fixed ntfs event store