Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 24-12-2024 11:33:40
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-HUP182D
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscBrokerManager
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:03:40.5224202Z" />
<EventRecordID>18013</EventRecordID>
<Correlation ActivityID="{32bf9d62-27c4-4521-a28c-b7ae11a8ef88}" />
<Execution ProcessID="680" ThreadID="1404" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Launch</Data>
<Data Name="param4">Windows.SecurityCenter.WscBrokerManager</Data>
<Data Name="param5">Unavailable</Data>
<Data Name="param6">NT AUTHORITY</Data>
<Data Name="param7">SYSTEM</Data>
<Data Name="param8">S-1-5-18</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 24-12-2024 11:33:40
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-HUP182D
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.SecurityAppBroker
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:03:40.5224202Z" />
<EventRecordID>18012</EventRecordID>
<Correlation ActivityID="{5a767373-e371-414a-8f03-8b0fb8a89ca3}" />
<Execution ProcessID="680" ThreadID="1684" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Launch</Data>
<Data Name="param4">Windows.SecurityCenter.SecurityAppBroker</Data>
<Data Name="param5">Unavailable</Data>
<Data Name="param6">NT AUTHORITY</Data>
<Data Name="param7">SYSTEM</Data>
<Data Name="param8">S-1-5-18</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 24-12-2024 11:33:40
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-HUP182D
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
Windows.SecurityCenter.WscDataProtection
and APPID
Unavailable
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:03:40.5224202Z" />
<EventRecordID>18011</EventRecordID>
<Correlation ActivityID="{fbc2f867-488a-4e9c-a86e-7a9af32aa813}" />
<Execution ProcessID="680" ThreadID="1188" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Launch</Data>
<Data Name="param4">Windows.SecurityCenter.WscDataProtection</Data>
<Data Name="param5">Unavailable</Data>
<Data Name="param6">NT AUTHORITY</Data>
<Data Name="param7">SYSTEM</Data>
<Data Name="param8">S-1-5-18</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-TPM-WMI
Date: 24-12-2024 11:31:42
Event ID: 1796
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: DESKTOP-HUP182D
Description:
The Secure Boot update failed to update a Secure Boot variable with error Secure Boot is not enabled on this machine.. For more information, please see
https://go.microsoft.com/fwlink/?linkid=2169931
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TPM-WMI" Guid="{7d5387b0-cbe0-11da-a94d-0800200c9a66}" />
<EventID>1796</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:01:42.7987889Z" />
<EventRecordID>18007</EventRecordID>
<Correlation />
<Execution ProcessID="2220" ThreadID="6616" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="HResult">-2147020471</Data>
</EventData>
</Event>
Log Name: System
Source: Service Control Manager
Date: 24-12-2024 11:31:37
Event ID: 7000
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-HUP182D
Description:
The SecDrv service failed to start due to the following error:
This driver has been blocked from loading
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7000</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:01:37.6708362Z" />
<EventRecordID>18003</EventRecordID>
<Correlation />
<Execution ProcessID="764" ThreadID="3096" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">SecDrv</Data>
<Data Name="param2">%%1275</Data>
<Binary>5300650063004400720076000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Application Popup
Date: 24-12-2024 11:31:37
Event ID: 1060
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-HUP182D
Description:
The description for Event ID 1060 from source Application Popup cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
\??\C:\Windows\SysWow64\drivers\SECDRV.SYS
The message resource is present but the message was not found in the message table
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Popup" Guid="{47bfa2b7-bd54-4fac-b70b-29021084ca8f}" EventSourceName="Application Popup" />
<EventID Qualifiers="49152">1060</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:01:37.6708362Z" />
<EventRecordID>18002</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="396" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\??\C:\Windows\SysWow64\drivers\SECDRV.SYS</Data>
<Binary>000000000200300000000000240400C0000000006B0300C000000000000000000000000000000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 24-12-2024 11:31:32
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: DESKTOP-HUP182D
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" />
<EventID>41</EventID>
<Version>8</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2024-12-24T06:01:32.9474686Z" />
<EventRecordID>17977</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">122</Data>
<Data Name="BugcheckParameter1">0x20</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">0</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">true</Data>
<Data Name="CheckpointStatus">0</Data>
<Data Name="CsEntryScenarioInstanceIdV2">0</Data>
<Data Name="LongPowerButtonPressDetected">false</Data>
</EventData>
</Event>
Log Name: System
Source: volmgr
Date: 24-12-2024 11:31:32
Event ID: 161
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-HUP182D
Description:
Dump file creation failed due to error during dump creation.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="volmgr" />
<EventID Qualifiers="49156">161</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:01:32.7085245Z" />
<EventRecordID>17973</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="120" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security />
</System>
<EventData>
<Data>\Device\HarddiskVolume3</Data>
<Binary>000000000100000000000000A10004C042000400010000C000000000000000000000000000000000</Binary>
</EventData>
</Event>
Log Name: System
Source: EventLog
Date: 24-12-2024 11:31:36
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-HUP182D
Description:
The previous system shutdown at 11:09:08 on 24-12-2024 was unexpected.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-12-24T06:01:36.2805414Z" />
<EventRecordID>17964</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>DESKTOP-HUP182D</Computer>
<Security />
</System>
<EventData>
<Data>11:09:08</Data>
<Data>24-12-2024</Data>
<Data>
</Data>
<Data>
</Data>
<Data>16804</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>E8070C00020018000B0009000800F300E8070C0002001800050027000800F300600900003C000000010000006009000001000000B00400000100000000000000</Binary>
</EventData>
</Event>
Facebook
Twitter
Instagram