Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 7031 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 7031
Event Source: Service Control Manager
Event Type: Error
Event Description: Unable to start the print spooler
Comment:
Event ID: 7031
Event Source: Cisco Secure Services Client service
Event Type: Error
Event Description: The Cisco Secure Services Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 2000 milliseconds: Restart the service.
Comment:
Event ID: 7031
Event Source: Service Control Manager
Event Type: Error
Event Description: The Symantec AntiVirus service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Comment: Proceeding event-
SYMANTEC TAMPER PROTECTION ALERT Target: C:\Program Files\Symantec AntiVirus\Rtvscan.exe Event Info: Suspend Thread Action Taken: Blocked Actor Process: C:\WINDOWS\System32\svchost.exe (PID 1436) Time: Thursday April 01 2010 8:03:05 AM
Event ID: 7031
Event Source: Service Control Manager
Event Type: Error
Event Description: - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7031</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2015-10-24T17:11:29.362304600Z" />
<EventRecordID>837576</EventRecordID>
<Correlation />
<Execution ProcessID="720" ThreadID="892" />
<Channel>System</Channel>
<Computer>******</Computer>
<Security />
</System>
- <EventData>
<Data Name="param1">DCOM Server Process Launcher</Data>
<Data Name="param2">1</Data>
<Data Name="param3">60000</Data>
<Data Name="param4">2</Data>
<Data Name="param5">Reboot the machine</Data>
</EventData>
</Event>
Comment: I have had this problem for 3 months now.  It is exhibited for DCOM Launcher Plug & Play and Power service.  In the XML above I blocked out the computer name (******).

I have searched the web extensively and Microsoft.com with no definitive results (the Microsoft hits are the least helpful).  

For a time 9 out of 10 boots would fail.  Then after flushing the icon cache and rebuilding it I got more than a dozen successful boots in a row but as desktop icons again started going away or bad I am back to 9 out of 10 failures.  SFC /scannow provides only temporary help.  Chkdsk the same.  

Full hard drive scan with SpinRite6 indicated a healthy disk (it should be since it is less than a year old).  

This is a 32-bit Win7 Home Premium system 4 gig RAM HP Pavilion d4650y.  

On the same disk I have a recovery Win7 clean install bootable partition that does not suffer from this problem.  

Good luck.

Long thread posted on Windows Secrets:

http://windowssecrets.com/forums/showthread.php/171319-DCOM-Server-Process-stopped-unexpectedly

Logon as a member to see the images.

Ken Kashmarek

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...