Share via

Event Viewer Error Report

Anonymous
2015-05-08T08:29:01+00:00

I have noticed a couple of errors reported in my event viewer recently.  The system is otherwise operating normally with no problems in running my usual daily tasks.  The two error reports are as follows:

Log Name:      System

Source:        Service Control Manager

Date:          07/05/2015 17:46:33

Event ID:      7031

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      Chris-PC

Description:

The Diagnostics Tracking Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />

    <EventID Qualifiers="49152">7031</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8080000000000000</Keywords>

    <TimeCreated SystemTime="2015-05-07T16:46:33.160641400Z" />

    <EventRecordID>1924056</EventRecordID>

    <Correlation />

    <Execution ProcessID="576" ThreadID="4580" />

    <Channel>System</Channel>

    <Computer>Chris-PC</Computer>

    <Security />

  </System>

  <EventData>

    <Data Name="param1">Diagnostics Tracking Service</Data>

    <Data Name="param2">1</Data>

    <Data Name="param3">30000</Data>

    <Data Name="param4">1</Data>

    <Data Name="param5">Restart the service</Data>

  </EventData>

</Event>

Log Name:      Application

Source:        Application Error

Date:          07/05/2015 17:46:32

Event ID:      1000

Task Category: (100)

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      Chris-PC

Description:

Faulting application name: svchost.exe_DiagTrack, version: 6.1.7600.16385, time stamp: 0x4a5bc100

Faulting module name: ntdll.dll, version: 6.1.7601.18839, time stamp: 0x553e8801

Exception code: 0xc000000d

Fault offset: 0x00098001

Faulting process id: 0x7e8

Faulting application start time: 0x01d088cd0e13aeb1

Faulting application path: C:\Windows\System32\svchost.exe

Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

Report Id: 9d1a2240-f4d8-11e4-a676-002481efc46a

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Application Error" />

    <EventID Qualifiers="0">1000</EventID>

    <Level>2</Level>

    <Task>100</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2015-05-07T16:46:32.000000000Z" />

    <EventRecordID>42593</EventRecordID>

    <Channel>Application</Channel>

    <Computer>Chris-PC</Computer>

    <Security />

  </System>

  <EventData>

    <Data>svchost.exe_DiagTrack</Data>

    <Data>6.1.7600.16385</Data>

    <Data>4a5bc100</Data>

    <Data>ntdll.dll</Data>

    <Data>6.1.7601.18839</Data>

    <Data>553e8801</Data>

    <Data>c000000d</Data>

    <Data>00098001</Data>

    <Data>7e8</Data>

    <Data>01d088cd0e13aeb1</Data>

    <Data>C:\Windows\System32\svchost.exe</Data>

    <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>

    <Data>9d1a2240-f4d8-11e4-a676-002481efc46a</Data>

  </EventData>

</Event>

,

I also get a DCOM error on every bootup but have been advised I can safely ignore it.  The two errors reported above, however, are new but, so far, seem not to cause any performance issues.

Any advice offered would be very much appreciated.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
  1. Anonymous
    2015-05-10T12:24:04+00:00

    Chris

    If you look at my profile you may discover we are about the same age:

    http://answers.microsoft.com/en-us/profile/cbb5485c-12c3-4703-9ea8-3afdfd1a05f2?lc=2057&auth=1

    I suggest you now remove any files from your OneDrive. If and when you are satisfied your problem is resolved please Mark the Answer. It helps others see what answered your question.

    If you posted the original question, you can mark the question as answered yourself. Just click the Mark as Answerbutton. Source: http://answers.microsoft.com/en-us/page/faq#faqAskQuestion8

    You should see Mark the Answer (and Found this helpful Me to) buttons on all messages, except your own messages, posted by others to your thread. These are there to enable you to indicate to other users which messages you found helpful and, ultimately what solved your problem, or answered your question.

    0 comments
Answer accepted by question author
  1. Anonymous
    2015-05-10T11:03:50+00:00

    Chris

    I use Microsoft Security Essentials with Malwarebytes free as a support scanner. To remove unwanted parasites I use ADWCleaner on a when necessary basis. I can only remember one serious malware incident in recent years, which I quickly resolved. Superantispyware does not conflict but my experience  is that it finds little of consequence. It is not on this computer but I still have it on my laptop. Emisoft duplicates Malwarebytes so why bother with it?

    My latest interpretation of your Event Viewer reports is that there is nothing serious going on at the moment on your computer.

    0 comments

15 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2015-05-08T17:58:02+00:00

    Chris

    Log Name:      System

    Source:        Microsoft-Windows-DistributedCOM

    Date:          08/05/2015 14:40:29

    Event ID:      10010

    Level:         Error

    Description:

    The server {19E41664-8329-4346-BFC6-7E9C9AEBC69E} did not register with DCOM within the required timeout.

    Is this your DCOM error on boot? Do you have or have you had Super easy Software Defrag?

    Please download and run ADWCleaner and upload a copy of the report produced to your OneDrive. Remove all that it finds. :

    http://www.bleepingcomputer.com/download/adwcleaner/

    I suggest you take the precaution of creating a system restore point before running ADWCleaner, to guard against unforeseen consequences. Select Start, Control Panel, System, System Protection, and click the Create button.

    To identify what loads when you boot use Autoruns (freeware from Microsoft).

    http://technet.microsoft.com/en-us/sysinternals/bb963902

    With Autoruns you can uncheck an item, which disables it from starting, or you can right click an item and then delete it. If you uncheck you can recheck to re-enable the item. It is a much safer approach than editing the Registry and better than using msconfig.

    Run Autoruns and select the Everything tab. Click File, Save and, using the scroll to the right, change the “Save as type” option from Autoruns Data (*.arn) to Text (*txt). The file name changes to AutoRuns.txt. Click the Save button and upload the file to your OneDrive as a shared file and post as a link here.

    Microsoft has just issued Update to enable the Diagnostics Tracking Service in Windows (KB3022345). This update relates to the service featured in the Event ID 7031 error report you posted earlier:

    https://support.microsoft.com/en-us/kb/3022345?wa=wsignin1.0

    This update has a chequered history. You will find some further background information in the next link:

    http://www.infoworld.com/article/2919142/operating-systems/windows-patch-kb-3022345-re-re-released-third-version-of-usage-tracker-in-two-weeks.html

    The two reports you are asking about do not appear in your latest log files. Unfortunately because the log files have been cleared it is not possible to determine whether the errors are recurring. Unless these errors recur I suggest further investigation will be wasted effort.

    0 comments
  2. Anonymous
    2015-05-08T14:20:54+00:00

    Hi Gerry,

    Thanks for getting back to me so quickly.  I will do as you ask but will be using my Dropbox account as I do not have OneDrive.

    Another problem is that I cleared my Event Viewer logs before my last not having received your email at the time.  Obviously I was tempting fate as, after booting the system for this session and expecting the Event Viewer to log the two errors again as on the last three boots, the only error reported was the DCOM error.

    I will upload the evtx files to my Dropbox account anyway but expect they will be of little use to you.  However if the problem returns, I will post on this thread again and provide links to the appropriate logs.

    The link to a folder containing the current Event Viewer logs and my system information is below in a folder named 'For Gerry'.

    https://www.dropbox.com/sh/r64m6qoq840j0iv/AAAbhMpSSyrYh7GHT9\_lxk6Ba?dl=0

    0 comments
  3. Anonymous
    2015-05-08T12:35:14+00:00

    Please provide a copy of your System Information file. Type System Information in the Search Box above the start Button and press the ENTER key (alternative is Select Start, All Programs, Accessories, System Tools, System Information). Select File, Export and give the file a name noting where it is located. Do not place the cursor within the body of the report before exporting the file. The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload the file to your OneDrive, share with everyone and post a link here. Reports in normal mode preferred. Please say if the report has been obtained in safe mode.

    Please upload and share with everyone copies of your System and Application logs from your Event Viewer to your OneDrive and post a link here.

    To access the System log select Start, Control Panel, Administrative Tools, Event Viewer, from the list in the left side of the window expand Windows Logs and select System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do the same for the Applications log. Do not provide filtered files. Do not place the cursor in the list of reports before selecting Action from the menu. Do not clear logs whilst you have a continuing problem.

    For help with OneDrive see paragraph 9.3:

    http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm

    General notes on Event Viewer

    http://www.gerryscomputertips.co.uk/syserrors5.htm

    0 comments