Greetings. I've recently noticed that Windows XP (SP2) has been logging the following after I performed a normal defrag and scandisk:
Event Type: Error / Event Source: sr / Event Category: None / Event ID: 1 / Date: 9/5/2009 / Time: 9:28:04 AM Description: The System Restore filter encountered the unexpected error '0xC0000043' [or '0xC0000243'] while processing the file 'SrtETmp' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
In the past when this occurred, I simply manually created a restore point and the error would cease. Now, however, it appears sometimes regardless (not every boot). I tried creating a restore point with "tamper protection" off, but same results. I've seen other postings on this issues, but no definite resolution. Note: I'm not trying to do a system restore but am concerned that my restore points are useless, and that system restore in general is not functioning due to trying to back up a protected Norton directory (srtETmp). This shouldn't happen, right. Any ideas? Thanks.
Yogesh, I get the same error , with Nis 2009. It’s an ongoing proble,=m > You just have to create a manual restore point, until it happens again. Geoff Hickling
I also must urge upgrading to the latest version of Norton. I would also recommend downloading and installing Windows XP SP3. Please shut down system restore and run a full system scan with your Norton product to determine if malware is involved; if it is and you need help with its removal contact a forum guru. If your system turns up clean run from the command prompt chkdsk /r follow the onscreen prompts to schedule a scan to occur when Windows is restarted. Exit the command prompt and restart the system and wait for the scan to complete. Once back into Windows desktop right-click on the My Computer icon (it may not be on the desktop use the one on the start menu), left click on manage. Click the plus sign next to event viewer and select Application. Click on the View toolbar and select Filter. In the drop box beside Event Source scroll to and select Winlogon then click ok. The log should now show Winlogon events. Right click the first one in the list and select properties, click on the double paper icon to copy the information to the clipboard and the open up a Word processing program the press Ctrl and V simultaneously to paste the copied information into the document. Save the file with a name like scandisk log or check disk log. And add to your post using the add attachments link below the post link. Type in any relevant information and complete your post. This will help determine if the problem is hard disk related or not. After you have finished try reactivating system restore and see what happens; then let us know.
Hi and thanks for helpful advice. Oddly, the problem seems to have abated (for now?); I've had 7 or 8 clean boots with out errors. The only thing I did was to clean out my desktop (there were some large wave files and other clutter); I moved this stuff to an external hd and the system restore problem seems to have ceased. My theory is that since the desktop files are part of my profile in documents and settings, Norton scans these at boot (since an infection , i.e. trojan, would likely lie there in the profile), and perhaps since there were several large (>1 gb) files, it took a while to scan these at boot. So, System Restore would look at the srtETmp folder while it is active and thus be unable to back up the file. Taking bytes out of the desktop seems perhaps shortens the scan time letting system restore work. I could be wrong on this, but maybe?
Anyway, I'll repost if the problem recurs. Meanwhile, thanks again.
Greetings. I've recently noticed that Windows XP (SP2) has been logging the following after I performed a normal defrag and scandisk:
Event Type: Error / Event Source: sr / Event Category: None / Event ID: 1 / Date: 9/5/2009 / Time: 9:28:04 AM Description: The System Restore filter encountered the unexpected error '0xC0000043' [or '0xC0000243'] while processing the file 'SrtETmp' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
In the past when this occurred, I simply manually created a restore point and the error would cease. Now, however, it appears sometimes regardless (not every boot). I tried creating a restore point with "tamper protection" off, but same results. I've seen other postings on this issues, but no definite resolution. Note: I'm not trying to do a system restore but am concerned that my restore points are useless, and that system restore in general is not functioning due to trying to back up a protected Norton directory (srtETmp). This shouldn't happen, right. Any ideas? Thanks.