chkdsk log

  • Thread starter Thread starter laurie
  • Start date Start date
L

laurie

had bsod yesterday and their was a error reported in event viewer for 1003. i
posted mindump at site and they said to do a defrag and chksck frag went find
but when doing the chkdsk i had message come up that their where the disk
does not have enough space to replace bad clusters detected in file 129592 of
name and it said this for about 15 minutes all other tests where fine. i
went into event viewer but could find nothing for winlogon. wanted to know
how bad the drive is.

any idea why there is no log and is there another way to check without it
taking 3 hours.
 
Laurie

The implications of your message is that you have a large corrupted file
or files and / or you have a limited amount of free disk space. You
potentially have a very serious problem so you should immediately back
up important data files before it is too late. When you have backed up
it would be helpful if you posted more information.

What is your computer make and model? What exactly do you have by way of
a Windows XP CD. Post the description given on the face of the CD. You
may need to do a clean install on a replacement hard drive so it is
important to make sure you will have the ability to do this before you
try to fix thing the problem with the existing hard drive. Using chkdsk
/ f can cause wholesale file corruption so you need to to have a
complete copy of Windows XP you can use if this happens.

The logging of chkdsk operations is through Event Viewer but the
information provided is not very detailed. You can get more information
using chkdsk but in a different way to that which I think you have
tried. Check the hard drive for bad sectors by running chkdsk c: /r. The
omission of /f is deliberate. It will not take so long and just reports.
Post a complete copy of what it says. It can be the /f option that leads
to file corruption.

Another less intrusive way to investigate your hard drive is to use HD
Tune.

Try HD Tune only gives information and does not fix any
problems.

Download and run it and see what it turns up. You want HD Tune
(freeware) version 2.55 not HD Tune Pro (not Freeware) version 3.00.
http://www.hdtune.com/

Select the Info tabs and place the cursor on the drive under Drive
letter and then double click the two page icon ( copy to Clipboard )
and copy into a further message.

Select the Health tab and then double click the two page icon ( copy to
Clipboard ) and copy into a further message. Make sure you do a full
surface scan with HD Tune.

I would also like to see a copy of the Stop Error Report.

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Right click on
the My Computer icon on the Desktop and select Properties, Advanced,
Start-Up and Recovery, System Failure and uncheck box before
Automatically Restart.

Do not re-enable automatic restart on system failure until you have
resolved the problem. Check for variants of the Stop Error message.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
laptop is a hp zv6005us and it is 3 years old. the harddrive is a toshiba.
what is interesting is that my daughters laptop also a compaq v5305wm had
harddrive failure also once sept 07 while still under warranty then the
replacement hardrive did the same thing in april 08 (also a toshiba) while
doing chkdsk on hers i had same problem turns out 1/2 of the drive was
corruptes as it failed both the short and long test in bios. this laptop has
passed the short test in bios havent dont the long test yet.

will post after i do chkdsk again.
 
the stop error came up with id 1003 system error with a bunch of numbers
nothing else didnt say what it was but gave me a couple of things it could be
such as a virus or video card i did get the minidump which someone analized
and this is what they got form that

MiniDump 070308-01:
BugCheck 1000008E, {c0000005, 805448f3, badaf67c, 0}
Unable to load image SAVRT.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SAVRT.SYS
*** ERROR: Module load completed but symbols could not be loaded for SAVRT.SYS
Probably caused by : SAVRT.SYS ( SAVRT+45bf3 )

The main causes of the 0x24 errors are heavy hard disk defragmentation or
some Antivirus software since two of those MiniDumps mention Symantec Drivers
i would remove it but firstly try this.

1. Run Disk Check.
2. Run Memtest for a minimum of 7 passes.
3. Update your Symantec Software.
4. Run a Virus Scan.

i did a disk cleanup then did a defrag then a disk check also ran virus and
spyware programs which came up clean
 
ok did a chkdsk /r and i still said there was a problem in test 4 from file
20000 to file 129748 again there was no file in event viewer here are
results from hdtune

D Tune: TOSHIBA MK8025GAS Information

Firmware version : KA024A
Serial number : 45KT8836T
Capacity : 74.5 GB (~80.0 GB)
Buffer size : n/a
Standard : ATA/ATAPI-6
Supported mode : UDMA Mode 5 (Ultra ATA/100)
Current mode : UDMA Mode 5 (Ultra ATA/100)

S.M.A.R.T : yes
48-bit Address : no
Read Look-Ahead : yes
Write Cache : yes
Host Protected Area : yes
Device Configuration Overlay : yes
Automatic Acoustic Management: no
Power Management : yes
Advanced Power Management : yes
Power-up in Standby : no
Security Mode : yes
Firmware Upgradable : no

Partition : 1
Drive letter : C:\
Label : main
Capacity : 76308 MB
Usage : 33.42%
Type : NTFS
Bootable : Yes


HD Tune: TOSHIBA MK8025GAS Health

ID Current Worst ThresholdData Status
(01) Raw Read Error Rate 100 100 50 0 Ok
(02) Throughput Performance 100 100 50 0 Ok
(03) Spin Up Time 100 100 1 1453 Ok
(04) Start/Stop Count 100 100 0 467 Ok
(05) Reallocated Sector Count 100 100 50 0 Ok
(07) Seek Error Rate 100 100 50 0 Ok
(08) Seek Time Performance 100 100 50 0 Ok
(09) Power On Hours Count 98 98 0 914 Ok
(0A) Spin Retry Count 109 100 30 0 Ok
(0C) Power Cycle Count 100 100 0 459 Ok
(C0) Power Off Retract Count 100 100 0 15 Ok
(C1) Load Cycle Count 99 99 0 17438 Ok
(C2) Temperature 100 100 0 1179699 Ok
(C4) Reallocated Event Count 100 100 0 0 Ok
(C5) Current Pending Sector 100 100 0 0 Ok
(C6) Offline Uncorrectable 100 100 0 0 Ok
(C7) Ultra DMA CRC Error Count 200 200 0 0 Ok
(DC) Disk Shift 100 100 0 8341 Ok
(DE) Loaded Hours 99 99 0 519 Ok
(DF) Load/Unload Retry Count 100 100 0 0 Ok
(E0) Load Friction 100 100 0 0 Ok
(E2) Load-in time 100 100 0 228 Ok
(F0) Head Flying Hours 100 100 1 0 Ok

Power On Time : 914
Health Status : Ok


still running scan put so far nothing found wrong
 
Laurie

SAVRT.SYS
http://www.file.net/process/savrt.sys.html

Background information on Stop Error message 0x8E
http://msdn2.microsoft.com/en-us/library/ms794023.aspx

0x0000008E: KERNEL_MODE_EXCEPTION_NOT_HANDLED
A kernel mode program generated an exception which the error handler
didn't catch. These are nearly always hardware compatibility issues
(which sometimes means a driver issue or a need for a BIOS upgrade).
Source: http://aumha.org/a/stop.htm

I am not sure why you have mentioned an 0x24 error as the Mini Dump
relates to an Ox8E error.

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793935.aspx

0x00000024: NTFS_FILE_SYSTEM
A problem occurred within NTFS.SYS, the driver file that allows the
system to read and write to NTFS file system drives. There may be a
physical problem with the disk, or an Interrupt Request Packet (IRP) may
be corrupted. Other common causes include heavy hard drive
fragmentation, heavy file I/O, problems with some types of
drive-mirroring software, or some antivirus software. I suggest running
ChkDsk or ScanDisk as a first step; then disable all file system filters
such as virus scanners, firewall software, or backup utilities. Check
the file properties of NTFS.SYS to ensure it matches the current OS or
SP version. Update all disk, tape backup, CD-ROM, or removable device
drivers to the most current versions.
Source: http://aumha.org/a/stop.htm

Have you backed up important data files.

The system has said you need more disk space to complete chkdsk so why
not give it. How much free disk space does the C partition have?

Select Start, All Programs, accessories, System Tools, Disk CleanUp,
More Options, System Restore and remove all but the latest System
Restore point.

I would be interested in seeing a Disk Defragmenter report. Open Disk
Defragmenter and click on Analyse. Select View Report and click on Save
As and Save. Now find VolumeC.txt in your My Documents Folder and post a
copy. Do this before running Disk Defragmenter as it is more
informative. The most fragmented list can reveal large unknown hidden
files.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Laurie

Can you post a copy of the chkdsk report when you run chkdsk /r?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
i did run the chkskd /r and it still did not generate a log file in event
viewer i think iput that in the last post. and the drive is a 80gig drive
with over 73% available. so there is enough space. i had this same error
come up with another laptop that also had over 3/4 sapce avail however that
one did fail the short and long test in bios. this one seems to have passed.
so it seems some of the files might be bad
 
Laurie

My earlier post was not correct. Try what follows.

Select Start, All Programmes, Accessories, Command Prompt. Type chkdsk
and hit ENTER. That will give you the report I was suggesting. It gives
more information than what is recorded in Event Viewer. This is the type
of report you will get.

25591513 KB total disk space.

9976628 KB in 43196 files.

15132 KB in 4229 indexes.

0 KB in bad sectors.

158149 KB in use by the system.

65536 KB occupied by the log file.

15441604 KB available on disk.



4096 bytes in each allocation unit.

6397878 total allocation units on disk.

3860401 allocation units available on disk.

The way to copy the report is not obvious. Open a Word or other text
file and hold it open. Then right click with the Command Prompt window
open and the report visible and select Mark. You could opt for Select
All but that gives you more than you need. Drag the cursor over the area
of the report you require so that it is highlighted in white and then
double click on any part of the highlighted area. The highlighting
vanishes and the text is held in the Clipboard. Next place the cursor
in the open Word file, right click and select Paste. You have capured
the text from the chkdsk report.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
ok here are logs chkdisk log

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\laurie>cd c:\

C:\>chkdsk
The type of the file system is NTFS.
Volume label is main.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
File verification completed.
CHKDSK is verifying indexes (stage 2 of 3)...
Deleting index entry tmp.edb in index $I30 of file 9949.
Index verification completed.

Errors found. CHKDSK cannot continue in read-only mode.

defrag log

Volume main (C:)
Volume size = 74.52 GB
Cluster size = 4 KB
Used space = 24.91 GB
Free space = 49.61 GB
Percent free space = 66 %

Volume fragmentation
Total fragmentation = 4 %
File fragmentation = 8 %
Free space fragmentation = 0 %

File fragmentation
Total files = 60,985
Average file size = 526 KB
Total fragmented files = 242
Total excess fragments = 501
Average fragments per file = 1.00

Pagefile fragmentation
Pagefile size = 1.50 GB
Total fragments = 1

Folder fragmentation
Total folders = 6,858
Fragmented folders = 7
Excess folder fragments = 87

Master File Table (MFT) fragmentation
Total MFT size = 127 MB
MFT record count = 68,182
Percent MFT in use = 52 %
Total MFT fragments = 2

--------------------------------------------------------------------------------
Fragments File Size Most fragmented files
57 905 KB \System Volume
Information\_restore{937B6071-5F59-407E-B128-23C5E9165012}\RP161\change.log.1
31 1 KB \Documents and Settings\laurie\ntuser.dat.LOG
23 96 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\KYKRYM76
22 92 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\4S3F6H00
21 88 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW
21 88 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\FULK2QAD
10 335 KB \Documents and Settings\All
Users\Application Data\Symantec\LiveUpdate\Settings.LiveUpdate
10 5 MB \System Volume
Information\_restore{937B6071-5F59-407E-B128-23C5E9165012}\RP161\snapshot\Repository\FS\OBJECTS.DATA
8 1,008 KB \WINDOWS\FaxSetup.log
8 64 KB \WINDOWS\system32\wbem\Logs\wbemess.lo_
7 6 MB \WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
6 145 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW\func_200806131614[1].js
6 352 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW\watermark_300x[1].bmp
6 501 KB \WINDOWS\ocgen.log
6 3 MB \WINDOWS\system32\dllcache\mshtml.dll
6 158 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW\framework-3[1].js
6 183 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW\KonaLibBaseRM[1].js
5 64 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW\home[1].js
5 98 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\KYKRYM76\base[1].js
5 71 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet
Files\Content.IE5\KYKRYM76\vbulletin_textedit[1].js
5 96 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\4S3F6H00\textlinksflash[1].js
5 90 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\FULK2QAD\vt2FQdmaoeY[1].js
5 394 KB \WINDOWS\tsoc.log
5 97 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\KYKRYM76\home-a[1].css
5 91 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\4S3F6H00\v3[1].htm
5 138 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\KYKRYM76\showthread[1].htm
5 149 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\KYKRYM76\a[1].htm
5 21 MB \System Volume
Information\_restore{937B6071-5F59-407E-B128-23C5E9165012}\RP162\snapshot\_REGISTRY_MACHINE_SOFTWARE
5 1 KB \WINDOWS\system32\config\SECURITY.LOG
5 64 KB \Documents and Settings\laurie\Local
Settings\Temporary Internet Files\Content.IE5\A9YB1WZW\thread-2458591[1].htm

upon boot today i had 2 errors logged in system not sure if this has any
meaning or not put will post them

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/8/2008
Time: 12:20:28 PM
User: N/A
Computer: LAPTOP
Description:
The Application Layer Gateway Service service failed to start due to the
following error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 7/8/2008
Time: 12:20:23 PM
User: N/A
Computer: LAPTOP
Description:
Timeout (30000 milliseconds) waiting for the Application Layer Gateway
Service service to connect.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


hope this helps.
 
i found this file from the defrag file. it seems to have been created 7/6/08
not sure what it means it is the WINDOWS\system32\wbem\Logs\wbemess.txt

(Sun Jul 06 11:53:21 2008.242593) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 11:53:21 2008.243359) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 11:53:21 2008.243359) : Failed to log an event: 6B5
(Sun Jul 06 11:53:21 2008.243359) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 11:53:21 2008.243359) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:18 2008.4893828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:34 2008.4910484) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:35 2008.4911250) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:38 2008.4914031) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:46 2008.4921640) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:46 2008.4922531) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:15:58 2008.4934312) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:16:00 2008.4935562) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:16:07 2008.4943406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:12 2008.5127687) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:18 2008.5134015) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:53 2008.5168843) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:19:59 2008.5174906) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:20:03 2008.5179406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 13:20:37 2008.5212593) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:20 2008.12456062) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462375) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462390) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462390) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462390) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462390) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462406) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462406) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462406) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:26 2008.12462421) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:26 2008.12462468) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462468) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462468) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462484) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462484) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462484) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462500) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462500) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462500) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462500) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462515) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462515) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462515) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462515) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462531) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462531) : Failed to log an event: 6B5
(Sun Jul 06 15:21:26 2008.12462531) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:26 2008.12462531) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462546) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462546) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462546) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462546) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462546) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462562) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462562) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462562) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462562) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462578) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462593) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462609) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:27 2008.12462609) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462609) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462625) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12462625) : Failed to log an event: 6B5
(Sun Jul 06 15:21:27 2008.12462625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462640) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:27 2008.12462640) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:27 2008.12463046) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:27 2008.12463531) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463609) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:28 2008.12463609) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463609) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:28 2008.12463625) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463625) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463640) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:28 2008.12463640) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:28 2008.12463687) : Failed to log an event: 6B5
(Sun Jul 06 15:21:28 2008.12463687) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:28 2008.12463687) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:30 2008.12465781) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465828) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465828) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465828) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:30 2008.12465828) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465843) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465843) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465843) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465843) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465859) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465859) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:30 2008.12465921) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465921) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465921) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:30 2008.12465921) : Failed to log an event: 6B5
(Sun Jul 06 15:21:30 2008.12465937) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465937) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:30 2008.12465937) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Sun Jul 06 15:21:31 2008.12467031) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Sun Jul 06 15:21:31 2008.12467031) : Failed to log an event: 6B5
(Sun Jul 06 15:21:31 2008.12467031) : Dropping event destined for event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace
//./root/subscription
(Sun Jul 06 15:21:31 2008.12467031) : Failed to deliver an event to event
consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code
0x80041001. Dropping event.
(Tue Jul 08 12:19:46 2008.35687) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:19:46 2008.35765) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:19:46 2008.35765) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:19:48 2008.38390) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:23 2008.73359) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:28 2008.77968) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:32 2008.82406) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:42 2008.91625) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:45 2008.94703) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:20:46 2008.95562) : NT Event Log Consumer: could not retrieve
sid, 0x80041002
(Tue Jul 08 12:21:05 2008.115015) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:09 2008.119125) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:13 2008.123390) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:38 2008.148296) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:21:47 2008.157406) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:24:14 2008.303890) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:24:16 2008.306312) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:24:44 2008.333796) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:25:28 2008.378359) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:33:13 2008.843375) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
(Tue Jul 08 12:33:24 2008.853625) : NT Event Log Consumer: could not
retrieve sid, 0x80041002
 
ignore the wbeness log seems i have that log on all my computers. seems to
have something to do with wmi.
 
Laurie

I would buy a replacement drive. Your attempts to reclaim the drive are
going nowhere.

--
~~~~


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
When you start getting (that you can see) bad clusters on a drive, it
means the drive is starting to fail. They don't get better.
 
Back
Top