Re: Registry problem

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi Gary,
You will probably be sorry you asked me for this information. I had no idea
there were so many. All in Application logs. None in system at last boot
today. My brain is mush at the moment from too much reading so I will log
back on tomorrow to see your reply. And will attempt to look up the event
id's in technet. (If I can remember how to access it)

Thanking you kindly.
vicki

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1003
Date: 6/10/2007
Time: 7:48:21 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
TraceFileName parameter not located in registry; Default trace file used is .


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/10/2007
Time: 7:46:03 PM
User: NT AUTHORITY\SYSTEM
Computer: STUDENT-ETFEZAF
Description:
Windows saved user STUDENT-ETFEZAF\ALEX registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 6/10/2007
Time: 7:48:11 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Faulting application gui.exe, version 0.0.0.0, faulting module unknown,
version 0.0.0.0, fault address 0x00000000.
..
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 67 75 69 ure gui
0018: 2e 65 78 65 20 30 2e 30 .exe 0.0
0020: 2e 30 2e 30 20 69 6e 20 .0.0 in
0028: 75 6e 6b 6e 6f 77 6e 20 unknown
0030: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0038: 61 74 20 6f 66 66 73 65 at offse
0040: 74 20 30 30 30 30 30 30 t 000000
0048: 30 30 0d 0a 00..


Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1015
Date: 6/10/2007
Time: 7:48:21 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
TraceLevel parameter not located in registry; Default trace level used is 32.

Event Type: Error
Event Source: SecurityCenter
Event Category: None
Event ID: 1802
Date: 6/10/2007
Time: 7:48:25 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
The Windows Security Center Service was unable to establish event queries
with WMI to monitor third party AntiVirus and Firewall.

Data:
0000: 02 40 00 80 .@.€

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 6/10/2007
Time: 7:53:06 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Fault bucket 26891076.

Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 36 38 39 31 30 37 36 26891076
0010: 0d 0a ..



--
Cheers, VB


"Gerry" wrote:

Does your Windows XP CD include the SP2 update. Can you copy the
complete Error Reports from Event Viewer?

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Part of the Description of the error will include a link, which you
should double click for further information. You can copy using copy
and paste. Often the link will, however, say there is no further
information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

casual user wrote:
Didn't finish reading message - sorry
Error message is the same one as this thread "file restored from
another log file" or something like that. Also there is a another
error message with the qui interface but I haven't written down the
message and will have to log off and restart to record message.
Perhaps it is this gui error that is causing the registry to restore
a file from another location.

What is your Windows XP CD as it is described on the face of the CD?
Is it a Retail or OEM copy? What is your computer make and model?

What is the error message you are getting?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

casual user wrote:
Hi Gerry,
After reading numerous tech notes etc I've decided the best way to
remove the registry error is to load Winxp on to a spare HDD I have,
then copy all my files over.
I am happy to do this with all my personal files, but how do I do
this with SP2 or updates, and if using the file transfer wizard,
will the registry be altered as well - thereby, perhaps unknowingly,
transfering the registry item that is currently causing the problem.
Or is there a way to trace the registry error. I have run a number
of registry fix programs but none so far have worked.

We're here to help as well as as have a little smile when we can
<G>.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


casual user wrote:
Very funny Gerry. And I do mean funny ha ha. Actually you may be
waiting a while. After reading all the microsoft info I figured
there must be an easier way to solve this issue. So for now I'm
not reinstalling - With all the issues with reinstall I might as
well just reformat and start again.

We're waiting on the edge of seats in anticipation.


~~~~


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


casual user wrote:
I have the same problem. Network DDE is already diabled. will
try your other advice and get back to you if successful

switchead wrote:
I recently completed a clean reload of win xp pro and office
xp w/front page. After downloading all of the updates I now
receive this error in any profile logged on to.
"one of the files containing the system's registry data had to
be use of a log or alternate copy. the recovery was
succesful."

Anyone has any suggestions of what needs to be done to
eliminate this annoying error?

Thanks in advance for any help.

First - it helps if you give the exact message. =)

'One of the files containing the system's Registry data had to
be recovered by use of a log or alternate copy. The recovery
was successful.'

Couple of suggestions out there include...

- System Restore to before the problem started...

- Disable the Network DDE service
- Right click My Computer, select Manage -> Services and
Applications -> Services, then select Network DDE and in the
'Sartup type' select 'Disable' in the dropdown box. Reboot.

- Repair install
How to Perform a Windows XP Repair Install
http://www.michaelstevenstech.com/XPrepairinstall.htm

How to perform an in-place upgrade (reinstallation) of
Windows XP http://support.microsoft.com/kb/315341

Good Luck.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



.

Relevant Pages

  • Re: Registry Mechanic
    ... may be especially noticed by those upgrading to Windows XP from an earlier version of Windows. ... Check whether all the programmes loading when Windows is started are really necessary. ... You can access Event Viewer by selecting Start, ... I tried 'registry' and couldn't ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Page File Size Question
    ... Windows probably won't help. ... it virtual memory or RAM memory. ... >> still using the registry during log off. ... >>> You can access Event Viewer by selecting Start, Administrative Tools, ...
    (microsoft.public.windowsxp.general)
  • Re: System very slow, very difficult to access server, cpu usage l
    ... Windows saved user MARK4017DESKTOP\Owner registry while an application or ... service was still using the registry during log off. ... How to configure Windows XP to start in a "clean boot" state ... Also look for Error Reports in the System log in Event Viewer. ...
    (microsoft.public.windowsxp.general)
  • Re: Rtvscan.exe error at shutdown
    ... service was still using the registry during log off. ... I'm guessing it is network controlled because I can't turn it off, ... You can access Event Viewer by selecting Start, Control Panel, ... View and Manage Event Logs in Event Viewer in Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: System very slow, very difficult to access server, cpu usage l
    ... Windows saved user MARK4017DESKTOP\Owner registry while an ... application or service was still using the registry during log off. ... You need to post copies of the Error Reports from Event Viewer if I ...
    (microsoft.public.windowsxp.general)