 22:05:38 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-18 22:04:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 22:04:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 22:04:33 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 22:04:33 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎18T21:03:26.483659600Z Wake Time: ‎2018‎-‎01‎-‎18T21:04:31.359721000Z Wake Source: Unknown" Warning 2018-01-18 22:04:31 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 22:04:31 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 22:04:31 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 22:04:31 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 22:04:31 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-18 22:04:31 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 22:04:31 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 22:04:30 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎18T21:04:30.500000000Z from ‎2018‎-‎01‎-‎18T21:03:29.297198400Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-18 22:03:29 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-18 22:03:27 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-18 22:03:26 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-18 22:03:21 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Error 2018-01-18 22:03:21 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Error 2018-01-18 22:03:21 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess did not register with DCOM within the required timeout. Error 2018-01-18 22:03:21 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Error 2018-01-18 22:03:20 Microsoft-Windows-DistributedCOM 10010 None The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. Error 2018-01-18 22:03:20 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-18 22:03:20 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-18 22:03:16 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-18 22:02:21 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-18 22:02:13 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-18 22:02:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 22:01:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 22:01:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 22:01:50 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-18 22:01:49 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-18 22:01:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 22:01:44 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-18 22:01:44 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-18 22:01:44 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-18 22:01:44 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:44 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:44 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:44 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:43 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:41 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-18 22:01:41 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-18 22:01:38 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-18 22:01:38 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 22:01:38 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 22:01:37 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 22:01:37 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-18 22:01:37 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 22:01:37 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 22:01:37 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-18 22:01:37 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 22:01:37 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-18 22:01:36 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-18 22:01:36 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:36 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:36 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-18 22:01:44 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-18 22:01:35 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:35 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-18 22:01:34 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎18T21:01:34.487418500Z. Information 2018-01-18 22:01:22 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎18T21:01:22.457001600Z. Information 2018-01-18 22:01:20 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-18 22:01:16 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-18 22:01:16 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 22:01:16 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 22:01:16 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 22:01:16 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 22:01:43 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-18 22:01:43 EventLog 6005 None The Event log service was started. Information 2018-01-18 22:01:43 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-18 22:01:16 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-18 22:01:15 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-18 22:01:15 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-18 22:01:16 EventLog 6006 None The Event log service was stopped. Information 2018-01-18 22:01:11 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-18 22:01:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-18 22:01:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-18 22:01:04 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Error 2018-01-18 21:58:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 21:58:45 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-18 21:58:44 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-18 21:56:37 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-18 21:56:27 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-18 21:56:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:56:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:56:07 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-18 21:56:05 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-18 21:56:03 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 21:56:01 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:56:01 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:56:01 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:56:01 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-18 21:56:01 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:56:01 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-18 21:56:01 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:56:01 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-18 21:56:01 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-18 21:55:58 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-18 21:55:58 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-18 21:55:55 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 21:55:55 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 21:55:55 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-18 21:55:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 21:55:54 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 21:55:54 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 21:55:54 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-18 21:55:54 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 21:55:54 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-18 21:55:54 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-18 21:55:53 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-18 21:55:53 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:55:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:55:53 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:55:53 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:55:53 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-18 21:55:52 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:55:52 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-18 21:55:51 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎18T20:55:51.487906300Z. Information 2018-01-18 21:55:38 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎18T20:55:38.026686900Z. Information 2018-01-18 21:55:35 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-18 21:55:31 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-18 21:56:00 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-18 21:56:00 EventLog 6005 None The Event log service was started. Information 2018-01-18 21:56:00 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-18 21:55:30 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 21:55:30 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-18 21:55:30 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 21:55:30 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 21:55:30 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 21:55:30 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-18 21:55:30 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-18 21:55:30 EventLog 6006 None The Event log service was stopped. Information 2018-01-18 21:55:27 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-18 21:55:27 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Error 2018-01-18 21:55:15 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-18 21:55:15 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-18 21:55:14 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-18 21:48:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-18 21:44:14 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy12) is healthy. No action is needed. Information 2018-01-18 21:33:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Warning 2018-01-18 21:32:40 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name www.google.se timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:40 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name forum.team-mediaportal.com timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:38 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:38 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name watson.telemetry.microsoft.com timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:37 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name v10.vortex-win.data.microsoft.com timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:36 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name 3.tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:32:01 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Error 2018-01-18 21:31:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 21:31:42 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-18 21:31:41 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Warning 2018-01-18 21:31:28 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:31:22 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name forum.team-mediaportal.com timed out after none of the configured DNS servers responded. Warning 2018-01-18 21:31:14 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name apis.google.com timed out after none of the configured DNS servers responded. Information 2018-01-18 21:29:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-18 21:29:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:29:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:29:13 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-18 21:29:08 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-18 21:29:07 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-18 21:29:04 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 21:29:03 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-18 21:29:03 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-18 21:29:02 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:29:02 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:29:02 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:29:02 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:29:02 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:29:02 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-18 21:29:02 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-18 21:29:02 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-18 21:28:59 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-18 21:28:59 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-18 21:28:56 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-18 21:28:56 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 21:28:56 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 21:28:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 21:28:55 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-18 21:28:55 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 21:28:55 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 21:28:55 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-18 21:28:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 21:28:55 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-18 21:28:54 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-18 21:28:54 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:28:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:28:54 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:28:54 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:28:54 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-18 21:28:53 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:28:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-18 21:28:52 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎18T20:28:52.488016300Z. Information 2018-01-18 21:28:40 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎18T20:28:40.102304300Z. Information 2018-01-18 21:28:37 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-18 21:28:33 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-18 21:28:33 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 21:28:33 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-18 21:29:01 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-18 21:29:01 EventLog 6005 None The Event log service was started. Information 2018-01-18 21:29:01 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-18 21:28:33 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 21:28:33 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 21:28:33 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 21:28:32 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-18 21:28:32 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-18 21:28:33 EventLog 6006 None The Event log service was stopped. Information 2018-01-18 21:28:28 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-18 21:28:21 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Error 2018-01-18 21:27:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 21:27:28 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-18 21:27:27 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-18 21:25:25 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2018-01-18 21:25:23 Service Control Manager 7040 None The start type of the cphs service was changed from auto start to demand start. Error 2018-01-18 21:25:15 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-18 21:25:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:25:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:25:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 21:25:00 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-18 21:24:58 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-18 21:24:55 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 21:24:54 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-18 21:24:54 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-18 21:24:54 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-18 21:24:53 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:53 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:52 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:52 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:52 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:50 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-18 21:24:50 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-18 21:24:47 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-18 21:24:47 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 21:24:47 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 21:24:53 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-18 21:24:46 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 21:24:46 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-18 21:24:46 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 21:24:46 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 21:24:46 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-18 21:24:46 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 21:24:46 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-18 21:24:45 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-18 21:24:45 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:45 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:45 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:45 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:45 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-18 21:24:44 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:44 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-18 21:24:43 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎18T20:24:43.488061800Z. Information 2018-01-18 21:24:29 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎18T20:24:29.929682900Z. Information 2018-01-18 21:24:27 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-18 21:24:24 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-18 21:24:52 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-18 21:24:52 EventLog 6005 None The Event log service was started. Information 2018-01-18 21:24:52 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-18 21:24:23 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 21:24:23 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-18 21:24:23 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 21:24:23 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 21:24:23 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 21:24:23 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-18 21:24:23 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-18 21:24:23 EventLog 6006 None The Event log service was stopped. Information 2018-01-18 21:24:19 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-18 21:24:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-18 21:22:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2018-01-18 21:19:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\DolbyLaboratories.DolbyAccess_rz1tebttyb220\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2018-01-18 21:18:36 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9N0866FS04W8-DolbyLaboratories.DolbyAccess Information 2018-01-18 21:18:36 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9N0866FS04W8-DolbyLaboratories.DolbyAccess Information 2018-01-18 21:18:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\DolbyLaboratories.DolbyAccess_2.0.462.0_x64__rz1tebttyb220\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-18 21:18:20 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-18 18:34:06 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-18 18:17:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-18 17:59:58 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-18 17:42:54 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-18 17:25:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-18 16:37:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-18 16:29:56 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: Intel Corporation driver update for Intel(R) HD Graphics Information 2018-01-18 16:29:56 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_66e0a5048e30f9c5\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Warning 2018-01-18 16:29:55 Microsoft-Windows-Kernel-PnP 225 (223) The application \Device\HarddiskVolume2\Windows\System32\audiodg.exe with process id 8596 stopped the removal or ejection for the device HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168aeb&0&0201. Information 2018-01-18 16:29:54 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2018-01-18 16:29:43 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver igdlh64.inf_amd64_a89617337ce7436c\igdlh64.inf for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0x0. Information 2018-01-18 16:29:10 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxCUIService2.0.0.0 for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-18 16:29:10 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service cphs for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-18 16:29:10 Service Control Manager 7040 None The start type of the Intel(R) Content Protection HECI Service service was changed from demand start to auto start. Information 2018-01-18 16:29:10 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxLP for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-18 16:26:40 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: Intel Corporation driver update for Intel(R) HD Graphics Information 2018-01-18 16:26:35 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy11) is healthy. No action is needed. Information 2018-01-18 16:24:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-18 16:22:58 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-18 16:22:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 16:22:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 16:22:24 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 16:22:22 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎18T11:19:15.590955800Z Wake Time: ‎2018‎-‎01‎-‎18T15:22:20.962196000Z Wake Source: Unknown" Warning 2018-01-18 16:22:21 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 16:22:21 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 16:22:20 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 16:22:20 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 16:22:20 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-18 16:22:20 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 16:22:20 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 16:22:19 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎18T15:22:19.500000000Z from ‎2018‎-‎01‎-‎18T11:19:17.756842300Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-18 12:19:17 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-18 12:19:16 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-18 12:19:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-18 12:19:11 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-18 12:19:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-18 12:00:00 EventLog 6013 None The system uptime is 2184 seconds. Information 2018-01-18 11:28:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-18 11:27:29 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Error 2018-01-18 11:26:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 11:26:11 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-18 11:26:09 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-18 11:24:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 11:24:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 11:24:09 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2018-01-18 11:23:57 Service Control Manager 7040 None The start type of the cphs service was changed from auto start to demand start. Error 2018-01-18 11:23:53 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-18 11:23:52 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-18 11:23:50 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-18 11:23:48 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 11:23:45 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-18 11:23:45 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-18 11:23:45 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-18 11:23:45 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:45 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:45 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:45 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:45 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:43 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-18 11:23:42 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-18 11:23:39 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-18 11:23:39 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 11:23:39 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 11:23:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 11:23:38 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 11:23:38 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-18 11:23:38 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-18 11:23:38 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-18 11:23:38 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-18 11:23:38 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-18 11:23:38 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-18 11:23:38 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:37 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:37 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:37 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:37 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-18 11:23:36 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:36 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-18 11:23:35 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎18T10:23:35.488157800Z. Information 2018-01-18 11:23:23 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎18T10:23:23.037620800Z. Information 2018-01-18 11:23:19 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-18 11:23:16 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-18 11:23:45 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-18 11:23:45 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-18 11:23:45 EventLog 6005 None The Event log service was started. Information 2018-01-18 11:23:45 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-18 11:23:15 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 11:23:15 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 11:23:15 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-18 11:23:15 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-18 11:23:14 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-18 11:23:14 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-18 11:23:14 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-18 11:23:15 EventLog 6006 None The Event log service was stopped. Information 2018-01-18 11:23:11 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-18 11:23:09 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-18 11:23:08 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-18 11:22:48 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_f76199cadbc2cd99\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Information 2018-01-18 11:22:46 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2018-01-18 11:22:39 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver igdlh64.inf_amd64_cae9d8ead495b5a6\igdlh64.inf for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0x0. Information 2018-01-18 11:22:19 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxCUIService2.0.0.0 for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-18 11:22:19 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service cphs for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-18 11:22:19 Service Control Manager 7040 None The start type of the Intel(R) Content Protection HECI Service service was changed from demand start to auto start. Information 2018-01-18 11:22:19 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxLP for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2018-01-18 11:21:01 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_f76199cadbc2cd99\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Information 2018-01-18 11:21:00 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2018-01-18 10:02:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-18 10:01:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2018-01-18 10:01:32 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-Microsoft.SkypeApp Information 2018-01-18 10:01:27 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-Microsoft.SkypeApp Information 2018-01-18 10:01:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-18 10:00:56 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-18 10:00:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-18 09:58:01 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-18 09:57:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-18 09:57:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-18 09:57:32 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-18 09:57:31 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎17T21:44:00.379089700Z Wake Time: ‎2018‎-‎01‎-‎18T08:57:29.387222500Z Wake Source: Unknown" Warning 2018-01-18 09:57:29 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-18 09:57:29 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-18 09:57:29 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-18 09:57:29 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-18 09:57:29 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-18 09:57:29 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-18 09:57:29 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-18 09:57:27 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎18T08:57:27.500000000Z from ‎2018‎-‎01‎-‎17T21:44:03.093480500Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-17 22:44:03 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-17 22:44:01 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-17 22:43:59 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-17 22:43:57 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-17 22:43:57 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-17 22:43:55 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-17 22:43:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-17 16:06:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Warning 2018-01-17 15:09:56 Display 4101 None Display driver igfxLP stopped responding and has successfully recovered. Information 2018-01-17 14:50:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-17 14:48:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-17 14:48:13 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-17 14:48:12 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-17 14:46:11 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-17 14:46:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 14:46:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 14:45:50 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-17 14:45:46 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-17 14:45:46 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-17 14:45:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-17 14:45:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:41 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:41 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:41 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:41 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-17 14:45:41 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:41 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-17 14:45:41 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-17 14:45:41 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-17 14:45:38 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-17 14:45:38 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-17 14:45:36 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-17 14:45:35 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-17 14:45:35 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-17 14:45:34 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-17 14:45:34 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-17 14:45:34 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-17 14:45:34 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-17 14:45:34 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-17 14:45:34 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-17 14:45:34 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-17 14:45:33 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-17 14:45:33 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:33 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:33 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-17 14:45:32 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:32 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-17 14:45:31 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎17T13:45:31.488035500Z. Information 2018-01-17 14:45:18 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎17T13:45:18.686464000Z. Information 2018-01-17 14:45:17 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-17 14:45:13 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-17 14:45:40 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-17 14:45:40 EventLog 6005 None The Event log service was started. Information 2018-01-17 14:45:40 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-17 14:45:13 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-17 14:45:13 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-17 14:45:13 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-17 14:45:13 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-17 14:45:13 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-17 14:45:12 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-17 14:45:12 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-17 14:45:13 EventLog 6006 None The Event log service was stopped. Information 2018-01-17 14:45:09 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-17 14:44:57 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-17 14:43:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-17 14:42:13 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-17 14:25:09 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-17 14:08:05 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-17 13:56:44 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Error 2018-01-17 13:54:34 Microsoft-Windows-DistributedCOM 10010 None The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout. Error 2018-01-17 13:52:34 Microsoft-Windows-DistributedCOM 10010 None The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout. Information 2018-01-17 13:51:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-17 13:51:09 Microsoft-Windows-Kernel-General 15 None Hive \??\C:\Windows\System32\config\COMPONENTS was reorganized with a starting size of 63516672 bytes and an ending size of 45858816 bytes. Information 2018-01-17 13:50:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-17 13:50:32 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2018-01-17 13:50:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-17 13:46:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-17 13:44:44 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-17 13:44:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-17 13:42:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-17 13:42:13 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-17 13:42:12 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-17 13:40:10 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-17 13:40:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 13:40:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 13:39:53 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-17 13:39:48 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-17 13:39:48 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-17 13:39:47 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-17 13:39:43 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-17 13:39:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:43 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:43 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:43 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:43 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-17 13:39:43 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:42 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-17 13:39:42 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-17 13:39:39 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-17 13:39:39 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-17 13:39:36 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-17 13:39:36 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-17 13:39:36 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-17 13:39:35 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-17 13:39:35 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-17 13:39:35 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-17 13:39:35 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-17 13:39:35 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-17 13:39:35 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-17 13:39:35 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-17 13:39:34 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-17 13:39:34 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:34 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:34 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:34 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:34 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-17 13:39:33 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:33 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-17 13:39:32 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎17T12:39:32.487389100Z. Information 2018-01-17 13:39:19 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎17T12:39:19.245662900Z. Information 2018-01-17 13:39:17 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-17 13:39:13 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-17 13:39:42 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-17 13:39:42 EventLog 6005 None The Event log service was started. Information 2018-01-17 13:39:42 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-17 13:39:13 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-17 13:39:13 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-17 13:39:12 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-17 13:39:12 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-17 13:39:12 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-17 13:39:12 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-17 13:39:12 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-17 13:39:13 EventLog 6006 None The Event log service was stopped. Information 2018-01-17 13:39:09 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-17 13:39:08 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-17 13:39:07 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-17 13:39:05 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-17 13:23:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGGZLXN1-Microsoft.MicrosoftPowerBIForWindows Information 2018-01-17 13:23:42 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGGZLXN1-Microsoft.MicrosoftPowerBIForWindows Information 2018-01-17 13:23:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftPowerBIForWindows_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-17 13:23:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftPowerBIForWindows_3218.30115.1435.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-17 13:23:32 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 2018-01-17 13:23:27 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 2018-01-17 13:23:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-17 13:23:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11712.1801.10002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-17 13:23:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-17 13:22:59 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-17 13:21:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-17 13:20:08 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-17 13:19:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 13:19:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-17 13:19:35 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-17 13:19:33 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎17T00:25:02.999615300Z Wake Time: ‎2018‎-‎01‎-‎17T12:19:31.141659500Z Wake Source: Unknown" Warning 2018-01-17 13:19:31 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-17 13:19:31 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-17 13:19:31 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-17 13:19:31 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-17 13:19:31 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-17 13:19:31 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-17 13:19:31 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-17 13:19:29 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎17T12:19:29.500000000Z from ‎2018‎-‎01‎-‎17T00:25:05.819555800Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-17 01:25:05 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-17 13:19:30 EventLog 6013 None The system uptime is 46874 seconds. Information 2018-01-17 01:25:03 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-17 01:25:02 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-17 01:24:57 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-17 01:24:57 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-17 01:24:55 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-17 00:42:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-17 00:36:55 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 2018-01-17 00:23:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-17 00:21:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-17 00:21:16 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-17 00:21:15 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-17 00:19:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 2018-01-17 00:19:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 2018-01-17 00:19:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 36 keys and creating 8 modified pages. Information 2018-01-17 00:19:10 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-17 00:18:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 00:18:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-17 00:18:38 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-17 00:18:36 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-17 00:18:35 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\AppCompat\Programs\Amcache.hve was cleared updating 1800 keys and creating 673 modified pages. Information 2018-01-17 00:18:34 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-17 00:18:32 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-17 00:18:30 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-17 00:18:30 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-17 00:18:30 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-17 00:18:29 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:29 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:29 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:29 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:29 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 132 keys and creating 22 modified pages. Information 2018-01-17 00:18:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 212 keys and creating 51 modified pages. Information 2018-01-17 00:18:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 105 keys and creating 17 modified pages. Information 2018-01-17 00:18:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 72 keys and creating 7 modified pages. Information 2018-01-17 00:18:27 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-17 00:18:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 79 keys and creating 5 modified pages. Information 2018-01-17 00:18:26 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-17 00:18:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 463 keys and creating 54 modified pages. Information 2018-01-17 00:18:24 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 76746752 bytes and an ending size of 76697600 bytes. Information 2018-01-17 00:18:20 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-17 00:18:19 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-17 00:18:19 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-17 00:18:19 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-17 00:18:19 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-17 00:18:19 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-17 00:18:19 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-17 00:18:19 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-17 00:18:19 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-17 00:18:19 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-17 00:18:18 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-17 00:18:18 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:18 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:18 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:18 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:17 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-17 00:18:17 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:17 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-17 00:18:29 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-17 00:18:29 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-17 00:18:16 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎16T23:18:15.487987500Z. Information 2018-01-17 00:18:03 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎16T23:18:03.513035800Z. Information 2018-01-17 00:18:02 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-17 00:17:58 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-17 00:18:28 EventLog 6013 None The system uptime is 13 seconds. Information 2018-01-17 00:18:28 EventLog 6005 None The Event log service was started. Information 2018-01-17 00:18:28 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-17 00:17:58 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-17 00:17:58 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-17 00:17:58 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-17 00:17:58 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-17 00:17:58 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-17 00:17:57 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-17 00:17:57 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-17 00:17:58 EventLog 6006 None The Event log service was stopped. Information 2018-01-17 00:17:54 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-17 00:17:53 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Information 2018-01-17 00:17:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-16 23:46:34 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-16 23:44:36 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-16 23:44:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 23:44:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 23:44:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 23:44:06 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎16T20:43:38.473436600Z Wake Time: ‎2018‎-‎01‎-‎16T22:44:04.822327500Z Wake Source: Unknown" Warning 2018-01-16 23:44:05 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 23:44:05 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 23:44:04 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 23:44:04 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 23:44:04 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-16 23:44:04 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 23:44:04 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 23:44:03 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎16T22:44:03.500000000Z from ‎2018‎-‎01‎-‎16T20:43:42.163933000Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-16 21:43:42 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-16 21:43:40 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-16 21:43:37 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-16 21:43:33 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-16 21:43:30 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-16 14:33:33 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-16 14:31:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 14:31:40 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-16 14:31:39 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-16 14:29:28 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-16 14:29:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 14:29:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 14:29:00 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-16 14:28:56 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-16 14:28:56 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-16 14:28:53 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 14:28:51 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-16 14:28:51 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-16 14:28:51 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-16 14:28:50 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:50 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:50 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:50 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:50 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:48 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-16 14:28:48 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-16 14:28:45 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-16 14:28:45 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 14:28:45 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 14:28:51 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-16 14:28:44 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-16 14:28:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 14:28:44 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 14:28:44 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-16 14:28:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 14:28:44 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 14:28:44 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-16 14:28:44 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-16 14:28:43 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:43 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:43 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-16 14:28:42 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:42 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-16 14:28:41 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎16T13:28:41.487240600Z. Information 2018-01-16 14:28:28 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎16T13:28:28.096704800Z. Information 2018-01-16 14:28:26 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-16 14:28:23 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-16 14:28:50 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-16 14:28:50 EventLog 6005 None The Event log service was started. Information 2018-01-16 14:28:50 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-16 14:28:22 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 14:28:22 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-16 14:28:22 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 14:28:22 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 14:28:22 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 14:28:22 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-16 14:28:22 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-16 14:28:22 EventLog 6006 None The Event log service was stopped. Information 2018-01-16 14:28:18 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-16 14:28:16 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-16 14:28:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-16 13:44:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-16 12:42:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-16 12:40:38 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2018-01-16 12:40:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 12:40:35 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-16 12:38:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat was cleared updating 35 keys and creating 8 modified pages. Information 2018-01-16 12:38:31 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2018-01-16 12:38:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Error 2018-01-16 12:38:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 12:38:09 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 12:38:07 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-16 12:38:03 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-16 12:38:02 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-16 12:38:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 3452 keys and creating 662 modified pages. Information 2018-01-16 12:38:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\ntuser.dat was cleared updating 1906 keys and creating 288 modified pages. Information 2018-01-16 12:38:00 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 12:37:58 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-16 12:37:58 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-16 12:37:58 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-16 12:37:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:57 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:57 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:57 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:57 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:55 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-16 12:37:55 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-16 12:37:53 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 12:37:53 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 12:37:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 108 keys and creating 5 modified pages. Information 2018-01-16 12:37:52 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-16 12:37:52 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-16 12:37:51 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 12:37:51 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-16 12:37:51 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 12:37:51 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 12:37:51 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-16 12:37:51 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 12:37:58 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-16 12:37:51 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-16 12:37:50 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:50 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:50 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:50 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:50 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-16 12:37:49 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:49 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-16 12:37:48 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎16T11:37:48.488172500Z. Information 2018-01-16 12:37:35 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎16T11:37:35.969016200Z. Information 2018-01-16 12:37:33 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-16 12:37:30 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-16 12:37:57 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-16 12:37:57 EventLog 6005 None The Event log service was started. Information 2018-01-16 12:37:57 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-16 12:37:29 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 12:37:29 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-16 12:37:29 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 12:37:29 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 12:37:29 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 12:37:29 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-16 12:37:29 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-16 12:37:29 EventLog 6006 None The Event log service was stopped. Information 2018-01-16 12:37:25 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-16 12:37:14 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-16 12:37:14 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-16 12:00:00 EventLog 6013 None The system uptime is 40981 seconds. Information 2018-01-16 11:00:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 3 modified pages. Information 2018-01-16 10:36:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-16 10:19:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-16 10:02:37 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-16 09:57:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-16 09:45:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-16 09:28:13 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-16 09:28:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-16 09:20:21 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 6074368 bytes and an ending size of 6074368 bytes. Information 2018-01-16 09:17:33 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-16 09:17:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 09:17:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 09:17:02 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 09:17:01 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎16T00:39:28.156595300Z Wake Time: ‎2018‎-‎01‎-‎16T08:16:59.873638600Z Wake Source: Unknown" Warning 2018-01-16 09:17:00 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 09:17:00 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 09:16:59 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 09:16:59 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 09:16:59 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-16 09:16:59 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 09:16:59 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 09:16:58 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎16T08:16:58.500000000Z from ‎2018‎-‎01‎-‎16T00:39:30.139357000Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-16 01:39:30 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-16 01:39:28 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-16 01:39:27 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-16 01:39:19 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-16 00:41:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-16 00:39:55 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2018-01-16 00:39:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 00:39:51 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-16 00:37:48 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-16 00:37:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 00:37:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 00:37:18 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-16 00:37:13 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-16 00:37:12 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-16 00:37:10 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 00:37:08 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:08 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:08 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:08 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:07 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:07 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-16 00:37:07 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-16 00:37:07 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-16 00:37:05 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-16 00:37:05 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-16 00:37:03 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 00:37:03 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 00:37:02 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-16 00:37:02 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-16 00:37:01 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 00:37:01 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 00:37:01 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-16 00:37:01 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-16 00:37:01 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 00:37:01 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 00:37:01 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-16 00:37:00 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:00 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:00 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:00 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:37:00 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-16 00:37:08 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-16 00:36:59 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:36:59 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-16 00:36:58 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎15T23:36:58.487153600Z. Information 2018-01-16 00:36:45 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎15T23:36:45.363961800Z. Information 2018-01-16 00:36:43 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-16 00:36:39 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-16 00:37:07 EventLog 6013 None The system uptime is 8 seconds. Information 2018-01-16 00:37:07 EventLog 6005 None The Event log service was started. Information 2018-01-16 00:37:07 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-16 00:36:39 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 00:36:39 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-16 00:36:39 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 00:36:39 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 00:36:39 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 00:36:38 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-16 00:36:38 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-16 00:36:39 EventLog 6006 None The Event log service was stopped. Information 2018-01-16 00:36:34 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-16 00:36:32 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-16 00:36:31 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-16 00:36:30 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-16 00:33:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-16 00:33:52 Virtual Disk Service 4 None Service stopped. Information 2018-01-16 00:30:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-16 00:28:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 00:28:45 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-16 00:28:44 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-16 00:28:06 Virtual Disk Service 3 None Service started. Information 2018-01-16 00:26:43 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-16 00:26:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 00:26:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 00:26:09 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-16 00:26:05 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-16 00:26:04 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-16 00:26:02 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 00:26:00 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-16 00:25:59 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-16 00:25:59 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-16 00:25:59 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-16 00:25:58 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:58 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:58 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:58 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:58 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:57 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-16 00:25:56 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-16 00:25:53 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-16 00:25:53 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-16 00:25:53 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 00:25:53 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 00:25:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 00:25:52 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 00:25:52 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 00:25:52 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-16 00:25:52 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 00:25:52 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-16 00:25:52 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-16 00:25:52 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-16 00:25:51 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:51 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:51 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:51 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:51 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-16 00:25:50 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:50 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-16 00:25:49 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎15T23:25:49.486824600Z. Information 2018-01-16 00:25:36 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎15T23:25:36.005472400Z. Information 2018-01-16 00:25:34 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-16 00:25:30 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-16 00:25:59 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-16 00:25:59 EventLog 6005 None The Event log service was started. Information 2018-01-16 00:25:59 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-16 00:25:30 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 00:25:30 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 00:25:30 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 00:25:30 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 00:25:30 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-16 00:25:29 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-16 00:25:29 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-16 00:25:30 EventLog 6006 None The Event log service was stopped. Information 2018-01-16 00:25:25 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-16 00:25:23 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-16 00:25:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-16 00:21:04 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-16 00:20:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-16 00:19:23 Virtual Disk Service 3 None Service started. Error 2018-01-16 00:18:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-16 00:18:27 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-16 00:18:26 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-16 00:16:18 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-16 00:16:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 00:16:02 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-16 00:15:51 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-16 00:15:47 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-16 00:15:46 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-16 00:15:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-16 00:15:41 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-16 00:15:41 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-16 00:15:41 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-16 00:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:41 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-16 00:15:41 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:39 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-16 00:15:38 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-16 00:15:35 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-16 00:15:35 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-16 00:15:35 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-16 00:15:35 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-16 00:15:34 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 00:15:34 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 00:15:34 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-16 00:15:34 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-16 00:15:34 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-16 00:15:34 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-16 00:15:34 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-16 00:15:34 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-16 00:15:33 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:33 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:33 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-16 00:15:32 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:32 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-16 00:15:31 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎15T23:15:31.487997100Z. Information 2018-01-16 00:15:18 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎15T23:15:18.403074600Z. Information 2018-01-16 00:15:16 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-16 00:15:13 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-16 00:15:40 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-16 00:15:40 EventLog 6005 None The Event log service was started. Information 2018-01-16 00:15:40 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-16 00:15:12 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 00:15:12 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-16 00:15:12 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 00:15:12 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-16 00:15:12 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-16 00:15:12 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-16 00:15:12 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-16 00:15:12 EventLog 6006 None The Event log service was stopped. Information 2018-01-16 00:15:08 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-16 00:15:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-16 00:15:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-16 00:15:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-15 23:50:23 Virtual Disk Service 3 None Service started. Information 2018-01-15 23:47:56 Service Control Manager 7045 None "A service was installed in the system. Service Name: epmntdrv Service File Name: \SystemRoot\system32\epmntdrv.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2018-01-15 23:47:56 Service Control Manager 7045 None "A service was installed in the system. Service Name: EuGdiDrv Service File Name: \SystemRoot\system32\EuGdiDrv.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2018-01-15 23:43:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-15 23:41:22 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-15 23:40:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-15 23:40:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-15 23:40:51 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-15 23:40:50 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎15T21:41:00.374019100Z Wake Time: ‎2018‎-‎01‎-‎15T22:40:48.653212600Z Wake Source: Unknown" Warning 2018-01-15 23:40:49 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-15 23:40:48 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-15 23:40:48 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-15 23:40:48 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-15 23:40:48 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-15 23:40:48 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-15 23:40:48 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-15 23:40:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎15T22:40:46.500000000Z from ‎2018‎-‎01‎-‎15T21:41:04.077160800Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-15 22:41:04 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-15 22:41:01 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-15 22:40:59 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-15 22:40:49 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-15 22:40:49 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-15 22:40:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-15 19:04:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 374 keys and creating 34 modified pages. Information 2018-01-15 16:37:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-15 16:35:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-15 16:09:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 2 modified pages. Information 2018-01-15 15:48:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 55 keys and creating 9 modified pages. Information 2018-01-15 14:09:28 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-15 14:07:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-15 12:00:00 EventLog 6013 None The system uptime is 71453 seconds. Information 2018-01-15 11:06:08 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRDJMH1-46928bounde.EclipseManager Information 2018-01-15 11:06:08 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRDJMH1-46928bounde.EclipseManager Information 2018-01-15 11:06:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\46928bounde.EclipseManager_a5h4egax66k6y\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2018-01-15 11:06:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\46928bounde.EclipseManager_3.1.8.0_x64__a5h4egax66k6y\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-15 11:05:46 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-15 11:03:59 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-15 11:02:45 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-15 11:02:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-15 11:02:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-15 11:02:09 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-15 11:02:09 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎14T21:08:14.073903800Z Wake Time: ‎2018‎-‎01‎-‎15T10:02:07.355153200Z Wake Source: Unknown" Warning 2018-01-15 11:02:07 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-15 11:02:07 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-15 11:02:07 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-15 11:02:07 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-15 11:02:07 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-15 11:02:07 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-15 11:02:07 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-15 11:02:05 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎15T10:02:05.500000000Z from ‎2018‎-‎01‎-‎14T21:08:19.058435000Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-14 22:08:19 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-14 22:08:16 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-14 22:08:13 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-14 22:08:10 Application Popup 26 None "Application popup: SWT_Window_Vuze: Azureus.exe - Application Error : The instruction at 0x00007FF8D5E128A4 referenced memory at 0xFFFFFFFFFFFFFFFF. The memory could not be read. Click on OK to terminate the program" Error 2018-01-14 22:08:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-14 22:08:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-14 22:08:04 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-14 22:08:00 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-14 17:51:35 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-14 17:01:20 Service Control Manager 7040 None The start type of the Device Association Service service was changed from demand start to auto start. Information 2018-01-14 16:14:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-14 16:12:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-14 16:12:01 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-14 16:12:00 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-14 16:09:58 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-14 16:09:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 16:09:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 16:09:26 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-14 16:09:22 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-14 16:09:22 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-14 16:09:20 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-14 16:09:17 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-14 16:09:17 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-14 16:09:17 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-14 16:09:17 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:17 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:17 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:17 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:17 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:15 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-14 16:09:14 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-14 16:09:11 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-14 16:09:11 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-14 16:09:11 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-14 16:09:11 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-14 16:09:10 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-14 16:09:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 16:09:10 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 16:09:10 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 16:09:10 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-14 16:09:10 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 16:09:10 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-14 16:09:09 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-14 16:09:09 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:09 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:09 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:09 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:17 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-14 16:09:09 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-14 16:09:08 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-14 16:09:07 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎14T15:09:07.488206400Z. Information 2018-01-14 16:08:54 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎14T15:08:54.229968700Z. Information 2018-01-14 16:08:53 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-14 16:08:49 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-14 16:08:49 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 16:08:49 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 16:08:49 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 16:08:49 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 16:09:16 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-14 16:09:16 EventLog 6005 None The Event log service was started. Information 2018-01-14 16:09:16 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-14 16:08:48 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-14 16:08:48 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-14 16:08:48 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-14 16:08:49 EventLog 6006 None The Event log service was stopped. Information 2018-01-14 16:08:44 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-14 16:08:37 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-14 16:08:37 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-14 16:08:36 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Error 2018-01-14 16:08:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-14 16:08:09 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-14 16:08:08 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-14 16:06:00 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-14 16:05:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 16:05:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 16:05:36 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-14 16:05:29 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-14 16:05:28 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-14 16:05:25 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-14 16:05:23 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-14 16:05:23 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-14 16:05:23 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-14 16:05:24 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-14 16:05:23 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:23 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:23 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:22 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:21 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-14 16:05:20 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-14 16:05:17 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-14 16:05:17 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-14 16:05:17 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-14 16:05:17 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-14 16:05:16 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 16:05:16 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 16:05:16 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-14 16:05:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 16:05:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 16:05:16 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-14 16:05:16 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-14 16:05:15 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-14 16:05:15 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:15 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:15 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:15 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:15 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-14 16:05:14 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:14 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-14 16:05:13 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎14T15:05:13.488042500Z. Information 2018-01-14 16:04:59 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎14T15:04:59.500977200Z. Information 2018-01-14 16:04:57 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-14 16:04:53 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-14 16:04:53 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 16:04:53 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-14 16:04:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 16:04:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 16:04:53 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 16:05:22 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-14 16:05:22 EventLog 6005 None The Event log service was started. Information 2018-01-14 16:05:22 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-14 16:04:52 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-14 16:04:52 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-14 16:04:53 EventLog 6006 None The Event log service was stopped. Information 2018-01-14 16:04:49 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-14 16:04:48 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-14 16:04:48 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-14 16:04:47 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-14 16:04:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-14 15:42:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-14 15:40:06 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2018-01-14 15:40:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-14 15:40:04 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-14 15:37:59 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-14 15:37:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 15:37:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 15:37:24 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-14 15:37:21 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-14 15:37:20 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-14 15:37:17 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-14 15:37:16 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-14 15:37:16 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-14 15:37:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-14 15:37:15 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:15 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:15 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:15 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:15 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:13 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-14 15:37:12 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-14 15:37:09 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-14 15:37:09 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-14 15:37:09 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-14 15:37:09 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-14 15:37:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 15:37:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 15:37:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 15:37:08 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-14 15:37:08 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-14 15:37:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 15:37:08 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-14 15:37:07 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-14 15:37:07 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:07 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-14 15:37:15 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-14 15:37:06 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:06 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-14 15:37:05 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎14T14:37:05.488161600Z. Information 2018-01-14 15:36:52 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎14T14:36:52.577729100Z. Information 2018-01-14 15:36:50 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-14 15:36:46 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-14 15:37:15 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-14 15:37:15 EventLog 6005 None The Event log service was started. Information 2018-01-14 15:37:15 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-14 15:36:46 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 15:36:46 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-14 15:36:46 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 15:36:46 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 15:36:46 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 15:36:45 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-14 15:36:45 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-14 15:36:46 EventLog 6006 None The Event log service was stopped. Information 2018-01-14 15:36:42 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-14 15:36:40 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-14 15:36:40 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-14 15:36:39 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-14 15:36:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-14 15:11:42 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-14 15:10:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-14 15:11:00 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-14 15:10:58 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-14 15:09:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2018-01-14 15:09:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 15:09:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-14 15:08:57 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-14 15:08:47 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-14 15:08:42 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-14 15:08:42 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-14 15:08:39 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-14 15:08:38 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-14 15:08:37 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-14 15:08:37 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-14 15:08:37 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-14 15:08:37 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:37 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:37 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:37 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:37 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:35 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-14 15:08:34 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-14 15:08:31 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-14 15:08:31 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-14 15:08:31 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-14 15:08:31 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-14 15:08:30 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 15:08:30 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 15:08:30 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-14 15:08:30 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-14 15:08:30 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-14 15:08:30 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-14 15:08:30 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-14 15:08:29 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-14 15:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:29 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:29 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-14 15:08:28 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:28 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-14 15:08:27 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎14T14:08:27.487392300Z. Information 2018-01-14 15:08:14 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎14T14:08:14.388120700Z. Information 2018-01-14 15:08:11 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-14 15:08:07 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-14 15:08:07 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 15:08:07 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-14 15:08:36 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-14 15:08:36 EventLog 6005 None The Event log service was started. Information 2018-01-14 15:08:36 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-14 15:08:07 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 15:08:07 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-14 15:08:07 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-14 15:08:06 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-14 15:08:06 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-14 15:08:07 EventLog 6006 None The Event log service was stopped. Information 2018-01-14 15:08:03 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-14 15:08:00 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-14 15:08:00 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-14 15:07:59 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-14 14:54:18 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy10) is healthy. No action is needed. Information 2018-01-14 14:51:07 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-14 14:50:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-14 12:00:00 EventLog 6013 None The system uptime is 125506 seconds. Information 2018-01-14 09:28:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-14 09:26:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-14 09:25:07 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-14 09:23:53 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-14 09:23:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-14 09:23:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-14 09:23:16 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-14 09:23:16 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎13T16:38:33.065792100Z Wake Time: ‎2018‎-‎01‎-‎14T08:23:14.133652800Z Wake Source: Unknown" Warning 2018-01-14 09:23:14 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-14 09:23:14 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-14 09:23:14 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-14 09:23:14 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-14 09:23:14 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-14 09:23:14 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-14 09:23:14 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-14 09:23:12 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎14T08:23:12.500000000Z from ‎2018‎-‎01‎-‎13T16:38:37.099488300Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-13 17:38:37 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-13 17:38:35 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-13 17:38:32 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-13 17:38:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-13 16:38:39 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-13 16:36:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-13 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-13 14:57:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-13 12:00:00 EventLog 6013 None The system uptime is 39106 seconds. Information 2018-01-13 07:16:19 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PBPCH085S3S-Microsoft.Print3D Information 2018-01-13 07:16:14 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PBPCH085S3S-Microsoft.Print3D Information 2018-01-13 07:16:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Print3D_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-13 07:16:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Print3D_2.0.3621.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-13 07:15:57 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-13 07:14:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-13 07:12:54 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-13 07:12:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-13 07:12:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-13 07:12:26 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-13 07:12:25 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎13T00:22:04.762197500Z Wake Time: ‎2018‎-‎01‎-‎13T06:12:23.401458000Z Wake Source: Unknown" Warning 2018-01-13 07:12:23 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-13 07:12:23 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-13 07:12:23 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-13 07:12:23 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-13 07:12:23 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-13 07:12:23 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-13 07:12:23 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-13 07:12:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎13T06:12:22.500000000Z from ‎2018‎-‎01‎-‎13T00:22:07.804521300Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-13 01:22:07 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-13 01:22:05 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-13 01:22:04 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-13 01:22:02 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-13 01:22:01 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-13 01:21:59 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-13 01:21:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-13 01:13:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-13 01:10:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-13 01:10:56 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-13 01:10:55 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-13 01:08:53 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-13 01:08:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-13 01:08:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-13 01:08:33 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-13 01:08:30 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-13 01:08:29 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-13 01:08:26 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-13 01:08:24 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-13 01:08:24 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:24 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:24 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:24 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-13 01:08:24 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-13 01:08:24 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:24 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:22 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-13 01:08:21 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-13 01:08:18 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-13 01:08:18 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-13 01:08:18 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-13 01:08:18 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-13 01:08:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-13 01:08:17 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-13 01:08:17 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-13 01:08:17 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-13 01:08:25 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-13 01:08:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-13 01:08:17 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-13 01:08:17 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-13 01:08:17 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-13 01:08:17 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:16 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:16 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:16 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:16 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-13 01:08:15 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:15 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-13 01:08:14 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎13T00:08:14.488045100Z. Information 2018-01-13 01:08:00 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎13T00:08:00.910120600Z. Information 2018-01-13 01:07:59 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-13 01:07:55 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-13 01:08:24 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-13 01:08:24 EventLog 6005 None The Event log service was started. Information 2018-01-13 01:08:24 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-13 01:07:54 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-13 01:07:54 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-13 01:07:54 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-13 01:07:54 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-13 01:07:54 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-13 01:07:54 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-13 01:07:54 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-13 01:07:54 EventLog 6006 None The Event log service was stopped. Information 2018-01-13 01:07:52 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-13 01:07:41 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-13 01:07:41 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-13 01:07:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-12 13:16:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-12 12:00:00 EventLog 6013 None The system uptime is 125380 seconds. Information 2018-01-12 09:16:22 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-12 09:14:25 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-12 09:14:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-12 09:14:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-12 09:13:54 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-12 09:13:53 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎12T00:42:49.533184500Z Wake Time: ‎2018‎-‎01‎-‎12T08:13:51.988194200Z Wake Source: Unknown" Warning 2018-01-12 09:13:52 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-12 09:13:52 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-12 09:13:51 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-12 09:13:51 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-12 09:13:51 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-12 09:13:51 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-12 09:13:51 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2018-01-12 09:13:51 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-12 09:13:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎12T08:13:49.500000000Z from ‎2018‎-‎01‎-‎12T00:42:52.303068200Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-12 01:42:52 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2018-01-12 01:42:51 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-12 01:42:50 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-12 01:42:48 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-12 01:42:37 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Error 2018-01-12 01:42:36 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-12 01:42:36 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-12 00:11:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-11 19:16:30 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-11 19:14:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-11 17:10:48 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\Windows\System32\config\DRIVERS (TM: {CFB31E26-F663-11E7-BC36-4851B7BD102C}, RM: {CFB31E25-F663-11E7-BC36-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-11 17:10:48 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\Windows\System32\config\SYSTEM (TM: {CFB31E24-F663-11E7-BC36-4851B7BD102C}, RM: {CFB31E23-F663-11E7-BC36-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-11 14:32:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-11 14:15:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-11 13:58:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-11 13:41:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-11 13:24:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-11 12:00:00 EventLog 6013 None The system uptime is 38980 seconds. Information 2018-01-11 09:36:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-11 09:24:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-11 09:23:17 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-11 09:22:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-11 09:22:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-11 09:22:47 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-11 09:22:47 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎11T01:23:54.238418500Z Wake Time: ‎2018‎-‎01‎-‎11T08:22:45.025538100Z Wake Source: Unknown" Warning 2018-01-11 09:22:45 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-11 09:22:45 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-11 09:22:45 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-11 09:22:45 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-11 09:22:45 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-11 09:22:45 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-11 09:22:45 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-11 09:22:43 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎11T08:22:43.500000000Z from ‎2018‎-‎01‎-‎11T01:23:56.694483500Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-11 02:23:56 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-11 02:23:54 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-11 02:23:53 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-11 02:23:50 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-11 02:23:50 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-11 02:23:48 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-11 02:23:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2018-01-11 01:12:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-11 01:12:56 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-11 01:12:55 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-11 01:11:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-11 01:11:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-11 01:10:53 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-11 01:10:40 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-11 01:10:37 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-11 01:10:37 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-11 01:10:36 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-11 01:10:31 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-11 01:10:31 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-11 01:10:31 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-11 01:10:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2018‎-‎01‎-‎09T21:21:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:31 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:31 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:31 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:30 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:32 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-11 01:10:28 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-11 01:10:27 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-11 01:10:24 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-11 01:10:24 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-11 01:10:24 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-11 01:10:24 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-11 01:10:23 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-11 01:10:23 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-11 01:10:23 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-11 01:10:23 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-11 01:10:23 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-11 01:10:23 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-11 01:10:23 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-11 01:10:22 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-11 01:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2018‎-‎01‎-‎09T21:21:48.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:22 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-11 01:10:21 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:21 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-11 01:10:20 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎11T00:10:20.487464600Z. Information 2018-01-11 01:10:06 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎11T00:10:06.463896500Z. Information 2018-01-11 01:10:03 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-11 01:10:00 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-11 01:10:31 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-11 01:10:31 EventLog 6005 None The Event log service was started. Information 2018-01-11 01:10:31 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-11 01:09:59 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-11 01:09:59 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-11 01:09:59 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-11 01:09:59 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-11 01:09:59 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-11 01:09:58 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-11 01:09:58 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-11 01:09:59 EventLog 6006 None The Event log service was stopped. Information 2018-01-11 01:09:55 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-11 01:09:52 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-11 01:09:52 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-11 01:09:51 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-11 00:58:14 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy9) is healthy. No action is needed. Information 2018-01-10 23:17:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2018-01-10 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-10 14:57:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-10 13:45:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-10 13:28:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-10 13:11:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-10 12:54:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-10 12:42:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 3 modified pages. Information 2018-01-10 12:37:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-10 12:36:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-10 12:00:00 EventLog 6013 None The system uptime is 46006 seconds. Information 2018-01-10 09:23:41 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - January 2018 (KB890830) Information 2018-01-10 09:21:08 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-10 09:20:36 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - January 2018 (KB890830) Information 2018-01-10 09:20:36 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2018-01 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4056887) Information 2018-01-10 09:20:25 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 2018-01-10 09:20:15 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2018-01 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4056887) Information 2018-01-10 09:20:14 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2018-01-10 09:20:11 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy8) is healthy. No action is needed. Information 2018-01-10 09:18:59 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-10 09:18:38 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-10 09:18:31 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2018-01-10 09:18:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-10 09:18:29 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-10 09:17:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-10 09:17:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-10 09:17:27 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-10 09:17:26 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎09T22:14:58.285782200Z Wake Time: ‎2018‎-‎01‎-‎10T08:17:24.623236500Z Wake Source: Unknown" Warning 2018-01-10 09:17:25 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-10 09:17:25 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-10 09:17:24 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-10 09:17:24 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-10 09:17:24 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-10 09:17:24 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-10 09:17:24 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-10 09:17:23 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎10T08:17:23.500000000Z from ‎2018‎-‎01‎-‎09T22:15:05.133217400Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-09 23:15:05 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-09 23:14:58 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-09 23:14:57 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-09 23:14:52 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-09 23:14:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-09 23:14:09 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-09 23:13:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-09 23:13:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-09 23:13:37 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Information 2018-01-09 23:13:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\AppCompat\Programs\Amcache.hve was cleared updating 1672 keys and creating 630 modified pages. Error 2018-01-09 23:13:34 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-09 23:13:32 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-09 23:13:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-09 23:13:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:28 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:28 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:28 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-09 23:13:28 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:28 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-09 23:13:28 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-09 23:13:28 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 128 keys and creating 22 modified pages. Information 2018-01-09 23:13:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 220 keys and creating 52 modified pages. Information 2018-01-09 23:13:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 103 keys and creating 18 modified pages. Information 2018-01-09 23:13:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 72 keys and creating 7 modified pages. Information 2018-01-09 23:13:25 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-09 23:13:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 79 keys and creating 5 modified pages. Information 2018-01-09 23:13:25 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-09 23:13:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 483 keys and creating 57 modified pages. Information 2018-01-09 23:13:23 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 77561856 bytes and an ending size of 76361728 bytes. Information 2018-01-09 23:13:18 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-09 23:13:18 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-09 23:13:18 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-09 23:13:18 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-09 23:13:17 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-09 23:13:17 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-09 23:13:17 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-09 23:13:17 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-09 23:13:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-09 23:13:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-09 23:13:17 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-09 23:13:17 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-09 23:13:17 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:16 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:16 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:16 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:16 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-09 23:13:28 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-09 23:13:16 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:16 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-09 23:13:15 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎09T22:13:14.487366700Z. Information 2018-01-09 23:13:00 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎09T22:13:00.890155200Z. Information 2018-01-09 23:12:57 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-09 23:12:54 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-09 23:12:53 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-09 23:12:53 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-09 23:13:27 EventLog 6013 None The system uptime is 13 seconds. Information 2018-01-09 23:13:27 EventLog 6005 None The Event log service was started. Information 2018-01-09 23:13:27 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-09 23:12:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-09 23:12:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-09 23:12:53 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-09 23:12:53 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-09 23:12:53 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-09 23:12:53 EventLog 6006 None The Event log service was stopped. Information 2018-01-09 23:12:49 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-09 23:12:49 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Information 2018-01-09 23:12:46 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-09 23:02:12 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy7) is healthy. No action is needed. Information 2018-01-09 18:11:59 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 2018-01-09 16:45:32 Microsoft-Windows-Kernel-General 15 None Hive \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12730368 bytes and an ending size of 11685888 bytes. Information 2018-01-09 16:44:55 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2018-01-09 16:44:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-09 16:39:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-09 16:37:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-09 16:37:18 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-09 16:37:17 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-09 16:35:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 2018-01-09 16:35:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 36 keys and creating 8 modified pages. Information 2018-01-09 16:35:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 2018-01-09 16:35:17 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-09 16:35:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-09 16:35:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-09 16:34:59 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-09 16:34:54 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-09 16:34:54 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-09 16:34:51 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-09 16:34:49 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-09 16:34:49 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-09 16:34:49 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-09 16:34:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:49 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:49 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:49 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:48 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:47 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-09 16:34:46 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-09 16:34:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-09 16:34:44 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-09 16:34:43 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-09 16:34:43 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-09 16:34:42 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-09 16:34:42 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-09 16:34:42 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-09 16:34:42 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-09 16:34:42 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-09 16:34:42 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-09 16:34:42 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-09 16:34:42 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-09 16:34:41 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:41 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:41 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-09 16:34:49 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-09 16:34:49 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-09 16:34:40 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:40 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-09 16:34:39 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎09T15:34:39.487460800Z. Information 2018-01-09 16:34:25 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎09T15:34:25.456124100Z. Information 2018-01-09 16:34:23 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-09 16:34:19 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-09 16:34:48 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-09 16:34:48 EventLog 6005 None The Event log service was started. Information 2018-01-09 16:34:48 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-09 16:34:19 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-09 16:34:19 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-09 16:34:19 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-09 16:34:19 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-09 16:34:19 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-09 16:34:18 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-09 16:34:18 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-09 16:34:19 EventLog 6006 None The Event log service was stopped. Information 2018-01-09 16:34:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-09 16:34:12 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-09 16:34:10 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-09 12:24:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-09 12:00:00 EventLog 6013 None The system uptime is 2952 seconds. Information 2018-01-09 11:20:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-09 11:18:00 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-09 11:14:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-09 11:13:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-09 11:13:45 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-09 11:13:43 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-09 11:12:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-09 11:11:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat was cleared updating 35 keys and creating 8 modified pages. Information 2018-01-09 11:11:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 2018-01-09 11:11:40 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-09 11:11:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-09 11:11:10 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-09 11:11:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-09 11:11:05 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-09 11:11:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 3632 keys and creating 661 modified pages. Information 2018-01-09 11:11:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\ntuser.dat was cleared updating 2086 keys and creating 285 modified pages. Information 2018-01-09 11:11:04 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-09 11:11:03 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-09 11:10:58 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:58 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:58 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:58 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-09 11:10:58 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:58 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:58 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-09 11:10:58 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-09 11:10:56 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-09 11:10:55 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-09 11:10:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 108 keys and creating 5 modified pages. Information 2018-01-09 11:10:51 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-09 11:10:51 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2018-01-09 11:10:51 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-09 11:10:51 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-09 11:10:50 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-09 11:10:50 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-09 11:10:50 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-09 11:10:50 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-09 11:10:50 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-09 11:10:50 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-09 11:10:50 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-09 11:10:50 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-09 11:10:50 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-09 11:10:49 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:49 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:49 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-09 11:10:59 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-09 11:10:59 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-09 11:10:48 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:48 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-09 11:10:58 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-09 11:10:58 EventLog 6005 None The Event log service was started. Information 2018-01-09 11:10:58 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-09 11:10:58 EventLog 6008 None The previous system shutdown at 11:08:06 on ‎2018-‎01-‎09 was unexpected. Information 2018-01-09 11:10:47 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎09T10:10:47.488122600Z. Information 2018-01-09 10:57:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-09 10:40:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\System32\config\components was cleared updating 134948 keys and creating 12248 modified pages. Information 2018-01-09 10:40:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 3 modified pages. Information 2018-01-09 10:40:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-09 08:18:36 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore Information 2018-01-09 08:18:31 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore Information 2018-01-09 08:18:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11712.1001.11.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-09 08:18:24 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9N4WGH0Z6VHQ-Microsoft.HEVCVideoExtension Information 2018-01-09 08:18:20 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9N4WGH0Z6VHQ-Microsoft.HEVCVideoExtension Information 2018-01-09 08:18:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-09 08:18:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.HEVCVideoExtension_1.0.10084.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-09 08:18:04 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-09 08:17:57 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-09 03:03:34 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 6098944 bytes and an ending size of 6074368 bytes. Information 2018-01-09 01:10:30 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-09 00:58:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-08 17:22:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 379 keys and creating 34 modified pages. Information 2018-01-08 15:46:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-08 15:05:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 2 modified pages. Information 2018-01-08 14:48:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 61 keys and creating 10 modified pages. Information 2018-01-08 13:09:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-08 13:07:33 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-08 12:00:00 EventLog 6013 None The system uptime is 5524 seconds. Information 2018-01-08 10:32:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-08 10:30:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-08 10:30:40 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-08 10:30:39 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-08 10:28:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-08 10:28:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-08 10:28:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-08 10:28:15 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-08 10:28:11 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-08 10:28:10 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-08 10:28:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-08 10:28:06 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-08 10:28:06 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-08 10:28:06 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-08 10:28:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:28:05 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:28:05 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:28:05 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:28:05 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:28:06 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-08 10:28:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-08 10:28:03 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-08 10:28:00 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-08 10:28:00 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-08 10:28:00 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-08 10:27:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-08 10:27:59 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-08 10:27:59 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-08 10:27:59 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-08 10:27:59 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-08 10:27:59 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-08 10:27:59 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-08 10:27:58 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-08 10:27:58 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-08 10:27:58 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:27:58 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:27:58 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:27:58 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:27:58 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-08 10:27:57 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:27:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-08 10:27:56 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎08T09:27:56.488083500Z. Information 2018-01-08 10:27:43 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎08T09:27:43.838911400Z. Information 2018-01-08 10:27:41 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-08 10:27:37 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-08 10:28:05 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-08 10:28:05 EventLog 6005 None The Event log service was started. Information 2018-01-08 10:28:05 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-08 10:27:37 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-08 10:27:37 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-08 10:27:37 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-08 10:27:37 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-08 10:27:37 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-08 10:27:36 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-08 10:27:36 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-08 10:27:37 EventLog 6006 None The Event log service was stopped. Information 2018-01-08 10:27:34 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-08 10:27:32 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-08 10:25:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 2018-01-08 10:22:07 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-08 10:22:07 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎08T09:22:07.858000000Z from ‎2018‎-‎01‎-‎08T09:22:07.860423300Z. Change Reason: An application or system component changed the time." Information 2018-01-08 10:22:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-08 10:22:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎08T09:22:00.746000000Z from ‎2018‎-‎01‎-‎08T09:21:48.361034400Z. Change Reason: An application or system component changed the time." Information 2018-01-08 10:15:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-08 10:13:55 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-08 09:58:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-08 09:56:15 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2018-01-08 09:55:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-08 09:55:48 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-08 09:55:46 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-08 09:53:45 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-08 09:53:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-08 09:53:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-08 09:53:20 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-08 09:53:18 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-08 09:53:18 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-08 09:53:15 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-08 09:53:13 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-08 09:53:13 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-08 09:53:13 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-08 09:53:12 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:12 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:12 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:12 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:12 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:10 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-08 09:53:10 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-08 09:53:07 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-08 09:53:07 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-08 09:53:07 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-08 09:53:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-08 09:53:06 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-08 09:53:06 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-08 09:53:06 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-08 09:53:06 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-08 09:53:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-08 09:53:06 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-08 09:53:05 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-08 09:53:05 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-08 09:53:05 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:05 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:05 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-08 09:53:13 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-08 09:53:04 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-08 09:53:03 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎08T08:53:03.487371200Z. Information 2018-01-08 09:52:48 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎08T08:52:48.754201700Z. Information 2018-01-08 09:52:45 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-08 09:52:41 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-08 09:53:12 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-08 09:53:12 EventLog 6005 None The Event log service was started. Information 2018-01-08 09:53:12 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-08 09:52:41 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-08 09:52:41 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-08 09:52:41 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-08 09:52:41 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-08 09:52:41 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-08 09:52:40 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-08 09:52:40 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-08 09:52:41 EventLog 6006 None The Event log service was stopped. Information 2018-01-08 09:52:37 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-08 09:52:34 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-08 09:51:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-08 09:41:39 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy6) is healthy. No action is needed. Information 2018-01-08 09:23:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-08 09:21:19 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-08 09:20:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-08 09:20:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-08 09:20:48 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Warning 2018-01-08 09:20:48 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-08 09:20:48 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎08T00:06:02.607340900Z Wake Time: ‎2018‎-‎01‎-‎08T08:20:46.065591100Z Wake Source: Unknown" Warning 2018-01-08 09:20:46 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-08 09:20:46 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Warning 2018-01-08 09:20:46 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-08 09:20:46 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-08 09:20:46 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-08 09:20:46 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-08 09:20:46 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-08 09:20:46 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2018-01-08 09:20:43 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-08 09:20:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎08T08:20:42.500000000Z from ‎2018‎-‎01‎-‎08T00:06:05.702703800Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-08 01:06:05 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2018-01-08 01:06:05 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-08 01:06:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎08T00:06:03.500000000Z from ‎2018‎-‎01‎-‎08T00:06:04.822723500Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-08 01:06:03 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-08 01:06:01 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-08 01:05:55 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Information 2018-01-08 01:05:51 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-08 01:05:48 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-08 00:25:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-08 00:08:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-07 23:51:16 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-07 23:34:12 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-07 23:16:52 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-07 20:50:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-07 20:48:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-07 12:00:00 EventLog 6013 None The system uptime is 158333 seconds. Information 2018-01-06 16:45:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-06 16:43:55 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-06 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-06 14:57:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-06 12:00:00 EventLog 6013 None The system uptime is 71933 seconds. Information 2018-01-05 18:56:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 16:05:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-05 16:03:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-05 16:03:54 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-05 16:03:53 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-05 16:01:51 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-05 16:01:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-05 16:01:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-05 16:01:27 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-05 16:01:24 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-05 16:01:24 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-05 16:01:21 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-05 16:01:19 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-05 16:01:19 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-05 16:01:19 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-05 16:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:16 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-05 16:01:16 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-05 16:01:13 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-05 16:01:13 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-05 16:01:13 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-05 16:01:19 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-05 16:01:19 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-05 16:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 16:01:12 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 16:01:12 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 16:01:12 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-05 16:01:12 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-05 16:01:12 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 16:01:12 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-05 16:01:12 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-05 16:01:12 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-05 16:01:12 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:11 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:11 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-05 16:01:08 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-05 16:01:07 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎05T15:01:07.488184000Z. Information 2018-01-05 16:00:54 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎05T15:00:54.188616500Z. Information 2018-01-05 16:00:52 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-05 16:00:48 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-05 16:00:48 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-05 16:00:48 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-05 16:01:18 EventLog 6013 None The system uptime is 11 seconds. Information 2018-01-05 16:01:18 EventLog 6005 None The Event log service was started. Information 2018-01-05 16:01:18 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-05 16:00:48 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-05 16:00:48 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-05 16:00:48 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-05 16:00:47 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-05 16:00:47 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-05 16:00:48 EventLog 6006 None The Event log service was stopped. Information 2018-01-05 16:00:44 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-05 16:00:42 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Error 2018-01-05 15:45:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-05 15:45:59 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-05 15:45:58 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-05 15:44:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-05 15:43:57 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-05 15:43:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-05 15:43:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-05 15:43:24 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-05 15:43:20 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-05 15:43:19 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-05 15:43:16 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-05 15:43:14 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-05 15:43:15 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-05 15:43:14 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-05 15:43:14 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-05 15:43:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:14 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:14 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:14 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:12 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-05 15:43:11 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-05 15:43:08 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-05 15:43:08 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-05 15:43:08 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-05 15:43:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 15:43:07 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 15:43:07 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 15:43:07 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-05 15:43:07 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-05 15:43:07 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 15:43:07 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-05 15:43:07 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-05 15:43:07 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-05 15:43:07 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:06 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:06 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:06 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:06 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-05 15:43:04 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-05 15:43:03 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎05T14:43:03.487223300Z. Information 2018-01-05 15:42:49 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎05T14:42:49.621260400Z. Information 2018-01-05 15:42:47 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-05 15:42:44 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-05 15:43:13 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-05 15:43:13 EventLog 6005 None The Event log service was started. Information 2018-01-05 15:43:13 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-05 15:42:43 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-05 15:42:43 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-05 15:42:43 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-05 15:42:43 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-05 15:42:43 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-05 15:42:43 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-05 15:42:43 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-05 15:42:43 EventLog 6006 None The Event log service was stopped. Information 2018-01-05 15:42:39 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-05 15:42:37 User32 1074 None "The process C:\Windows\system32\msconfig.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x40000 Shutdown Type: restart Comment: " Information 2018-01-05 15:41:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\pss\boot.backup was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 15:41:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\pss\boot.backup was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 15:41:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\pss\boot.backup was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 15:35:35 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 14:59:55 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer Information 2018-01-05 14:59:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-05 14:59:48 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer Information 2018-01-05 14:59:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-05 14:59:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_2.1801.4012.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 14:59:28 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 2018-01-05 14:59:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-05 14:59:15 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 2018-01-05 14:59:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11712.1712.12003.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 14:58:41 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-05 14:58:35 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-05 14:57:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-05 14:57:43 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2018-01-05 14:57:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-05 14:57:39 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-05 14:57:19 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 2018-01 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4056892) Error 2018-01-05 14:56:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-05 14:56:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-05 14:56:24 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-05 14:56:18 Microsoft-Windows-UserModePowerService 12 (10) Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.188_none_16c3dcde323064d9\TiWorker.exe (process ID:1644) reset policy scheme from {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} to {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} Information 2018-01-05 14:56:18 Microsoft-Windows-UserModePowerService 12 (10) Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.188_none_16c3dcde323064d9\TiWorker.exe (process ID:1644) reset policy scheme from {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} to {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} Information 2018-01-05 14:56:18 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ was successfully added. Information 2018-01-05 14:56:18 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ was successfully added. Information 2018-01-05 14:56:18 Microsoft-Windows-HttpEvent 15007 None Reservation for namespace identified by URL prefix http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ was successfully added. Information 2018-01-05 14:55:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 645 keys and creating 37 modified pages. Information 2018-01-05 14:55:42 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/ was successfully deleted. Information 2018-01-05 14:55:42 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/ was successfully deleted. Information 2018-01-05 14:55:42 Microsoft-Windows-HttpEvent 15008 None Reservation for namespace identified by URL prefix http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/ was successfully deleted. Information 2018-01-05 14:55:42 Microsoft-Windows-UserModePowerService 12 (10) Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.188_none_16c3dcde323064d9\TiWorker.exe (process ID:1644) reset policy scheme from {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} to {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} Information 2018-01-05 14:55:42 Microsoft-Windows-UserModePowerService 12 (10) Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.188_none_16c3dcde323064d9\TiWorker.exe (process ID:1644) reset policy scheme from {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} to {8C5E7FDA-E8BF-4A96-9A85-A6E23A8C635C} Information 2018-01-05 14:55:36 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-05 14:54:46 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-05 14:54:43 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-05 14:54:40 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-05 14:54:35 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-05 14:54:34 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-05 14:54:34 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-05 14:54:34 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-05 14:54:34 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:33 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:33 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:33 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:33 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:31 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-05 14:54:30 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-05 14:54:27 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-05 14:54:27 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-05 14:54:27 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-05 14:54:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 14:54:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 14:54:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 14:54:26 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-05 14:54:26 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-05 14:54:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 14:54:26 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-05 14:54:26 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-05 14:54:26 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-05 14:54:26 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:25 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:25 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-05 14:54:22 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:22 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-05 14:54:21 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎05T13:54:21.487990100Z. Information 2018-01-05 14:54:08 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎05T13:54:08.559650000Z. Information 2018-01-05 14:54:06 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-05 14:54:06 Service Control Manager 7000 None "The MySQL service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion." Error 2018-01-05 14:54:06 Service Control Manager 7009 None A timeout was reached (30000 milliseconds) while waiting for the MySQL service to connect. Information 2018-01-05 14:54:05 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The avgsvc service failed to start due to the following error: The pipe has been ended." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The ReimageRealTimeProtector service failed to start due to the following error: The pipe has been ended." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The ibtsiva service failed to start due to the following error: The pipe has been ended." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The LanmanServer service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The LanmanServer service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The WpnService service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The WpnService service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7001 None "The TVService service depends on the Netman service which failed to start because of the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The Netman service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The Netman service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The TrkWks service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The TrkWks service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The SecurityHealthService service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The SecurityHealthService service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7001 None "The RasMan service depends on the SstpSvc service which failed to start because of the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The SstpSvc service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The SstpSvc service was unable to log on as NT Authority\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7001 None "The iphlpsvc service depends on the WinHttpAutoProxySvc service which failed to start because of the following error: The dependency service or group failed to start." Error 2018-01-05 14:54:03 Service Control Manager 7001 None "The WinHttpAutoProxySvc service depends on the Dhcp service which failed to start because of the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The Dhcp service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The Dhcp service was unable to log on as NT Authority\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7001 None "The IKEEXT service depends on the BFE service which failed to start because of the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The BFE service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The BFE service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The DPS service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The DPS service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The DiagTrack service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The DiagTrack service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:03 Service Control Manager 7000 None "The CryptSvc service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:03 Service Control Manager 7038 None "The CryptSvc service was unable to log on as NT Authority\NetworkService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:02 Service Control Manager 7000 None "The LanmanWorkstation service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:02 Service Control Manager 7038 None "The LanmanWorkstation service was unable to log on as NT AUTHORITY\NetworkService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:02 Service Control Manager 7001 None "The MpsSvc service depends on the BFE service which failed to start because of the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:02 Service Control Manager 7000 None "The BFE service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:02 Service Control Manager 7038 None "The BFE service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:02 Service Control Manager 7000 None "The BFE service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:02 Service Control Manager 7038 None "The BFE service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:02 Service Control Manager 7000 None "The Spooler service failed to start due to the following error: The service did not start due to a logon failure." Error 2018-01-05 14:54:02 Service Control Manager 7038 None "The Spooler service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:02 Service Control Manager 7000 None "The AVG Antivirus service failed to start due to the following error: The pipe has been ended." Information 2018-01-05 14:54:33 EventLog 6013 None The system uptime is 12 seconds. Information 2018-01-05 14:54:33 EventLog 6005 None The Event log service was started. Information 2018-01-05 14:54:33 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-05 14:54:01 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-05 14:54:01 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-05 14:54:01 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-05 14:54:01 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Error 2018-01-05 14:54:01 Service Control Manager 7023 None "The SysMain service terminated with the following error: The authentication service is unknown." Information 2018-01-05 14:54:01 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-05 14:54:01 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Error 2018-01-05 14:54:00 Service Control Manager 7038 None "The WerSvc service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:00 Service Control Manager 7038 None "The ShellHWDetection service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC)." Error 2018-01-05 14:54:00 Service Control Manager 7001 None "The WlanSvc service depends on the Wcmsvc service which failed to start because of the following error: The operation completed successfully." Information 2018-01-05 14:54:01 EventLog 6006 None The Event log service was stopped. Information 2018-01-05 14:53:58 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-05 14:53:58 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-05 14:53:58 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-05 14:53:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:57 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:57 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2094‎-‎03‎-‎05T04:04:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:57 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:57 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎2006‎-‎08‎-‎05T14:52:50.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:57 User32 1074 None "The process C:\Windows\servicing\TrustedInstaller.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: " Information 2018-01-05 14:52:37 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-05 14:52:36 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-05 14:52:33 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-05 14:52:33 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-05 14:52:33 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-05 14:52:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 14:52:32 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-05 14:52:32 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 14:52:32 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-05 14:52:32 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-05 14:52:32 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-05 14:52:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-05 14:52:31 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-05 14:52:31 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-05 14:52:31 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-05 14:52:31 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:52:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:52:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:52:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:59 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-05 14:52:30 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-05 14:52:27 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:52:27 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-05 14:53:57 EventLog 6013 None The system uptime is 91 seconds. Information 2018-01-05 14:53:57 EventLog 6005 None The Event log service was started. Information 2018-01-05 14:53:57 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-05 14:53:57 EventLog 6008 None The previous system shutdown at 14:50:31 on ‎2018-‎01-‎05 was unexpected. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-05 14:52:26 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎05T13:52:26.488249900Z. Information 2018-01-05 14:44:51 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-05 14:27:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-05 14:10:43 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-05 13:53:39 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-05 13:36:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-05 13:36:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-05 12:00:00 EventLog 6013 None The system uptime is 106984 seconds. Information 2018-01-05 10:26:39 Service Control Manager 7040 None The start type of the Update Orchestrator Service service was changed from auto start to demand start. Information 2018-01-05 10:22:31 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-05 10:20:27 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-05 10:20:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-05 10:20:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-05 10:19:51 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-05 10:19:51 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎04T20:46:19.562295300Z Wake Time: ‎2018‎-‎01‎-‎05T09:19:49.239093900Z Wake Source: Unknown" Warning 2018-01-05 10:19:49 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-05 10:19:49 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-05 10:19:49 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-05 10:19:49 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-05 10:19:49 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-05 10:19:49 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-05 10:19:49 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-05 10:19:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎05T09:19:46.500000000Z from ‎2018‎-‎01‎-‎04T20:46:22.611438100Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-04 21:46:22 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-04 21:46:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎04T20:46:20.500000000Z from ‎2018‎-‎01‎-‎04T20:46:21.636988000Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-04 21:46:20 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-04 21:46:19 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-04 21:46:07 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-04 21:46:07 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-04 21:46:04 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-04 12:00:00 EventLog 6013 None The system uptime is 20583 seconds. Information 2018-01-04 06:44:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-04 06:43:58 Service Control Manager 7040 None The start type of the Update Orchestrator Service service was changed from demand start to auto start. Information 2018-01-04 06:40:40 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2018-01-04 06:40:05 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 2018-01-04 06:34:29 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2018-01-04 06:32:55 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 2018-01 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4056892) Information 2018-01-04 06:23:06 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Error 2018-01-04 06:19:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-04 06:19:39 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-04 06:19:38 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-04 06:18:18 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-04 06:17:37 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-04 06:17:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-04 06:17:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-04 06:17:17 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-04 06:17:13 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-04 06:17:12 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-04 06:17:10 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-04 06:17:07 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-04 06:17:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:07 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:07 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:07 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-04 06:17:07 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-04 06:17:07 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:07 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:05 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-04 06:17:05 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-04 06:17:03 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-04 06:17:03 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-04 06:17:02 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-04 06:17:01 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-04 06:17:01 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-04 06:17:01 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-04 06:17:01 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-04 06:17:01 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-04 06:17:01 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-04 06:17:01 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-04 06:17:00 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-04 06:17:00 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-04 06:17:00 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:00 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:00 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:00 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:17:08 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-04 06:17:00 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-04 06:16:57 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:16:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-04 06:16:56 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎04T05:16:56.488287500Z. Information 2018-01-04 06:16:44 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎04T05:16:44.691645500Z. Information 2018-01-04 06:16:42 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-04 06:16:38 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-04 06:16:38 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-04 06:16:38 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-04 06:17:07 EventLog 6013 None The system uptime is 10 seconds. Information 2018-01-04 06:17:07 EventLog 6005 None The Event log service was started. Information 2018-01-04 06:17:07 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-04 06:16:38 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-04 06:16:38 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-04 06:16:38 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-04 06:16:37 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-04 06:16:37 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-04 06:16:38 EventLog 6006 None The Event log service was stopped. Information 2018-01-04 06:16:34 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-04 06:16:34 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Information 2018-01-04 05:31:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-04 05:28:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-04 05:27:14 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps Information 2018-01-04 05:27:09 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps Information 2018-01-04 05:27:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8730.21725.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-04 05:26:38 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-04 05:26:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-04 05:25:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-04 05:23:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-04 05:23:06 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-04 05:23:05 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2018-01-04 05:21:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-04 05:21:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-04 05:21:05 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-04 05:20:44 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Information 2018-01-04 05:20:43 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-04 05:20:42 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-04 05:20:37 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-04 05:20:36 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-04 05:20:36 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-04 05:20:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:36 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:36 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:36 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:36 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:34 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-04 05:20:34 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-04 05:20:32 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-04 05:20:30 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-04 05:20:30 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-04 05:20:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-04 05:20:29 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-04 05:20:29 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-04 05:20:29 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-04 05:20:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-04 05:20:29 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-04 05:20:29 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-04 05:20:29 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2018-01-04 05:20:29 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2018-01-04 05:20:29 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-04 05:20:29 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:28 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:28 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-04 05:20:25 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:25 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-04 05:20:37 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-04 05:20:37 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-04 05:20:36 EventLog 6013 None The system uptime is 11 seconds. Information 2018-01-04 05:20:36 EventLog 6005 None The Event log service was started. Information 2018-01-04 05:20:36 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2018-01-04 05:20:36 EventLog 6008 None The previous system shutdown at 22:13:05 on ‎2018-‎01-‎03 was unexpected. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Error 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 29 None Windows failed fast startup with error status 0xC00000D4. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-04 05:20:24 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎04T04:20:24.488047000Z. Information 2018-01-03 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-03 14:57:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-03 14:07:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-03 13:50:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-03 13:33:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-03 13:31:08 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{672232C2-F752-4E38-A82F-A390267CC8BD} was reorganized with a starting size of 74514432 bytes and an ending size of 74461184 bytes. Information 2018-01-03 13:31:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{105A1C25-98D2-4B9A-8573-17D9FF8A4E65} was cleared updating 458 keys and creating 52 modified pages. Information 2018-01-03 13:30:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{F57F94BF-90AB-4F8B-A2D4-009E8E85F49F} was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-03 13:30:58 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{59D801C4-DA4F-4DAA-AF37-1F65C3BB235A} was reorganized with a starting size of 60944384 bytes and an ending size of 42065920 bytes. Information 2018-01-03 13:30:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{AA40CA38-2770-44F0-8F69-84FAEACC9004} was cleared updating 79 keys and creating 5 modified pages. Information 2018-01-03 13:30:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{5A0866BC-A969-4A7B-90E4-B02783C242A2} was cleared updating 72 keys and creating 7 modified pages. Information 2018-01-03 13:30:53 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{61D150DF-FE12-483A-8155-60599EDA9FBA} was reorganized with a starting size of 12378112 bytes and an ending size of 12197888 bytes. Information 2018-01-03 13:30:43 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows\System32\config\DRIVERS (TM: {C1521BAA-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521BA9-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:30:43 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows\System32\config\SYSTEM (TM: {C1521BA8-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521BA7-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:30:43 Microsoft-Windows-Kernel-General 15 None Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\Windows\System32\config\SYSTEM was reorganized with a starting size of 12378112 bytes and an ending size of 12197888 bytes. Information 2018-01-03 13:30:38 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{DEB534C8-6E9C-4D83-92F5-46320088813E} was reorganized with a starting size of 74522624 bytes and an ending size of 74465280 bytes. Information 2018-01-03 13:30:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{80C32634-55AB-4E44-8DD1-841F5A8BF439} was cleared updating 458 keys and creating 52 modified pages. Information 2018-01-03 13:30:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{9C926DD6-C077-4B6A-BFB4-50C9935A49DA} was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-03 13:30:29 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{DE6731CA-8865-41B1-92E8-45E349726254} was reorganized with a starting size of 60944384 bytes and an ending size of 42065920 bytes. Information 2018-01-03 13:30:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{990EFDF9-4CFE-4825-B115-B7D3A5418344} was cleared updating 79 keys and creating 5 modified pages. Information 2018-01-03 13:30:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{9A75E88E-8D80-4C0E-B00B-9D6BB2864D3B} was cleared updating 72 keys and creating 7 modified pages. Information 2018-01-03 13:30:24 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{560E1219-617A-47E1-96B9-9CCA48654973} was reorganized with a starting size of 12378112 bytes and an ending size of 12206080 bytes. Information 2018-01-03 13:30:14 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\Windows\System32\config\DRIVERS (TM: {C1521B87-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B86-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:30:13 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\Windows\System32\config\SYSTEM (TM: {C1521B85-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B84-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:30:13 Microsoft-Windows-Kernel-General 15 None Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\Windows\System32\config\SYSTEM was reorganized with a starting size of 12378112 bytes and an ending size of 12206080 bytes. Information 2018-01-03 13:30:09 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{7016E327-E577-4DEA-A39A-98B708B12843} was reorganized with a starting size of 74522624 bytes and an ending size of 74469376 bytes. Information 2018-01-03 13:30:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{75079450-6627-43AF-A52A-87F144DF7651} was cleared updating 470 keys and creating 53 modified pages. Information 2018-01-03 13:29:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{E1DEF6D5-E069-48B6-A2DD-7F114B051650} was cleared updating 79 keys and creating 5 modified pages. Information 2018-01-03 13:29:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{445FCFF1-703C-43EB-8D8F-74B7A423347F} was cleared updating 72 keys and creating 7 modified pages. Information 2018-01-03 13:29:58 Microsoft-Windows-Kernel-General 15 None Hive \??\Volume{3f1d4c0b-0000-0000-0000-501f00000000}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{F78D4A02-BF22-4062-8E7D-7BF1564922AD} was reorganized with a starting size of 12378112 bytes and an ending size of 12210176 bytes. Information 2018-01-03 13:29:47 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\Windows\System32\config\DRIVERS (TM: {C1521B65-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B64-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:29:47 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\Windows\System32\config\SYSTEM (TM: {C1521B63-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B62-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:29:47 Microsoft-Windows-Kernel-General 15 None Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\Windows\System32\config\SYSTEM was reorganized with a starting size of 12378112 bytes and an ending size of 12210176 bytes. Information 2018-01-03 13:29:27 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\DRIVERS (TM: {C1521B45-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B44-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:29:26 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\Windows\System32\config\SYSTEM (TM: {C1521B43-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B42-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:29:05 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy5\Windows\System32\config\DRIVERS (TM: {C1521B1F-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B1E-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:29:05 Microsoft-Windows-Kernel-General 11 None TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy5\Windows\System32\config\SYSTEM (TM: {C1521B1D-F045-11E7-BC2A-4851B7BD102C}, RM: {C1521B1C-F045-11E7-BC2A-4851B7BD102C}) finished with result=0xC00000A2 (Internal code=7). Information 2018-01-03 13:16:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-03 12:59:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-03 12:58:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-03 12:00:00 EventLog 6013 None The system uptime is 20396 seconds. Information 2018-01-03 09:05:43 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-Microsoft.SkypeApp Information 2018-01-03 09:05:38 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-Microsoft.SkypeApp Information 2018-01-03 09:05:32 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4R32N-Microsoft.WindowsFeedbackHub Information 2018-01-03 09:05:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_12.13.257.0_x64__kzf8qxf38zg5c\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-03 09:05:24 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4R32N-Microsoft.WindowsFeedbackHub Information 2018-01-03 09:05:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1711.3412.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-03 09:04:46 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-03 09:04:39 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2018-01-03 09:00:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-03 08:59:32 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-03 08:59:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-03 08:59:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-03 08:59:02 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-03 08:59:02 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎03T05:26:06.302535700Z Wake Time: ‎2018‎-‎01‎-‎03T07:59:00.342581200Z Wake Source: Unknown" Warning 2018-01-03 08:59:00 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-03 08:59:00 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-03 08:59:00 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-03 08:59:00 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-03 08:59:00 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-03 08:59:00 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-03 08:59:00 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-03 08:58:59 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎03T07:58:59.500000000Z from ‎2018‎-‎01‎-‎03T05:26:08.727087400Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-03 06:26:08 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-03 06:26:06 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-03 06:26:05 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-03 06:26:04 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Error 2018-01-03 06:26:04 Microsoft-Windows-DistributedCOM 10010 None The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. Information 2018-01-03 06:26:01 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Error 2018-01-03 06:22:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-03 06:22:56 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-03 06:22:55 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-03 06:21:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-03 06:20:53 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-03 06:20:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-03 06:20:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-03 06:20:24 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-03 06:20:19 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-03 06:20:19 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-03 06:20:16 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-03 06:20:14 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-03 06:20:14 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-03 06:20:14 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-03 06:20:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:13 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:13 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:13 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:13 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:12 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-03 06:20:15 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-03 06:20:11 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-03 06:20:08 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-03 06:20:08 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-03 06:20:08 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-03 06:20:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-03 06:20:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-03 06:20:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-03 06:20:08 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-03 06:20:08 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-03 06:20:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-03 06:20:08 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-03 06:20:07 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-03 06:20:07 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-03 06:20:07 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:06 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-03 06:20:05 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:05 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-03 06:20:04 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎03T05:20:04.488162200Z. Information 2018-01-03 06:19:50 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎03T05:19:50.456065700Z. Information 2018-01-03 06:19:48 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-03 06:19:44 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-03 06:20:14 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-03 06:20:14 EventLog 6005 None The Event log service was started. Information 2018-01-03 06:20:14 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-03 06:19:43 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-03 06:19:43 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-03 06:19:43 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-03 06:19:43 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-03 06:19:43 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-03 06:19:43 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-03 06:19:43 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-03 06:19:43 EventLog 6006 None The Event log service was stopped. Information 2018-01-03 06:19:40 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-03 06:19:37 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-03 06:06:52 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy5) is healthy. No action is needed. Information 2018-01-03 05:45:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-03 05:34:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 28 keys and creating 3 modified pages. Information 2018-01-03 05:31:17 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-03 05:29:56 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-03 05:29:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-03 05:29:36 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-03 05:29:28 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-03 05:29:28 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎02T21:52:55.919492800Z Wake Time: ‎2018‎-‎01‎-‎03T04:29:26.049534700Z Wake Source: Unknown" Warning 2018-01-03 05:29:26 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-03 05:29:26 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-03 05:29:26 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-03 05:29:26 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-03 05:29:26 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-03 05:29:26 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-03 05:29:26 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-03 05:29:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎03T04:29:22.500000000Z from ‎2018‎-‎01‎-‎02T21:53:00.436274400Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-02 22:53:00 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-02 22:52:56 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-02 22:52:55 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-02 22:52:53 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-02 22:52:52 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-02 22:52:50 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-02 22:52:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-02 20:46:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-02 20:44:24 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-02 20:44:25 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-02 20:44:24 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-02 20:42:22 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-02 20:42:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-02 20:42:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-02 20:41:52 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-02 20:41:49 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-02 20:41:48 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-02 20:41:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-02 20:41:44 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-02 20:41:44 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-02 20:41:44 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-02 20:41:44 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:44 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:44 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:44 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:43 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:42 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-02 20:41:41 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-02 20:41:38 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-02 20:41:38 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-02 20:41:38 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-02 20:41:37 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-02 20:41:37 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-02 20:41:37 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-02 20:41:37 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-02 20:41:37 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-02 20:41:37 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-02 20:41:44 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-02 20:41:37 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-02 20:41:37 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-02 20:41:37 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-02 20:41:36 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:36 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:36 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-02 20:41:35 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:35 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-02 20:41:34 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎02T19:41:34.488025300Z. Information 2018-01-02 20:41:21 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎02T19:41:21.409342400Z. Information 2018-01-02 20:41:19 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-02 20:41:15 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-02 20:41:43 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-02 20:41:43 EventLog 6005 None The Event log service was started. Information 2018-01-02 20:41:43 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-02 20:41:15 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-02 20:41:15 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-02 20:41:14 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-02 20:41:14 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-02 20:41:14 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-02 20:41:14 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-02 20:41:14 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-02 20:41:14 EventLog 6006 None The Event log service was stopped. Information 2018-01-02 20:41:11 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-02 20:41:09 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-02 20:41:09 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-02 20:41:08 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-02 20:39:34 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy4) is healthy. No action is needed. Information 2018-01-02 20:27:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-02 20:22:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-02 20:20:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-02 20:20:04 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-02 20:20:02 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-02 20:18:01 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-02 20:17:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-02 20:17:57 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-02 20:17:35 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Information 2018-01-02 20:17:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\AppCompat\Programs\Amcache.hve was cleared updating 1666 keys and creating 622 modified pages. Error 2018-01-02 20:17:33 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-02 20:17:33 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-02 20:17:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-02 20:17:28 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-02 20:17:28 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-02 20:17:28 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-02 20:17:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:28 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:28 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:28 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:28 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 345 keys and creating 30 modified pages. Information 2018-01-02 20:17:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 219 keys and creating 54 modified pages. Information 2018-01-02 20:17:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 319 keys and creating 27 modified pages. Information 2018-01-02 20:17:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 72 keys and creating 7 modified pages. Information 2018-01-02 20:17:26 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-02 20:17:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 79 keys and creating 5 modified pages. Information 2018-01-02 20:17:25 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-02 20:17:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 470 keys and creating 53 modified pages. Information 2018-01-02 20:17:24 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 74522624 bytes and an ending size of 74465280 bytes. Information 2018-01-02 20:17:19 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-02 20:17:18 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-02 20:17:18 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-02 20:17:18 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-02 20:17:18 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-02 20:17:18 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-02 20:17:18 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-02 20:17:18 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-02 20:17:18 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-02 20:17:18 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-02 20:17:17 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-02 20:17:17 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-02 20:17:17 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:17 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:17 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:17 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:16 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-02 20:17:16 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:16 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-02 20:17:28 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-02 20:17:28 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-02 20:17:15 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎02T19:17:14.488235200Z. Information 2018-01-02 20:17:00 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎02T19:17:00.470473200Z. Information 2018-01-02 20:16:57 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-02 20:16:53 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-02 20:16:53 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-02 20:16:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-02 20:16:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-02 20:16:53 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-02 20:17:28 EventLog 6013 None The system uptime is 13 seconds. Information 2018-01-02 20:17:28 EventLog 6005 None The Event log service was started. Information 2018-01-02 20:17:28 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-02 20:16:53 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-02 20:16:52 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-02 20:16:52 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-02 20:16:53 EventLog 6006 None The Event log service was stopped. Information 2018-01-02 20:16:49 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-02 20:16:47 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-02 20:16:47 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-02 20:16:44 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-02 20:09:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2018-01-02 19:56:58 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy3) is healthy. No action is needed. Information 2018-01-02 15:27:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 2018-01-02 15:08:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 2018-01-02 15:08:40 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 36 keys and creating 8 modified pages. Information 2018-01-02 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-02 14:57:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-02 14:35:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-02 12:00:00 EventLog 6013 None The system uptime is 70900 seconds. Information 2018-01-02 10:45:22 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 2018-01-02 10:41:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-02 10:39:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-02 10:38:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-02 10:37:14 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2018-01-02 10:36:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat was cleared updating 35 keys and creating 8 modified pages. Information 2018-01-02 10:36:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Error 2018-01-02 10:36:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-02 10:36:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-02 10:36:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 3728 keys and creating 662 modified pages. Information 2018-01-02 10:36:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-02 10:36:46 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎02T01:12:26.263483700Z Wake Time: ‎2018‎-‎01‎-‎02T09:36:44.324203200Z Wake Source: Unknown" Information 2018-01-02 10:36:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 2018-01-02 10:36:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-02 10:36:44 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-02 10:36:44 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-02 10:36:44 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-02 10:36:44 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-02 10:36:44 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-02 10:36:44 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2018-01-02 10:36:44 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-02 10:36:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎02T09:36:42.500000000Z from ‎2018‎-‎01‎-‎02T01:12:30.673466300Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-02 02:12:30 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2018-01-02 02:12:30 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2018-01-02 02:12:28 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-02 02:12:25 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-02 02:12:11 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2018-01-02 02:12:08 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-02 02:11:14 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-02 01:54:10 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-02 01:37:06 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-02 01:19:46 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-02 01:19:37 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-02 01:19:35 Microsoft-Windows-Kernel-General 15 None Hive \??\C:\Windows\System32\config\COMPONENTS was reorganized with a starting size of 60944384 bytes and an ending size of 42065920 bytes. Information 2018-01-02 01:19:30 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2018-01-02 01:19:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 3 modified pages. Information 2018-01-01 16:32:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Error 2018-01-01 16:21:15 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-01 16:21:16 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-01 16:21:15 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-01 16:19:13 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-01 16:18:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 16:18:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 16:18:38 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-01 16:18:35 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-01 16:18:34 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-01 16:18:33 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-01 16:18:30 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-01 16:18:30 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-01 16:18:30 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-01 16:18:30 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:30 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:30 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:30 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:30 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:28 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-01 16:18:27 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-01 16:18:24 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-01 16:18:24 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-01 16:18:24 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-01 16:18:30 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-01 16:18:23 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 16:18:23 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 16:18:23 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 16:18:23 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-01 16:18:23 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-01 16:18:23 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 16:18:23 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-01 16:18:22 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-01 16:18:22 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-01 16:18:22 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:22 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:22 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-01 16:18:21 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:21 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-01 16:18:20 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎01T15:18:20.488245400Z. Information 2018-01-01 16:18:07 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎01T15:18:07.093279100Z. Information 2018-01-01 16:18:04 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-01 16:18:01 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-01 16:18:29 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-01 16:18:29 EventLog 6005 None The Event log service was started. Information 2018-01-01 16:18:29 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-01 16:18:00 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 16:18:00 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-01 16:18:00 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 16:18:00 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 16:18:00 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 16:18:00 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-01 16:18:00 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-01 16:18:00 EventLog 6006 None The Event log service was stopped. Information 2018-01-01 16:17:57 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-01 16:17:53 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.Windows.ContentDeliveryManager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca did not register with DCOM within the required timeout. Error 2018-01-01 16:17:50 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-01 16:17:50 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-01 16:17:49 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2018-01-01 16:16:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-01 16:14:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-01 16:14:36 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-01 16:14:35 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-01 16:12:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-01 16:12:17 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-01 16:12:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 16:12:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 16:12:08 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-01 16:12:07 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-01 16:12:05 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-01 16:12:03 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-01 16:12:03 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-01 16:12:03 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-01 16:12:02 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:12:02 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:12:02 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:12:02 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:12:02 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:12:00 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-01 16:12:00 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-01 16:11:57 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-01 16:11:57 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-01 16:11:57 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-01 16:11:56 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 16:11:56 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 16:11:56 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 16:11:56 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-01 16:11:56 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-01 16:11:56 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 16:11:56 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-01 16:11:55 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-01 16:11:55 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-01 16:11:55 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:11:55 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:11:55 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:11:55 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:11:55 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-01 16:11:54 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:11:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 16:12:03 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-01 16:11:53 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎01T15:11:53.488180200Z. Information 2018-01-01 16:11:39 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎01T15:11:39.707362100Z. Information 2018-01-01 16:11:37 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-01 16:11:32 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-01 16:11:32 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 16:11:32 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-01 16:12:02 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-01 16:12:02 EventLog 6005 None The Event log service was started. Information 2018-01-01 16:12:02 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-01 16:11:32 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 16:11:32 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 16:11:32 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 16:11:32 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-01 16:11:32 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-01 16:11:32 EventLog 6006 None The Event log service was stopped. Information 2018-01-01 16:11:29 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-01 16:11:27 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-01 16:11:27 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-01 16:11:26 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-01 16:00:06 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy2) is healthy. No action is needed. Information 2018-01-01 15:42:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-01 15:32:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2018-01-01 15:02:33 Microsoft-Windows-Ntfs 98 None Volume ?? (\Device\HarddiskVolumeShadowCopy1) is healthy. No action is needed. Information 2018-01-01 14:54:32 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2018-01-01 14:54:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 14:54:11 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-01 14:54:06 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-01 14:54:06 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2018‎-‎01‎-‎01T13:53:33.113051300Z Wake Time: ‎2018‎-‎01‎-‎01T13:54:04.897299700Z Wake Source: Unknown" Warning 2018-01-01 14:54:05 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-01 14:54:05 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-01 14:54:04 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-01 14:54:04 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-01 14:54:04 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2018-01-01 14:54:04 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-01 14:54:04 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-01 14:54:03 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎01T13:54:03.500000000Z from ‎2018‎-‎01‎-‎01T13:53:34.916402400Z. Change Reason: System time synchronized with the hardware clock." Information 2018-01-01 14:53:34 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2018-01-01 14:53:33 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2018-01-01 14:53:32 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-01 14:53:26 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-01 14:53:26 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-01 14:53:24 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Error 2018-01-01 14:52:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-01 14:52:31 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-01 14:52:30 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-01 14:50:28 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-01 14:50:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 14:50:02 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-01 14:49:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 14:49:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 14:49:53 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-01 14:49:52 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-01 14:49:49 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-01 14:49:47 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-01 14:49:47 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-01 14:49:47 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-01 14:49:47 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:47 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:47 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:47 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:46 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:45 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-01 14:49:44 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2018-01-01 14:49:41 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-01 14:49:41 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2018-01-01 14:49:41 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-01 14:49:40 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 14:49:40 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 14:49:40 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 14:49:40 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-01 14:49:40 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 14:49:40 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-01 14:49:40 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-01 14:49:40 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-01 14:49:40 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-01 14:49:40 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:39 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:39 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:39 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:39 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-01 14:49:47 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-01 14:49:38 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:38 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-01 14:49:37 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎01T13:49:37.488112300Z. Information 2018-01-01 14:49:23 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎01T13:49:23.913009600Z. Information 2018-01-01 14:49:22 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-01 14:49:19 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-01 14:49:47 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-01 14:49:47 EventLog 6005 None The Event log service was started. Information 2018-01-01 14:49:47 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-01 14:49:18 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 14:49:18 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-01 14:49:18 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 14:49:18 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 14:49:18 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 14:49:18 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-01 14:49:18 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-01 14:49:18 EventLog 6006 None The Event log service was stopped. Information 2018-01-01 14:49:15 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2018-01-01 14:49:15 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Information 2018-01-01 14:48:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 84 keys and creating 11 modified pages. Information 2018-01-01 14:42:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 11 keys and creating 2 modified pages. Information 2018-01-01 14:33:12 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-01 14:31:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-01 14:30:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2018-01-01 14:29:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-01 14:29:43 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2018-01-01 14:29:42 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2018-01-01 14:28:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 315 keys and creating 30 modified pages. Information 2018-01-01 14:28:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-01 14:27:40 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2018-01-01 14:27:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2018-01-01 14:27:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2018-01-01 14:27:23 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 6012928 bytes and an ending size of 6074368 bytes. Error 2018-01-01 14:27:16 Service Control Manager 7000 None "The Service KMSELDI service failed to start due to the following error: The system cannot find the path specified." Error 2018-01-01 14:27:13 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2018-01-01 14:27:12 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2018-01-01 14:27:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\ntuser.dat was cleared updating 2127 keys and creating 271 modified pages. Information 2018-01-01 14:27:10 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2018-01-01 14:27:08 Lfsvc 1 None Geolocation positioning is enabled. Information 2018-01-01 14:27:07 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2018-01-01 14:27:07 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2018-01-01 14:27:07 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2018-01-01 14:27:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:07 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:07 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:07 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:07 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:05 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2018-01-01 14:27:05 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2018-01-01 14:27:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 35 keys and creating 5 modified pages. Information 2018-01-01 14:27:01 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2018-01-01 14:27:01 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2018-01-01 14:27:01 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2018-01-01 14:27:01 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 14:27:01 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 14:27:01 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2018-01-01 14:27:01 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2018-01-01 14:27:01 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2018-01-01 14:27:01 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2018-01-01 14:27:00 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2018-01-01 14:27:00 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2018-01-01 14:27:00 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2018-01-01 14:27:00 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:00 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:27:00 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:26:59 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:26:59 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2018-01-01 14:26:58 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:26:58 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2018-01-01 14:26:57 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2018‎-‎01‎-‎01T13:26:57.488266600Z. Information 2018-01-01 14:26:43 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2018‎-‎01‎-‎01T13:26:43.855648300Z. Information 2018-01-01 14:26:42 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2018-01-01 14:26:38 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2018-01-01 14:27:07 EventLog 6013 None The system uptime is 9 seconds. Information 2018-01-01 14:27:07 EventLog 6005 None The Event log service was started. Information 2018-01-01 14:27:07 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2018-01-01 14:26:38 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 14:26:38 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2018-01-01 14:26:38 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 14:26:38 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2018-01-01 14:26:38 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2018-01-01 14:26:37 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2018-01-01 14:26:37 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2018-01-01 14:26:38 EventLog 6006 None The Event log service was stopped. Information 2018-01-01 14:26:35 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2018-01-01 14:26:32 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2018-01-01 14:26:32 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2018-01-01 14:26:31 User32 1074 None "The process Reimage.exe has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: No title for this reason could be found Reason Code: 0x20001 Shutdown Type: restart Comment: " Information 2018-01-01 13:49:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2018-01-01 13:48:45 Service Control Manager 7045 None "A service was installed in the system. Service Name: Reimage Real Time Protector Service File Name: C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2018-01-01 12:00:00 EventLog 6013 None The system uptime is 127415 seconds. Information 2018-01-01 11:13:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2018-01-01 11:11:37 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2018-01-01 08:10:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 07:53:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 07:36:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 07:19:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 07:02:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 07:02:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎01T06:02:04.314000000Z from ‎2018‎-‎01‎-‎01T06:02:04.302996700Z. Change Reason: An application or system component changed the time." Information 2018-01-01 06:52:03 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 06:52:03 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2018‎-‎01‎-‎01T05:52:03.240000000Z from ‎2018‎-‎01‎-‎01T05:52:02.760324100Z. Change Reason: An application or system component changed the time." Information 2018-01-01 01:07:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 00:50:31 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 00:33:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 00:16:23 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2018-01-01 00:00:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎31T23:00:00.010847900Z from ‎2017‎-‎12‎-‎31T23:00:00.010847900Z. Change Reason: System time adjusted to the new time zone." Information 2017-12-31 23:59:03 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-31 23:59:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎31T22:59:02.911000000Z from ‎2017‎-‎12‎-‎31T22:59:01.175008500Z. Change Reason: An application or system component changed the time." Information 2017-12-31 16:51:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-31 15:52:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-31 15:50:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-31 12:00:00 EventLog 6013 None The system uptime is 41017 seconds. Information 2017-12-31 07:54:15 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-31 07:53:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-31 07:53:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-31 07:53:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-31 07:53:46 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎31T00:48:45.054110100Z Wake Time: ‎2017‎-‎12‎-‎31T06:53:44.019410300Z Wake Source: Unknown" Warning 2017-12-31 07:53:45 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-31 07:53:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 2017-12-31 07:53:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-31 07:53:44 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-31 07:53:44 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-31 07:53:44 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-31 07:53:44 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-31 07:53:44 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-31 07:53:44 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2017-12-31 07:53:43 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-31 07:53:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎31T06:53:42.500000000Z from ‎2017‎-‎12‎-‎31T00:48:47.287067600Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-31 01:48:47 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2017-12-31 01:48:45 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-31 01:48:44 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-31 01:48:32 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-31 01:48:32 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-31 01:48:29 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-31 01:38:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-31 01:21:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-31 01:04:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-31 00:47:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-31 00:47:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T23:47:04.828000000Z from ‎2017‎-‎12‎-‎30T23:47:04.796138900Z. Change Reason: An application or system component changed the time." Information 2017-12-31 00:46:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-31 00:41:08 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-31 00:39:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-31 00:39:08 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-31 00:39:07 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-31 00:37:06 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-31 00:36:55 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-31 00:36:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-31 00:36:49 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-31 00:36:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T23:36:49.568000000Z from ‎2017‎-‎12‎-‎30T23:36:50.048444800Z. Change Reason: An application or system component changed the time." Error 2017-12-31 00:36:38 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-31 00:36:37 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-31 00:36:35 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-31 00:36:33 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-31 00:36:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:33 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:33 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-31 00:36:33 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-31 00:36:33 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:33 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:33 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:31 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-31 00:36:30 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-31 00:36:28 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-31 00:36:28 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-31 00:36:27 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-31 00:36:27 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-31 00:36:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-31 00:36:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-31 00:36:26 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-31 00:36:26 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-31 00:36:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-31 00:36:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-31 00:36:26 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-31 00:36:26 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-31 00:36:25 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:25 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:25 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-31 00:36:33 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-31 00:36:24 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-31 00:36:23 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎30T23:36:23.488162200Z. Information 2017-12-31 00:36:10 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎30T23:36:10.010217700Z. Information 2017-12-31 00:36:08 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-31 00:36:04 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-31 00:36:32 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-31 00:36:32 EventLog 6005 None The Event log service was started. Information 2017-12-31 00:36:32 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-31 00:36:03 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-31 00:36:03 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-31 00:36:03 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-31 00:36:03 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-31 00:36:03 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-31 00:36:03 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-31 00:36:03 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-31 00:36:03 EventLog 6006 None The Event log service was stopped. Information 2017-12-31 00:36:00 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-31 00:35:57 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-31 00:35:52 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-31 00:33:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-31 00:16:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 23:59:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 23:59:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T22:59:02.015000000Z from ‎2017‎-‎12‎-‎30T22:59:01.909915400Z. Change Reason: An application or system component changed the time." Information 2017-12-30 23:47:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 23:30:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 23:13:18 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 22:56:14 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 22:38:54 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 22:38:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T21:38:54.313000000Z from ‎2017‎-‎12‎-‎30T21:38:54.278859100Z. Change Reason: An application or system component changed the time." Information 2017-12-30 22:31:34 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-30 22:30:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-30 22:30:57 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-30 22:30:55 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-30 22:28:55 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-30 22:28:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-30 22:28:47 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-30 22:28:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-30 22:28:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T21:28:41.598000000Z from ‎2017‎-‎12‎-‎30T21:28:41.329274600Z. Change Reason: An application or system component changed the time." Error 2017-12-30 22:28:29 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-30 22:28:28 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-30 22:28:26 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-30 22:28:23 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:23 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:23 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-30 22:28:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:23 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:23 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-30 22:28:23 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-30 22:28:23 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:21 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-30 22:28:20 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-30 22:28:17 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-30 22:28:17 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-30 22:28:17 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-30 22:28:23 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-30 22:28:17 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-30 22:28:16 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-30 22:28:16 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-30 22:28:16 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-30 22:28:16 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-30 22:28:16 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-30 22:28:16 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-30 22:28:16 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-30 22:28:16 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-30 22:28:16 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:15 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:15 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:15 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:15 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-30 22:28:14 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:14 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-30 22:28:13 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎30T21:28:13.488154600Z. Information 2017-12-30 22:28:00 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎30T21:28:00.064752300Z. Information 2017-12-30 22:27:58 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-30 22:27:54 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-30 22:27:54 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-30 22:27:54 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-30 22:28:22 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-30 22:28:22 EventLog 6005 None The Event log service was started. Information 2017-12-30 22:28:22 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-30 22:27:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-30 22:27:53 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-30 22:27:53 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-30 22:27:53 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-30 22:27:53 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-30 22:27:54 EventLog 6006 None The Event log service was stopped. Information 2017-12-30 22:27:50 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-30 22:27:39 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-30 22:27:39 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-30 22:27:37 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-30 19:11:38 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 18:54:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 18:37:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 18:20:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 18:03:06 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 18:03:06 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T17:03:06.032000000Z from ‎2017‎-‎12‎-‎30T17:03:06.018146800Z. Change Reason: An application or system component changed the time." Information 2017-12-30 17:53:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 17:53:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎30T16:53:04.702000000Z from ‎2017‎-‎12‎-‎30T16:53:03.264126000Z. Change Reason: An application or system component changed the time." Information 2017-12-30 12:00:00 EventLog 6013 None The system uptime is 65859 seconds. Information 2017-12-30 07:21:13 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote Information 2017-12-30 07:21:07 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote Information 2017-12-30 07:21:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. Information 2017-12-30 07:21:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8827.20991.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-30 07:20:27 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-30 01:07:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 00:50:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 00:33:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-30 00:16:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 23:59:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 23:59:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎29T22:59:02.009000000Z from ‎2017‎-‎12‎-‎29T22:59:01.525689500Z. Change Reason: An application or system component changed the time." Error 2017-12-29 21:55:13 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool." Information 2017-12-29 19:56:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-29 19:47:25 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-29 19:41:50 Service Control Manager 7045 None "A service was installed in the system. Service Name: SlimWare Utility Service Launcher Service File Name: ""C:\Program Files\SlimService\SlimServiceFactory.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-29 19:41:18 Service Control Manager 7045 None "A service was installed in the system. Service Name: SlimWare Services Service File Name: ""C:\Program Files\SlimWare Utilities\Services\SlimWare.Services.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-29 19:01:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 18:44:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 18:27:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 18:10:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 17:53:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 17:53:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎29T16:53:01.641000000Z from ‎2017‎-‎12‎-‎29T16:53:01.607034300Z. Change Reason: An application or system component changed the time." Information 2017-12-29 17:47:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-29 17:45:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-29 17:45:07 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-29 17:45:06 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-29 17:43:25 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-29 17:43:04 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-29 17:42:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-29 17:42:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-29 17:42:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-29 17:42:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎29T16:42:46.378000000Z from ‎2017‎-‎12‎-‎29T16:42:44.941845500Z. Change Reason: An application or system component changed the time." Error 2017-12-29 17:42:37 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-29 17:42:35 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-29 17:42:34 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-29 17:42:30 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-29 17:42:30 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-29 17:42:30 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-29 17:42:30 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:30 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:30 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:29 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:29 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:27 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-29 17:42:27 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-29 17:42:25 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-29 17:42:23 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-29 17:42:23 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-29 17:42:22 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-29 17:42:22 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-29 17:42:22 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-29 17:42:22 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-29 17:42:22 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-29 17:42:22 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-29 17:42:22 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-29 17:42:22 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-29 17:42:21 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-29 17:42:21 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-29 17:42:21 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:21 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:21 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:21 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:21 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-29 17:42:19 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-29 17:42:30 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-29 17:42:29 EventLog 6013 None The system uptime is 11 seconds. Information 2017-12-29 17:42:29 EventLog 6005 None The Event log service was started. Information 2017-12-29 17:42:29 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-29 17:42:29 EventLog 6008 None The previous system shutdown at 17:31:41 on ‎2017-‎12-‎29 was unexpected. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-29 17:42:18 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎29T16:42:18.488123800Z. Information 2017-12-29 12:00:00 EventLog 6013 None The system uptime is 60733 seconds. Information 2017-12-29 09:02:22 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PS-Microsoft.RemoteDesktop Information 2017-12-29 09:02:16 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PS-Microsoft.RemoteDesktop Information 2017-12-29 09:02:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.RemoteDesktop_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-29 09:02:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.RemoteDesktop_10.1.1014.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-29 09:01:58 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-29 09:00:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-29 08:58:57 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-29 08:58:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-29 08:58:34 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Warning 2017-12-29 08:58:30 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-29 08:58:28 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-29 08:58:28 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎28T20:54:37.193787800Z Wake Time: ‎2017‎-‎12‎-‎29T07:58:26.134343500Z Wake Source: Unknown" Warning 2017-12-29 08:58:26 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-29 08:58:26 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-29 08:58:26 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-29 08:58:26 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-29 08:58:26 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-29 08:58:26 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-29 08:58:26 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2017-12-29 08:58:26 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-29 08:58:24 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎29T07:58:24.500000000Z from ‎2017‎-‎12‎-‎28T20:54:39.429372900Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-28 21:54:39 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-28 21:54:38 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-28 21:54:37 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-28 21:54:36 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-28 21:54:22 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-28 21:54:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-28 21:31:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-28 20:27:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 20:09:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 19:52:52 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 19:35:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 19:18:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 19:18:28 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T18:18:28.504000000Z from ‎2017‎-‎12‎-‎28T18:18:28.463762200Z. Change Reason: An application or system component changed the time." Information 2017-12-28 19:12:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-28 19:10:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 19:10:45 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-28 19:10:44 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-28 19:08:39 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-28 19:08:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-28 19:08:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-28 19:08:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 19:08:14 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T18:08:14.576000000Z from ‎2017‎-‎12‎-‎28T18:08:14.740221400Z. Change Reason: An application or system component changed the time." Error 2017-12-28 19:08:02 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-28 19:08:01 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-28 19:07:59 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-28 19:07:57 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-28 19:07:57 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-28 19:07:57 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-28 19:07:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:57 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:57 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:57 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:56 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:55 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-28 19:07:54 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-28 19:07:51 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-28 19:07:51 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-28 19:07:51 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-28 19:07:50 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-28 19:07:50 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-28 19:07:50 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-28 19:07:50 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-28 19:07:50 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-28 19:07:50 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-28 19:07:50 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-28 19:07:50 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-28 19:07:50 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-28 19:07:49 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:49 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:57 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-28 19:07:49 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-28 19:07:48 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:48 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-28 19:07:47 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎28T18:07:47.488218600Z. Information 2017-12-28 19:07:34 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎28T18:07:34.367474200Z. Information 2017-12-28 19:07:33 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-28 19:07:29 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-28 19:07:29 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-28 19:07:56 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-28 19:07:56 EventLog 6005 None The Event log service was started. Information 2017-12-28 19:07:56 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-28 19:07:29 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-28 19:07:29 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-28 19:07:29 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-28 19:07:28 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-28 19:07:28 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-28 19:07:28 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-28 19:07:28 EventLog 6006 None The Event log service was stopped. Information 2017-12-28 19:07:25 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-28 19:07:23 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-28 19:07:21 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-28 18:17:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-28 18:04:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 17:47:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 17:30:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 17:13:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 16:56:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 16:56:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T15:56:02.670000000Z from ‎2017‎-‎12‎-‎28T15:56:02.638903300Z. Change Reason: An application or system component changed the time." Information 2017-12-28 16:48:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-28 16:48:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 16:48:07 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-28 16:48:05 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-28 16:46:32 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-28 16:46:04 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-28 16:45:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 16:45:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T15:45:54.232000000Z from ‎2017‎-‎12‎-‎28T15:45:53.199425600Z. Change Reason: An application or system component changed the time." Error 2017-12-28 16:45:41 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-28 16:45:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-28 16:45:34 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-28 16:45:34 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-28 16:45:33 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-28 16:45:29 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-28 16:45:29 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-28 16:45:29 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-28 16:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:26 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-28 16:45:26 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-28 16:45:24 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-28 16:45:22 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-28 16:45:22 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-28 16:45:21 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-28 16:45:21 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-28 16:45:21 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-28 16:45:21 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-28 16:45:21 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-28 16:45:21 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-28 16:45:21 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-28 16:45:21 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-28 16:45:21 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-28 16:45:21 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-28 16:45:21 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:20 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:20 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:20 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:20 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-28 16:45:19 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 16:45:29 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-28 16:45:29 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-28 16:45:29 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-28 16:45:29 EventLog 6005 None The Event log service was started. Information 2017-12-28 16:45:29 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-28 16:45:29 EventLog 6008 None The previous system shutdown at 16:39:38 on ‎2017-‎12-‎28 was unexpected. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-28 16:45:18 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎28T15:45:18.487841600Z. Information 2017-12-28 15:58:39 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 15:41:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 15:31:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-28 15:24:31 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 15:07:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 14:50:07 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 14:50:06 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T13:50:06.873000000Z from ‎2017‎-‎12‎-‎28T13:50:06.845054400Z. Change Reason: An application or system component changed the time." Information 2017-12-28 14:45:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-28 14:43:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2017-12-28 14:42:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 14:42:27 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-28 14:42:26 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-28 14:40:25 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-28 14:40:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 14:40:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-28 14:40:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 14:39:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T13:39:54.992000000Z from ‎2017‎-‎12‎-‎28T13:39:53.735560100Z. Change Reason: An application or system component changed the time." Error 2017-12-28 14:39:43 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-28 14:39:41 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-28 14:39:39 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-28 14:39:37 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:37 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:37 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:37 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:37 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:37 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-28 14:39:37 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-28 14:39:37 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-28 14:39:35 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-28 14:39:34 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-28 14:39:31 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-28 14:39:31 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-28 14:39:31 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-28 14:39:30 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-28 14:39:30 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-28 14:39:30 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-28 14:39:30 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-28 14:39:30 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-28 14:39:30 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-28 14:39:30 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-28 14:39:30 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-28 14:39:30 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-28 14:39:30 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:29 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:29 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:29 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:29 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-28 14:39:28 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:28 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-28 14:39:27 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎28T13:39:27.488087300Z. Information 2017-12-28 14:39:14 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎28T13:39:14.647701300Z. Information 2017-12-28 14:39:13 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-28 14:39:37 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-28 14:39:09 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-28 14:39:09 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-28 14:39:09 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-28 14:39:09 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-28 14:39:09 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-28 14:39:36 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-28 14:39:36 EventLog 6005 None The Event log service was started. Information 2017-12-28 14:39:36 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-28 14:39:08 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-28 14:39:08 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-28 14:39:08 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-28 14:39:09 EventLog 6006 None The Event log service was stopped. Information 2017-12-28 14:39:06 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-28 12:00:00 EventLog 6013 None The system uptime is 65682 seconds. Information 2017-12-28 08:35:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 08:18:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 08:11:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-28 08:02:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-28 08:01:36 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-28 08:01:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-28 08:01:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-28 08:01:07 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-28 08:01:06 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-28 08:01:05 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎27T17:19:13.924982500Z Wake Time: ‎2017‎-‎12‎-‎28T07:01:03.430842500Z Wake Source: Unknown" Warning 2017-12-28 08:01:03 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-28 08:01:03 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-28 08:01:03 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-28 08:01:03 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-28 08:01:03 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-28 08:01:03 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-28 08:01:03 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2017-12-28 08:01:02 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-28 08:01:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎28T07:01:01.500000000Z from ‎2017‎-‎12‎-‎27T17:19:15.956137400Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-27 18:19:15 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-27 18:19:15 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-27 18:19:14 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-27 18:19:13 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-27 18:19:09 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-27 18:19:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-27 18:13:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 17:56:06 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 17:56:06 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎27T16:56:06.422000000Z from ‎2017‎-‎12‎-‎27T16:56:06.379705600Z. Change Reason: An application or system component changed the time." Error 2017-12-27 17:47:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-27 17:48:00 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-27 17:47:58 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-27 17:45:57 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-27 17:45:55 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-27 17:45:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-27 17:45:44 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 17:45:42 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎27T16:45:42.456000000Z from ‎2017‎-‎12‎-‎27T16:45:41.982955600Z. Change Reason: An application or system component changed the time." Error 2017-12-27 17:45:35 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-27 17:45:34 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-27 17:45:33 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-27 17:45:28 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-27 17:45:28 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-27 17:45:28 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-27 17:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:29 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-27 17:45:26 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-27 17:45:25 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-27 17:45:24 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-27 17:45:21 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-27 17:45:21 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-27 17:45:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-27 17:45:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-27 17:45:20 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-27 17:45:20 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-27 17:45:20 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-27 17:45:20 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-27 17:45:20 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-27 17:45:20 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-27 17:45:20 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-27 17:45:20 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-27 17:45:20 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:19 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:19 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:19 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-27 17:45:18 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:18 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-27 17:45:28 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-27 17:45:28 EventLog 6005 None The Event log service was started. Information 2017-12-27 17:45:28 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-27 17:45:28 EventLog 6008 None The previous system shutdown at 17:24:20 on ‎2017-‎12-‎27 was unexpected. Information 2017-12-27 17:45:17 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎27T16:45:17.488249900Z. Information 2017-12-27 17:23:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 17:06:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 16:55:30 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-27 16:49:17 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 16:32:13 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 16:15:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-27 16:14:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 16:14:53 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎27T15:14:53.817000000Z from ‎2017‎-‎12‎-‎27T15:14:53.782437200Z. Change Reason: An application or system component changed the time." Information 2017-12-27 16:13:23 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-27 16:08:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-27 16:06:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-27 16:06:57 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-27 16:06:56 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-27 16:04:55 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-27 16:04:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 16:04:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎27T15:04:41.148000000Z from ‎2017‎-‎12‎-‎27T15:04:40.313927200Z. Change Reason: An application or system component changed the time." Error 2017-12-27 16:04:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-27 16:04:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-27 16:04:26 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-27 16:04:24 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-27 16:04:22 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-27 16:04:20 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-27 16:04:20 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-27 16:04:20 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-27 16:04:19 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:19 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:19 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:19 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:19 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:18 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-27 16:04:17 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-27 16:04:14 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-27 16:04:14 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2017-12-27 16:04:14 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-27 16:04:14 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-27 16:04:13 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-27 16:04:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-27 16:04:13 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-27 16:04:13 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-27 16:04:13 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-27 16:04:13 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-27 16:04:13 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-27 16:04:13 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-27 16:04:12 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:12 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:12 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:12 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:12 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-27 16:04:20 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-27 16:04:11 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:11 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-27 16:04:10 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎27T15:04:10.487309100Z. Information 2017-12-27 16:03:57 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎27T15:03:57.740612700Z. Information 2017-12-27 16:03:56 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-27 16:03:53 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-27 16:03:52 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-27 16:03:52 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-27 16:04:19 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-27 16:04:19 EventLog 6005 None The Event log service was started. Information 2017-12-27 16:04:19 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-27 16:03:52 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-27 16:03:52 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-27 16:03:52 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-27 16:03:51 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-27 16:03:51 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-27 16:03:52 EventLog 6006 None The Event log service was stopped. Information 2017-12-27 16:03:49 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-27 16:03:47 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-27 16:03:47 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-27 15:36:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-27 15:26:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 15:11:47 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-27 15:09:46 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-27 15:09:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-27 15:09:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-27 15:09:12 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-27 15:09:11 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎26T23:37:31.932388900Z Wake Time: ‎2017‎-‎12‎-‎27T14:09:09.727777800Z Wake Source: Unknown" Information 2017-12-27 15:09:11 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 2017-12-27 15:09:11 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Warning 2017-12-27 15:09:10 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-27 15:09:10 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-27 15:09:09 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-27 15:09:09 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-27 15:09:09 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-27 15:09:09 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-27 15:09:09 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2017-12-27 15:09:09 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-27 15:09:07 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎27T14:09:07.500000000Z from ‎2017‎-‎12‎-‎26T23:37:34.400805100Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-27 00:37:34 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-27 00:37:33 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-27 15:09:09 EventLog 6013 None The system uptime is 60883 seconds. Information 2017-12-27 00:37:32 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-27 00:37:31 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-27 00:37:29 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-27 00:37:29 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-27 00:37:27 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-27 00:37:23 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-27 00:33:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-27 00:16:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 23:59:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 23:59:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎26T22:59:01.545000000Z from ‎2017‎-‎12‎-‎26T22:59:01.401376400Z. Change Reason: An application or system component changed the time." Information 2017-12-26 22:19:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-26 22:17:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-26 22:17:09 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-26 22:17:08 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-26 22:15:06 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-26 22:14:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-26 22:14:58 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-26 22:14:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 22:14:51 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎26T21:14:51.116000000Z from ‎2017‎-‎12‎-‎26T21:14:50.396215400Z. Change Reason: An application or system component changed the time." Error 2017-12-26 22:14:38 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-26 22:14:38 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-26 22:14:35 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-26 22:14:33 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-26 22:14:33 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-26 22:14:33 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-26 22:14:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:33 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:33 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:33 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:33 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:31 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-26 22:14:30 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-26 22:14:27 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-26 22:14:27 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2017-12-26 22:14:27 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-26 22:14:27 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-26 22:14:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-26 22:14:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-26 22:14:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-26 22:14:26 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-26 22:14:26 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-26 22:14:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-26 22:14:26 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-26 22:14:26 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-26 22:14:26 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:25 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:25 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-26 22:14:24 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 22:14:33 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-26 22:14:23 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎26T21:14:23.488264000Z. Information 2017-12-26 22:14:08 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎26T21:14:08.962058800Z. Information 2017-12-26 22:14:07 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-26 22:14:04 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-26 22:14:32 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-26 22:14:32 EventLog 6005 None The Event log service was started. Information 2017-12-26 22:14:32 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-26 22:14:03 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-26 22:14:03 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-26 22:14:03 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-26 22:14:03 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-26 22:14:03 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-26 22:14:02 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-26 22:14:02 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-26 22:14:03 EventLog 6006 None The Event log service was stopped. Information 2017-12-26 22:14:00 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-26 22:13:48 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-26 22:13:48 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-26 22:13:47 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-26 22:09:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-26 22:04:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 21:47:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 21:30:37 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 21:13:17 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-26 14:57:51 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-26 13:58:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-26 12:37:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-26 12:35:39 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-26 12:35:40 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-26 12:35:39 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-26 12:33:38 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-26 12:33:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-26 12:33:37 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-26 12:33:37 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 12:33:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎26T11:33:32.319000000Z from ‎2017‎-‎12‎-‎26T11:33:31.780996900Z. Change Reason: An application or system component changed the time." Error 2017-12-26 12:33:20 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-26 12:33:19 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-26 12:33:17 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-26 12:33:15 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-26 12:33:15 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-26 12:33:15 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-26 12:33:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:14 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:14 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:14 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:12 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-26 12:33:12 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-26 12:33:10 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-26 12:33:10 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-26 12:33:09 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-26 12:33:09 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-26 12:33:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-26 12:33:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-26 12:33:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-26 12:33:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-26 12:33:08 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-26 12:33:08 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-26 12:33:08 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-26 12:33:07 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-26 12:33:07 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:07 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-26 12:33:15 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-26 12:33:06 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:06 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-26 12:33:05 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎26T11:33:05.488099500Z. Information 2017-12-26 12:32:53 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎26T11:32:53.156236100Z. Information 2017-12-26 12:32:52 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-26 12:32:47 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-26 12:32:47 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-26 12:32:47 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-26 12:32:47 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-26 12:32:47 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-26 12:33:14 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-26 12:33:14 EventLog 6005 None The Event log service was started. Information 2017-12-26 12:33:14 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-26 12:32:47 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-26 12:32:47 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-26 12:32:47 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-26 12:32:47 EventLog 6006 None The Event log service was stopped. Information 2017-12-26 12:32:44 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-26 12:32:37 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-26 12:32:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-26 12:00:00 EventLog 6013 None The system uptime is 5748 seconds. Information 2017-12-26 11:43:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 11:26:16 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 11:09:12 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 10:52:08 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 10:34:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 10:34:47 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎26T09:34:47.898000000Z from ‎2017‎-‎12‎-‎26T09:34:47.872293500Z. Change Reason: An application or system component changed the time." Information 2017-12-26 10:33:29 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-26 10:31:25 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-26 10:27:04 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-26 10:27:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-26 10:27:03 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-26 10:25:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 29 keys and creating 3 modified pages. Information 2017-12-26 10:25:02 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-26 10:24:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-26 10:24:53 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-26 10:24:38 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-26 10:24:36 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎26T09:24:36.649000000Z from ‎2017‎-‎12‎-‎26T09:24:35.609093300Z. Change Reason: An application or system component changed the time." Information 2017-12-26 10:24:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\AppCompat\Programs\Amcache.hve was cleared updating 1596 keys and creating 592 modified pages. Error 2017-12-26 10:24:28 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-26 10:24:27 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-26 10:24:27 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-26 10:24:22 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-26 10:24:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:22 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:22 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:22 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-26 10:24:22 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-26 10:24:22 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:22 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:23 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-26 10:24:20 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-26 10:24:19 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-26 10:24:17 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-26 10:24:15 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-26 10:24:15 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-26 10:24:15 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-26 10:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-26 10:24:14 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-26 10:24:14 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-26 10:24:14 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-26 10:24:14 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-26 10:24:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-26 10:24:14 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-26 10:24:14 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-26 10:24:14 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-26 10:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:13 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-26 10:24:12 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:12 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-26 10:24:22 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-26 10:24:21 EventLog 6005 None The Event log service was started. Information 2017-12-26 10:24:21 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-26 10:24:21 EventLog 6008 None The previous system shutdown at 21:33:26 on ‎2017-‎12-‎25 was unexpected. Information 2017-12-26 10:24:11 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎26T09:24:11.488224300Z. Information 2017-12-25 20:52:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 20:35:23 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 20:18:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 20:01:15 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 19:43:55 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 19:43:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎25T18:43:54.906000000Z from ‎2017‎-‎12‎-‎25T18:43:54.872489400Z. Change Reason: An application or system component changed the time." Information 2017-12-25 19:38:24 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-25 19:36:24 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-25 19:36:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-25 19:36:22 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-25 19:34:21 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-25 19:33:50 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-25 19:33:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-25 19:33:45 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-25 19:33:43 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎25T18:33:43.984000000Z from ‎2017‎-‎12‎-‎25T18:33:43.590227300Z. Change Reason: An application or system component changed the time." Error 2017-12-25 19:33:31 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-25 19:33:30 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-25 19:33:28 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-25 19:33:26 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-25 19:33:27 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-25 19:33:26 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-25 19:33:26 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-25 19:33:26 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:26 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:26 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:25 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:25 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:24 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-25 19:33:23 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-25 19:33:20 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-25 19:33:20 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2017-12-25 19:33:20 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-25 19:33:20 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-25 19:33:19 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-25 19:33:19 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-25 19:33:19 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-25 19:33:19 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-25 19:33:19 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-25 19:33:19 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-25 19:33:19 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-25 19:33:19 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-25 19:33:18 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:18 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:18 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:18 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:18 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-25 19:33:17 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:17 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-25 19:33:16 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎25T18:33:16.487942100Z. Information 2017-12-25 19:33:04 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎25T18:33:04.098239800Z. Information 2017-12-25 19:33:02 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-25 19:32:58 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-25 19:32:58 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-25 19:32:58 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-25 19:33:25 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-25 19:33:25 EventLog 6005 None The Event log service was started. Information 2017-12-25 19:33:25 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-25 19:32:58 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-25 19:32:58 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-25 19:32:58 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-25 19:32:58 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-25 19:32:58 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-25 19:32:58 EventLog 6006 None The Event log service was stopped. Information 2017-12-25 19:32:55 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-25 19:32:53 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-25 19:20:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 19:03:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 18:54:16 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-25 18:46:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 18:46:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎25T17:46:01.205000000Z from ‎2017‎-‎12‎-‎25T17:46:01.176919100Z. Change Reason: An application or system component changed the time." Information 2017-12-25 18:40:04 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-25 18:38:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-25 18:38:05 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-25 18:38:04 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-25 18:37:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. Information 2017-12-25 18:36:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. Information 2017-12-25 18:36:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 36 keys and creating 8 modified pages. Information 2017-12-25 18:36:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat was cleared updating 86 keys and creating 10 modified pages. Information 2017-12-25 18:36:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. Error 2017-12-25 18:36:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-25 18:36:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-25 18:36:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 7714 keys and creating 768 modified pages. Information 2017-12-25 18:36:04 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-25 18:36:01 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-25 18:35:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-25 18:35:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎25T17:35:49.058000000Z from ‎2017‎-‎12‎-‎25T17:35:47.908072000Z. Change Reason: An application or system component changed the time." Error 2017-12-25 18:35:40 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-25 18:35:39 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-25 18:35:36 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-25 18:35:35 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-25 18:35:35 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-25 18:35:35 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-25 18:35:34 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:34 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:34 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:34 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:34 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 728 keys and creating 40 modified pages. Information 2017-12-25 18:35:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 213 keys and creating 51 modified pages. Information 2017-12-25 18:35:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 707 keys and creating 37 modified pages. Information 2017-12-25 18:35:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 89 keys and creating 7 modified pages. Information 2017-12-25 18:35:33 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-25 18:35:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 106 keys and creating 5 modified pages. Information 2017-12-25 18:35:32 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-25 18:35:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 635 keys and creating 61 modified pages. Information 2017-12-25 18:35:30 Microsoft-Windows-Kernel-General 15 None Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 76005376 bytes and an ending size of 74240000 bytes. Information 2017-12-25 18:35:26 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-25 18:35:26 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2017-12-25 18:35:26 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-25 18:35:26 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-25 18:35:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-25 18:35:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-25 18:35:25 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-25 18:35:25 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-25 18:35:25 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-25 18:35:25 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-25 18:35:25 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-25 18:35:25 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-25 18:35:25 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:24 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:24 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:24 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-25 18:35:23 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:23 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-25 18:35:22 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎25T17:35:22.488250500Z. Information 2017-12-25 18:35:09 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎25T17:35:09.212824700Z. Information 2017-12-25 18:35:07 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-25 18:35:03 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-25 18:35:02 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-25 18:35:34 EventLog 6013 None The system uptime is 12 seconds. Information 2017-12-25 18:35:34 EventLog 6005 None The Event log service was started. Information 2017-12-25 18:35:34 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-25 18:35:02 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-25 18:35:02 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-25 18:35:02 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-25 18:35:02 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-25 18:35:02 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-25 18:35:02 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-25 18:35:02 EventLog 6006 None The Event log service was stopped. Error 2017-12-25 18:34:59 Service Control Manager 7043 None The Windows Modules Installer service did not shut down properly after receiving a preshutdown control. Information 2017-12-25 18:34:26 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-25 18:32:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-25 18:24:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. Information 2017-12-25 17:47:05 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2017-12-25 17:46:58 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from auto start to demand start. Information 2017-12-25 17:44:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT was cleared updating 15958 keys and creating 2707 modified pages. Information 2017-12-25 17:44:28 Microsoft-Windows-Kernel-General 15 None Hive \??\C:\Windows\System32\config\COMPONENTS was reorganized with a starting size of 59678720 bytes and an ending size of 53891072 bytes. Information 2017-12-25 17:44:09 Service Control Manager 7040 None The start type of the Windows Modules Installer service was changed from demand start to auto start. Information 2017-12-25 17:44:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 15 keys and creating 3 modified pages. Information 2017-12-25 17:43:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-25 14:59:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-25 14:57:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-25 14:43:35 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 85 keys and creating 11 modified pages. Information 2017-12-25 14:39:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 15 keys and creating 2 modified pages. Information 2017-12-25 14:23:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 333 keys and creating 30 modified pages. Information 2017-12-25 12:00:00 EventLog 6013 None The system uptime is 122973 seconds. Information 2017-12-25 11:04:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-25 11:01:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-25 10:44:28 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-25 10:42:29 Microsoft-Windows-Kernel-General 16 None The access history in hive \SystemRoot\System32\config\DRIVERS was cleared updating 31223 keys and creating 1361 modified pages. Information 2017-12-25 10:42:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-25 10:40:57 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-25 10:39:36 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-25 10:39:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-25 10:39:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-25 10:39:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\ntuser.dat was cleared updating 3705 keys and creating 306 modified pages. Information 2017-12-25 10:39:05 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-25 10:39:05 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎24T12:30:04.285257800Z Wake Time: ‎2017‎-‎12‎-‎25T09:39:03.533213900Z Wake Source: Unknown" Warning 2017-12-25 10:39:05 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Warning 2017-12-25 10:39:03 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-25 10:39:03 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-25 10:39:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 108 keys and creating 5 modified pages. Information 2017-12-25 10:39:03 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-25 10:39:03 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-25 10:39:03 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-25 10:39:03 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-25 10:39:03 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2017-12-25 10:39:03 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-25 10:39:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎25T09:39:02.500000000Z from ‎2017‎-‎12‎-‎24T12:30:07.628898100Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-24 13:30:07 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-24 13:30:07 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-24 13:30:06 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-24 13:30:03 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-24 13:29:55 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-24 12:33:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 12:16:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 12:01:25 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-24 12:00:00 EventLog 6013 None The system uptime is 36572 seconds. Information 2017-12-24 11:59:25 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-24 11:59:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-24 11:59:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-24 11:58:56 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-24 11:58:55 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎24T01:20:56.388683600Z Wake Time: ‎2017‎-‎12‎-‎24T10:58:53.453394400Z Wake Source: Unknown" Warning 2017-12-24 11:58:55 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-24 11:58:55 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 2017-12-24 11:58:54 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-24 11:58:54 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Warning 2017-12-24 11:58:53 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-24 11:58:53 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-24 11:58:53 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-24 11:58:53 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-24 11:58:53 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-24 11:58:53 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-24 11:58:52 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎24T10:58:52.500000000Z from ‎2017‎-‎12‎-‎24T01:20:58.068627200Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-24 02:20:58 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-24 02:20:57 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-24 02:20:56 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-24 02:20:55 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-24 02:20:51 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-24 02:20:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-24 02:18:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 02:01:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 02:01:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎24T01:01:00.375000000Z from ‎2017‎-‎12‎-‎24T01:01:00.337247500Z. Change Reason: An application or system component changed the time." Information 2017-12-24 01:55:13 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-24 01:53:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-24 01:53:13 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-24 01:53:11 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-24 01:51:09 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-24 01:51:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-24 01:50:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-24 01:50:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 01:50:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎24T00:50:50.145000000Z from ‎2017‎-‎12‎-‎24T00:50:51.059196600Z. Change Reason: An application or system component changed the time." Error 2017-12-24 01:50:43 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-24 01:50:42 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-24 01:50:40 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-24 01:50:38 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-24 01:50:38 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-24 01:50:38 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-24 01:50:37 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:37 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:37 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:37 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:37 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:38 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-24 01:50:36 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-24 01:50:35 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-24 01:50:32 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-24 01:50:32 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2017-12-24 01:50:32 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-24 01:50:32 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-24 01:50:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-24 01:50:31 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-24 01:50:31 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-24 01:50:31 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-24 01:50:31 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-24 01:50:31 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-24 01:50:31 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-24 01:50:31 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-24 01:50:31 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:30 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:30 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:30 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:30 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-24 01:50:29 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:29 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-24 01:50:28 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎24T00:50:28.487677700Z. Information 2017-12-24 01:50:14 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎24T00:50:14.621194100Z. Information 2017-12-24 01:50:13 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-24 01:50:09 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-24 01:50:37 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-24 01:50:37 EventLog 6005 None The Event log service was started. Information 2017-12-24 01:50:37 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-24 01:50:09 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-24 01:50:09 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-24 01:50:09 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-24 01:50:09 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-24 01:50:09 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-24 01:50:08 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-24 01:50:08 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-24 01:50:09 EventLog 6006 None The Event log service was stopped. Information 2017-12-24 01:50:06 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-24 01:49:54 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-24 01:07:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 00:50:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 00:33:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-24 00:30:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-24 00:16:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 23:59:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 23:59:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T22:59:01.259000000Z from ‎2017‎-‎12‎-‎23T22:59:00.895873600Z. Change Reason: An application or system component changed the time." Information 2017-12-23 23:50:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-23 23:18:22 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\ActiproSoftwareLLC.562882FEEB491_24pqs290vpjk0\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-23 20:20:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 20:03:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 19:46:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 19:29:18 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 19:11:58 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 19:11:58 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T18:11:58.180000000Z from ‎2017‎-‎12‎-‎23T18:11:58.139903000Z. Change Reason: An application or system component changed the time." Information 2017-12-23 19:06:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-23 19:04:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 19:04:14 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-23 19:04:13 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-23 19:02:11 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-23 19:01:50 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-23 19:01:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 19:01:48 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 19:01:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T18:01:46.159000000Z from ‎2017‎-‎12‎-‎23T18:01:45.145221000Z. Change Reason: An application or system component changed the time." Error 2017-12-23 19:01:33 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-23 19:01:32 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-23 19:01:30 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-23 19:01:29 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-23 19:01:28 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-23 19:01:28 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-23 19:01:28 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-23 19:01:27 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:27 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:27 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:27 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:27 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:26 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-23 19:01:25 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-23 19:01:22 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-23 19:01:22 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Warning 2017-12-23 19:01:22 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 19:01:22 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 19:01:21 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 19:01:21 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 19:01:21 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 19:01:21 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-23 19:01:21 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 19:01:21 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-23 19:01:21 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-23 19:01:21 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-23 19:01:21 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:20 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:20 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:20 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:20 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-23 19:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-23 19:01:18 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎23T18:01:18.488098200Z. Information 2017-12-23 19:01:06 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎23T18:01:06.131033700Z. Information 2017-12-23 19:01:05 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-23 19:01:01 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-23 19:01:27 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-23 19:01:27 EventLog 6005 None The Event log service was started. Information 2017-12-23 19:01:27 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-23 19:01:00 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 19:01:00 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 19:01:00 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 19:01:00 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 19:01:00 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-23 19:01:00 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-23 19:01:00 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-23 19:01:00 EventLog 6006 None The Event log service was stopped. Information 2017-12-23 19:00:57 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-23 19:00:56 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-23 19:00:56 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-23 19:00:45 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-23 12:00:00 EventLog 6013 None The system uptime is 5958 seconds. Information 2017-12-23 11:42:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 11:25:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 11:08:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 10:51:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 10:34:25 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-23 10:34:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 10:34:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 10:34:01 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-23 10:34:00 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎23T09:33:19.465680700Z Wake Time: ‎2017‎-‎12‎-‎23T09:33:58.926560500Z Wake Source: Unknown" Warning 2017-12-23 10:34:00 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Warning 2017-12-23 10:33:59 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 10:33:59 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 10:33:58 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 10:33:58 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 10:33:58 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-23 10:33:58 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 10:33:58 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Warning 2017-12-23 10:33:58 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-23 10:33:57 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T09:33:57.500000000Z from ‎2017‎-‎12‎-‎23T09:33:21.187235000Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-23 10:33:21 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-23 10:33:20 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-23 10:33:19 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-23 10:33:18 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-23 10:33:12 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-23 10:33:12 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-23 10:33:10 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-23 10:31:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 10:31:33 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T09:31:33.181000000Z from ‎2017‎-‎12‎-‎23T09:31:33.147071500Z. Change Reason: An application or system component changed the time." Information 2017-12-23 10:25:28 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-23 10:23:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 10:23:28 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-23 10:23:27 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Error 2017-12-23 10:22:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 10:21:26 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-23 10:21:20 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 10:21:18 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T09:21:18.456000000Z from ‎2017‎-‎12‎-‎23T09:21:17.482302700Z. Change Reason: An application or system component changed the time." Error 2017-12-23 10:21:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 10:20:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 10:20:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 10:20:55 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-23 10:20:54 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-23 10:20:52 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-23 10:20:50 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-23 10:20:50 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-23 10:20:50 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-23 10:20:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:49 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:49 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:49 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:49 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:48 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-23 10:20:47 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-23 10:20:44 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-23 10:20:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 10:20:44 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-23 10:20:44 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 10:20:43 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-23 10:20:43 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 10:20:43 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 10:20:43 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-23 10:20:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 10:20:43 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 10:20:50 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-23 10:20:43 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-23 10:20:43 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-23 10:20:43 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:42 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:42 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:42 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:42 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-23 10:20:41 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:41 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-23 10:20:40 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎23T09:20:40.488299800Z. Information 2017-12-23 10:20:28 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎23T09:20:28.096216600Z. Information 2017-12-23 10:20:26 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-23 10:20:22 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-23 10:20:21 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 10:20:21 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 10:20:21 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 10:20:21 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 10:20:50 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-23 10:20:50 EventLog 6005 None The Event log service was started. Information 2017-12-23 10:20:50 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-23 10:20:21 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-23 10:20:21 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-23 10:20:21 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-23 10:20:21 EventLog 6006 None The Event log service was stopped. Information 2017-12-23 10:20:18 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-23 10:20:17 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-23 10:20:17 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-23 10:20:10 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-23 09:43:03 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-23 09:41:00 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-23 09:40:37 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 09:23:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 09:06:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 08:51:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-23 08:49:34 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-23 08:49:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 08:49:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 08:49:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-23 08:49:07 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎23T01:42:25.270190400Z Wake Time: ‎2017‎-‎12‎-‎23T07:49:05.672096700Z Wake Source: Unknown" Warning 2017-12-23 08:49:06 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 08:49:06 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 08:49:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 08:49:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 08:49:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-23 08:49:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 08:49:05 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-23 08:49:05 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 2017-12-23 08:49:05 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-23 08:49:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T07:49:04.500000000Z from ‎2017‎-‎12‎-‎23T01:42:26.907910600Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-23 02:42:26 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Warning 2017-12-23 02:42:26 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-23 02:42:25 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-23 02:42:24 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-23 02:42:21 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-23 02:42:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-23 02:40:13 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 02:40:13 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T01:40:13.815000000Z from ‎2017‎-‎12‎-‎23T01:40:13.777262600Z. Change Reason: An application or system component changed the time." Error 2017-12-23 02:32:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 02:32:03 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-23 02:32:03 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-23 02:30:03 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-23 02:29:52 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 02:29:51 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T01:29:51.100000000Z from ‎2017‎-‎12‎-‎23T01:29:51.329426600Z. Change Reason: An application or system component changed the time." Error 2017-12-23 02:29:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 02:29:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 02:29:40 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-23 02:29:39 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-23 02:29:37 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-23 02:29:35 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-23 02:29:35 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-23 02:29:35 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-23 02:29:35 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:35 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:35 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:35 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:34 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:33 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-23 02:29:32 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-23 02:29:29 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-23 02:29:29 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 02:29:29 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-23 02:29:29 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 02:29:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 02:29:28 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 02:29:28 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 02:29:28 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-23 02:29:28 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-23 02:29:28 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 02:29:28 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-23 02:29:28 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-23 02:29:27 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:27 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:27 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:27 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:27 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-23 02:29:35 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-23 02:29:35 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-23 02:29:26 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:26 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-23 02:29:25 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎23T01:29:25.488081600Z. Information 2017-12-23 02:29:12 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎23T01:29:12.825885800Z. Information 2017-12-23 02:29:11 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-23 02:29:07 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-23 02:29:07 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 02:29:07 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-23 02:29:34 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-23 02:29:34 EventLog 6005 None The Event log service was started. Information 2017-12-23 02:29:34 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-23 02:29:07 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 02:29:07 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 02:29:07 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 02:29:06 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-23 02:29:06 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-23 02:29:07 EventLog 6006 None The Event log service was stopped. Information 2017-12-23 02:29:04 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-23 02:29:04 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Information 2017-12-23 02:28:02 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-23 02:27:30 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-23 02:27:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 02:27:29 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-23 02:25:28 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-23 02:25:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 02:25:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 02:25:15 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 02:25:12 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T01:25:12.363000000Z from ‎2017‎-‎12‎-‎23T01:25:11.412726700Z. Change Reason: An application or system component changed the time." Error 2017-12-23 02:25:04 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-23 02:25:02 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-23 02:25:00 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-23 02:24:58 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-23 02:24:58 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-23 02:24:58 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-23 02:24:58 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:58 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:58 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:58 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:57 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:56 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-23 02:24:55 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-23 02:24:52 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-23 02:24:52 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 02:24:52 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-23 02:24:52 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 02:24:51 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 02:24:51 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 02:24:51 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-23 02:24:51 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-23 02:24:51 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-23 02:24:51 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-23 02:24:51 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-23 02:24:51 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-23 02:24:51 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:50 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:50 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:50 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:50 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-23 02:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-23 02:24:48 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎23T01:24:48.488152600Z. Information 2017-12-23 02:24:35 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎23T01:24:35.581831800Z. Information 2017-12-23 02:24:58 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-23 02:24:33 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-23 02:24:30 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-23 02:24:58 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-23 02:24:58 EventLog 6005 None The Event log service was started. Information 2017-12-23 02:24:58 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-23 02:24:29 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 02:24:29 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 02:24:29 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-23 02:24:29 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-23 02:24:29 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-23 02:24:29 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-23 02:24:29 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-23 02:24:29 EventLog 6006 None The Event log service was stopped. Information 2017-12-23 02:24:26 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-23 02:24:24 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-23 02:24:24 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-23 01:48:40 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-23 01:16:44 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2017-12-23 01:14:18 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 01:14:04 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-23 01:13:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-23 01:13:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-23 01:13:39 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎23T00:12:52.002256000Z Wake Time: ‎2017‎-‎12‎-‎23T00:13:37.172003200Z Wake Source: Unknown" Information 2017-12-23 01:13:39 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Warning 2017-12-23 01:13:37 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-23 01:13:37 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-23 01:13:37 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-23 01:13:37 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-23 01:13:37 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-23 01:13:37 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-23 01:13:37 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-23 01:13:35 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎23T00:13:35.500000000Z from ‎2017‎-‎12‎-‎23T00:12:56.758354000Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-23 01:12:56 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2017-12-23 01:12:54 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-23 01:12:51 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-23 01:12:43 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-23 01:12:43 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-23 01:12:40 User32 1074 None "The process C:\Windows\Explorer.EXE (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-23 01:11:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 00:54:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 00:37:23 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 00:20:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 00:02:59 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-23 00:02:36 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T23:02:36.935000000Z from ‎2017‎-‎12‎-‎22T23:02:36.384981700Z. Change Reason: An application or system component changed the time." Error 2017-12-22 23:58:48 Microsoft-Windows-DistributedCOM 10010 None The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout. Error 2017-12-22 23:29:30 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 23:29:23 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-22 23:28:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 23:28:55 Microsoft-Windows-GroupPolicy 1500 None The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy. Information 2017-12-22 23:28:55 Microsoft-Windows-GroupPolicy 1502 None The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied. Information 2017-12-22 23:27:09 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2017-12-22 23:21:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 17:52:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 17:34:57 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 17:17:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 17:00:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 16:46:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-22 16:43:28 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 16:43:28 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T15:43:28.830000000Z from ‎2017‎-‎12‎-‎22T15:43:28.475746300Z. Change Reason: An application or system component changed the time." Warning 2017-12-22 16:36:10 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:36:08 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name geo-prod.do.dsp.mp.microsoft.com timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:36:03 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:35:34 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Error 2017-12-22 16:35:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 16:35:17 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 16:35:16 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Warning 2017-12-22 16:35:00 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:34:42 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:34:11 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name wpad timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:33:34 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name DESKTOP-57M3LFG.lan timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:33:33 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name setup.update.avg.com timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:33:31 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name win1710.ipv6.microsoft.com. timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:33:29 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name zas-api.avg.com timed out after none of the configured DNS servers responded. Warning 2017-12-22 16:33:25 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name www.google.com timed out after none of the configured DNS servers responded. Information 2017-12-22 16:33:15 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-22 16:33:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 16:32:52 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 16:32:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 16:32:49 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 16:32:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 16:32:45 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 16:32:42 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 16:32:42 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 16:32:42 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 16:32:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:41 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:41 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:41 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:41 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:39 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 16:32:39 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 16:32:37 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 16:32:35 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 16:32:35 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 16:32:35 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 16:32:34 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 16:32:34 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 16:32:34 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 16:32:34 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 16:32:34 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 16:32:34 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 16:32:34 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 16:32:33 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 16:32:33 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 16:32:33 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:33 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:42 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 16:32:33 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 16:32:31 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 16:32:41 EventLog 6013 None The system uptime is 11 seconds. Information 2017-12-22 16:32:41 EventLog 6005 None The Event log service was started. Information 2017-12-22 16:32:41 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 16:32:41 EventLog 6008 None The previous system shutdown at 16:30:16 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 16:32:30 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T15:32:30.488218500Z. Information 2017-12-22 16:30:55 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 16:30:55 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 16:30:53 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T15:30:53.695000000Z from ‎2017‎-‎12‎-‎22T15:30:54.538305900Z. Change Reason: An application or system component changed the time." Error 2017-12-22 16:30:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 16:30:25 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 16:30:23 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 16:30:20 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 16:30:20 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 16:30:16 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 16:30:16 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 16:30:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 16:30:16 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:16 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:16 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:16 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:15 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:14 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 16:30:13 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 16:30:11 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 16:30:09 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 16:30:09 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 16:30:09 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 16:30:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 16:30:08 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 16:30:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 16:30:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 16:30:08 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 16:30:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 16:30:08 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 16:30:08 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 16:30:08 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 16:30:08 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:16 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 16:30:07 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 16:30:06 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:06 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 16:30:16 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 16:30:16 EventLog 6005 None The Event log service was started. Information 2017-12-22 16:30:16 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 16:30:16 EventLog 6008 None The previous system shutdown at 14:16:34 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 16:30:05 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T15:30:05.488096900Z. Error 2017-12-22 14:19:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 14:19:14 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 14:19:13 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 14:17:10 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 14:17:03 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 14:16:59 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T13:16:59.464000000Z from ‎2017‎-‎12‎-‎22T13:16:58.711875400Z. Change Reason: An application or system component changed the time." Error 2017-12-22 14:16:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 14:16:43 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 14:16:40 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 14:16:39 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 14:16:38 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 14:16:34 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 14:16:34 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 14:16:34 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 14:16:34 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:34 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:34 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:34 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:34 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:32 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 14:16:32 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 14:16:30 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 14:16:28 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 14:16:27 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 14:16:27 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 14:16:27 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 14:16:27 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 14:16:27 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 14:16:27 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 14:16:27 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 14:16:27 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 14:16:27 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 14:16:26 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 14:16:26 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 14:16:26 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:26 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:26 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:26 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:25 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 14:16:34 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 14:16:24 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 14:16:23 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T13:16:23.488279300Z. Information 2017-12-22 14:16:34 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 14:16:34 EventLog 6005 None The Event log service was started. Information 2017-12-22 14:16:34 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 14:16:34 EventLog 6008 None The previous system shutdown at 14:11:03 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 14:13:40 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-22 14:13:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 14:13:38 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 14:11:36 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 14:11:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 14:11:31 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T13:11:31.742000000Z from ‎2017‎-‎12‎-‎22T13:11:32.556897900Z. Change Reason: An application or system component changed the time." Error 2017-12-22 14:11:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 14:11:13 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 14:11:09 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 14:11:08 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 14:11:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 14:11:03 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:11:03 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:11:03 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 14:11:03 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:11:03 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:11:03 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 14:11:03 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 14:11:03 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:11:04 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 14:11:01 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 14:11:01 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 14:10:59 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 14:10:59 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 14:10:56 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 14:10:56 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 14:10:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 14:10:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 14:10:55 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 14:10:55 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 14:10:55 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 14:10:55 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 14:10:55 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 14:10:55 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 14:10:55 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 14:10:55 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:10:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:10:54 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:10:54 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:10:54 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 14:10:53 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:10:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 14:11:03 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 14:11:03 EventLog 6005 None The Event log service was started. Information 2017-12-22 14:11:03 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 14:11:03 EventLog 6008 None The previous system shutdown at 14:00:33 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 14:10:52 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T13:10:52.488299200Z. Error 2017-12-22 14:05:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 14:03:32 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-22 14:03:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 14:03:31 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 14:01:10 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 14:01:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-22 14:00:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 14:00:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 14:00:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T13:00:54.263000000Z from ‎2017‎-‎12‎-‎22T13:00:53.751449400Z. Change Reason: An application or system component changed the time." Error 2017-12-22 14:00:40 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 14:00:38 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 14:00:37 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 14:00:34 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 14:00:34 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 14:00:34 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 14:00:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:33 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:33 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:33 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:33 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:34 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 14:00:31 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 14:00:31 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 14:00:29 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 14:00:26 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 14:00:26 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 14:00:26 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 14:00:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 14:00:25 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 14:00:25 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 14:00:25 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 14:00:25 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 14:00:25 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 14:00:25 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 14:00:25 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 14:00:25 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 14:00:25 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:24 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:24 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:24 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 14:00:23 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:23 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 14:00:33 EventLog 6013 None The system uptime is 11 seconds. Information 2017-12-22 14:00:33 EventLog 6005 None The Event log service was started. Information 2017-12-22 14:00:33 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 14:00:33 EventLog 6008 None The previous system shutdown at 13:44:46 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 14:00:22 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T13:00:22.487956800Z. Information 2017-12-22 13:55:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-22 13:55:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 13:55:41 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T12:55:41.813000000Z from ‎2017‎-‎12‎-‎22T12:55:41.802184600Z. Change Reason: An application or system component changed the time." Information 2017-12-22 13:55:40 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-22 13:50:52 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-22 13:47:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 13:47:28 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 13:47:27 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 13:45:29 Microsoft-Windows-Time-Service 37 None The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123). Information 2017-12-22 13:45:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 13:45:25 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 13:45:25 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T12:45:25.725000000Z from ‎2017‎-‎12‎-‎22T12:45:25.646166600Z. Change Reason: An application or system component changed the time." Error 2017-12-22 13:44:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 13:44:56 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 13:44:52 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 13:44:51 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 13:44:51 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 13:44:47 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 13:44:46 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 13:44:46 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 13:44:46 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:46 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:46 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:46 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:46 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:44 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 13:44:44 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 13:44:42 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 13:44:40 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 13:44:40 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 13:44:40 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 13:44:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 13:44:39 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 13:44:39 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 13:44:39 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 13:44:39 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 13:44:39 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 13:44:39 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 13:44:38 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 13:44:38 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 13:44:38 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:38 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:38 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:38 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:38 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 13:44:47 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 13:44:36 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:36 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 13:44:46 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 13:44:46 EventLog 6005 None The Event log service was started. Information 2017-12-22 13:44:46 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 13:44:46 EventLog 6008 None The previous system shutdown at 13:41:14 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 13:44:35 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T12:44:35.488127700Z. Information 2017-12-22 13:41:52 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 13:41:52 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 13:41:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T12:41:50.545000000Z from ‎2017‎-‎12‎-‎22T12:41:50.439063800Z. Change Reason: An application or system component changed the time." Error 2017-12-22 13:41:33 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 13:41:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 13:41:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 13:41:21 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 13:41:19 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 13:41:17 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 13:41:15 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 13:41:15 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 13:41:15 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 13:41:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:14 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:14 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:14 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:14 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:15 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 13:41:13 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 13:41:12 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 13:41:09 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 13:41:09 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 13:41:09 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 13:41:09 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 13:41:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 13:41:08 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 13:41:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 13:41:08 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 13:41:08 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 13:41:08 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 13:41:08 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 13:41:08 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-22 13:41:07 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:07 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:07 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 13:41:06 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:06 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 13:41:05 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T12:41:05.488129600Z. Information 2017-12-22 13:40:52 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎22T12:40:52.280812500Z. Information 2017-12-22 13:40:50 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-22 13:40:46 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-22 13:41:14 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-22 13:41:14 EventLog 6005 None The Event log service was started. Information 2017-12-22 13:41:14 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-22 13:40:46 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-22 13:40:46 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-22 13:40:45 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-22 13:40:45 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-22 13:40:45 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-22 13:40:45 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-22 13:40:45 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-22 13:40:46 EventLog 6006 None The Event log service was stopped. Information 2017-12-22 13:40:42 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-22 13:40:31 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-22 13:40:31 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-22 13:20:06 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-22 12:59:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-22 12:36:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 12:19:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 12:07:17 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo Information 2017-12-22 12:07:08 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo Information 2017-12-22 12:07:08 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-Microsoft.People Information 2017-12-22 12:07:03 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH10PG8-Microsoft.People Information 2017-12-22 12:07:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17112.13411.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-22 12:06:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.3.3472.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-22 12:06:35 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-22 12:06:29 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-22 12:02:35 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-22 12:02:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 12:02:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 12:02:08 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 12:02:06 Microsoft-Windows-Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: ‎2017‎-‎12‎-‎22T01:21:13.933219700Z Wake Time: ‎2017‎-‎12‎-‎22T11:02:04.753312700Z Wake Source: Unknown" Warning 2017-12-22 12:02:05 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Warning 2017-12-22 12:02:05 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 12:02:05 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 12:02:04 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 12:02:04 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 12:02:04 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x1. Information 2017-12-22 12:02:04 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 12:02:04 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 12:02:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Warning 2017-12-22 12:02:04 Microsoft-Windows-Time-Service 134 None NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) Information 2017-12-22 12:02:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T11:02:02.500000000Z from ‎2017‎-‎12‎-‎22T01:21:16.318803700Z. Change Reason: System time synchronized with the hardware clock." Information 2017-12-22 02:21:16 Microsoft-Windows-Kernel-Power 107 (102) The system has resumed from sleep. Information 2017-12-22 12:02:04 EventLog 6013 None The system uptime is 36685 seconds. Information 2017-12-22 02:21:14 Microsoft-Windows-Kernel-Power 42 (64) "The system is entering sleep. Sleep Reason: Application API" Information 2017-12-22 02:21:13 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-22 02:21:09 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the power off of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: " Information 2017-12-22 02:18:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 02:01:13 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 02:01:13 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T01:01:13.824000000Z from ‎2017‎-‎12‎-‎22T01:01:13.787933000Z. Change Reason: An application or system component changed the time." Information 2017-12-22 01:53:55 Service Control Manager 7040 None The start type of the Auto Time Zone Updater service was changed from disabled to demand start. Error 2017-12-22 01:53:21 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 01:53:22 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 01:53:21 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 01:51:19 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 01:51:12 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-22 01:51:07 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 01:51:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 01:51:06 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T00:51:06.626000000Z from ‎2017‎-‎12‎-‎22T00:51:06.319583000Z. Change Reason: An application or system component changed the time." Error 2017-12-22 01:50:54 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 01:50:53 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 01:50:53 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 01:50:49 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 01:50:49 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 01:50:49 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 01:50:48 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:48 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:48 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:48 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:48 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:49 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 01:50:46 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 01:50:46 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 01:50:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 01:50:42 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 01:50:41 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 01:50:41 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 01:50:41 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 01:50:41 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 01:50:41 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 01:50:41 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 01:50:41 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 01:50:41 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 01:50:40 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 01:50:40 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 01:50:40 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 01:50:40 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:40 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:40 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:40 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:39 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 01:50:38 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:38 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 01:50:48 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 01:50:48 EventLog 6005 None The Event log service was started. Information 2017-12-22 01:50:48 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 01:50:48 EventLog 6008 None The previous system shutdown at 01:37:34 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 01:50:37 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T00:50:37.488055300Z. Information 2017-12-22 01:48:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 01:48:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T00:48:21.432000000Z from ‎2017‎-‎12‎-‎22T00:48:21.383401200Z. Change Reason: An application or system component changed the time." Information 2017-12-22 01:40:43 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-22 01:40:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 01:40:07 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 01:40:06 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 01:38:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-22 01:38:04 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-22 01:38:04 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 01:38:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 01:38:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T00:38:01.329000000Z from ‎2017‎-‎12‎-‎22T00:38:00.872719800Z. Change Reason: An application or system component changed the time." Error 2017-12-22 01:37:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 01:37:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 01:37:40 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 01:37:39 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 01:37:38 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 01:37:34 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 01:37:34 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 01:37:34 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 01:37:33 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:33 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:33 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:33 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:33 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:31 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 01:37:31 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 01:37:29 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 01:37:27 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 01:37:27 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 01:37:27 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 01:37:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 01:37:26 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 01:37:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 01:37:26 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 01:37:26 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 01:37:26 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 01:37:26 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 01:37:25 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 01:37:25 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 01:37:25 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:25 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:25 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:34 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 01:37:25 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 01:37:24 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:24 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:37:34 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 01:37:34 EventLog 6005 None The Event log service was started. Information 2017-12-22 01:37:34 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 01:37:34 EventLog 6008 None The previous system shutdown at 01:08:52 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 01:37:23 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T00:37:23.488276100Z. Information 2017-12-22 01:19:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 01:19:45 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T00:19:45.175000000Z from ‎2017‎-‎12‎-‎22T00:19:45.145350200Z. Change Reason: An application or system component changed the time." Information 2017-12-22 01:13:27 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-22 01:11:27 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 01:11:28 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 01:11:27 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 01:09:28 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 01:09:24 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 01:09:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T00:09:21.516000000Z from ‎2017‎-‎12‎-‎22T00:09:21.778928300Z. Change Reason: An application or system component changed the time." Error 2017-12-22 01:09:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 01:09:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 01:09:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 01:08:58 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 01:08:57 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 01:08:55 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 01:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:53 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 01:08:53 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:52 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:52 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 01:08:52 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 01:08:50 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 01:08:50 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 01:08:47 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 01:08:47 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 01:08:47 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 01:08:47 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 01:08:46 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 01:08:46 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 01:08:46 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 01:08:46 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 01:08:46 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 01:08:46 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 01:08:46 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 01:08:45 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-22 01:08:45 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:45 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:45 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:45 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:45 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 01:08:44 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:44 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 01:08:53 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 01:08:43 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎22T00:08:43.488156500Z. Information 2017-12-22 01:08:30 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎22T00:08:30.698511800Z. Information 2017-12-22 01:08:29 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-22 01:08:25 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-22 01:08:52 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-22 01:08:52 EventLog 6005 None The Event log service was started. Information 2017-12-22 01:08:52 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-22 01:08:24 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-22 01:08:24 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-22 01:08:24 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-22 01:08:24 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-22 01:08:24 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-22 01:08:24 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-22 01:08:24 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-22 01:08:24 EventLog 6006 None The Event log service was stopped. Information 2017-12-22 01:08:21 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-22 01:08:18 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-22 01:06:32 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-22 01:05:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 01:05:48 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎22T00:05:48.464000000Z from ‎2017‎-‎12‎-‎22T00:05:48.431196300Z. Change Reason: An application or system component changed the time." Information 2017-12-22 00:58:03 Service Control Manager 7040 None The start type of the IKE and AuthIP IPsec Keying Modules service was changed from demand start to auto start. Error 2017-12-22 00:57:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 00:57:52 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 00:57:51 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 00:55:49 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 00:55:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 00:55:24 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T23:55:24.146000000Z from ‎2017‎-‎12‎-‎21T23:55:24.343743400Z. Change Reason: An application or system component changed the time." Error 2017-12-22 00:55:17 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 00:55:16 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 00:55:12 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 00:55:11 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 00:55:10 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 00:55:06 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 00:55:06 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 00:55:06 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 00:55:06 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:55:06 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:55:06 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:55:06 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:55:05 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:55:06 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 00:55:03 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 00:55:03 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 00:55:01 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 00:54:59 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 00:54:59 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 00:54:59 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 00:54:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 00:54:58 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 00:54:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 00:54:58 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 00:54:58 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 00:54:58 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 00:54:58 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 00:54:57 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 00:54:57 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 00:54:57 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:54:57 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:54:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:54:57 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:54:57 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 00:54:56 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:54:56 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 00:54:55 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T23:54:55.488191000Z. Information 2017-12-22 00:55:05 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 00:55:05 EventLog 6005 None The Event log service was started. Information 2017-12-22 00:55:05 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 00:55:05 EventLog 6008 None The previous system shutdown at 00:24:49 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 00:52:42 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 00:35:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 00:35:22 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T23:35:22.049000000Z from ‎2017‎-‎12‎-‎21T23:35:21.998233800Z. Change Reason: An application or system component changed the time." Error 2017-12-22 00:27:31 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 00:27:32 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 00:27:31 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 00:25:29 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 00:25:15 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 00:25:07 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T23:25:07.437000000Z from ‎2017‎-‎12‎-‎21T23:25:07.854731100Z. Change Reason: An application or system component changed the time." Information 2017-12-22 00:25:06 Service Control Manager 7040 None The start type of the WdFilter service was changed from boot start to demand start. Information 2017-12-22 00:25:06 Microsoft-Windows-FilterManager 1 None File System Filter 'WdFilter' (Version 10.0, ‎2001‎-‎08‎-‎08T15:54:57.000000000Z) unloaded successfully. Information 2017-12-22 00:25:06 Service Control Manager 7040 None The start type of the WdBoot service was changed from boot start to demand start. Information 2017-12-22 00:25:05 Service Control Manager 7040 None The start type of the WinDefend service was changed from auto start to demand start. Error 2017-12-22 00:25:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 00:25:00 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 00:24:56 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 00:24:54 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 00:24:54 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 00:24:50 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 00:24:50 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 00:24:50 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 00:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:49 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:47 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 00:24:47 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-22 00:24:50 Lfsvc 1 None Geolocation positioning is enabled. Warning 2017-12-22 00:24:45 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 00:24:43 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 00:24:43 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 00:24:43 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 00:24:42 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 00:24:42 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 00:24:42 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 00:24:42 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 00:24:42 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 00:24:42 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 00:24:42 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 00:24:41 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-22 00:24:41 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-22 00:24:41 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:41 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:41 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:41 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 00:24:40 Microsoft-Windows-FilterManager 6 None File System Filter 'WdFilter' (10.0, ‎2001‎-‎08‎-‎08T15:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:40 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:40 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 00:24:49 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-22 00:24:49 EventLog 6005 None The Event log service was started. Information 2017-12-22 00:24:49 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-22 00:24:49 EventLog 6008 None The previous system shutdown at 00:17:29 on ‎2017-‎12-‎22 was unexpected. Information 2017-12-22 00:24:39 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T23:24:39.488256900Z. Error 2017-12-22 00:20:12 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-22 00:20:13 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-22 00:20:12 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-22 00:18:53 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Mini-Filter Driver service was changed from boot start to demand start. Information 2017-12-22 00:18:53 Microsoft-Windows-FilterManager 1 None File System Filter 'WdFilter' (Version 10.0, ‎2001‎-‎08‎-‎08T15:54:57.000000000Z) unloaded successfully. Information 2017-12-22 00:18:53 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Boot Driver service was changed from boot start to demand start. Information 2017-12-22 00:18:50 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Service service was changed from auto start to demand start. Information 2017-12-22 00:18:13 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Boot Driver service was changed from demand start to boot start. Information 2017-12-22 00:18:13 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Mini-Filter Driver service was changed from demand start to boot start. Information 2017-12-22 00:18:13 Microsoft-Windows-FilterManager 6 None File System Filter 'WdFilter' (10.0, ‎2001‎-‎08‎-‎08T15:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:18:12 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Service service was changed from demand start to auto start. Information 2017-12-22 00:18:10 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-22 00:17:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 00:17:46 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T23:17:46.209000000Z from ‎2017‎-‎12‎-‎21T23:17:45.823040200Z. Change Reason: An application or system component changed the time." Error 2017-12-22 00:17:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 00:17:38 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-22 00:17:35 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-22 00:17:33 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-22 00:17:32 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-22 00:17:30 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-22 00:17:30 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎12‎-‎19T19:21:40.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:30 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:30 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:30 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-22 00:17:30 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-22 00:17:30 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:30 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:28 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-22 00:17:27 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-22 00:17:24 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-22 00:17:24 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-22 00:17:24 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-22 00:17:24 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-22 00:17:23 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 00:17:23 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-22 00:17:23 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 00:17:23 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-22 00:17:23 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-22 00:17:23 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-22 00:17:23 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-22 00:17:23 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-22 00:17:22 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:22 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎12‎-‎19T19:09:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎12‎-‎19T19:22:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:22 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-22 00:17:30 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-22 00:17:21 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:21 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-22 00:17:20 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T23:17:20.488123800Z. Information 2017-12-22 00:17:08 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎21T23:17:08.269332000Z. Information 2017-12-22 00:17:06 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-22 00:17:02 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-22 00:17:29 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-22 00:17:29 EventLog 6005 None The Event log service was started. Information 2017-12-22 00:17:29 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-22 00:17:02 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-22 00:17:02 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-22 00:17:02 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-22 00:17:02 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-22 00:17:02 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-22 00:17:01 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-22 00:17:01 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-22 00:17:02 EventLog 6006 None The Event log service was stopped. Information 2017-12-22 00:16:59 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-22 00:16:59 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Error 2017-12-22 00:16:53 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-22 00:16:53 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-22 00:06:48 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-22 00:06:48 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T23:06:48.215000000Z from ‎2017‎-‎12‎-‎21T23:06:48.193788800Z. Change Reason: An application or system component changed the time." Information 2017-12-22 00:00:52 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-21 23:59:05 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 23:59:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T22:59:04.647000000Z from ‎2017‎-‎12‎-‎21T22:59:04.620922400Z. Change Reason: An application or system component changed the time." Information 2017-12-21 23:58:56 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-21 23:58:54 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-21 23:58:53 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-21 23:56:48 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-21 23:56:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-21 23:56:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 23:56:28 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-21 23:56:27 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T22:56:27.197000000Z from ‎2017‎-‎12‎-‎21T22:56:25.923202400Z. Change Reason: An application or system component changed the time." Error 2017-12-21 23:56:17 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-21 23:56:16 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-21 23:56:15 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-21 23:56:12 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:12 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:12 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:12 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-21 23:56:12 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:12 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:12 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-21 23:56:12 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-21 23:56:10 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-21 23:56:10 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-21 23:56:07 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-21 23:56:07 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-21 23:56:06 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-21 23:56:06 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-21 23:56:06 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 23:56:06 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 23:56:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 23:56:06 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-21 23:56:06 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-21 23:56:06 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 23:56:06 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-21 23:56:05 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-21 23:56:05 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:05 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:05 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:05 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-21 23:56:04 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-21 23:56:03 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T22:56:03.488143000Z. Information 2017-12-21 23:55:51 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎21T22:55:51.538179000Z. Information 2017-12-21 23:55:50 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-21 23:55:46 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-21 23:56:12 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-21 23:56:12 EventLog 6013 None The system uptime is 8 seconds. Information 2017-12-21 23:56:12 EventLog 6005 None The Event log service was started. Information 2017-12-21 23:56:12 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-21 23:55:45 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-21 23:55:45 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-21 23:55:45 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-21 23:55:45 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-21 23:55:45 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-21 23:55:45 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-21 23:55:45 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-21 23:55:46 EventLog 6006 None The Event log service was stopped. Information 2017-12-21 23:55:43 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-21 23:55:40 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-21 23:55:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-21 15:25:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 15:08:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 14:50:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 14:33:52 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 14:16:32 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 14:16:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T13:16:32.239000000Z from ‎2017‎-‎12‎-‎21T13:16:32.196543100Z. Change Reason: An application or system component changed the time." Information 2017-12-21 14:08:17 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-21 14:08:14 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-21 14:08:13 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-21 14:06:12 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 14:06:11 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-21 14:06:07 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T13:06:07.332000000Z from ‎2017‎-‎12‎-‎21T13:06:07.129853400Z. Change Reason: An application or system component changed the time." Error 2017-12-21 14:05:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 14:05:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 14:05:55 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-21 14:05:54 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-21 14:05:53 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-21 14:05:49 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-21 14:05:49 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-21 14:05:49 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-21 14:05:48 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:48 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:48 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:48 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:48 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:49 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-21 14:05:46 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-21 14:05:46 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-21 14:05:44 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-21 14:05:42 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-21 14:05:42 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-21 14:05:42 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-21 14:05:41 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-21 14:05:41 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 14:05:41 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 14:05:41 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 14:05:41 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-21 14:05:41 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 14:05:41 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-21 14:05:40 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-21 14:05:40 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-21 14:05:40 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:40 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:40 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:40 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:40 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-21 14:05:39 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:39 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-21 14:05:38 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T13:05:38.488228800Z. Information 2017-12-21 14:05:48 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-21 14:05:48 EventLog 6005 None The Event log service was started. Information 2017-12-21 14:05:48 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-21 14:05:48 EventLog 6008 None The previous system shutdown at 13:45:36 on ‎2017-‎12-‎21 was unexpected. Information 2017-12-21 13:04:43 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 12:47:39 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 12:30:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 12:13:31 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 12:00:00 EventLog 6013 None The system uptime is 872 seconds. Information 2017-12-21 11:56:11 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 11:56:11 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T10:56:11.059000000Z from ‎2017‎-‎12‎-‎21T10:56:11.018770600Z. Change Reason: An application or system component changed the time." Information 2017-12-21 11:50:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-21 11:48:41 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-21 11:48:42 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-21 11:48:41 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-21 11:46:39 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-21 11:46:08 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-21 11:46:05 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 11:45:59 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T10:45:59.576000000Z from ‎2017‎-‎12‎-‎21T10:45:58.459805300Z. Change Reason: An application or system component changed the time." Error 2017-12-21 11:45:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 11:45:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 11:45:42 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-21 11:45:39 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-21 11:45:38 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-21 11:45:36 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-21 11:45:36 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-21 11:45:36 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-21 11:45:35 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:35 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:35 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:35 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:35 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:36 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-21 11:45:33 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-21 11:45:33 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-21 11:45:30 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-21 11:45:30 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-21 11:45:30 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-21 11:45:30 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-21 11:45:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 11:45:29 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-21 11:45:29 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 11:45:29 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 11:45:29 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-21 11:45:29 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 11:45:29 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-21 11:45:28 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-21 11:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:28 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:28 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-21 11:45:27 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:27 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-21 11:45:26 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T10:45:26.488061100Z. Information 2017-12-21 11:45:14 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎21T10:45:14.098409700Z. Information 2017-12-21 11:45:11 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-21 11:45:07 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-21 11:45:35 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-21 11:45:35 EventLog 6005 None The Event log service was started. Information 2017-12-21 11:45:35 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-21 11:45:07 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-21 11:45:07 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-21 11:45:07 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-21 11:45:07 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-21 11:45:07 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-21 11:45:07 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-21 11:45:07 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-21 11:45:07 EventLog 6006 None The Event log service was stopped. Information 2017-12-21 11:45:00 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-21 11:44:47 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-21 11:44:40 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-21 09:38:40 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGGZLXN1-Microsoft.MicrosoftPowerBIForWindows Information 2017-12-21 09:38:35 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGGZLXN1-Microsoft.MicrosoftPowerBIForWindows Information 2017-12-21 09:38:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftPowerBIForWindows_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-21 09:38:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftPowerBIForWindows_3217.31217.1401.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-21 09:38:09 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-21 09:12:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-21 09:10:53 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-21 02:41:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 02:24:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 02:07:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 01:50:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 01:48:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-21 01:33:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 01:33:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T00:33:02.158000000Z from ‎2017‎-‎12‎-‎21T00:33:02.118315200Z. Change Reason: An application or system component changed the time." Information 2017-12-21 01:25:35 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-21 01:25:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-21 01:25:07 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-21 01:25:06 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-21 01:23:30 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-21 01:23:04 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-21 01:22:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 01:22:35 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎21T00:22:35.682000000Z from ‎2017‎-‎12‎-‎21T00:22:36.143724700Z. Change Reason: An application or system component changed the time." Error 2017-12-21 01:22:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 01:22:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-21 01:22:27 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-21 01:22:27 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-21 01:22:27 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-21 01:22:22 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-21 01:22:23 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-21 01:22:22 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-21 01:22:22 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-21 01:22:22 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:22 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:21 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:21 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:19 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-21 01:22:19 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-21 01:22:18 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-21 01:22:15 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-21 01:22:15 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-21 01:22:15 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-21 01:22:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 01:22:14 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-21 01:22:14 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 01:22:14 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-21 01:22:14 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-21 01:22:14 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-21 01:22:14 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-21 01:22:14 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-21 01:22:14 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-21 01:22:13 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:13 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-21 01:22:12 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:12 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-21 01:22:11 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎21T00:22:11.488158400Z. Information 2017-12-21 01:22:21 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-21 01:22:21 EventLog 6005 None The Event log service was started. Information 2017-12-21 01:22:21 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-21 01:22:21 EventLog 6008 None The previous system shutdown at 00:45:49 on ‎2017-‎12-‎21 was unexpected. Information 2017-12-21 01:07:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 00:50:30 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 00:33:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-21 00:16:22 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 23:59:02 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 23:59:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎20T22:59:02.289000000Z from ‎2017‎-‎12‎-‎20T22:59:01.495229000Z. Change Reason: An application or system component changed the time." Information 2017-12-20 16:04:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 15:47:49 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 15:30:45 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 15:13:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 14:56:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 14:56:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎20T13:56:21.508000000Z from ‎2017‎-‎12‎-‎20T13:56:21.466824300Z. Change Reason: An application or system component changed the time." Information 2017-12-20 14:56:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-20 14:55:52 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-20 14:53:49 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-20 14:50:19 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-20 14:48:19 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Error 2017-12-20 14:48:19 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-20 14:48:18 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-20 14:46:17 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-20 14:46:09 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 14:46:06 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎20T13:46:06.991000000Z from ‎2017‎-‎12‎-‎20T13:46:06.247020500Z. Change Reason: An application or system component changed the time." Error 2017-12-20 14:46:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-20 14:45:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-20 14:45:52 Service Control Manager 7024 None "The HomeGroupListener service terminated with the following service-specific error: There are no more endpoints available from the endpoint mapper." Information 2017-12-20 14:45:51 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-20 14:45:50 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-20 14:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:48 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:48 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-20 14:45:47 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:47 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-20 14:45:47 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-20 14:45:47 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:45 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-20 14:45:45 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-20 14:45:42 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Warning 2017-12-20 14:45:42 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-20 14:45:42 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-20 14:45:42 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-20 14:45:41 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-20 14:45:41 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-20 14:45:41 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-20 14:45:41 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-20 14:45:41 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-20 14:45:41 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-20 14:45:41 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-20 14:45:40 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-20 14:45:40 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:40 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:40 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:40 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:40 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-20 14:45:39 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:39 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-20 14:45:38 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎20T13:45:38.488089300Z. Information 2017-12-20 14:45:22 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎20T13:45:22.183453500Z. Information 2017-12-20 14:45:20 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-20 14:45:48 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-20 14:45:16 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-20 14:45:47 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-20 14:45:47 EventLog 6005 None The Event log service was started. Information 2017-12-20 14:45:47 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-20 14:45:15 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-20 14:45:15 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-20 14:45:15 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-20 14:45:15 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-20 14:45:15 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-20 14:45:15 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-20 14:45:15 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-20 14:45:15 EventLog 6006 None The Event log service was stopped. Information 2017-12-20 14:45:12 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-20 14:45:05 Microsoft-Windows-DistributedCOM 10010 None The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. Error 2017-12-20 14:45:00 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-20 14:45:00 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-20 14:44:58 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-20 14:44:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-20 12:00:00 EventLog 6013 None The system uptime is 57062 seconds. Information 2017-12-20 01:07:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 00:50:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 00:33:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 00:16:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-20 00:02:22 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-20 00:00:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-19 23:59:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 23:59:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T22:59:01.242000000Z from ‎2017‎-‎12‎-‎19T22:59:00.943481400Z. Change Reason: An application or system component changed the time." Information 2017-12-19 23:45:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-19 22:08:45 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2017-12-19 22:06:12 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2017-12-19 22:06:11 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2017-12-19 22:06:10 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2017-12-19 22:06:07 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Error 2017-12-19 22:06:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 22:06:07 Microsoft-Windows-WMPNSS-Service 14206 None Media server 'DESKTOP-57M3LFG: Eglobal:' was successfully initialized and is sharing media with network media devices. Information 2017-12-19 22:06:06 Microsoft-Windows-WMPNSS-Service 14210 None The monitored folders on media server 'Eglobal' changed. Windows Media Player is updating security permissions for any included folders to enable media sharing. Information 2017-12-19 22:06:00 Service Control Manager 7040 None The start type of the Windows Media Player Network Sharing Service service was changed from demand start to auto start. Information 2017-12-19 22:06:00 Microsoft-Windows-WMPNSS-Service 14204 None Service 'WMPNetworkSvc' started. Information 2017-12-19 21:28:08 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 21:11:04 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 20:54:00 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 20:36:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 20:19:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 20:19:36 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T19:19:36.720000000Z from ‎2017‎-‎12‎-‎19T19:19:36.688932400Z. Change Reason: An application or system component changed the time." Information 2017-12-19 20:15:11 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-19 20:09:49 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-19 20:09:31 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-19 20:09:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-19 20:09:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 20:09:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T19:09:21.781000000Z from ‎2017‎-‎12‎-‎19T19:08:42.187631900Z. Change Reason: An application or system component changed the time." Information 2017-12-19 20:08:32 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-19 20:08:31 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-19 20:08:28 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-19 20:08:28 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-19 20:08:28 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-19 20:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:27 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:25 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-19 20:08:25 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-19 20:08:23 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-19 20:08:21 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-19 20:08:21 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-19 20:08:21 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-19 20:08:21 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-19 20:08:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 20:08:20 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-19 20:08:20 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 20:08:20 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 20:08:20 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-19 20:08:20 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 20:08:19 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-19 20:08:19 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-19 20:08:19 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:19 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:19 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:19 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:19 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-19 20:08:18 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:18 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:08:27 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-19 20:08:17 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎19T19:08:17.488175000Z. Information 2017-12-19 20:08:27 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-19 20:08:27 EventLog 6005 None The Event log service was started. Information 2017-12-19 20:08:27 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-19 20:08:27 EventLog 6008 None The previous system shutdown at 20:04:39 on ‎2017-‎12-‎19 was unexpected. Information 2017-12-19 20:05:12 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-19 20:05:11 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 20:05:00 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T19:05:00.974000000Z from ‎2017‎-‎12‎-‎19T19:05:00.163838900Z. Change Reason: An application or system component changed the time." Error 2017-12-19 20:04:50 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-19 20:04:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-19 20:04:46 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 20:04:43 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-19 20:04:41 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-19 20:04:40 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-19 20:04:39 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-19 20:04:39 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-19 20:04:39 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:39 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:39 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:39 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:39 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:37 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-19 20:04:37 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-19 20:04:35 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-19 20:04:35 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-19 20:04:34 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-19 20:04:34 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-19 20:04:33 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-19 20:04:40 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-19 20:04:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 20:04:33 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 20:04:33 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 20:04:33 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-19 20:04:33 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-19 20:04:33 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 20:04:40 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-19 20:04:32 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-19 20:04:32 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:32 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:32 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:32 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:32 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-19 20:04:31 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-19 20:04:30 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎19T19:04:30.487599000Z. Information 2017-12-19 20:04:17 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎19T19:04:17.466452200Z. Information 2017-12-19 20:04:16 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-19 20:04:12 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-19 20:04:39 EventLog 6013 None The system uptime is 8 seconds. Information 2017-12-19 20:04:39 EventLog 6005 None The Event log service was started. Information 2017-12-19 20:04:39 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-19 20:04:11 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-19 20:04:11 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-19 20:04:11 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-19 20:04:11 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-19 20:04:11 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-19 20:04:11 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-19 20:04:11 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-19 20:04:11 EventLog 6006 None The Event log service was stopped. Information 2017-12-19 20:04:08 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-19 20:03:56 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-19 19:38:46 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-19 16:02:27 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 16:02:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-19 16:00:22 Service Control Manager 7040 None The start type of the Google Update Service (gupdatem) service was changed from disabled to auto start. Information 2017-12-19 15:59:58 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-19 15:59:57 Service Control Manager 7040 None The start type of the Google Update Service (gupdate) service was changed from disabled to auto start. Information 2017-12-19 15:45:23 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 15:28:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 15:11:15 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 14:53:55 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 14:53:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T13:53:54.824000000Z from ‎2017‎-‎12‎-‎19T13:53:54.791875700Z. Change Reason: An application or system component changed the time." Information 2017-12-19 14:53:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Error 2017-12-19 14:44:02 Service Control Manager 7011 None A timeout (30000 milliseconds) was reached while waiting for a transaction response from the DiagTrack service. Information 2017-12-19 14:43:36 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-19 14:43:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-19 14:43:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-19 14:43:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 14:43:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T13:43:32.384000000Z from ‎2017‎-‎12‎-‎19T13:43:32.472255800Z. Change Reason: An application or system component changed the time." Information 2017-12-19 14:43:23 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-19 14:43:22 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-19 14:43:18 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-19 14:43:18 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-19 14:43:18 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-19 14:43:17 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:17 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:17 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:17 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:17 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:14 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-19 14:43:14 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-19 14:43:12 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-19 14:43:10 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-19 14:43:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-19 14:43:10 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-19 14:43:10 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-19 14:43:09 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 14:43:09 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 14:43:09 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 14:43:09 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-19 14:43:09 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 14:43:09 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-19 14:43:08 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-19 14:43:08 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-19 14:43:18 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-19 14:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:08 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:08 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-19 14:43:07 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-19 14:43:06 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎19T13:43:06.488122600Z. Information 2017-12-19 14:43:17 EventLog 6013 None The system uptime is 11 seconds. Information 2017-12-19 14:43:17 EventLog 6005 None The Event log service was started. Information 2017-12-19 14:43:17 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-19 14:43:17 EventLog 6008 None The previous system shutdown at 05:57:02 on ‎2017-‎12-‎19 was unexpected. Information 2017-12-19 06:24:56 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-19 06:14:01 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 06:07:36 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-19 06:07:36 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T05:07:36.510000000Z from ‎2017‎-‎12‎-‎19T05:07:36.477707600Z. Change Reason: An application or system component changed the time." Information 2017-12-19 06:01:41 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-19 05:57:38 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-19 05:57:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Error 2017-12-19 05:57:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 05:57:19 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎19T04:57:19.745000000Z from ‎2017‎-‎12‎-‎19T04:57:19.457749500Z. Change Reason: An application or system component changed the time." Error 2017-12-19 05:57:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-19 05:57:10 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-19 05:57:06 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-19 05:57:06 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-19 05:57:02 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-19 05:57:02 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:57:02 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:57:02 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-19 05:57:02 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-19 05:57:02 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:57:02 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:57:02 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:56:59 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-19 05:56:59 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-19 05:56:57 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-19 05:56:55 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-19 05:56:55 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-19 05:56:55 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-19 05:56:55 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-19 05:56:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 05:56:55 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-19 05:56:55 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 05:56:55 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-19 05:56:55 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-19 05:56:55 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-19 05:56:54 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-19 05:56:54 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:56:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:56:54 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:56:54 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:57:02 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-19 05:57:02 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-19 05:56:54 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-19 05:56:53 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:56:53 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-19 05:56:52 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎19T04:56:52.488210200Z. Information 2017-12-19 05:56:38 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎19T04:56:38.379941800Z. Information 2017-12-19 05:56:37 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-19 05:56:33 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-19 05:56:32 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-19 05:56:32 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-19 05:56:32 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-19 05:56:32 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-19 05:57:02 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-19 05:57:02 EventLog 6005 None The Event log service was started. Information 2017-12-19 05:57:02 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-19 05:56:32 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-19 05:56:32 EventLog 6006 None The Event log service was stopped. Information 2017-12-19 05:56:32 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-19 05:56:32 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-19 05:56:29 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-19 05:56:16 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-19 05:56:14 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-18 21:16:33 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 20:59:29 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 20:42:25 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 20:25:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 20:14:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 20:08:01 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 20:08:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T19:08:01.767000000Z from ‎2017‎-‎12‎-‎18T19:08:01.738352100Z. Change Reason: An application or system component changed the time." Information 2017-12-18 20:01:56 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-18 20:01:27 Service Control Manager 7045 None "A service was installed in the system. Service Name: TVService Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TVService.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2017-12-18 19:57:51 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 19:57:50 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 19:57:45 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T18:57:45.207000000Z from ‎2017‎-‎12‎-‎18T18:57:45.274645600Z. Change Reason: An application or system component changed the time." Error 2017-12-18 19:57:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 19:57:44 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 19:57:36 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 19:57:35 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 19:57:32 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 19:57:32 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 19:57:32 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 19:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:31 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:32 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 19:57:28 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 19:57:28 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 19:57:26 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 19:57:25 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 19:57:25 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 19:57:25 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 19:57:24 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 19:57:24 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 19:57:24 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 19:57:24 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 19:57:24 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 19:57:24 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 19:57:24 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 19:57:23 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-18 19:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:23 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:23 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 19:57:22 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:22 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 19:57:21 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T18:57:21.487967700Z. Information 2017-12-18 19:57:07 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎18T18:57:07.640808200Z. Information 2017-12-18 19:57:05 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-18 19:57:01 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-18 19:57:31 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-18 19:57:31 EventLog 6005 None The Event log service was started. Information 2017-12-18 19:57:31 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-18 19:57:01 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 19:57:01 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-18 19:57:00 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-18 19:57:00 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-18 19:57:00 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 19:57:00 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-18 19:57:00 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-18 19:57:01 EventLog 6006 None The Event log service was stopped. Information 2017-12-18 19:56:57 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-18 19:56:46 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-18 19:56:46 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-18 19:56:44 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Information 2017-12-18 19:34:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\AppCompat\Programs\Amcache.hve.tmp was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 19:10:50 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-18 18:51:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 18:34:15 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 18:17:11 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 18:08:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 18:00:07 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 17:42:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 17:42:47 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T16:42:47.392000000Z from ‎2017‎-‎12‎-‎18T16:42:47.351006900Z. Change Reason: An application or system component changed the time." Error 2017-12-18 17:32:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 17:32:42 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 17:32:35 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 17:32:26 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T16:32:26.172000000Z from ‎2017‎-‎12‎-‎18T16:32:26.959890400Z. Change Reason: An application or system component changed the time." Information 2017-12-18 17:32:26 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 17:32:14 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 17:32:13 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 17:32:10 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 17:32:10 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 17:32:10 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 17:32:09 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:09 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:09 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:09 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:09 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:07 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 17:32:07 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 17:32:05 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 17:32:03 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 17:32:03 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 17:32:03 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 17:32:03 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 17:32:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 17:32:02 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 17:32:02 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 17:32:02 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 17:32:02 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 17:32:02 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 17:32:01 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-18 17:32:01 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-18 17:32:10 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 17:32:01 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:01 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:01 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:01 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:01 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 17:32:00 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:32:00 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 17:31:59 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T16:31:59.488176900Z. Information 2017-12-18 17:32:09 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-18 17:32:09 EventLog 6005 None The Event log service was started. Information 2017-12-18 17:32:09 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-18 17:32:09 EventLog 6008 None The previous system shutdown at 17:21:21 on ‎2017-‎12-‎18 was unexpected. Information 2017-12-18 17:21:42 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 17:21:41 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 17:21:39 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T16:21:39.357000000Z from ‎2017‎-‎12‎-‎18T16:21:40.032576900Z. Change Reason: An application or system component changed the time." Error 2017-12-18 17:21:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 17:21:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 17:21:25 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 17:21:24 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 17:21:22 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 17:21:22 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 17:21:22 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 17:21:21 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:21 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:21 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:21 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:19 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 17:21:19 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 17:21:17 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 17:21:17 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 17:21:15 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 17:21:15 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 17:21:15 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 17:21:15 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 17:21:15 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 17:21:15 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 17:21:15 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 17:21:15 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 17:21:15 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 17:21:14 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-18 17:21:14 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:14 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:22 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 17:21:14 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 17:21:13 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 17:21:12 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T16:21:12.487869100Z. Information 2017-12-18 17:20:58 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎18T16:20:58.464885800Z. Information 2017-12-18 17:20:56 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-18 17:20:52 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-18 17:20:52 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 17:20:52 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-18 17:21:21 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-18 17:21:21 EventLog 6005 None The Event log service was started. Information 2017-12-18 17:21:21 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-18 17:20:52 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-18 17:20:52 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-18 17:20:52 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 17:20:51 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-18 17:20:51 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-18 17:20:52 EventLog 6006 None The Event log service was stopped. Information 2017-12-18 17:20:49 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-18 17:20:49 User32 1074 None "The process C:\Windows\system32\winlogon.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: " Error 2017-12-18 17:20:47 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-18 17:20:47 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-18 17:12:53 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 17:12:52 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T16:12:52.484000000Z from ‎2017‎-‎12‎-‎18T16:12:52.439170300Z. Change Reason: An application or system component changed the time." Information 2017-12-18 17:03:02 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 17:02:47 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 17:02:40 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T16:02:40.786000000Z from ‎2017‎-‎12‎-‎18T16:02:40.907777900Z. Change Reason: An application or system component changed the time." Error 2017-12-18 17:02:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 17:02:35 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 17:02:29 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 17:02:28 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 17:02:24 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 17:02:24 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 17:02:24 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 17:02:24 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:23 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:23 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:23 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:23 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:21 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 17:02:20 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 17:02:19 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 17:02:16 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 17:02:16 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 17:02:16 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 17:02:16 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 17:02:24 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 17:02:15 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 17:02:15 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 17:02:15 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 17:02:15 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 17:02:15 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 17:02:15 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 17:02:15 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-18 17:02:15 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-18 17:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:14 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:14 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 17:02:13 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:13 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 17:02:12 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T16:02:12.488043900Z. Information 2017-12-18 17:02:23 EventLog 6013 None The system uptime is 11 seconds. Information 2017-12-18 17:02:23 EventLog 6005 None The Event log service was started. Information 2017-12-18 17:02:23 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-18 17:02:23 EventLog 6008 None The previous system shutdown at 16:28:14 on ‎2017-‎12-‎18 was unexpected. Information 2017-12-18 17:00:59 Service Control Manager 7040 None The start type of the Google Update Service (gupdatem) service was changed from demand start to disabled. Information 2017-12-18 17:00:59 Service Control Manager 7040 None The start type of the Google Update Service (gupdate) service was changed from auto start to disabled. Information 2017-12-18 16:56:10 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 16:53:17 Service Control Manager 7045 None "A service was installed in the system. Service Name: TVService Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TVService.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2017-12-18 16:52:45 Service Control Manager 7045 None "A service was installed in the system. Service Name: MySQL Service File Name: C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe --defaults-file=""C:\Program Files\MySQL\MySQL Server 5.6\my.ini"" MySQL Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 16:38:50 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 16:38:50 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T15:38:50.453000000Z from ‎2017‎-‎12‎-‎18T15:38:50.423385700Z. Change Reason: An application or system component changed the time." Error 2017-12-18 16:37:40 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 16:28:41 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 16:28:34 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 16:28:33 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T15:28:33.178000000Z from ‎2017‎-‎12‎-‎18T15:28:33.780798700Z. Change Reason: An application or system component changed the time." Error 2017-12-18 16:28:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 16:28:22 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 16:28:18 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 16:28:18 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 16:28:14 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 16:28:14 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 16:28:14 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 16:28:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:13 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:13 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:13 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:13 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:11 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 16:28:11 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 16:28:09 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 16:28:06 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 16:28:06 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 16:28:06 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 16:28:06 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 16:28:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 16:28:05 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 16:28:05 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 16:28:05 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 16:28:05 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 16:28:05 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 16:28:05 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-18 16:28:05 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-18 16:28:05 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:04 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:04 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:04 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:04 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 16:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:03 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:28:14 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 16:28:02 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T15:28:02.488126400Z. Information 2017-12-18 16:28:13 EventLog 6013 None The system uptime is 11 seconds. Information 2017-12-18 16:28:13 EventLog 6005 None The Event log service was started. Information 2017-12-18 16:28:13 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-18 16:28:13 EventLog 6008 None The previous system shutdown at 16:12:17 on ‎2017-‎12-‎18 was unexpected. Information 2017-12-18 16:25:06 Service Control Manager 7045 None "A service was installed in the system. Service Name: MediaPortal 2 Server Service Service File Name: ""C:\Program Files (x86)\Team MediaPortal\MP2-Server\MP2-Server.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 16:23:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-18 16:22:49 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 16:22:49 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T15:22:49.001000000Z from ‎2017‎-‎12‎-‎18T15:22:48.973906700Z. Change Reason: An application or system component changed the time." Information 2017-12-18 16:22:11 Service Control Manager 7045 None "A service was installed in the system. Service Name: dokan1 Service File Name: system32\DRIVERS\dokan1.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 16:21:26 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Error 2017-12-18 16:15:29 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 16:12:40 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 16:12:35 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 16:12:33 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T15:12:33.910000000Z from ‎2017‎-‎12‎-‎18T15:12:34.882186700Z. Change Reason: An application or system component changed the time." Error 2017-12-18 16:12:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 16:12:26 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 16:12:22 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 16:12:21 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 16:12:18 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 16:12:18 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 16:12:18 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 16:12:17 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:17 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:17 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:17 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:18 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 16:12:17 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:15 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 16:12:15 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 16:12:13 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 16:12:10 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 16:12:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 16:12:10 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 16:12:10 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 16:12:09 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 16:12:09 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 16:12:09 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 16:12:09 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 16:12:09 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 16:12:09 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 16:12:09 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-18 16:12:09 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-18 16:12:08 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:08 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:08 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:08 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:08 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 16:12:07 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:07 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 16:12:06 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T15:12:06.488205700Z. Information 2017-12-18 16:12:17 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-18 16:12:17 EventLog 6005 None The Event log service was started. Information 2017-12-18 16:12:17 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-18 16:12:17 EventLog 6008 None The previous system shutdown at 15:54:43 on ‎2017-‎12-‎18 was unexpected. Information 2017-12-18 16:05:14 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 16:05:14 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T15:05:14.169000000Z from ‎2017‎-‎12‎-‎18T15:05:14.128004600Z. Change Reason: An application or system component changed the time." Information 2017-12-18 16:00:32 Service Control Manager 7040 None The start type of the Remote Access Connection Manager service was changed from demand start to auto start. Information 2017-12-18 16:00:30 Service Control Manager 7040 None The start type of the Remote Access IP ARP Driver service was changed from demand start to auto start. Information 2017-12-18 16:00:09 Service Control Manager 7045 None "A service was installed in the system. Service Name: TuneUpUtilitiesDrv Service File Name: C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 16:00:05 Service Control Manager 7045 None "A service was installed in the system. Service Name: AVG PC TuneUp Service Service File Name: ""C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 15:59:01 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-18 15:55:06 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:55:02 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:55:02.353000000Z from ‎2017‎-‎12‎-‎18T14:55:02.245214200Z. Change Reason: An application or system component changed the time." Error 2017-12-18 15:54:59 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {7022A3B3-D004-4F52-AF11-E9E987FEE25F} and APPID {ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 15:54:59 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Error 2017-12-18 15:54:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 15:54:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 15:54:47 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 15:54:46 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 15:54:44 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 15:54:44 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 15:54:44 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 15:54:43 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:43 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:43 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:43 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:43 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:44 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 15:54:41 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 15:54:41 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 15:54:38 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 15:54:38 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 15:54:38 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 15:54:38 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 15:54:38 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 15:54:37 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 15:54:37 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 15:54:37 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 15:54:37 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 15:54:37 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 15:54:37 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 15:54:36 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-18 15:54:36 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:36 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:36 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:36 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 15:54:35 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:35 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 15:54:34 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T14:54:34.488104600Z. Information 2017-12-18 15:54:21 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎18T14:54:21.100788400Z. Information 2017-12-18 15:54:19 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-18 15:54:15 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-18 15:54:43 EventLog 6013 None The system uptime is 9 seconds. Information 2017-12-18 15:54:43 EventLog 6005 None The Event log service was started. Information 2017-12-18 15:54:43 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-18 15:54:15 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 15:54:15 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-18 15:54:15 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-18 15:54:15 Microsoft-Windows-DHCPv6-Client 51057 Service State Event DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 Information 2017-12-18 15:54:15 Microsoft-Windows-DHCPv6-Client 51047 Service State Event DHCPv6 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 15:54:14 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-18 15:54:14 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-18 15:54:14 EventLog 6006 None The Event log service was stopped. Information 2017-12-18 15:54:13 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Error 2017-12-18 15:54:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Error 2017-12-18 15:54:06 Microsoft-Windows-DistributedCOM 10010 None The server {0002DF02-0000-0000-C000-000000000046} did not register with DCOM within the required timeout. Information 2017-12-18 15:54:04 User32 1074 None "The process C:\Windows\System32\RuntimeBroker.exe (DESKTOP-57M3LFG) has initiated the restart of computer DESKTOP-57M3LFG on behalf of user DESKTOP-57M3LFG\Eglobal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment: " Error 2017-12-18 15:52:51 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:50:25 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:48:09 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Information 2017-12-18 15:47:21 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:47:21 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:47:21.884000000Z from ‎2017‎-‎12‎-‎18T14:47:21.893838900Z. Change Reason: An application or system component changed the time." Error 2017-12-18 15:46:03 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Information 2017-12-18 15:45:06 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:45:06 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:45:06.458000000Z from ‎2017‎-‎12‎-‎18T14:45:06.452894400Z. Change Reason: An application or system component changed the time." Information 2017-12-18 15:44:15 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:44:15 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:44:15.500000000Z from ‎2017‎-‎12‎-‎18T14:44:15.498198100Z. Change Reason: An application or system component changed the time." Information 2017-12-18 15:44:09 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:44:09 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:44:09.408000000Z from ‎2017‎-‎12‎-‎18T14:44:09.408830500Z. Change Reason: An application or system component changed the time." Error 2017-12-18 15:44:08 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Information 2017-12-18 15:43:26 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:43:25 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:43:25.944000000Z from ‎2017‎-‎12‎-‎18T14:43:25.943668700Z. Change Reason: An application or system component changed the time." Information 2017-12-18 15:43:19 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:43:19 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:43:19.493000000Z from ‎2017‎-‎12‎-‎18T14:43:19.478986100Z. Change Reason: An application or system component changed the time." Error 2017-12-18 15:42:22 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:40:46 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:39:21 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:38:05 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:37:00 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:36:05 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:35:20 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Error 2017-12-18 15:35:07 NetJoin 4097 None The machine DESKTOP-57M3LFG attempted to join the domain kuikdelivery.com but failed. The error code was 53. Information 2017-12-18 15:34:34 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:34:34 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:34:34.500000000Z from ‎2017‎-‎12‎-‎18T14:34:34.485547900Z. Change Reason: An application or system component changed the time." Information 2017-12-18 15:34:08 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 15:34:08 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:34:08.122000000Z from ‎2017‎-‎12‎-‎18T23:32:34.594913100Z. Change Reason: An application or system component changed the time." Information 2017-12-19 00:32:29 Service Control Manager 7045 None "A service was installed in the system. Service Name: Service KMSELDI Service File Name: C:\Program Files\KMSpico\Service_KMS.exe Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Warning 2017-12-18 21:44:49 Microsoft-Windows-DNS-Client 1014 (1014) Name resolution for the name tile-service.weather.microsoft.com timed out after none of the configured DNS servers responded. Information 2017-12-18 21:37:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Error 2017-12-18 21:21:20 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user DESKTOP-57M3LFG\Eglobal SID (S-1-5-21-1417560648-1617758165-1390362260-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 21:15:06 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 21:15:05 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 21:14:47 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 21:14:45 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 21:14:42 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 21:14:39 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 21:14:39 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 21:14:39 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 21:14:39 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:39 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T10:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:39 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T10:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:39 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T15:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:39 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T12:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:39 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 21:14:37 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 21:14:36 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 21:14:34 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 21:14:33 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 21:14:32 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 21:14:32 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 21:14:32 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 21:14:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 21:14:32 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 21:14:32 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 21:14:32 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 21:14:32 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 21:14:32 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 21:14:31 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Critical 2017-12-18 21:14:31 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Information 2017-12-18 21:14:31 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T15:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:31 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T13:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:31 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:30 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 21:14:29 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎28T00:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:29 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T09:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was false. The last boot's success status was true. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 21:14:28 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T20:14:28.488159000Z. Information 2017-12-18 21:14:39 EventLog 6013 None The system uptime is 10 seconds. Information 2017-12-18 21:14:39 EventLog 6005 None The Event log service was started. Information 2017-12-18 21:14:39 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Error 2017-12-18 21:14:39 EventLog 6008 None The previous system shutdown at 20:50:16 on ‎2017-‎12-‎18 was unexpected. Information 2017-12-18 15:13:01 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:13:01.142479300Z from ‎2017‎-‎12‎-‎18T14:13:01.142479300Z. Change Reason: System time adjusted to the new time zone." Information 2017-12-18 15:12:54 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T14:12:54.654518400Z from ‎2017‎-‎12‎-‎18T14:12:54.654518400Z. Change Reason: System time adjusted to the new time zone." Error 2017-12-18 15:10:19 Microsoft-Windows-DistributedCOM 10010 None The server Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess did not register with DCOM within the required timeout. Information 2017-12-18 15:08:35 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted Information 2017-12-18 15:08:30 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted Information 2017-12-18 15:08:30 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore Information 2017-12-18 15:08:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:08:25 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore Information 2017-12-18 15:08:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:08:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_6.5.2851.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:07:59 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather Information 2017-12-18 15:07:52 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:07:52 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather Information 2017-12-18 15:07:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder Information 2017-12-18 15:07:45 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder Information 2017-12-18 15:07:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.22.3254.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:07:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:07:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1712.3351.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:07:27 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:07:27 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo Information 2017-12-18 15:07:20 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo Information 2017-12-18 15:07:20 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:07:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:07:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17112.12111.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:07:13 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms Information 2017-12-18 15:07:13 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:07:13 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms Information 2017-12-18 15:07:10 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote Information 2017-12-18 15:07:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:07:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1712.3352.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:07:02 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote Information 2017-12-18 15:07:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:06:35 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:06:35 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVN5-Microsoft.WindowsCalculator Information 2017-12-18 15:06:28 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVN5-Microsoft.WindowsCalculator Information 2017-12-18 15:06:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8827.20551.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:06:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:06:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:06:21 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1712.3351.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:06:20 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 2017-12-18 15:06:10 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp Information 2017-12-18 15:06:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:06:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11711.1711.20001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:05:55 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:05:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos Information 2017-12-18 15:05:38 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos Information 2017-12-18 15:05:38 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NZM7B1BB5TR-Microsoft.NET.Native.Framework.1.7 Information 2017-12-18 15:05:38 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NZM7B1BB5TR-Microsoft.NET.Native.Framework.1.7 Information 2017-12-18 15:05:34 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9MTW6RN84LVM-Microsoft.NET.Native.Runtime.1.7 Information 2017-12-18 15:05:34 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:05:34 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9MTW6RN84LVM-Microsoft.NET.Native.Runtime.1.7 Information 2017-12-18 15:05:27 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection Information 2017-12-18 15:05:19 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:05:19 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection Information 2017-12-18 15:05:19 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBD8-Microsoft.XboxApp Information 2017-12-18 15:05:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:05:15 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBD8-Microsoft.XboxApp Information 2017-12-18 15:05:08 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_36.36.12003.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:04:41 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:04:41 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera Information 2017-12-18 15:04:34 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera Information 2017-12-18 15:04:26 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.921.10.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:04:25 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.18.12091.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:04:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:04:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:04:05 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI Information 2017-12-18 15:04:00 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI Information 2017-12-18 15:03:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:03:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.11.29001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:03:31 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:03:31 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9P086NHDNB9W-Microsoft.XboxSpeechtoTextOverlay Information 2017-12-18 15:03:23 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:03:23 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9P086NHDNB9W-Microsoft.XboxSpeechtoTextOverlay Information 2017-12-18 15:03:23 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-Microsoft.MicrosoftOfficeHub Information 2017-12-18 15:03:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:03:18 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-Microsoft.MicrosoftOfficeHub Information 2017-12-18 15:03:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:03:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:03:12 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_17.8830.7600.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:03:01 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:02:51 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer Information 2017-12-18 15:02:51 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer Information 2017-12-18 15:02:51 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Information 2017-12-18 15:02:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:02:48 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop Information 2017-12-18 15:02:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_2.1711.30062.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:02:21 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:02:02 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:02:02 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH5FV99-Microsoft.MSPaint Information 2017-12-18 15:01:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:01:50 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH5FV99-Microsoft.MSPaint Information 2017-12-18 15:01:45 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:01:45 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:01:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1712.7027.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:01:22 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:01:16 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-Microsoft.SkypeApp Information 2017-12-18 15:01:05 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:01:05 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-Microsoft.SkypeApp Information 2017-12-18 15:01:05 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4R32N-Microsoft.WindowsFeedbackHub Information 2017-12-18 15:01:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:00:57 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:00:57 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 15:00:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4R32N-Microsoft.WindowsFeedbackHub Information 2017-12-18 15:00:57 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PKDZBMV1H3T-Microsoft.GetHelp Information 2017-12-18 15:00:52 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PKDZBMV1H3T-Microsoft.GetHelp Information 2017-12-18 15:00:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 15:00:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.1706.1981.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 15:00:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1708.2831.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:59:54 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:59:54 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic Information 2017-12-18 14:59:40 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic Information 2017-12-18 14:59:40 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:59:40 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4QGHW-Microsoft.MicrosoftStickyNotes Information 2017-12-18 14:59:39 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:59:35 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17086.24711.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:59:34 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4QGHW-Microsoft.MicrosoftStickyNotes Information 2017-12-18 14:59:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:59:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:59:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_2.0.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:58:56 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:58:56 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9PBPCH085S3S-Microsoft.Print3D Information 2017-12-18 14:58:51 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9PBPCH085S3S-Microsoft.Print3D Information 2017-12-18 14:58:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Print3D_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:58:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Print3D_1.0.2572.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:58:27 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:58:27 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay Information 2017-12-18 14:58:22 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:58:22 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay Information 2017-12-18 14:58:22 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRDTBVB-Microsoft.WindowsMaps Information 2017-12-18 14:58:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:58:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.24.5001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:58:15 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:58:15 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRDTBVB-Microsoft.WindowsMaps Information 2017-12-18 14:58:15 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps Information 2017-12-18 14:58:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:58:08 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps Information 2017-12-18 14:58:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1708.2764.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:58:02 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:58:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:57:59 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-Microsoft.People Information 2017-12-18 14:57:51 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH10PG8-Microsoft.People Information 2017-12-18 14:57:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:57:27 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.2791.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:57:19 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:57:17 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBQ6-Microsoft.Messaging Information 2017-12-18 14:57:05 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJBQ6-Microsoft.Messaging Information 2017-12-18 14:56:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Messaging_3.34.25004.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:56:43 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:56:43 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH5PNB1-Microsoft.OneConnect Information 2017-12-18 14:56:34 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH5PNB1-Microsoft.OneConnect Information 2017-12-18 14:56:32 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:56:31 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:56:31 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH4NNS1-Microsoft.DesktopAppInstaller Information 2017-12-18 14:56:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_3.1710.3044.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:56:25 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:56:25 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH4NNS1-Microsoft.DesktopAppInstaller Information 2017-12-18 14:56:23 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:56:20 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9N4WGH0Z6VHQ-Microsoft.HEVCVideoExtension Information 2017-12-18 14:56:20 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9N4WGH0Z6VHQ-Microsoft.HEVCVideoExtension Information 2017-12-18 14:56:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.12894.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:56:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.HEVCVideoExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:56:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.HEVCVideoExtension_1.0.3202.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:56:02 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:56:02 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:56:00 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:55:24 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Mini-Filter Driver service was changed from boot start to demand start. Information 2017-12-18 14:55:24 Microsoft-Windows-FilterManager 1 None File System Filter 'WdFilter' (Version 10.0, ‎2001‎-‎08‎-‎08T15:54:57.000000000Z) unloaded successfully. Information 2017-12-18 14:55:24 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Boot Driver service was changed from boot start to demand start. Information 2017-12-18 14:55:18 Service Control Manager 7040 None The start type of the Windows Defender Antivirus Service service was changed from auto start to demand start. Information 2017-12-18 14:54:13 Microsoft-Windows-FilterManager 6 None File System Filter 'avgMonFlt' (6.0, ‎2017‎-‎11‎-‎07T19:10:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 14:54:12 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSnx' (6.0, ‎2017‎-‎11‎-‎07T18:59:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 14:54:11 Microsoft-Windows-FilterManager 6 None File System Filter 'avgSP' (6.0, ‎2017‎-‎11‎-‎14T12:23:32.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: AVG Antivirus Service File Name: ""C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgbIDSAgent Service File Name: ""C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe"" Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgStm Service File Name: C:\Windows\system32\drivers\avgStm.sys Service Type: kernel mode driver Service Start Type: auto start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgVmm Service File Name: C:\Windows\system32\drivers\avgVmm.sys Service Type: kernel mode driver Service Start Type: boot start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgSP Service File Name: C:\Windows\system32\drivers\avgSP.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgRvrt Service File Name: C:\Windows\system32\drivers\avgRvrt.sys Service Type: kernel mode driver Service Start Type: boot start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgMonFlt Service File Name: C:\Windows\system32\drivers\avgMonFlt.sys Service Type: kernel mode driver Service Start Type: auto start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgHwid Service File Name: C:\Windows\system32\drivers\avgHwid.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgArPot Service File Name: C:\Windows\system32\drivers\avgArPot.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgRdr Service File Name: C:\Windows\system32\drivers\avgRdr2.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgSnx Service File Name: C:\Windows\system32\drivers\avgSnx.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgbuniv Service File Name: C:\Windows\system32\drivers\avgbuniva.sys Service Type: kernel mode driver Service Start Type: boot start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgblog Service File Name: C:\Windows\system32\drivers\avgbloga.sys Service Type: kernel mode driver Service Start Type: boot start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgbidsh Service File Name: C:\Windows\system32\drivers\avgbidsha.sys Service Type: kernel mode driver Service Start Type: boot start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgbidsdriver Service File Name: C:\Windows\system32\drivers\avgbidsdrivera.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:53:39 Service Control Manager 7045 None "A service was installed in the system. Service Name: avgbdisk Service File Name: C:\Windows\system32\drivers\avgbdiska.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:50:36 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-18 14:50:23 Service Control Manager 7045 None "A service was installed in the system. Service Name: AVG Service Service File Name: ""C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe"" Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 14:47:54 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-18 14:45:34 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-18 14:45:29 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Update Service (gupdatem) Service File Name: ""C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"" /medsvc Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2017-12-18 14:45:29 Service Control Manager 7045 None "A service was installed in the system. Service Name: Google Update Service (gupdate) Service File Name: ""C:\Program Files (x86)\Google\Update\GoogleUpdate.exe"" /svc Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 14:44:51 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PS-Microsoft.RemoteDesktop Information 2017-12-18 14:44:46 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PS-Microsoft.RemoteDesktop Information 2017-12-18 14:44:46 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement Information 2017-12-18 14:44:46 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement Information 2017-12-18 14:44:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH3FL3T-Microsoft.VCLibs.120.00.Universal Information 2017-12-18 14:44:42 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH3FL3T-Microsoft.VCLibs.120.00.Universal Information 2017-12-18 14:44:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.RemoteDesktop_10.1.1011.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:44:25 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRD2G0J-Microsoft.Office.Sway Information 2017-12-18 14:44:25 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:44:25 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRD2G0J-Microsoft.Office.Sway Information 2017-12-18 14:44:20 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGGZLXN1-Microsoft.MicrosoftPowerBIForWindows Information 2017-12-18 14:44:20 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGGZLXN1-Microsoft.MicrosoftPowerBIForWindows Information 2017-12-18 14:44:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.17112.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:44:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.17112.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:44:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.Sway_18.1711.50601.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:44:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:44:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftPowerBIForWindows_3217.31130.1380.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:44:01 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:43:52 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:43:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHX52-Microsoft.NetworkSpeedTest Information 2017-12-18 14:43:52 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHX52-Microsoft.NetworkSpeedTest Information 2017-12-18 14:43:52 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVFW-Microsoft.BingNews Information 2017-12-18 14:43:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.NetworkSpeedTest_1.0.0.23_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:43:42 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHVFW-Microsoft.BingNews Information 2017-12-18 14:43:42 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml Information 2017-12-18 14:43:42 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:43:36 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml Information 2017-12-18 14:43:36 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Information 2017-12-18 14:43:32 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRCV5XN-D5EA27B7.Duolingo-LearnLanguagesforFree Information 2017-12-18 14:43:32 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:43:32 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRCV5XN-D5EA27B7.Duolingo-LearnLanguagesforFree Information 2017-12-18 14:43:32 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH1HX9G-Microsoft.NET.Native.Runtime.1.1 Information 2017-12-18 14:43:17 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH1HX9G-Microsoft.NET.Native.Runtime.1.1 Information 2017-12-18 14:43:12 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH1Z8G6-Microsoft.NET.Native.Framework.1.2 Information 2017-12-18 14:43:12 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH1Z8G6-Microsoft.NET.Native.Framework.1.2 Information 2017-12-18 14:43:12 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Information 2017-12-18 14:43:12 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFHZDT-ActiproSoftwareLLC.562882FEEB491 Information 2017-12-18 14:43:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_4.22.3254.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:43:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Messaging_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:43:09 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFHZDT-ActiproSoftwareLLC.562882FEEB491 Information 2017-12-18 14:43:09 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NPG2S11G4S3-Microsoft.NET.Native.Runtime.2.0 Information 2017-12-18 14:43:09 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NPG2S11G4S3-Microsoft.NET.Native.Runtime.2.0 Information 2017-12-18 14:43:09 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NWFFK9X817G-Microsoft.NET.Native.Framework.2.0 Information 2017-12-18 14:43:05 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NWFFK9X817G-Microsoft.NET.Native.Framework.2.0 Information 2017-12-18 14:43:05 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Information 2017-12-18 14:43:03 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\D5EA27B7.Duolingo-LearnLanguagesforFree_2017.112.1.0_x64__yx6k7tf7xvsea\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:42:54 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:54 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 Information 2017-12-18 14:42:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1712.5.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:42:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\ActiproSoftwareLLC.562882FEEB491_3.2.28.0_x64__24pqs290vpjk0\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:42:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1712.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:42:47 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:36 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:36 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:36 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:36 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:36 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ27N-AdobeSystemsIncorporated.AdobePhotoshopExpress Information 2017-12-18 14:42:26 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ27N-AdobeSystemsIncorporated.AdobePhotoshopExpress Information 2017-12-18 14:42:26 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ9RM-Microsoft.VCLibs.120.00 Information 2017-12-18 14:42:26 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRFJ9RM-Microsoft.VCLibs.120.00 Information 2017-12-18 14:42:24 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:12 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:07 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:07 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:42:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_1.3.5.74_x64__ynb6jyjzte8ga\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:42:02 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: 9WZDNCRDJMH1-46928bounde.EclipseManager Information 2017-12-18 14:41:57 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: 9WZDNCRDJMH1-46928bounde.EclipseManager Information 2017-12-18 14:41:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\46928bounde.EclipseManager_2.2.4.51_neutral__a5h4egax66k6y\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:41:51 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:41:33 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:41:24 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:41:17 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:41:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:41:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:39:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} and APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:39:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 14:39:14 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:38:11 Service Control Manager 7040 None The start type of the File History Service service was changed from demand start to auto start. Information 2017-12-18 14:32:33 Service Control Manager 7045 None "A service was installed in the system. Service Name: MpKsl8c2ffec0 Service File Name: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{23A20228-B5E2-4FD3-9B53-F2ECC1F97AC1}\MpKsl8c2ffec0.sys Service Type: kernel mode driver Service Start Type: system start Service Account: " Information 2017-12-18 14:32:08 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.452.0) Information 2017-12-18 14:31:18 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.452.0) Information 2017-12-18 14:31:18 Microsoft-Windows-WindowsUpdateClient 19 Windows Update Agent Installation Successful: Windows successfully installed the following update: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - December 2017 (KB890830) Information 2017-12-18 14:29:48 Microsoft-Windows-WindowsUpdateClient 43 Windows Update Agent Installation Started: Windows has started installing the following update: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - December 2017 (KB890830) Information 2017-12-18 14:29:22 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:29:22 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 14:29:17 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Information 2017-12-18 14:28:28 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 14:25:20 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-18 14:23:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:23:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:22:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:22:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:22:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\Eglobal\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 14:22:32 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T13:22:32.098803100Z from ‎2017‎-‎12‎-‎18T13:22:32.098803100Z. Change Reason: System time adjusted to the new time zone." Error 2017-12-18 14:22:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 14:22:23 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 14:22:22 Microsoft-Windows-GroupPolicy 1501 None The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy. Information 2017-12-18 14:22:21 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 14:22:20 Microsoft-Windows-Winlogon 7002 (1102) User Logoff Notification for Customer Experience Improvement Program Information 2017-12-18 14:20:46 Microsoft-Windows-TPM-WMI 1282 None The TBS device identifier has been generated. Information 2017-12-18 14:19:04 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T13:19:04.155631700Z from ‎2017‎-‎12‎-‎18T13:19:04.155631700Z. Change Reason: System time adjusted to the new time zone." Error 2017-12-18 14:19:03 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 11:07:14 Microsoft-Windows-WindowsUpdateClient 44 Windows Update Agent Windows Update started downloading an update. Information 2017-12-18 10:56:50 Microsoft-Windows-ResetEng 4500 None The system has been successfully reset. Information 2017-12-18 10:54:05 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. Error 2017-12-18 10:52:10 Service Control Manager 7030 None The Printer Extensions and Notifications service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Information 2017-12-18 10:52:10 Service Control Manager 7045 None "A service was installed in the system. Service Name: Printer Extensions and Notifications Service File Name: %SystemRoot%\system32\svchost.exe -k print Service Type: user mode service Service Start Type: demand start Service Account: LocalSystem" Information 2017-12-18 10:52:10 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 10:52:01 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. Information 2017-12-18 10:51:59 Lfsvc 1 None Geolocation positioning is enabled. Information 2017-12-18 10:51:55 Service Control Manager 7040 None The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. Information 2017-12-18 10:51:54 Microsoft-Windows-TPM-WMI 1281 None This event triggers the TBS device identifier generation. Error 2017-12-18 10:51:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Error 2017-12-18 10:51:51 Microsoft-Windows-DistributedCOM 10016 None "The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool." Information 2017-12-18 10:51:49 Microsoft-Windows-GroupPolicy 1501 None The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy. Information 2017-12-18 10:51:48 Service Control Manager 7040 None The start type of the Delivery Optimization service was changed from demand start to auto start. Information 2017-12-18 10:51:48 Microsoft-Windows-Winlogon 7001 (1101) User Logon Notification for Customer Experience Improvement Program Information 2017-12-18 10:51:47 Microsoft-Windows-GroupPolicy 1500 None The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy. Information 2017-12-18 10:50:28 Service Control Manager 7040 None The start type of the Intel(R) Content Protection HECI Service service was changed from auto start to demand start. Information 2017-12-18 10:50:28 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: dam EhStorClass" Information 2017-12-18 10:50:24 Microsoft-Windows-Kernel-General 1 (5) "The system time has changed to ‎2017‎-‎12‎-‎18T09:50:24.748562700Z from ‎2017‎-‎12‎-‎18T09:50:24.748562700Z. Change Reason: System time adjusted to the new time zone." Information 2017-12-18 10:50:21 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:50:21 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:50:21 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:50:21 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:50:18 Microsoft-Windows-Time-Service 158 None The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. Information 2017-12-18 10:50:18 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 10:50:18 EventLog 6011 None The NetBIOS name and DNS host name of this machine have been changed from WIN-BQ8HT92RTKH to DESKTOP-57M3LFG. Information 2017-12-18 10:50:16 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 10:50:16 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 10:50:16 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 10:50:00 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 10:49:59 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Warning 2017-12-18 10:49:58 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 10:49:58 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 10:49:56 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 10:49:56 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 10:49:56 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 10:49:56 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 10:49:56 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 10:49:56 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 10:49:56 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 10:49:56 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Information 2017-12-18 10:49:56 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 10:49:55 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-18 10:49:55 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:49:55 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:49:55 Microsoft-Windows-Ntfs 98 None Volume C: (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 10:49:54 Microsoft-Windows-FilterManager 6 None File System Filter 'WdFilter' (10.0, ‎2001‎-‎08‎-‎08T06:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:49:54 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:49:54 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 26 None A one-time boot sequence was used during this boot. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 20 (31) The last shutdown's success status was true. The last boot's success status was true. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 10:49:53 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T09:49:53.487800000Z. Information 2017-12-18 10:49:39 Microsoft-Windows-Kernel-General 13 (2) The operating system is shutting down at system time ‎2017‎-‎12‎-‎18T09:49:39.874204200Z. Information 2017-12-18 10:49:31 Microsoft-Windows-Kernel-Power 109 (103) "The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API" Information 2017-12-18 10:49:26 Microsoft-Windows-WLAN-AutoConfig 4001 None "WLAN AutoConfig service has successfully stopped. " Information 2017-12-18 10:50:16 EventLog 6013 None The system uptime is 23 seconds. Information 2017-12-18 10:50:16 EventLog 6005 None The Event log service was started. Information 2017-12-18 10:50:16 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free. Information 2017-12-18 10:49:26 Microsoft-Windows-Dhcp-Client 50037 Service State Event DHCPv4 client service is stopped. ShutDown Flag value is 1 Information 2017-12-18 10:49:26 Microsoft-Windows-Dhcp-Client 50106 Service State Event DHCPv4 is waiting on DHCPv6 service to stop Information 2017-12-18 10:49:26 Microsoft-Windows-Dhcp-Client 50105 Service State Event DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT Information 2017-12-18 10:49:26 Microsoft-Windows-Dhcp-Client 50104 Service State Event DHCPv4 client received shutdown notification Information 2017-12-18 10:49:25 User32 1074 None "The process C:\Windows\system32\winlogon.exe (MINWINPC) has initiated the restart of computer WIN-BQ8HT92RTKH on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: " Information 2017-12-18 10:49:26 EventLog 6006 None The Event log service was stopped. Information 2017-12-18 10:49:19 Microsoft-Windows-Setup 2004 OS information Successfully logged OS information Error 2017-12-18 10:48:52 Service Control Manager 7024 None "The Background Intelligent Transfer Service service terminated with the following service-specific error: Server execution failed" Error 2017-12-18 10:48:52 Microsoft-Windows-Bits-Client 16392 None The BITS service failed to start. Error 0x80080005. Error 2017-12-18 10:48:52 Microsoft-Windows-DistributedCOM 10010 None The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout. Error 2017-12-18 10:48:08 Microsoft-Windows-DistributedCOM 10010 None The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout. Information 2017-12-18 10:47:30 Microsoft-Windows-UserModePowerService 22 (18) Reapply power settings upon completion of the provisioning engine's turn 1 Error 2017-12-18 10:47:20 Service Control Manager 7001 None "The Connected Devices Platform Service service depends on the Network Connection Broker service which failed to start because of the following error: After starting, the service hung in a start-pending state." Information 2017-12-18 10:47:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\Windows\AppCompat\Programs\Amcache.hve was cleared updating 0 keys and creating 0 modified pages. Error 2017-12-18 10:47:20 Service Control Manager 7022 None The Network Connection Broker service hung on starting. Information 2017-12-18 10:47:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:47:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17063.24021.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:47:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17063.24021.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:47:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:47:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxIdentityProvider_12.30.5001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.20.25002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_31.32.16002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.8.24001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11706.1002.9.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Error 2017-12-18 10:46:52 Microsoft-Windows-DistributedCOM 10010 None The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout. Information 2017-12-18 10:46:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1706.1561.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:48 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1706.2261.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:38 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1705.2121.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:34 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.727.20.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:18 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1706.2406.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:16 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1706.2401.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.37071.16410.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Error 2017-12-18 10:46:07 Microsoft-Windows-DistributedCOM 10010 None The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout. Information 2017-12-18 10:46:07 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11706.1707.7010.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:46:06 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.18.596.0_x64__kzf8qxf38zg5c\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:56 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:55 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Print3D_1.0.2422.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.2351.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_3.1708.2224.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8366.57611.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:36 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_2.1709.4027.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:33 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_1.8.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:31 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.17.8162.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:24 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_17.8414.5925.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:20 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_1.1707.26019.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:19 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Messaging_3.32.15001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:17 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:15 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_5.11.1641.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:13 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.1706.1811.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:11 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.12161.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:09 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.21.2492.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:05 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:04 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:02 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:45:00 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:59 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1705.4.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1705.4.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:58 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.1.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:54 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:53 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecureAssessmentBrowser_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:52 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecHealthUI_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Error 2017-12-18 10:44:52 Microsoft-Windows-DistributedCOM 10010 None The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout. Information 2017-12-18 10:44:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PinningConfirmationDialog_1000.16299.15.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:51 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PeopleExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ParentalControls_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:50 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.HolographicFirstRun_10.0.16299.125_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:49 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:47 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:46 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.PPIProjection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:45 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ECApp_10.0.16299.15_neutral__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:44 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.CredDialogHost_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:43 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\InputApp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:42 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:41 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:40 Microsoft-Windows-Kernel-General 16 None The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. Information 2017-12-18 10:44:24 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver bthpan.inf_amd64_b76964376bcc6ad4\bthpan.inf for Device Instance ID BTH\MS_BTHPAN\6&33A6D00D&0&3 with the following status: 0x0. Information 2017-12-18 10:44:24 Service Control Manager 7045 None "A service was installed in the system. Service Name: Bluetooth Device (Personal Area Network) Service File Name: \SystemRoot\System32\drivers\bthpan.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:24 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver bthl2cap.inf_amd64_4a368e040ca87769\bthl2cap.inf for Device Instance ID BTH\MS_BTHL2CAP\6&33A6D00D&0&2 with the following status: 0x0. Information 2017-12-18 10:44:24 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service bthl2cap for Device Instance ID BTH\MS_BTHL2CAP\6&33A6D00D&0&2 with the following status: 0. Information 2017-12-18 10:44:23 Service Control Manager 7045 None "A service was installed in the system. Service Name: Microsoft Bluetooth Protocol Support Driver Service File Name: \SystemRoot\system32\DRIVERS\bthl2cap.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:23 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver netvwifimp.inf_amd64_6329c29098c07306\netvwifimp.inf for Device Instance ID {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}\VWIFIMP_WFD\5&356EDBB6&0&11 with the following status: 0x0. Information 2017-12-18 10:44:23 Service Control Manager 7045 None "A service was installed in the system. Service Name: Virtual WiFi Miniport Service Service File Name: \SystemRoot\System32\drivers\vwifimp.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:23 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver bth.inf_amd64_2d73ffd8a9122707\bth.inf for Device Instance ID BTH\MS_BTHBRB\6&33A6D00D&0&1 with the following status: 0x0. Information 2017-12-18 10:44:23 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service BthEnum for Device Instance ID BTH\MS_BTHBRB\6&33A6D00D&0&1 with the following status: 0. Information 2017-12-18 10:44:22 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver tdibth.inf_amd64_dbe21091e108eb78\tdibth.inf for Device Instance ID BTH\MS_RFCOMM\6&33A6D00D&0&0 with the following status: 0x0. Information 2017-12-18 10:44:22 Service Control Manager 7045 None "A service was installed in the system. Service Name: Bluetooth Enumerator Service Service File Name: \SystemRoot\System32\drivers\BthEnum.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:22 Service Control Manager 7045 None "A service was installed in the system. Service Name: Bluetooth Device (RFCOMM Protocol TDI) Service File Name: \SystemRoot\System32\drivers\rfcomm.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:22 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver bthleenum.inf_amd64_33830f38244d4674\bthleenum.inf for Device Instance ID BTH\MS_BTHLE\6&33A6D00D&0&0 with the following status: 0x0. Information 2017-12-18 10:44:22 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service BthLEEnum for Device Instance ID BTH\MS_BTHLE\6&33A6D00D&0&0 with the following status: 0. Information 2017-12-18 10:44:22 Service Control Manager 7045 None "A service was installed in the system. Service Name: Bluetooth Low Energy Driver Service File Name: \SystemRoot\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:21 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_66e0a5048e30f9c5\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Information 2017-12-18 10:44:21 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2017-12-18 10:44:20 Microsoft-Windows-WLAN-AutoConfig 4000 None "WLAN AutoConfig service has successfully started. " Information 2017-12-18 10:44:19 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 10:44:19 NETwNb64 7001 None "The description for Event ID 7001 from source NETwNb64 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\NDMP2 Intel(R) Wireless-N 7260 The specified resource type cannot be found in the image file " Information 2017-12-18 10:44:19 NETwNb64 7036 None The \Device\NDMP2 service entered the Intel(R) Wireless-N 7260 state. Warning 2017-12-18 10:44:18 BTHUSB 34 None The local adapter does not support an important Low Energy controller state to support peripheral mode. The minimum required supported state mask is 0x491f7fffff, got 0x1fffffff. Low Energy peripheral role functionality will not be available. Information 2017-12-18 10:44:18 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver ibtusb.inf_amd64_969dafad8ceaf3ce\ibtusb.inf for Device Instance ID USB\VID_8087&PID_07DC\5&DED9A49&0&3 with the following status: 0x0. Information 2017-12-18 10:44:18 BTHUSB 18 None Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup. Information 2017-12-18 10:44:18 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service BTHPORT for Device Instance ID USB\VID_8087&PID_07DC\5&DED9A49&0&3 with the following status: 0. Information 2017-12-18 10:44:18 Service Control Manager 7045 None "A service was installed in the system. Service Name: Bluetooth Port Driver Service File Name: \SystemRoot\system32\DRIVERS\BTHport.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:18 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service BTHUSB for Device Instance ID USB\VID_8087&PID_07DC\5&DED9A49&0&3 with the following status: 0. Information 2017-12-18 10:44:17 Service Control Manager 7045 None "A service was installed in the system. Service Name: Bluetooth Radio USB Driver Service File Name: \SystemRoot\system32\DRIVERS\BTHUSB.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:17 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service ibtsiva for Device Instance ID USB\VID_8087&PID_07DC\5&DED9A49&0&3 with the following status: 0. Information 2017-12-18 10:44:17 Service Control Manager 7045 None "A service was installed in the system. Service Name: Intel Bluetooth Service Service File Name: %SystemRoot%\system32\ibtsiva Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 10:44:17 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service ibtusb for Device Instance ID USB\VID_8087&PID_07DC\5&DED9A49&0&3 with the following status: 0. Information 2017-12-18 10:44:17 Service Control Manager 7045 None "A service was installed in the system. Service Name: Intel(R) Wireless Bluetooth(R) Service File Name: \SystemRoot\system32\DRIVERS\ibtusb.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:17 Service Control Manager 7040 None The start type of the WLAN AutoConfig service was changed from demand start to auto start. Information 2017-12-18 10:44:17 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver netwbw02.inf_amd64_a5a98984ed46f1dc\netwbw02.inf for Device Instance ID PCI\VEN_8086&DEV_08B1&SUBSYS_44628086&REV_73\4851B7FFFFBD102800 with the following status: 0x0. Information 2017-12-18 10:44:16 Service Control Manager 7045 None "A service was installed in the system. Service Name: ___ Intel(R) Wireless Adapter Driver for Windows 8.1 - 64 Bit Service File Name: \SystemRoot\System32\drivers\Netwbw02.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:15 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver intcdaud.inf_amd64_66e0a5048e30f9c5\intcdaud.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0x0. Information 2017-12-18 10:44:15 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service IntcDAud for Device Instance ID HDAUDIO\FUNC_01&VEN_8086&DEV_2883&SUBSYS_80860101&REV_1000\4&18168AEB&0&0201 with the following status: 0. Information 2017-12-18 10:44:15 Service Control Manager 7045 None "A service was installed in the system. Service Name: Intel(R) Display Audio Service File Name: \SystemRoot\system32\DRIVERS\IntcDAud.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:12 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver rt640x64.inf_amd64_7de8f25070c47fd3\rt640x64.inf for Device Instance ID PCI\VEN_10EC&DEV_8168&SUBSYS_012310EC&REV_06\8BBB0000684CE00000 with the following status: 0x0. Information 2017-12-18 10:44:11 Service Control Manager 7045 None "A service was installed in the system. Service Name: Realtek RT640 NT Driver Service File Name: \SystemRoot\System32\drivers\rt640x64.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:09 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver hdaudio.inf_amd64_a0aad29292cb565f\hdaudio.inf for Device Instance ID HDAUDIO\FUNC_01&VEN_10EC&DEV_0662&SUBSYS_10EC0662&REV_1003\4&18168AEB&0&0001 with the following status: 0x0. Information 2017-12-18 10:44:08 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service HdAudAddService for Device Instance ID HDAUDIO\FUNC_01&VEN_10EC&DEV_0662&SUBSYS_10EC0662&REV_1003\4&18168AEB&0&0001 with the following status: 0. Information 2017-12-18 10:44:08 Service Control Manager 7045 None "A service was installed in the system. Service Name: Microsoft 1.1 UAA Function Driver for High Definition Audio Service Service File Name: \SystemRoot\system32\DRIVERS\HdAudio.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:44:06 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver igdlh64.inf_amd64_e0d9253f13281f5c\igdlh64.inf for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0x0. Information 2017-12-18 10:44:03 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxCUIService2.0.0.0 for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2017-12-18 10:44:03 Service Control Manager 7045 None "A service was installed in the system. Service Name: Intel(R) HD Graphics Control Panel Service Service File Name: %SystemRoot%\system32\igfxCUIService.exe Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 10:44:03 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service cphs for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2017-12-18 10:44:03 Service Control Manager 7045 None "A service was installed in the system. Service Name: Intel(R) Content Protection HECI Service Service File Name: %SystemRoot%\SysWow64\IntelCpHeciSvc.exe Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem" Information 2017-12-18 10:44:03 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service igfxLP for Device Instance ID PCI\VEN_8086&DEV_22B1&SUBSYS_72708086&REV_21\3&11583659&0&10 with the following status: 0. Information 2017-12-18 10:44:03 Service Control Manager 7045 None "A service was installed in the system. Service Name: igfxLP Service File Name: \SystemRoot\system32\DRIVERS\igdkmd64lp.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:42:57 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver wpdfs.inf_amd64_86b72dac27e0ea83\wpdfs.inf for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_VITCEN&PROD_UFD&REV_1100#AT10083110000253&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0x0. Information 2017-12-18 10:42:57 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_VITCEN&PROD_UFD&REV_1100#AT10083110000253&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 2017-12-18 10:42:57 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 2017-12-18 10:42:57 Microsoft-Windows-DriverFrameworks-UserMode 10002 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112DE495-AC4C-46F8-B663-6A4266C53313}) was upgraded. It requires framework version 2.23.0 or higher. Information 2017-12-18 10:42:57 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.23.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_VITCEN&PROD_UFD&REV_1100#AT10083110000253&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Information 2017-12-18 10:42:56 Microsoft-Windows-UserPnp 20001 (7005) Driver Management concluded the process to install driver wpdfs.inf_amd64_86b72dac27e0ea83\wpdfs.inf for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_ULTRA_FIT&REV_1.00#4C531001401103102232&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0x0. Information 2017-12-18 10:42:57 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 2017-12-18 10:42:57 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 2017-12-18 10:42:57 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Information 2017-12-18 10:42:56 Microsoft-Windows-WPDClassInstaller 24579 Driver Post-Install Configuration Autoplay registration was skipped for device %1. Information 2017-12-18 10:42:56 Microsoft-Windows-WPDClassInstaller 24577 Driver Post-Install Configuration Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. Information 2017-12-18 10:42:56 Microsoft-Windows-WPDClassInstaller 24576 Driver Installation Drivers were successfully installed for device WPD Device. Information 2017-12-18 10:42:55 Microsoft-Windows-UserPnp 20003 (7005) Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_ULTRA_FIT&REV_1.00#4C531001401103102232&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. Information 2017-12-18 10:42:55 Service Control Manager 7045 None "A service was installed in the system. Service Name: WUDFWpdFs Service File Name: \SystemRoot\system32\DRIVERS\WUDFRd.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: " Information 2017-12-18 10:42:55 Microsoft-Windows-DriverFrameworks-UserMode 10100 Installation or update of device drivers. The driver package installation has succeeded. Information 2017-12-18 10:42:55 Microsoft-Windows-DriverFrameworks-UserMode 10001 Installation or update of device drivers. The UMDF service WpdFs (CLSID {112DE495-AC4C-46F8-B663-6A4266C53313}) was installed. It requires framework version 2.23.0 or higher. Information 2017-12-18 10:42:55 Microsoft-Windows-DriverFrameworks-UserMode 10000 Installation or update of device drivers. A driver package which uses user-mode driver framework version 2.23.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_SANDISK&PROD_ULTRA_FIT&REV_1.00#4C531001401103102232&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. Error 2017-12-18 10:42:54 Service Control Manager 7023 None "The IP Helper service terminated with the following error: The device is not ready." Information 2017-12-18 10:42:54 Service Control Manager 7026 None "The following boot-start or system-start driver(s) did not load: CSC dam EhStorClass" Information 2017-12-18 10:42:54 Workstation 3261 None This computer has been successfully joined to workgroup 'WORKGROUP'. Error 2017-12-18 10:42:52 Service Control Manager 7023 None "The Spooler service terminated with the following error: Ran out of memory" Information 2017-12-18 10:42:51 Microsoft-Windows-DHCPv6-Client 51046 Service State Event DHCPv6 client service is started Information 2017-12-18 10:42:51 Microsoft-Windows-Dhcp-Client 50103 Service State Event DHCPv4 client registered for shutdown notification Information 2017-12-18 10:42:51 Microsoft-Windows-Dhcp-Client 50036 Service State Event DHCPv4 client service is started Information 2017-12-18 10:42:51 Microsoft-Windows-FilterManager 6 None File System Filter 'storqosflt' (10.0, ‎2005‎-‎04‎-‎24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:51 Microsoft-Windows-FilterManager 6 None File System Filter 'CldFlt' (10.0, ‎2066‎-‎03‎-‎30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:51 Microsoft-Windows-FilterManager 6 None File System Filter 'luafv' (10.0, ‎1971‎-‎04‎-‎04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:51 Microsoft-Windows-FilterManager 6 None File System Filter 'wcifs' (10.0, ‎1973‎-‎04‎-‎02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:44 Microsoft-Windows-SetupPlatform 2005 Install Windows Task New Setup information Information 2017-12-18 10:42:35 Microsoft-Windows-Directory-Services-SAM 16962 None "Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651." Information 2017-12-18 10:42:35 Microsoft-Windows-Wininit 14 None Credential Guard (LsaIso.exe) configuration: 0x0, 0 Information 2017-12-18 10:42:12 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed. Information 2017-12-18 10:42:12 Microsoft-Windows-Ntfs 98 None Volume G: (\Device\HarddiskVolume3) is healthy. No action is needed. Information 2017-12-18 10:42:12 Microsoft-Windows-Ntfs 98 None Volume D: (\Device\HarddiskVolume4) is healthy. No action is needed. Information 2017-12-18 10:42:11 Microsoft-Windows-Kernel-Power 172 (203) Connectivity state in standby: Disconnected, Reason: NIC compliance Information 2017-12-18 10:42:11 TXEIx64 2 None Intel(R) Trusted Execution Engine Interface driver has started successfully. Information 2017-12-18 10:42:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 10:42:11 Microsoft-Windows-Kernel-Processor-Power 55 (47) "Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (3 state(s)) Performance state type: ACPI Performance (P) / Throttle (T) States Nominal Frequency (MHz): 1601 Maximum performance percentage: 100 Minimum performance percentage: 29 Minimum throttle percentage: 3" Information 2017-12-18 10:42:11 Microsoft-Windows-FilterManager 6 None File System Filter 'npsvctrig' (10.0, ‎2070‎-‎05‎-‎05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:10 Microsoft-Windows-FilterManager 6 None File System Filter 'FileCrypt' (10.0, ‎2013‎-‎05‎-‎08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:10 Microsoft-Windows-Ntfs 98 None Volume \\?\Volume{3f1d4c0b-0000-0000-0000-501f00000000} (\Device\HarddiskVolume2) is healthy. No action is needed. Information 2017-12-18 10:42:09 Microsoft-Windows-FilterManager 6 None File System Filter 'WdFilter' (10.0, ‎2001‎-‎08‎-‎08T06:54:57.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:09 Microsoft-Windows-FilterManager 6 None File System Filter 'Wof' (10.0, ‎2102‎-‎10‎-‎27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:09 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (10.0, ‎1983‎-‎09‎-‎10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-Boot 30 (21) The firmware reported boot metrics. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-Boot 32 (58) The bootmgr spent 0 ms waiting for user input. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-Boot 18 (57) There are 0x1 boot options on this system. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-Boot 25 (32) The boot menu policy was 0x1. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-Boot 27 (33) The boot type was 0x0. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-Boot 153 (62) Virtualization-based security (policies: 0) is disabled. Information 2017-12-18 10:42:08 Microsoft-Windows-Kernel-General 12 (1) The operating system started at system time ‎2017‎-‎12‎-‎18T09:42:08.490757500Z. Information 2017-12-18 10:42:51 EventLog 6005 None The Event log service was started. Information 2017-12-18 10:42:51 EventLog 6009 None Microsoft (R) Windows (R) 10.00. 16299 Multiprocessor Free.