Event Viewer Question

I have a sound trigger for the 'Open program' event in Vista Basic sp2 x32
When my computer is idle and I "here" a program open the
only thing I have to go by is the time it occurred.

If I want to go to Event Viewer in Administrative Tools and see what
this event was that triggered the event sound I'm overwhelmed with
a bunch of categories and sub-categories.

In order to find what opened at the specific time I need to check each
category and
sub-category. That is a real pain in the ass.

I find no search capabilities in Event Viewer unless I've missed it.

Is there some way of making a hunt for a specific time easier in Event
Viewer?
Or, is there some 3rd party software with the capability to sort all events
by
data and time??

Thanks,
James

 

JamesJ wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> I have a sound trigger for the 'Open program' event in Vista Basic sp2
> x32 When my computer is idle and I "here" a program open the
> only thing I have to go by is the time it occurred.
>
> If I want to go to Event Viewer in Administrative Tools and see what
> this event was that triggered the event sound I'm overwhelmed with
> a bunch of categories and sub-categories.
>
> In order to find what opened at the specific time I need to check each
> category and
> sub-category. That is a real pain in the ass.
>
> I find no search capabilities in Event Viewer unless I've missed it.
>
> Is there some way of making a hunt for a specific time easier in Event
> Viewer?
> Or, is there some 3rd party software with the capability to sort all
> events by
> data and time??<!--colorc--><!--/colorc-->




Both links discuss how to filter.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!

 

Both articles seem very useful.

Thanks,
James

"Malke" <malke@invalid.invalid> wrote in message
news:unjBxPyTKHA.504@TK2MSFTNGP06.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> JamesJ wrote:
><!--coloro:green--><span style="color:green <!--/coloro-->
>> I have a sound trigger for the 'Open program' event in Vista Basic sp2
>> x32 When my computer is idle and I "here" a program open the
>> only thing I have to go by is the time it occurred.
>>
>> If I want to go to Event Viewer in Administrative Tools and see what
>> this event was that triggered the event sound I'm overwhelmed with
>> a bunch of categories and sub-categories.
>>
>> In order to find what opened at the specific time I need to check each
>> category and
>> sub-category. That is a real pain in the ass.
>>
>> I find no search capabilities in Event Viewer unless I've missed it.
>>
>> Is there some way of making a hunt for a specific time easier in Event
>> Viewer?
>> Or, is there some 3rd party software with the capability to sort all
>> events by
>> data and time??<!--colorc--><!--/colorc-->
>
>
>
>
> Both links discuss how to filter.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers - Don't Panic!
>
> <!--colorc--><!--/colorc-->

 

"JamesJ" <jjy_darwin@roadrunner.com> wrote in message
news:#wNvDhyTKHA.5552@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Both articles seem very useful.
>
> Thanks,
> James
>
> "Malke" <malke@invalid.invalid> wrote in message
> news:unjBxPyTKHA.504@TK2MSFTNGP06.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> JamesJ wrote:
>><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> I have a sound trigger for the 'Open program' event in Vista Basic sp2
>>> x32 When my computer is idle and I "here" a program open the
>>> only thing I have to go by is the time it occurred.
>>>
>>> If I want to go to Event Viewer in Administrative Tools and see what
>>> this event was that triggered the event sound I'm overwhelmed with
>>> a bunch of categories and sub-categories.
>>>
>>> In order to find what opened at the specific time I need to check each
>>> category and
>>> sub-category. That is a real pain in the ass.
>>>
>>> I find no search capabilities in Event Viewer unless I've missed it.
>>>
>>> Is there some way of making a hunt for a specific time easier in Event
>>> Viewer?
>>> Or, is there some 3rd party software with the capability to sort all
>>> events by
>>> data and time??<!--colorc--><!--/colorc-->
>>
>>
>>
>>
>> Both links discuss how to filter.
>>
>> Malke
>> --
>> MS-MVP
>> Elephant Boy Computers - Don't Panic!
>>
>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->

Just out of idle curiosity I'd be interested to know what you find as the
"offending" program.
Geo.

 

1) I never said there was an offending program.
2) I've get other problems with my Vista os right now.

You'll be the first to know.


"GSalisbury" <invalid.salsburyg@comcast.net.invalid> wrote in message
news:#mtMOX0TKHA.1236@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
> news:#wNvDhyTKHA.5552@TK2MSFTNGP05.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> Both articles seem very useful.
>>
>> Thanks,
>> James
>>
>> "Malke" <malke@invalid.invalid> wrote in message
>> news:unjBxPyTKHA.504@TK2MSFTNGP06.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> JamesJ wrote:
>>>
>>>> I have a sound trigger for the 'Open program' event in Vista Basic sp2
>>>> x32 When my computer is idle and I "here" a program open the
>>>> only thing I have to go by is the time it occurred.
>>>>
>>>> If I want to go to Event Viewer in Administrative Tools and see what
>>>> this event was that triggered the event sound I'm overwhelmed with
>>>> a bunch of categories and sub-categories.
>>>>
>>>> In order to find what opened at the specific time I need to check each
>>>> category and
>>>> sub-category. That is a real pain in the ass.
>>>>
>>>> I find no search capabilities in Event Viewer unless I've missed it.
>>>>
>>>> Is there some way of making a hunt for a specific time easier in Event
>>>> Viewer?
>>>> Or, is there some 3rd party software with the capability to sort all
>>>> events by
>>>> data and time??
>>>
>>>
>>>
>>>
>>> Both links discuss how to filter.
>>>
>>> Malke
>>> --
>>> MS-MVP
>>> Elephant Boy Computers - Don't Panic!
>>>
>>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
> Just out of idle curiosity I'd be interested to know what you find as the
> "offending" program.
> Geo. <!--colorc--><!--/colorc-->

 

"JamesJ" <jjy_darwin@roadrunner.com> wrote in message
news:e1$2zs0TKHA.4364@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> 1) I never said there was an offending program.<!--colorc--><!--/colorc-->

I was using the expression "offending program" loosely.
Your original post said you had sound trigger for running a program and
(the implication was since you posted) you didn't know what it was and
wanted to find out.
My question was along the lines of did the filtering lead you to what
you wanted to know and what did you discover.
Again, as I noted, I'm just curious.
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> 2) I've get other problems with my Vista os right now.<!--colorc--><!--/colorc-->

Hope you get it sorted out
Geo.
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> You'll be the first to know.
>
>
> "GSalisbury" <invalid.salsburyg@comcast.net.invalid> wrote in message
> news:#mtMOX0TKHA.1236@TK2MSFTNGP05.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>>
>> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
>> news:#wNvDhyTKHA.5552@TK2MSFTNGP05.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Both articles seem very useful.
>>>
>>> Thanks,
>>> James
>>>
>>> "Malke" <malke@invalid.invalid> wrote in message
>>> news:unjBxPyTKHA.504@TK2MSFTNGP06.phx.gbl...
>>>> JamesJ wrote:
>>>>
>>>>> I have a sound trigger for the 'Open program' event in Vista Basic
>>>>> sp2
>>>>> x32 When my computer is idle and I "here" a program open the
>>>>> only thing I have to go by is the time it occurred.
>>>>>
>>>>> If I want to go to Event Viewer in Administrative Tools and see what
>>>>> this event was that triggered the event sound I'm overwhelmed with
>>>>> a bunch of categories and sub-categories.
>>>>>
>>>>> In order to find what opened at the specific time I need to check each
>>>>> category and
>>>>> sub-category. That is a real pain in the ass.
>>>>>
>>>>> I find no search capabilities in Event Viewer unless I've missed it.
>>>>>
>>>>> Is there some way of making a hunt for a specific time easier in Event
>>>>> Viewer?
>>>>> Or, is there some 3rd party software with the capability to sort all
>>>>> events by
>>>>> data and time??
>>>>
>>>>
>>>>
>>>>
>>>> Both links discuss how to filter.
>>>>
>>>> Malke
>>>> --
>>>> MS-MVP
>>>> Elephant Boy Computers - Don't Panic!
>>>>
>>>><!--colorc--><!--/colorc-->
>>
>> Just out of idle curiosity I'd be interested to know what you find as the
>> "offending" program.
>> Geo.<!--colorc--><!--/colorc-->
><!--colorc--><!--/colorc-->

 

I understand.
I'm just a bit unerved 'bout these problems I'm having with Vista.

James

"GSalisbury" <invalid.salsburyg@comcast.net.invalid> wrote in message
news:OOjZv20TKHA.2836@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
> news:e1$2zs0TKHA.4364@TK2MSFTNGP04.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> 1) I never said there was an offending program.<!--colorc--><!--/colorc-->
>
> I was using the expression "offending program" loosely.
> Your original post said you had sound trigger for running a program and
> (the implication was since you posted) you didn't know what it was and
> wanted to find out.
> My question was along the lines of did the filtering lead you to what
> you wanted to know and what did you discover.
> Again, as I noted, I'm just curious.
><!--coloro:green--><span style="color:green <!--/coloro-->
>> 2) I've get other problems with my Vista os right now.<!--colorc--><!--/colorc-->
>
> Hope you get it sorted out
> Geo.
><!--coloro:green--><span style="color:green <!--/coloro-->
>>
>> You'll be the first to know.
>>
>>
>> "GSalisbury" <invalid.salsburyg@comcast.net.invalid> wrote in message
>> news:#mtMOX0TKHA.1236@TK2MSFTNGP05.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>>
>>> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
>>> news:#wNvDhyTKHA.5552@TK2MSFTNGP05.phx.gbl...
>>>> Both articles seem very useful.
>>>>
>>>> Thanks,
>>>> James
>>>>
>>>> "Malke" <malke@invalid.invalid> wrote in message
>>>> news:unjBxPyTKHA.504@TK2MSFTNGP06.phx.gbl...
>>>>> JamesJ wrote:
>>>>>
>>>>>> I have a sound trigger for the 'Open program' event in Vista Basic
>>>>>> sp2
>>>>>> x32 When my computer is idle and I "here" a program open the
>>>>>> only thing I have to go by is the time it occurred.
>>>>>>
>>>>>> If I want to go to Event Viewer in Administrative Tools and see what
>>>>>> this event was that triggered the event sound I'm overwhelmed with
>>>>>> a bunch of categories and sub-categories.
>>>>>>
>>>>>> In order to find what opened at the specific time I need to check
>>>>>> each
>>>>>> category and
>>>>>> sub-category. That is a real pain in the ass.
>>>>>>
>>>>>> I find no search capabilities in Event Viewer unless I've missed it.
>>>>>>
>>>>>> Is there some way of making a hunt for a specific time easier in
>>>>>> Event
>>>>>> Viewer?
>>>>>> Or, is there some 3rd party software with the capability to sort all
>>>>>> events by
>>>>>> data and time??
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Both links discuss how to filter.
>>>>>
>>>>> Malke
>>>>> --
>>>>> MS-MVP
>>>>> Elephant Boy Computers - Don't Panic!
>>>>>
>>>>>
>>>
>>> Just out of idle curiosity I'd be interested to know what you find as
>>> the "offending" program.
>>> Geo.<!--colorc--><!--/colorc-->
>><!--colorc--><!--/colorc-->
>
>
> <!--colorc--><!--/colorc-->

 

Something WAS triggering the open event,
I found it was the Windows Error Reporting Service.

James

"GSalisbury" <invalid.salsburyg@comcast.net.invalid> wrote in message
news:#mtMOX0TKHA.1236@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
> news:#wNvDhyTKHA.5552@TK2MSFTNGP05.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> Both articles seem very useful.
>>
>> Thanks,
>> James
>>
>> "Malke" <malke@invalid.invalid> wrote in message
>> news:unjBxPyTKHA.504@TK2MSFTNGP06.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> JamesJ wrote:
>>>
>>>> I have a sound trigger for the 'Open program' event in Vista Basic sp2
>>>> x32 When my computer is idle and I "here" a program open the
>>>> only thing I have to go by is the time it occurred.
>>>>
>>>> If I want to go to Event Viewer in Administrative Tools and see what
>>>> this event was that triggered the event sound I'm overwhelmed with
>>>> a bunch of categories and sub-categories.
>>>>
>>>> In order to find what opened at the specific time I need to check each
>>>> category and
>>>> sub-category. That is a real pain in the ass.
>>>>
>>>> I find no search capabilities in Event Viewer unless I've missed it.
>>>>
>>>> Is there some way of making a hunt for a specific time easier in Event
>>>> Viewer?
>>>> Or, is there some 3rd party software with the capability to sort all
>>>> events by
>>>> data and time??
>>>
>>>
>>>
>>>
>>> Both links discuss how to filter.
>>>
>>> Malke
>>> --
>>> MS-MVP
>>> Elephant Boy Computers - Don't Panic!
>>>
>>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
> Just out of idle curiosity I'd be interested to know what you find as the
> "offending" program.
> Geo. <!--colorc--><!--/colorc-->

 

"JamesJ" <jjy_darwin@roadrunner.com> wrote in message
news:e2f9bt#TKHA.508@TK2MSFTNGP06.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Something WAS triggering the open event,
> I found it was the Windows Error Reporting Service.
><!--colorc--><!--/colorc-->

Interesting.
Was the Error Report able to clarify what the problem is?
Not meaning to bog you down here but, in my experience, sometimes writing
down discoveries helps in uncovering the real issue.
Remaining curious since I started this<g>
Geo.
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> James
><!--colorc--><!--/colorc-->
[snip]

 

I copied and pasted the 2 Warnings:

'Code Integrity determined an unsigned kernel module
system32\drivers\TfFsMon.sys is loaded into the system.
Check with the publisher to see if a signed version of the kernel module is
available.'

'Code Integrity determined an unsigned kernel module
\Device\HarddiskVolume1\Windows\System32\drivers\pctgntdi.sys
is loaded into the system. Check with the publisher to see if a signed
version of the kernel module is available.'

Not sure what either of these are for.

James

"GSalisbury" <invalid.salsburyg@comcast.net.invalid> wrote in message
news:egJK7BBUKHA.2836@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
> news:e2f9bt#TKHA.508@TK2MSFTNGP06.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> Something WAS triggering the open event,
>> I found it was the Windows Error Reporting Service.
>><!--colorc--><!--/colorc-->
>
> Interesting.
> Was the Error Report able to clarify what the problem is?
> Not meaning to bog you down here but, in my experience, sometimes writing
> down discoveries helps in uncovering the real issue.
> Remaining curious since I started this<g>
> Geo.
><!--coloro:green--><span style="color:green <!--/coloro-->
>> James
>><!--colorc--><!--/colorc-->
> [snip]
>
> <!--colorc--><!--/colorc-->

 

"JamesJ" <jjy_darwin@roadrunner.com> wrote in message news:e7QHDXBUKHA.4360@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> I copied and pasted the 2 Warnings:
>
> 'Code Integrity determined an unsigned kernel module
> system32driversTfFsMon.sys is loaded into the system.
> Check with the publisher to see if a signed version of the kernel module is
> available.'
>
> 'Code Integrity determined an unsigned kernel module
> DeviceHarddiskVolume1WindowsSystem32driverspctgntdi.sys
> is loaded into the system. Check with the publisher to see if a signed
> version of the kernel module is available.'
>
> Not sure what either of these are for.
>
> James<!--colorc--><!--/colorc-->

When I Google the files I get these:

Tffsmon.sys
Company: PC Tools
Productname: ThreatFire
Description: ThreatFire System Monitor

Product name PC Tools Generic TDI Driver
Company name PC Tools
File description PC Tools Generic TDI Driver
Internal name pctgntdi
Original filename pctgntdi.sys

So it looks like it's PC Tools you can blame for all your troubles.

 

This wasn't causing problems that I can see.
I figured the pctgntdi was pctools.
I doubt if these are the only files cause a Code Integrity error.

James

"Dave-UK" <Here@home> wrote in message
news:uPauIPCUKHA.5208@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
> news:e7QHDXBUKHA.4360@TK2MSFTNGP04.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> I copied and pasted the 2 Warnings:
>>
>> 'Code Integrity determined an unsigned kernel module
>> system32driversTfFsMon.sys is loaded into the system.
>> Check with the publisher to see if a signed version of the kernel module
>> is available.'
>>
>> 'Code Integrity determined an unsigned kernel module
>> DeviceHarddiskVolume1WindowsSystem32driverspctgntdi.sys
>> is loaded into the system. Check with the publisher to see if a signed
>> version of the kernel module is available.'
>>
>> Not sure what either of these are for.
>>
>> James<!--colorc--><!--/colorc-->
>
> When I Google the files I get these:
>
> Tffsmon.sys Company: PC Tools
> Productname: ThreatFire
> Description: ThreatFire System Monitor
>
> Product name PC Tools Generic TDI Driver Company name PC Tools File
> description PC Tools Generic TDI Driver Internal name pctgntdi Original
> filename pctgntdi.sys
> So it looks like it's PC Tools you can blame for all your troubles.
>
> <!--colorc--><!--/colorc-->

 

"JamesJ" <jjy_darwin@roadrunner.com> wrote in message news:e2p7ZdCUKHA.5584@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> This wasn't causing problems that I can see.
> I figured the pctgntdi was pctools.
> I doubt if these are the only files cause a Code Integrity error.
>
> James
> <!--colorc--><!--/colorc-->

Do these Code Integrity Errors interfere, or show up as error
messages, in the day to day use of the computer ?
Are they worth worrying about ?

 

No error messages . And I'm by no means worried.
I don't believe I said anything in my original post about being worried
about anything.
I was simply curious about what programs or processes start when my computer
is idle.
I paid good money for this and I like to know what goes on behind the
scenes.

Is that ok??

James

"Dave-UK" <Here@home> wrote in message
news:etcGXpCUKHA.3412@TK2MSFTNGP06.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> "JamesJ" <jjy_darwin@roadrunner.com> wrote in message
> news:e2p7ZdCUKHA.5584@TK2MSFTNGP05.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> This wasn't causing problems that I can see.
>> I figured the pctgntdi was pctools.
>> I doubt if these are the only files cause a Code Integrity error.
>>
>> James
>><!--colorc--><!--/colorc-->
>
> Do these Code Integrity Errors interfere, or show up as error
> messages, in the day to day use of the computer ?
> Are they worth worrying about ?
>
> <!--colorc--><!--/colorc-->