Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Event log error


  • Please log in to reply
5 replies to this topic

#1 boltp666

boltp666

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 18 August 2010 - 08:59 AM

hey this has come up in a system i am monitoring any input on this error
Main Office has reoccuring event 51x
Application log - Windows Search Service: The entry <C:\RRBACKUPS\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MICROSOFT\SYSTEMCERTIFICATES\MY\CERTIFICATES> in the hash map cannot be updated.Context: Application, SystemIndex CatalogDetails:A device attached to the system is not functioning. (

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,618 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:39 PM

Posted 18 August 2010 - 07:41 PM

I assume, you're using IBM Thinkpad?
RRBACKUPS - Rapid Restore & Recovery

http://www.howtogeek.com/forum/topic/think...space?replies=4

The thinkpad creates a folder called RRbackups which is hidden. Every week it automatically makes a backup of the drive in this folder

Maybe, you don't have enough space for more backups. Check the file size, free space on your hard drive.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 boltp666

boltp666
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 19 August 2010 - 08:26 AM

Keep in mind that i do RMS in Labtech for people's computers. they are not my computers but my clients that i can remote into,




well the error has not occured again so im going to discard it right now im focusing on solving these errors

Error Number 1
Media Office Event Log Message:
application log - VSS: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied..This is often caused by incorrect security settings in either the writer or requestor process.Operation: Gathering Writer DataContext: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {de72c12d-ded2-45c7-8919-f22390a7d1f1}

^we have tried fixing the problem but it keeps coming back


Error Number 2
TCP- Suspicious Ports Detected on machinenamehere
Bad Ports are:1080,2283, 2535, 2745, 3127, 3128, 3410, 5554, 8866, 9898, 12345, 17300, 27374

Open Ports are: 445:135:42511:42001:3389:5250:12345:2804:2002:139:5152:

^ ports are closed now but any idea what is opening these ports? hasnt happen for about 15 days but im still curious


Error number 3
Conshohocken\JOEJ at Township Event Log Message:
system log - W32Time: Time Provider NtpClient: An error occurred during DNS lookup of the manuallyconfigured peer NTP10.0.0.15,0x8. NtpClient will try the DNS lookup again in 30minutes.The error was: A socket operation was attempted to an unreachable host. (0x80072751)

^i keep recieving this error. This user is on a laptop. i suspect that to be the problem. when they go home it tries to sync up the time with the server <---that is what i think is the problem is. yes i have restarted the service and tried resyncing it but its already synced with the server.


Error number 4
Event Log Message:
application log - Ci: A content scan could not be completed on c:\.

^any reason why this could be happening?


Error number 5
System log - iaStor: The device, \Device\Ide\iaStor0, did not respond within the timeout period. only happened once

system log - Disk: The driver detected a controller error on \Device\Harddisk1\DR1.

^need some help on these as well


Error Number 6
Application log - ESENT: Windows (5464) Windows: An attempt to delete the file "C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS09E12.log" failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The delete file operation will fail with error -1032 (0xfffffbf8).


^ is windows just deleting the file by itself or is someone really trying to delete this file. no ip address after this found

Edited by boltp666, 19 August 2010 - 08:41 AM.


#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,618 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:39 PM

Posted 19 August 2010 - 06:05 PM

OK. Let's put it this way...
Basically, every computer, even squeaky clean, like mine will have some entries in Event Viewer.
If there is nothing wrong with the computer, there is no reason to dig around Event Viewer.
Is there anything wrong?

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 boltp666

boltp666
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:08:39 PM

Posted 20 August 2010 - 07:27 AM

see the company i work for Craftech we have to monitor alerts in the event logs. most of the times. we do something called preventive matienance so if i see a hard drive corrupt error or any of these errors and something happens to the computer and i saw this error and didnt do nothing about it. i can get in trouble. we want the customer to have more uptime. not have them call us when their is a problem. Prevent the problem from happening in the first place.

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,618 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:05:39 PM

Posted 20 August 2010 - 04:11 PM

Fair enough, however, personally, I don't even want to go there.
For two reasons:
1. errors happen
2. if any error is not a "critical" system error and it's listed just once, in 99% cases is:
a.) meaningless
b.)close to impossible to pinpoint any possible cause.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users