Added Vista+ corollary for event ID 646 and 647