Can't install Win7 SP1 for x64 (KB976932)

[niemiro]

Hello again!

Log: 'System' Date/Time: 26/03/2011 3:11:53 AM
Type: Error Category: 0
Event: 7 Source: Disk
The device, \Device\Harddisk0\DR0, has a bad block.

Log: 'System' Date/Time: 22/03/2011 4:01:06 PM
Type: Warning Category: 0
Event: 130 Source: Ntfs
The file system structure on volume C: has now been repaired.

Log: 'System' Date/Time: 26/03/2011 12:14:05 AM
Type: Error Category: 2
Event: 55 Source: Ntfs
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume Mid Birtha.

Those are are telling you that the hard disk is dying, and not just a sign of a corrupt hard disk through a corrupt file.

3/27/2011 12:16:40 AM
Model: ST3750528AS
Serial Number: 5VP355Z5
Firmware Revision: CC38
SMART - Pass 3/27/2011 12:16:40 AM
SMART - Pass 3/27/2011 12:16:40 AM
Short DST - Started 3/27/2011 12:17:30 AM
Short DST - Started 3/27/2011 12:17:43 AM
Short DST - FAIL 3/27/2011 12:17:47 AM
SeaTools Test Code: 6AF0A5E4
Short DST - FAIL 3/27/2011 12:17:59 AM
SeaTools Test Code: 6AF0A5E4
Long Generic - Started 3/27/2011 12:24:01 AM
Long Generic - Started 3/27/2011 12:24:15 AM
Long Generic - FAIL 3/27/2011 12:24:41 AM
SeaTools Test Code: 6AF0A5D4
Long Generic - FAIL 3/27/2011 12:24:58 AM
SeaTools Test Code: 6AF0A5D4

That is a dead hard disk. No getting around it.

Do see if you can get the drive replaced under warranty. It sounds as though you built the system yourself. The warranty on drives bought yourself can be very good, although I too have had better experience from Western Digital, rather than Sea Gate, although that means very little.

I'm still suspicious that the SP1 update somehow damaged the drive.

No. SP1 is a massive update. The hard disk was already very dead. However, doing all of those intermediary file moves across a great many bad blocks corrupted many files not previously corrupted. This is unfortunate, but certainly not the fault of Microsoft or SP1.

You now have a great deal of corruption, in the registry also. You need to re-install Windows when you get a new hard disk (or already have one lying around) and then re-install all of your programs, because they will also be corrupt now. Then try to salvage what documents you can.

EDIT:

but it resets the activation so you have to go through that rigmarole all over again

It is likely that your activation files were corrupted by your failing hard disk drive.

Thanks, and the very best of luck,

Richard

P.S. My Windows computer once had a Sea Gate hard disk which failed. It was part of that bunch with that magnetic coating stuff. Let me find an article for you: Apple acknowledges some MacBook hard-drive problems | Apple - CNET News

Please now remember (Sea Gate) that this is not a valid grievance, and everyone should still buy Sea Gate, as I am sure that they are wonderful now, and not sue me.

 

[freewheeling]

Hello again!

Log: 'System' Date/Time: 26/03/2011 3:11:53 AM
Type: Error Category: 0
Event: 7 Source: Disk
The device, \Device\Harddisk0\DR0, has a bad block.

Log: 'System' Date/Time: 22/03/2011 4:01:06 PM
Type: Warning Category: 0
Event: 130 Source: Ntfs
The file system structure on volume C: has now been repaired.

Log: 'System' Date/Time: 26/03/2011 12:14:05 AM
Type: Error Category: 2
Event: 55 Source: Ntfs
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume Mid Birtha.

Those are are telling you that the hard disk is dying, and not just a sign of a corrupt hard disk through a corrupt file.

3/27/2011 12:16:40 AM
Model: ST3750528AS
Serial Number: 5VP355Z5
Firmware Revision: CC38
SMART - Pass 3/27/2011 12:16:40 AM
SMART - Pass 3/27/2011 12:16:40 AM
Short DST - Started 3/27/2011 12:17:30 AM
Short DST - Started 3/27/2011 12:17:43 AM
Short DST - FAIL 3/27/2011 12:17:47 AM
SeaTools Test Code: 6AF0A5E4
Short DST - FAIL 3/27/2011 12:17:59 AM
SeaTools Test Code: 6AF0A5E4
Long Generic - Started 3/27/2011 12:24:01 AM
Long Generic - Started 3/27/2011 12:24:15 AM
Long Generic - FAIL 3/27/2011 12:24:41 AM
SeaTools Test Code: 6AF0A5D4
Long Generic - FAIL 3/27/2011 12:24:58 AM
SeaTools Test Code: 6AF0A5D4

That is a dead hard disk. No getting around it.

Do see if you can get the drive replaced under warranty. It sounds as though you built the system yourself. The warranty on drives bought yourself can be very good, although I too have had better experience from Western Digital, rather than Sea Gate, although that means very little.

I'm still suspicious that the SP1 update somehow damaged the drive.

No. SP1 is a massive update. The hard disk was already very dead. However, doing all of those intermediary file moves across a great many bad blocks corrupted many files not previously corrupted. This is unfortunate, but certainly not the fault of Microsoft or SP1.

You now have a great deal of corruption, in the registry also. You need to re-install Windows when you get a new hard disk (or already have one lying around) and then re-install all of your programs, because they will also be corrupt now. Then try to salvage what documents you can.

EDIT:

but it resets the activation so you have to go through that rigmarole all over again

It is likely that your activation files were corrupted by your failing hard disk drive.

Thanks, and the very best of luck,

Richard

P.S. My Windows computer once had a Sea Gate hard disk which failed. It was part of that bunch with that magnetic coating stuff. Let me find an article for you: Apple acknowledges some MacBook hard-drive problems | Apple - CNET News

Please now remember (Sea Gate) that this is not a valid grievance, and everyone should still buy Sea Gate, as I am sure that they are wonderful now, and not sue me.

I don't understand why I can't restore from an earlier Acronis backup? I have one from November, 2010 and I'm pretty sure that this was long before there was any file corruption. I can restore my data from a later backup since that doesn't have any executables, and then just update all the software to the latest versions. I don't think I've added any software in the mean time, but if I have it'll show up in the Belarc report, and I have all of my installation programs in a special "Updata" directory. It's unlikely those are corrupted, but if they are it will surely show up during the update process.

I bought the Seagate back in July of 2010, and also have a backup from shortly after the installation, but after I'd installed most of my software. I could even restore that. The safest thing would be to use Windows Easy Transfer which saves all of the data files and preferences, as well as installation keys. It doesn't transfer the programs themselves though, which have to be re-installed.

Update: I get what you're saying about the activation files, but it wouldn't hurt anything to transfer those using Easy Transfer would it? Because if one or two are corrupted the worst case would be that I'd have to re-activate. Anyway, Belarc didn't notice any activation problems and I printed out all of the information in this installation, including all of the windows updates and activation keys for everything. The problem isn't so much with the keys, but with the fact that some of the software has limitations on the number of activations that I can perform without getting on the phone or going through a big rigmarole. For instance Rosetta Stone is pretty restricted and if at all possible the software should be deactivated before wiping the drive so that it can be reactivated when it's later installed. If you don't do that you have to jump through a lot of hoops and get all new activation keys. Big hassle.

 

[niemiro]

Hello again!

Log: 'System' Date/Time: 26/03/2011 3:11:53 AM
Type: Error Category: 0
Event: 7 Source: Disk
The device, \Device\Harddisk0\DR0, has a bad block.

Log: 'System' Date/Time: 22/03/2011 4:01:06 PM
Type: Warning Category: 0
Event: 130 Source: Ntfs
The file system structure on volume C: has now been repaired.

Log: 'System' Date/Time: 26/03/2011 12:14:05 AM
Type: Error Category: 2
Event: 55 Source: Ntfs
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume Mid Birtha.

Those are are telling you that the hard disk is dying, and not just a sign of a corrupt hard disk through a corrupt file.

3/27/2011 12:16:40 AM
Model: ST3750528AS
Serial Number: 5VP355Z5
Firmware Revision: CC38
SMART - Pass 3/27/2011 12:16:40 AM
SMART - Pass 3/27/2011 12:16:40 AM
Short DST - Started 3/27/2011 12:17:30 AM
Short DST - Started 3/27/2011 12:17:43 AM
Short DST - FAIL 3/27/2011 12:17:47 AM
SeaTools Test Code: 6AF0A5E4
Short DST - FAIL 3/27/2011 12:17:59 AM
SeaTools Test Code: 6AF0A5E4
Long Generic - Started 3/27/2011 12:24:01 AM
Long Generic - Started 3/27/2011 12:24:15 AM
Long Generic - FAIL 3/27/2011 12:24:41 AM
SeaTools Test Code: 6AF0A5D4
Long Generic - FAIL 3/27/2011 12:24:58 AM
SeaTools Test Code: 6AF0A5D4

That is a dead hard disk. No getting around it.

Do see if you can get the drive replaced under warranty. It sounds as though you built the system yourself. The warranty on drives bought yourself can be very good, although I too have had better experience from Western Digital, rather than Sea Gate, although that means very little.

I'm still suspicious that the SP1 update somehow damaged the drive.

No. SP1 is a massive update. The hard disk was already very dead. However, doing all of those intermediary file moves across a great many bad blocks corrupted many files not previously corrupted. This is unfortunate, but certainly not the fault of Microsoft or SP1.

You now have a great deal of corruption, in the registry also. You need to re-install Windows when you get a new hard disk (or already have one lying around) and then re-install all of your programs, because they will also be corrupt now. Then try to salvage what documents you can.

EDIT:

but it resets the activation so you have to go through that rigmarole all over again

It is likely that your activation files were corrupted by your failing hard disk drive.

Thanks, and the very best of luck,

Richard

P.S. My Windows computer once had a Sea Gate hard disk which failed. It was part of that bunch with that magnetic coating stuff. Let me find an article for you: Apple acknowledges some MacBook hard-drive problems | Apple - CNET News

Please now remember (Sea Gate) that this is not a valid grievance, and everyone should still buy Sea Gate, as I am sure that they are wonderful now, and not sue me.

I don't understand why I can't restore from an earlier Acronis backup? I have one from November, 2010 and I'm pretty sure that this was long before there was any file corruption. I can restore my data from a later backup since that doesn't have any executables, and then just update all the software to the latest versions. I don't think I've added any software in the mean time, but if I have it'll show up in the Belarc report, and I have all of my installation programs in a special "Updata" directory. It's unlikely those are corrupted, but if they are it will surely show up during the update process.

I bought the Seagate back in July of 2010, and also have a backup from shortly after the installation, but after I'd installed most of my software. I could even restore that. The safest thing would be to use Windows Easy Transfer which saves all of the data files and preferences, as well as installation keys. It doesn't transfer the programs themselves though, which have to be re-installed.

Update: I get what you're saying about the activation files, but it wouldn't hurt anything to transfer those using Easy Transfer would it? Because if one or two are corrupted the worst case would be that I'd have to re-activate. Anyway, Belarc didn't notice any activation problems and I printed out all of the information in this installation, including all of the windows updates and activation keys for everything. The problem isn't so much with the keys, but with the fact that some of the software has limitations on the number of activations that I can perform without getting on the phone or going through a big rigmarole. For instance Rosetta Stone is pretty restricted and if at all possible the software should be deactivated before wiping the drive so that it can be reactivated when it's later installed. If you don't do that you have to jump through a lot of hoops and get all new activation keys. Big hassle.

Hello again!

I didn't realise that you had images. Yes, they should be absolutely fine to restore. I cannot guess at how long the hard disk has been dead for, it depends on luck and usage. A long time probably, although data corruption usually only occurs towards the very end, so I think that your image would only have to go back about or month or so (taken off the top of my head)

I would hazard a guess at a successful install of SP1 = a goodish image.

With all of those services not working, I don't think that Easy Transfer will actually complete without error, although you could try. I think that your images are your best bet.

Your activation files were fixed when you re-activated, so actually at the moment they are in good shape.

Please do feel free to ask any more questions you may have,

Richard

 

[freewheeling]

Hello again!

I didn't realise that you had images. Yes, they should be absolutely fine to restore. I cannot guess at how long the hard disk has been dead for, it depends on luck and usage. A long time probably, although data corruption usually only occurs towards the very end, so I think that your image would only have to go back about or month or so (taken off the top of my head)

I would hazard a guess at a successful install of SP1 = a goodish image.

With all of those services not working, I don't think that Easy Transfer will actually complete without error, although you could try. I think that your images are your best bet.

Your activation files were fixed when you re-activated, so actually at the moment they are in good shape.

Please do feel free to ask any more questions you may have,

Richard

Actually, I went a long time without creating a backup image and only started doing it again when I started having problems with the SP1 installation. Prior to that it goes back to November of 2010, and before that to July of that year. I currently have the easy restore running, but it's not clear that it's successful yet. Saving the mig file to one of my networked drives. It says it'll take about 2 1/2 hours but it isn't hanging... yet.

So, do you think that the restoring from the image after the successful SP1 install would be OK? Or should I restore from the November image and then use the easy transfer to update my critical data files only? Is there a diagnostic I can run to determine the precise "health" of the restored system, so I'll know whether it's OK?

BTW, I ran that Uniblue package to repair the registry so that might be why it seems pretty stable now.

 

[niemiro]

Hello again!

Ah, yes, I forgot that SP1 went through eventually. No, I think that restoring the post SP1 image will be a bad idea, and cause you problems down the road. The November one will probably be fine. Good luck on that Easy Transfer...

There is no specific way. I shall run an SFC, and take another Event Log after a couple of days, and we can go from there.

Thanks!

Richard

 

[freewheeling]

Hello again!

Ah, yes, I forgot that SP1 went through eventually. No, I think that restoring the post SP1 image will be a bad idea, and cause you problems down the road. The November one will probably be fine. Good luck on that Easy Transfer...

There is no specific way. I shall run an SFC, and take another Event Log after a couple of days, and we can go from there.

Thanks!

Richard

I called Seagate, and they're going to replace the drive... but not until I send in the old one. It was on warranty until 2013 so I'm well within that. I transferred the Acronis backup to a firewire Maxtor drive, so that I can free up the drive I was using as backup to run my OS. I assume it doesn't matter where the *.tib files are located since it's just an image. I'll also have to read up on Acronis to see if I can transfer the image from a smaller to a larger drive. BTW, I'm using my 6 year old MacBook to communicate on this forum. That's ironic, huh?

Update: At the suggestion of the Seagate tech I downloaded the DOS version of Sea Tools with includes the long DST test, and ran that. It failed the test, but only found one bad sector and after "repairing" it the drive passed the short DST test. I'm now re-running the long test. I'm sure this doesn't really "fix" the drive, but it might keep it stable enough that I can keep the data intact on it until I can get it all transferred.

Incidentally, I noticed that you can't repair a Win 7 SP1 installation with a regular Win 7 install disk. Are they going to provide a Win 7 SP1 ISO for those of us who might want to be able to use this "repair install" procedure?

 

[Jacee]

You can make a system rescue CD SystemRescueCd
that will work on a Windows machine.

 

[freewheeling]

You can make a system rescue CD SystemRescueCd
that will work on a Windows machine.

It's my understanding that a rescue cd won't repair a windows installation. The slipstreamed SP1 Windows installation won't do it either, according to this tutorial. Right now the only place you can get an installation ISO that allows system repair is if you're a member of Technet or MSDN. They should probably let people *know this* before they do the SP1 update.

I think you can uninstall SP1, run system repair from the installation disk, and then re-install SP1. But it sounds kind of tedious, and assumes that you can still uninstall SP1 from a buggered-up system (sort of an iffy proposition to say the least).

 

[niemiro]

Hello again!

Ah, yes, I forgot that SP1 went through eventually. No, I think that restoring the post SP1 image will be a bad idea, and cause you problems down the road. The November one will probably be fine. Good luck on that Easy Transfer...

There is no specific way. I shall run an SFC, and take another Event Log after a couple of days, and we can go from there.

Thanks!

Richard

I called Seagate, and they're going to replace the drive... but not until I send in the old one. It was on warranty until 2013 so I'm well within that. I transferred the Acronis backup to a firewire Maxtor drive, so that I can free up the drive I was using as backup to run my OS. I assume it doesn't matter where the *.tib files are located since it's just an image. I'll also have to read up on Acronis to see if I can transfer the image from a smaller to a larger drive. BTW, I'm using my 6 year old MacBook to communicate on this forum. That's ironic, huh?

Update: At the suggestion of the Seagate tech I downloaded the DOS version of Sea Tools with includes the long DST test, and ran that. It failed the test, but only found one bad sector and after "repairing" it the drive passed the short DST test. I'm now re-running the long test. I'm sure this doesn't really "fix" the drive, but it might keep it stable enough that I can keep the data intact on it until I can get it all transferred.

Incidentally, I noticed that you can't repair a Win 7 SP1 installation with a regular Win 7 install disk. Are they going to provide a Win 7 SP1 ISO for those of us who might want to be able to use this "repair install" procedure?

Hello!

Yeah, they always want the dead hard disks back in, to stop people cheating the system. I don't really know about 7 SP1 images. Maybe Jacee does?

That DOS run has actually done the same thing which chkdsk dones - marked dead sectors as dead. A chkdsk followed immediately by a Short also may be able to sneak the "deadness" through. Doesn't fix it though!

Richard

 

[freewheeling]

Hello again!

Ah, yes, I forgot that SP1 went through eventually. No, I think that restoring the post SP1 image will be a bad idea, and cause you problems down the road. The November one will probably be fine. Good luck on that Easy Transfer...

There is no specific way. I shall run an SFC, and take another Event Log after a couple of days, and we can go from there.

Thanks!

Richard

I called Seagate, and they're going to replace the drive... but not until I send in the old one. It was on warranty until 2013 so I'm well within that. I transferred the Acronis backup to a firewire Maxtor drive, so that I can free up the drive I was using as backup to run my OS. I assume it doesn't matter where the *.tib files are located since it's just an image. I'll also have to read up on Acronis to see if I can transfer the image from a smaller to a larger drive. BTW, I'm using my 6 year old MacBook to communicate on this forum. That's ironic, huh?

Update: At the suggestion of the Seagate tech I downloaded the DOS version of Sea Tools with includes the long DST test, and ran that. It failed the test, but only found one bad sector and after "repairing" it the drive passed the short DST test. I'm now re-running the long test. I'm sure this doesn't really "fix" the drive, but it might keep it stable enough that I can keep the data intact on it until I can get it all transferred.

Incidentally, I noticed that you can't repair a Win 7 SP1 installation with a regular Win 7 install disk. Are they going to provide a Win 7 SP1 ISO for those of us who might want to be able to use this "repair install" procedure?

Hello!

Yeah, they always want the dead hard disks back in, to stop people cheating the system. I don't really know about 7 SP1 images. Maybe Jacee does?

That DOS run has actually done the same thing which chkdsk dones - marked dead sectors as dead. A chkdsk followed immediately by a Short also may be able to sneak the "deadness" through. Doesn't fix it though!

Richard

I've been able to transfer the Acronis backups from a WD 1TB Caviar Green to a Maxtor external drive and do an Easy Transfer to a different network drive. I have about 300GB of video on the WD drive that I intend to back up to the Seagate since it's "fixed" sorta, and it wouldn't be the end of the world if that was lost anyway. That frees up the WD Green to use as my system disk, so am debating whether to do a clean install or use the Acronis backup from November, use the Easy Transfer to put back all my data and settings, and then just update all the software. I guess the problem with using the Acronis backup is that this installation was always a clone of another installation that I had (but given a different activation key) so I was never certain it was OK. For instance I was never able to update the USB3 drivers, which were stuck at first generation. Starting over with a clean install also allows me to get rid of a lot of accumulated bloatware, although I could just uninstall it if I weren't so lazy. Can't make up my mind.

BTW, the Seagate continues to pass the short and long dst so perhaps the Sea Tools for DOS fix did more than chkdsk. Anyway, I'm mulling it over. Thanks to that Belarc printout I have all the software activation keys in one place, as well as a read on which software I was using and which was just taking up space. That's a very useful program.

 

[freewheeling]

Just out of curiosity, if I run "sfc /verifyonly" from the dos prompt as administrator does that check all of all system files for corruption, part of all, or part of some system files? It seems like it's aimed at checking system integrity, but is it reliable?

Update: I ran it on my original Win 7 installation (without SP1) and it completed with no errors. But when I ran it on the one that's the topic of this thread it only got 30% of the way through and then gave the message: "Windows Resource Protection could not perform the requested operation." I suppose this could be the same issue that prevents a system repair from the original installation disk after SP1 has been installed.

 

[niemiro]

Just out of curiosity, if I run "sfc /verifyonly" from the dos prompt as administrator does that check all of all system files for corruption, part of all, or part of some system files? It seems like it's aimed at checking system integrity, but is it reliable?

Update: I ran it on my original Win 7 installation (without SP1) and it completed with no errors. But when I ran it on the one that's the topic of this thread it only got 30% of the way through and then gave the message: "Windows Resource Protection could not perform the requested operation." I suppose this could be the same issue that prevents a system repair from the original installation disk after SP1 has been installed.

Hello!

sfc /verifyonly checks all System files which it is designed to check = basically all, however, I do recommend sfc /scannow.

It is reliable, unless it completes in half a second, which it will do on a few rare sorts of corruption. If it ran for about 10minutes, then it is reliable.

That ...could not complete... message means that it failed to complete due to a large corruption of the store, maybe a badly corrupted whole directory from which it cannot recover. Only a CBS.log can tell (and we have already agreed that that image is completely ruined, and the hard disk is dead)

Richard

 

[freewheeling]

Just out of curiosity, if I run "sfc /verifyonly" from the dos prompt as administrator does that check all of all system files for corruption, part of all, or part of some system files? It seems like it's aimed at checking system integrity, but is it reliable?

Update: I ran it on my original Win 7 installation (without SP1) and it completed with no errors. But when I ran it on the one that's the topic of this thread it only got 30% of the way through and then gave the message: "Windows Resource Protection could not perform the requested operation." I suppose this could be the same issue that prevents a system repair from the original installation disk after SP1 has been installed.

Hello!

sfc /verifyonly checks all System files which it is designed to check = basically all, however, I do recommend sfc /scannow.

It is reliable, unless it completes in half a second, which it will do on a few rare sorts of corruption. If it ran for about 10minutes, then it is reliable.

That ...could not complete... message means that it failed to complete due to a large corruption of the store, maybe a badly corrupted whole directory from which it cannot recover. Only a CBS.log can tell (and we have already agreed that that image is completely ruined, and the hard disk is dead)

Richard

Thanks. It appears that my Acronis backups are corrupted, even the early ones. Acronis won't even restore them, so that backup system was a total waste of money. I'm trying to do a clean install but got an error from my first install disk. I figure that was possibly because I hadn't established the drive type and it was just unallocated space, so I set it up and Primary/Active, used a different install disk (after disconnecting the old OS drive) and it hasn't failed yet. I wonder if the first thing I should do is install all of the updates, thru SP1 and then try to access the Easy Transfer File I created after that?

Update: Drat! I get an error during the Windows 7 installation. I get the message:

Windows cannot install required files. The file may be corrupt or missing. Make sure all files required for installation are available and restart the installation. Error Code: 0x80070570

So do I need a driver for the WD 1TB Caviar Green? I thought the installation disk would have that already? I've used this disk to do an installation so I don't think it's corrupt, and surely *both* install disks couldn't be corrupted?? What's going on?

I may install Acronis Disc Director, but True Image is going in the junk pile.

 

[freewheeling]

Hmm... I ran Memtest 4.1 and had a ton of memory errors. Traced it to a bad 4GB memory stick, which I've removed and am trying to do the clean install again. I wonder if this could have had anything to do with the other problems, corrupted files, etc.? I mean, I know the Seagate disk is bad because it initially failed the dst tests, but perhaps that wasn't the whole problem?

Yep, the clean install is about 2/3rds done so it looks like it's going through. Now, if the easy transfer file wasn't corrupted...

 

[freewheeling]

Errors & Warnings Log

This is the output from VEW after a (mostly) successful clean install of Win7Pro x64 and Easy Transfer session. I've re-installed a few of my original programs, but by no means all. I also ran "sfc /verifyonly" which responded after about 15 minutes that it found no problems. The main problem I had concerns "Protected Content Migration" at the end of Easy Transfer. I've described the details is this thread: What is "protected content migration?", but I don't think it ever worked properly because the Thunderbird profiles aren't on the disk and they should have been. There is some kind of bug in Easy Transfer, I think, if you happen to not do exactly what it expects in sequence. Here's the content of VEW.txt:

Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 31/03/2011 2:26:43 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 31/03/2011 5:46:17 AM
Type: Error Category: 0
Event: 33 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\mmsBundle.dll". Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762" could not be found. Please use sxstrace.exe for detailed diagnosis.

Log: 'Application' Date/Time: 31/03/2011 5:46:16 AM
Type: Error Category: 0
Event: 33 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\ManagementConsole.exe". Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762" could not be found. Please use sxstrace.exe for detailed diagnosis.

Log: 'Application' Date/Time: 31/03/2011 5:46:15 AM
Type: Error Category: 0
Event: 33 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\RecoveryExpert.exe". Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762" could not be found. Please use sxstrace.exe for detailed diagnosis.

Log: 'Application' Date/Time: 31/03/2011 5:46:10 AM
Type: Error Category: 0
Event: 33 Source: SideBySide
Activation context generation failed for "C:\Program Files (x86)\Common Files\Acronis\DiskDirector\WinPE\Files\systeminfo.exe". Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",type="win32",version="8.0.50727.762" could not be found. Please use sxstrace.exe for detailed diagnosis.

Log: 'Application' Date/Time: 31/03/2011 2:26:15 AM
Type: Error Category: 3
Event: 215 Source: ESENT
WinMail (1948) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

Log: 'Application' Date/Time: 31/03/2011 2:26:11 AM
Type: Error Category: 3
Event: 215 Source: ESENT
WinMail (2900) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

Log: 'Application' Date/Time: 31/03/2011 12:04:35 AM
Type: Error Category: 0
Event: 1017 Source: Microsoft-Windows-Security-SPP
Installation of the Proof of Purchase failed. 0xC004F061 Partial Pkey=HWJYR ACID=e838d943-63ed-4a0b-9fb1-47152908acc9 Detailed Error[?]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 31/03/2011 3:45:16 PM
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <file:C:/Users/My Name Here/AppData/Roaming/Thunderbird/Profiles/8fnkkb38.default/News/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
The object was not found. (HRESULT : 0x80041201) (0x80041201)


Log: 'Application' Date/Time: 31/03/2011 3:33:38 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 33 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 800 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 800 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Process 800 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServices
Process 800 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\My
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Run
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 800 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\CA
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunService
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Search Assistant
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Search Assistant
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Internet Explorer
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunService
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Policies
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows
Process 1924 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks


Log: 'Application' Date/Time: 31/03/2011 8:39:46 AM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 33 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 864 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 864 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Process 864 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServices
Process 864 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\My
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Run
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 864 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\CA
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunService
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Search Assistant
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Search Assistant
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Internet Explorer
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunService
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Policies
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows
Process 1852 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks


Log: 'Application' Date/Time: 31/03/2011 7:34:06 AM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 33 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 788 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 788 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Process 788 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServices
Process 788 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\My
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Run
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 788 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\CA
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunService
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServices
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Search Assistant
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Search Assistant
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Internet Explorer
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunService
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunServiceOnce
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Policies
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunServicesOnce
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows
Process 4460 (\Device\HarddiskVolume2\Program Files\Trend Micro\Internet Security\SfCtlCom.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks


Log: 'Application' Date/Time: 31/03/2011 6:39:34 AM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 5 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 840 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 840 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 840 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 840 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\My
Process 840 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\CA


Log: 'Application' Date/Time: 31/03/2011 6:23:00 AM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 5 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 636 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 636 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 636 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 636 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\My
Process 636 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\CA


Log: 'Application' Date/Time: 31/03/2011 5:08:12 AM
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Indexer Settings Migration}.


Log: 'Application' Date/Time: 31/03/2011 2:48:43 AM
Type: Warning Category: 0
Event: 1032 Source: MsiInstaller
An error occured while refreshing environment variables updated during the installation of ''. Some users logged on to the machine may not see these changes until they log off and then log back on.

Log: 'Application' Date/Time: 31/03/2011 2:07:16 AM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 5 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 572 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 572 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 572 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 572 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\My
Process 572 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\SystemCertificates\CA


Log: 'Application' Date/Time: 30/03/2011 10:39:42 PM
Type: Warning Category: 0
Event: 10010 Source: Microsoft-Windows-RestartManager
Application 'C:\Config.Msi\7c577.rbf' (pid 2520) cannot be restarted - Application SID does not match Conductor SID..

Log: 'Application' Date/Time: 30/03/2011 10:39:03 PM
Type: Warning Category: 0
Event: 10010 Source: Microsoft-Windows-RestartManager
Application 'C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe' (pid 2372) cannot be restarted - Application SID does not match Conductor SID..

Log: 'Application' Date/Time: 30/03/2011 10:39:03 PM
Type: Warning Category: 0
Event: 10010 Source: Microsoft-Windows-RestartManager
Application 'C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe' (pid 2520) cannot be restarted - Application SID does not match Conductor SID..

Log: 'Application' Date/Time: 30/03/2011 10:29:31 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 2552 (\Device\HarddiskVolume2\Windows\System32\msiexec.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer


Log: 'Application' Date/Time: 30/03/2011 9:49:48 PM
Type: Warning Category: 0
Event: 10010 Source: Microsoft-Windows-RestartManager
Application 'C:\Config.Msi\918f9.rbf' (pid 2180) cannot be restarted - Application SID does not match Conductor SID..

Log: 'Application' Date/Time: 30/03/2011 9:49:08 PM
Type: Warning Category: 0
Event: 10010 Source: Microsoft-Windows-RestartManager
Application 'C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe' (pid 2096) cannot be restarted - Application SID does not match Conductor SID..

Log: 'Application' Date/Time: 30/03/2011 9:49:08 PM
Type: Warning Category: 0
Event: 10010 Source: Microsoft-Windows-RestartManager
Application 'C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe' (pid 2180) cannot be restarted - Application SID does not match Conductor SID..

Log: 'Application' Date/Time: 30/03/2011 9:38:00 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 724 (\Device\HarddiskVolume2\Windows\System32\msiexec.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Explorer


Log: 'Application' Date/Time: 30/03/2011 8:45:32 PM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 5 user registry handles leaked from \Registry\User\S-1-5-21-3739652884-1527416797-3038172721-1000:
Process 444 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000
Process 892 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Policies
Process 892 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 892 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 892 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3739652884-1527416797-3038172721-1000\Software


Log: 'Application' Date/Time: 30/03/2011 7:36:40 PM
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Full Index Reset}.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 31/03/2011 5:07:11 AM
Type: Error Category: 0
Event: 10010 Source: Microsoft-Windows-DistributedCOM
The server {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} did not register with DCOM within the required timeout.

Log: 'System' Date/Time: 31/03/2011 12:12:26 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The UPnP Device Host service failed to start due to the following error: The service did not start due to a logon failure.

Log: 'System' Date/Time: 31/03/2011 12:12:26 AM
Type: Error Category: 0
Event: 7038 Source: Service Control Manager
The upnphost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Log: 'System' Date/Time: 31/03/2011 12:12:26 AM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "1069" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56}

Log: 'System' Date/Time: 30/03/2011 11:23:50 PM
Type: Error Category: 0
Event: 7023 Source: Service Control Manager
The event description cannot be found.

Log: 'System' Date/Time: 30/03/2011 10:44:28 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The UPnP Device Host service failed to start due to the following error: The service did not start due to a logon failure.

Log: 'System' Date/Time: 30/03/2011 10:44:28 PM
Type: Error Category: 0
Event: 7038 Source: Service Control Manager
The upnphost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Log: 'System' Date/Time: 30/03/2011 10:44:27 PM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The UPnP Device Host service failed to start due to the following error: The service did not start due to a logon failure.

Log: 'System' Date/Time: 30/03/2011 10:44:27 PM
Type: Error Category: 0
Event: 7038 Source: Service Control Manager
The upnphost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Log: 'System' Date/Time: 30/03/2011 10:44:28 PM
Type: Error Category: 0
Event: 10005 Source: Microsoft-Windows-DistributedCOM
DCOM got error "1069" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56}

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 31/03/2011 1:00:47 AM
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name www.edonkey.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:18 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:58:17 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:54:40 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:54:40 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:54:40 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:54:40 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

Log: 'System' Date/Time: 30/03/2011 10:54:40 PM
Type: Warning Category: 0
Event: 51 Source: Disk
An error was detected on device \Device\Harddisk2\DR2 during a paging operation.

 

[A Guy]

Don't mean to jump in here, but regarding the Seagate drive, and Seatools. Seatools can often find and repair errors that chkdsk won't. chkdsk may even come up clean, but Seatools will find, and often correct, simple errors. A Guy

 

[freewheeling]

Don't mean to jump in here, but regarding the Seagate drive, and Seatools. Seatools can often find and repair errors that chkdsk won't. chkdsk may even come up clean, but Seatools will find, and often correct, simple errors. A Guy

Would have been nice to know that. I assumed that the language "dead drive" actually meant the drive was beyond saving and that any "repairs" effected by Sea Tools were only temporary.

 

[A Guy]

The drive may indeed have been beyond repair. The point is that the manufacturers own DOS tool may find things that chkdsk does not. Sorry I didn't see the thread sooner. A Guy

 

[freewheeling]

Well, the OS was beyond repair that's for sure. And replacing the drive was relatively painless so no harm done. Plus I learned a few things. Now if I can just stave off senility...