Howdy- I used to be pretty good at using even logs, but in my years of dealing with this stuff, it's usually more than one problem. Having said that, I have a 64 bit Win 6 x64 system that seems to run fine, but I'm out of practice, yet may have a few tips. If someone else has already suggested these, "never mind."
Your event log shows multiple instances of registry keys not getting written due to no access (regsetvalue with a cause of access denied) so the questions as to whether the programs were installed as administrator were relevant. It also refers to missing updates, and realtime protection from Windows Security Essentials ? When do programs crash ? Usually when the don't see something they expect, or they see something they don't expect.
I would turn off security essentials realtime protection when system testing. It's mentioned in the event log.
As far as ghost USB stuff, you may not actually be seeing all the drivers installed in the USB section: Take the following and stick it in a batch file, then turn on show hidden devices:
@echo on
SET DEVMGR_SHOW_NONPRESENT_DEVICES=1
devmgmt.msc
This should show you non connected devices, and I generally delete most of that stuff from device manager (except controllers and root hubs). The drivers usually re-install if you need them, but sometimes, the reinstall in itself can be a problem if the driver isn't ready for prime time.
If the no access is due to a device that isn't there, the last device manager trick may help. It sounds like you have one or two flash drives plugged in, one for emergency Linux boot ? Are they still plugged in ? I have several ASUS MBs and I've seen them get confused when other boot devices are present, however...... it's usually a boot issue, but sometimes it's just a bluescreen.
TLW referred to windows identifying (or not) duplicate USB devices. Windows "enumerates" or creates a separate ID for each USB device, so you could plug in two identical MS Mice, and it would know which is which. TLW is right, that after they are unplugged, it doesn't remember which is which, and often, if not always installs a new driver. Another reason to use the technique above. You can always skip the batch file, and type SET DEVMGR_SHOW_NONPRESENT_DEVICES=1 into the command line.
Hope that helps. My system should be in my sig, unless I broke that too
joyof60
Log Very open to suggestions on how to present event viewer logs, and which ones would be beneficial.
Name: System Source: RDID1110 Date: 9/1/2015 6:53:34 PM Event ID: 54 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Jams-PC Description: The description for Event ID 54 from source RDID1110 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
\Device\Rdwm1110001
Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="RDID1110" /> <EventID Qualifiers="32772">54</EventID> <Level>3</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T23:53:34.632421800Z" /> <EventRecordID>25975</EventRecordID> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data>\Device\Rdwm1110001</Data> <Binary>00000000010000000000000036000480000000000000000000000000000000000000000000000000</Binary> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/1/2015 5:47:17 PM Event ID: 7006 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: The ScRegSetValueExW call failed for FailureCommand with the following error: Access is denied. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7006</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:47:17.949968600Z" /> <EventRecordID>25954</EventRecordID> <Correlation /> <Execution ProcessID="700" ThreadID="5004" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">ScRegSetValueExW</Data> <Data Name="param2">FailureCommand</Data> <Data Name="param3">%%5</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/1/2015 5:47:16 PM Event ID: 7006 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: The ScRegSetValueExW call failed for Start with the following error: Access is denied. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7006</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:47:16.639893700Z" /> <EventRecordID>25953</EventRecordID> <Correlation /> <Execution ProcessID="700" ThreadID="5004" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">ScRegSetValueExW</Data> <Data Name="param2">Start</Data> <Data Name="param3">%%5</Data> </EventData> </Event> Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 9/1/2015 5:38:44 PM Event ID: 219 Task Category: (212) Level: Warning Keywords: User: SYSTEM Computer: Jams-PC Description: The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC&PROD_STORAGE_DEVICE&REV_0.00#00000000000006&0#. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" /> <EventID>219</EventID> <Version>0</Version> <Level>3</Level> <Task>212</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:38:44.467599100Z" /> <EventRecordID>25914</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="56" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="DriverNameLength">121</Data> <Data Name="DriverName">WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC&PROD_STORAGE_DEVICE&REV_0.00#00000000000006&0#</Data> <Data Name="Status">3221226341</Data> <Data Name="FailureNameLength">14</Data> <Data Name="FailureName">\Driver\WUDFRd</Data> <Data Name="Version">0</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/1/2015 5:38:44 PM Event ID: 7006 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: The ScRegSetValueExW call failed for Start with the following error: Access is denied. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7006</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:38:44.209584300Z" /> <EventRecordID>25911</EventRecordID> <Correlation /> <Execution ProcessID="700" ThreadID="800" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">ScRegSetValueExW</Data> <Data Name="param2">Start</Data> <Data Name="param3">%%5</Data> </EventData> </Event> Log Name: System Source: Microsoft Antimalware Date: 9/1/2015 5:38:44 PM Event ID: 3002 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Network Inspection System Error Code: 0x80070005 Error description: Access is denied. Reason: The system is missing updates that are required for running Network Inspection System. Install the required updates and restart the computer. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft Antimalware" /> <EventID Qualifiers="0">3002</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:38:44.000000000Z" /> <EventRecordID>25905</EventRecordID> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data>%%860</Data> <Data>4.8.0204.0</Data> <Data>%%886</Data> <Data>%%892</Data> <Data>0x80070005</Data> <Data>Access is denied. </Data> <Data>9</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/1/2015 5:38:43 PM Event ID: 7022 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: The AsusFanControlService service hung on starting. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7022</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:38:43.732557000Z" /> <EventRecordID>25901</EventRecordID> <Correlation /> <Execution ProcessID="700" ThreadID="704" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">AsusFanControlService</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/1/2015 5:13:20 PM Event ID: 7006 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: The ScRegSetValueExW call failed for FailureCommand with the following error: Access is denied. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7006</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:13:20.311410500Z" /> <EventRecordID>25761</EventRecordID> <Correlation /> <Execution ProcessID="716" ThreadID="4600" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">ScRegSetValueExW</Data> <Data Name="param2">FailureCommand</Data> <Data Name="param3">%%5</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/1/2015 5:12:31 PM Event ID: 7006 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Jams-PC Description: The ScRegSetValueExW call failed for Start with the following error: Access is denied. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7006</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:12:31.583623400Z" /> <EventRecordID>25756</EventRecordID> <Correlation /> <Execution ProcessID="716" ThreadID="2580" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security /> </System> <EventData> <Data Name="param1">ScRegSetValueExW</Data> <Data Name="param2">Start</Data> <Data Name="param3">%%5</Data> </EventData> </Event> Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 9/1/2015 5:03:54 PM Event ID: 219 Task Category: (212) Level: Warning Keywords: User: SYSTEM Computer: Jams-PC Description: The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC&PROD_STORAGE_DEVICE&REV_0.00#00000000000006&0#. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" /> <EventID>219</EventID> <Version>0</Version> <Level>3</Level> <Task>212</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2015-09-01T22:03:54.764063100Z" /> <EventRecordID>25717</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="48" /> <Channel>System</Channel> <Computer>Jams-PC</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="DriverNameLength">121</Data> <Data Name="DriverName">WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC&PROD_STORAGE_DEVICE&REV_0.00#00000000000006&0#</Data> <Data Name="Status">3221226341</Data> <Data Name="FailureNameLength">14</Data> <Data Name="FailureName">\Driver\WUDFRd</Data> <Data Name="Version">0</Data> </EventData> </Event>