Attachment 582019 Details for Bug 816505 – ErrorLogFromKernel.txt for win2k8-32

ErrorLogFromKernel.txt for win2k8-32

ErrorLogFromKernel.txt (text/plain), 5.25 KB, created by dawu on 2012-05-04 04:18:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: dawu

Created: 2012-05-04 04:18:36 UTC

Size: 5.25 KB

patch

obsolete

>Log Name:      System
>Source:        Microsoft-Windows-Kernel-General
>Date:          5/4/2012 12:45:16 PM
>Event ID:      5
>Task Category: None
>Level:         Error
>Keywords:      
>User:          SYSTEM
>Computer:      WIN-X8YTBSNBLGN
>Description:
>{Registry Hive Recovered} Registry hive (file): '\??\C:\Users\Administrator\ntuser.dat' was corrupted and it has been recovered. Some data might have been lost.
>Event Xml:
><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>  <System>
>    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
>    <EventID>5</EventID>
>    <Version>0</Version>
>    <Level>2</Level>
>    <Task>0</Task>
>    <Opcode>0</Opcode>
>    <Keywords>0x8000000000000000</Keywords>
>    <TimeCreated SystemTime="2012-05-04T04:45:16.281Z" />
>    <EventRecordID>18032</EventRecordID>
>    <Correlation />
>    <Execution ProcessID="960" ThreadID="232" />
>    <Channel>System</Channel>
>    <Computer>WIN-X8YTBSNBLGN</Computer>
>    <Security UserID="S-1-5-18" />
>  </System>
>  <EventData>
>    <Data Name="FinalStatus">0x8000002a</Data>
>    <Data Name="ExtraStringLength">37</Data>
>    <Data Name="ExtraString">\??\C:\Users\Administrator\ntuser.dat</Data>
>  </EventData>
></Event>
>-------------------------------------------------------------------------------------------------
>
>Log Name:      System
>Source:        Microsoft-Windows-Kernel-General
>Date:          4/27/2012 12:31:11 PM
>Event ID:      5
>Task Category: None
>Level:         Error
>Keywords:      
>User:          SYSTEM
>Computer:      WIN-X8YTBSNBLGN
>Description:
>{Registry Hive Recovered} Registry hive (file): 'SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.
>Event Xml:
><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>  <System>
>    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
>    <EventID>5</EventID>
>    <Version>0</Version>
>    <Level>2</Level>
>    <Task>0</Task>
>    <Opcode>0</Opcode>
>    <Keywords>0x8000000000000000</Keywords>
>    <TimeCreated SystemTime="2012-04-27T04:31:11.796Z" />
>    <EventRecordID>17821</EventRecordID>
>    <Correlation />
>    <Execution ProcessID="588" ThreadID="592" />
>    <Channel>System</Channel>
>    <Computer>WIN-X8YTBSNBLGN</Computer>
>    <Security UserID="S-1-5-18" />
>  </System>
>  <EventData>
>    <Data Name="FinalStatus">0x8000002a</Data>
>    <Data Name="ExtraStringLength">8</Data>
>    <Data Name="ExtraString">SOFTWARE</Data>
>  </EventData>
></Event>
>------------------------------------------------------------------------------------------------
>
>Log Name:      System
>Source:        Microsoft-Windows-Kernel-General
>Date:          4/27/2012 12:30:50 PM
>Event ID:      5
>Task Category: None
>Level:         Error
>Keywords:      
>User:          SYSTEM
>Computer:      WIN-X8YTBSNBLGN
>Description:
>{Registry Hive Recovered} Registry hive (file): '\??\C:\Users\Administrator\ntuser.dat' was corrupted and it has been recovered. Some data might have been lost.
>Event Xml:
><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>  <System>
>    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
>    <EventID>5</EventID>
>    <Version>0</Version>
>    <Level>2</Level>
>    <Task>0</Task>
>    <Opcode>0</Opcode>
>    <Keywords>0x8000000000000000</Keywords>
>    <TimeCreated SystemTime="2012-04-27T04:30:50.984Z" />
>    <EventRecordID>17816</EventRecordID>
>    <Correlation />
>    <Execution ProcessID="956" ThreadID="1956" />
>    <Channel>System</Channel>
>    <Computer>WIN-X8YTBSNBLGN</Computer>
>    <Security UserID="S-1-5-18" />
>  </System>
>  <EventData>
>    <Data Name="FinalStatus">0x8000002a</Data>
>    <Data Name="ExtraStringLength">37</Data>
>    <Data Name="ExtraString">\??\C:\Users\Administrator\ntuser.dat</Data>
>  </EventData>
></Event>
>------------------------------------------------------------------------------------------------
>
>Log Name:      System
>Source:        Microsoft-Windows-Kernel-General
>Date:          4/27/2012 12:30:24 PM
>Event ID:      5
>Task Category: None
>Level:         Error
>Keywords:      
>User:          SYSTEM
>Computer:      WIN-X8YTBSNBLGN
>Description:
>{Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost.
>Event Xml:
><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>  <System>
>    <Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
>    <EventID>5</EventID>
>    <Version>0</Version>
>    <Level>2</Level>
>    <Task>0</Task>
>    <Opcode>0</Opcode>
>    <Keywords>0x8000000000000000</Keywords>
>    <TimeCreated SystemTime="2012-04-27T04:30:24.328Z" />
>    <EventRecordID>17769</EventRecordID>
>    <Correlation />
>    <Execution ProcessID="4" ThreadID="428" />
>    <Channel>System</Channel>
>    <Computer>WIN-X8YTBSNBLGN</Computer>
>    <Security UserID="S-1-5-18" />
>  </System>
>  <EventData>
>    <Data Name="FinalStatus">0x8000002a</Data>
>    <Data Name="ExtraStringLength">36</Data>
>    <Data Name="ExtraString">\SystemRoot\System32\Config\SOFTWARE</Data>
>  </EventData>
></Event>

Actions: View

Attachments on bug 816505: 580417 | 580418 | 580419 | 580685 | 580686 | 580687 | 580688 | 582019