Re: event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu

M

MSDN newsgroup

Guest
"MSDN newsgroup" <NoOne@allMailSunken.net> wrote in message news:...<span style="color:blue">
> tried sfc but result was ok
>
> Windows Resource Protection did not find any integrity violations.
>
> same for same for the verifier.dll.
>
>
>
> I also get quite a number of event 10 ( I am using vista Ultimate 64 on
> Core 2 quad)
>
> Log Name: Microsoft-Windows-CodeIntegrity/Operational
> Source: Microsoft-Windows-CodeIntegrity
> Date: 09-05-25 11:46:43P
> Event ID: 3002
> Task Category: (1)
> Level: Error
> Keywords:
> User: MyPc1Administrator
> Computer: MyPc1
> Description:
> Code Integrity is unable to verify the image integrity of the file
> DeviceHarddiskVolume1WindowsSystem32driverstcpip.sys because the set
> of per-page image hashes could not be found on the system.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-CodeIntegrity"
> Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
> <EventID>3002</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>1</Task>
> <Opcode>102</Opcode>
> <Keywords>0x8000000000000000</Keywords>
> <TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
> <EventRecordID>4</EventRecordID>
> <Correlation />
> <Execution ProcessID="3472" ThreadID="3476" />
> <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
> <Computer>MyPc1</Computer>
> <Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
> </System>
> <EventData>
> <Data Name="FileNameLength">58</Data>
> <Data
> Name="FileNameBuffer">DeviceHarddiskVolume1WindowsSystem32driverstcpip.sys</Data>
> </EventData>
> </Event>
>
>
> so what can I do?
> the code integrity error was found on May 25
>
>
> I also got a fiar numnber of event 10 wmi
> also I have been getting a lot of this:
>
> Log Name: Application
> Source: Microsoft-Windows-WMI
> Date: 09-07-11 12:06:53A
> Event ID: 10
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: MyPc1
> Description:
> Event filter with query "SELECT FROM __InstanceModificationEvent WITHIN
> 60 WHERE TargetInstance ISA "Win32_Processor" AND
> TargetInstance.LoadPercentage<span style="color:green">
> > 99" could not be reactivated in namespace "//./root/CIMV2" because of</span>
> error 0x80041003. Events cannot be delivered through this filter until the
> problem is corrected.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-WMI"
> Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
> <EventID Qualifiers="49152">10</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
> <EventRecordID>13523</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>MyPc1</Computer>
> <Security />
> </System>
> <EventData>
> <Data>//./root/CIMV2</Data>
> <Data>SELECT FROM __InstanceModificationEvent WITHIN 60 WHERE
> TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> > 99</Data>
> <Data>0x80041003</Data>
> </EventData>
> </Event></span>
oops, sorry!
pls ignore the trying to stuff<span style="color:blue">
> trying to download office 2007 stuff
> exchange server 2007 std with sp1
> Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
> SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
> SharePoint Server 2007 Service Pack 1 5/31/2009
> Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
> Windows Vista Business and Ultimate Editions for Partners 5/31/2009
>
> ( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)
> </span>
 
On Sat, 11 Jul 2009 18:24:59 -0600, "MSDN newsgroup"
<NoOne@allMailSunken.net> wrote:
<span style="color:blue">
>
> "MSDN newsgroup" <NoOne@allMailSunken.net> wrote in message news:...<span style="color:green">
> > tried sfc but result was ok
> >
> > Windows Resource Protection did not find any integrity violations.
> >
> > same for same for the verifier.dll.
> >
> >
> >
> > I also get quite a number of event 10 ( I am using vista Ultimate 64 on
> > Core 2 quad)
> >
> > Log Name: Microsoft-Windows-CodeIntegrity/Operational
> > Source: Microsoft-Windows-CodeIntegrity
> > Date: 09-05-25 11:46:43P
> > Event ID: 3002
> > Task Category: (1)
> > Level: Error
> > Keywords:
> > User: MyPc1Administrator
> > Computer: MyPc1
> > Description:
> > Code Integrity is unable to verify the image integrity of the file
> > DeviceHarddiskVolume1WindowsSystem32driverstcpip.sys because the set
> > of per-page image hashes could not be found on the system.
> > Event Xml:
> > <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> > <System>
> > <Provider Name="Microsoft-Windows-CodeIntegrity"
> > Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
> > <EventID>3002</EventID>
> > <Version>0</Version>
> > <Level>2</Level>
> > <Task>1</Task>
> > <Opcode>102</Opcode>
> > <Keywords>0x8000000000000000</Keywords>
> > <TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
> > <EventRecordID>4</EventRecordID>
> > <Correlation />
> > <Execution ProcessID="3472" ThreadID="3476" />
> > <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
> > <Computer>MyPc1</Computer>
> > <Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
> > </System>
> > <EventData>
> > <Data Name="FileNameLength">58</Data>
> > <Data
> > Name="FileNameBuffer">DeviceHarddiskVolume1WindowsSystem32driverstcpip.sys</Data>
> > </EventData>
> > </Event>
> >
> >
> > so what can I do?
> > the code integrity error was found on May 25
> >
> >
> > I also got a fiar numnber of event 10 wmi
> > also I have been getting a lot of this:
> >
> > Log Name: Application
> > Source: Microsoft-Windows-WMI
> > Date: 09-07-11 12:06:53A
> > Event ID: 10
> > Task Category: None
> > Level: Error
> > Keywords: Classic
> > User: N/A
> > Computer: MyPc1
> > Description:
> > Event filter with query "SELECT FROM __InstanceModificationEvent WITHIN
> > 60 WHERE TargetInstance ISA "Win32_Processor" AND
> > TargetInstance.LoadPercentage<span style="color:darkred">
> > > 99" could not be reactivated in namespace "//./root/CIMV2" because of</span>
> > error 0x80041003. Events cannot be delivered through this filter until the
> > problem is corrected.
> > Event Xml:
> > <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> > <System>
> > <Provider Name="Microsoft-Windows-WMI"
> > Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
> > <EventID Qualifiers="49152">10</EventID>
> > <Version>0</Version>
> > <Level>2</Level>
> > <Task>0</Task>
> > <Opcode>0</Opcode>
> > <Keywords>0x80000000000000</Keywords>
> > <TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
> > <EventRecordID>13523</EventRecordID>
> > <Correlation />
> > <Execution ProcessID="0" ThreadID="0" />
> > <Channel>Application</Channel>
> > <Computer>MyPc1</Computer>
> > <Security />
> > </System>
> > <EventData>
> > <Data>//./root/CIMV2</Data>
> > <Data>SELECT FROM __InstanceModificationEvent WITHIN 60 WHERE
> > TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> > > 99</Data>
> > <Data>0x80041003</Data>
> > </EventData>
> > </Event></span>
> oops, sorry!
> pls ignore the trying to stuff<span style="color:green">
> > trying to download office 2007 stuff
> > exchange server 2007 std with sp1
> > Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
> > SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
> > SharePoint Server 2007 Service Pack 1 5/31/2009
> > Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
> > Windows Vista Business and Ultimate Editions for Partners 5/31/2009
> >
> > ( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)
> > </span>
> </span>

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup
 

Similar threads

J
Win 7 Ent. 64 Bit System hangs after posting Event ID: 19 Source: WHEA-Logger
Replies
0
Views
40
jwhitepnv
J
DaMan
KB2718704 creates thousands of logs in the event Viewer
Replies
0
Views
55
DaMan
DaMan
S
Hello, I have a problem with windows 7 firewall, I have noticed recently, sometimes firewall...
Replies
0
Views
86
seyed Mohammad Tahami
S
D
DCOM errors
Replies
0
Views
58
DavidLeeDavis123
D
N
Got a corrupted x86 policy file, how do you fix it?
Replies
0
Views
54
NewsBot
N
Back
Top