Re: Would Like LOG file to Record Shutdown

Edna

The default is disabled.
http://www.theeldergeek.com/hid_input_service.htm

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

"Edna" <Edna@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6CDE950E-5231-44DC-9D13-DD34CC5939C8@xxxxxxxxxxxxxxxx
Wes I just shut down and one only IMAPI Warning appeared.
Question: IMAPI Properties, Logon Tab, under Hardware Profile I've got
Profile 1 Enabled. Shouldn't that that too be Disabled?

While I have your attn: Only One more I'm getting and have been getting
since the computer was put together is:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 05/12/2006
Time: 3:10:59 PM
User: N/A
Computer: SHARK
Description:
The HID Input Service service terminated with the following error:
The system cannot find the file specified.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I have HID Input Service on Automatic but I see it's not Started.
General Tab, Service Status shows Stopped. Profile 1 is Enabled.

I did have a Logitech Wireless Mouse installed by I'm back to my old MS
Mouse.
I've got a Linksys Wireless Router and DSL. I haven't got my Laptop on
the
router yet.
Creative Speakers and I don't use any hot buttons.
That description makes ME think there's a file missing. How would u ever
find out which file? Any ideas. Thx ...

"Wesley Vogel" wrote:

Edna,

You also have to use your own judgment. Sometimes you have to mess
around
and see why something doesn't work because you disabled a particular
service.

A few examples. If you disable LanmanWorkstation (Workstation service),
Local Users and Groups (lusrmgr.msc) in MMC doesn't work right. Or if
Terminal Services is disabled you do not see any names in the User Name
column in Task Manager. Or if you disable the Indexing Service, your
machine runs better. Or if you disable the DHCP Client service you
cannot
get online.


http://smallvoid.com/tweak/winnt/services.html

http://www.theeldergeek.com/services_guide.htm#Services

http://web.archive.org/web/20041128094512/http://www.blackviper.com/

http://web.archive.org/web/20041128084144/www.blackviper.com/WinXP/servicecfg.htm

[[Services
Microsoft pulled their services guide that I had linked to previously
because the information was outdated due to SP2. Even the default
settings
for Services listed in Help & Support are still wrong. I've gotten these
settings by doing a fresh install of both XP Home and Pro and exporting
the
Services configuration as a .csv file.]]
TweakHound's Super XP Tweaking Guide - Services
http://www.tweakhound.com/xp/xptweaks/supertweaks6.htm

Default settings for services
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sys_srv_default_settings.mspx

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:0950D672-6F3C-435E-A528-7F019A30307A@xxxxxxxxxxxxx,
Edna <Edna@xxxxxxxxxxxxxxxxxxxxxxxxx> hunted and pecked:
Hi Wes! I've just disabled IMAPI. I didn't know that and never would
have thought to Disable it. I've had it on every other setting except
Disable. Do u know of a GOOD/INTELLIGENT/KNOWLEDGABLE Site one can
refer
to as to suggestions for these Settings. I read the explanations for
these Services and many go right over my head. Between my girlfriend
and
I we discuss and decide.
I once put them all on Automatic, Shutdown, Restarted, and those that
didn't show Start, I put on Manual. Whatta Hi Tech Analyzer eh?
Messenger and Secondary Logon and now IMAPI are my only Disables.
Thx I'll let u know in a cple days. ...

"Wesley Vogel" wrote:

Disable the IMAPI CD-Burning COM Service. It is only needed when
using
XP's inbuilt CD burning application. If you use any 3rd party CD
burning
software, IMAPI.EXE does not need to run, ever. It can cause
conflicts.
I have Nero and have IMAPI disabled.

I know nothing about Acronis.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:569F9BBF-1F63-4BC2-8DB0-CC62F9B49179@xxxxxxxxxxxxx,
Edna <Edna@xxxxxxxxxxxxxxxxxxxxxxxxx> hunted and pecked:
Hi Gerry! I have Nero 6.6.0.18 installed that came with my Asus
P5WD2
Premium MB installed Dec05. I've never used it. I was using Roxio
but
after reading comments on Roxio causing hangs, which I was
experiencing,
I removed it thoroughly, every reg entry. I was planning, within
hours,
to buy the new Nero.

Something possibly relevant I noticed the other night: I bought
Acronis
V10 the True Image program, I have to wait 40 mins for it to get
through
a hang before it starts. I've completed a Report for the Acronis
Techs
but haven't heard of their finds yet.

I'm suspicious, the IMAPI Warnings and Acronis Hangs are related.
Maybe
not but I recently noticed I got an IMAPI Warning at the very same
time
I started Acronis. More work required as I couldn't immediately
repeat
it.

Now, to answer your question: Yes! LOL ...


"Gerry Cornell" wrote:

Edna

Are you using Nero software?

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


"Edna" <Edna@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F070D8B9-367F-4E8D-A680-2AFF26403B88@xxxxxxxxxxxxxxxx
Wes I'm so sorry time didn't permit me to respond as I should have
and
wanted
very much to do. I came here so often to continue and something
else
would
prevent me from concentrating on this.
I did switch my AV from NAV to Zone Alarm Security Suite and find
now
that
the only Warning I'm getting with any regularity is the IMAPI
Warning
but it's prolific. I'm talking 15 - 20 entries at once. Once I
counted 60.

Event Type: Warning
Event Source: Imapi
Event Category: None
Event ID: 54
Date: 04/12/2006
Time: 12:37:30 PM
User: N/A
Computer: SHARK
Description:
The description for Event ID ( 54 ) in Source ( Imapi ) cannot be
found. The
local computer may not have the necessary registry information or
message DLL
files to display messages from a remote computer. You may be able
to
use the
/AUXSOURCE= flag to retrieve this description; see Help and Support
for details. The following information is part of the event: .
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 36 00 04 80 ....6..ââ?s¬
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Presently I have it on Automatic but whether it's on Automatic or
Manual doesn't make any difference. Obviously I don't need it as it
doesn't start itself.
But if it isn't being used why do the Warnings appear?

I've Started IMAPI on occasion but that doesn't make any
difference.
I think I'll put it back on Manual and leave it in the Stopped
mode.

Sometimes I get multiple entries in a row. Sometimes one. I've
tried
but can't pin down what I'm doing that causes it to go into a
multiple
spin.

Oh BTW since abandoning Norton, my shut downs are now lickety
split.
Maybe
it was Norton, maybe not, but it's so nice not to have to wait when
shutting
down.
I've used Norton for years but recently I got hit with some Pest
thingie. I
was dissappointed NAV didn't protect me so I switched.
Again, Wes, Thank You for the time u spent helping me and pls
accept
my apology. My failure to reply wasn't by choice. ...

"Wesley Vogel" wrote:

Edna,

Your original post said 2 - 3 minute shutdowns. How long did
shutdown take
before you installed UPHClean?

I get the Event Source: HHCTRL Event ID: 1904 all the time. Due
to a
Windows Critical Update.

Event Type: Information
Event Source: HHCTRL
Event Category: None
Event ID: 1904
Date: 02/23/2006
Time: 1:32:25 PM
User: N/A
Computer: MYPENTIUM450
Description:
The description for Event ID ( 1904 ) in Source ( HHCTRL ) cannot
be
found.
The local computer may not have the necessary registry information
or
message DLL files to display messages from a remote computer. You
may
be able to use the /AUXSOURCE= flag to retrieve this description;
see
Help and
Support for details. The following information is part of the
event:
res://C:\WINDOWS\System32\shdoclc.dll/dnserror.htm,
http://go.microsoft.com/fwlink?LinkID=45840.

http://go.microsoft.com/fwlink?LinkID=45840
resolves to...
MS05-026: A vulnerability in HTML Help could allow remote code
execution http://support.microsoft.com/kb/896358
------

UPHClean 1412: I have no idea what that is. SWAG: handle
remapping
did not
work, so it tried closing handle the handle.

The following are from:


http://download.microsoft.com/download/a/8/7/a87b3d05-cd04-4743-a23b-b16645e075ac/readme.txt

-------
3) Here the service is telling you that it closed handles that
were
preventing
the profile from unloading:

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1201
Date: 11/14/2003
Time: 10:26:29 PM
User: RCARONDOM\u1
Computer: RCARONDOM-DC1
Description:
The following handles in user profile hive RCARONDOM\u1
(S-1-5-21-3230802392-3390281410-1560515013-1307) have been closed
because they
were preventing the profile from unloading successfully:

profleak.exe (1444)
HKCU (0x144)
-------

1201 is just information that UPHClean is doing its job.
-------

8) If you use handle remapping instead of getting event id 1201
logged you
will
get event 1401:

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1401
Date: 10/26/2004
Time: 9:56:52 PM
User: RCARON2-NC\u1
Computer: RCARON2-NC
Description:
The following handles in user profile hive RCARON2-NC\u1
(S-1-5-21-796845957-1275210071-1801674531-1024) have been remapped
because
they
were preventing the profile from unloading successfully:

regopenkeyex.exe (368)
HKCU\Software\Classes\Software (0x4)
-------

UPHClean assists the operating system to unload user profile hive
by
remapping the handles to the user profile hive to the default user
hive.

UPHClean doing its job.
-------

Event Source: UPHClean
Event Category: None
Event ID: 1010

This will occur eveer time that UPHClean stops and is normal.
-------

I saw HKCU\Software\NVIDIA Corporation\Global\nView\Tweak under
Event
Source: UPHClean
Event ID: 1201.

NVIDIA software can mess up a bunch of things. NVIDIA is a
graphic
card.

I have all of this NVIDIA crap disabled and suggest that you do
the
same.

Disable the NVIDIA Display Driver Service...
Start | Run | Type: services.msc | OK |
Scroll down to and double click: NVIDIA Display Driver Service |
Under Startup type set to Disabled | Apply | Click the Stop button
|
When it stops click OK | You may have to reboot

First: NvCplDaemon, NvMediaCenter and nwiz what are they?

NvCplDaemon
[System Tray icon used to change display settings, change the
clock
rate and
memory speed for nVidia based graphics cards. This is unnecessary
since you


.

Quantcast