Microsoft-Windows-StartupRepair

Event	Title	Channel	Sample	Rule
1001	Startup Repair successfully completed repairs.	System	N	N
1002	Startup Repair failed.	System	N	N
1101	The master boot record (MBR) was corrupt.	System	N	N
1102	The partition table was corrupt.	System	N	N
1103	The boot sector on the system partition was corrupt.	System	N	N
1104	The system volume was corrupt.	System	N	N
1105	Windows startup files were not found on the disk.	System	N	N
1106	A hard disk could not be found.	System	N	N
1107	A valid system partition was not found.	System	N	N
1108	The boot manager was missing.	System	N	N
1109	The boot manager was corrupt.	System	N	N
1110	The boot manager failed to find the Windows loader.	System	N	N
1112	The Windows loader was corrupt.	System	N	N
1113	The boot configuration data was corrupt.	System	N	N
1114	The boot configuration data was corrupt.	System	N	N
1115	The boot configuration data was missing.	System	N	N
1116	Windows could not detect the problem.	System	N	N
1117	A possible problem with hardware memory (RAM) might have prevented Windows from …	System	N	N
1118	Startup Repair tried several times but could not determine the cause of the …	System	N	N
1119	Failure during the installation of Windows.	System	N	N
1120	The following file necessary for Windows startup was missing: Info.	System	N	N
1121	The following file necessary for Windows startup was corrupt: Info.	System	N	N
1122	The registry hive was corrupt.	System	N	N
1123	Windows was unable to determine the problem.	System	N	N
1124	A recent driver installation or upgrade might have prevented Windows from …	System	N	N
1125	A software patch prevented the system from starting.	System	N	N
1126	An error on the hard disk prevented Windows from starting.	System	N	N
1127	An access control list (ACL) on the following file might have prevented Windows …	System	N	N
1128	Security settings on this computer prevented Windows from starting.	System	N	N
1129	Low disk space on this computer prevented Windows from starting.	System	N	N
1130	Windows could not recognize the system partition type.	System	N	N
1131	The boot configuration data was corrupt.	System	N	N
1132	This operating system version is not supported by Startup Repair.	System	N	N
1133	The computer firmware (BIOS) is not compatible with Windows.	System	N	N
1134	The boot sector code on the system partition was corrupt.	System	N	N
1135	Several files necessary for Windows startup were corrupt.	System	N	N
1136	This version of Startup Repair is not compatible with currently installed …	System	N	N
1137	Unspecified changes to system configuration might have caused the problem.	System	N	N
1138	The computer hard disk is encrypted using BitLocker Drive Encryption and could …	System	N	N
1139	The WIMBoot configuration file was corrupt.	System	N	N
1140	An in-progress package installation may be preventing Windows from starting.	System	N	N
1141	Last installed LCU may be preventing Windows from starting.	System	N	N
1142	An error is detected by Recovery plugin	Operational, System	N	N
1201	Repaired the master boot record (MBR).	System	N	N
1202	Reconstructed the partition table.	System	N	N
1203	Restored the boot sector from backup files.	System	N	N
1204	Repaired file system errors.	System	N	N
1205	Scheduled a hardware memory (RAM) test.	System	N	N
1206	Copied the following file from backup files: Info.	System	N	N
1207	Reconstructed boot configuration data.	System	N	N
1208	Restored system to an earlier restore point.	System	N	N
1209	Fixed access control list (ACL) on the following file: Info.	System	N	N
1210	Restored the registry from backup files.	System	N	N
1211	Fixed the CrashOnAuditFailure registry setting.	System	N	N
1212	Restored the boot sector code.	System	N	N
1213	Repaired the corrupted files from backup.	System	N	N
1214	Removed service start type overrides.	System	N	N
1215	Repaired the WIMBoot configuration file.	System	N	N
1216	Aborted all pending package installations.	System	N	N
1217	Uninstall latest LCU.	System	N	N
1218	Uninstall recently installed driver updates.	System	N	N
1219	Perform remediation from Recovery Plugins (local)	Operational, System	N	N
1220	Perform remediation from Recovery Plugins (cloud)	Operational, System	N	N

Event ID 1001: Startup Repair successfully completed repairs.

Channel: System

Fields #

Name	Description
`StartTime` FILETIME
`EndTime` FILETIME
`NumAttempts` UInt16
`NumRootCauses` UInt16
`LaunchType` UnicodeString

Event ID 1002: Startup Repair failed.

Channel: System

Fields #

Name	Description
`StartTime` FILETIME
`EndTime` FILETIME
`NumAttempts` UInt16
`NumRootCauses` UInt16
`LaunchType` UnicodeString

Event ID 1101: The master boot record (MBR) was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1102: The partition table was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1103: The boot sector on the system partition was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1104: The system volume was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1105: Windows startup files were not found on the disk.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1106: A hard disk could not be found.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1107: A valid system partition was not found.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1108: The boot manager was missing.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1109: The boot manager was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1110: The boot manager failed to find the Windows loader.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1112: The Windows loader was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1113: The boot configuration data was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1114: The boot configuration data was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1115: The boot configuration data was missing.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1116: Windows could not detect the problem.

Channel: System

Description

Windows could not detect the problem. The boot status indicated that Windows booted successfully.

Message #

Windows could not detect the problem. The boot status indicated that Windows booted successfully.

Fields #

Name	Description
`Info` UnicodeString

Event ID 1117: A possible problem with hardware memory (RAM) might have prevented Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1118: Startup Repair tried several times but could not determine the cause of the problem.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1119: Failure during the installation of Windows.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1120: The following file necessary for Windows startup was missing: Info.

Channel: System

Message #

The following file necessary for Windows startup was missing: %1

Fields #

Name	Description
`Info` UnicodeString

Event ID 1121: The following file necessary for Windows startup was corrupt: Info.

Channel: System

Message #

The following file necessary for Windows startup was corrupt: %1

Fields #

Name	Description
`Info` UnicodeString

Event ID 1122: The registry hive was corrupt.

Channel: System

Description

The registry hive was corrupt. Error information: Info.

Message #

The registry hive was corrupt. Error information: %1

Fields #

Name	Description
`Info` UnicodeString

Event ID 1123: Windows was unable to determine the problem.

Channel: System

Description

Windows was unable to determine the problem. Error code: Info.

Message #

Windows was unable to determine the problem. Error code: %1

Fields #

Name	Description
`Info` UnicodeString

Event ID 1124: A recent driver installation or upgrade might have prevented Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1125: A software patch prevented the system from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1126: An error on the hard disk prevented Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1127: An access control list (ACL) on the following file might have prevented Windows from starting : Info.

Channel: System

Message #

An access control list (ACL) on the following file might have prevented Windows from starting : %1

Fields #

Name	Description
`Info` UnicodeString

Event ID 1128: Security settings on this computer prevented Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1129: Low disk space on this computer prevented Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1130: Windows could not recognize the system partition type.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1131: The boot configuration data was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1132: This operating system version is not supported by Startup Repair.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1133: The computer firmware (BIOS) is not compatible with Windows.

Channel: System

Description

The computer firmware (BIOS) is not compatible with Windows. Contact your computer manufacturer for an update to the computer BIOS.

Message #

The computer firmware (BIOS) is not compatible with Windows. Contact your computer manufacturer for an update to the computer BIOS.

Fields #

Name	Description
`Info` UnicodeString

Event ID 1134: The boot sector code on the system partition was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1135: Several files necessary for Windows startup were corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1136: This version of Startup Repair is not compatible with currently installed updates to Windows.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1137: Unspecified changes to system configuration might have caused the problem.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1138: The computer hard disk is encrypted using BitLocker Drive Encryption and could not be unlocked.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1139: The WIMBoot configuration file was corrupt.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1140: An in-progress package installation may be preventing Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1141: Last installed LCU may be preventing Windows from starting.

Channel: System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1142: An error is detected by Recovery plugin

Channel: Operational, System

Fields #

Name	Description
`Info` UnicodeString

Event ID 1201: Repaired the master boot record (MBR).

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1202: Reconstructed the partition table.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1203: Restored the boot sector from backup files.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1204: Repaired file system errors.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1205: Scheduled a hardware memory (RAM) test.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1206: Copied the following file from backup files: Info.

Channel: System

Message #

Copied the following file from backup files: %2

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1207: Reconstructed boot configuration data.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1208: Restored system to an earlier restore point.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1209: Fixed access control list (ACL) on the following file: Info.

Channel: System

Message #

Fixed access control list (ACL) on the following file: %2

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1210: Restored the registry from backup files.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1211: Fixed the CrashOnAuditFailure registry setting.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1212: Restored the boot sector code.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1213: Repaired the corrupted files from backup.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1214: Removed service start type overrides.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1215: Repaired the WIMBoot configuration file.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1216: Aborted all pending package installations.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1217: Uninstall latest LCU.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1218: Uninstall recently installed driver updates.

Channel: System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1219: Perform remediation from Recovery Plugins (local)

Channel: Operational, System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Event ID 1220: Perform remediation from Recovery Plugins (cloud)

Channel: Operational, System

Fields #

Name	Description
`RepairStatus` UInt32
`Info` UnicodeString

Provenance

ETW provider GUID c914f0df-835a-4a22-8c70-732c9a80c634

Defined in reagent.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.3323, captured 2026-06-02 — Manifest XML pack, 2.0 MB