Thursday, August 23, 2012

Event ID 3002 - LoadPerf— Performance Counter Loading

Add caption
Event ID 3002 — Performance Counter 
Loading

Performance counters are collected and used by services and applications. If they are installed incorrectly or with improper permissions, performance counters cannot be loaded, and services or applications cannot collect or interpret the data.
Log from the Event Viewer
Log Name:      Application
Source:        Microsoft-Windows-LoadPerf
Date:          XXXXXXXXXXXXXXXXXXX
Event ID:      3002
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      XXXXXXXXXXXXXXXXXXXXXXXXXXX
Description:
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is  . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
Event Xml:
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-LoadPerf' Guid='{122EE297-BB47-41AE-B265-1CA8D1886D40}'/><EventID>3002</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime=XXXXXXXXXXXXXXXXXX'/><EventRecordID>110899</EventRecordID><Correlation/><Execution ProcessID='5288' ThreadID='284'/><Channel>Application</Channel><Computer>W</Computer><Security UserID='S-1-5-18'/></System><UserData><EventXML xmlns:auto-ns2='http://schemas.microsoft.com/win/2004/08/events' xmlns='LoadPerf'><param1> </param1><binaryDataSize>16</binaryDataSize><binaryData>00000000AB2E0000AB2E0000980B0000</binaryData></EventXML></UserData></Event>

Resolve:
Open your Command Prompt as an administrator and type in the below command and Enter
>>lodctr /r

No comments:

Post a Comment