Windows 7 random crash

carnage017 · August 20, 2014

Event[0]:

Log Name: Application

Source: Desktop Window Manager

Date: 2014-08-20T06:20:13.000

Event ID: 9018

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The user was prompted that the Desktop Window Manager was suffering a performance slowdown and chose to shutdown

Event[1]:

Log Name: Application

Source: Windows Error Reporting

Date: 2014-08-20T06:24:43.000

Event ID: 1001

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Fault bucket , type 0

Event Name: ScriptedDiagFailure

Response: Not available

Cab Id: 0

Problem signature:

P1: Microsoft Corporation.AeroDiagnostic.1.0

P2: Default

P3: 1.0.0.0

P4: Default

P5:

P6:

P7:

P8:

P9:

P10:

Attached files:

C:\Users\Localhost\AppData\Local\Temp\msdtadmin\_CE0E0602-F187-4BBF-84E2-0A541B015362_\Pkg8D37.cab

These files may be available here:

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_deeb628a597b4f82e337fd6d7b1df1df1e03d61_cab_0a348f5a

Analysis symbol:

Rechecking for solution: 0

Report Id: 32abf221-2854-11e4-b1d1-d43d7eba977f

Report Status: 4

Event[2]:

Log Name: Application

Source: System Restore

Date: 2014-08-20T07:18:23.000

Event ID: 8194

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Successfully created restore point (Process = C:\PROGRA~2\ORIGIN~1\FIFAWO~1\__INST~1\directx\redist\dxsetup.exe /silent; Description = Installed DirectX).

Event[3]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:21:56.000

Event ID: 1040

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Beginning a Windows Installer transaction: c:\Windows\Installer\3ac2670.msi. Client Process Id: 5892.

Event[4]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:21:57.355

Event ID: 10000

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Starting session 0 - ?2014?-?08?-?20T11:21:57.355231900Z.

Event[5]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:21:58.603

Event ID: 10010

Task: N/A

Level: Warning

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Application 'C:\Program Files (x86)\Origin\Origin.exe' (pid 4964) cannot be restarted - Application SID does not match Conductor SID..

Event[6]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:21:58.609

Event ID: 10010

Task: N/A

Level: Warning

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Application 'C:\Program Files (x86)\Origin\OriginClientService.exe' (pid 6104) cannot be restarted - Application SID does not match Conductor SID..

Event[7]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:21:58.609

Event ID: 10005

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Machine restart is required.

Event[8]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:21:58.655

Event ID: 10000

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Starting session 1 - ?2014?-?08?-?20T11:21:58.655306300Z.

Event[9]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:06.000

Event ID: 1025

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. The file c:\Windows\SysWOW64\msvcp100.dll is being used by the following process: Name: explorer , Id 5556.

Event[10]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:06.000

Event ID: 1025

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. The file c:\Windows\SysWOW64\msvcr100.dll is being used by the following process: Name: explorer , Id 5556.

Event[11]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 1022

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - Update 'KB2565063' installed successfully.

Event[12]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 1036

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Windows Installer installed an update. Product Name: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Product Version: 10.0.40219. Product Language: 0. Manufacturer: Microsoft Corporation. Update Name: KB2565063. Installation success or error status: 0.

Event[13]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 11728

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 -- Configuration completed successfully.

Event[14]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 1035

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Windows Installer reconfigured the product. Product Name: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Product Version: 10.0.40219. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0.

Event[15]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 1038

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Windows Installer requires a system restart. Product Name: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Product Version: 10.0.40219. Product Language: 0. Manufacturer: Microsoft Corporation. Type of System Restart: 2. Reason for Restart: 1.

Event[16]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 1029

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Restart required. The installation or update for the product required a restart for all changes to take effect. The restart was deferred to a later time.

Event[17]:

Log Name: Application

Source: MsiInstaller

Date: 2014-08-20T07:22:08.000

Event ID: 1042

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: S-1-5-18

User Name: NT AUTHORITY\SYSTEM

Computer: iPhone

Description:

Ending a Windows Installer transaction: c:\Windows\Installer\3ac2670.msi. Client Process Id: 5892.

Event[18]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:22:08.578

Event ID: 10001

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Ending session 0 started ?2014?-?08?-?20T11:21:57.355231900Z.

Event[19]:

Log Name: Application

Source: Microsoft-Windows-RestartManager

Date: 2014-08-20T07:22:08.709

Event ID: 10001

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-21-446792193-3167092461-2683584829-1000

User Name: IPHONE\Localhost

Computer: iPhone

Description:

Ending session 1 started ?2014?-?08?-?20T11:21:58.655306300Z.

Event[20]:

Log Name: Application

Source: VSS

Date: 2014-08-20T07:22:33.000

Event ID: 8224

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The VSS service is shutting down due to idle timeout.

Event[21]:

Log Name: Application

Source: Microsoft-Windows-EventSystem

Date: 2014-08-20T07:53:15.000

Event ID: 4625

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.

Event[22]:

Log Name: Application

Source: Microsoft-Windows-User Profiles Service

Date: 2014-08-20T07:53:15.374

Event ID: 1531

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-18

User Name: NT AUTHORITY\SYSTEM

Computer: iPhone

Description:

The User Profile Service has started successfully.

Event[23]:

Log Name: Application

Source: Microsoft-Windows-Winlogon

Date: 2014-08-20T07:53:20.000

Event ID: 4101

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows license validated.

Event[24]:

Log Name: Application

Source: Microsoft-Windows-Winlogon

Date: 2014-08-20T07:53:20.000

Event ID: 6000

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.

Event[25]:

Log Name: Application

Source: Microsoft-Windows-WMI

Date: 2014-08-20T07:53:24.000

Event ID: 5615

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows Management Instrumentation Service started sucessfully

Event[26]:

Log Name: Application

Source: Microsoft-Windows-WMI

Date: 2014-08-20T07:53:33.000

Event ID: 5617

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows Management Instrumentation Service subsystems initialized successfully

Event[27]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T07:53:41.000

Event ID: 102

Task: General

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1004) Windows: The database engine (6.01.7601.0000) started a new instance (0).

Event[28]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T07:53:41.000

Event ID: 300

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1004) Windows: The database engine is initiating recovery steps.

Event[29]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T07:53:42.000

Event ID: 301

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1004) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00F3E.log.

Event[30]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T07:53:42.000

Event ID: 301

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1004) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.

Event[31]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T07:53:43.000

Event ID: 302

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1004) Windows: The database engine has successfully completed recovery steps.

Event[32]:

Log Name: Application

Source: Microsoft-Windows-Search

Date: 2014-08-20T07:53:49.000

Event ID: 1003

Task: Search service

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Windows Search Service started.

Event[33]:

Log Name: Application

Source: Microsoft-Windows-Search

Date: 2014-08-20T07:53:54.000

Event ID: 4121

Task: Search service

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

A master merge has restarted for catalog SystemIndex.

Event[34]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T07:55:32.000

Event ID: 900

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Software Protection service is starting.

Event[35]:

Log Name: Application

Source: SecurityCenter

Date: 2014-08-20T07:55:34.000

Event ID: 1

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Windows Security Center Service has started.

Event[36]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T07:55:37.000

Event ID: 1066

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Initialization status for service objects.

C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000

Event[37]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T07:55:37.000

Event ID: 1003

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Software Protection service has completed licensing status check.

Application Id=55c92734-d682-4d71-983e-d6ec3f16059f

Licensing Status=

1: 022a1afb-b893-4190-92c3-8f69a49839fb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

2: 436cef53-8387-4692-bb4a-9492cd82260e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

3: 57a232fe-0931-48fe-9389-e4586967c661, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

4: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8, 1, 1 [(0 [0x00000000, 1, 0], [( 1 0xC004F032 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)( 1 0xC004F032 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)(?)(?)])(1 )(2 )]

5: 8ec16e01-e86f-415f-b333-1819f4145294, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

6: a0cde89c-3304-4157-b61c-c8ad785d1fad, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

7: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

8: b2c4b9f6-3ee6-4a2a-a361-64ad3b61ded5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

9: bba42084-cacd-4ad4-b606-9f3d6c93b2c5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

10: c619d61c-c2f2-40c3-ab3f-c5924314b0f3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

11: cfb3e52c-d707-4861-af51-11b27ee6169c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

12: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

13: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]

Event[38]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T07:55:37.000

Event ID: 902

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Software Protection service has started.

6.1.7601.17514

Event[39]:

Log Name: Application

Source: Microsoft-Windows-LoadPerf

Date: 2014-08-20T07:59:06.694

Event ID: 1001

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-18

User Name: NT AUTHORITY\SYSTEM

Computer: iPhone

Description:

Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

Event[40]:

Log Name: Application

Source: Microsoft-Windows-LoadPerf

Date: 2014-08-20T07:59:06.821

Event ID: 1000

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-18

User Name: NT AUTHORITY\SYSTEM

Computer: iPhone

Description:

Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.

Event[41]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T08:00:37.000

Event ID: 903

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Software Protection service has stopped.

Event[42]:

Log Name: Application

Source: Microsoft-Windows-EventSystem

Date: 2014-08-20T08:25:01.000

Event ID: 4625

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.

Event[43]:

Log Name: Application

Source: Microsoft-Windows-User Profiles Service

Date: 2014-08-20T08:25:01.444

Event ID: 1531

Task: N/A

Level: Information

Opcode: Info

Keyword: N/A

User: S-1-5-18

User Name: NT AUTHORITY\SYSTEM

Computer: iPhone

Description:

The User Profile Service has started successfully.

Event[44]:

Log Name: Application

Source: Microsoft-Windows-WMI

Date: 2014-08-20T08:25:09.000

Event ID: 5615

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows Management Instrumentation Service started sucessfully

Event[45]:

Log Name: Application

Source: Microsoft-Windows-WMI

Date: 2014-08-20T08:25:10.000

Event ID: 5611

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Windows Management Instrumentation service has detected an inconsistent system shutdown.

Event[46]:

Log Name: Application

Source: Microsoft-Windows-Winlogon

Date: 2014-08-20T08:25:13.000

Event ID: 4101

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows license validated.

Event[47]:

Log Name: Application

Source: Microsoft-Windows-Winlogon

Date: 2014-08-20T08:25:14.000

Event ID: 6000

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.

Event[48]:

Log Name: Application

Source: Microsoft-Windows-WMI

Date: 2014-08-20T08:25:31.000

Event ID: 5617

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows Management Instrumentation Service subsystems initialized successfully

Event[49]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T08:25:32.000

Event ID: 102

Task: General

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1760) Windows: The database engine (6.01.7601.0000) started a new instance (0).

Event[50]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T08:25:33.000

Event ID: 300

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1760) Windows: The database engine is initiating recovery steps.

Event[51]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T08:25:33.000

Event ID: 301

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1760) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00FAD.log.

Event[52]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T08:25:35.000

Event ID: 301

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1760) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.

Event[53]:

Log Name: Application

Source: ESENT

Date: 2014-08-20T08:25:35.000

Event ID: 302

Task: Logging/Recovery

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Windows (1760) Windows: The database engine has successfully completed recovery steps.

Event[54]:

Log Name: Application

Source: Microsoft-Windows-Search

Date: 2014-08-20T08:26:13.000

Event ID: 1003

Task: Search service

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Windows Search Service started.

Event[55]:

Log Name: Application

Source: Microsoft-Windows-Search

Date: 2014-08-20T08:26:17.000

Event ID: 4121

Task: Search service

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

A master merge has restarted for catalog SystemIndex.

Event[56]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T08:28:43.000

Event ID: 900

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Software Protection service is starting.

Event[57]:

Log Name: Application

Source: SecurityCenter

Date: 2014-08-20T08:28:46.000

Event ID: 1

Task: N/A

Level: Information

Opcode: Info

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

The Windows Security Center Service has started.

Event[58]:

Log Name: Application

Source: Microsoft-Windows-Security-SPP

Date: 2014-08-20T08:28:49.000

Event ID: 1066

Task: N/A

Level: Information

Opcode: N/A

Keyword: Classic

User: N/A

User Name: N/A

Computer: iPhone

Description:

Initialization status for service objects.

C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000

C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000

Event[59]: