New
#1
Event 5, Kernel General
Hi, I wasn't sure where to put this thread, I hope it's fine in this section :)
I have an error in my Event Viewer, it only shows up when I'm not using my PC, about 20-30 mins after leaving it alone :
{Hive del Registro di sistema ripristinato} L'hive del Registro di sistema (file) '\??\Volume{c6b52101-eab0-11de-b7f3-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{3A8B94DA-12F2-4A87-B75E-9DC9846487F5}' era danneggiato ed è stato ripristinato. È possibile che parte dei dati sia andata perduta.
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>5</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-12-21T04:51:00.084708900Z" />
<EventRecordID>6681</EventRecordID>
<Correlation />
<Execution ProcessID="3232" ThreadID="836" />
<Channel>System</Channel>
<Computer>MdM-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="FinalStatus">0x8000002a</Data>
<Data Name="ExtraStringLength">171</Data>
<Data Name="ExtraString">\??\Volume{c6b52101-eab0-11de-b7f3-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{3A8B94DA-12F2-4A87-B75E-9DC9846487F5}</Data>
</EventData>
</Event>
The first part translates into : Hive of the system registry recovered. Hive of the system registry (bla bla bla) was damaged and it's been recovered. A portion of data might have been lost.
I ran scandisk in the last 2 days and my disks are fine, in addition I had an error Event 55, NTFS - Filesystem structure is damaged and unusable. Please run chkdsk. The weird part is that this last error occured 1000, yes 1000 times in less than 1 minute. Still, running chkdsk finds no errors. I tried updating my ATA Controller driver yesterday and the ntfs error is not yet showing up, only the kernel general one.
I have hibernation off, suspension off and whatever puts my pc to sleep is off. The only active one I have is a screensaver after 10 minutes and then display turning off after 30 minutes.
Any ideas? Thanks
Edit : It looks like VSS has a role in this, in fact those errors happen right after this service is shut down by Windows. This makes me think that the Volume Shadow Service isn't working properly. I have Paragon Hard Disk Manager installed and it uses Windows Shadow Volume Service for its things (whatever they are). I will also try uninstalling it and use something else for backups and let you know if the errors persist.
Last edited by MdM; 21 Dec 2009 at 08:17. Reason: Added info