Okay thats all done now, although unfortunately I still am not entirely sure what it is I'm copy and pasting to you guys, I apologise! I imagine this must be rather annoying for you!
When I click it, general says "The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event."
then details says "- System
- Provider
[ Name] Microsoft-Windows-Winlogon
[ Guid] {DBE9B383-7CF3-4331-91CC-A3CB16A3B538}
[ EventSourceName] Wlclntfy
- EventID 6000
[ Qualifiers] 32768
Version 0
Level 4
Task 0
Opcode 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2015-04-15T00:19:35.000000000Z
EventRecordID 225363
Correlation
- Execution
[ ProcessID] 0
[ ThreadID] 0
Channel Application
Computer User-PC
Security
- EventData
SessionEnv
D9060000
--------------------------------------------------------------------------------
Binary data:
In Words
0000: 000006D9
In Bytes
0000: D9 06 00 00 Ù..." in friendly view, in XML view it says
"- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
<EventID Qualifiers="32768">6000</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-04-15T00:19:35.000000000Z" />
<EventRecordID>225363</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>User-PC</Computer>
<Security />
</System>
- <EventData>
<Data>SessionEnv</Data>
<Binary>D9060000</Binary>
</EventData>
</Event>"
Is any of that what you were looking for? I cant find anything else!
