Solved

Event ID 5 Source: Kernel-General. Reg Hive Recovered \systemroot\system32\config\software

Posted on 2009-05-18
3
5,386 Views
Last Modified: 2013-11-29
Having an issue with system event log entry:

EventID: 5 Source: Kernel-General
"Registry hive recovered 'software' - corrupted and recovered.  Some data may have been lost."

From what I've search most similar issues like this resulted in a non-bootable system (BSOD).  My system is booting and running.  This event entry occurs everytime I logoff, reboot, and/or logon.  However, it may have contributed to a server crash we had about three months ago.  Is it still a corrupt profile??

Any help would be greatly appreciated!  Thanks in advanced.

WS 2008 SP1 64bit
SQL Server 2008 64bit
IIS 7.0
IE 7.0
0
Comment
Question by:pcl586
  • 2
3 Comments
 
LVL 41

Accepted Solution

by:
graye earned 500 total points
Comment Utility
Ouch....  
You'll need to see if you've got a "system restore point" or a backup with System State in order to get a valid Software hive.   There *is* a prototype Software hive that you can use to overwite the one you've got, but that means you'll have to reload practically every software package you've got over again.
It would be extremely helpful if you knew precisely the date/time of the last good boot (so you won't waste your time recovering an already busted registry hive).
0
 

Author Comment

by:pcl586
Comment Utility
graye

thanks for the response.  unfortunately (for me) we dont have a system restore point and if we did wouldnt know the exact time b/c this has been occuring for about two months now....Our ISP installed the OS and deployed all the security patches (about two months ago).  Suspecting something may have occurred after right after the all the patches.

Sounds like the safe bet would be a server rebuild to me...how much would you agree/disagree (in you opinion) to that??

thanks!
0
 
LVL 41

Expert Comment

by:graye
Comment Utility
Yeah, I'd agree that it makes the most sense to just do a reinstall....
Sorry about that
0

Featured Post

Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now