Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Vista General Discussion > Re: event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu

Reply
Thread Tools Display Modes

Re: event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu

 
 
MSDN newsgroup
Guest
Posts: n/a

 
      07-12-2009

"MSDN newsgroup" <> wrote in message news:...
> tried sfc but result was ok
>
> Windows Resource Protection did not find any integrity violations.
>
> same for same for the verifier.dll.
>
>
>
> I also get quite a number of event 10 ( I am using vista Ultimate 64 on
> Core 2 quad)
>
> Log Name: Microsoft-Windows-CodeIntegrity/Operational
> Source: Microsoft-Windows-CodeIntegrity
> Date: 09-05-25 11:46:43P
> Event ID: 3002
> Task Category: (1)
> Level: Error
> Keywords:
> User: MyPc1\Administrator
> Computer: MyPc1
> Description:
> Code Integrity is unable to verify the image integrity of the file
> \Device\HarddiskVolume1\Windows\System32\drivers\t cpip.sys because the set
> of per-page image hashes could not be found on the system.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-CodeIntegrity"
> Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
> <EventID>3002</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>1</Task>
> <Opcode>102</Opcode>
> <Keywords>0x8000000000000000</Keywords>
> <TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
> <EventRecordID>4</EventRecordID>
> <Correlation />
> <Execution ProcessID="3472" ThreadID="3476" />
> <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
> <Computer>MyPc1</Computer>
> <Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
> </System>
> <EventData>
> <Data Name="FileNameLength">58</Data>
> <Data
> Name="FileNameBuffer">\Device\HarddiskVolume1\Wind ows\System32\drivers\tcpip.sys</Data>
> </EventData>
> </Event>
>
>
> so what can I do?
> the code integrity error was found on May 25
>
>
> I also got a fiar numnber of event 10 wmi
> also I have been getting a lot of this:
>
> Log Name: Application
> Source: Microsoft-Windows-WMI
> Date: 09-07-11 12:06:53A
> Event ID: 10
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: MyPc1
> Description:
> Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN
> 60 WHERE TargetInstance ISA "Win32_Processor" AND
> TargetInstance.LoadPercentage
> > 99" could not be reactivated in namespace "//./root/CIMV2" because of

> error 0x80041003. Events cannot be delivered through this filter until the
> problem is corrected.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-WMI"
> Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
> <EventID Qualifiers="49152">10</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
> <EventRecordID>13523</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>MyPc1</Computer>
> <Security />
> </System>
> <EventData>
> <Data>//./root/CIMV2</Data>
> <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE
> TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> &gt; 99</Data>
> <Data>0x80041003</Data>
> </EventData>
> </Event>

oops, sorry!
pls ignore the trying to stuff
> trying to download office 2007 stuff
> exchange server 2007 std with sp1
> Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
> SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
> SharePoint Server 2007 Service Pack 1 5/31/2009
> Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
> Windows Vista Business and Ultimate Editions for Partners 5/31/2009
>
> ( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)
>



 
Reply With Quote
 
 
 
 
Ken Blake, MVP
Guest
Posts: n/a

 
      07-12-2009
On Sat, 11 Jul 2009 18:24:59 -0600, "MSDN newsgroup"
<> wrote:

>
> "MSDN newsgroup" <> wrote in message news:...
> > tried sfc but result was ok
> >
> > Windows Resource Protection did not find any integrity violations.
> >
> > same for same for the verifier.dll.
> >
> >
> >
> > I also get quite a number of event 10 ( I am using vista Ultimate 64 on
> > Core 2 quad)
> >
> > Log Name: Microsoft-Windows-CodeIntegrity/Operational
> > Source: Microsoft-Windows-CodeIntegrity
> > Date: 09-05-25 11:46:43P
> > Event ID: 3002
> > Task Category: (1)
> > Level: Error
> > Keywords:
> > User: MyPc1\Administrator
> > Computer: MyPc1
> > Description:
> > Code Integrity is unable to verify the image integrity of the file
> > \Device\HarddiskVolume1\Windows\System32\drivers\t cpip.sys because the set
> > of per-page image hashes could not be found on the system.
> > Event Xml:
> > <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> > <System>
> > <Provider Name="Microsoft-Windows-CodeIntegrity"
> > Guid="{4ee76bd8-3cf4-44a0-a0ac-3937643e37a3}" />
> > <EventID>3002</EventID>
> > <Version>0</Version>
> > <Level>2</Level>
> > <Task>1</Task>
> > <Opcode>102</Opcode>
> > <Keywords>0x8000000000000000</Keywords>
> > <TimeCreated SystemTime="2009-05-26T05:46:43.742Z" />
> > <EventRecordID>4</EventRecordID>
> > <Correlation />
> > <Execution ProcessID="3472" ThreadID="3476" />
> > <Channel>Microsoft-Windows-CodeIntegrity/Operational</Channel>
> > <Computer>MyPc1</Computer>
> > <Security UserID="S-1-5-21-2530634225-3093490532-1463674768-500" />
> > </System>
> > <EventData>
> > <Data Name="FileNameLength">58</Data>
> > <Data
> > Name="FileNameBuffer">\Device\HarddiskVolume1\Wind ows\System32\drivers\tcpip.sys</Data>
> > </EventData>
> > </Event>
> >
> >
> > so what can I do?
> > the code integrity error was found on May 25
> >
> >
> > I also got a fiar numnber of event 10 wmi
> > also I have been getting a lot of this:
> >
> > Log Name: Application
> > Source: Microsoft-Windows-WMI
> > Date: 09-07-11 12:06:53A
> > Event ID: 10
> > Task Category: None
> > Level: Error
> > Keywords: Classic
> > User: N/A
> > Computer: MyPc1
> > Description:
> > Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN
> > 60 WHERE TargetInstance ISA "Win32_Processor" AND
> > TargetInstance.LoadPercentage
> > > 99" could not be reactivated in namespace "//./root/CIMV2" because of

> > error 0x80041003. Events cannot be delivered through this filter until the
> > problem is corrected.
> > Event Xml:
> > <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> > <System>
> > <Provider Name="Microsoft-Windows-WMI"
> > Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
> > <EventID Qualifiers="49152">10</EventID>
> > <Version>0</Version>
> > <Level>2</Level>
> > <Task>0</Task>
> > <Opcode>0</Opcode>
> > <Keywords>0x80000000000000</Keywords>
> > <TimeCreated SystemTime="2009-07-11T06:06:53.000Z" />
> > <EventRecordID>13523</EventRecordID>
> > <Correlation />
> > <Execution ProcessID="0" ThreadID="0" />
> > <Channel>Application</Channel>
> > <Computer>MyPc1</Computer>
> > <Security />
> > </System>
> > <EventData>
> > <Data>//./root/CIMV2</Data>
> > <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE
> > TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> > &gt; 99</Data>
> > <Data>0x80041003</Data>
> > </EventData>
> > </Event>

> oops, sorry!
> pls ignore the trying to stuff
> > trying to download office 2007 stuff
> > exchange server 2007 std with sp1
> > Internet Security and Acceleration Server Std Ed for Partners 4/29/2009
> > SharePoint Server 2007 w/SP1 (Standard and Enterprise) 5/31/2009
> > SharePoint Server 2007 Service Pack 1 5/31/2009
> > Dynamics CRM Workgroup Server 4.0 for Partners 4/27/2009
> > Windows Vista Business and Ultimate Editions for Partners 5/31/2009
> >
> > ( I don't have ofc 2007 installed but the .ent PIA for ofc 2007)
> >

>


--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup
 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
event ID 3002 on tcp.sys integrity and event ID 10 on WMI sesclu MSDN newsgroup Windows Vista General Discussion 1 07-12-2009 02:10 AM
Event ID 10 — Event Filter Query Functionality RandyERaymond Windows Vista Hardware 0 02-23-2009 04:15 PM
Event ID 10- Event Filter Query Functionality 2Lauraroberts Windows Vista Performance 1 11-24-2008 05:22 AM
SP1 BUG: Code Integrity Error for tcpip.sys in Event Viewer BillD Windows Vista Security 0 04-24-2008 03:30 PM
Unable to fetch the Event Log - Event Description Vineet Das Windows Vista Security 4 08-24-2006 06:52 AM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59