Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Vista General Discussion > event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu

Reply
Thread Tools Display Modes

event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu

 
 
MSDN newsgroup
Guest
Posts: n/a

 
      07-12-2009

tried sfc but result was ok

Windows Resource Protection did not find any integrity violations.

same for same for the verifier.dll.



I also get quite a number of event 10 ( I am using vista Ultimate 64 on Core
2 quad)

Log Name: Microsoft-Windows-CodeIntegrity/Operational
Source: Microsoft-Windows-CodeIntegrity
Date: 09-05-25 11:46:43P
Event ID: 3002
Task Category: (1)
Level: Error
Keywords:
User: MyPc1\Administrator
Computer: MyPc1
Description:
Code Integrity is unable to verify the image integrity of the file
\Device\HarddiskVolume1\Windows\System32\drivers\t cpip.sys because the set
of per-page image hashes could not be found on the system.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CodeIntegrity"
Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
<EventID>3002</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>1</Task>
<Opcode>102</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
<EventRecordID>4</EventRecordID>
<Correlation />
<Execution ProcessID="3472" ThreadID="3476" />
<Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
<Computer>MyPc1</Computer>
<Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
</System>
<EventData>
<Data Name="FileNameLength">58</Data>
<Data
Name="FileNameBuffer">\Device\HarddiskVolume1\Wind ows\System32\drivers\tcpip.sys</Data>
</EventData>
</Event>


so what can I do?
the code integrity error was found on May 25


I also got a fiar numnber of event 10 wmi
also I have been getting a lot of this:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 09-07-11 12:06:53A
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: MyPc1
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60
WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> 99" could not be reactivated in namespace "//./root/CIMV2" because of

error 0x80041003. Events cannot be delivered through this filter until the
problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI"
Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
<EventRecordID>13523</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>MyPc1</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE
TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt;
99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>
trying to download office 2007 stuff
exchange server 2007 std with sp1
Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
SharePoint Server 2007 Service Pack 1 5/31/2009
Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
Windows Vista Business and Ultimate Editions for Partners 5/31/2009

( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)


 
Reply With Quote
 
 
 
 
Peter Foldes
Guest
Posts: n/a

 
      07-12-2009
Your issue as per Event ID 10

http://support.microsoft.com/kb/950375/en-us/

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"MSDN newsgroup" <> wrote in message
news:...
> tried sfc but result was ok
>
> Windows Resource Protection did not find any integrity violations.
>
> same for same for the verifier.dll.
>
>
>
> I also get quite a number of event 10 ( I am using vista Ultimate 64 on Core 2
> quad)
>
> Log Name: Microsoft-Windows-CodeIntegrity/Operational
> Source: Microsoft-Windows-CodeIntegrity
> Date: 09-05-25 11:46:43P
> Event ID: 3002
> Task Category: (1)
> Level: Error
> Keywords:
> User: MyPc1\Administrator
> Computer: MyPc1
> Description:
> Code Integrity is unable to verify the image integrity of the file
> \Device\HarddiskVolume1\Windows\System32\drivers\t cpip.sys because the set of
> per-page image hashes could not be found on the system.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-CodeIntegrity"
> Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
> <EventID>3002</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>1</Task>
> <Opcode>102</Opcode>
> <Keywords>0x8000000000000000</Keywords>
> <TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
> <EventRecordID>4</EventRecordID>
> <Correlation />
> <Execution ProcessID="3472" ThreadID="3476" />
> <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
> <Computer>MyPc1</Computer>
> <Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
> </System>
> <EventData>
> <Data Name="FileNameLength">58</Data>
> <Data
> Name="FileNameBuffer">\Device\HarddiskVolume1\Wind ows\System32\drivers\tcpip.sys</Data>
> </EventData>
> </Event>
>
>
> so what can I do?
> the code integrity error was found on May 25
>
>
> I also got a fiar numnber of event 10 wmi
> also I have been getting a lot of this:
>
> Log Name: Application
> Source: Microsoft-Windows-WMI
> Date: 09-07-11 12:06:53A
> Event ID: 10
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: MyPc1
> Description:
> Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE
> TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> > 99" could not be reactivated in namespace "//./root/CIMV2" because of

> error 0x80041003. Events cannot be delivered through this filter until the problem
> is corrected.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-WMI"
> Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
> <EventID Qualifiers="49152">10</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
> <EventRecordID>13523</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>MyPc1</Computer>
> <Security />
> </System>
> <EventData>
> <Data>//./root/CIMV2</Data>
> <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance
> ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
> <Data>0x80041003</Data>
> </EventData>
> </Event>
> trying to download office 2007 stuff
> exchange server 2007 std with sp1
> Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
> SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
> SharePoint Server 2007 Service Pack 1 5/31/2009
> Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
> Windows Vista Business and Ultimate Editions for Partners 5/31/2009
>
> ( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)
>


 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to write event infor to system event log? Abei Windows Vista Drivers 4 07-02-2009 03:12 AM
Event ID 10 — Event Filter Query Functionality RandyERaymond Windows Vista Hardware 0 02-23-2009 04:15 PM
SP1 BUG: Code Integrity Error for tcpip.sys in Event Viewer BillD Windows Vista Security 0 04-24-2008 03:30 PM
Unable to fetch the Event Log - Event Description Vineet Das Windows Vista Security 4 08-24-2006 06:52 AM
Event ID 1904 HHCTRL in Event Manager Lori Ann Kuiper Windows Media Center 0 07-14-2006 11:12 AM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59