Event 5, Kernel General

Hi, I wasn't sure where to put this thread, I hope it's fine in this section :)

I have an error in my Event Viewer, it only shows up when I'm not using my PC, about 20-30 mins after leaving it alone :

{Hive del Registro di sistema ripristinato} L'hive del Registro di sistema (file) '\??\Volume{c6b52101-eab0-11de-b7f3-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{3A8B94DA-12F2-4A87-B75E-9DC9846487F5}' era danneggiato ed è stato ripristinato. È possibile che parte dei dati sia andata perduta.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />

<EventID>5</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2009-12-21T04:51:00.084708900Z" />

<EventRecordID>6681</EventRecordID>

<Correlation />

<Execution ProcessID="3232" ThreadID="836" />

<Channel>System</Channel>

<Computer>MdM-PC</Computer>

<Security UserID="S-1-5-18" />

</System>


- <EventData>
<Data Name="FinalStatus">0x8000002a</Data>

<Data Name="ExtraStringLength">171</Data>

<Data Name="ExtraString">\??\Volume{c6b52101-eab0-11de-b7f3-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{3A8B94DA-12F2-4A87-B75E-9DC9846487F5}</Data>

</EventData>


</Event>


The first part translates into : Hive of the system registry recovered. Hive of the system registry (bla bla bla) was damaged and it's been recovered. A portion of data might have been lost.

I ran scandisk in the last 2 days and my disks are fine, in addition I had an error Event 55, NTFS - Filesystem structure is damaged and unusable. Please run chkdsk. The weird part is that this last error occured 1000, yes 1000 times in less than 1 minute. Still, running chkdsk finds no errors. I tried updating my ATA Controller driver yesterday and the ntfs error is not yet showing up, only the kernel general one.

I have hibernation off, suspension off and whatever puts my pc to sleep is off. The only active one I have is a screensaver after 10 minutes and then display turning off after 30 minutes.

Any ideas? Thanks

Edit : It looks like VSS has a role in this, in fact those errors happen right after this service is shut down by Windows. This makes me think that the Volume Shadow Service isn't working properly. I have Paragon Hard Disk Manager installed and it uses Windows Shadow Volume Service for its things (whatever they are). I will also try uninstalling it and use something else for backups and let you know if the errors persist.

NTFS error is not showing up anymore, although the Kernel General one still appears. Anyone?

Hard drive diagnostics: HD Diagnostic

Nope, my drives are good, tests were all successful, it looks like this kernel is a bad boy with my current hardware. I even get that circular context error when I logoff and logon.
What bothers me is that Windows 7 x64 runs great on my laptop, making the laptop better than my desktop and it's an Acer Aspire5920G (I love it, the best spent 800€ of my life and it was 3 years ago, it doesn't even know what a BSOD is).
There is probably something wrong with my chipset drivers, I guess I'll have to wait for better drivers released or rebuild my pc with new hardware next year.

Thanks anyway for the help, much appreciated :) (+1)

I can't remember how I solved it, actually it suddenly stopped showing up by itself. There are a lot of things I did since those days, like disabling the system restore and its shadow service then turning it back on after uninstalling and reinstalling my sata drivers. I also disabled all power saving features and left only my screensaver. I didn't check when it stopped occuring though, so I'm not sure which one was the solution. Maybe none of those was the solution and something else occured.
Anyway, we could try figure it out for your case.
First of all you can try uninstalling the antivirus and see if the error still occurs. This problem seems to be caused by an application that somehow bothers the VSS and since this error shows up for System Volume Information, it is most likely caused by the antivirus.
Let me know how it goes, if not we can try something else, I'll be here

I too had days where there were few events (i.e. 5-10 errors) and days where there were a lot of events, in my case it was 1000+.... Surely uninstalling Paragon helped since I started getting less errors but that didn't solve it. Now, that's how I track down my problems : uninstalling Paragon helped a little so what does Paragon do? It installs some legacy drivers to use for its backup and monitoring purposes, so since Windows Backup also monitors for making shadow volume copies, there could have been a conflict between the two. After this, what else could interfere with the VSS? I thought maybe when my PC is idle the VSS starts and makes its backup, but due to power settings one of the devices turns off and the VSS stops before it can finish its job?
Actually, who knows, maybe if I set my monitor to shut off after 30 mins like before, this error could reappear again? But it wouldn't be the cause in that case, or there would be millions of users reporting the same problem.
I'm pretty sure this is a driver-related problem. You say we have different hardware but we didn't check it all. What about your drive/s? Mine are in the system specs (bottom-left corner of the post, above the Post Reply button), do you have one of them too? Remember I also updated my Storage Controller drivers, this could be the one that fixed it?

P.S. I'm picky about these things, I know I solved it but it still bothers me that I have no idea what fixed it, therefore I'm glad I'm trying to help you, hopefully together we can solve the mistery

There is another thing I did... I didn't like Windows telling me my monitor was a Generic PnP so I downloaded the monitor driver from Samsung's support. You might try it, sounds stupid but maybe it was this one?