Defender scan on Dell Dual Raid 0 HD configuration

[Guest]

Hi my dear friends:

For weeks now, I have been checking my the Event Viewer, and under
Application the following only Error information is displayed (not a single
other error is shown in any of the other 6 categories). It is the same after
power up or restart. I have XP Pro SP2, and a paid WLOC 1.1 with integrated
Defender. installed on a Dell Serial ATA RAID 0 with dual 74GB HD.

My only question is:
Will it be possible that Defender sees one, of the 2 internal HD in the Dell
Raid 0 configuration, as an independent internal HD? Being Defender, I think
at present, NOT programmed to neither scan, defrag, nor backup to internal
HD, will this be causing the Error issue? Is there any relation on Defender
failing to scan the files Volume 2 starting with letter M? Same place in
Volume 2


Event Type: Error
Event Source: MSMPSVC
Event Category: None
Event ID: 3
Date: 1/7/2007
Time: 7:14:00 AM
User: NT AUTHORITY\SYSTEM
Computer: DHWXX871
Description:
AV Engine failed to scan \Device\HarddiskVolume2\Program Files\Registry
Mechanic\RegMech.exe file accessed thru C:\Program Files\Windows
Defender\MsMpEng.exe (Session 0x0). Info after Defender scan done inmediately
after restart


Event Type: Information
Event Source: MSMPSVC
Event Category: None
Event ID: 5
Date: 1/7/2007
Time: 6:54:23 AM
User: N/A
Computer: DHWXX871
Description:
OnAccess scanning was enabled by user. Info after restart, without running
Windows Defender scan.



Event Type: Error
Event Source: MSMPSVC
Event Category: None
Event ID: 3
Date: 1/7/2007
Time: 1:57:05 AM
User: NT AUTHORITY\SYSTEM
Computer: DHWXX871
Description:
AV Engine failed to scan \Device\HarddiskVolume2\Program Files\Registry
Mechanic\RegMech.exe file accessed thru C:\Program Files\Windows
Defender\MsMpEng.exe (Session 0x0). Info after power up.

Event Type: Error
Event Source: MSMPSVC
Event Category: None
Event ID: 3
Date: 1/7/2007
Time: 1:57:05 AM
User: NT AUTHORITY\SYSTEM
Computer: DHWXX871
Description:
AV Engine failed to scan \Device\HarddiskVolume2\Program Files\Registry
Mechanic\RegMech.exe file accessed thru C:\Program Files\Windows
Defender\MsMpEng.exe (Session 0x0). After power up.

Event Type: Error
Event Source: MSMPSVC
Event Category: None
Event ID: 3
Date: 1/7/2007
Time: 1:56:47 AM
User: NT AUTHORITY\SYSTEM
Computer: DHWXX871
Description:
AV Engine failed to scan \Device\HarddiskVolume2\Program Files\Common
Files\Real\GToolbar\GDSSetup.exe file accessed thru C:\Program Files\Windows
Defender\MsMpEng.exe (Session 0x0). After power up.

 

[Guest]

Correction: the starting files letter is R.
I posted the same at the WLOC site, which is more complete and edited.
http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1082685&SiteID=2

 

[Guest]

Double check the settings in the BIOS?

Correction: the starting files letter is R.
I posted the same at the WLOC site, which is more complete and edited.
http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1082685&SiteID=2

 

[Guest]

No thanks, very much affraid of tampering with BIOS. Used once only to change
boot-up order for CD-ROM at start. If I screw off the BIOS, my New Year
Happines will be gone for the whole 2007.
What is your opinion to this answer?
"When drives are configured as Raid 0, they become a single drive for all
practical purposes. Volume 2 is most likely what you see as your D:\ drive.
In your system both hard drives when configured as Raid 0 would be seen as
Disc 0 and volume 1,2,3 etc. to Windows, and be seen as drive C:,D:,E: etc.
by us. What the system calls a volume we ususlly call a drive or partition.
Now on the Defender scan, if the scan completes, what you see in Event Viewer
are just files Defender was not able to scan and it is not unusual to have
some files which can't be scanned. I would only be concerned if the files
Defender is unable to scan were unfamiliar or unknown files."
Aceptas ésta contestación como final y buena?
Efrain

 

[Bill Sanderson MVP]

I'm not sure that there's anything to be concerned about in these log
messages.

I'm not familiar with the raid implementation on your system, but I have run
Defender on several Dell servers with raid implementations, and not seen any
issues--typically, the raid implementation is hardware below the level of
Windows: The OS sees it as a drive--and doesn't know about the raid at all.

If you start the system in safe mode and do a scan, does this file get
scanned?

Is this happening on a quickscan, or a full scan?

--

 

[Bill Sanderson MVP]

I agree with that answer--I think it is correct.

--

 

[Guest]

Hi Efrain,

I only said, Double check the settings in the BIOS? Checking the settings
dont disturbe the BIOS ;-) So the BIOS detected the hardware.

I'm glad Bill give you a better opinion. Since I dont have any experience
with Raid.

But thanks for asking me.
--

 

[Guest]

Hi Engel and Bill:
The error is reported ONLY on the first WD scan. Either in quick or full.
After the first scan error report, I can scan as many times I like and don't
get second error report, no matter what I run. So, I will forget the issue.
Thanks for the help.
Efrain