Windows Vista Event ID 1101

Hi guys,

I seem to be having a problem with vista. It keeps restrating, not enough to be really annoying but about 3 times a week.

After the blue screen which is a IRQL_NOT_LESS_OR_EQUAL_TO, the computer restarts.

By looking in event log I can see, every time before the shutdown there is an Event ID 1101 which states:

"Audit events have been dropped by the transport. The real time backup file was corrupt due to improper shutdown. "

The rest of the event log is pasted below:
__________________________________________
Log Name: Security
Source: Microsoft-Windows-Eventlog
Date: 09/05/2007 14:53:45
Event ID: 1101
Task Category: Event processing
Level: Error
Keywords: Audit Success
User: N/A
Computer: GRAY5
Description:
Audit events have been dropped by the transport. The real time backup file was corrupt due to improper shutdown.
Event Xml:
<Event xmlns= "http://schemas.microsoft.com/win/2004/08/events/event ">
<System>
<Provider Name= "Microsoft-Windows-Eventlog" Guid= "{fc65ddd8-d6ef-4962-83d5-6e5cfe9ce148}" />
<EventID>1101</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>101</Task>
<Opcode>0</Opcode>
<Keywords>0x4020000000000000</Keywords>
<TimeCreated SystemTime= "2007-05-09T13:53:45.586Z" />
<EventRecordID>6424</EventRecordID>
<Correlation />
<Execution ProcessID= "1096" ThreadID= "340" />
<Channel>Security</Channel>
<Computer>GRAY5</Computer>
<Security />
</System>
<UserData>
<AuditEventsDropped xmlns:auto-ns3= "http://schemas.microsoft.com/win/2004/08/events" xmlns= "http://manifests.microsoft.com/win/2004/08/windows/eventlog ">
<Reason>34</Reason>
</AuditEventsDropped>
</UserData>
</Event>
__________________________________

It seems to happen very randomly, most of the time while i'm away from the computer.

My hunch is that it is something to do with Shadow Copy, but I have no idea about what to do next, can anyone help?

Thanks

 

I found it

I've found that the cause of this problem was a driver for my wireless network adaptor "netr61.sys ". Now I would like some advice on what to do about this.

I have a Edimax EW-7128g PCI card which uses a windows certified driver from Ralink, the company who make chipsets for most wireless cards.

I have contacted Ralink about my issues, but they are yet to reply (and to be honest I doubt they will).

Where do I go from here?

Thanks guys