Does this help, Larry? I could only find one other 6005 Event ID on 2/15/08. If you still require the Stop Code and message, I will leave it set so it don't automatically restart after the bsod so i can get that!
Log Name: Application Source: Microsoft-Windows-Winlogon Date: 2/14/2008 9:17:33 AM Event ID: 6005 Task Category: None Level: Warning Keywords: Classic User: N/A Computer: Kilburg-PC Description: The winlogon notification subscriber <TrustedInstaller> is taking long time to handle the notification event (CreateSession). Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";> <System> <Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" /> <EventID Qualifiers="32768">6005</EventID> <Version>0</Version> <Level>3</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-02-14T15:17:33.000Z" /> <EventRecordID>13543</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Kilburg-PC</Computer> <Security /> </System> <EventData> <Data>TrustedInstaller</Data> <Data>CreateSession</Data> <Binary>C807D300</Binary> </EventData> </Event> Event log online http://www.microsoft.com/technet/support/ee/SearchResults.aspx?Type=1&Fallback=1&Source=Microsoft-Windows-Winlogon&ID=6005&Product=Windows+Operating+System&Version=6.0.6000.16386&Language=1033 Terry Kilburg - Independent Reliv International Distributor! 563-872-3788 [EMAIL PROTECTED] ************************************************************************* ** List info, subscription management, list rules, archives, privacy ** ** policy, calmness, a member map, and more at http://www.cguys.org/ ** *************************************************************************
