I was looking in the event log at some issues and noticed a source "bowser"? Well, that sounded like Browser. Here's what shows up below - clearly somebody fat fingered the "r" in the provider name missing it altogether. Some QA on that spelling...
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
+ <System>
<Provider Name="bowser" />
<EventID Qualifiers="49152">8003</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-05-22T16:00:43.804Z" />
<EventRecordID>38516</EventRecordID>
<Channel>System</Channel>
<Computer>cicorias-M5A</Computer>
<Security />
</System>
- <EventData>
<Data>\Device\LanmanDatagramReceiver</Data>
<Data>XP-SHAWNCI2</Data>
<Data>NetBT_Tcpip_{9884CCB2-7676-4CF5-B58C-7B77BE</Data>
<Binary>000000000300280000000000431F00C0000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>