Event ID 4 Kernel-TM

I have googled this error many times and cannot find the answer. The event details are:
The TransactionManager (TmId={d5aece7e-7ecd-11e4-a9f1-806e6f6e6963}, LogPath=\SystemRoot\System32\Config\TxR\{2c18ac47-7ecc-11e4-979c-00241d772681}.TM) has failed to advance its log tail, due to the transaction (UOW={d5aece90-7ecd-11e4-a9f1-00241d772681},
Description='') being unresolved for some time. The transaction must be forced to resolve in order for the TransactionManager to continue to provide transactional services. Forcing the incorrect outcome may cause data corruption in any subordinate
ResourceManagers or Transactionmanagers.
I would appreciate any help on this as I have no idea what it means, or how to start investigating this.
It happens about once a day.
Thanks!

Hi RB63,
When did this issue occur ?Have you got any error codes ?
Here is a similar case for reference ,we can take the Vinod N`s suggestion to have a troubleshoot .As the OP informed ,this may be hardware related .Please keep all the drivers up to date.
How do you fix the Event Viewer Warning 'The Transaction Manager has failed to advance its log tail, due to the transaction being unresolved for some time'
http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/how-do-you-fix-the-event-viewer-warning-the/12eb2286-c6d3-441f-98b5-a4b44d41ba44
If the issue occurred recently ,we can try to perform a system restore to recover the machine to a previous point to have a check.
Best regards

Similar Messages

Event ID 41 Kernel- Power and Memory Issues with P67A-GD65

Alright guys, the reason I'm starting this topic is because I have recently bought an i7-2600K, 8GB (2GBx4) Corsair Dominator CMP4GX3M2A1600C8, a Radeon HD 6970 for an update to my system, I also have an Intel X-25M First Generation 80GB SSD as the boot drive and then 2 Western Digital Black Cavier 1TB storage drives. I currently have OC Genie turned on and my processor is OCed to 4.2GHZ, I have a Zalman 9900Max air cooler on it and my usual processor temp is 34C. Basically every once and a while I'm get Blue Screens on my system, Windows Event Viewer Tags it as Event ID 41 Kernel-Power, I've also gotten PFN_LIST_CORRUPT while playing Crysis once. I'm wondering if it's memeory so I'm about to run my system through MemTest and see what it turns up. So here are my reasons for this post.
1. MSI's website lists only triple channel memeory for corsair for this board which of course is dual channel, so does anyone have a recommendations on memory if I do have to switch them out which I would hate to leave corsair.
2. Has anyone else had this problem with their system?
Thanks guys

Quote from: michael4man on 24-January-11, 08:13:52
Alright guys, the reason I'm starting this topic is because I have recently bought an i7-2600K, 8GB (2GBx4) Corsair Dominator CMP4GX3M2A1600C8, a Radeon HD 6970 for an update to my system, I also have an Intel X-25M First Generation 80GB SSD as the boot drive and then 2 Western Digital Black Cavier 1TB storage drives. I currently have OC Genie turned on and my processor is OCed to 4.2GHZ, I have a Zalman 9900Max air cooler on it and my usual processor temp is 34C. Basically every once and a while I'm get Blue Screens on my system, Windows Event Viewer Tags it as Event ID 41 Kernel-Power, I've also gotten PFN_LIST_CORRUPT while playing Crysis once. I'm wondering if it's memeory so I'm about to run my system through MemTest and see what it turns up. So here are my reasons for this post.
1. MSI's website lists only triple channel memeory for corsair for this board which of course is dual channel, so does anyone have a recommendations on memory if I do have to switch them out which I would hate to leave corsair.
2. Has anyone else had this problem with their system?
Thanks guys
I sold my 3x 2GB Corsair Dominator 1600s for 2x 4GB G.SKILL RipJaw X 1333s because they are 1.5V CL7 and XMP Sandy Bridge optimized : P

Error event id 2 - Kernel Event Tracing - Session "" failed to start with the following error: 0xC000000D

I keep getting this strange error logged as Error event id 2. Note session string is blank "". Any ideas?
Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
Source:        Microsoft-Windows-Kernel-EventTracing
Date:          24/12/2009 09:08:20
Event ID:      2
Task Category: Session
Level:         Error
Keywords:      Session
User:          SYSTEM
Computer:      George-XXL
Description:
Session "" failed to start with the following error: 0xC000000D
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
    <EventID>2</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>2</Task>
    <Opcode>12</Opcode>
    <Keywords>0x8000000000000010</Keywords>
    <TimeCreated SystemTime="2009-12-24T09:08:20.835299100Z" />
    <EventRecordID>36</EventRecordID>
    <Correlation />
    <Execution ProcessID="1944" ThreadID="1948" />
    <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
    <Computer>George-XXL</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data Name="SessionName">
    </Data>
    <Data Name="FileName">
    </Data>
    <Data Name="ErrorCode">3221225485</Data>
    <Data Name="LoggingMode">5</Data>
</EventData>
</Event>

Can you let us know if you get any Blue Screen crush error while using your comptuer?
Generally we can safely ignore the errors in the Event log. Aas we don't if you have get other issues in your computer, you can test your computer in the Clean Boot mode. This method will help us determine if this issue is caused by a loading program or service.
You can try the the following steps:
1. Click the Start Button type "msconfig" (without quotation marks) in the Start Search box, and then press Enter.
2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray).
3. Click the "Startup" tab, click "Disable All" and click "OK".
Then, restart the computer. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility when Windows starts" box and click OK.
Please test this issue in this Clean Boot environment, if the issue disappears in the Clean Boot environment, you can use the dichtomy to quickly narrow down which entry is causing the issue. You can refer to the
KB929135.
Good luck!
John
This is a very poor answer. This guy doesn't know what he's talking about because if you tell someone its ok to "safely ignore the errors in the event log" as a blanket instruction ESPECIALLY because as he stated so himself
he didn't know if there were other issues with the OP's pc then he's giving really bad advice. If you ignore errors in the event log then over time your system will degrade and you will have other issues.. Every error on your pc should NOT be ignored.
It should be decided on a case by case situation.
Furthermore this is an error involving the Windows Session which it states has failed. Definitely should NOT be ignored.
I've got the same error which has suddenly just showed up. No BSOD, Do not have WHS installed and all my media center connectors have NEVER been connected. I don't believe this is a service issue. I think it has something
to do with kernel event tracing.
Of course, it's just my opinion....I could be wrong!

Event ID: 5, Kernel-General

Hi,
We have a couple of Win 2008 R2 servers and getting the error below:
Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 30/10/2014 4:08:17 a.m.
Event ID: 5
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: domain.com
Description:
{Registry Hive Recovered} Registry hive (file): '\??\C:\Program Files\CommVault\Simpana\iDataAgent\JobResults\CV_JobResults\iDataAgent\VirtualServerAgent\2\600\tmpSysHive-564d0d01-a7d4-6e7b-0acb-0809f2bd1557' was corrupted and it has been recovered. Some data
might have been lost.
Please help.

Hi,
Thanks for your post.
According to the error message, this issue may occur when the computer contains corrupted user profiles.
Did you try to create a new user to check the result? Or did you runn SFC (System File Checker) to verify the integrity of the file system?
Regards.
Vivian Wang

Win 7 64 bit - critical error event ID 41 kernel power - task (63)

Meu computador reinicia aleatoriamente quando inativo (somente quando está sem atividade). Eu já chequei tudo. Memoria, processador, HD, fonte, video e não descubro a causa.
Estou com uma Asus x58 premium, Intel i7 930, 3 x Corsair (2gb) tri channel 1600, 1 SSD 120 gb, 1 HD 2 tb (ambos sata 3 - 6gb/s) e fonte Zalman 750w HP e video Nvidia GTS 250.

We do need the actual DMP file as it contains the only record of the sequence of events leading up
to the crash, what drivers were loaded, and what was responsible.
You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.
If you are overclocking stop. (chances are if you dont know if you are, you are not)a
To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder. We need at least 2 DMP FILES to diagnose and confirm
The procedure:
* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button. (if available on your site, MS doesnt have this)
*Please upload them to a file sharing service like Skydrive or"Rapidshare" and put a link to them in your reply.
Link for how to upload below.
http://www.wikihow.com/Use-SkyDrive
To ensure minidumps are enabled:
* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.
Please also run MSinfo32 and upload the output as well.
To run MSinfo32 please go to start>run>MSinfo32
Go to "file" "save" and upload the saved file with the DMPS
(Instructions for XP, Vista, Win 7, Win 8)
Team Zigzag3143.comSystem
specs are often useful so include whatever you know
Please provide us with your Event Viewer administrative logs by following these steps:
Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file here (if you can) to skydrive or a file sharing service
Wanikiya & Dyami -Team-ZigZag. www.ZigZag3143.com email [email protected]

Kernel power event

I’m having windows 7 home premium, trying to configure event viewer for kernel power.
To log shutdown event.
After enabling kernel power log. I’m getting weird event saying that,
The description for Event ID 74 from source Microsoft-Windows-Kernel-Power cannot be found. Either the component that raises this event is not installed on your local computer or the installation
is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
In between I never get shutdown event.

Hi
I want to know if there is a system problem occurred when the ever log generated?
Because the kernel power event ID 41 error occurs when the computer is shut down, or it restarts unexpectedly. When a computer that is running Windows starts, a check is performed to determine whether the computer was shut down cleanly. If the computer was
not shut down cleanly, a Kernel Power Event 41 message is generated.
According to your description, the error occurred because settings on kernel power log or unexpectedly shutdown, you can find the information below:
http://support.microsoft.com/kb/2028504
Regards
Wade Liu
TechNet Community Support

Recieve hardware change events from kernel

is it possible to receive events from the kernel pertaining to hardware. For example would it be possible to get a notification whenever the power button is pressed etc etc
ps Ignore the "etc etc" I just added that for good measure, I'm mainly concerned with the power button

http://developer.apple.com/mac/library/documentation/DeviceDrivers/Conceptual/IO KitFundamentals/PowerMgmt/PowerMgmt.html#//apple_ref/doc/uid/TP0000020-SW4

P67a-GD53 (B3) Hard Crashes (Kernel Power - Event ID 41)

Fresh Win7 installation on a 250GB Hitachi Deskstar connected to the SATA III P67 Chipset ports using Bios 1D (and also the latest Beta Bios) at default clocks - XMP enabled and RAM Voltage set to 1.52V and energy saving options disabled (EIST, Spread Spectrum, C1E and all C states).
I experience hard crashes as if someone has dc'd the power followed by the PC rebooting as normal. Further analysis of the Event Viewer shows 'Kernel-Power Event ID 41) critical events. I recently connected this mechanical drive as I was troubleshooting the same problems plus BSODs and crashes in windows and BF3 with a Vertex 3 120GB SSD.
I've tested the RAM via memtest with no errors so that isn't the problem. The HD and SSD are not the issue as the problems are reproduced over both. I will test another PSU and try and isolate that. Does anyone have any suggestions on how to resolve this problem?

Ok sorry it took so long, so here's my settings should work great! if you are using Stock Cooler you need to minimize on clock speed to 3200, but if you have a great cooler like me. You should be able to run at 3800 - 4200 just fine, mine runs about 44-46 degrees C (111-113F) which is good. Go into the Bios and be sure the Overclock Genie is off.. (sucks for 1600 Memory), and go to Overclock settings and you should get these screens here, and the last screen should be under Cpu Feautures. Hope this helps! Let me know thanks!
*** Also Note my Ram is 1.65V so might want to try it at 1.52V if your Ram is 1.5 volts ***
My fan Cooler Master - http://www.coolermaster.com/product.php?product_id=6636
Bios Pic 1 -
Bios Pic 2 -
Bios Pic 3 -
Good Luck

Very Odd Kernel Panic On Boot Up

I just today had a one-of-a-kind kernel panic on bootup from a completely shutdown machine. The box is a PowerMac G4, Mirrored Drive Door, dual-core 1.25 GHz, OS X 10.4.9, 512 MB factory installed RAM and 512 User-installed Ram for a total of 1GB. Have
Energized computer. Diverted attention. When I turned around to sit down and get to work, I was confronted with the following screen: There was the multi-lingual Kernel panic box on the gray screen, the "throbber" that usually rotates beneath the dark-gray Apple logo rotating away, and "overprinted" on all this was the "international no" symbol centered is a round-cornered translucent box (similar to what you see when you use the keyboard to alter the volume backing up the speaker icon), in the absolute center of the screen.
I powered down the computer and powered it up. Boot without a problem.
I then restarted the computer. Restarted flawlessly.
After using it for a little while, I did a full shut down and restart, used it for a little while, and shut down and restarted again. All these evolutions completed without failure or problems of any kind.
I've verified the startup disk successfully, SMART status is "Verified" for this hard disk, and have performed permissions repair successfully–with no indications of any permissions having to be repaired. All seems to be working normally and well.
Has anyone ever seen anything like this? I've Googled for this problem, and searched these forums, and have found nothing to compare to this.
For general edification, I've included the output of system.log for what looks like the time of the first failed boot and the boot immediately after. For the record, my two peripherals in constant use are a LaCie 60GB FW HD and a Wacom Intuos tablet, which is my primary somatic pointing device at this time–this log excerpt follows.
I cannot locate any report on this event in any kernel log. I also put the machine to sleep to check for kernel panic on wakeup from sleep (no problems there either). And the 512MB user-installed RAM is a Crucial memory module that has been in use for at least a year with no problems.
Thanks in advance for any insights.
Sam Klein.
---being system.log----
Nov 12 08:26:57 localhost kernel[0]: standard timeslicing quantum is 10000 us
Nov 12 08:26:56 localhost mDNSResponder-108.4 (Jan 8 2007 20: 36:00)[39]: starting
Nov 12 08:26:57 localhost kernel[0]: vmpagebootstrap: 254371 free pages
Nov 12 08:26:56 localhost memberd[47]: memberd starting up
Nov 12 08:26:57 localhost kernel[0]: migtable_maxdispl = 70
Nov 12 08:26:57 localhost kernel[0]: 88 prelinked modules
Nov 12 08:26:57 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Nov 12 08:26:57 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Nov 12 08:26:57 localhost kernel[0]: using 2621 buffer headers and 2621 cluster IO buffer headers
Nov 12 08:26:57 localhost kernel[0]: FireWire (OHCI) Apple ID 31 built-in now active, GUID 000a95ff fe809434; max speed s800.
Nov 12 08:26:57 localhost kernel[0]: Security auditing service present
Nov 12 08:26:57 localhost kernel[0]: BSM auditing present
Nov 12 08:26:57 localhost kernel[0]: disabled
Nov 12 08:26:57 localhost kernel[0]: rooting via boot-uuid from /chosen: 45DA37EA-A0E8-3570-8A12-B0DC9C1F26CC
Nov 12 08:26:57 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
Nov 12 08:26:57 localhost kernel[0]: Got boot device = IOService:/MacRISC2PE/pci@f4000000/AppleMacRiscPCI/ata-6@D/AppleKauaiATA/ATADev iceNub@0/IOATABlockStorageDriver/IOATABlockStorageDevice/IOBlockStorageDriver/IB M-IC35L090AVV207-1 Media/IOApplePartitionScheme/AppleHFS_Untitled1@3
Nov 12 08:26:57 localhost kernel[0]: BSD root: disk0s3, major 14, minor 2
Nov 12 08:26:57 localhost kernel[0]: Jettisoning kernel linker.
Nov 12 08:26:57 localhost kernel[0]: Resetting IOCatalogue.
Nov 12 08:26:57 localhost lookupd[51]: lookupd (version 369.5) starting - Mon Nov 12 08:26:57 2007
Nov 12 08:26:57 localhost kernel[0]: Matching service count = 0
Nov 12 08:26:57 localhost kernel[0]: Matching service count = 2
Nov 12 08:26:57 localhost kernel[0]: Matching service count = 2
Nov 12 08:26:57 localhost kernel[0]: Matching service count = 2
Nov 12 08:26:57 localhost kernel[0]: Matching service count = 2
Nov 12 08:26:57 localhost kernel[0]: Matching service count = 2
Nov 12 08:26:57 localhost kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657239 new 1000000000 / 41657149
Nov 12 08:26:57 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Nov 12 08:26:57 localhost kernel[0]: UniNEnet: Ethernet address 00:0a:95:80:94:34
Nov 12 08:26:58 localhost diskarbitrationd[46]: disk1s10 hfs 50C9DD96-F193-30BE-8442-B841038B857F SunDial Four [not mounted]
Nov 12 08:26:58 localhost diskarbitrationd[46]: disk0s3 hfs 45DA37EA-A0E8-3570-8A12-B0DC9C1F26CC SunDial Three /
Nov 12 08:26:59 localhost lookupd[68]: lookupd (version 369.5) starting - Mon Nov 12 08:26:59 2007
Nov 12 08:26:59 localhost DirectoryService[52]: Launched version 2.1 (v353.6)
Nov 12 08:26:59 localhost kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 100 Mbps - Full Duplex
Nov 12 08:26:59 localhost configd[44]: AppleTalk startup
Nov 12 08:26:59 sundialthree configd[44]: setting hostname to "sundialthree.local"
Nov 12 08:27:02 sundialthree launchd: Server 2d57 in bootstrap 1103 uid 0: "/usr/sbin/lookupd"[68]: exited abnormally: Hangup
Nov 12 08:27:02 sundialthree configd[44]: executing /System/Library/SystemConfiguration/Kicker.bundle/Contents/Resources/enable-net work
Nov 12 08:27:02 sundialthree configd[44]: posting notification com.apple.system.config.network_change
Nov 12 08:27:02 sundialthree configd[44]: setting hostname to "sundialthree"
Nov 12 08:27:02 sundialthree lookupd[75]: lookupd (version 369.5) starting - Mon Nov 12 08:27:02 2007
Nov 12 08:27:04 sundialthree kernel[0]: ATY,Pheonix_A: vram [9c000000:04000000]
Nov 12 08:27:04 sundialthree kernel[0]: ATY,Pheonix_B: vram [98000000:04000000]
Nov 12 08:27:04 sundialthree configd[44]: target=enable-network: disabled
Nov 12 08:27:04 sundialthree mDNSResponder: Adding browse domain local.
Nov 12 08:27:04 sundialthree /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application Started
Nov 12 08:27:04 sundialthree loginwindow[219]: Login Window Started Security Agent
Nov 12 08:27:05 sundialthree configd[44]: AppleTalk startup complete
Nov 12 08:27:07 sundialthree mDNSResponder: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.0.1.
Nov 12 08:27:31 sundialthree diskarbitrationd[46]: SystemUIServer [248]:25091 not responding.
Nov 12 08:27:32 sundialthree diskarbitrationd[46]: disk1s10 hfs 50C9DD96-F193-30BE-8442-B841038B857F SunDial Four /Volumes/SunDial Four
Nov 12 08:36:32 sundialthree configd[44]: AppleTalk shutdown
Nov 12 08:36:33 sundialthree configd[44]: AppleTalk shutdown complete
Nov 12 08:36:33 sundialthree /usr/sbin/AppleFileServer: AFPServer::AbnormalATListenerShutDown - clear listener
Nov 12 08:36:42 sundialthree kernel[0]: System Sleep
Nov 12 08:36:42 sundialthree kernel[0]: Sound assertion "0 != err" failed in "AppleLegacyAudio/AppleTexas2Audio/AppleTexas2Audio.cpp" at line 3648 goto Exit
Nov 12 08:36:42 sundialthree kernel[0]: ^PSystem Wake
Nov 12 08:36:42 sundialthree kernel[0]: Wake event 0020
Nov 12 08:36:42 sundialthree kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657239 new 1000000000 / 41657329
Nov 12 08:36:42 sundialthree kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657239 new 1000000000 / 41657239
Nov 12 08:36:42 sundialthree kernel[0]: Sound assertion "0 != err" failed in "AppleLegacyAudio/AppleTexas2Audio/AppleTexas2Audio.cpp" at line 960 goto Exit
Nov 12 08:36:42 sundialthree kernel[0]: ^PUSB caused wake event (OHCI)
Nov 12 08:36:42 sundialthree kernel[0]: FireWire (OHCI) Apple ID 31 built-in: handleSelfIDInt - received quads == 0. issuing bus reset
Nov 12 08:36:43 sundialthree kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657239 new 1000000000 / 41657149
Nov 12 08:36:43 sundialthree kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 100 Mbps - Full Duplex
Nov 12 08:36:43 sundialthree configd[44]: posting notification com.apple.system.config.network_change
Nov 12 08:36:46 sundialthree mDNSResponder: Repeated transitions for interface en0 (FE80:0000:0000:0000:020A:95FF:FE80:9434); delaying packets by 5 seconds
Nov 12 08:36:47 sundialthree configd[44]: setting hostname to "sundialthree.local"
Nov 12 08:36:47 sundialthree configd[44]: AppleTalk startup
Nov 12 08:36:50 sundialthree configd[44]: setting hostname to "sundialthree"
Nov 12 08:36:50 sundialthree configd[44]: posting notification com.apple.system.config.network_change
Nov 12 08:36:52 sundialthree mDNSResponder: Repeated transitions for interface en0 (192.168.0.2); delaying packets by 5 seconds
Nov 12 08:36:53 sundialthree configd[44]: AppleTalk startup complete
Nov 12 08:36:54 sundialthree lookupd[372]: lookupd (version 369.5) starting - Mon Nov 12 08:36:54 2007
Nov 12 08:36:54 sundialthree /Library/Printers/hp/HP Communications.app/Contents/MacOS/pipedaemon.app/Contents/MacOS/pipedaemon[375] : Error binding socket
Nov 12 08:36:55 sundialthree mDNSResponder: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.0.1.
Nov 12 08:43:36 sundialthree shutdown: reboot by eagle:
Nov 12 08:43:36 sundialthree SystemStarter[390]: "/Library/StartupItems/Tablet" failed security check: permissions
Nov 12 08:43:37 sundialthree SystemStarter[390]: authentication service (400) did not complete successfully
Nov 12 08:43:41 sundialthree SystemStarter[390]: The following StartupItems failed to properly start:
Nov 12 08:44:20 localhost kernel[0]: standard timeslicing quantum is 10000 us
Nov 12 08:44:19 localhost memberd[44]: memberd starting up
Nov 12 08:44:20 localhost kernel[0]: vmpagebootstrap: 254367 free pages
Nov 12 08:44:20 localhost kernel[0]: migtable_maxdispl = 70
Nov 12 08:44:19 localhost mDNSResponder-108.4 (Jan 8 2007 20: 36:00)[36]: starting
Nov 12 08:44:20 localhost kernel[0]: 89 prelinked modules
Nov 12 08:44:20 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Nov 12 08:44:20 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Nov 12 08:44:20 localhost kernel[0]: using 2621 buffer headers and 2621 cluster IO buffer headers
Nov 12 08:44:19 localhost lookupd[48]: lookupd (version 369.5) starting - Mon Nov 12 08:44:19 2007
Nov 12 08:44:20 localhost kernel[0]: FireWire (OHCI) Apple ID 31 built-in now active, GUID 000a95ff fe809434; max speed s800.
Nov 12 08:44:20 localhost kernel[0]: Security auditing service present
Nov 12 08:44:20 localhost kernel[0]: BSM auditing present
Nov 12 08:44:20 localhost kernel[0]: disabled
Nov 12 08:44:20 localhost kernel[0]: rooting via boot-uuid from /chosen: 45DA37EA-A0E8-3570-8A12-B0DC9C1F26CC
Nov 12 08:44:20 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
Nov 12 08:44:20 localhost kernel[0]: Got boot device = IOService:/MacRISC2PE/pci@f4000000/AppleMacRiscPCI/ata-6@D/AppleKauaiATA/ATADev iceNub@0/IOATABlockStorageDriver/IOATABlockStorageDevice/IOBlockStorageDriver/IB M-IC35L090AVV207-1 Media/IOApplePartitionScheme/AppleHFS_Untitled1@3
Nov 12 08:44:20 localhost kernel[0]: BSD root: disk0s3, major 14, minor 1
Nov 12 08:44:20 localhost kernel[0]: Jettisoning kernel linker.
Nov 12 08:44:20 localhost kernel[0]: Resetting IOCatalogue.
Nov 12 08:44:20 localhost kernel[0]: Matching service count = 0
Nov 12 08:44:20 localhost kernel[0]: Matching service count = 2
Nov 12 08:44:20 localhost kernel[0]: Matching service count = 2
Nov 12 08:44:20 localhost kernel[0]: Matching service count = 2
Nov 12 08:44:20 localhost kernel[0]: Matching service count = 2
Nov 12 08:44:20 localhost kernel[0]: Matching service count = 2
Nov 12 08:44:20 localhost kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657329 new 1000000000 / 41657239
Nov 12 08:44:20 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Nov 12 08:44:20 localhost kernel[0]: UniNEnet: Ethernet address 00:0a:95:80:94:34
Nov 12 08:44:21 localhost diskarbitrationd[43]: disk0s3 hfs 45DA37EA-A0E8-3570-8A12-B0DC9C1F26CC SunDial Three /
Nov 12 08:44:21 localhost diskarbitrationd[43]: disk1s10 hfs 50C9DD96-F193-30BE-8442-B841038B857F SunDial Four [not mounted]
Nov 12 08:44:22 localhost lookupd[65]: lookupd (version 369.5) starting - Mon Nov 12 08:44:22 2007
Nov 12 08:44:22 localhost DirectoryService[49]: Launched version 2.1 (v353.6)
Nov 12 08:44:22 localhost kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 100 Mbps - Full Duplex
Nov 12 08:44:22 localhost configd[41]: AppleTalk startup
Nov 12 08:44:22 sundialthree configd[41]: setting hostname to "sundialthree.local"
Nov 12 08:44:25 sundialthree launchd: Server 2d5b in bootstrap 1103 uid 0: "/usr/sbin/lookupd"[65]: exited abnormally: Hangup
Nov 12 08:44:25 sundialthree configd[41]: executing /System/Library/SystemConfiguration/Kicker.bundle/Contents/Resources/enable-net work
Nov 12 08:44:25 sundialthree configd[41]: posting notification com.apple.system.config.network_change
Nov 12 08:44:25 sundialthree configd[41]: setting hostname to "sundialthree"
Nov 12 08:44:25 sundialthree lookupd[72]: lookupd (version 369.5) starting - Mon Nov 12 08:44:25 2007
Nov 12 08:44:26 sundialthree configd[41]: target=enable-network: disabled
Nov 12 08:44:27 sundialthree kernel[0]: ATY,Pheonix_A: vram [9c000000:04000000]
Nov 12 08:44:27 sundialthree kernel[0]: ATY,Pheonix_B: vram [98000000:04000000]
Nov 12 08:44:27 sundialthree mDNSResponder: Adding browse domain local.
Nov 12 08:44:27 sundialthree /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application Started
Nov 12 08:44:27 sundialthree loginwindow[216]: Login Window Started Security Agent
Nov 12 08:44:28 sundialthree configd[41]: AppleTalk startup complete
Nov 12 08:44:30 sundialthree mDNSResponder: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.0.1.
Nov 12 08:45:15 sundialthree shutdown: halt by root:
Nov 12 08:45:15 sundialthree SystemStarter[240]: "/Library/StartupItems/Tablet" failed security check: permissions
Nov 12 08:45:15 sundialthree SystemStarter[240]: authentication service (250) did not complete successfully
Nov 12 08:45:18 sundialthree SystemStarter[240]: The following StartupItems failed to properly start:
Nov 12 08:45:18 sundialthree SystemStarter[240]: /System/Library/StartupItems/AuthServer
Nov 12 08:45:18 sundialthree SystemStarter[240]: - execution of Startup script failed
Nov 12 08:48:04 localhost kernel[0]: standard timeslicing quantum is 10000 us
Nov 12 08:48:04 localhost mDNSResponder-108.4 (Jan 8 2007 20: 36:00)[36]: starting
Nov 12 08:48:04 localhost kernel[0]: vmpagebootstrap: 254367 free pages
Nov 12 08:48:04 localhost kernel[0]: migtable_maxdispl = 70
Nov 12 08:48:04 localhost memberd[44]: memberd starting up
Nov 12 08:48:04 localhost kernel[0]: 89 prelinked modules
Nov 12 08:48:04 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Nov 12 08:48:04 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Nov 12 08:48:04 localhost kernel[0]: using 2621 buffer headers and 2621 cluster IO buffer headers
Nov 12 08:48:04 localhost kernel[0]: FireWire (OHCI) Apple ID 31 built-in now active, GUID 000a95ff fe809434; max speed s800.
Nov 12 08:48:04 localhost kernel[0]: Security auditing service present
Nov 12 08:48:04 localhost kernel[0]: BSM auditing present
Nov 12 08:48:04 localhost kernel[0]: disabled
Nov 12 08:48:04 localhost kernel[0]: rooting via boot-uuid from /chosen: 45DA37EA-A0E8-3570-8A12-B0DC9C1F26CC
Nov 12 08:48:04 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
Nov 12 08:48:04 localhost kernel[0]: Got boot device = IOService:/MacRISC2PE/pci@f4000000/AppleMacRiscPCI/ata-6@D/AppleKauaiATA/ATADev iceNub@0/IOATABlockStorageDriver/IOATABlockStorageDevice/IOBlockStorageDriver/IB M-IC35L090AVV207-1 Media/IOApplePartitionScheme/AppleHFS_Untitled1@3
Nov 12 08:48:04 localhost kernel[0]: BSD root: disk0s3, major 14, minor 2
Nov 12 08:48:04 localhost kernel[0]: Jettisoning kernel linker.
Nov 12 08:48:04 localhost kernel[0]: Resetting IOCatalogue.
Nov 12 08:48:04 localhost kernel[0]: Matching service count = 0
Nov 12 08:48:04 localhost lookupd[48]: lookupd (version 369.5) starting - Mon Nov 12 08:48:04 2007
Nov 12 08:48:05 localhost kernel[0]: Matching service count = 2
Nov 12 08:48:05 localhost kernel[0]: Matching service count = 2
Nov 12 08:48:05 localhost kernel[0]: Matching service count = 2
Nov 12 08:48:05 localhost kernel[0]: Matching service count = 2
Nov 12 08:48:04 localhost DirectoryService[49]: Launched version 2.1 (v353.6)
Nov 12 08:48:05 localhost kernel[0]: Matching service count = 2
Nov 12 08:48:05 localhost kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657418 new 1000000000 / 41657239
Nov 12 08:48:05 localhost kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Nov 12 08:48:05 localhost kernel[0]: UniNEnet: Ethernet address 00:0a:95:80:94:34
Nov 12 08:48:05 localhost launchd: Server 3d2b in bootstrap 1103 uid 0: "/usr/sbin/lookupd"[48]: exited abnormally: Hangup
Nov 12 08:48:05 localhost lookupd[59]: lookupd (version 369.5) starting - Mon Nov 12 08:48:05 2007
Nov 12 08:48:05 localhost diskarbitrationd[43]: disk1s10 hfs 50C9DD96-F193-30BE-8442-B841038B857F SunDial Four [not mounted]
Nov 12 08:48:05 localhost diskarbitrationd[43]: disk0s3 hfs 45DA37EA-A0E8-3570-8A12-B0DC9C1F26CC SunDial Three /
Nov 12 08:48:07 localhost kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 100 Mbps - Full Duplex
Nov 12 08:48:07 localhost configd[41]: AppleTalk startup
Nov 12 08:48:07 sundialthree configd[41]: setting hostname to "sundialthree.local"
Nov 12 08:48:09 sundialthree kernel[0]: ATY,Pheonix_A: vram [9c000000:04000000]
Nov 12 08:48:09 sundialthree configd[41]: executing /System/Library/SystemConfiguration/Kicker.bundle/Contents/Resources/enable-net work
Nov 12 08:48:09 sundialthree kernel[0]: ATY,Pheonix_B: vram [98000000:04000000]
Nov 12 08:48:09 sundialthree configd[41]: posting notification com.apple.system.config.network_change
Nov 12 08:48:09 sundialthree configd[41]: setting hostname to "sundialthree"
Nov 12 08:48:09 sundialthree lookupd[75]: lookupd (version 369.5) starting - Mon Nov 12 08:48:09 2007
Nov 12 08:48:09 sundialthree /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application Started
Nov 12 08:48:10 sundialthree automount[129]: deferring user logout notification while init is in progress...
Nov 12 08:48:10 sundialthree loginwindow[73]: Login Window Started Security Agent
Nov 12 08:48:11 sundialthree automount[129]: reposting deferred logout notification.
Nov 12 08:48:11 sundialthree configd[41]: target=enable-network: disabled
Nov 12 08:48:11 sundialthree mDNSResponder: Adding browse domain local.
Nov 12 08:48:12 sundialthree configd[41]: AppleTalk startup complete
Nov 12 08:48:14 sundialthree mDNSResponder: NOTE: Wide-Area Service Discovery disabled to avoid crashing defective DNS relay 192.168.0.1.
Nov 12 08:48:17 sundialthree configd[41]: AppleTalk shutdown
Nov 12 08:48:17 sundialthree configd[41]: AppleTalk shutdown complete
Nov 12 08:50:17 sundialthree kernel[0]: System Sleep
Nov 12 08:50:17 sundialthree kernel[0]: Sound assertion "0 != err" failed in "AppleLegacyAudio/AppleTexas2Audio/AppleTexas2Audio.cpp" at line 3648 goto Exit
Nov 12 08:50:17 sundialthree kernel[0]: ^PSystem Wake
Nov 12 08:50:17 sundialthree kernel[0]: Wake event 0020
Nov 12 08:50:17 sundialthree kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657418 new 1000000000 / 41657239
Nov 12 08:50:17 sundialthree kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657418 new 1000000000 / 41657329
Nov 12 08:50:17 sundialthree kernel[0]: Sound assertion "0 != err" failed in "AppleLegacyAudio/AppleTexas2Audio/AppleTexas2Audio.cpp" at line 960 goto Exit
Nov 12 08:50:17 sundialthree kernel[0]: ^PUSB caused wake event (OHCI)
Nov 12 08:50:17 sundialthree kernel[0]: FireWire (OHCI) Apple ID 31 built-in: handleSelfIDInt - received quads == 0. issuing bus reset
Nov 12 08:50:17 sundialthree kernel[0]: rtclock timebase_callback: late old 1000000000 / 41657418 new 1000000000 / 41657059
Nov 12 08:50:19 sundialthree kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 100 Mbps - Full Duplex
Nov 12 08:50:19 sundialthree configd[41]: posting notification com.apple.system.config.network_change
Nov 12 08:50:19 sundialthree configd[41]: setting hostname to "sundialthree.local"
Nov 12 08:50:19 sundialthree configd[41]: AppleTalk startup
Nov 12 08:50:21 sundialthree configd[41]: posting notification com.apple.system.config.network_change
Nov 12 08:50:21 sundialthree configd[41]: setting hostname to "sundialthree"
Nov 12 08:50:22 sundialthree lookupd[239]: lookupd (version 369.5) starting - Mon Nov 12 08:50:22 2007
Nov 12 08:50:24 sundialthree configd[41]: AppleTalk startup complete
Nov 12 08:51:25 sundialthree diskarbitrationd[43]: SystemUIServer [251]:26115 not responding.
Nov 12 08:51:26 sundialthree diskarbitrationd[43]: disk1s10 hfs 50C9DD96-F193-30BE-8442-B841038B857F SunDial Four /Volumes/SunDial Four
Nov 12 08:59:14 sundialthree /Library/Application Support/FLEXnet Publisher/Service/11.03.005/FNPLicensingService: Started\n
Nov 12 08:59:14 sundialthree /Library/Application Support/FLEXnet Publisher/Service/11.03.005/FNPLicensingService: This service performs licensing functions on behalf of FLEXnet enabled products.\n

Well, there's the prob: this kernel panic did not leave a log report.
The last one before that was 17 Oct, 07; the last one before that was 26 Jan, 07.
I just don't seem to have a panic log for this event. The system log is the best I could come up with.

Ultra 40 Event12, Kernel-WHEA error log in WinVista x64

While I still enjoy working with my Ultra 40 Workstation, lately, I've noticed Kernel-WHEA (EventID 12) error log which seems to appear everytime Windows Vista x64 boots up.
My Ultra 40 has AMD Opteron 280 box with 4GB RAM and is running Windows Vista Ultimate x64.
And here' the error log in Event Viewer;
Event12, Kernel-WHEA
Machine Check Event reported is a fatal Bus or Interconnect timeout error.
Memory Hierarchy Level: 3
Participation: 0
Request Type: 3
Memory/IO: 0
Address: 30422400
Very same error log (only with different numbers in the address section) appears everytime Windows boots up, but it does not seem to reappear while Windows is on. In other words, this specific error gets logged only during the bootup process.
Anyway, I did some research and tried to find out what it meant and how to fix it, but only things I found were WHEA meaning 'Windows Hardware Error Architecture' and Event12, Kernel-WHEA meaning 'Bus timeout machine check exception'.
So I ran AMD's MCAT (Machine Check Analysis Tool) to dig little more information about the error, and here what MCAT says:
Event Source 0
Processor Number : 0
Bank Number       : 0
Time Stamp    (0x): 01C83B55 755106C4
Error Status (0x): D4384000 00000833
Error Address (0x): 00000000 01D03580
Error Misc.   (0x): 00000000 00000000
Single bit errors:
Correctable ECC error
Error address valid in MCi_ADDR
Error reporting enabled
Second error
Error valid
Bus Error Code:
Participation processor: Local node originated the request (SRC)
Time-out: Request did not time out
Memory transaction type: Data read (DRD)
I/O: DRAM memory access (MEM)
Cache level: Generic (LG)
Data Cache Error MC0:
System line fill error into data cache
Syndrome: 0x70
I did ran Sun provided diagnostic tool to see if I get any CPU/RAM related error, but all tests had passed.
And I do not have any problem in 'Device Manager' and even clean installation of Windows Vista didn't resolve the issue.
So pelase, I desperately need any input to either resolve this annoying error, or at least a hint what part of my hardware is gone wrong.
Thanks in advance

rukbat,
Thanks for your comment and suggestion.
But I just cannot ignore this error, and here's why;
My system used to run flawlessly without any error log previsouly. This error occured recently. (No it's not due to MS update, since clean-installation of Windows without any update exhibits the same error with ever since).
So something has gone bad and it must be hardware.
Anyway, I did some more tests in the mean time
Swapping CPU1 to CPU2: same error message
Repositioning DIMMs with each other: same error message
Removing DIMM's for CPU1 (with rest of 2GB installed for CPU2): no error log
Removing DIMM's for CPU2 (with rest of 2GB installed for CPU1): same error message.
So it seems neither CPU's nor DIMM's is causing the error.
Would it be due to faulty motherboard?
Edited by: sangwooksohn on Dec 15, 2007 11:11 AM

RV325 System Log Entries - Kernel - kernel: wrong ip[0],not_list[0]

Hello,
I have a RV325 Router. Entries in the System Log are mysterious to me and all my search results and reading are not relevant.
The Event-Type is - "Kernel", and the Message is "kernel: wrong ip[0],not_list[0]"
The Log entries occur every few minutes.
Does anyone know what this log entry signifies?
Also, does anyone know how to get an answer to any question from Cisco?
Thanks,
Michael Downs

Hello
yes, there are several existing discussions about same syslog message, like here, here or here, but neither of discussions points to solution.
If you device is still under warranty I would suggest you to open service request to Cisco Small Business Support Center to make this issue fixed permanently.

Kernel Power ID 41 : error

Hi everyone!
Last day when I sat by my computer, it got totally hanged up. So I turned it off. When I started it again it took me like 20 min to get it started, then I got a error message.
I searched for it and tried different solutions, but I cant figure out if anything has been changed.
Can anyone tell me what the problem is based on the error parameters below?
This is the error log:
System
Provider
[ Name]
Microsoft-Windows-Kernel-Power
[ Guid]
{331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID
41
Version
3
Level
1
Task
63
Opcode
0
Keywords
0x8000000000000002
TimeCreated
[ SystemTime]
2014-12-06T09:33:17.930950800Z
EventRecordID
17769
Correlation
Execution
[ ProcessID]
4
[ ThreadID]
8
Channel
System
Computer
Robb
Security
[ UserID]
S-1-5-18
EventData
BugcheckCode
159
BugcheckParameter1
0x3
BugcheckParameter2
0xffffe001e37f1720
BugcheckParameter3
0xffffd0005537f960
BugcheckParameter4
0xffffe001e5c362c0
SleepInProgress
5
PowerButtonTimestamp
0
BootAppStatus
3221225473

Hi,
According to the Event ID:41:
Here is a expanition about this Event ID：
The kernel power event ID 41 error occurs when the computer is shut down, or it restarts unexpectedly. When a computer that is running Windows starts, a check is performed to determine whether the computer was shut down cleanly. If the computer was not shut
down cleanly, a Kernel Power Event 41 message is generated.
An event 41 is used to report that something unexpected happened that prevented Windows from shutting down correctly. There may be insufficient information to explicitly define what happened. To determine what may have happened and to identify a potential
resolution, it is important to know what the computer was doing at the time just before the event occurred.
If event 41 is logged because power to the computer was interrupted, consider obtaining an uninterruptible power supply (UPS) such as a battery backup power supply. An underpowered or failing power supply may cause this behavior. For example, if you added
RAM or additional devices or hard disks when this problem began, the power supply may cause the problem.
You can refer to the conents of this link below:
http://support.microsoft.com/kb/2028504
Please also refer to its troubleshooting method to fix this problem, if encouner any problem, please feel free let me know.
Roger Lu
TechNet Community Support

Want info about eventing mechanism in Solaris.

Does Solaris have facility to register for events such as "link down" other than snmp ?? If yes, where can I find information about it ?
Thanks,
Dev

Try looking at syseventd. This is the mechanism to expose events from the kernel/drivers to userland. I'm not sure if network link events are currently exposed.

Kernel extension : keyboard shortcut trigger

Hi everybody !
I have been stuck for two weeks on this problem now. Not by lack of research ; most probably because I am new to kernel ext programming.
I would like the user to be able to trigger specific low level actions, that needs to be executed from within the kernel space. However, I could not find a way, for instance, to register for notifications about keyboard-related events in a kernel extension. (such as specific sets of key being pressed)
Does anyone knows how to achieve such programming ?
The former solution is preferred, however, on a last resort, I am also willing to consider listening to all keyboards events, and sort them out. But I could not find any (recent) info on that one and I understand that such discussion topic is most unwelcomed...
Any idea ?
Thx

Actually, I am not using the kext because I don't want to have to interact with the graphic server / windows manager.
I found a post about this, from people who tried to add a "CDROM Eject key" kind of functionality on a mac. Below is what they did.
But it only worked with 10.0 to 10.2 I think. Clearly it does not work for 10.6.
I want to do something very similar. If you have a suggestion... I will try it !
*Intercepting at the IOHIDSystem Driver*
The best place to intercept the data flow with current knowledge turned out to be the IOHIDSystem class in the kernel. Unfortunately this class is statically linked into the kernel, it's not possible to replace it with a custom driver. The main challenge was to replace the kernel's implementation of IOHIDSystem with a slightly modified version.
If the IOKit had been written in Objective-C instead of C++ (like its ancestor, the DriverKit), things had been simple: We could create a subclass of IOHIDSystem and tell it to "Pose As" the IOHIDSystem class. Every creation of an IOHIDSystem object would have been an instance of our subclass.
Since this is real life and not fiction, it has not been so easy. We nevertheless implemented it the Objective-C way as posing subclass, but we had to do some low-level C++ runtime hacking. iJect contains a subclass of IOHIDSystem which overwrites two virtual methods which process keyboard events. The modified versions of the methods simply call the superclass implementations, or they ignore the event by not calling the superclass implementation. The tricky part is how to make the kernel use our subclass instead of IOHIDSystem. It's necessary to understand how virtual C++ methods work. Instances of classes which have virtual methods have an additional (hidden) instance variable: a pointer to a v-table. This v-table is a function pointer table pointing to the implementations of the virtual methods. To implement the posing, we simply overwrite the pointer to IOHIDSystem's vtable with a pointer to our class' v-table. This turns the IOHIDSystem instance into an instance of our class.
Message was edited by: Eskadi

Lenovo IdeaPad G460 system restore not working / kernel poewr error

The problem is that I am unable to turn on system restore. It gives an error message when I try to allocate space (0x8007007B). Volume Shadow Copy service is running and is in automatic mode. Another problem is that my system freezes and I have to power it off. Even viewer has an error with event id 41 kernel-power. .

@ dglantz1974
if you need to perform clean windows installation, shut down your computer and press one key recover button ( arrow sign ) to perform clean windows installation.
if you need restoring point, you may need to activate it.
http://windows.microsoft.com/en-US/windows7/Create-a-restore-point

Event ID 4 Kernel-TM

Similar Messages

Maybe you are looking for