« previous next »
Pages: [1]   Go Down

Author Topic: Errors from event viewer  (Read 17908 times)

0 Members and 1 Guest are viewing this topic.

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Errors from event viewer
« on: July 15, 2014, 10:26:02 am »
i keep getting event errors 1508 and 1542 and have used tweak software but nothing changed. My computer is running fine it just doesnt seem like this errors should be occuring.
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #1 on: July 15, 2014, 10:52:43 am »
Need some more info :-)

What version of Windows? And double click on one of the errors to open it and then you can copy and paste the error here for me so I can read it.

Shane
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #2 on: July 15, 2014, 11:00:22 am »
I looked up the error message and it has to do with missing or damaged registry keys located at, if those are damagaed then it cant load the classes registry file for that user and you get the error in the event viewer.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

Check the event viewer and open one of the errors and see which account it is saying it for.

So since the screen shot you gave me has a flat looking title bar I am assuming you are on windows 8.

I have attached a screen shot of that registry location, compare it with yours and let me know.

Also just in case you are missing those or something from it I attached a reg file so you can import them back in :-)

Let me know if that gets you fixed up, if it does then Iw ill see about adding it to the Windows Repair program.

Shane
Logged

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Re: Errors from event viewer
« Reply #3 on: July 15, 2014, 11:37:12 am »
The only thing I see that is different is that your image shows CD, mine doesn't. Could I pay you to solve the problem using TeamViewer or something similar?
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #4 on: July 16, 2014, 12:54:57 pm »
No need to do that just yet :-)

If that section looks good then the error has to do with a corrupt registy file for the current profile.

Go to C:\Users\USERNAME\AppData\Local\Microsoft\Windows and see if UsrClass.dat is there. (Replace USERNAME with the user name you are logged in with)

Then in the registry go to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist

Then right click on it and export it and post it for me. That section tells windows where the classes registry path is for the current user. I want to double check that

Shane
Logged

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Re: Errors from event viewer
« Reply #5 on: July 16, 2014, 02:57:40 pm »
I followed your instructions and do have the userclass.dat However, you asked me to rename username to what I use to login to the system. I assumed you wanted me to open userclass.dat file to do this? I used notepad and searched for other ways to open but could not find a way to rename the username. I also thought you might be talking about renaming the user name in the path that you asked me to check, but there is no way to do this that I see. So therefore, I have not been able to provide you the registry file with the changed user name.  The userclass.dat file is over 7 meg so I cant send that to you.

Sorry Shane, maybe I am not following instructions as you have provided?
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #6 on: July 16, 2014, 03:39:05 pm »
I didnt mean for you to rename or change anything on your system, I just mean that say your user name was Shane then you would want to go look at

C:\Users\Shane\AppData\Local\Microsoft\Windows

I dont know the username you have so thats why I said that you will need to change that to what ever yours is so that you can find it.

Did you also go and export out that reg location for me so I can see it?

Shane
Logged

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Re: Errors from event viewer
« Reply #7 on: July 16, 2014, 03:46:30 pm »
Understood. I have attached the reg file you requested.     
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #8 on: July 16, 2014, 03:53:28 pm »
Perfect, found the problem. You are missing the registry key

"\\Registry\\User\\S-1-5-21-2103488664-806644543-1267843031-1001_Classes"="\\Device\\HarddiskVolume5\\Users\\David\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat"

Which tells windows where that file is, so I made a regfile for you, apply it and it will put that back in there for you, reboot and you should be good.

Not sure how or why that ever got removed from your system but that is why you where getting errors about the classes registry not being loaded for the current user. :wink:

Shane
Logged

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Re: Errors from event viewer
« Reply #9 on: July 16, 2014, 04:15:26 pm »
No success. Same event errors. I have attached the registry file to show that what you provided is now part of the registry.
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #10 on: July 16, 2014, 04:18:38 pm »
Odd, it isnt in the file

Code: [Select]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist]
"\\REGISTRY\\MACHINE\\HARDWARE"=""
"\\REGISTRY\\MACHINE\\SYSTEM"="\\Device\\HarddiskVolume5\\Windows\\System32\\config\\SYSTEM"
"\\REGISTRY\\MACHINE\\SOFTWARE"="\\Device\\HarddiskVolume5\\Windows\\System32\\config\\SOFTWARE"
"\\REGISTRY\\MACHINE\\BCD00000000"="\\Device\\HarddiskVolume3\\EFI\\Microsoft\\Boot\\BCD"
"\\REGISTRY\\USER\\.DEFAULT"="\\Device\\HarddiskVolume5\\Windows\\System32\\config\\DEFAULT"
"\\REGISTRY\\MACHINE\\SECURITY"="\\Device\\HarddiskVolume5\\Windows\\System32\\config\\SECURITY"
"\\REGISTRY\\MACHINE\\SAM"="\\Device\\HarddiskVolume5\\Windows\\System32\\config\\SAM"
"\\REGISTRY\\USER\\S-1-5-20"="\\Device\\HarddiskVolume5\\Windows\\ServiceProfiles\\NetworkService\\NTUSER.DAT"
"\\REGISTRY\\USER\\S-1-5-19"="\\Device\\HarddiskVolume5\\Windows\\ServiceProfiles\\LocalService\\NTUSER.DAT"
"\\Registry\\User\\S-1-5-21-2103488664-806644543-1267843031-1001"="\\Device\\HarddiskVolume5\\Users\\David\\NTUSER.DAT"

I dont see the "\\Registry\\User\\S-1-5-21-2103488664-806644543-1267843031-1001_Classes"

Shane
Logged

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Re: Errors from event viewer
« Reply #11 on: July 16, 2014, 04:21:25 pm »
it is the last line
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #12 on: July 16, 2014, 04:23:24 pm »
No it is not, notice the _Classes

So you should have 2 at the bottom like this

"\\Registry\\User\\S-1-5-21-2103488664-806644543-1267843031-1001"="\\Device\\HarddiskVolume5\\Users\\David\\NTUSER.DAT"
"\\Registry\\User\\S-1-5-21-2103488664-806644543-1267843031-1001_Classes"="\\Device\\HarddiskVolume5\\Users\\David\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat"


Notice the name is different since it has _Classes and it points to the other path I had you check.

Shane
Logged

Offline dpatten

  • Newbie
  • *
  • Join Date: Jul 2014
  • Posts: 7
  • Karma: 0
    • View Profile
Re: Errors from event viewer
« Reply #13 on: July 16, 2014, 04:26:18 pm »
hmmm. What is next? Do we give up or do want to remote in to take a look? I don't have a problem paying for your services.
Logged

Offline Shane

  • Administrator
  • Hero Member
  • *****
  • Join Date: Sep 2011
  • Posts: 9281
  • Location: USA
  • Karma: 137
  • "Knowledge should be shared not hidden."
    • View Profile
Re: Errors from event viewer
« Reply #14 on: July 16, 2014, 04:27:41 pm »
So you saved the registry file I gave you, you can right click on it and choose edit to view what is in it.

When you saved the reg file you double clicked on it to apply it and a window came up haying that it imported it into the registry?

Shane
Logged
Pages: [1]   Go Up
« previous next »