Event viewer
in [Windows XP Basics]
|
From: Jose on 18 Feb 2010 07:33 On Feb 17, 6:50 am, "William B. Lurie" <billu...(a)nospam.net> wrote: > William B. Lurie wrote: > > Jose wrote: > >> On Feb 12, 6:10 am, "William B. Lurie" <billu...(a)nospam.net> wrote: > >>> You nice folks led me to Event Viewer not too long ago, and > >>> in studying it, I find under Applications that Automatic Live > >>> Update is being run every 3 hours. It isn't my Norton Anti- > >>> Virus Live Update, and I do not allow Windows Live Update to > >>> run. Or at least I think I have it set so that I run Windows > >>> Update when I choose to do so. > > >>> How can I track down what is running so often, and preventing > >>> my system from hibernating as a result? > > >>> Thank you. > > >> Provide more information: > > >> Minimize back and forth Q&A and eliminate guesswork and assumptions: > > >> Click Start, Run and in the box enter: > > >> msinfo32 > > >> Click OK, and when the System Summary info appears, click Edit, Select > >> All, Copy and then paste > >> back here. > > >> There will be some personal information (like System Name and User > >> Name), and whatever appears to > >> be private information to you, just delete from the pasted > >> information. > > >> What are your system settings regarding Hibernation? Mine is set to > >> hibernate after 30 minutes of inactivity, but I can also hibernate > >> anytime. Which does not work for you? > > >> Has hibernation ever worked? > > >> If you click Start, Turn Off Computer and press the Shift key, does > >> the Stand By button turn into a Hibernate button and then if you click > >> Hibernate does your system enter hibernation? > > >> Let's see this event you see: > > >> Look in the Event Viewer for clues around the time of the incident > > >> Here is a method to post the specific information about individual > >> events. > > >> To see the Event Viewer logs, click Start, Settings, Control Panel, > >> Administrative Tools, Event Viewer. > > >> A shortcut to Event Viewer is to click Start, Run and in the box > >> enter: > > >> %SystemRoot%\system32\eventvwr.msc > > >> Click OK to launch the Event Viewer. > > >> The most interesting logs are usually the Application and System. > >> Some logs may be almost or completely empty. > >> Not every event is a problem, some are informational messages that > >> things are working okay and some are warnings. > >> No event should defy reasonable explanation. > > >> Each event is sorted by Date and Time. Errors will have red Xs, > >> Warnings will have yellow !s. > >> Information messages have white is. Not every Error or Warning event > >> means there is a serious issue. > >> Some are excusable at startup time when Windows is booting. Try to > >> find just the events at the date > >> and time around your problem. > > >> If you double click an event, it will open a Properties windows with > >> more information. On the right are > >> black up and down arrow buttons to scroll through the open events. The > >> third button that looks like > >> two pages on top of each other is used to copy the event details to > >> your Windows clipboard. > > >> When you find an interesting event that occurred around the time of > >> your issue, click the third button > >> under the up and down arrows to copy the details and then you can > >> paste the details (right click, Paste > >> or CTRL-V) the detail text back here for analysis. > > >> To get a fresh start on any Event Viewer log, you can choose to clear > >> the log (backing up the log is offered), > >> then reproduce your issue, then look at just the events around the > >> time of your issue. > > > Okay, Jose, one mo' time: > > > Event Type: Error > > Event Source: ati2mtag > > Event Category: CRT > > Event ID: 45062 > > Date: 2/16/2010 > > Time: 1:03:13 PM > > User: N/A > > Computer: COMPAQ-2006 > > Description: > > CRT invalid display type > > Data: > > 0000: 00 00 00 00 01 00 5a 00 ......Z. > > 0008: 2c 00 00 00 06 b0 00 c0 ,....°.À > > 0010: 00 00 00 00 00 00 00 00 ........ > > 0018: 00 00 00 00 00 00 00 00 ........ > > 0020: 00 00 00 00 00 00 00 00 ........ > > > The above is the Event that occurs every time the > > Power Options is invoked (I think). How do I > > find out what it doesn't like about my CRT? > > It is now worse than ever, and I suspect why. > > I decided to do some Windows Update. Hadn't been there in about > a month. (I prefer Manual....I don't want all the updates, and > for good reason). > > I let it install 27 updates, including Windows Search and IE8. > > I did a reboot (of course), and some work, and went away, > figuring it would go to hibernate. Instead, 8 hours later, > it had not even gone to Screen Saver! > > Looking at Event Viewer, it has 200 events recorded, in the top > two categories. > > I'd like to back off and uninstall Windows Search and try again, > if somebody will tell me how to uninstall it. As for IE8, I can > probably download and IE7, uninstall IE8 and reinstall IE7. I > use Firefox as my main browser anyway. > > Meanwhile, here is one of the messages in the Event Viewer. Note > that Windows Search was involved. > > Event Type: Error > Event Source: Windows Search Service > Event Category: Gatherer > Event ID: 3024 > Date: 2/16/2010 > Time: 3:29:08 PM > User: N/A > Computer: COMPAQ-2006 > Description: > The update cannot be started because the content sources cannot be > accessed. Fix the errors and try the update again. > > Context: Windows Application, SystemIndex Catalog > > For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp. Enough people want to uninstall Windows Search post install (I wonder why?), so I have copy/paste directions: After updates, Search Desktop may show up in the Taskbar because Windows Search has been installed. You can turn off the Windows Search Deskbar but Windows Search will still be installed and running. Contrary to some beliefs,turning off the toolbar is not the same as uninstalling. Uninstalling Windows Search depends on the version. Windows Search is Microsoft KB940157. Windows Search 4.0 can be removed from Add or Remove Programs. If you do not see it check the Show updates box and look again. Version 3.0 did not show up in Add or Remove Programs, but the uninstall process is the same for both behind the scenes. KB940157 and every installed KB should have an uninstall folder and uninstallation process to go with it. Click Start, Run and in the box enter: %systemroot%\$NtUninstallKB940157$\spuninst\spuninst.exe Click OK and the uninstall will run for KB940157. Follow the prompts and reboot. You could also navigate to the KB940157 folder and double click the spuninst.exe to launch it. Reboot when the uninstall is complete.
From: William B. Lurie on 18 Feb 2010 08:42 Jose wrote: > On Feb 17, 6:50 am, "William B. Lurie" <billu...(a)nospam.net> wrote: >> William B. Lurie wrote: >>> Jose wrote: >>>> On Feb 12, 6:10 am, "William B. Lurie" <billu...(a)nospam.net> wrote: >>>>> You nice folks led me to Event Viewer not too long ago, and >>>>> in studying it, I find under Applications that Automatic Live >>>>> Update is being run every 3 hours. It isn't my Norton Anti- >>>>> Virus Live Update, and I do not allow Windows Live Update to >>>>> run. Or at least I think I have it set so that I run Windows >>>>> Update when I choose to do so. >>>>> How can I track down what is running so often, and preventing >>>>> my system from hibernating as a result? >>>>> Thank you. >>>> Provide more information: >>>> Minimize back and forth Q&A and eliminate guesswork and assumptions: >>>> Click Start, Run and in the box enter: >>>> msinfo32 >>>> Click OK, and when the System Summary info appears, click Edit, Select >>>> All, Copy and then paste >>>> back here. >>>> There will be some personal information (like System Name and User >>>> Name), and whatever appears to >>>> be private information to you, just delete from the pasted >>>> information. >>>> What are your system settings regarding Hibernation? Mine is set to >>>> hibernate after 30 minutes of inactivity, but I can also hibernate >>>> anytime. Which does not work for you? >>>> Has hibernation ever worked? >>>> If you click Start, Turn Off Computer and press the Shift key, does >>>> the Stand By button turn into a Hibernate button and then if you click >>>> Hibernate does your system enter hibernation? >>>> Let's see this event you see: >>>> Look in the Event Viewer for clues around the time of the incident >>>> Here is a method to post the specific information about individual >>>> events. >>>> To see the Event Viewer logs, click Start, Settings, Control Panel, >>>> Administrative Tools, Event Viewer. >>>> A shortcut to Event Viewer is to click Start, Run and in the box >>>> enter: >>>> %SystemRoot%\system32\eventvwr.msc >>>> Click OK to launch the Event Viewer. >>>> The most interesting logs are usually the Application and System. >>>> Some logs may be almost or completely empty. >>>> Not every event is a problem, some are informational messages that >>>> things are working okay and some are warnings. >>>> No event should defy reasonable explanation. >>>> Each event is sorted by Date and Time. Errors will have red Xs, >>>> Warnings will have yellow !s. >>>> Information messages have white is. Not every Error or Warning event >>>> means there is a serious issue. >>>> Some are excusable at startup time when Windows is booting. Try to >>>> find just the events at the date >>>> and time around your problem. >>>> If you double click an event, it will open a Properties windows with >>>> more information. On the right are >>>> black up and down arrow buttons to scroll through the open events. The >>>> third button that looks like >>>> two pages on top of each other is used to copy the event details to >>>> your Windows clipboard. >>>> When you find an interesting event that occurred around the time of >>>> your issue, click the third button >>>> under the up and down arrows to copy the details and then you can >>>> paste the details (right click, Paste >>>> or CTRL-V) the detail text back here for analysis. >>>> To get a fresh start on any Event Viewer log, you can choose to clear >>>> the log (backing up the log is offered), >>>> then reproduce your issue, then look at just the events around the >>>> time of your issue. >>> Okay, Jose, one mo' time: >>> Event Type: Error >>> Event Source: ati2mtag >>> Event Category: CRT >>> Event ID: 45062 >>> Date: 2/16/2010 >>> Time: 1:03:13 PM >>> User: N/A >>> Computer: COMPAQ-2006 >>> Description: >>> CRT invalid display type >>> Data: >>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>> 0010: 00 00 00 00 00 00 00 00 ........ >>> 0018: 00 00 00 00 00 00 00 00 ........ >>> 0020: 00 00 00 00 00 00 00 00 ........ >>> The above is the Event that occurs every time the >>> Power Options is invoked (I think). How do I >>> find out what it doesn't like about my CRT? >> It is now worse than ever, and I suspect why. >> >> I decided to do some Windows Update. Hadn't been there in about >> a month. (I prefer Manual....I don't want all the updates, and >> for good reason). >> >> I let it install 27 updates, including Windows Search and IE8. >> >> I did a reboot (of course), and some work, and went away, >> figuring it would go to hibernate. Instead, 8 hours later, >> it had not even gone to Screen Saver! >> >> Looking at Event Viewer, it has 200 events recorded, in the top >> two categories. >> >> I'd like to back off and uninstall Windows Search and try again, >> if somebody will tell me how to uninstall it. As for IE8, I can >> probably download and IE7, uninstall IE8 and reinstall IE7. I >> use Firefox as my main browser anyway. >> >> Meanwhile, here is one of the messages in the Event Viewer. Note >> that Windows Search was involved. >> >> Event Type: Error >> Event Source: Windows Search Service >> Event Category: Gatherer >> Event ID: 3024 >> Date: 2/16/2010 >> Time: 3:29:08 PM >> User: N/A >> Computer: COMPAQ-2006 >> Description: >> The update cannot be started because the content sources cannot be >> accessed. Fix the errors and try the update again. >> >> Context: Windows Application, SystemIndex Catalog >> >> For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp. > > Enough people want to uninstall Windows Search post install (I wonder > why?), so I have copy/paste directions: > > After updates, Search Desktop may show up in the Taskbar because > Windows Search has been installed. > > You can turn off the Windows Search Deskbar but Windows Search will > still be installed and running. Contrary to some beliefs,turning off > the toolbar is not the same as uninstalling. > > Uninstalling Windows Search depends on the version. > > Windows Search is Microsoft KB940157. > > Windows Search 4.0 can be removed from Add or Remove Programs. If you > do not see it check the Show updates box and look again. > > Version 3.0 did not show up in Add or Remove Programs, but the > uninstall process is the same for both behind the scenes. > > KB940157 and every installed KB should have an uninstall folder and > uninstallation process to go with it. > > Click Start, Run and in the box enter: > > %systemroot%\$NtUninstallKB940157$\spuninst\spuninst.exe > > Click OK and the uninstall will run for KB940157. Follow the prompts > and reboot. > > You could also navigate to the KB940157 folder and double click the > spuninst.exe to launch it. > > Reboot when the uninstall is complete. ********************************************* Thank you, Jose......I had already managed to uninstall Windows Search. But the ati error message and reference to CRT still persists as an unanswered question. When the Power Options selections don't get invoked, sometimes it goes all the way back to where, after 3 hours, all my desktop icons and wallpaper are still there. See Event ID 45062 above. Any clues?
From: William B. Lurie on 20 Feb 2010 12:26
William B. Lurie wrote: > Jose wrote: >> On Feb 17, 6:50 am, "William B. Lurie" <billu...(a)nospam.net> wrote: >>> William B. Lurie wrote: >>>> Jose wrote: >>>>> On Feb 12, 6:10 am, "William B. Lurie" <billu...(a)nospam.net> wrote: >>>>>> You nice folks led me to Event Viewer not too long ago, and >>>>>> in studying it, I find under Applications that Automatic Live >>>>>> Update is being run every 3 hours. It isn't my Norton Anti- >>>>>> Virus Live Update, and I do not allow Windows Live Update to >>>>>> run. Or at least I think I have it set so that I run Windows >>>>>> Update when I choose to do so. >>>>>> How can I track down what is running so often, and preventing >>>>>> my system from hibernating as a result? >>>>>> Thank you. >>>>> Provide more information: >>>>> Minimize back and forth Q&A and eliminate guesswork and assumptions: >>>>> Click Start, Run and in the box enter: >>>>> msinfo32 >>>>> Click OK, and when the System Summary info appears, click Edit, Select >>>>> All, Copy and then paste >>>>> back here. >>>>> There will be some personal information (like System Name and User >>>>> Name), and whatever appears to >>>>> be private information to you, just delete from the pasted >>>>> information. >>>>> What are your system settings regarding Hibernation? Mine is set to >>>>> hibernate after 30 minutes of inactivity, but I can also hibernate >>>>> anytime. Which does not work for you? >>>>> Has hibernation ever worked? >>>>> If you click Start, Turn Off Computer and press the Shift key, does >>>>> the Stand By button turn into a Hibernate button and then if you click >>>>> Hibernate does your system enter hibernation? >>>>> Let's see this event you see: >>>>> Look in the Event Viewer for clues around the time of the incident >>>>> Here is a method to post the specific information about individual >>>>> events. >>>>> To see the Event Viewer logs, click Start, Settings, Control Panel, >>>>> Administrative Tools, Event Viewer. >>>>> A shortcut to Event Viewer is to click Start, Run and in the box >>>>> enter: >>>>> %SystemRoot%\system32\eventvwr.msc >>>>> Click OK to launch the Event Viewer. >>>>> The most interesting logs are usually the Application and System. >>>>> Some logs may be almost or completely empty. >>>>> Not every event is a problem, some are informational messages that >>>>> things are working okay and some are warnings. >>>>> No event should defy reasonable explanation. >>>>> Each event is sorted by Date and Time. Errors will have red Xs, >>>>> Warnings will have yellow !s. >>>>> Information messages have white is. Not every Error or Warning event >>>>> means there is a serious issue. >>>>> Some are excusable at startup time when Windows is booting. Try to >>>>> find just the events at the date >>>>> and time around your problem. >>>>> If you double click an event, it will open a Properties windows with >>>>> more information. On the right are >>>>> black up and down arrow buttons to scroll through the open events. The >>>>> third button that looks like >>>>> two pages on top of each other is used to copy the event details to >>>>> your Windows clipboard. >>>>> When you find an interesting event that occurred around the time of >>>>> your issue, click the third button >>>>> under the up and down arrows to copy the details and then you can >>>>> paste the details (right click, Paste >>>>> or CTRL-V) the detail text back here for analysis. >>>>> To get a fresh start on any Event Viewer log, you can choose to clear >>>>> the log (backing up the log is offered), >>>>> then reproduce your issue, then look at just the events around the >>>>> time of your issue. >>>> Okay, Jose, one mo' time: >>>> Event Type: Error >>>> Event Source: ati2mtag >>>> Event Category: CRT >>>> Event ID: 45062 >>>> Date: 2/16/2010 >>>> Time: 1:03:13 PM >>>> User: N/A >>>> Computer: COMPAQ-2006 >>>> Description: >>>> CRT invalid display type >>>> Data: >>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>> The above is the Event that occurs every time the >>>> Power Options is invoked (I think). How do I >>>> find out what it doesn't like about my CRT? >>> It is now worse than ever, and I suspect why. >>> >>> I decided to do some Windows Update. Hadn't been there in about >>> a month. (I prefer Manual....I don't want all the updates, and >>> for good reason). >>> >>> I let it install 27 updates, including Windows Search and IE8. >>> >>> I did a reboot (of course), and some work, and went away, >>> figuring it would go to hibernate. Instead, 8 hours later, >>> it had not even gone to Screen Saver! >>> >>> Looking at Event Viewer, it has 200 events recorded, in the top >>> two categories. >>> >>> I'd like to back off and uninstall Windows Search and try again, >>> if somebody will tell me how to uninstall it. As for IE8, I can >>> probably download and IE7, uninstall IE8 and reinstall IE7. I >>> use Firefox as my main browser anyway. >>> >>> Meanwhile, here is one of the messages in the Event Viewer. Note >>> that Windows Search was involved. >>> >>> Event Type: Error >>> Event Source: Windows Search Service >>> Event Category: Gatherer >>> Event ID: 3024 >>> Date: 2/16/2010 >>> Time: 3:29:08 PM >>> User: N/A >>> Computer: COMPAQ-2006 >>> Description: >>> The update cannot be started because the content sources cannot be >>> accessed. Fix the errors and try the update again. >>> >>> Context: Windows Application, SystemIndex Catalog >>> >>> For more information, see Help and Support Center >>> athttp://go.microsoft.com/fwlink/events.asp. >> >> Enough people want to uninstall Windows Search post install (I wonder >> why?), so I have copy/paste directions: >> >> After updates, Search Desktop may show up in the Taskbar because >> Windows Search has been installed. >> >> You can turn off the Windows Search Deskbar but Windows Search will >> still be installed and running. Contrary to some beliefs,turning off >> the toolbar is not the same as uninstalling. >> >> Uninstalling Windows Search depends on the version. >> >> Windows Search is Microsoft KB940157. >> >> Windows Search 4.0 can be removed from Add or Remove Programs. If you >> do not see it check the Show updates box and look again. >> >> Version 3.0 did not show up in Add or Remove Programs, but the >> uninstall process is the same for both behind the scenes. >> >> KB940157 and every installed KB should have an uninstall folder and >> uninstallation process to go with it. >> >> Click Start, Run and in the box enter: >> >> %systemroot%\$NtUninstallKB940157$\spuninst\spuninst.exe >> >> Click OK and the uninstall will run for KB940157. Follow the prompts >> and reboot. >> >> You could also navigate to the KB940157 folder and double click the >> spuninst.exe to launch it. >> >> Reboot when the uninstall is complete. > ********************************************* > Thank you, Jose......I had already managed to uninstall > Windows Search. But the ati error message and reference > to CRT still persists as an unanswered question. When > the Power Options selections don't get invoked, sometimes > it goes all the way back to where, after 3 hours, all my desktop > icons and wallpaper are still there. See Event ID 45062 above. > Any clues? I hate to be a pest, because it isn't a vital malfunction. But it is annoyong to get error messages that might as well be written in Sanskrit, for all the use they are! |