Strange event errors after sfc/ scannow
Thursday, September 2, 2010 at 9:12 am Windows XP Annoyances Discussion Forum
Posted by Mike9685
(7 messages posted)
The OS is XP Pro with SP3 and IE8. I recently did a sfc/ scannow on the advice
of the Sunbelt software tech, while we were troubleshooting a problem with my Vipre
firewall. After a reboot, I could no longer get updates from the Microsoft Windows
update site. I tried all the solutions from Microsoft KB, Help and other BB's. No
change. I checked the Event log and found several strange errors.
Application Errors
Event Type: Warning
Event Source: ESENT
Event Category:
Logging/Recovery
Event ID: 466
Date: 9/1/2010
Time: 16:22:38
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (1340) An invalid checksum record in logfile C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log
was patched using its shadow sector copy.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ESENT
Event Category:
Logging/Recovery
Event ID: 465
Date: 9/1/2010
Time: 16:22:38
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (1340) Corruption was detected during soft recovery in
logfile C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log. The failing checksum
record is located at position END. Data not matching the log-file fill pattern first
appeared in sector 15 (0x0000000F). This logfile has been damaged and is unusable.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ESENT
Event Category:
Logging/Recovery
Event ID: 454
Date: 9/1/2010
Time: 16:22:38
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (1340) Database recovery/restore failed with unexpected
error -501.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: ESENT
Event Category:
Logging/Recovery
Event ID: 466
Date: 9/1/2010
Time: 16:22:41
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (2368) An invalid checksum record in logfile C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log
was patched using its shadow sector copy.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ESENT
Event Category:
Database Page Cache
Event ID: 476
Date: 9/1/2010
Time: 16:22:41
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (2368) The database page read from the file "C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb"
at offset 20480 (0x0000000000005000) for 4096 (0x00001000) bytes failed verification
because it contains no page data. The read
operation will fail with error -1019 (0xfffffc05).
If this condition persists then please restore the database from a previous
backup.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ESENT
Event Category:
Logging/Recovery
Event ID: 477
Date: 9/1/2010
Time: 17:48:54
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (3796) The log range read from the file "C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log"
at offset 5120 (0x0000000000001400) for 512 (0x00000200) bytes failed verification
due to a range checksum mismatch. The read
operation will fail with error -501 (0xfffffe0b).
If this condition persists then please restore the logfile from a previous
backup.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: ESENT
Event Category:
Logging/Recovery
Event ID: 465
Date: 9/1/2010
Time: 17:48:54
User: N/A
Computer: SNAKEDRIVER
Description:
wuauclt (3796) Corruption was detected during soft recovery in
logfile C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log. The failing checksum
record is located at position 10:187. Data not matching the log-file fill pattern
first appeared in sector 11. This logfile has been damaged and is unusable.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
System errors
Event Type: Error
Event Source: MRxSmb
Event Category:
None
Event ID: 8003
Date: 9/1/2010
Time: 19:39:06
User: N/A
Computer: SNAKEDRIVER
Description:
The master browser has received a server announcement from the
computer D7H4FFC1 that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{3193351E-70E9-4DF5-. The master browser is stopping or an election is
being forced.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 4e 00
......N.
0008: 00 00 00 00 43 1f 00 c0
....C..À
0010: 00 00 00 00 00 00 00 00
........
0018: 00 00 00 00 00 00 00 00
........
0020: 00 00 00 00 00 00 00 00
........
Event Type: Warning
Event Source: Dhcp
Event Category:
None
Event ID: 1003
Date: 9/1/2010
Time: 14:48:50
User: N/A
Computer: SNAKEDRIVER
Description:
Your computer was not able to renew its address from the network
(from the DHCP Server) for the Network Card with network address 00248C75554B. The following error occurred:
The semaphore timeout period has expired. . Your computer will
continue to try and obtain an address on its own from the network address (DHCP)
server.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 79 00 00 00
y...
Mulitple instances
of these posts. I've disabled autoupdates and indexing in services, but still receive
the errors.
I've run a chkdsk
on the drive with no errors.
I've run every anti-virus, anti-spyware, and anti-rootkit program I can find and
they all came up clean. I've posted a HiJackThis log and nothing was found. I also
noticed that I lose my broadband connection after ~4 hrs, right after I get a flood
of these errors. It's says "connected", but no upload/download.
I tried everything I can find online to correct this, with no change. I REALLY
don't want to have to install. Any help would be appreciated.
Mike
|
Responses to this message:
|
|