---

PS C:\WINDOWS\system32> Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon' |
>> Select-Object Shell,Userinit

Shell        USERINIT
-----        --------
explorer.exe C:\Windows\system32\userinit.exe,


PS C:\WINDOWS\system32> Get-ItemProperty 'HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon' -ErrorAction SilentlyContinue |
>> Select-Object Shell,Userinit

Shell Userinit
----- --------



PS C:\WINDOWS\system32> $boot = (Get-CimInstance Win32_OperatingSystem).LastBootUpTime
PS C:\WINDOWS\system32>
PS C:\WINDOWS\system32> Get-WinEvent -FilterHashtable @{
>>     LogName='Application'
>>     StartTime=$boot
>> } -ErrorAction SilentlyContinue |
>> Select-Object TimeCreated,Id,ProviderName,
>>     @{N='Data';E={$_.Properties.Value -join ' | '}} |
>> Where-Object {
>>     $_.Data -match 'explorer\.exe|userinit\.exe|sihost\.exe|ShellExperienceHost|StartMenuExperienceHost|Iplir|ViPNet|Crypto'
>> } |
>> Format-List


TimeCreated  : 29.08.2026 21:20:02
Id           : 15
ProviderName : SecurityCenter
Data         : ViPNet Firewall | SECURITY_PRODUCT_STATE_OFF

TimeCreated  : 29.08.2026 21:20:01
Id           : 15
ProviderName : SecurityCenter
Data         : ViPNet Firewall | SECURITY_PRODUCT_STATE_ON



PS C:\WINDOWS\system32>
PS C:\WINDOWS\system32> $boot = (Get-CimInstance Win32_OperatingSystem).LastBootUpTime
PS C:\WINDOWS\system32>
PS C:\WINDOWS\system32> Get-WinEvent -FilterHashtable @{
>>     LogName='System'
>>     StartTime=$boot
>> } -ErrorAction SilentlyContinue |
>> Where-Object {
>>     $_.Id -in 7000,7009,7031,7034
>> } |
>> Select-Object TimeCreated,Id,ProviderName,Message |
>> Format-List


TimeCreated  : 29.08.2026 21:19:57
Id           : 7000
ProviderName : Service Control Manager
Message      : Сбой при запуске службы "Служба Google Update (gupdate)" из-за ошибки
               Служба не ответила на запрос своевременно.

TimeCreated  : 29.08.2026 21:19:57
Id           : 7009
ProviderName : Service Control Manager
Message      : Превышение времени ожидания (30000 мс) при ожидании подключения службы "Служба Google Update (gupdate)".