I have pasted the below in order first the two warnings and then the on
critical. Please let me know what needs to be done to fix the issues. Thanks
Warning 1:
Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Microsoft-Windows-Diagnostics-Performance
Date: 12/23/2008 8:55:39 AM
Event ID: 200
Task Category: Shutdown Performance Monitoring
Level: Warning
Keywords: Event Log
User: LOCAL SERVICE
Computer: TYP-PC
Description:
Windows has shutdown:
Shutdown Duration : 13472ms
IsDegradation : false
Incident Time (UTC) : 12/23/2008 8:28:13 AM
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnostics-Performance"
Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
<EventID>200</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>4007</Task>
<Opcode>40</Opcode>
<Keywords>0x8000000000010000</Keywords>
<TimeCreated SystemTime="2008-12-23T13:55:39.562Z" />
<EventRecordID>659</EventRecordID>
<Correlation ActivityID="{00000001-0000-0000-F034-E3D10565C901}" />
<Execution ProcessID="1760" ThreadID="2800" />
<Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
<Computer>BLK-PC</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="ShutdownTsVersion">1</Data>
<Data Name="ShutdownStartTime">2008-12-23T08:28:13.985Z</Data>
<Data Name="ShutdownEndTime">2008-12-23T08:28:27.457Z</Data>
<Data Name="ShutdownTime">13472</Data>
<Data Name="ShutdownUserSessionTime">5910</Data>
<Data Name="ShutdownUserPolicyTime">0</Data>
<Data Name="ShutdownUserProfilesTime">5</Data>
<Data Name="ShutdownSystemSessionsTime">4055</Data>
<Data Name="ShutdownPreShutdownNotificationsTime">1241</Data>
<Data Name="ShutdownServicesTime">2648</Data>
<Data Name="ShutdownKernelTime">3506</Data>
<Data Name="ShutdownRootCauseStepImprovementBits">0</Data>
<Data Name="ShutdownRootCauseGradualImprovementBits">0</Data>
<Data Name="ShutdownRootCauseStepDegradationBits">0</Data>
<Data Name="ShutdownRootCauseGradualDegradationBits">0</Data>
<Data Name="ShutdownIsDegradation">false</Data>
<Data Name="ShutdownTimeChange">0</Data>
</EventData>
</Event>
Warning 2:
Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Microsoft-Windows-Diagnostics-Performance
Date: 12/23/2008 8:55:39 AM
Event ID: 203
Task Category: Shutdown Performance Monitoring
Level: Warning
Keywords: Event Log
User: LOCAL SERVICE
Computer: TYP-PC
Description:
This service caused a delay in the system shutdown process:
File Name : SysMain
Friendly Name : Superfetch Service Host
Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Total Time : 2160ms
Degradation Time : 926ms
Incident Time (UTC) : 12/23/2008 8:28:13 AM
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnostics-Performance"
Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
<EventID>203</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>4007</Task>
<Opcode>41</Opcode>
<Keywords>0x8000000000010000</Keywords>
<TimeCreated SystemTime="2008-12-23T13:55:39.562Z" />
<EventRecordID>660</EventRecordID>
<Correlation ActivityID="{00000001-0000-0000-F034-E3D10565C901}" />
<Execution ProcessID="1760" ThreadID="2800" />
<Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
<Computer>BLK-PC</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="StartTime">2008-12-23T08:28:13.985Z</Data>
<Data Name="NameLength">8</Data>
<Data Name="Name">SysMain</Data>
<Data Name="FriendlyNameLength">24</Data>
<Data Name="FriendlyName">Superfetch Service Host</Data>
<Data Name="VersionLength">39</Data>
<Data Name="Version">6.0.6000.16386 (vista_rtm.061101-2205)</Data>
<Data Name="TotalTime">2160</Data>
<Data Name="DegradationTime">926</Data>
<Data Name="PathLength">32</Data>
<Data Name="Path">C:\Windows\system32\sysmain.dll</Data>
<Data Name="ProductNameLength">37</Data>
<Data Name="ProductName">Microsoft® Windows® Operating System</Data>
<Data Name="CompanyNameLength">22</Data>
<Data Name="CompanyName">Microsoft Corporation</Data>
</EventData>
</Event>
Critical 1:
Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Microsoft-Windows-Diagnostics-Performance
Date: 12/23/2008 8:55:41 AM
Event ID: 100
Task Category: Boot Performance Monitoring
Level: Critical
Keywords: Event Log
User: LOCAL SERVICE
Computer: TYP-PC
Description:
Windows has started up:
Boot Duration : 123429ms
IsDegradation : false
Incident Time (UTC) : 12/23/2008 1:53:22 PM
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnostics-Performance"
Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
<EventID>100</EventID>
<Version>1</Version>
<Level>1</Level>
<Task>4002</Task>
<Opcode>34</Opcode>
<Keywords>0x8000000000010000</Keywords>
<TimeCreated SystemTime="2008-12-23T13:55:41.512Z" />
<EventRecordID>661</EventRecordID>
<Correlation ActivityID="{00000001-0000-0003-F034-E3D10565C901}" />
<Execution ProcessID="1760" ThreadID="2796" />
<Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
<Computer>BLK-PC</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="BootTsVersion">2</Data>
<Data Name="BootStartTime">2008-12-23T13:53:22.734Z</Data>
<Data Name="BootEndTime">2008-12-23T13:55:36.754Z</Data>
<Data Name="SystemBootInstance">178</Data>
<Data Name="UserBootInstance">174</Data>
<Data Name="BootTime">123429</Data>
<Data Name="MainPathBootTime">35048</Data>
<Data Name="BootKernelInitTime">18</Data>
<Data Name="BootDriverInitTime">2528</Data>
<Data Name="BootDevicesInitTime">9542</Data>
<Data Name="BootPrefetchInitTime">51917</Data>
<Data Name="BootPrefetchBytes">627814400</Data>
<Data Name="BootAutoChkTime">0</Data>
<Data Name="BootSmssInitTime">5974</Data>
<Data Name="BootCriticalServicesInitTime">980</Data>
<Data Name="BootUserProfileProcessingTime">335</Data>
<Data Name="BootMachineProfileProcessingTime">18</Data>
<Data Name="BootExplorerInitTime">10296</Data>
<Data Name="BootNumStartupApps">9</Data>
<Data Name="BootPostBootTime">88381</Data>
<Data Name="BootIsRebootAfterInstall">false</Data>
<Data Name="BootRootCauseStepImprovementBits">0</Data>
<Data Name="BootRootCauseGradualImprovementBits">0</Data>
<Data Name="BootRootCauseStepDegradationBits">0</Data>
<Data Name="BootRootCauseGradualDegradationBits">0</Data>
<Data Name="BootIsDegradation">false</Data>
<Data Name="BootIsStepDegradation">false</Data>
<Data Name="BootIsGradualDegradation">false</Data>
<Data Name="BootImprovementDelta">0</Data>
<Data Name="BootDegradationDelta">0</Data>
<Data Name="BootIsRootCauseIdentified">false</Data>
</EventData>
</Event>
Thanks
Tim_Ver said:
Ok, I just downloaded the Malwarebytesanti-malware program and updated it and
then did a scan. It found only two items.
fake.Beep.sys - File - c:\windows\system32\drivers\beep.sys
it is blank under other - no action taken
Hijack.Display.Properties - Registry Data - HKey_Local.....
other says Bad:1 Good:0 - No action taken
What should I do with these two? Remove both?
I do not want to screw up anything so I am asking.
Thanks