event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu


M

MSDN newsgroup

tried sfc but result was ok

Windows Resource Protection did not find any integrity violations.

same for same for the verifier.dll.



I also get quite a number of event 10 ( I am using vista Ultimate 64 on Core
2 quad)

Log Name: Microsoft-Windows-CodeIntegrity/Operational
Source: Microsoft-Windows-CodeIntegrity
Date: 09-05-25 11:46:43P
Event ID: 3002
Task Category: (1)
Level: Error
Keywords:
User: MyPc1\Administrator
Computer: MyPc1
Description:
Code Integrity is unable to verify the image integrity of the file
\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set
of per-page image hashes could not be found on the system.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CodeIntegrity"
Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
<EventID>3002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>1</Task>
<Opcode>102</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
<EventRecordID>4</EventRecordID>
<Correlation />
<Execution ProcessID="3472" ThreadID="3476" />
<Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
<Computer>MyPc1</Computer>
<Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
</System>
<EventData>
<Data Name="FileNameLength">58</Data>
<Data
Name="FileNameBuffer">\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys</Data>
</EventData>
</Event>


so what can I do?
the code integrity error was found on May 25


I also got a fiar numnber of event 10 wmi
also I have been getting a lot of this:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 09-07-11 12:06:53A
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MyPc1
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60
WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
99" could not be reactivated in namespace "//./root/CIMV2" because of
error 0x80041003. Events cannot be delivered through this filter until the
problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI"
Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
<EventRecordID>13523</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MyPc1</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE
TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt;
99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>
trying to download office 2007 stuff
exchange server 2007 std with sp1
Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
SharePoint Server 2007 Service Pack 1 5/31/2009
Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
Windows Vista Business and Ultimate Editions for Partners 5/31/2009

( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)
 
Ad

Advertisements


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top