I have been noticing a strange problem with my Win 7 64bit. It does not happen every day, maybe once a week or so.
When I boot up the system and the desktop loads, I noticed that all (6 ) of my security (AVG, ZA, SpyBot etc.) program icons in the system tray notification area (next to the clock) don't load. (Program tray .exe files are not being loaded on start-up) I get the network, power, volume icons but nothing else. I should see 6 icons for my security and other start up programs I have loaded, but they don't show. I have to reboot the system three or four times before the tray icons will show. I also have to do a defrag to fix the problem as well. The system works fine otherwise. The security programs run fine when they are loaded, so they are not the problem.
Like I said, the problem of "missing system tray icons" only happens once a week or so. YES I DO have tray notification set to ON. (That is the first place I looked) So that is not the problem.
I tried logging off and back on as administrator. Did not work.
Here is a copy of the event log when it last happened:
__________________________________________________
Log Name: Application
Source: Desktop Window Manager
Date: 8/16/2012 6:50:11 PM
Event ID: 9003
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
The Desktop Window Manager was unable to start because a composited theme is not in use
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Desktop Window Manager" />
<EventID Qualifiers="16384">9003</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:11.000000000Z" />
<EventRecordID>11767</EventRecordID>
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 8/16/2012 6:50:10 PM
Event ID: 6000
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
<EventID Qualifiers="32768">6000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:10.000000000Z" />
<EventRecordID>11766</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
<Data>SessionEnv</Data>
<Binary>D9060000</Binary>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 8/16/2012 6:50:10 PM
Event ID: 4101
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
Windows license validated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
<EventID Qualifiers="16384">4101</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:10.000000000Z" />
<EventRecordID>11765</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
<Data>0x00000000</Data>
<Data>0x00000001</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 8/16/2012 6:50:08 PM
Event ID: 1531
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: AVA-385177-1
Description:
The User Profile Service has started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1531</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:08.632026400Z" />
<EventRecordID>11764</EventRecordID>
<Correlation />
<Execution ProcessID="1224" ThreadID="1348" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 8/16/2012 6:50:08 PM
Event ID: 4625
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="16384">4625</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:08.000000000Z" />
<EventRecordID>11763</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">86400</Data>
<Data Name="param2">SuppressDuplicateDuration</Data>
<Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
</EventData>
</Event>
_____________________________________________
Has anyone else seen this happen in Win 7? If it is a program fault by Microsoft, is there a solution?
Thanks for your help.
Scott
When I boot up the system and the desktop loads, I noticed that all (6 ) of my security (AVG, ZA, SpyBot etc.) program icons in the system tray notification area (next to the clock) don't load. (Program tray .exe files are not being loaded on start-up) I get the network, power, volume icons but nothing else. I should see 6 icons for my security and other start up programs I have loaded, but they don't show. I have to reboot the system three or four times before the tray icons will show. I also have to do a defrag to fix the problem as well. The system works fine otherwise. The security programs run fine when they are loaded, so they are not the problem.
Like I said, the problem of "missing system tray icons" only happens once a week or so. YES I DO have tray notification set to ON. (That is the first place I looked) So that is not the problem.
I tried logging off and back on as administrator. Did not work.
Here is a copy of the event log when it last happened:
__________________________________________________
Log Name: Application
Source: Desktop Window Manager
Date: 8/16/2012 6:50:11 PM
Event ID: 9003
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
The Desktop Window Manager was unable to start because a composited theme is not in use
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Desktop Window Manager" />
<EventID Qualifiers="16384">9003</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:11.000000000Z" />
<EventRecordID>11767</EventRecordID>
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 8/16/2012 6:50:10 PM
Event ID: 6000
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
<EventID Qualifiers="32768">6000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:10.000000000Z" />
<EventRecordID>11766</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
<Data>SessionEnv</Data>
<Binary>D9060000</Binary>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 8/16/2012 6:50:10 PM
Event ID: 4101
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
Windows license validated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
<EventID Qualifiers="16384">4101</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:10.000000000Z" />
<EventRecordID>11765</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
<Data>0x00000000</Data>
<Data>0x00000001</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 8/16/2012 6:50:08 PM
Event ID: 1531
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: AVA-385177-1
Description:
The User Profile Service has started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1531</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:08.632026400Z" />
<EventRecordID>11764</EventRecordID>
<Correlation />
<Execution ProcessID="1224" ThreadID="1348" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 8/16/2012 6:50:08 PM
Event ID: 4625
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: AVA-385177-1
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="16384">4625</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-11T22:50:08.000000000Z" />
<EventRecordID>11763</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>AVA-385177-1</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">86400</Data>
<Data Name="param2">SuppressDuplicateDuration</Data>
<Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
</EventData>
</Event>
_____________________________________________
Has anyone else seen this happen in Win 7? If it is a program fault by Microsoft, is there a solution?
Thanks for your help.
Scott