Windows 10: Volume change journal

Event viewer has posted the following:Volume change journal is not active 0x8008049b, event id 3079.Have run sfc, DISM, chkdsk, and all ok. No problems.Am I being unduly concerned?

:)

 

Old Windows Journal

Hi,

It is possible that Windows Journal was removed from certain versions of the Windows operating system due to corrupted system files. To provide you the accurate resolution, we'd like to gather more information:

• Have you made any recent changes prior to this issue?
• Are you getting any error messages?
• Which build and version of Windows 10 are you using?
• What troubleshooting steps have you done so far?

Meanwhile, we suggest that you follow the steps in article on how you can install Windows Journal on
versions of Windows from which it was removed.

Keep us posted if you need additional help.

 

Windows Journal functionality issue

Hello Werner,

Thank you for posting your concern in Microsoft Community and welcome to the Windows 10 Family.

Before troubleshooting any further from here, I suggest you to check if the latest version of Windows Journal Writer application is installed in your computer.

If it still does not help, I suggest you to check if you to check if running the program in Compatibility mode helps to resolve the issue. Follow the below steps.

• 
  Right–click the icon of the program.
  
• 
  Click Properties.
  
• 
  Click Compatibility tab.
  
• 
  To run the program for a different version of Windows, check the
  Run this program in compatibility mode for box and choose from the list.
  
• 
  Click Apply.
  
• 
  Click Ok.
  

Write to us with the updated information for us to be able to assist you further.

Thank you.

 

Windows Journal removal

Hi Gary:



I'm a Program Manager at Microsoft, and I may be able to answer some of your questions.



Windows 10 1511 refers to the version of Windows 10 you are running, which corresponds to the version number 10.0.10586. You can see the version 1511 reported by running winver.exe from the Run dialog (Windows+R) or a command prompt.



KB3161102 is the update which removes Journal from your system You'll know when it has been automatically installed when
you can no longer run Journal, or you see KB3161102 in your list of installed updates.



The best proactive thing you can do is download and install the KB3161102 package yourself by following the links in the article. After Windows Journal is removed, if needed, you can install the Journal application by following the steps in

KB3162655. The Journal application works the same as before, with two differences:

• You will see a warning about opening untrusted Journal files
• The Journal Note Writer has been removed. It allowed you to “Print to Journal” from other applications.

For information about the security issues with the current version of Journal, you can read the most recent security bulletin we issued for Journal,

MS16-056, to get an idea of the type of vulnerabilities we have patched to date. From that bulletin:

For an attack to be successful, this vulnerability requires that a user open a specially crafted Journal file with an affected version of Windows Journal. In an email attack scenario, an attacker could exploit the vulnerability
by sending a specially crafted Journal file to the user, and then convincing the user to open the file. The update addresses the vulnerability by modifying how Windows Journal parses Journal files.

In other words, if you open Journal files from untrusted sources, you can be exploited. These issues will not impact you if you are using the Journal application from KB3162655.

Lastly, we highly recommend all customers use OneNote moving forward. We are aware that converting existing Journal files to OneNote is difficult, and are investigating how we can make that transition easier for our customers.

Thanks

--Jon, MSFT