I did that and this is what i got. i got these different errors for different BSOD's
source-DistributedCOM Event id-10005
source-wmi event id-10
source-Application Error event id-1000
few examples of what some of them say are
Log Name: Application
Source: Application Error
Date: 1/16/2013 12:26:56 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: David-PC
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c5
Faulting module name: MSHTML.dll, version: 9.0.8112.16457, time stamp: 0x50a30507
Exception code: 0xc0000005
Fault offset: 0x004346c9
Faulting process id: 0x7a0
Faulting application start time: 0x01cdf3bc4fa6228b
Faulting application path: \\.\globalroot\systemroot\svchost.exe
Faulting module path: C:\Windows\system32\MSHTML.dll
Report Id: 7ce5c389-5fb6-11e2-abf3-c86000a0f6a0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-16T08:26:56.000000000Z" />
<EventRecordID>5206</EventRecordID>
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security />
</System>
<EventData>
<Data>svchost.exe</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bc3c5</Data>
<Data>MSHTML.dll</Data>
<Data>9.0.8112.16457</Data>
<Data>50a30507</Data>
<Data>c0000005</Data>
<Data>004346c9</Data>
<Data>7a0</Data>
<Data>01cdf3bc4fa6228b</Data>
<Data>\\.\globalroot\systemroot\svchost.exe</Data>
<Data>C:\Windows\system32\MSHTML.dll</Data>
<Data>7ce5c389-5fb6-11e2-abf3-c86000a0f6a0</Data>
</EventData>
</Event>
And
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 1/27/2013 7:38:23 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: David-PC
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-27T15:38:23.000000000Z" />
<EventRecordID>5550</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>David-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>