The event should look something like this.
Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 2/29/2004
Time: 11:44:36 PM
User: N/A
Computer: ******
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is WinXPSP2.
A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 127 unused index entries from index $SII of file 0x9.
Cleaning up 127 unused index entries from index $SDH of file 0x9.
Cleaning up 127 unused security descriptors.
10265503 KB total disk space.
4754412 KB in 32877 files.
10060 KB in 1211 indexes.
0 KB in bad sectors.
89135 KB in use by the system.
53376 KB occupied by the log file.
5411896 KB available on disk.
4096 bytes in each allocation unit.
2566375 total allocation units on disk.
1352974 allocation units available on disk.
Internal Info:
60 88 00 00 33 85 00 00 62 be 00 00 00 00 00 00 `...3...b.......
45 00 00 00 00 00 00 00 9c 01 00 00 00 00 00 00 E...............
ae a6 8f 02 00 00 00 00 62 5a b1 0f 00 00 00 00 ........bZ......
34 b5 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 4...............
00 00 00 00 00 00 00 00 f6 51 14 1c 00 00 00 00 .........Q......
90 12 07 ce 00 00 00 00 90 12 07 ce 00 00 00 00 ................
6d 80 00 00 00 00 00 00 00 b0 2f 22 01 00 00 00 m........./"....
Windows has finished checking your disk.
Please wait while your computer restarts.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.