Here are the event viewer logs...
#######################################
Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 9/23/2005
Time: 10:25:38 PM
User: N/A
Computer: OFFICE
Description:
The System Restore filter encountered the unexpected error '0xC0000185'
while processing the file 'change.log' on the volume 'HarddiskVolume3'. It
has stopped monitoring the volume.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0e 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
###############################################
Event Type: Information
Event Source: SRService
Event Category: None
Event ID: 111
Date: 11/21/2005
Time: 10:59:29 AM
User: N/A
Computer: OFFICE
Description:
A restoration to "System Checkpoint" restore point failed. No changes have
been made to the system.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
##############################################
Event Type: Information
Event Source: SRService
Event Category: None
Event ID: 112
Date: 11/21/2005
Time: 11:36:31 AM
User: N/A
Computer: OFFICE
Description:
A restoration to "System Checkpoint" restore point was incomplete due to an
improper shutdown.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
##########################################