[rshaffer61]

Please follow the steps below to enter the Event Viewer program in XP. This will give me more information into what is causing your issue.

Go to

Start and then click on Run
Type in eventvwr.msc and press Enter
On left side click on Applications On right side look for any RED X about the time of a incident
On left side click on System. On right side look for any Red X about the same time of a incident
Also look for any yellow exclamation mark at the same time in either of the above
If you find any double click on one at a time and take a screenshot.
To take a screenshot click on your Print Screen on your keyboard. It is normally the key above your number pad between the F12 key and the Scroll Lock key
Now go to Start
All Programs
Accessories
Paint
In the empty white area click and hold the CTRL key and then click the V
Go to the File option at the top and click on Save as
Save as file type JPEG and save it to your Desktop

Include as a attachment in your next reply
If your attachment is to big to attach then go to Mediafire .
Register and upload your file.
Then reply with the link located to the right of your now uploaded file on Mediafire



Please follow the steps below to enter the Event Viewer program in Vista\Win7. This will give me more information into what is causing your issue. You can get to Event viewer two ways and I will post both for you.

Method One

• Go to
• Start
• In the Search box type in Event Viewer in the search box and press Enter
• From this point you can follow from step four from the below method as they will be the same.
Method Two

• Go to Start
• Right click on the Computer Icon and select Manage
• Navigate to the Event Viewer, You will be prompted to accept the action you are going to perform. Click continue
• On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
• Look for the ones that correspond to the times that your issue occurred.
• If any are found please double click and expand the error. This will open and give you more information on the error.
• Please include that in your next reply.

[Advertisements]

On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
• Look for the ones that correspond to the times that your issue occurred.
• If any are found please double click and expand the error. This will open and give you more information on the error.
• Please include that in your next reply.

I dont understand that step i dont see any thing saying local


EDIT : Is this what you talking? :$

Edited by pzh, 24 October 2011 - 09:59 AM.

[pzh]

On the left window pane click on Local and then expand the Windows entry. This will allow you to see every error for the past 24 hours as well as the last 7 days in the right window pane.
• Look for the ones that correspond to the times that your issue occurred.
• If any are found please double click and expand the error. This will open and give you more information on the error.
• Please include that in your next reply.

I dont understand that step i dont see any thing saying local


EDIT : Is this what you talking? :$

Edited by pzh, 24 October 2011 - 09:59 AM.

[rshaffer61]

If you click on the highlighted entry Even Viewer does it expand with more entries under it?

[pzh]

Yes it does Saying :

- Custom Viewes
- Windows Logs
- Application and service logs
- Subscriptions

Edited by pzh, 25 October 2011 - 02:57 PM.

[rshaffer61]

Click on the Windows Logs and then copy and paste the log in your next post.
Then click on Application and services logs and post in the next post.

[pzh]

Then what?

[rshaffer61]

OK now open Application and if you can copy and post the last couple of events that have happened.
Then do the same for System.
This may give me a insight into what is causing the actual problem.

[pzh]

Do i post the events " Information " ? cuz there are lots of them i have some events saying error , and others saying warning
What shall i copy because they are like 900 lol xD

[rshaffer61]

Just the errors from the past 2 days. Don't need anything older then that since it will most likely be repeating anyway.

[pzh]

APLICATION


Log Name: Application
Source: MsiInstaller
Date: 28-10-2011 01:11:36
Event ID: 11935
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: ADMISTRADOR-PC
Description:
Product: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {03329364-ED3E-3EF1-ACB0-C1E9F5282929}
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">11935</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T00:11:36.000000000Z" />
<EventRecordID>1818</EventRecordID>
<Channel>Application</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>Product: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {03329364-ED3E-3EF1-ACB0-C1E9F5282929}</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Binary>7B39424535313845362D454343362D333541392D383845342D3837373535433037323030467D</Binary>
</EventData>
</Event>


Log Name: Application
Source: Microsoft-Windows-Search
Date: 28-10-2011 00:58:23
Event ID: 3007
Task Category: Gatherer
Level: Error
Keywords: Classic
User: N/A
Computer: ADMISTRADOR-PC
Description:
Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Context: Application, SystemIndex Catalog

Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
<EventID Qualifiers="49152">3007</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-27T23:58:23.000000000Z" />
<EventRecordID>1672</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="ExtraInfo">

Context: Application, SystemIndex Catalog
</Data>
</EventData>
</Event>


Log Name: Application
Source: MsiInstaller
Date: 28-10-2011 00:55:00
Event ID: 11935
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: ADMISTRADOR-PC
Description:
Produto: Microsoft Office Enterprise 2007 -- Erro 1935.Erro durante a instalação de um componente de montagem {97F81AF1-0E47-DC99-A01F-C8B3B9A1E18E}. HRESULT: 0x80070BC9. interface de montagem: IAssemblyCacheItem, função: Commit, nome de montagem: Microsoft.VC80.ATL,version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",processorArchitecture="x86"
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">11935</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-27T23:55:00.000000000Z" />
<EventRecordID>1642</EventRecordID>
<Channel>Application</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data>Produto: Microsoft Office Enterprise 2007 -- Erro 1935.Erro durante a instalação de um componente de montagem {97F81AF1-0E47-DC99-A01F-C8B3B9A1E18E}. HRESULT: 0x80070BC9. interface de montagem: IAssemblyCacheItem, função: Commit, nome de montagem: Microsoft.VC80.ATL,version="8.0.50727.762",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",processorArchitecture="x86"</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Binary>7B39303132303030302D303033302D303030302D303030302D3030303030303046463143457D</Binary>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Search
Date: 23-10-2011 20:44:44
Event ID: 3058
Task Category: Gatherer
Level: Error
Keywords: Classic
User: N/A
Computer: ADMISTRADOR-PC
Description:
The application cannot be initialized.

Context: Windows Application

Details:
The file or directory is corrupted and unreadable. (HRESULT : 0x80070570) (0x80070570)

Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" />
<EventID Qualifiers="49152">3058</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-23T19:44:44.000000000Z" />
<EventRecordID>593</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="ExtraInfo">

Context: Windows Application

Details:
The file or directory is corrupted and unreadable. (HRESULT : 0x80070570) (0x80070570)
</Data>
</EventData>
</Event>



SYSTEM

Log Name: System
Source: Service Control Manager
Date: 28-10-2011 13:46:09
Event ID: 7031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ADMISTRADOR-PC
Description:
The Print Spooler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7031</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T12:46:09.004882800Z" />
<EventRecordID>5926</EventRecordID>
<Correlation />
<Execution ProcessID="648" ThreadID="3280" />
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Print Spooler</Data>
<Data Name="param2">2</Data>
<Data Name="param3">60000</Data>
<Data Name="param4">1</Data>
<Data Name="param5">Restart the service</Data>
</EventData>
</Event>


Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 28-10-2011 13:43:08
Event ID: 5
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: ADMISTRADOR-PC
Description:
{Registry Hive Recovered} Registry hive (file): '\??\C:\System Volume Information\Syscache.hve' was corrupted and it has been recovered. Some data might have been lost.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>5</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T12:43:08.184570300Z" />
<EventRecordID>5902</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="52" />
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x8000002a</Data>
<Data Name="ExtraStringLength">45</Data>
<Data Name="ExtraString">\??\C:\System Volume Information\Syscache.hve</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 28-10-2011 13:42:33
Event ID: 1127
Task Category: None
Level: Error
Keywords:
User: ADMISTRADOR-PC\ADMISTRADOR
Computer: ADMISTRADOR-PC
Description:
The description for Event ID 1127 from source Microsoft-Windows-GroupPolicy cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

1
3208
2
15
15105
The resource loader cache doesn't have loaded MUI entry.

The resource loader failed to find MUI file

Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>1127</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T12:42:33.328125000Z" />
<EventRecordID>5887</EventRecordID>
<Correlation ActivityID="{6095FE3E-B771-4159-B4E3-758BB2957AC9}" />
<Execution ProcessID="1044" ThreadID="1512" />
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security UserID="S-1-5-21-1163457438-2216443344-3975025217-1001" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">3208</Data>
<Data Name="ProcessingMode">2</Data>
<Data Name="ProcessingTimeInMilliseconds">15</Data>
<Data Name="ErrorCode">15105</Data>
<Data Name="ErrorDescription">The resource loader cache doesn't have loaded MUI entry. </Data>
<Data Name="DCName">
</Data>
</EventData>
</Event>



Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 28-10-2011 13:42:11
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (2)
User: SYSTEM
Computer: ADMISTRADOR-PC
Description:
The description for Event ID 41 from source Microsoft-Windows-Kernel-Power cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0
0
0
0
0
False
0

The resource loader failed to find MUI file

Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>2</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2011-10-28T12:42:11.312500000Z" />
<EventRecordID>5829</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">false</Data>
<Data Name="PowerButtonTimestamp">0</Data>
</EventData>
</Event>


Log Name: System
Source: EventLog
Date: 28-10-2011 13:42:29
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ADMISTRADOR-PC
Description:
The previous system shutdown at 13:40:14 on ‎28-‎10-‎2011 was unexpected.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T12:42:29.000000000Z" />
<EventRecordID>5823</EventRecordID>
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security />
</System>
<EventData>
<Data>13:40:14</Data>
<Data>‎28-‎10-‎2011</Data>
<Data>
</Data>
<Data>
</Data>
<Data>494</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DB070A0005001C000D0028000E007701DB070A0005001C000C0028000E007701600900003C000000010000006009000000000000B00400000100000000000000</Binary>
</EventData>
</Event>




Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 28-10-2011 13:33:24
Event ID: 5
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: ADMISTRADOR-PC
Description:
{Registry Hive Recovered} Registry hive (file): '\??\C:\System Volume Information\Syscache.hve' was corrupted and it has been recovered. Some data might have been lost.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-General" Guid="{A68CA8B7-004F-D7B6-A698-07E2DE0F1F5D}" />
<EventID>5</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T12:33:24.180664000Z" />
<EventRecordID>5776</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="48" />
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x8000002a</Data>
<Data Name="ExtraStringLength">45</Data>
<Data Name="ExtraString">\??\C:\System Volume Information\Syscache.hve</Data>
</EventData>
</Event>



´Log Name: System
Source: Ntfs
Date: 28-10-2011 08:00:50
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: ADMISTRADOR-PC
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolume2.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T07:00:50.182617100Z" />
<EventRecordID>5650</EventRecordID>
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\Device\HarddiskVolume2</Data>
<Binary>00000C000200380002000000370004C000000000020100C000000000000000000000000000000000EE0C140018A8000000000200</Binary>
</EventData>
</Event>



Log Name: System
Source: Ntfs
Date: 28-10-2011 07:58:06
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: ADMISTRADOR-PC
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy21.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T06:58:06.635742100Z" />
<EventRecordID>5636</EventRecordID>
<Channel>System</Channel>
<Computer>ADMISTRADOR-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\Device\HarddiskVolumeShadowCopy21</Data>
<Binary>0C000C000200380002000000370004C000000000020100C000000000000000000000000000000000EE0C14002F10010000000100</Binary>
</EventData>
</Event>


The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolume2.

I have like 1000 errors or more from NFTS

[rshaffer61]

Tutorial for running chkdsk in Vista\Win 7 located HERE.

[pzh]

It does by itself , when i boot my pc , i have warnings to do it all the game <.<

[rshaffer61]

Check and see if the hard drive is dirty. Please click on START-->RUN and type cmd. In the new window that appears, type fsutil dirty query c: and hit ENTER. If what appears on the screen says Volume - c: IS Dirty, then please do the following:

Please check the following before proceeding:

• If you have Spyware Doctor installed, uninstall it.
• If you have ZoneAlarm installed, open it, click the "Overview" tab, then select "Preferences", and UNcheck the "Protect ZA Client" check box.

Click Start, then Run, type cmd in the Open box and click "Ok". At the prompt in the Command window, type the following commands, pressing "Enter" after each one:

Substitute the drive letter for the drive your want to check for the ? in the following commands. Please note the spaces.

• chkntfs /d ..... (This will reset autocheck options to default...will come back invalid on some installations)
• chkntfs /c ?: ..... (This will allow checking the specified drive )
• chkntfs /x ?: ..... (The x switch tells Windows to NOT check the specified drive on the next boot)

At this point, restart your computer, it will not do a chkdsk and will boot directly to Windows.

This next step is important as this is where the Dirty Bit will be unset.

Substitute the drive letter for the drive your want to check for the ? in the following commands.

Click Start, then Run, type cmd in the Open box and click "Ok". At the command prompt, type the following, pressing "Enter" after each one: (Again, note the spaces.)

• chkdsk /f /r ?: ..... (To manually run a full chkdsk operation on the specified drive)
• Y ..... (To accept having it run on the next boot)

This should take you through 5 stages of the scan and will unset the Dirty Bit. Be patient...this is a very thorough check and will take quite a while.

Finally, when the chkdsk operation has completed, type fsutil dirty query ?:, press "Enter", and Windows will confirm that the Dirty Bit is not set on that drive.

Reboot again and see if chkdsk still runs on startup. If the machine boots back up to the command prompt, type exit and press "Enter"...it should boot to Windows.

[pzh]

It says i need administrator privilegs but im admin already lol

Edited by pzh, 28 October 2011 - 09:05 AM.

[rshaffer61]

OK try this.
Right click on the Run command and then click on Run as or Run As Administrator
Is this a guest account you are logged in with?