locked
Event viewer WinSS service RRS feed

  • Question

  • I've been browsing through my event viewer looking at the logs...and one of them is full of events from the WinSS service:
    Warning    5/30/2009 3:19:17 PM    WinSS    2004    Service
    Warning    5/30/2009 2:19:17 PM    WinSS    2004    Service
    Warning    5/30/2009 1:19:31 PM    WinSS    2004    Service
    Warning    5/30/2009 12:19:31 PM    WinSS    2004    Service
    Warning    5/30/2009 11:19:17 AM    WinSS    2004    Service
    Warning    5/30/2009 10:19:17 AM    WinSS    2004    Service
    Warning    5/30/2009 9:19:17 AM    WinSS    2004    Service

    as you can see....it's every hour, which is odd. The warning is:
    Communication Manager reports that handler component id ({458A8215-1969-420D-9D90-E62648DF0804}) for message id ({F14A2363-8D2C-4473-99D8-7674E2F409C6}) in category (SC) failed to process.  The data is the failure HRESULT.

    The XML code is:
    BODY{font:x-small 'Verdana';margin-right:1.5em} .c{cursor:hand} .b{color:red;font-family:'Courier New';font-weight:bold;text-decoration:none} .e{margin-left:1em;text-indent:-1em;margin-right:1em} .k{margin-left:1em;text-indent:-1em;margin-right:1em} .t{color:#990000} .xt{color:#990099} .ns{color:red} .dt{color:green} .m{color:blue} .tx{font-weight:bold} .db{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;border-left:1px solid #CCCCCC;font:small Courier} .di{font:small Courier} .d{color:blue} .pi{color:blue} .cb{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;font:small Courier;color:#888888} .ci{font:small Courier;color:#888888} PRE{margin:0px;display:inline}
    - < Event xmlns =" http://schemas.microsoft.com/win/2004/08/events/event " >
    - < System >
      < Provider Name =" WinSS " />
      < EventID Qualifiers =" 0 " > 2004 </ EventID >
      < Level > 3 </ Level >
      < Task > 1 </ Task >
      < Keywords > 0x80000000000000 </ Keywords >
      < TimeCreated SystemTime =" 2009-05-30T15:19:17.000Z " />
      < EventRecordID > 23681 </ EventRecordID >
      < Channel > Windows OneCare </ Channel >
      < Computer > Joe-M1710 </ Computer >
      < Security />
      </ System >
    - < EventData >
      < Data > {458A8215-1969-420D-9D90-E62648DF0804} </ Data >
      < Data > {F14A2363-8D2C-4473-99D8-7674E2F409C6} </ Data >
      < Data > SC </ Data >
      < Binary > 06FC5E8E </ Binary >
      </ EventData >
      </ Event >

    I'm not sure what exactly this warning is and is there a possible solution to stop it?


    I'm also getting another Error in the event viewer as:

    Log Name:      Application
    Source:        ESENT
    Date:          5/30/2009 3:45:30 PM
    Event ID:      474
    Task Category: Database Page Cache
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      Joe-M1710
    Description:
    C:\Program Files\Microsoft Windows OneCare Live\Database\WinSS_st.edb (2740) C:\Program Files\Microsoft Windows OneCare Live\Database\WinSS_st.edb: The database page read from the file "C:\Program Files\Microsoft Windows OneCare Live\Database\WinSS_st.edb" at offset 2580480 (0x0000000000276000) (database page 629 (0x275)) for 4096 (0x00001000) bytes failed verification due to a page checksum mismatch.  The expected checksum was 6255545165591944429 (0x56d0292f4f851ced) and the actual checksum was 5200311578471019161 (0x482b37d4041db299).  The read operation will fail with error -1018 (0xfffffc06).  If this condition persists then please restore the database from a previous backup.  This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="ESENT" />
        <EventID Qualifiers="0">474</EventID>
        <Level>2</Level>
        <Task>2</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-05-30T19:45:30.000Z" />
        <EventRecordID>47448</EventRecordID>
        <Channel>Application</Channel>
        <Computer>Joe-M1710</Computer>
        <Security />
      </System>
      <EventData>
        <Data>C:\Program Files\Microsoft Windows OneCare Live\Database\WinSS_st.edb</Data>
        <Data>2740</Data>
        <Data>C:\Program Files\Microsoft Windows OneCare Live\Database\WinSS_st.edb: </Data>
        <Data>C:\Program Files\Microsoft Windows OneCare Live\Database\WinSS_st.edb</Data>
        <Data>2580480 (0x0000000000276000)</Data>
        <Data>4096 (0x00001000)</Data>
        <Data>-1018 (0xfffffc06)</Data>
        <Data>6255545165591944429 (0x56d0292f4f851ced)</Data>
        <Data>5200311578471019161 (0x482b37d4041db299)</Data>
        <Data>629 (0x275)</Data>
      </EventData>
    </Event>


    If anyone has any solutions or descriptions for what these events are...it would be really helpful.  Thanks!
    Saturday, May 30, 2009 7:59 PM

Answers

All replies

  • The best I can offer is to completely reinstall OneCare to see if the problem goes away. If not, please contact support.
     

    How to reach support (FAQ) - http://social.microsoft.com/Forums/en-US/onecareinstallandactivate/thread/30400b52-7f26-4ba0-bc18-17e305329d90

     

    -steve


    Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum Moderator
    Sunday, May 31, 2009 3:12 AM
    Moderator
  • Is there a good guide i can follow for re-installing one-care?  The main concern would be the period when you pretty much without any protection (I assume there is a way to re-install without an internet connection).  Also dealing with previous backups.

     I'm going to unmark as an answer until I re-install Onecare and I will let you all know the progress of this issue
    Monday, June 1, 2009 2:07 PM
  • To remove OneCare, see this post:
    How to Uninstall Windows Live OneCare

    Make sure that you know the LiveID and password for your subscription - open OneCare, click on Help, About... The subscription ID is your LiveID that you will need to activate with after the reinstall.

    To install OneCare, you must be connected to the Internet. Go to http://onecare.live.com and install the trial. After the reboot, click subscribe in OneCare and sign in with your subscription LiveID to activate the install.

    When you remove OneCare the Windows Firewall is enabled, so you are protected as long as you are not concurrently surfing the web, reading emails, etc. Just install OneCare and your PC is safe during the process.

    The previous post is the answer in that if the reinstall does not resolve it, you will need to contact support. If you update this thread, we'll see it and respond as needed (the moderators, that is). We utilize the answer atttribute to see if a new question has been posed and in need of a reply.

    -steve
    Microsoft MVP Windows Live / Windows Live OneCare & Live Mesh Forum Moderator
    Monday, June 1, 2009 3:41 PM
    Moderator