Level	Date and Time	Source	Event ID	Task Category
Information	5/27/2010 2:32:11 PM	Service Control Manager	7036	None	The Diagnostic System Host service entered the stopped state.
Information	5/27/2010 2:01:45 PM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Information	5/27/2010 1:57:31 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 1:57:31 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 1:57:31 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 1:57:30 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 1:57:28 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 1:57:28 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 1:57:28 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 1:57:27 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 1:57:26 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:57:26 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Information	5/27/2010 1:57:26 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:57:26 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Information	5/27/2010 1:57:25 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:57:25 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Information	5/27/2010 1:57:25 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:57:25 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Information	5/27/2010 1:57:14 PM	Service Control Manager	7036	None	The Software Protection service entered the stopped state.
Information	5/27/2010 1:52:14 PM	Service Control Manager	7036	None	The Windows Update service entered the running state.
Information	5/27/2010 1:52:13 PM	Service Control Manager	7036	None	The Windows Remote Management (WS-Management) service entered the running state.
Information	5/27/2010 1:52:12 PM	Service Control Manager	7036	None	The Software Protection service entered the running state.
Information	5/27/2010 1:52:12 PM	Service Control Manager	7036	None	The Distributed Transaction Coordinator service entered the running state.
Information	5/27/2010 1:52:13 PM	Microsoft-Windows-WinRM	10148	None	"The WinRM service is listening for WS-Management requests. 

 User Action 
 Use the following command to see the specific IPs on which WinRM is listening: 

 winrm enumerate winrm/config/listener"
Information	5/27/2010 1:52:11 PM	Service Control Manager	7036	None	The Diagnostic System Host service entered the running state.
Information	5/27/2010 1:52:11 PM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the stopped state.
Information	5/27/2010 1:52:11 PM	Service Control Manager	7036	None	The Diagnostic Policy Service service entered the running state.
Information	5/27/2010 1:51:27 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} with address fe80::200:5efe:129.103.194.3 has been brought up.
Information	5/27/2010 1:51:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 1:51:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 1:51:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 1:51:12 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 1:51:12 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 1:51:12 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 1:51:10 PM	Microsoft-Windows-Iphlpsvc	4201	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} is no longer active.
Information	5/27/2010 1:51:10 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:51:10 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Information	5/27/2010 1:51:10 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:51:10 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Information	5/27/2010 1:51:09 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 1:51:09 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:51:09 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Information	5/27/2010 1:51:06 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 1:51:04 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:51:04 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Information	5/27/2010 1:51:01 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 1:51:01 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 1:51:00 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 1:51:00 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 1:50:57 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 1:50:57 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 1:50:57 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 1:50:57 PM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 1:50:55 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Information	5/27/2010 1:50:55 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Information	5/27/2010 1:50:55 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Information	5/27/2010 1:50:55 PM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 1:50:55 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Warning	5/27/2010 1:50:55 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Warning	5/27/2010 1:50:55 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Warning	5/27/2010 1:50:55 PM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Warning	5/27/2010 1:50:36 PM	USER32	1076	None	"The reason supplied by user SPIDERB\Administrator for the last unexpected shutdown of this computer is: Power Failure: Cord Unplugged
 Reason Code: 0x806000b
 Problem ID: 
 Bugcheck String: 
 Comment: 
"
Information	5/27/2010 1:50:32 PM	Service Control Manager	7036	None	The Network Connections service entered the running state.
Information	5/27/2010 1:50:24 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{3A9BFFD4-C7DB-4C40-9A5C-768F4326E58C} with address fe80::200:5efe:129.103.197.3 has been brought up.
Information	5/27/2010 1:50:24 PM	Microsoft-Windows-Winlogon	7001	(1101)	User Logon Notification for Customer Experience Improvement Program
Information	5/27/2010 1:50:22 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{3E569A21-A8BA-4581-91DC-CC3593F5B53E} with address fe80::200:5efe:129.103.196.3 has been brought up.
Information	5/27/2010 1:50:20 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{44DEB175-878E-4382-8EB6-F0C74C448112} with address fe80::200:5efe:129.103.195.3 has been brought up.
Information	5/27/2010 1:50:17 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} with address fe80::200:5efe:129.103.194.3 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{7161D3EA-2ABA-4B2F-8BB6-B340F47CB815} with address fe80::200:5efe:129.103.193.231 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c1e7::8167:c1e7 has been brought up.
Information	5/27/2010 1:50:15 PM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c0e6::8167:c0e6 has been brought up.
Information	5/27/2010 1:50:13 PM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{B7AD8B8A-4A69-41D2-9ED7-7FA5072481CC} with address fe80::200:5efe:129.103.192.230 has been brought up.
Information	5/27/2010 1:50:11 PM	Service Control Manager	7036	None	The IPsec Policy Agent service entered the running state.
Information	5/27/2010 1:50:11 PM	Service Control Manager	7036	None	The Network List Service service entered the running state.
Information	5/27/2010 1:50:11 PM	Service Control Manager	7036	None	The TCP/IP NetBIOS Helper service entered the running state.
Information	5/27/2010 1:50:11 PM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the running state.
Information	5/27/2010 1:50:11 PM	Service Control Manager	7036	None	The Windows Time service entered the stopped state.
Information	5/27/2010 1:50:11 PM	Service Control Manager	7042	None	"The Windows Time service was successfully sent a stop control.

 The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)]

 Comment: None"
Information	5/27/2010 1:50:11 PM	Service Control Manager	7036	None	The Server service entered the running state.
Information	5/27/2010 1:50:10 PM	Service Control Manager	7036	None	The IP Helper service entered the running state.
Information	5/27/2010 1:50:10 PM	e1qexpress	32	None	Intel(R) 82575EB Gigabit Network Connection Link has been established: 1000Mbps.
Information	5/27/2010 1:50:10 PM	Service Control Manager	7036	None	The Windows Management Instrumentation service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The Network Location Awareness service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The Cryptographic Services service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The IKE and AuthIP IPsec Keying Modules service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The Security Accounts Manager service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The Workstation service entered the running state.
Information	5/27/2010 1:50:09 PM	Service Control Manager	7036	None	The Windows Firewall service entered the running state.
Information	5/27/2010 1:50:08 PM	Service Control Manager	7036	None	The Base Filtering Engine service entered the running state.
Information	5/27/2010 1:50:08 PM	Service Control Manager	7036	None	The Task Scheduler service entered the running state.
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The Shell Hardware Detection service entered the running state.
Information	5/27/2010 1:50:07 PM	e1qexpress	32	None	Intel(R) 82575EB Gigabit Network Connection #2 Link has been established: 1000Mbps.
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The DNS Client service entered the running state.
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The DHCP Client service entered the running state.
Information	5/27/2010 1:50:07 PM	Microsoft-Windows-DHCPv6-Client	51046	Service State Event	DHCPv6 client service is started
Information	5/27/2010 1:50:07 PM	Microsoft-Windows-Dhcp-Client	50036	Service State Event	DHCPv4 client service is started
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The Network Store Interface Service service entered the running state.
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The Desktop Window Manager Session Manager service entered the running state.
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The System Event Notification Service service entered the running state.
Information	5/27/2010 1:50:07 PM	Service Control Manager	7036	None	The COM+ Event System service entered the running state.
Information	5/27/2010 1:50:06 PM	Service Control Manager	7036	None	The User Profile Service service entered the running state.
Information	5/27/2010 1:50:06 PM	Service Control Manager	7036	None	The Group Policy Client service entered the running state.
Information	5/27/2010 1:50:06 PM	Service Control Manager	7036	None	The Windows Event Log service entered the running state.
Information	5/27/2010 1:50:06 PM	Service Control Manager	7036	None	The Remote Procedure Call (RPC) service entered the running state.
Information	5/27/2010 1:50:06 PM	Service Control Manager	7036	None	The RPC Endpoint Mapper service entered the running state.
Information	5/27/2010 1:50:06 PM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 10Mbps full duplex.
Information	5/27/2010 1:50:06 PM	Service Control Manager	7036	None	The DCOM Server Process Launcher service entered the running state.
Information	5/27/2010 1:50:05 PM	Microsoft-Windows-FilterManager	6	None	File System Filter 'luafv' (6.1, ‎2009‎-‎07‎-‎14T01:26:13.000000000Z) has successfully loaded and registered with Filter Manager.
Information	5/27/2010 1:50:05 PM	Service Control Manager	7036	None	The Power service entered the running state.
Information	5/27/2010 1:50:05 PM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 10Mbps full duplex.
Information	5/27/2010 1:50:05 PM	Microsoft-Windows-UserPnp	20010	(7010)	"One or more of the Plug and Play service's subsystems has changed state. 

PlugPlay install subsystem enabled: 'true' 
PlugPlay caching subsystem enabled: 'true' 
"
Information	5/27/2010 1:50:05 PM	Service Control Manager	7036	None	The Plug and Play service entered the running state.
Information	5/27/2010 1:50:05 PM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 10Mbps full duplex.
Information	5/27/2010 1:50:05 PM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 10Mbps full duplex.
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 15 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 14 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 13 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 12 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 11 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 10 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 9 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 8 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 7 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 6 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 5 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 4 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 3 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 2 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 1 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 1:49:55 PM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 0 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Critical	5/27/2010 1:49:54 PM	Microsoft-Windows-Kernel-Power	41	(63)	The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Information	5/27/2010 1:50:06 PM	EventLog	6013	None	The system uptime is 33 seconds.
Information	5/27/2010 1:50:06 PM	EventLog	6005	None	The Event log service was started.
Information	5/27/2010 1:50:06 PM	EventLog	6009	None	Microsoft (R) Windows (R) 6.01. 7600  Multiprocessor Free.
Error	5/27/2010 1:50:06 PM	EventLog	6008	None	The previous system shutdown at 1:45:59 PM on ‎5/‎27/‎2010 was unexpected.
Information	5/27/2010 1:49:34 PM	Microsoft-Windows-Kernel-General	12	None	The operating system started at system time ‎2010‎-‎05‎-‎27T11:49:32.596796700Z.
Information	5/27/2010 12:32:03 PM	Service Control Manager	7036	None	The Diagnostic System Host service entered the stopped state.
Information	5/27/2010 12:00:00 PM	EventLog	6013	None	The system uptime is 637 seconds.
Information	5/27/2010 11:57:05 AM	Service Control Manager	7036	None	The Software Protection service entered the stopped state.
Information	5/27/2010 11:56:48 AM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Information	5/27/2010 11:55:59 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} with address fe80::200:5efe:129.103.194.3 has been brought up.
Information	5/27/2010 11:55:38 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 11:55:36 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 11:55:35 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 11:55:35 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 11:55:35 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 11:55:32 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 11:55:32 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 11:55:32 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 11:55:32 AM	Microsoft-Windows-Iphlpsvc	4201	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} is no longer active.
Information	5/27/2010 11:55:30 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:55:30 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Information	5/27/2010 11:55:30 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:55:30 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Information	5/27/2010 11:55:30 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:55:30 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Information	5/27/2010 11:55:29 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:55:29 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Information	5/27/2010 11:52:06 AM	Service Control Manager	7036	None	The Windows Update service entered the running state.
Information	5/27/2010 11:52:04 AM	Service Control Manager	7036	None	The Windows Remote Management (WS-Management) service entered the running state.
Information	5/27/2010 11:52:04 AM	Service Control Manager	7036	None	The Software Protection service entered the running state.
Information	5/27/2010 11:52:04 AM	Service Control Manager	7036	None	The Distributed Transaction Coordinator service entered the running state.
Information	5/27/2010 11:52:04 AM	Microsoft-Windows-WinRM	10148	None	"The WinRM service is listening for WS-Management requests. 

 User Action 
 Use the following command to see the specific IPs on which WinRM is listening: 

 winrm enumerate winrm/config/listener"
Information	5/27/2010 11:52:03 AM	Service Control Manager	7036	None	The Diagnostic System Host service entered the running state.
Information	5/27/2010 11:52:03 AM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the stopped state.
Information	5/27/2010 11:52:03 AM	Service Control Manager	7036	None	The Diagnostic Policy Service service entered the running state.
Information	5/27/2010 11:50:55 AM	Service Control Manager	7036	None	The Network Connections service entered the running state.
Information	5/27/2010 11:50:47 AM	Microsoft-Windows-Winlogon	7001	(1101)	User Logon Notification for Customer Experience Improvement Program
Information	5/27/2010 11:50:20 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 11:50:20 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 11:50:20 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 11:50:17 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 11:50:16 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 11:50:16 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 11:50:16 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{3A9BFFD4-C7DB-4C40-9A5C-768F4326E58C} with address fe80::200:5efe:129.103.197.3 has been brought up.
Information	5/27/2010 11:50:14 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:50:14 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Information	5/27/2010 11:50:14 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:50:14 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Information	5/27/2010 11:50:14 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 11:50:14 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:50:14 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Information	5/27/2010 11:50:13 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{3E569A21-A8BA-4581-91DC-CC3593F5B53E} with address fe80::200:5efe:129.103.196.3 has been brought up.
Information	5/27/2010 11:50:11 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{44DEB175-878E-4382-8EB6-F0C74C448112} with address fe80::200:5efe:129.103.195.3 has been brought up.
Information	5/27/2010 11:50:11 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 11:50:09 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 11:50:09 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Information	5/27/2010 11:50:09 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} with address fe80::200:5efe:129.103.194.3 has been brought up.
Information	5/27/2010 11:50:06 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{7161D3EA-2ABA-4B2F-8BB6-B340F47CB815} with address fe80::200:5efe:129.103.193.231 has been brought up.
Information	5/27/2010 11:50:04 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{B7AD8B8A-4A69-41D2-9ED7-7FA5072481CC} with address fe80::200:5efe:129.103.192.230 has been brought up.
Information	5/27/2010 11:50:03 AM	Service Control Manager	7036	None	The IPsec Policy Agent service entered the running state.
Information	5/27/2010 11:50:03 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 11:50:03 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 11:50:03 AM	Service Control Manager	7036	None	The Network List Service service entered the running state.
Information	5/27/2010 11:50:03 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 11:50:03 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 11:50:03 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c1e7::8167:c1e7 has been brought up.
Information	5/27/2010 11:50:03 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c0e6::8167:c0e6 has been brought up.
Information	5/27/2010 11:50:03 AM	Service Control Manager	7036	None	The Windows Time service entered the stopped state.
Information	5/27/2010 11:50:03 AM	Service Control Manager	7036	None	The TCP/IP NetBIOS Helper service entered the running state.
Information	5/27/2010 11:50:03 AM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the running state.
Information	5/27/2010 11:50:03 AM	Service Control Manager	7042	None	"The Windows Time service was successfully sent a stop control.

 The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)]

 Comment: None"
Information	5/27/2010 11:50:03 AM	Service Control Manager	7036	None	The Server service entered the running state.
Information	5/27/2010 11:50:02 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 11:50:02 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 11:50:02 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 11:50:02 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 11:50:01 AM	Service Control Manager	7036	None	The IP Helper service entered the running state.
Information	5/27/2010 11:50:01 AM	e1qexpress	32	None	Intel(R) 82575EB Gigabit Network Connection Link has been established: 1000Mbps.
Information	5/27/2010 11:50:01 AM	Service Control Manager	7036	None	The Windows Management Instrumentation service entered the running state.
Information	5/27/2010 11:50:01 AM	Service Control Manager	7036	None	The Network Location Awareness service entered the running state.
Information	5/27/2010 11:50:01 AM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Information	5/27/2010 11:50:01 AM	Service Control Manager	7036	None	The Cryptographic Services service entered the running state.
Information	5/27/2010 11:50:00 AM	Service Control Manager	7036	None	The IKE and AuthIP IPsec Keying Modules service entered the running state.
Warning	5/27/2010 11:50:00 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Warning	5/27/2010 11:50:00 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Warning	5/27/2010 11:50:00 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Warning	5/27/2010 11:50:00 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Information	5/27/2010 11:50:00 AM	Service Control Manager	7036	None	The Security Accounts Manager service entered the running state.
Information	5/27/2010 11:50:00 AM	Service Control Manager	7036	None	The Workstation service entered the running state.
Information	5/27/2010 11:50:00 AM	Service Control Manager	7036	None	The Windows Firewall service entered the running state.
Information	5/27/2010 11:50:00 AM	Service Control Manager	7036	None	The Base Filtering Engine service entered the running state.
Information	5/27/2010 11:50:00 AM	Service Control Manager	7036	None	The Task Scheduler service entered the running state.
Information	5/27/2010 11:49:59 AM	Service Control Manager	7036	None	The Shell Hardware Detection service entered the running state.
Information	5/27/2010 11:49:59 AM	Service Control Manager	7036	None	The DNS Client service entered the running state.
Information	5/27/2010 11:49:59 AM	Service Control Manager	7036	None	The DHCP Client service entered the running state.
Information	5/27/2010 11:49:58 AM	Microsoft-Windows-DHCPv6-Client	51046	Service State Event	DHCPv6 client service is started
Information	5/27/2010 11:49:58 AM	Microsoft-Windows-Dhcp-Client	50036	Service State Event	DHCPv4 client service is started
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The Network Store Interface Service service entered the running state.
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The Desktop Window Manager Session Manager service entered the running state.
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The System Event Notification Service service entered the running state.
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The COM+ Event System service entered the running state.
Information	5/27/2010 11:49:58 AM	e1qexpress	32	None	Intel(R) 82575EB Gigabit Network Connection #2 Link has been established: 1000Mbps.
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The User Profile Service service entered the running state.
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The Group Policy Client service entered the running state.
Information	5/27/2010 11:49:58 AM	Service Control Manager	7036	None	The Windows Event Log service entered the running state.
Information	5/27/2010 11:49:57 AM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 10Mbps full duplex.
Information	5/27/2010 11:49:57 AM	Service Control Manager	7036	None	The Remote Procedure Call (RPC) service entered the running state.
Information	5/27/2010 11:49:57 AM	Service Control Manager	7036	None	The RPC Endpoint Mapper service entered the running state.
Information	5/27/2010 11:49:57 AM	Service Control Manager	7036	None	The DCOM Server Process Launcher service entered the running state.
Information	5/27/2010 11:49:57 AM	Microsoft-Windows-FilterManager	6	None	File System Filter 'luafv' (6.1, ‎2009‎-‎07‎-‎14T01:26:13.000000000Z) has successfully loaded and registered with Filter Manager.
Information	5/27/2010 11:49:57 AM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 10Mbps full duplex.
Information	5/27/2010 11:49:57 AM	Service Control Manager	7036	None	The Power service entered the running state.
Information	5/27/2010 11:49:57 AM	Microsoft-Windows-UserPnp	20010	(7010)	"One or more of the Plug and Play service's subsystems has changed state. 

PlugPlay install subsystem enabled: 'true' 
PlugPlay caching subsystem enabled: 'true' 
"
Information	5/27/2010 11:49:57 AM	Service Control Manager	7036	None	The Plug and Play service entered the running state.
Information	5/27/2010 11:49:57 AM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 10Mbps full duplex.
Information	5/27/2010 11:49:57 AM	e1express	35	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 10Mbps full duplex.
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 15 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 14 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 13 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 12 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 11 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 10 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 9 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 8 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 7 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 6 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 5 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 4 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 3 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 2 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 1 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:46 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 0 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 11:49:25 AM	Microsoft-Windows-Kernel-General	12	None	The operating system started at system time ‎2010‎-‎05‎-‎27T09:49:23.596796700Z.
Information	5/27/2010 11:48:20 AM	Microsoft-Windows-Kernel-General	13	None	The operating system is shutting down at system time ‎2010‎-‎05‎-‎27T09:48:20.443091600Z.
Information	5/27/2010 11:48:19 AM	Microsoft-Windows-Kernel-Power	109	(103)	The kernel power manager has initiated a shutdown transition.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Cryptographic Services service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Windows Remote Management (WS-Management) service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The IKE and AuthIP IPsec Keying Modules service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Windows Management Instrumentation service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Distributed Transaction Coordinator service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The IPsec Policy Agent service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The User Profile Service service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Windows Time service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Desktop Window Manager Session Manager service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Plug and Play service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Microsoft-Windows-UserPnp	20010	(7010)	"One or more of the Plug and Play service's subsystems has changed state. 

PlugPlay install subsystem enabled: 'false' 
PlugPlay caching subsystem enabled: 'false' 
"
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Windows Event Log service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The DHCP Client service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Power service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Microsoft-Windows-Dhcp-Client	50037	Service State Event	DHCPv4 client service is stopped. ShutDown Flag value is 1
Information	5/27/2010 11:49:57 AM	EventLog	6013	None	The system uptime is 34 seconds.
Information	5/27/2010 11:49:57 AM	EventLog	6005	None	The Event log service was started.
Information	5/27/2010 11:49:57 AM	EventLog	6009	None	Microsoft (R) Windows (R) 6.01. 7600  Multiprocessor Free.
Information	5/27/2010 11:48:18 AM	Microsoft-Windows-DHCPv6-Client	51047	Service State Event	DHCPv6 client service is stopped. ShutDown Flag value is 1
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Diagnostic Policy Service service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Group Policy Client service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Service Control Manager	7036	None	The Windows Update service entered the stopped state.
Information	5/27/2010 11:48:18 AM	Microsoft-Windows-Winlogon	7002	(1102)	User Logoff Notification for Customer Experience Improvement Program
Information	5/27/2010 11:48:18 AM	EventLog	6006	None	The Event log service was stopped.
Information	5/27/2010 11:48:18 AM	USER32	1074	None	"The process C:\Windows\system32\winlogon.exe (SPIDERB) has initiated the restart of computer SPIDERB on behalf of user SPIDERB\Administrator for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shutdown Type: restart
 Comment: "
Information	5/27/2010 11:48:17 AM	USER32	1074	None	"The process Explorer.EXE has initiated the restart of computer SPIDERB on behalf of user SPIDERB\Administrator for the following reason: Hardware: Maintenance (Planned)
 Reason Code: 0x84010001
 Shutdown Type: restart
 Comment: "
Information	5/27/2010 11:00:54 AM	Service Control Manager	7036	None	The Diagnostic System Host service entered the stopped state.
Information	5/27/2010 10:25:56 AM	Service Control Manager	7036	None	The Software Protection service entered the stopped state.
Information	5/27/2010 10:22:34 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 10:22:34 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 10:22:34 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 10:22:33 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 10:22:30 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 10:22:30 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 10:22:30 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 10:22:30 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 10:22:29 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 10:22:28 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been disconnected.
Information	5/27/2010 10:22:28 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 10:22:28 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been disconnected.
Information	5/27/2010 10:22:28 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 10:22:28 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been disconnected.
Information	5/27/2010 10:22:28 AM	Microsoft-Windows-Iphlpsvc	4201	None	6to4 interface 6TO4 Adapter is no longer active.
Warning	5/27/2010 10:22:28 AM	e1express	27	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been disconnected.
Information	5/27/2010 10:20:56 AM	Service Control Manager	7036	None	The Windows Update service entered the running state.
Information	5/27/2010 10:20:55 AM	Service Control Manager	7036	None	The Windows Remote Management (WS-Management) service entered the running state.
Information	5/27/2010 10:20:55 AM	Microsoft-Windows-WinRM	10148	None	"The WinRM service is listening for WS-Management requests. 

 User Action 
 Use the following command to see the specific IPs on which WinRM is listening: 

 winrm enumerate winrm/config/listener"
Information	5/27/2010 10:20:55 AM	Service Control Manager	7036	None	The Software Protection service entered the running state.
Information	5/27/2010 10:20:54 AM	Service Control Manager	7036	None	The Distributed Transaction Coordinator service entered the running state.
Information	5/27/2010 10:20:54 AM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the stopped state.
Information	5/27/2010 10:20:54 AM	Service Control Manager	7036	None	The Diagnostic System Host service entered the running state.
Information	5/27/2010 10:20:54 AM	Service Control Manager	7036	None	The Diagnostic Policy Service service entered the running state.
Information	5/27/2010 10:19:38 AM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Warning	5/27/2010 10:19:27 AM	USER32	1076	None	"The reason supplied by user SPIDERB\Administrator for the last unexpected shutdown of this computer is: Power Failure: Cord Unplugged
 Reason Code: 0x806000b
 Problem ID: 
 Bugcheck String: 
 Comment: 
"
Information	5/27/2010 10:19:21 AM	Service Control Manager	7036	None	The Network Connections service entered the running state.
Information	5/27/2010 10:19:14 AM	Microsoft-Windows-Winlogon	7001	(1101)	User Logon Notification for Customer Experience Improvement Program
Information	5/27/2010 10:19:07 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{3A9BFFD4-C7DB-4C40-9A5C-768F4326E58C} with address fe80::200:5efe:129.103.197.3 has been brought up.
Information	5/27/2010 10:19:05 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{3E569A21-A8BA-4581-91DC-CC3593F5B53E} with address fe80::200:5efe:129.103.196.3 has been brought up.
Information	5/27/2010 10:19:02 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{44DEB175-878E-4382-8EB6-F0C74C448112} with address fe80::200:5efe:129.103.195.3 has been brought up.
Information	5/27/2010 10:19:00 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{0743FFED-FF62-45DD-B91D-278146205C4D} with address fe80::200:5efe:129.103.194.3 has been brought up.
Information	5/27/2010 10:18:58 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{7161D3EA-2ABA-4B2F-8BB6-B340F47CB815} with address fe80::200:5efe:129.103.193.231 has been brought up.
Information	5/27/2010 10:18:55 AM	Microsoft-Windows-Iphlpsvc	4200	None	Isatap interface isatap.{B7AD8B8A-4A69-41D2-9ED7-7FA5072481CC} with address fe80::200:5efe:129.103.192.230 has been brought up.
Information	5/27/2010 10:18:54 AM	Service Control Manager	7036	None	The IPsec Policy Agent service entered the running state.
Information	5/27/2010 10:18:54 AM	Service Control Manager	7036	None	The Portable Device Enumerator Service service entered the running state.
Information	5/27/2010 10:18:54 AM	Service Control Manager	7036	None	The Network List Service service entered the running state.
Information	5/27/2010 10:18:54 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c503::8167:c503 has been brought up.
Information	5/27/2010 10:18:54 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c403::8167:c403 has been brought up.
Information	5/27/2010 10:18:54 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c303::8167:c303 has been brought up.
Information	5/27/2010 10:18:54 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c203::8167:c203 has been brought up.
Information	5/27/2010 10:18:54 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c1e7::8167:c1e7 has been brought up.
Information	5/27/2010 10:18:54 AM	Microsoft-Windows-Iphlpsvc	4200	None	6to4 interface 6TO4 Adapter with address 2002:8167:c0e6::8167:c0e6 has been brought up.
Information	5/27/2010 10:18:54 AM	Service Control Manager	7036	None	The TCP/IP NetBIOS Helper service entered the running state.
Information	5/27/2010 10:18:54 AM	Service Control Manager	7036	None	The Windows Time service entered the stopped state.
Information	5/27/2010 10:18:54 AM	Service Control Manager	7042	None	"The Windows Time service was successfully sent a stop control.

 The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)]

 Comment: None"
Information	5/27/2010 10:18:54 AM	Service Control Manager	7036	None	The Server service entered the running state.
Information	5/27/2010 10:18:53 AM	e1qexpress	32	None	Intel(R) 82575EB Gigabit Network Connection Link has been established: 1000Mbps.
Information	5/27/2010 10:18:52 AM	Service Control Manager	7036	None	The IP Helper service entered the running state.
Information	5/27/2010 10:18:52 AM	Service Control Manager	7036	None	The Windows Management Instrumentation service entered the running state.
Information	5/27/2010 10:18:52 AM	Service Control Manager	7036	None	The Network Location Awareness service entered the running state.
Information	5/27/2010 10:18:52 AM	Service Control Manager	7036	None	The Windows Time service entered the running state.
Information	5/27/2010 10:18:52 AM	Service Control Manager	7036	None	The Cryptographic Services service entered the running state.
Information	5/27/2010 10:18:52 AM	Service Control Manager	7036	None	The IKE and AuthIP IPsec Keying Modules service entered the running state.
Information	5/27/2010 10:18:51 AM	Service Control Manager	7036	None	The Security Accounts Manager service entered the running state.
Information	5/27/2010 10:18:51 AM	Service Control Manager	7036	None	The Workstation service entered the running state.
Information	5/27/2010 10:18:51 AM	Service Control Manager	7036	None	The Windows Firewall service entered the running state.
Information	5/27/2010 10:18:51 AM	Service Control Manager	7036	None	The Base Filtering Engine service entered the running state.
Information	5/27/2010 10:18:51 AM	Service Control Manager	7036	None	The Task Scheduler service entered the running state.
Information	5/27/2010 10:18:50 AM	e1qexpress	32	None	Intel(R) 82575EB Gigabit Network Connection #2 Link has been established: 1000Mbps.
Information	5/27/2010 10:18:50 AM	Service Control Manager	7036	None	The Shell Hardware Detection service entered the running state.
Information	5/27/2010 10:18:50 AM	Service Control Manager	7036	None	The DNS Client service entered the running state.
Information	5/27/2010 10:18:50 AM	Service Control Manager	7036	None	The DHCP Client service entered the running state.
Information	5/27/2010 10:18:50 AM	Microsoft-Windows-DHCPv6-Client	51046	Service State Event	DHCPv6 client service is started
Information	5/27/2010 10:18:50 AM	Microsoft-Windows-Dhcp-Client	50036	Service State Event	DHCPv4 client service is started
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The Network Store Interface Service service entered the running state.
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The Desktop Window Manager Session Manager service entered the running state.
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The System Event Notification Service service entered the running state.
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The COM+ Event System service entered the running state.
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The User Profile Service service entered the running state.
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The Group Policy Client service entered the running state.
Information	5/27/2010 10:18:49 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter Link has been established: 1000Mbps.
Information	5/27/2010 10:18:49 AM	Service Control Manager	7036	None	The Windows Event Log service entered the running state.
Information	5/27/2010 10:18:49 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #3 Link has been established: 1000Mbps.
Information	5/27/2010 10:18:48 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #2 Link has been established: 1000Mbps.
Information	5/27/2010 10:18:48 AM	Service Control Manager	7036	None	The Remote Procedure Call (RPC) service entered the running state.
Information	5/27/2010 10:18:48 AM	Service Control Manager	7036	None	The RPC Endpoint Mapper service entered the running state.
Information	5/27/2010 10:18:48 AM	Service Control Manager	7036	None	The DCOM Server Process Launcher service entered the running state.
Information	5/27/2010 10:18:48 AM	e1express	32	None	Intel(R) PRO/1000 PT Dual Port Server Adapter #4 Link has been established: 1000Mbps.
Information	5/27/2010 10:18:48 AM	Microsoft-Windows-FilterManager	6	None	File System Filter 'luafv' (6.1, ‎2009‎-‎07‎-‎14T01:26:13.000000000Z) has successfully loaded and registered with Filter Manager.
Information	5/27/2010 10:18:48 AM	Service Control Manager	7036	None	The Power service entered the running state.
Information	5/27/2010 10:18:48 AM	Microsoft-Windows-UserPnp	20010	(7010)	"One or more of the Plug and Play service's subsystems has changed state. 

PlugPlay install subsystem enabled: 'true' 
PlugPlay caching subsystem enabled: 'true' 
"
Information	5/27/2010 10:18:48 AM	Service Control Manager	7036	None	The Plug and Play service entered the running state.
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 15 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 14 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 13 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 12 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 11 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 10 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 9 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 8 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 7 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 6 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 5 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 4 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 3 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 2 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 1 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Information	5/27/2010 10:18:37 AM	Microsoft-Windows-Kernel-Processor-Power	26	(4)	"Processor 0 in group 0 exposes the following:

2 idle state(s)
8 performance state(s)
0 throttle state(s)"
Critical	5/27/2010 10:18:36 AM	Microsoft-Windows-Kernel-Power	41	(63)	The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Information	5/27/2010 10:18:49 AM	EventLog	6013	None	The system uptime is 34 seconds.
Information	5/27/2010 10:18:49 AM	EventLog	6005	None	The Event log service was started.
Information	5/27/2010 10:18:49 AM	EventLog	6009	None	Microsoft (R) Windows (R) 6.01. 7600  Multiprocessor Free.
Error	5/27/2010 10:18:49 AM	EventLog	6008	None	The previous system shutdown at 10:15:27 AM on ‎5/‎27/‎2010 was unexpected.
Information	5/27/2010 10:18:16 AM	Microsoft-Windows-Kernel-General	12	None	The operating system started at system time ‎2010‎-‎05‎-‎27T08: