1.

Solve : Repeated warning in eventviewer but no notifiable symptomps?

Answer»

My comp.spec is in my status already, so here we go..

I checked eventviewer frequently and found this warning message everytime my computer starts

Quote

Event Type:   Warning
Event Source:   Userenv
Event Category:   None
Event ID:   1517
Date:      01/01/2010
Time:      2:39:09
User:      NT AUTHORITY\SYSTEM
Computer:   STARFLEET
Description:
Windows saved user STARFLEET\JOHN registry while an application or service was STILL using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

 This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see HELP and Support Center at http://go.microsoft.com/fwlink/events.asp.

Apparently it began when I installed MSOFFICE 2007:

Quote
Event Type:   Warning
Event Source:   WinMgmt
Event Category:   None
Event ID:   63
Date:      30/12/2009
Time:      23:23:17
User:      NT AUTHORITY\SYSTEM
Computer:   STARFLEET
Description:
A provider, OffProv12, has been registered in the WMI namespace, Root\MSAPPS12, to use the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

And now it getting worse, I just found 2 more message like this:

Quote
Event Type:   Warning
Event Source:   WinMgmt
Event Category:   None
Event ID:   63
Date:      03/01/2010
Time:      16:11:18
User:      STARFLEET\JOHN
Computer:   STARFLEET
Description:
A provider, OffProv12, has been registered in the WMI namespace, Root\MSAPPS12, to use the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

For additional info, I disabled & changed these services to manual:
Quote
Automatic Updates
IPSEC         -manual
Print spooler      -manual
Task Scheduler
Windows time
Remote registry
Help & support      -manual
Windows Media PLAYER Network Sharing Service
Don't worry about it and to stay sane, stay out of event viewer.I have ATI onboard video on my little Shuttle, and the driver has been putting "invalid pixel format" warnings in my event log for 5 years.
Right. Forget about "warnings". Errors, on the other hand..........Alright.. I just suspicious that something may went wrong with my registry after I ran Tune up registry cleaner. Error reports? I got this recently:

Quote
Event Type:   Error
Event Source:   Adobe Version Cue CS3
Event Category:   None
Event ID:   3
Date:      04/01/2010
Time:      16:50:46
User:      N/A
Computer:   STARFLEET
Description:
The description for Event ID ( 3 ) in Source ( Adobe Version Cue CS3 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be ABLE to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: AssetServicesCS3; class vcfoundation::base::VCIllegalState: IVCPipeServer already closed
Trace: (null).

This same message spawns like about a hundred before it ends, all exactly in the same time!Ignore it and stay out of event viewer.


Discussion

No Comment Found