PDA

View Full Version : Event Viewer


Peter
August 7th 06, 03:02 PM
I am getting, every time I power up the laptop, error 4126, with Information
4138 coming before but at the same time.

My XP Home Ed. is in Portuguese so I have to try and translate what it says
but I will paste the info below anyway.

4126 below says something about cleaning damaged metadata from the index in
c:\system\volume information\catalog.wci and that the index will be
automatically restored.

4126

A limpar os metadados danificados do índice de conteúdo em c:\system\volume
information\catalog.wci. O índice será automaticamente restaurado através da
repetição da filtragem de todos os documentos.

Para mais informações, consulte o 'Centro de ajuda e suporte' em

»go.microsoft.com/fwlink/events.asp.


---------------------------------------------------------------------------------------------


Information 4138

The system detected damaged index in the component Crash during the scan of
the catalogue c:\sSystemVolume Information\catalog.wci

and then gives information
-------------------------------

Foram detectados danos do índice de conteúdo no componente Crash during scan
do catálogo c:\system volume information\catalog.wci. O rastreio da pilha é
0x7DA421C8
0x7DA55594
0x7DA55BEE
0x7DA6D4A7
0x7DAB265B
0x7DAB26C6
0x7DA6C1A7
0x7DA69D6A
0x7DA720E6
0x7DA74368
0x7DA74546
0x7DA6CA40
0x7DA68BA6
0x77DBB48B
0x7C80B50B

--------------------------

Could someone help me with what I should to sort this problem out?

Thank you very much


Jorge

Adrian Grigorof
August 7th 06, 03:28 PM
See these links:
http://www.eventid.net/display.asp?eventid=4126&eventno=1143&source=Ci&phase=1
http://www.eventid.net/display.asp?eventid=4138&eventno=4484&source=Ci&phase=1

--
Adrian Grigorof
www.eventid.net


"Peter" > wrote in message
...
>I am getting, every time I power up the laptop, error 4126, with
>Information 4138 coming before but at the same time.
>
> My XP Home Ed. is in Portuguese so I have to try and translate what it
> says but I will paste the info below anyway.
>
> 4126 below says something about cleaning damaged metadata from the index
> in c:\system\volume information\catalog.wci and that the index will be
> automatically restored.
>
> 4126
>
> A limpar os metadados danificados do índice de conteúdo em
> c:\system\volume information\catalog.wci. O índice será automaticamente
> restaurado através da repetição da filtragem de todos os documentos.
>
> Para mais informações, consulte o 'Centro de ajuda e suporte' em
>
> »go.microsoft.com/fwlink/events.asp.
>
>
> ---------------------------------------------------------------------------------------------
>
>
> Information 4138
>
> The system detected damaged index in the component Crash during the scan
> of the catalogue c:\sSystemVolume Information\catalog.wci
>
> and then gives information
> -------------------------------
>
> Foram detectados danos do índice de conteúdo no componente Crash during
> scan do catálogo c:\system volume information\catalog.wci. O rastreio da
> pilha é 0x7DA421C8
> 0x7DA55594
> 0x7DA55BEE
> 0x7DA6D4A7
> 0x7DAB265B
> 0x7DAB26C6
> 0x7DA6C1A7
> 0x7DA69D6A
> 0x7DA720E6
> 0x7DA74368
> 0x7DA74546
> 0x7DA6CA40
> 0x7DA68BA6
> 0x77DBB48B
> 0x7C80B50B
>
> --------------------------
>
> Could someone help me with what I should to sort this problem out?
>
> Thank you very much
>
>
> Jorge
>
>

Peter
August 7th 06, 03:40 PM
Thank you Adrian

Problem is... that according to what I read the system should put everything
back in order automatically every time, yet the problem occurs every time (7
miunutes after I reboot) every time I restart the laptop.

Could it be a virus, that is smart enough to reinstall itself esch time and
deny the opportunity of restoring data?

Or like I read this could be cause by, say, McAfee?


Thank you for your help.

Peter




"Adrian Grigorof" > escreveu na mensagem
...
> See these links:
> http://www.eventid.net/display.asp?eventid=4126&eventno=1143&source=Ci&phase=1
> http://www.eventid.net/display.asp?eventid=4138&eventno=4484&source=Ci&phase=1
>
> --
> Adrian Grigorof
> www.eventid.net
>
>
> "Peter" > wrote in message
> ...
>>I am getting, every time I power up the laptop, error 4126, with
>>Information 4138 coming before but at the same time.
>>
>> My XP Home Ed. is in Portuguese so I have to try and translate what it
>> says but I will paste the info below anyway.
>>
>> 4126 below says something about cleaning damaged metadata from the index
>> in c:\system\volume information\catalog.wci and that the index will be
>> automatically restored.
>>
>> 4126
>>
>> A limpar os metadados danificados do índice de conteúdo em
>> c:\system\volume information\catalog.wci. O índice será automaticamente
>> restaurado através da repetição da filtragem de todos os documentos.
>>
>> Para mais informações, consulte o 'Centro de ajuda e suporte' em
>>
>> »go.microsoft.com/fwlink/events.asp.
>>
>>
>> ---------------------------------------------------------------------------------------------
>>
>>
>> Information 4138
>>
>> The system detected damaged index in the component Crash during the scan
>> of the catalogue c:\sSystemVolume Information\catalog.wci
>>
>> and then gives information
>> -------------------------------
>>
>> Foram detectados danos do índice de conteúdo no componente Crash during
>> scan do catálogo c:\system volume information\catalog.wci. O rastreio da
>> pilha é 0x7DA421C8
>> 0x7DA55594
>> 0x7DA55BEE
>> 0x7DA6D4A7
>> 0x7DAB265B
>> 0x7DAB26C6
>> 0x7DA6C1A7
>> 0x7DA69D6A
>> 0x7DA720E6
>> 0x7DA74368
>> 0x7DA74546
>> 0x7DA6CA40
>> 0x7DA68BA6
>> 0x77DBB48B
>> 0x7C80B50B
>>
>> --------------------------
>>
>> Could someone help me with what I should to sort this problem out?
>>
>> Thank you very much
>>
>>
>> Jorge
>>
>>
>
>

Adrian Grigorof
August 7th 06, 04:02 PM
Try to rebuild the catalog from scratch: stop Index Server, delete or move
the contents of the Catalog.wci directory, and then restart Index.

As for McAfee, do you have it configured to run a scan at startup? Maybe you
can configure McAfee to exclude *.wci from scanning or as a test, disable
the antivirus temporarely, restart the laptop and see it the problem
persists.

--
Adrian Grigorof
www.eventid.net


"Peter" > wrote in message
...
> Thank you Adrian
>
> Problem is... that according to what I read the system should put
> everything back in order automatically every time, yet the problem occurs
> every time (7 miunutes after I reboot) every time I restart the laptop.
>
> Could it be a virus, that is smart enough to reinstall itself esch time
> and deny the opportunity of restoring data?
>
> Or like I read this could be cause by, say, McAfee?
>
>
> Thank you for your help.
>
> Peter
>
>
>
>
> "Adrian Grigorof" > escreveu na mensagem
> ...
>> See these links:
>> http://www.eventid.net/display.asp?eventid=4126&eventno=1143&source=Ci&phase=1
>> http://www.eventid.net/display.asp?eventid=4138&eventno=4484&source=Ci&phase=1
>>
>> --
>> Adrian Grigorof
>> www.eventid.net
>>
>>
>> "Peter" > wrote in message
>> ...
>>>I am getting, every time I power up the laptop, error 4126, with
>>>Information 4138 coming before but at the same time.
>>>
>>> My XP Home Ed. is in Portuguese so I have to try and translate what it
>>> says but I will paste the info below anyway.
>>>
>>> 4126 below says something about cleaning damaged metadata from the index
>>> in c:\system\volume information\catalog.wci and that the index will be
>>> automatically restored.
>>>
>>> 4126
>>>
>>> A limpar os metadados danificados do índice de conteúdo em
>>> c:\system\volume information\catalog.wci. O índice será automaticamente
>>> restaurado através da repetição da filtragem de todos os documentos.
>>>
>>> Para mais informações, consulte o 'Centro de ajuda e suporte' em
>>>
>>> »go.microsoft.com/fwlink/events.asp.
>>>
>>>
>>> ---------------------------------------------------------------------------------------------
>>>
>>>
>>> Information 4138
>>>
>>> The system detected damaged index in the component Crash during the scan
>>> of the catalogue c:\sSystemVolume Information\catalog.wci
>>>
>>> and then gives information
>>> -------------------------------
>>>
>>> Foram detectados danos do índice de conteúdo no componente Crash during
>>> scan do catálogo c:\system volume information\catalog.wci. O rastreio da
>>> pilha é 0x7DA421C8
>>> 0x7DA55594
>>> 0x7DA55BEE
>>> 0x7DA6D4A7
>>> 0x7DAB265B
>>> 0x7DAB26C6
>>> 0x7DA6C1A7
>>> 0x7DA69D6A
>>> 0x7DA720E6
>>> 0x7DA74368
>>> 0x7DA74546
>>> 0x7DA6CA40
>>> 0x7DA68BA6
>>> 0x77DBB48B
>>> 0x7C80B50B
>>>
>>> --------------------------
>>>
>>> Could someone help me with what I should to sort this problem out?
>>>
>>> Thank you very much
>>>
>>>
>>> Jorge
>>>
>>>
>>
>>
>
>

Peter
August 7th 06, 04:07 PM
Thanks Adrian

But how do I stop Index Server and restart Index?

Sorry...

Peter




"Adrian Grigorof" > escreveu na mensagem
...
> Try to rebuild the catalog from scratch: stop Index Server, delete or move
> the contents of the Catalog.wci directory, and then restart Index.
>
> As for McAfee, do you have it configured to run a scan at startup? Maybe
> you can configure McAfee to exclude *.wci from scanning or as a test,
> disable the antivirus temporarely, restart the laptop and see it the
> problem persists.
>
> --
> Adrian Grigorof
> www.eventid.net
>
>
> "Peter" > wrote in message
> ...
>> Thank you Adrian
>>
>> Problem is... that according to what I read the system should put
>> everything back in order automatically every time, yet the problem occurs
>> every time (7 miunutes after I reboot) every time I restart the laptop.
>>
>> Could it be a virus, that is smart enough to reinstall itself esch time
>> and deny the opportunity of restoring data?
>>
>> Or like I read this could be cause by, say, McAfee?
>>
>>
>> Thank you for your help.
>>
>> Peter
>>
>>
>>
>>
>> "Adrian Grigorof" > escreveu na mensagem
>> ...
>>> See these links:
>>> http://www.eventid.net/display.asp?eventid=4126&eventno=1143&source=Ci&phase=1
>>> http://www.eventid.net/display.asp?eventid=4138&eventno=4484&source=Ci&phase=1
>>>
>>> --
>>> Adrian Grigorof
>>> www.eventid.net
>>>
>>>
>>> "Peter" > wrote in message
>>> ...
>>>>I am getting, every time I power up the laptop, error 4126, with
>>>>Information 4138 coming before but at the same time.
>>>>
>>>> My XP Home Ed. is in Portuguese so I have to try and translate what it
>>>> says but I will paste the info below anyway.
>>>>
>>>> 4126 below says something about cleaning damaged metadata from the
>>>> index in c:\system\volume information\catalog.wci and that the index
>>>> will be automatically restored.
>>>>
>>>> 4126
>>>>
>>>> A limpar os metadados danificados do índice de conteúdo em
>>>> c:\system\volume information\catalog.wci. O índice será automaticamente
>>>> restaurado através da repetição da filtragem de todos os documentos.
>>>>
>>>> Para mais informações, consulte o 'Centro de ajuda e suporte' em
>>>>
>>>> »go.microsoft.com/fwlink/events.asp.
>>>>
>>>>
>>>> ---------------------------------------------------------------------------------------------
>>>>
>>>>
>>>> Information 4138
>>>>
>>>> The system detected damaged index in the component Crash during the
>>>> scan of the catalogue c:\sSystemVolume Information\catalog.wci
>>>>
>>>> and then gives information
>>>> -------------------------------
>>>>
>>>> Foram detectados danos do índice de conteúdo no componente Crash during
>>>> scan do catálogo c:\system volume information\catalog.wci. O rastreio
>>>> da pilha é 0x7DA421C8
>>>> 0x7DA55594
>>>> 0x7DA55BEE
>>>> 0x7DA6D4A7
>>>> 0x7DAB265B
>>>> 0x7DAB26C6
>>>> 0x7DA6C1A7
>>>> 0x7DA69D6A
>>>> 0x7DA720E6
>>>> 0x7DA74368
>>>> 0x7DA74546
>>>> 0x7DA6CA40
>>>> 0x7DA68BA6
>>>> 0x77DBB48B
>>>> 0x7C80B50B
>>>>
>>>> --------------------------
>>>>
>>>> Could someone help me with what I should to sort this problem out?
>>>>
>>>> Thank you very much
>>>>
>>>>
>>>> Jorge
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Bert Kinney
August 7th 06, 04:12 PM
Hi Peter,

The catalog.wci folder located within the System Volume Information
folder is where the Indexing Service stores it's data. By default the
Indexing Service is turned off in Windows XP. In Windows MCE Indexing is
turned on. If this is a home computer there is no need to have Indexing
turned on, and I would suggest turning it off.

To turn off the Indexing Service.

Go to Start - Run – and type the following command then press OK.

services.msc

Scroll down to and double click: Indexing Service
Click the Stop button
In the Startup Type field select Disabled, then click Apply then OK
After you restart your machine it will stay disabled.

Reboot the system and see if the error is gone.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org


"Peter" wrote
>I am getting, every time I power up the laptop, error 4126, with
>Information 4138 coming before but at the same time.
>
> My XP Home Ed. is in Portuguese so I have to try and translate what it
> says but I will paste the info below anyway.
>
> 4126 below says something about cleaning damaged metadata from the
> index in c:\system\volume information\catalog.wci and that the index
> will be automatically restored.

Peter
August 7th 06, 04:24 PM
Thank you Bert, I will do that.

But that way the index never gets sorted out as EventViewer keeps telling me
that it will automatically sort it out but comes back afterwards saying that
the errors are still there. And I would like to know what is or has caused
this.



Error 4138

Foram detectados danos do índice de conteúdo no componente
CI-RcovStorageObj1 do catálogo c:\system volume information\catalog.wci. O
rastreio da pilha é 0x7DA421C8

0x7DA4C61C

0x7DA43593

0x7DA8F0A9

0x7DA8F1D8

0x7DA8633C

0x7DA86F63

0x7DA87345

0x7DA414A8

0x7C80B50B





Peter

"Bert Kinney" > escreveu na mensagem
...
> Hi Peter,
>
> The catalog.wci folder located within the System Volume Information
> folder is where the Indexing Service stores it's data. By default the
> Indexing Service is turned off in Windows XP. In Windows MCE Indexing is
> turned on. If this is a home computer there is no need to have Indexing
> turned on, and I would suggest turning it off.
>
> To turn off the Indexing Service.
>
> Go to Start - Run - and type the following command then press OK.
>
> services.msc
>
> Scroll down to and double click: Indexing Service
> Click the Stop button
> In the Startup Type field select Disabled, then click Apply then OK
> After you restart your machine it will stay disabled.
>
> Reboot the system and see if the error is gone.
>
> --
> Regards,
> Bert Kinney MS-MVP Shell/User
> http://bertk.mvps.org
> Member: http://dts-l.org
>
>
> "Peter" wrote
>>I am getting, every time I power up the laptop, error 4126, with
>>Information 4138 coming before but at the same time.
>>
>> My XP Home Ed. is in Portuguese so I have to try and translate what it
>> says but I will paste the info below anyway.
>>
>> 4126 below says something about cleaning damaged metadata from the index
>> in c:\system\volume information\catalog.wci and that the index will be
>> automatically restored.
>
>

Bert Kinney
August 7th 06, 05:22 PM
If the error goes away, then you will know it was corruption in
Indexing.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org

"Peter" wrote
> Thank you Bert, I will do that.
>
> But that way the index never gets sorted out as EventViewer keeps
> telling me that it will automatically sort it out but comes back
> afterwards saying that the errors are still there. And I would like
> to know what is or has caused this.
>
> "Bert Kinney" wrote:
>> Hi Peter,
>>
>> The catalog.wci folder located within the System Volume Information
>> folder is where the Indexing Service stores it's data. By default the
>> Indexing Service is turned off in Windows XP. In Windows MCE Indexing
>> is turned on. If this is a home computer there is no need to have
>> Indexing turned on, and I would suggest turning it off.
>>
>> To turn off the Indexing Service.
>>
>> Go to Start - Run - and type the following command then press OK.
>>
>> services.msc
>>
>> Scroll down to and double click: Indexing Service
>> Click the Stop button
>> In the Startup Type field select Disabled, then click Apply then OK
>> After you restart your machine it will stay disabled.
>>
>> Reboot the system and see if the error is gone.
>>
>> --
>> Regards,
>> Bert Kinney MS-MVP Shell/User
>> http://bertk.mvps.org
>> Member: http://dts-l.org
>>
>>
>> "Peter" wrote
>>>I am getting, every time I power up the laptop, error 4126, with
>>>Information 4138 coming before but at the same time.
>>>
>>> My XP Home Ed. is in Portuguese so I have to try and translate what
>>> it says but I will paste the info below anyway.
>>>
>>> 4126 below says something about cleaning damaged metadata from the
>>> index in c:\system\volume information\catalog.wci and that the index
>>> will be automatically restored.

Peter
August 7th 06, 05:39 PM
Let me give you a little more information:

Every time I start the laptop, the Event Viewer/Applications after 2 entries for McAfee (Mclog event 5000/System; SecurityCenter 1800/ N/D) 7 minutes later comes up with information 4138 and then error 4126 as already described in earlier post.

Then, immediately afterwards I get information 4137 and twice information 4144; and a minute later 4138

4137 says:


O índice de conteúdo foi iniciado para o catálogo c:\system volume information\catalog.wci.

index was started for catalogue...

4144 says:

Foi adicionado o âmbito c:\documents and settings\ ao índice.

It was added...

and again 4144:

Foi adicionado o âmbito c:\ ao índice.

It was added...

4138
It was dedtected damage to the component ....
Foram detectados danos do índice de conteúdo no componente CI-RcovStorageObj1 do catálogo c:\system volume information\catalog.wci. O rastreio da pilha é 0x7DA421C8

0x7DA4C61C

0x7DA43593

0x7DA8F0A9

0x7DA8F1D8

0x7DA8633C

0x7DA86F01

0x7DA87345

0x7DA414A8

0x7C80B50B





Does this mean anything to you?



Peter









..

"Bert Kinney" > escreveu na mensagem ...

> If the error goes away, then you will know it was corruption in
> Indexing.
>
> --
> Regards,
> Bert Kinney MS-MVP Shell/User
> http://bertk.mvps.org
> Member: http://dts-l.org
>
> "Peter" wrote
>> Thank you Bert, I will do that.
>>
>> But that way the index never gets sorted out as EventViewer keeps
>> telling me that it will automatically sort it out but comes back
>> afterwards saying that the errors are still there. And I would like
>> to know what is or has caused this.
>>
>> "Bert Kinney" wrote:
>>> Hi Peter,
>>>
>>> The catalog.wci folder located within the System Volume Information
>>> folder is where the Indexing Service stores it's data. By default the
>>> Indexing Service is turned off in Windows XP. In Windows MCE Indexing
>>> is turned on. If this is a home computer there is no need to have
>>> Indexing turned on, and I would suggest turning it off.
>>>
>>> To turn off the Indexing Service.
>>>
>>> Go to Start - Run - and type the following command then press OK.
>>>
>>> services.msc
>>>
>>> Scroll down to and double click: Indexing Service
>>> Click the Stop button
>>> In the Startup Type field select Disabled, then click Apply then OK
>>> After you restart your machine it will stay disabled.
>>>
>>> Reboot the system and see if the error is gone.
>>>
>>> --
>>> Regards,
>>> Bert Kinney MS-MVP Shell/User
>>> http://bertk.mvps.org
>>> Member: http://dts-l.org
>>>
>>>
>>> "Peter" wrote
>>>>I am getting, every time I power up the laptop, error 4126, with
>>>>Information 4138 coming before but at the same time.
>>>>
>>>> My XP Home Ed. is in Portuguese so I have to try and translate what
>>>> it says but I will paste the info below anyway.
>>>>
>>>> 4126 below says something about cleaning damaged metadata from the
>>>> index in c:\system\volume information\catalog.wci and that the index
>>>> will be automatically restored.
>
>

Bert Kinney
August 7th 06, 07:43 PM
It means there's corruption in the Indexing, or MacAfee is corrupt.

I would suggest getting rid of both. Indexing is of no use to the home
user, and MacAfee is a piece of junk.

A better alternative is Avast antivirus.
avast! 4 Home Edition Download - Free antivirus software download
http://www.avast.com/eng/download-avast-home.html

Virus and Spyware removal and prevention steps:
http://bertk.mvps.org/html/spyware.html

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org

"Peter" wrote
Let me give you a little more information:

Every time I start the laptop, the Event Viewer/Applications after 2
entries for McAfee (Mclog event 5000/System; SecurityCenter 1800/ N/D) 7
minutes later comes up with information 4138 and then error 4126 as
already described in earlier post.

Then, immediately afterwards I get information 4137 and twice
information 4144; and a minute later 4138

4137 says:


O índice de conteúdo foi iniciado para o catálogo c:\system volume
information\catalog.wci.
index was started for catalogue...
4144 says:
Foi adicionado o âmbito c:\documents and settings\ ao índice.
It was added...
and again 4144:
Foi adicionado o âmbito c:\ ao índice.
It was added...

4138
It was dedtected damage to the component ....
Foram detectados danos do índice de conteúdo no componente
CI-RcovStorageObj1 do catálogo c:\system volume information\catalog.wci.
O rastreio da pilha é 0x7DA421C8
0x7DA4C61C
0x7DA43593
0x7DA8F0A9
0x7DA8F1D8
0x7DA8633C
0x7DA86F01
0x7DA87345
0x7DA414A8
0x7C80B50B


Does this mean anything to you?

Peter




..
"Bert Kinney" > escreveu na mensagem
...
> If the error goes away, then you will know it was corruption in
> Indexing.
>
> --
> Regards,
> Bert Kinney MS-MVP Shell/User
> http://bertk.mvps.org
> Member: http://dts-l.org
>
> "Peter" wrote
>> Thank you Bert, I will do that.
>>
>> But that way the index never gets sorted out as EventViewer keeps
>> telling me that it will automatically sort it out but comes back
>> afterwards saying that the errors are still there. And I would like
>> to know what is or has caused this.
>>
>> "Bert Kinney" wrote:
>>> Hi Peter,
>>>
>>> The catalog.wci folder located within the System Volume
>>> Information
>>> folder is where the Indexing Service stores it's data. By default
>>> the
>>> Indexing Service is turned off in Windows XP. In Windows MCE
>>> Indexing
>>> is turned on. If this is a home computer there is no need to have
>>> Indexing turned on, and I would suggest turning it off.
>>>
>>> To turn off the Indexing Service.
>>>
>>> Go to Start - Run - and type the following command then press OK.
>>>
>>> services.msc
>>>
>>> Scroll down to and double click: Indexing Service
>>> Click the Stop button
>>> In the Startup Type field select Disabled, then click Apply then OK
>>> After you restart your machine it will stay disabled.
>>>
>>> Reboot the system and see if the error is gone.
>>>
>>> --
>>> Regards,
>>> Bert Kinney MS-MVP Shell/User
>>> http://bertk.mvps.org
>>> Member: http://dts-l.org
>>>
>>>
>>> "Peter" wrote
>>>>I am getting, every time I power up the laptop, error 4126, with
>>>>Information 4138 coming before but at the same time.
>>>>
>>>> My XP Home Ed. is in Portuguese so I have to try and translate what
>>>> it says but I will paste the info below anyway.
>>>>
>>>> 4126 below says something about cleaning damaged metadata from the
>>>> index in c:\system\volume information\catalog.wci and that the
>>>> index
>>>> will be automatically restored.
>
>

Google