Event ID ( 8 ) in Source ( W3SVC )

G

Guest

Hello,
The below event is constantly logged every few seconds in the Application
Event Log. I realize that it is an Information Event and most of the time it
shoud be ignored, but I can't help the feeling that i might have a problem. I
have already checked the internet with no luck.

Event Type: Information
Event Source: W3SVC
Event Category: None
Event ID: 8
Date: 5/8/2005
Time: 9:38:24 AM
User: N/A
Computer: ECS0
Description:
The description for Event ID ( 8 ) in Source ( W3SVC ) cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display messages from a remote computer. The following information
is part of the event: Timed out waiting for SetConf signal, continuing....

Thanks,
akamal
 
D

Dave Patrick

Might be virus related but ask them here.

http://www.microsoft.com/communitie...fd0-cdf2-4bf2-8cc9-6187661bc232&lang=en&cr=US

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hello,
| The below event is constantly logged every few seconds in the Application
| Event Log. I realize that it is an Information Event and most of the time
it
| shoud be ignored, but I can't help the feeling that i might have a
problem. I
| have already checked the internet with no luck.
|
| Event Type: Information
| Event Source: W3SVC
| Event Category: None
| Event ID: 8
| Date: 5/8/2005
| Time: 9:38:24 AM
| User: N/A
| Computer: ECS0
| Description:
| The description for Event ID ( 8 ) in Source ( W3SVC ) cannot be found.
The
| local computer may not have the necessary registry information or message
DLL
| files to display messages from a remote computer. The following
information
| is part of the event: Timed out waiting for SetConf signal, continuing....
|
| Thanks,
| akamal
 
S

Steve Duff [MVP]

This is a worm trying to infect you through a hole you've closed in web services (get used to it).

You are apparently missing the eventlog key for web service in your registry. You can find another server (of the same version with
www installed) and import its eventlog key from HKLM \ CurrentControlSet \ Services \ Eventlog \ System \ W3SVC (I think) to your
registry. That should fix the eventlog display.

Steve Duff
 
G

Guest

Apparently this was caused by a patch that was applied to the ISS Server
Sensor installed on the server. Once the patch has been uninstalled, the
event log entry stopped appearing.

Thank you both for your assitance.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top