Registry problem

[Guest]

I recently completed a clean reload of win xp pro and office xp w/front page.
After downloading all of the updates I now receive this error in any profile
logged on to.
"one of the files containing the system's registry data had to be use of a
log or alternate copy. the recovery was succesful."

Anyone has any suggestions of what needs to be done to eliminate this
annoying error?

Thanks in advance for any help.

Curt

 

[Ayush]

http://www.softwaretipsandtricks.co...ossible-registry-problem-change-settings.html

--

Ayush [ Be ''?'' Happy ]

For any query, search > www.Google.com
Want to know about a term > http://en.wikipedia.org


|I recently completed a clean reload of win xp pro and office xp w/front
page.
| After downloading all of the updates I now receive this error in any
profile
| logged on to.
| "one of the files containing the system's registry data had to be use of a
| log or alternate copy. the recovery was succesful."
|
| Anyone has any suggestions of what needs to be done to eliminate this
| annoying error?
|
| Thanks in advance for any help.
|
| Curt

 

[Shenan Stanley]

I recently completed a clean reload of win xp pro and office xp
w/front page. After downloading all of the updates I now receive
this error in any profile logged on to.
"one of the files containing the system's registry data had to be
use of a log or alternate copy. the recovery was succesful."

Anyone has any suggestions of what needs to be done to eliminate
this annoying error?

Thanks in advance for any help.

First - it helps if you give the exact message. =)

'One of the files containing the system's Registry data had to be recovered
by use of a log or alternate copy. The recovery was successful.'

Couple of suggestions out there include...

- System Restore to before the problem started...

- Disable the Network DDE service
- Right click My Computer, select Manage -> Services and Applications ->
Services, then select Network DDE and in the 'Sartup type' select 'Disable'
in the dropdown box. Reboot.

- Repair install
How to Perform a Windows XP Repair Install
http://www.michaelstevenstech.com/XPrepairinstall.htm

How to perform an in-place upgrade (reinstallation) of Windows XP
http://support.microsoft.com/kb/315341

Good Luck.

 

[lvee]

go to start/run and type in
msconfig
see if there is an item in the startup tab like dump K..or something like
that. I can't remember exactly. Anyway, remove the check mark (if it's
there, that is) click okay, reboot the computer and see if the message goes
away.

 

[Guest]

Shenan:
I did go ahead and check, the dde was already disabled. So, I went ahead and
used the repair install option. This has, as of this moment cleared the error.
Curt

 

[Guest]

I have the same problem. Network DDE is already diabled. will try your other
advice and get back to you if successful

 

[Gerry]

We're waiting on the edge of seats in anticipation.


~~~~


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

I have the same problem. Network DDE is already diabled. will try
your other advice and get back to you if successful

 

[Guest]

Very funny Gerry. And I do mean funny ha ha. Actually you may be waiting a
while. After reading all the microsoft info I figured there must be an easier
way to solve this issue. So for now I'm not reinstalling - With all the
issues with reinstall I might as well just reformat and start again.
--
Cheers, VB

We're waiting on the edge of seats in anticipation.


~~~~


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

I have the same problem. Network DDE is already diabled. will try
your other advice and get back to you if successful

 

[Gerry]

We're here to help as well as as have a little smile when we can <G>.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Very funny Gerry. And I do mean funny ha ha. Actually you may be
waiting a while. After reading all the microsoft info I figured there
must be an easier way to solve this issue. So for now I'm not
reinstalling - With all the issues with reinstall I might as well
just reformat and start again.

 

[Guest]

Hi Gerry,
After reading numerous tech notes etc I've decided the best way to remove
the registry error is to load Winxp on to a spare HDD I have, then copy all
my files over.
I am happy to do this with all my personal files, but how do I do this with
SP2 or updates, and if using the file transfer wizard, will the registry be
altered as well - thereby, perhaps unknowingly, transfering the registry item
that is currently causing the problem.
Or is there a way to trace the registry error. I have run a number of
registry fix programs but none so far have worked.
--
Cheers, VB

We're here to help as well as as have a little smile when we can <G>.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Very funny Gerry. And I do mean funny ha ha. Actually you may be
waiting a while. After reading all the microsoft info I figured there
must be an easier way to solve this issue. So for now I'm not
reinstalling - With all the issues with reinstall I might as well
just reformat and start again.

 

[Gerry]

What is your Windows XP CD as it is described on the face of the CD? Is
it a Retail or OEM copy? What is your computer make and model?

What is the error message you are getting?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Hi Gerry,
After reading numerous tech notes etc I've decided the best way to
remove the registry error is to load Winxp on to a spare HDD I have,
then copy all my files over.
I am happy to do this with all my personal files, but how do I do
this with SP2 or updates, and if using the file transfer wizard, will
the registry be altered as well - thereby, perhaps unknowingly,
transfering the registry item that is currently causing the problem.
Or is there a way to trace the registry error. I have run a number of
registry fix programs but none so far have worked.

 

[Guest]

Hi have a student copy of Winxp Professional on a computer I made (many years
ago now)
--
Cheers, VB

What is your Windows XP CD as it is described on the face of the CD? Is
it a Retail or OEM copy? What is your computer make and model?

What is the error message you are getting?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Hi Gerry,
After reading numerous tech notes etc I've decided the best way to
remove the registry error is to load Winxp on to a spare HDD I have,
then copy all my files over.
I am happy to do this with all my personal files, but how do I do
this with SP2 or updates, and if using the file transfer wizard, will
the registry be altered as well - thereby, perhaps unknowingly,
transfering the registry item that is currently causing the problem.
Or is there a way to trace the registry error. I have run a number of
registry fix programs but none so far have worked.

 

[Guest]

Didn't finish reading message - sorry
Error message is the same one as this thread "file restored from another log
file" or something like that. Also there is a another error message with the
qui interface but I haven't written down the message and will have to log off
and restart to record message. Perhaps it is this gui error that is causing
the registry to restore a file from another location.
--
Cheers, VB

What is your Windows XP CD as it is described on the face of the CD? Is
it a Retail or OEM copy? What is your computer make and model?

What is the error message you are getting?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Hi Gerry,
After reading numerous tech notes etc I've decided the best way to
remove the registry error is to load Winxp on to a spare HDD I have,
then copy all my files over.
I am happy to do this with all my personal files, but how do I do
this with SP2 or updates, and if using the file transfer wizard, will
the registry be altered as well - thereby, perhaps unknowingly,
transfering the registry item that is currently causing the problem.
Or is there a way to trace the registry error. I have run a number of
registry fix programs but none so far have worked.

 

[Gerry]

Does your Windows XP CD include the SP2 update. Can you copy the
complete Error Reports from Event Viewer?

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Part of the Description of the error will include a link, which you
should double click for further information. You can copy using copy
and paste. Often the link will, however, say there is no further
information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Didn't finish reading message - sorry
Error message is the same one as this thread "file restored from
another log file" or something like that. Also there is a another
error message with the qui interface but I haven't written down the
message and will have to log off and restart to record message.
Perhaps it is this gui error that is causing the registry to restore
a file from another location.

 

[Guest]

Hi Gary,
You will probably be sorry you asked me for this information. I had no idea
there were so many. All in Application logs. None in system at last boot
today. My brain is mush at the moment from too much reading so I will log
back on tomorrow to see your reply. And will attempt to look up the event
id's in technet. (If I can remember how to access it)

Thanking you kindly.
vicki

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1003
Date: 6/10/2007
Time: 7:48:21 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
TraceFileName parameter not located in registry; Default trace file used is .


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/10/2007
Time: 7:46:03 PM
User: NT AUTHORITY\SYSTEM
Computer: STUDENT-ETFEZAF
Description:
Windows saved user STUDENT-ETFEZAF\ALEX registry while an application or
service was still using the registry during log off. The memory used by the
user's registry has not been freed. The registry will be unloaded when it is
no longer in use.

This is often caused by services running as a user account, try configuring
the services to run in either the LocalService or NetworkService account.


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 6/10/2007
Time: 7:48:11 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Faulting application gui.exe, version 0.0.0.0, faulting module unknown,
version 0.0.0.0, fault address 0x00000000.
..
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 67 75 69 ure gui
0018: 2e 65 78 65 20 30 2e 30 .exe 0.0
0020: 2e 30 2e 30 20 69 6e 20 .0.0 in
0028: 75 6e 6b 6e 6f 77 6e 20 unknown
0030: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0038: 61 74 20 6f 66 66 73 65 at offse
0040: 74 20 30 30 30 30 30 30 t 000000
0048: 30 30 0d 0a 00..


Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1015
Date: 6/10/2007
Time: 7:48:21 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
TraceLevel parameter not located in registry; Default trace level used is 32.

Event Type: Error
Event Source: SecurityCenter
Event Category: None
Event ID: 1802
Date: 6/10/2007
Time: 7:48:25 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
The Windows Security Center Service was unable to establish event queries
with WMI to monitor third party AntiVirus and Firewall.

Data:
0000: 02 40 00 80 .@.€

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 6/10/2007
Time: 7:53:06 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Fault bucket 26891076.

Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 36 38 39 31 30 37 36 26891076
0010: 0d 0a ..



--
Cheers, VB

Does your Windows XP CD include the SP2 update. Can you copy the
complete Error Reports from Event Viewer?

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Part of the Description of the error will include a link, which you
should double click for further information. You can copy using copy
and paste. Often the link will, however, say there is no further
information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Didn't finish reading message - sorry
Error message is the same one as this thread "file restored from
another log file" or something like that. Also there is a another
error message with the qui interface but I haven't written down the
message and will have to log off and restart to record message.
Perhaps it is this gui error that is causing the registry to restore
a file from another location.

 

[Guest]

PS. Thanks for the link to info on event viewer
--
Cheers, VB

Does your Windows XP CD include the SP2 update. Can you copy the
complete Error Reports from Event Viewer?

Please post copies of all Error and Warning Reports appearing in
the System and Application logs in Event Viewer for the last boot. No
Information Reports or Duplicates please. Indicate which also appear in
a previous boot.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

Part of the Description of the error will include a link, which you
should double click for further information. You can copy using copy
and paste. Often the link will, however, say there is no further
information.
http://go.microsoft.com/fw.link/events.asp
(Please note the hyperlink above is for illustration purposes only)

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Didn't finish reading message - sorry
Error message is the same one as this thread "file restored from
another log file" or something like that. Also there is a another
error message with the qui interface but I haven't written down the
message and will have to log off and restart to record message.
Perhaps it is this gui error that is causing the registry to restore
a file from another location.

 

[Gerry]

Vicki

This seems to be the key to your problem:

Event Type: Error
Event Source: SecurityCenter
Event Category: None
Event ID: 1802
Date: 6/10/2007
Time: 7:48:25 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
The Windows Security Center Service was unable to establish event
queries
with WMI to monitor third party AntiVirus and Firewall.

What are your anti-virus and anti-spyware arrangements?

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 6/10/2007
Time: 7:48:11 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Faulting application gui.exe, version 0.0.0.0, faulting module unknown,
version 0.0.0.0, fault address 0x00000000

Gui.exe is spyware

You need to check service dependencies. If my suspicions are correct you
have the same problem as Bob Horton in this thread:
http://groups.google.com/group/micr...e353c?hl=en&lnk=st&q=&rnum=5#525b43dcf18e353c

Select Start, Control Panel, Administrative Tools, Services, right click
onWindows Management Instrumentation and select Properties, Dependencies
tab. What appears in the lower box?

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Hi Gary,
You will probably be sorry you asked me for this information. I had
no idea there were so many. All in Application logs. None in system
at last boot today. My brain is mush at the moment from too much
reading so I will log back on tomorrow to see your reply. And will
attempt to look up the event id's in technet. (If I can remember how
to access it)

Thanking you kindly.
vicki

Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1003
Date: 6/10/2007
Time: 7:48:21 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
TraceFileName parameter not located in registry; Default trace file
used is .


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/10/2007
Time: 7:46:03 PM
User: NT AUTHORITY\SYSTEM
Computer: STUDENT-ETFEZAF
Description:
Windows saved user STUDENT-ETFEZAF\ALEX registry while an application
or service was still using the registry during log off. The memory
used by the user's registry has not been freed. The registry will be
unloaded when it is no longer in use.

This is often caused by services running as a user account, try
configuring the services to run in either the LocalService or
NetworkService account.


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 6/10/2007
Time: 7:48:11 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Faulting application gui.exe, version 0.0.0.0, faulting module
unknown, version 0.0.0.0, fault address 0x00000000.
.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 67 75 69 ure gui
0018: 2e 65 78 65 20 30 2e 30 .exe 0.0
0020: 2e 30 2e 30 20 69 6e 20 .0.0 in
0028: 75 6e 6b 6e 6f 77 6e 20 unknown
0030: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0038: 61 74 20 6f 66 66 73 65 at offse
0040: 74 20 30 30 30 30 30 30 t 000000
0048: 30 30 0d 0a 00..


Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1015
Date: 6/10/2007
Time: 7:48:21 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
TraceLevel parameter not located in registry; Default trace level
used is 32.

Event Type: Error
Event Source: SecurityCenter
Event Category: None
Event ID: 1802
Date: 6/10/2007
Time: 7:48:25 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
The Windows Security Center Service was unable to establish event
queries with WMI to monitor third party AntiVirus and Firewall.

Data:
0000: 02 40 00 80 .@.€

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 6/10/2007
Time: 7:53:06 PM
User: N/A
Computer: STUDENT-ETFEZAF
Description:
Fault bucket 26891076.

Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 32 36 38 39 31 30 37 36 26891076
0010: 0d 0a ..

 

[Guest]

Hi Gerry,
Have no virus or firwall on this computer. Used to have zone alarm pro.
Always thought this was causing the problem. Was unable to uninstall it
sucessfully. Found some folders in the registry yesterday and deleted them
but problem still exists. Have looked at the site you refered me to but this
will take me days to read all this info.

Services: WMI shows as dependencies:
Event Log
Remote Procedure Call

system components that depend on this service
IPv6 Helper Service
security Center
Windows Firewall/Internet Connection Sharing (ICS)

This all means nothing to me. Will keep reading the link till next weekend
and get back to you then.

Thanks again Gerry ( I think I got your name right this time- ha ha)