1.    10 Oct 2015 #1
    Join Date : Oct 2015
    Posts : 4
    Windows 10 x64

    Event ID 5 Kernel-General error in Event Viewer


    Welcome,
    I have a problem. Every day I have this error in event viewer, system log:
    {Registry Hive Recovered} Registry hive (file):\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-4089430802-3287748835-2730757419-1001-0-ntuser.dat was corrupted and it has been recovered. Some data might have been lost.
    This error repeats every day at about 3:00AM.
    Maybe someone could help me? Thanks in advance.
      My ComputerSystem Spec
  2.    10 Oct 2015 #2
    Join Date : Aug 2015
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)

    Hi:

    Just curious:
    1. Are you running MBAM Premium (paid version), or Free?
    2. If it's Premium, what time does your scheduled daily Threat scan run? (Assuming you are running a daily Threat scan, which is the default scan schedule.) (Dashboard > Settings > Automated Scheduling > Threat Scan > Edit)


    Thanks,

    MM
      My ComputerSystem Spec
  3.    10 Oct 2015 #3
    Join Date : Oct 2015
    Posts : 4
    Windows 10 x64
    Thread Starter

    1. Yes it's Premium version.
    2. Daily scan is scheduled to run at 3:AM.
      My ComputerSystem Spec
  4.    10 Oct 2015 #4
    Join Date : Aug 2015
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)

    Quote Originally Posted by Coroner View Post
    1. Yes it's Premium version.
    2. Daily scan is scheduled to run at 3:AM.
    That's what I suspected.

    Next questions:
    1. Do the time stamps on the Windows Error log correspond to the MBAM Scan times?
    2. Did you temporarily uninstall MBAM before upgrading to Win10, or did you leave MBAM installed during the Win10 upgrade?
    3. When you open Dashboard > History > Application logs, are your scheduled ~3 AM Threat scans running (you can double-click on one to view it to see if it's a "complete" scan log")?


    Thanks,

    MM
      My ComputerSystem Spec
  5.    10 Oct 2015 #5
    Join Date : Oct 2015
    Posts : 4
    Windows 10 x64
    Thread Starter

    1. Time stamps corresponding to the MBAM scan times.
    2. I didn't uninstall MBAM before upgrade.
    3. I can see complete scan logs in history with no threats detected.
      My ComputerSystem Spec
  6.    10 Oct 2015 #6
    Join Date : Aug 2015
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)

    Thanks.

    That's also what I suspected.

    OK, I don't (yet) run Win10, and I don't have a test box or VM.
    So I don't know if what you're seeing is "normal" or not (as you know, the Windows Event logs can make one crazy with 1000000s of unimportant "errors" and entries).

    I do know this:
    • We aren't seeing similar reports at the MBAM forum (but few basic home users would probably look for errors, if they think the program is working properly and it doesn't mean that what you report is not real).
    • It is "best practice" and was recommended even by M$ to temporarily uninstall one's security programs prior to an on-top Win10 upgrade. Something may have "broken" in MBAM during the on-top OS upgrade.


    So, I have 2 suggestions for how to proceed:


    1. Option 1: Perform a proper "clean reinstall" of MBAM following this tutorial carefully, and being sure to reboot both after running the removal tool and again after the reinstall: MBAM Clean Removal Process 2x
      1. NOTE: You need to have your Premium ID/Key available before you start, but the entire process will only take about 5-10 minutes, or less.
      2. You could then monitor the situation for a few days to see if this resolves the error.

    2. Option 2: Head over to the MBAM forum and start a new post there, where we can collect some basic diagnostic logs for the QA team.
      1. I would suggest doing this BEFORE attempting the clean reinstall, so that we can capture whatever is happening with the *current* installation.
      2. You could then attempt the clean reinstall after that.



    It's up to you.
    If the program seems to be working OK, the error might be unimportant.
    But it's hard to say without a bit more data.

    Thanks,

    MM (@daledoc1 at MBAM forum)
      My ComputerSystem Spec
  7.    10 Oct 2015 #7
    Join Date : Oct 2015
    Posts : 4
    Windows 10 x64
    Thread Starter

    OK, thanks for tips. I'll try option 2 first.

    Many thanks,
      My ComputerSystem Spec
  8.    10 Oct 2015 #8
    Join Date : Aug 2015
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)

    Great.

    I'll see you over there.

    Thanks,

    MM
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Performance & Maintenance Clear All Event Logs in Event Viewer in Windows
How to Clear All Event Logs in Event Viewer in Windows Event Viewer is a tool that displays detailed information as event logs about significant events on your PC. Event logs are special files that record significant events on your PC, such as...
Tutorials
Error 7001 in Event Viewer
Hi, Recently upgraded a second machine from W 7 x64 Home to W 10 x64 Home, upgrade ran without issues, now W 10 run very smooth at the exception of 2 constant errors in Event Viewer, the first is about "SyncHost session terminated unexpectedly"...
Performance & Maintenance
Event 441, Kernel-PnP
Hi All, This problem shows when i've upgraded to WIndows 10, due to this problem. i've revert back to windows 7. This was not encountered while using windows 7. It seems like the system was not able to detect the audio output even thou its...
BSOD Crashes and Debugging
BSOD Kernel event ID 41 error and print screen freeze
Hello Hello, I'm having some annoying issue's I recently clean installed window's 10 Specs I have MSI z87 mpower max mobo
BSOD Crashes and Debugging
Worried about event viewer errors
hi guys managed to install windows 10 and everything seems to be working great. I looked in event viewer and I'm getting loads of errors, the same over and over. one is that keeps coming up is kernel-power event id 137 The system...
Performance & Maintenance
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 01:54.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums