Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Two errors in Event Viewer

09 May 2010   #1
ratePV

Windows 7 SP1 x64
 
 
Two errors in Event Viewer

Hello SF!

I have two errors constantly being registered every time reboot(or turn on) my computer that i cant resolve:

The first one is a Event 3006 LoadPerf:
Quote:
Unable to read the performance counter strings defined for the 01a language ID. The first DWORD in the Data section contains the Win32 error code.
And a second one a Event 1530 User Profile Settings:
Quote:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.



My System SpecsSystem Spec
.
09 May 2010   #2
usasma
Microsoft MVP

 
 

We'll need the information from the Data section of the error in order to get the Win32 error code on the first error.

As for the second error - it's gonna require uninstalling applications until you find out which one is causing it. Or, you can use the free program Process Monitor to see what's doing the registry accesses - but the log file is huge. It's available for free from here: Process Monitor
My System SpecsSystem Spec
10 May 2010   #3
ratePV

Windows 7 SP1 x64
 
 

Quote   Quote: Originally Posted by usasma View Post
We'll need the information from the Data section of the error in order to get the Win32 error code on the first error.

As for the second error - it's gonna require uninstalling applications until you find out which one is causing it. Or, you can use the free program Process Monitor to see what's doing the registry accesses - but the log file is huge. It's available for free from here: Process Monitor
I've added a text file with the detail abt. the first error.

Attachment 72123

No need to uninstall, ill just monitor the process number the next time i reboot (the process causing the problem is lsass.exe)
My System SpecsSystem Spec
.

10 May 2010   #4
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

Do you use Spybot? That puts all kinds stuff into the lsass.exe. I never figured out why or what. I just got rid of Spybot.
My System SpecsSystem Spec
10 May 2010   #5
ratePV

Windows 7 SP1 x64
 
 

Quote   Quote: Originally Posted by whs View Post
Do you use Spybot? That puts all kinds stuff into the lsass.exe. I never figured out why or what. I just got rid of Spybot.
Nope. Only NOD32 SS
My System SpecsSystem Spec
10 May 2010   #6
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

Maybe the Sasser worm has struck you. Open the file "\windows\system32\drivers\etc\hosts" in Notepad. Type or paste:

Notepad \windows\system32\drivers\etc\hosts

into a Run box, and press OK. Normally, it will have one entry for something called "localhost". If in addition you see a list of Anti-Virus sites such as Nod32, then the worm has struck.
My System SpecsSystem Spec
10 May 2010   #7
ratePV

Windows 7 SP1 x64
 
 

Quote   Quote: Originally Posted by whs View Post
Maybe the Sasser worm has struck you. Open the file "\windows\system32\drivers\etc\hosts" in Notepad. Type or paste:

Notepad \windows\system32\drivers\etc\hosts

into a Run box, and press OK. Normally, it will have one entry for something called "localhost". If in addition you see a list of Anti-Virus sites such as Nod32, then the worm has struck.
This is the 5th system reporting these 2 errors(since 22nd october) so its very unlikely it could strike 5 times a row.

These are the last few lines of hosts file


Code:
# localhost name resolution is handled within DNS itself.
#	127.0.0.1       localhost
#	::1             localhost
My System SpecsSystem Spec
10 May 2010   #8
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

You are OK - no worm. It was just an additional precaution.
My System SpecsSystem Spec
10 May 2010   #9
usasma
Microsoft MVP

 
 

I'm unable to locate any info on a Win32 error code of 02000000 (?hex) - but I'm not real concerned over that first error.

The second error concerns me a lot more - why would lsass.exe be leaving registry keys open? AFAIK, lsass.exe is a security component of Windows - so I'd have to wonder what's messing with it.
My System SpecsSystem Spec
11 May 2010   #10
ratePV

Windows 7 SP1 x64
 
 

Quote   Quote: Originally Posted by usasma View Post
I'm unable to locate any info on a Win32 error code of 02000000 (?hex) - but I'm not real concerned over that first error.

The second error concerns me a lot more - why would lsass.exe be leaving registry keys open? AFAIK, lsass.exe is a security component of Windows - so I'd have to wonder what's messing with it.
Ill examine the error and find the reg. keys that are being opened.
I tried to recreate this error 2 times but without success.
I will upload the log when i recreate it.
My System SpecsSystem Spec
Reply

 Two errors in Event Viewer




Thread Tools




Similar help and support threads
Thread Forum
Event Viewer errors
I found a huge list. But I can't copy and need to type them out I'm listing just two for now What the heck is wrong and how do I fix it?? Faulting application name STaSV64.exe, version 1.0.6393.0, time stamp; 0x4f5ed3b7. Faulting module name: STaSV64.exe, version 1.0.6393.0, time stamp;...
General Discussion
Event Viewer Errors
Im still getting some errors and warning in event viewer. how can I resolve these errors? Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 11/3/2013 12:05:07 AM Event ID: 219 Task Category: (212) Level: Warning Keywords:
Performance & Maintenance
Need help with event viewer errors
I have no Bsods, or issues with my machine; but it states this forum section is also for event viewer errors so here it goes: I have Windows 7 professional. I use it on my "home" PC, so its not connected to a domain or anything like that. Just laying that information out there. Here are my...
General Discussion
Many errors in event viewer
I get a lot of errors in the event viewer. Here I attach the log. Can anyone help me to find the cause of these errors and prevent them? Thanks in advance.
Performance & Maintenance
Event viewer errors
I recently called two separate tech support people who remotely accessed my computer, and used the event viewer. Inthis, they showed me that in the application list, there were 36,246 entries, and in the system catagory, 58,424 entries, with lots of errors. They also said that I would need level 3...
Performance & Maintenance
WHEA-Logger event 18/19 errors in Event Viewer (W7 Home Premium)
Hi, I was hoping somebody could offer an insight on the below, as searching around I've not found much to go on other than "overheating" Basically my laptop has been having very high temperatures for a long time (usually ~60C for CPU and often 100-110 for GPU...insanely high, in other words)...
Hardware & Devices


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:37.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App