Archived from groups: microsoft.public.windowsxp.perform_maintain (
More info?)
OK thanks. Here are the items under System, in chronological order. There
are 23 items.
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6009
Date: 12/20/2004
Time: 02:53:54 PM
User: N/A
Computer: HARDYX
Description:
Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6005
Date: 12/20/2004
Time: 02:53:54 PM
User: N/A
Computer: HARDYX
Description:
The Event log service was started.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: bcm4sbxp
Event Category: None
Event ID: 7
Date: 12/20/2004
Time: 02:53:32 PM
User: N/A
Computer: HARDYX
Description:
ASUSTeK/Broadcom 440x 10/100 Integrated Controller: Network controller
configured for 10Mb full-duplex link.
Data:
0000: 00 00 00 00 02 00 5a 00 ......Z.
0008: 00 00 00 00 07 00 05 40 .......@
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: Ntfs
Event Category: Disk
Event ID: 55
Date: 12/20/2004
Time: 02:53:49 PM
User: N/A
Computer: HARDYX
Description:
The file system structure on the disk is corrupt and unusable. Please run
the chkdsk utility on the volume F:.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0d 00 00 00 02 00 4e 00 ......N.
0008: 02 00 00 00 37 00 04 c0 ....7..À
0010: 00 00 00 00 32 00 00 c0 ....2..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Error
Event Source: Ntfs
Event Category: Disk
Event ID: 55
Date: 12/20/2004
Time: 02:53:49 PM
User: N/A
Computer: HARDYX
Description:
The file system structure on the disk is corrupt and unusable. Please run
the chkdsk utility on the volume F:.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0d 00 00 00 02 00 4e 00 ......N.
0008: 02 00 00 00 37 00 04 c0 ....7..À
0010: 00 00 00 00 32 00 00 c0 ....2..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1007
Date: 12/20/2004
Time: 02:54:57 PM
User: N/A
Computer: HARDYX
Description:
Your computer has automatically configured the IP address for the Network
Card with network address 00E018B54D97. The IP address being used is
169.254.61.69.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:55:41 PM
User: N/A
Computer: HARDYX
Description:
The Terminal Services service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The Fast User Switching Compatibility service was successfully sent a start
control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:55:41 PM
User: N/A
Computer: HARDYX
Description:
The Fast User Switching Compatibility service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:55:41 PM
User: N/A
Computer: HARDYX
Description:
The Telephony service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:41 PM
User: HARDYX\Paul M. Blake
Computer: HARDYX
Description:
The Remote Access Connection Manager service was successfully sent a start
control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The SAVRT service was successfully sent a start control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The Network Location Awareness (NLA) service was successfully sent a start
control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:55:41 PM
User: N/A
Computer: HARDYX
Description:
The Network Location Awareness (NLA) service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The Norton Unerase Protection Driver service was successfully sent a start
control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The SSDP Discovery Service service was successfully sent a start control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:55:45 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The Application Layer Gateway Service service was successfully sent a start
control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:55:45 PM
User: N/A
Computer: HARDYX
Description:
The Application Layer Gateway Service service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:56:16 PM
User: N/A
Computer: HARDYX
Description:
The Remote Access Connection Manager service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 12/20/2004
Time: 02:56:19 PM
User: NT AUTHORITY\SYSTEM
Computer: HARDYX
Description:
The IMAPI CD-Burning COM Service service was successfully sent a start
control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:56:19 PM
User: N/A
Computer: HARDYX
Description:
The IMAPI CD-Burning COM Service service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 12/20/2004
Time: 02:56:26 PM
User: N/A
Computer: HARDYX
Description:
The IMAPI CD-Burning COM Service service entered the stopped state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: RemoteAccess
Event Category: None
Event ID: 20158
Date: 12/20/2004
Time: 02:56:38 PM
User: N/A
Computer: HARDYX
Description:
The user xxxxxxx@xxxxxxxxx.xxx successfully established a connection to DSL
Connection using the device PPPoE7-0.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
OK - that's it, at least for the items under the System tab. You are
probably just as interested in seeing the events logged under Applications,
but because there are more of them, I'll post this first and then start
working on those. Thanks again.
"Dave Patrick" wrote:
> When you view the logged events in Event Viewer in the upper right corner,
> third button down is a copy to clipboard, then you can paste in the body of
> a reply message.
>
> Please do so for each of the different System Log events since last boot so
> we can see all of the event detail.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
>
http://www.microsoft.com/protect
>
> "hardy" wrote:
> | Well, I opened my mouth and publicly revealed the extent of my stupidity!
> | Without your help, I guess I would have been searching a long time for
> that
> | Application Event Log! I admire and appreciate the patience you
> demonstrate
> | when addressing people far less conversant in operating systems. As you
> | suspected, my side-issue difficulties with getting into Recovery Console
> | stemmed from running from c:\cmdcons rather than the XP CD. The problem
> was
> | solved by using the CD and it did not require "slipstreaming" the CD as
> | another gentleman suggested. Thus, I have been able to run chkdsk.
> | Regarding why it doesn't run from Autochk is still a mystery I very much
> wish
> | to solve. Checking that Application Event Log revealed the following:
> under
> | Applications, there is an error from SecurityCenter, event ID 1802, which
> | reads, "The Windows Security Center Service was unable to establish event
> | queries with WMI to monitor third party AntiVirus and Firewall."
> | Interestingly, this is immediately followed by the informational message
> from
> | SecurityCenter, event ID 1800, which reads, "The Windows Security Center
> | Service has started." I do not know if I am getting off track here or
> not,
> | but after confirming that I was reading the event log in the correct
> | chronological order, did the error cause Security Center to stop and then
> | restart, or was the fact that it had not yet started the real cause of my
> | error? Checking further, I looked under System events and found three
> | entries, the first two of which are identical: Error, ntsf, event ID 55,
> | category disk, which reads, "The file system structure on the disk is
> corrupt
> | and unusable. Please run the chkdsk utility on the volume F:." The third
> | message is a warning from dchp, event ID 1007, which has to do with the
> | system automatically configuring the IP address for the network card
> because
> | it did not receive an expected timely response from somebody (I am
> assuming
> | that this event is unrelated...but maybe not). It would then appear that
> you
> | were correct as originally claimed, that a third party firewall or
> antivirus
> | is grabbing the disk before the chkdsk can run. Now, in an attempt to
> test,
> | I completely uninstalled both my firewall and antivirus programs and
> received
> | the same results. Again asssuming, I am wondering if this is because
> these
> | programs often replace system DLL files that remain as residual after an
> | uninstall. Part of my interest in solving this problem is that even after
> | running chkidsk in Recovery Console, the disk remains flagged as corrupt.
> Do
> | you have any further advice on how I can solve this annoying problem?
> | Although someone can no doubt offer me a way of going in and manually
> | twiddling this bit to indicate that the disk is now OK, this is not a long
> | term solution and I'll be right back in the same place the next time my
> | machine freezes or I have a power hit. Thank you again for your
> helpfulness
> | and your patience with my foolish questions.
>
>
>