Windows 10: Registry Hive Recovered: Event ID 5 - Kernel General can't open apps

Went to wake up my PC out of sleep mode and I got a blue screen. Checked event viewer and found this error:"{Registry Hive Recovered} Registry hive file: '\SystemRoot\System32\Config\SOFTWARE' was corrupted and it has been recovered. Some data might have been lost."Didn't think much of it until I couldn't open certain apps. Windows couldn't find a target destination for some of my shortcuts. I tried uninstalling and reinstalling these apps to no success.

:)

 

Event ID 5 Kernel-General error in Event Viewer


Welcome,
I have a problem. Every day I have this error in event viewer, system log:
{Registry Hive Recovered} Registry hive (file):\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\S-1-5-21-4089430802-3287748835-2730757419-1001-0-ntuser.dat was corrupted and it has been recovered. Some data might have been lost.
This error repeats every day at about 3:00AM.
Maybe someone could help me? Thanks in advance.

 

Related to Event Viewer activities like EVENT ID 16, KERNEL GENERAL; and with a lots of EVENT 5379, Microsoft Windows Security Auditing....

So, my PC was in sleep mode with 55 percent battery. I resumed the Pc from sleep after some time and i noticed that the PC battery was drained to 5 percent. I thought there must be some problem, i checked event viewer and noticed some processing going on in my pc when it was in sleep. The Events were like this....

* Two or Three EVENT ID 16, KERNEL GENERAL; Category None; Description: The access history in hive\??\.............

* Two or Three EVENT ID 16, KERNEL GENERAL; Category None; Description: The access history in hive\SystemRoot\.............

* A lots of (thousands of) EVENT 5379, Microsoft Windows Security Auditing, Category: User Account Management

* EVENT 4799, Microsoft Windows Security Auditing, Category: Security Group Management. Description: A security-enabled local group membership was enumerated.

* EVENT 4798, Microsoft Windows Security Auditing, Category: Security Group Management. Description: A user's local group membership was enumerated.

* Some of LOGON and SPECIAL LOGON security events with EVENT ID 4624 and 4672 respectively.

What are these events? Are these events safe to occur or some malware kind of things?

 

Kernel-Power event id 41. BugcheckCode 0

Hello,

Thank you for writing to Microsoft Community Forums.

In-order to get more clarity on this issue and to assist you with appropriate troubleshooting steps, reply with answers to the below questions:

1. Are you aware of any changes made on your PC, prior to this issue?
   
2. Is this issue specific while playing a particular game?
   
3. Which edition of Windows are you currently using?
   

A Kernel Power Event 41 can occur in the following scenarios.

Scenario 1: The computer restarts, and there is a Stop error BugcheckCode in the event data.

Scenario 2: The computer is shut down by pressing and holding the power button.

Scenario 3: The system randomly restarts and no Stop error BugcheckCode is listed, or the computer is completely unresponsive (hard hang).

I suggest you refer the article on Kernel
Power Event ID 41 and follow the steps for the scenario that is causing this error on your PC.

Additionally, you can refer the article on Windows
Kernel event ID 41 error "The system has rebooted without cleanly shutting down first" in Windows
and check if that helps.

Regards,

Sandeep Kumar M

Microsoft Community – Moderator