event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu

tried sfc but result was ok

Windows Resource Protection did not find any integrity violations.

same for same for the verifier.dll.

I also get quite a number of event 10 ( I am using vista Ultimate 64 on Core

2 quad)

Log Name: Microsoft-Windows-CodeIntegrity/Operational

Source: Microsoft-Windows-CodeIntegrity

Date: 09-05-25 11:46:43P

Event ID: 3002

Task Category: (1)

Level: Error

Keywords:

User: MyPc1\Administrator

Computer: MyPc1

Description:

Code Integrity is unable to verify the image integrity of the file

\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set

of per-page image hashes could not be found on the system.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-CodeIntegrity"

Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />

<EventID>3002</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>1</Task>

<Opcode>102</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />

<EventRecordID>4</EventRecordID>

<Correlation />

<Execution ProcessID="3472" ThreadID="3476" />

<Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>

<Computer>MyPc1</Computer>

<Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />

</System>

<EventData>

<Data Name="FileNameLength">58</Data>

<Data

Name="FileNameBuffer">\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys</Data>

</EventData>

</Event>

so what can I do?

the code integrity error was found on May 25

I also got a fiar numnber of event 10 wmi

also I have been getting a lot of this:

Log Name: Application

Source: Microsoft-Windows-WMI

Date: 09-07-11 12:06:53A

Event ID: 10

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: MyPc1

Description:

Event filter with query "SELECT FROM __InstanceModificationEvent WITHIN 60

WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage <span style="color:blue">

> 99" could not be reactivated in namespace "//./root/CIMV2" because of </span>

error 0x80041003. Events cannot be delivered through this filter until the

problem is corrected.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-WMI"

Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />

<EventID Qualifiers="49152">10</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />

<EventRecordID>13523</EventRecordID>

<Correlation />

<Execution ProcessID="0" ThreadID="0" />

<Channel>Application</Channel>

<Computer>MyPc1</Computer>

<Security />

</System>

<EventData>

<Data>//./root/CIMV2</Data>

<Data>SELECT FROM __InstanceModificationEvent WITHIN 60 WHERE

TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage >

99</Data>

<Data>0x80041003</Data>

</EventData>

</Event>

trying to download office 2007 stuff

exchange server 2007 std with sp1

Internet Security and Acceleration Server Std Ed for Partners 4/29/2009

SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009

SharePoint Server 2007 Service Pack 1 5/31/2009

Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009

Windows Vista Business and Ultimate Editions for Partners 5/31/2009

( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)

Your issue as per Event ID 10

http://support.microsoft.com/kb/950375/en-us/

--

Peter

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

"MSDN newsgroup" <NoOne@allMailSunken.net> wrote in message

news:ObEVZYoAKHA.4016@TK2MSFTNGP02.phx.gbl...<span style="color:blue">

> tried sfc but result was ok

>

> Windows Resource Protection did not find any integrity violations.

>

> same for same for the verifier.dll.

>

>

>

> I also get quite a number of event 10 ( I am using vista Ultimate 64 on Core 2

> quad)

>

> Log Name: Microsoft-Windows-CodeIntegrity/Operational

> Source: Microsoft-Windows-CodeIntegrity

> Date: 09-05-25 11:46:43P

> Event ID: 3002

> Task Category: (1)

> Level: Error

> Keywords:

> User: MyPc1Administrator

> Computer: MyPc1

> Description:

> Code Integrity is unable to verify the image integrity of the file

> DeviceHarddiskVolume1WindowsSystem32driverstcpip.sys because the set of

> per-page image hashes could not be found on the system.

> Event Xml:

> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

> <System>

> <Provider Name="Microsoft-Windows-CodeIntegrity"

> Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />

> <EventID>3002</EventID>

> <Version>0</Version>

> <Level>2</Level>

> <Task>1</Task>

> <Opcode>102</Opcode>

> <Keywords>0x8000000000000000</Keywords>

> <TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />

> <EventRecordID>4</EventRecordID>

> <Correlation />

> <Execution ProcessID="3472" ThreadID="3476" />

> <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>

> <Computer>MyPc1</Computer>

> <Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />

> </System>

> <EventData>

> <Data Name="FileNameLength">58</Data>

> <Data

> Name="FileNameBuffer">DeviceHarddiskVolume1WindowsSystem32driverstcpip.sys</Data>

> </EventData>

> </Event>

>

>

> so what can I do?

> the code integrity error was found on May 25

>

>

> I also got a fiar numnber of event 10 wmi

> also I have been getting a lot of this:

>

> Log Name: Application

> Source: Microsoft-Windows-WMI

> Date: 09-07-11 12:06:53A

> Event ID: 10

> Task Category: None

> Level: Error

> Keywords: Classic

> User: N/A

> Computer: MyPc1

> Description:

> Event filter with query "SELECT FROM __InstanceModificationEvent WITHIN 60 WHERE

> TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage<span style="color:green">

> > 99" could not be reactivated in namespace "//./root/CIMV2" because of</span>

> error 0x80041003. Events cannot be delivered through this filter until the problem

> is corrected.

> Event Xml:

> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

> <System>

> <Provider Name="Microsoft-Windows-WMI"

> Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />

> <EventID Qualifiers="49152">10</EventID>

> <Version>0</Version>

> <Level>2</Level>

> <Task>0</Task>

> <Opcode>0</Opcode>

> <Keywords>0x80000000000000</Keywords>

> <TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />

> <EventRecordID>13523</EventRecordID>

> <Correlation />

> <Execution ProcessID="0" ThreadID="0" />

> <Channel>Application</Channel>

> <Computer>MyPc1</Computer>

> <Security />

> </System>

> <EventData>

> <Data>//./root/CIMV2</Data>

> <Data>SELECT FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance

> ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>

> <Data>0x80041003</Data>

> </EventData>

> </Event>

> trying to download office 2007 stuff

> exchange server 2007 std with sp1

> Internet Security and Acceleration Server Std Ed for Partners 4/29/2009

> SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009

> SharePoint Server 2007 Service Pack 1 5/31/2009

> Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009

> Windows Vista Business and Ultimate Editions for Partners 5/31/2009

>

> ( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)

> </span>