My comp.spec is in my status already, so here we go..
I checked eventviewer frequently and found this warning message everytime my computer starts
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 01/01/2010
Time: 2:39:09
User: NT AUTHORITY\SYSTEM
Computer: STARFLEET
Description:
Windows saved user STARFLEET\JOHN registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Apparently it began when I installed MSOFFICE 2007:
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 30/12/2009
Time: 23:23:17
User: NT AUTHORITY\SYSTEM
Computer: STARFLEET
Description:
A provider, OffProv12, has been registered in the WMI namespace, Root\MSAPPS12, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
And now it getting worse, I just found 2 more message like this:
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 03/01/2010
Time: 16:11:18
User: STARFLEET\JOHN
Computer: STARFLEET
Description:
A provider, OffProv12, has been registered in the WMI namespace, Root\MSAPPS12, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
For additional info, I disabled & changed these services to manual:
Automatic Updates
IPSEC -manual
Print spooler -manual
Task Scheduler
Windows time
Remote registry
Help & support -manual
Windows Media Player Network Sharing Service