These are the errors associated with the timestamp where the computer locked.
There are 2 separate entries.
The performance strings in the Performance registry value is corrupted when
process Performance extension counter provider. The BaseIndex value from the
Performance registry is the first DWORD in the Data section, LastCounter
value is the second DWORD in the Data section, and LastHelp value is the
third DWORD in the Data section.
Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 10/16/2007 5:50:33 AM
Event ID: 3012
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: User-PC
Description:
The performance strings in the Performance registry value is corrupted when
process Performance extension counter provider. The BaseIndex value from the
Performance registry is the first DWORD in the Data section, LastCounter
value is the second DWORD in the Data section, and LastHelp value is the
third DWORD in the Data section.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf"
Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" EventSourceName="LoadPerf" />
<EventID Qualifiers="49152">3012</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-16T12:50:33.000Z" />
<EventRecordID>14019</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>User-PC</Computer>
<Security />
</System>
<UserData>
<EventXML
xmlns:auto-ns2="
http://schemas.microsoft.com/win/2004/08/events"
xmlns="LoadPerf">
<param1>Performance</param1>
<binaryDataSize>16</binaryDataSize>
<binaryData>37070000000000000000000015030000</binaryData>
</EventXML>
</UserData>
</Event>
Unloading the performance counter strings for service WmiApRpl (WmiApRpl)
failed. The first DWORD in the Data section contains the error code.
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-LoadPerf"
Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" EventSourceName="LoadPerf" />
<EventID Qualifiers="49152">3011</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-10-16T12:50:33.000Z" />
<EventRecordID>14020</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>User-PC</Computer>
<Security />
</System>
- <UserData>
- <EventXML xmlns:auto-ns2="
http://schemas.microsoft.com/win/2004/08/events"
xmlns="LoadPerf">
<param1>WmiApRpl</param1>
<param2>WmiApRpl</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>F203000066070000</binaryData>
</EventXML>
</UserData>
</Event>