i found this file from the defrag file. it seems to have been created 7/6/08
not sure what it means it is the WINDOWS\system32\wbem\Logs\wbemess.txt

(Sun Jul 06 11:53:21 2008.242593) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 11:53:21 2008.243359) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 11:53:21 2008.243359) : Failed to log an event: 6B5
(Sun Jul 06 11:53:21 2008.243359) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 11:53:21 2008.243359) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:34 2008.4910484) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:35 2008.4911250) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:38 2008.4914031) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:46 2008.4921640) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:46 2008.4922531) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:58 2008.4934312) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:16:00 2008.4935562) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:16:07 2008.4943406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:12 2008.5127687) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:18 2008.5134015) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:53 2008.5168843) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:59 2008.5174906) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:20:03 2008.5179406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:20:37 2008.5212593) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:20 2008.12456062) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462375) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462390) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462390) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462390) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462390) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462406) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462406) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462406) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:26 2008.12462468) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462468) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462468) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462484) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462484) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462484) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462500) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462500) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462500) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462500) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462515) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462515) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462515) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462515) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462531) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462531) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462531) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462531) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462546) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462546) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462546) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462546) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462546) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462562) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462562) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462562) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462562) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462609) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:27 2008.12462609) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462609) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462625) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462625) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462640) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462640) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:27 2008.12463046) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12463531) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463609) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:28 2008.12463609) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463609) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:28 2008.12463625) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463640) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:28 2008.12463640) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:28 2008.12463687) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463687) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463687) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:30 2008.12465781) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465828) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465828) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465828) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:30 2008.12465828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465843) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465843) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465843) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465843) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465859) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465859) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:30 2008.12465921) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465921) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465921) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465921) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465937) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465937) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465937) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:31 2008.12467031) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:31 2008.12467031) : Failed to log an event: 6B5
(Sun Jul 06 15:21:31 2008.12467031) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:31 2008.12467031) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Tue Jul 08 12:19:46 2008.35687) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:19:46 2008.35765) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:19:46 2008.35765) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:19:48 2008.38390) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:23 2008.73359) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:28 2008.77968) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:32 2008.82406) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:42 2008.91625) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:45 2008.94703) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:46 2008.95562) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:21:05 2008.115015) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:09 2008.119125) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:13 2008.123390) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:38 2008.148296) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:47 2008.157406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:24:14 2008.303890) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:24:16 2008.306312) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:24:44 2008.333796) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:25:28 2008.378359) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:33:13 2008.843375) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:33:24 2008.853625) : NT Event Log Consumer: could not
retrieve sid, 0x80041002