Okay, i went to event viewer. I always have stuff in there.
I see a lot of "information" files and there is always lots in there, dating back to feb 28 05. It must overwrite the previous month?
There is 2 "warnings" but they are only related to getting an IP address (DHCP).
Maybe i should run SFC again and make not of the date, but i can see from my posts, above, that it was between 11:39 and 12:33. In that time frame there are only a few information files, event 7036. This is in manage\event viewer\system, figured that was where i should look?
Good advice + great people = tek-tips