F Secure AntiVirus event 103 windows xp

Event Description:
Malicious code found in file 2451.exe
Infection: Worm.Generic.256266

Additional Proof:

Adapter Link Down Event 4 E100B

Event Description:
Adapter Intel(R) PRO/100VE Network Connection: Adapter Link Down.
event id: 4
source: E100B


Additional data:
0000: 00040000 00580002 00000000 c0040004
0010: 00000000 00000000 00000000 00000000
0020: 00000000 00000000 c0040004

Proof:

Error 352 SPDY PING FAILED chrome

Error message:
Error 352 (net::ERR_SPDY_PING_FAILED): Unknown error.

I am obtaining the error 352 while trying to load the attachment on mail. Additionally, the message displayed includes, This webpage is not available. The webpage might be temporarily down or it may have moved permanently to a new web address. What can be the cause?..

solution:
While troubleshooting any error two things are very important, they are the code and the error message. Here for our error we have 352 as the code and spdy ping failed as the message. What can we do with 352, lets try searching for the solution. I suggest to use one of a best web debugger fiddler to find status of the code. We can find it by simply trying the action which causes the error and have a look at fiddler. For better understanding, try requesting the page and get the response on the debugger and then log the status.

Dont you know, what is spdy?.. spdy is the speedy networking protocol developed by google for transporting web content. Just like http, it is mainly used for web security and to reduce web page loading latency. However it will not replace http, but it can modifies the way http requests and responses are sent over the network. If you are the web debugger, then try requesting any of the google product, there you can able to notice the word spdy given with short term of message.


Snapshot proof for the error:

Related article:
error 15 socket not connected chrome

Event id 14 Symantec AntiVirus

Event Description:
Symantec Endpoint Protection services failed to start. (2000005F). Application has encountered an error. For more information please go to: symantec.com/techsupp/servlet/ProductMessages?product=SAVCORP&version=11.0.4000.2263&language=english&module=1000&error=0011&build=symantec_ent.

Additional details:
event id: 14
source: symantec antivirus

proof:

shared Network address translation

Event Description:
The network address translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resource, or an internal error. The data is the error code.

Additional data:
event id: 32003
log name: system
source: SharedAccess_NAT
OpCode: info
keywords: classic

McLogEvent 5051 Windows

Event Description:
A thread in process C:\Program Files\McAfee\VirusScan Enterprise\McShield.exe took longer than 90000 ms to complete a request. The process will be terminated.


Additional details:
Thread id: 2856 (0xb28)
Thread address: 0x12026890
Thread message:
Build VSCORE.14.1.0.567 / 5400.1158
Object being scanned = \Device\HarddiskVolume1\WINDOWS\system32\@x.dllorkerW
by C:\WINDOWS\Explorer.EXE
4(329)(0)
4(329)(0)
7200(329)(0)
7595(329)(0)
7005()(0)
7004(0)(0)
5006(0)(0)
5004(0)(0)


Event snapshot proof:

Related post:
McLogEvent 259 windows event viewer

McLogEvent 259

Event Description:
The scan found detections. Scan engine version 5400.1158 DAT version 6639

Additional details:
Event id: 259
source: McLogEvent


Proof:

McLogEvent Event id 1008

Event Description:
The McShield  service terminated unexpectedly. Please review event 5051 or 5019 for details. The McShield service will be restarted in 5 seconds;

Additional details:
source: McLogEvent
Event id: 1008

Event snapshot proof:

Error: 26 provider: SQL Network Interfaces

Error message component:
Details:
A network related or instance specific error occurred while establishing a connection to SQL server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL server is configured to allow remote connections. (provider: SQLNetwork Interfaces, error: 26 -  Error Locating Server/Instance Specified) (.Net SqlClient Data Provider).

Additional data:
Error Number: -1
Severity: 20
State: 0

solution:
Refer, the page http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=-1&LinkId=20476.

Program Location:

at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Connect(ServerInfo serverInfo, SqlInternalConnectionTds connHandler, Boolean ignoreSniOpenTimeout, Int64 timerExpire, Boolean encrypt, Boolean trustServerCert, Boolean integratedSecurity, SqlConnection owningObject)
   at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, Boolean ignoreSniOpenTimeout, Int64 timerExpire, SqlConnection owningObject)
   at System.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(String host, String newPassword, Boolean redirectedUserInstance, SqlConnection owningObject, SqlConnectionString connectionOptions, Int64 timerStart)
   at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(SqlConnection owningObject, SqlConnectionString connectionOptions, String newPassword, Boolean redirectedUserInstance)
   at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, Object providerInfo, String newPassword, SqlConnection owningObject, Boolean redirectedUserInstance)
   at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup)
   at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at Microsoft.SqlServer.Management.UI.VSIntegration.ObjectExplorer.ObjectExplorer.ValidateConnection(UIConnectionInfo ci, IServerType server)
   at Microsoft.SqlServer.Management.UI.ConnectionDlg.Connector.ConnectionThreadUser()

Event 10000 windows 7 DCOM

Event Description:
Unable to start a DCOM server: {FFF2D28F-E4EE-44D9-8104-8E71556757F6}. The Error "786" happened while starting this command: C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\agent.exe -Embedding.

Additional data:
log name: system
event id: 10000
event source: DistributedCOM
OpCode: info
keyword: classic

Proof Snapshot:

Recommended post:
Event 10000 DCOM windows xp

Event 27 volsnap

Event Description:
The shadow copies of volume C: were aborted during detection because a critical control file could not be opened.

Additional details:
log name: system
event source: volsnap
event id: 27
keywords: classic
locale: 1033
product: windows 7 operating system

Recommended Proof:

Recommendede post:
source volsnap windows event viewer

error 40 connection to SQL server

Server Error in '/' Application.
A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL server is configured to allow remote connections. (provider: Named pipes Provider, error: 40 - Could not open a connection to SQL server).

Description:
An unhandled exception occurred during  the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details:
System.Data.SqlClient.SqlException

Source Error:
An unhandled exception was generated during the execution of the current web request.  Information regarding the origin and location of the exception can be identified using the exception trace below.

Stack Trace:
[SqlException (0x80131904): A network-related or instance-specific error occurred while establishing a connection to SQL server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections].
System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owning Object) +428
System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection) +65
System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory) +117
System.Data.SqlClient.SqlConnection.Open() +122
GetIt.Enterprise.DataServices.SqlService.ExecuteNonQuery(String connectionString, CommandType commandType,String commandText, SqlParameter[] commandParameters) +109
GetIt.Web.Catalog.CatalogHelper.IsCatalogExists(String permalink) +264
GetIt.Web.SupportLayer.URLHandler.RedirectKnownPath(HttpApplication oApp, String strRequestUrl) +5914
GetIt.Web.SupportLayer.URLHandler.UrlHandlerBeginRequest(Object sender, EventArgs e) +892
System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +68
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75

Version Information:
Microsoft.Net Framework; Version: 2.0.50727.3053; ASP.NET.

event id 43 cirrus: sleep operation failed

Event Description:
The system sleep operation failed
source: cirrus
event id: 43
file name: IoLogMsg.dll

Additional data:
0000: 00000016 00be0001 00000000 c004002b
0010: 00030002 c000009e 00000000 00000000
0020: 00000000 00000000

Event proof:

Setup Error Incorrect SideBySide Configuration

After I installed CamStudio 2.6b, when i am trying to open the file i got an error stated with the following error message.
Setup
Unable to execute file:
C:\Program Files\CamStudio 2.6b\Recorder.exe
CreateProcess Filed; code 14001.
The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe for more detail.

Event Viewer report about this error logged with event id 33, sidebyside:
Event Description:
Activation context generation failed for C:\Program Files\CamStudio 2.6b\Recorder.exe.
Dependent Assembly
Microsoft.VC90.MFC,processor architecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.210228.0", could not be found. Please use sxstrace.exe for detail diagnosis.

Additional data:
log name: application
event id: 33
source: SideBySide
keywords: classic

Proof captured when i try to open the software:

Note: Instead the above error it is also expected, "Unable to execute file.
Create process failed; code 14001
This application has failed to start because the application configuration is incorrect".

Solution: Reinstalling the application may fix this problem.

Winsxs Trace Session error 0xC0000022

Event Description:
Session 'Winsxs Trace Session' failed to start with the following error: 0XC0000022

Additional data:
log name: kernel event tracing/Admin
source: kernel event tracing
event id: 2
task category: session
keywords: session
OpCode: start

Proof for the event:

Event 1006 Customer Experience Improvement Program

Event Description:
A problem prevented Customer Experience Improvement Program data from being consolidated into files that can be sent to microsoft, (Error 80070005).

Additional details:
log name: application
event id: 1006
event source: Microsoft-Windows-CEIP
OpCode: info
keywords: classic

snapshot proof for the event:

solution:
Refer the following article http://technet.microsoft.com/en-us/library/cc774621(v=ws.10).aspx. from the microsoft technet site.

Event 12297 Volume Shadow Copy Service

Event Description:
Volume Shadow Copy Service error: The I/O writes cannot be flushed during the shadow copy creation period on volume \\?\Volume{ba206c14-f144-11e0-a0ff-806e6f6e6963}\. The volume index in the shadow copy set is 0. Error details: Open[0x00000000, The operation completed successfully.], Flush[0x80042302, A Volume Shadow Copy Service component encountered an unexpected error. Check the application event log for more information.],Release[0x00000000, The operation completed successfully.], OnRun[0x00000000, The operation completed successfully.].
Operation: Executing Asynchronous Operation.
Context:
Current State: DoSnapshotSet

Additional data:
log name: application
source: vss
event id: 12297
keywords:classic

proof:

Event 12297 Volume Shadow Copy Service

Event Description:
Volume Shadow Copy Service error: The I/O writes cannot be flushed during the shadow copy creation period on volume \\?\Volume{ba206c14-f144-11e0-a0ff-806e6f6e6963}\. The volume index in the shadow copy set is 0. Error details: Open[0x00000000, The operation completed successfully.], Flush[0x80042302, A Volume Shadow Copy Service component encountered an unexpected error. Check the application event log for more information.],Release[0x00000000, The operation completed successfully.], OnRun[0x00000000, The operation completed successfully.].
Operation: Executing Asynchronous Operation.
Context:
Current State: DoSnapshotSet

Additional data:
log name: application
source: vss
event id: 12297
keywords:classic

proof:

mDNS_busy (2) Event 100 Bonjour Service

Event Description:
SetNextQueryTime: Lock not held. mDNS_busy (2) mDNS_reentrancy (0)
log name: application
event id: 100
source: bonjour service
product name: bonjour
product version: 2.0.5.0
keywords: classic

proof:

BTHUSB Bluetooth adapter

Event 16, BTHUSB:
Event Description:
The mutual authentication between the local Bluetooth adapter and a device with bluetooth adapter address (a8:5c:ff:8f:e8:97) failed.
log name: system
source: BTHUSB
event id: 16
keywords: classic
product: windows 7 operating system

Image snapshot for the error:

Event 17, BTHUSB:
The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Event 777 Dell - System Update

Event Description:
Update failed
Package: Setup.exe
Previous version: NA, New version:
log file: C:\Dell\UpdatePackage\log\bcmwl.log
Exit code: 0.
log name: application
event id: 777
keywords: classic
event source: dell - system update
product name: windows 7 operating system
product version: 6.1.7600.16385

Event 12289 VSS Window 7

Volume shadow copy service error: Unexpected error DeviceIoControl(\\?\Volume{ba206c14-f144-11e0-a0ff-806e6f6e6963} - 0000000000000490, 0x0053c000, 0000000000382E10,0,0000000000384E30,4096,[0]). hr=0x80070570, The file or directory is corrupted and unreadable.
Operation:
Executing Asynchronous Operation
Context:
Current state: calling flush-and-hold IOCTL.
Current state: flush and hold writes.
Volume name is also logged on the event.
Additional details about the event:
log name: application
source: VSS
event id 12289.
keywords: classic.
product name: microsoft windows operating system.
product version: 6.1.7600.16385


Image snapshot for the error:

Event 10000 DCOM windows xp

Event Description:
Unable to start a DCOM server: {5C4C8078-24CF-4C71-B05E-8B1D935DB5AC}.The error: "This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem". The error happened while starting the command: "msnmgr.exe -Embedding".
source: DCOM
event id: 10000
file name: netevent.dll

Screenshot image proof for the error:

Recommended solution:
Modify the registry entries accordingly what is given from the page  http://support.microsoft.com/kb/914052.

 

Event id 34 Time-Service Windows 7

The time service has detected that the system time needs to be changed by -54197 seconds. The time service will not change the system time by more than 54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com,0x9 (ntp.m|0x9| 0.0.0.0:123-> 207.46.250.85:123) is working properly.
log name: system
source: Time-Service
event id: 34
OpCode: info

proof:

Recommended solution:
Refer and adjust the settings of local time synchronization from the page http://technet.microsoft.com/en-us/library/cc733187%28v=ws.10%29.aspx.

Reliance Netconnect Application error windows 7

Event 1000, Application error:
Faulting application name: Reliance Netconnect.exe, version: 1.0.0.1, time stamp: 0x492a13ea.
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdadb.
Exception code: 0xc0000005
Fault offset: 0x00053067
Faulting process id: 0x52c
Faulting application path: C:\Program files\Reliance Netconnect\Reliance Netconnect.exe
Faulting module path: C:\Windows\System32\ntdll.dll
Report Id: e2f9489e-399e-11e0-83a5-001a4da64029

Log Name: application
source: application error
task category: (100)
keywords: classic
event id 100
Faulting Module SkinMagicU.dll is also logged on the event viewer for the reliance netconnect application.

Classic Event 7001 Service Control Manager

Dependency service or group failure event:
The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
log name: system
event id: 7001
keywords: classic
OpCode: info
The SMB 2.0/ 1.x MiniRedirector service depends on the SMB MiniRedirector wrapper and engine service which failed to start because of the error 'The dependency service or group failed to start'.
Other services includes:

• IP helper service depends on the Network Store Interface  Service service failed to start.
  

Device not functioning event:
The SMB MiniRedirector wrapper and engine service depends on the Redirected Buffering Sub System service failed to start because of the following error: A device attached to the system is not functioning.
Other services which are failed to start because of the same reason are,

• Network Store interface Service service depends on the NSI proxy service driver.

• TCP/IP NetBIOS helper service depends  on the Ancillary function driver for winsock service.

• DNS client service depends on the NetIO legacy TDI support driver service.

Proof for the error:

QTP Setup error Windows 7

QTP, a software testing tool installation or setup encountered an error on windows 7 operating system and as a result stated with an error message,
No background bmp defined in section 'General' entry 'BGBmp'
No Application name defined in section 'General' entry 'AppText'.

Still image proof:

Event id 4609 EventSystem

The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80080005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact microsoft product support services to report this error.
file name: COMRes.dll
file version: 2001.12.4414.258
product name: COM services
product version: 3.0.0.4414
source: EventSystem
event id: 4609
category: (50)
proof:

Event id 11406 MsiInstaller

Event Description:
Product: ESET Smart Security. Error 1406. Could not write value egui to key \Software\Microsoft\Windows\CurrentVersion\Run.System Error.Verify that you have sufficient access to that key, or contact your support personnel.

Error data:
0000: 3734317b 32373439 46332d44 342d3746
0010: 2d433035 31334342 3443462d 34303446
0020: 46463530 7d44
source: MsiInstaller
event id: 11406
proof:

Event 12305, VSS

Volume Shadow Copy Service error: Volume/ disk not connected or not found. Error context: DeviceIoControl(//?\GLOBALROOT\Device\HarddiskVolumeShadowCopy - 0000000000000130,0x00560034,0000000000108FE0,0,0000000000107FD0,4096,[0]).

Operation:
Processing PostFinalCommitSnapshots

Context:
Execution Context: System Provider
log name: application
source: VSS
event id: 12305
keywords: classic

Proof:

Unhandled Exception MadAppLauncher

Application: MadAppLauncher.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info:
Microsoft.VisualBasic.ApplicationServices.CantStartSingleInstanceException
Stack
at
Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

source: .net runtime
event id: 1026
file name: mscoree.dll
file version: 4.0.31106.0
productname: microsoft .net framework
product version: 4.0.31106.0

proof:

dot net runtime 4.0 error

Event Description:
Event Type clr20r3, P1 madapplauncher.exe, P2 1.0.10.0, P3 4f07e7e8, P4 microsoft visualbasic, P5 10.0.0.0, P6 4ba2183b, P7 78, P8 2b5, P9 34ssps20bdj3nj0wmit5kamzhvglfzcc, P10 NIL
file name: dw20.exe
file version: 12.0.4518.0
event id: 5000

proof:

Software Restriction Policy Processing Event

Event Description:
The installation of VIRTUAL_PC_2007_INSTALL.msi is not permitted due to an error in software restriction policy processing. The object cannot be trusted.
event id: 1008
source: MsiInstaller
file name: msi.dll
file version: 3.1.4001.5512

proof:

Recommended solution:
Refer the following pages http://technet.microsoft.com/en-us/library/cc735563%28v=ws.10%29.aspx, http://support.microsoft.com/kb/324036, http://technet.microsoft.com/en-us/library/697cf804-36ae-4925-a56a-bc91b44dfcd9.

SRService initialization process failed

Event Description:
The system restore initialization process failed.
event id: 104
source: SRService
data:
0000: 00000005
file name: srsvc.dll
file version: 5.1.2600.5512

proof:

Application Popup Event

Event Description:
There was error [DATABASE NOT LOADED] processing the driver database.
There was error [DATABASE OPEN FAILED] processing the driver database.
event id: 877
source: application popup
data:
0000: 00000000 00640002 00000000 c000036d
0010: 00000000 c000036d 00000000 00000000
0020: 00000000 00000000

proof:

child status 100 permanent error gmail

MAILER-DAEMON@p3plsmtp11-05.prod.phx3.secureserver.net
child status 100..The e-mail message could not be delivered because the user's mailfolder is full.
Content Type: multipart/alternative
Received: (qmail 3592 invoked from network)
X-IronPort-Anti-Spam-Result: AowBAJ69K0/

RVdYwimdsb2JhbABDgk2raV8IIgEBA

QoJDQcSBiGBcwEBBBICLAEbHgMMBhA
tAQ0hAQERAQUBDgEHBgYLCCKjAQqLcIJwRIRaP4hxAgULiASDWBsGAQsBCAUDAwkFDAKDSAUDBQcICgMJDgcHEQsLAQEBAQEBAgEBAQEBAQEBAQECgzkEiEKCbYl4iwmDET2ECg 
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed

solution:
Verify the recipient addresses and try again. Otherwise, user can check their mailbox, if it is full then you should delete some messages to free up space or user can add more space to your account.  If you are still having difficulty sending mail to the addresses, please contact e-mail customer support at 480-624-2500

service-specific error 3417 SQLEXPRESS

Event Description:
The SQL Server (SQLEXPRESS) service terminated with service-specific error 3417 (0xD59)
source: service control manager
event id: 7024
file name: netevent.dll
file version: 5.1.2600.0
product name: microsoft windows operating system
proof:

Invalid Activation Security Descriptor DCOM

Event 10020, dcom:
The machine wide Default Launch and Activation Security Descriptor is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the component services administrative tool.
source: dcom
event id: 10020
file name: xpsp2res.dll
file version: 5.1.2600.2180
proof:

QuickTime failed to initialize mozilla firefox

When i try to clear all the browsing  history including cookies, cache, active logins, site preferences i got an error,
QuickTime Unavailable
Quicktime failed to initialize. Error #0
Please make sure quicktime is properly installed on this computer.

Following the above error it was also stated that, script unresponsive.

As captured image proof :

Backup error code 0x80780048 Windows 7

Check your backup disk space
The disk where your backups are being saved doesn't have enough free space
Error code: 0X80780048

Event 4104, Windows Backup:
The backup was not successful. The error is: There is not enough free space on the backup storage location to backup the data. (0x80780048)
product name: microsoft windows operating system
product version: 6.1.7600.16385
log name: application
source: windows backup
event id: 4104

PROOF:

Avira AntiVirus Exception Event 4118

Event 4118, Avira AntiVir:
EXCEPTION calling function 'scan' for the file C:\WINDOWS\system32\msxml3.dll [ACCESS_VIOLATION Exception!! EIP=0X182935E] Please inform avira and submit the appropriate file.
source: avira antivir
event id: 4118
category: warning

proof:

Group policy notify access check failed

Event 7320, GroupPolicy:
Error: Group policy notify access check failed. Error code 0x5.
log name: Microsoft-Windows-GroupPolicy/Operational
OpCode: info
event source: GroupPolicy
Event id: 7320

proof:

Event 4373, Windows Installer 3.1

 windows
Not enough storage is available to process this command
log name: application
source: windows installer 3.1
event id: 4373
keywords: classic


image proof:

Classic Spooler Event 350 PrintService

Event 350, PrintService:
Document failed to print and was deleted because of corruption in the spooled file. The associated driver is: . Try printing the document again.
log name: microsoft-windows-printservice/admin
source: printservice
event id: 350
OpCode: spooler operation failed
task category: printing a document
keywords: classic spooler event, document print job
user: system

Error 0x80072efe WindowsUpdateClient

Windows Update failed to check for updates with error 0x80072efe
log name: microsoft-windows-windowsupdateclient/operational
source: WindowsUpdateClient
event id: 25
OpCode: check for updates
task category: windows update agent
keywords: failure, check for updates
proof:

Event 2001, Windows Defender

Event 2001, Windows Defender:
Windows Defender has encountered an error trying to update signatures.
Error code: 0x8050a003
Error Description: This package does not contain up-to-date definition files for this program. For more information, see help and support.
New Signature Version:
Previous Signature Version:
Update Source: user
Signature type:
update type:
Current Engine Version:
Previous Engine Version: 1.1.7702.0
log name: microsoft-windows-windows defender/operational
source: windows defender
event id: 2001
OpCode: info

proof:

Event 108, ialmrnt5 driver

Event 108, ialm:
The driver ialmrnt5 for the display device \Device\Video3 got stuck in an infinite loop. This usually indicates a problem with the device itself or with the device driver programming the hardware incorrectly. Please check with your hardware device vendor for any driver updates.
log name: system
source: ialm
event id: 108
keywords: classic

proof:

Event 135, Diagnosis-DPS Windows 7

Event 135, Diagnosis-DPS:
The diagnostic policy service could not create a diagnostic module host instance for diagnostic module {9c5a40da-b965-4fc3-8781-88dd50a6299d} (%SystemRoot%\system32\perftrack.dll). The error code was 2147943469. The scenario {fd5aa730-b53f-4b39-84e5-cb4303621d74}, instance {c30a21f8-359e-4305-b46f-d713a1c439db}, original activity ID {00000000-0000-0000-0000-000000000000} will be discarded.
log name: microsoft-windows-diagnosis-DPS/operational
event id: 135
source: Diagnosis-DPS
OpCode: The Diagnostic Policy Servic
task category: Scenario Lifecycle
keywords: Scenario Lifecycle Events

Still image proof:

Event 4099, Display windows 7

Event 4099, display:
Display driver stopped responding. Save your work and reboot the system to restore full display functionality. The next time you reboot the machine, a dialog will be displayed giving you a chance to upload data about this failure to Microsoft.
log name: system
source: display
event id: 4099
keywords: classic

proof:

Recommended solution:
Refer the following microsoft help page for this error.
http://technet.microsoft.com/en-us/library/dd349375%28v=ws.10%29.aspx.

BugCheck Event windows 7 (WER SystemErrorReporting)

Event1001, BugCheck :
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000ea (0x842e9648, 0x855dc748, 0x851ce010, 0x00000001). A dump was saved in: C:\Windows\Minidump\021611-24312-01.dmp. Report Id: 021611-24312-01.
log name: system
event source: microsoft-windows-WER-SystemErrorReporting
event id: 1001
OpCode: info
keywords: classic
product name: microsoft windows operating system

Still image proof:

From the source bugcheck, i found an another event stated as, The bugcheck was: 0x0000001a (0x00041287, 0x0000b75e, 0x00000000, 0x00000000). A dump was saved in C:\Windows\MEMORY.DMP.

Event 1005, BugCheck:
Unable to produce a minidump file from the null dump file.

crypt32 event failed auto update retrieval of third-party root list sequence number

Event description:
Failed auto update retrieval of third-party root list sequence number from: http:/www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt with error: This operation returned because the timeout period expired.
file name: crypt32.dll
source: crypt32
event id: 8

Proof:

Database Corruption event 448 (ESENT)

Event Description:
wuauclt (1832) Data inconsistency detected in table tbUbdates of database C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb (0,802)
source: ESENT
event id: 448
task category: database corruption
file name: ESENT.dll
file version: 5.1.2600.2780

still image proof:

Event id 9003 microsoft sql server

Event Description:
The log scan number (213:472:1) passed to log scan in database 'master' is not valid. This error may indicate data corruption or that the log file (.Idf) does not match the data file (.mdf). If this error occurred during replication, re-create the publication. Otherwise, restore from backup if the problem results in a failure during startup.
file name: sqlevn70.rll
file version: 2005.90.1399.0
event id: 9003
source: MSSQL$SQLEXPRESS
product name: microsoft sql server
product version: 9.0.1399.0
category: (2)

Event Data:

0000: 0000232b 00000014 00000015 00450054
0010: 00500053 004f0052 00300031 005c0030
0020: 00510053 0045004c 00500058 00450052
0030: 00530053 00000000 0000

Event 3417, Microsoft SQL Server

Event Description:
Cannot recover the master database. SQL Server is unable to run. Restore master from a full backup, repair it, or rebuild it. For more information about how to rebuild the master database, see SQL Server books online.
File Name: sqlevn70.rll
File Version: 2005.90.1399.0
Product Name: Microsoft SQL Server
Product Version: 9.0.1399.0
Event Source: MSSQL$SQLEXPRESS
Category: (2)
Event ID: 3417

still image proof:

Error Data:

0000: 00000d59 0000000a 00000015 00450054
0010: 00500053 004f0052 00300031 005c0030
0020: 00510053 0045004c 00500058 00450052
0030: 00530053 00000000 0000

event source i8042prt

Event 22, i8042prt:
Could not set the mouse sample rate
event id: 22
source: i8042prt
file name: i8042prt.sys
file version: 5.1.2600.2180
Event data:

0000: 00080000 00620001 00000000 c0050016
0010: 00000532 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000

Event 23, i8042prt:
Could not set the mouse resolution.
Data:

0000: 00080000 00620001 00000000 c0050017
0010: 00000532 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000

Event  34, i8042prt:
An error occurred while trying to determine the number of mouse buttons.
data:

0000: 00080000 00620001 00000000 c0050022
0010: 00000532 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000

Event 40, i8042prt:
An error occurred while trying to acquire the device ID of the mouse.
data:

0000: 00080000 00620001 00000000 c0050028
0010: 00000532 00000000 00000000 00000000
0020: 00000000 00000000 00000000 00000000

still image proof:

CNET TechTracker Event

Event id 2, CNET TechTracker:
Event Description:
The description for event id (2) in source (CNET TechTracker) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve this description; See help and support for details.
The following information is part of the event:
result: Scan Failed- general scan failure.
unable to complete request due to error: The server was busy and could not check for updates.
A connection with the server could not be established.
event source: CNET TechTracker
event id: 2
platform: windows xp
proof:

Circular Kernel Context Logger

Event 2, Kernel-EventTracing :
Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035
log name: microsoft-windows-kernel-eventtracing/Admin
event id: 2
source: Kernel-EventTracing
OpCode: start
Task Category: Session
Keywords: session
image proof:

Recommended :
kernel event tracing oobe

Event Source CodeIntegrity windows 7

Event 3002, CodeIntegrity :
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\AK\icsak.dll because the set of per-page image hashes could not be found on the system.
Log Name: Microsoft-Windows-CodeIntegrity/Operational
Source: CodeIntegrity
Event Id: 3002
OpCode: (6684672)
Task Category: (1)
Product Name: Microsoft Windows Operating System
Product Version: 6.1.7600.16385
Locale ID: 1033
Still image proof: