Lots of warnings and errors in the event viewer.

[0621sammy]

I am having quite a few errors and warnings in event viewer. I don't really know enough to tell weather they're insignificant or not. This laptop is an ASUS G74SX-BBK8 and it is brand new.

Here are my computer specs via Speccy:
http://speccy.piriform.com/results/uIWqmVEJuKPxAQAVrLfmeT3

I'm not really sure if that's all the info I needed to post or not if I need to post something else just tell me and I'll do it.

Some of the warnings are:
"Name resolution for the name <domainname.com> timed out after none of the configured DNS servers responded."

"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-4104312563-485125815-1487247760-1000_Classes:
Process 1844 (\Device\HarddiskVolume2\Program Files\Trend Micro\AMSP\coreServiceShell.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000_CLASSES"

"Possible Memory Leak. Application (C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 1240) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({3f31c91e-2545-4b7b-9311-9529e8bffef6}), Method number (20). User Action: Contact your application vendor for an updated version of the application."

And theres alot more

Some of the errors are:

"Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x4025C23C33AD. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server." (I get that one alot)

"ACPI: ACPI BIOS is attempting to write to an illegal PCI Operation Region (0x4), Please contact your system vendor for technical assistance." (I've had that one about 6 times so far)

And theres quite a few more than just those.


Thank you for your help in advance =).

 

[Sedril]

Unless you're constantly getting getting those, I wouldn't worry too much.

What I would do, is clear the event viewer and keep an eye on it to see how fast it fills up with errors...View attachment Clear_Event_Viewer.bat

Run this file as admin and it will clear event viewer...

Another thing might be worth doing is google for namebench and run it to help you set your dns servers if you're using a router... May or may not help, but I'm OCD about all the little details...

 

[0621sammy]

Alright thanks, I cleared the event viewer and I'll keep an eye on it to see which errors/warnings come back. I ran the namebench, do you suggest I change my DNS to the google public one it suggested?

 

[Sedril]

I changed mine to the UltraDNS one that it recommended, after running namebench a few times to see if it was consistent...

To be honest you'd only notice a difference if you're having problems with your current DNS... If you notice errors resolving dns names I would change it and see if it improves...

Just make note of what the settings are now so you can switch back if you want... can't hurt to try it...

 

[0621sammy]

Well I'm not having any problems with my DNS I'm just getting those dumb warnings constantly. But I might give it a try. I've gotten a few warnings again but I'm pretty sure they're not anything bad because they're only happening when I reboot/shutdown/hibernate except for the DNS errors and this one "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
12 user registry handles leaked from \Registry\User\S-1-5-21-4104312563-485125815-1487247760-1000:
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000\Software\Microsoft\SystemCertificates\My
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000\Software\Policies\Microsoft\SystemCertificates
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000\Software\Policies\Microsoft\SystemCertificates
Process 3108 (\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000\Software\Policies\Microsoft\SystemCertificates"

I only got that once and I just installed kaspersky today so I'm not sure if it means anything.

Again I'll let you know if I get any of the other errors and thanks!

 

[Sedril]

What does your reliability index look like? Any major issues there? If not, you may be safe ignoring the event viewer warnings...

Control panel - action center - maintenance - view reliability history

Take a look and see..

 

[gregrocker]

How is performance?

Since you like to inquire, Use the System Resources in these troubleshooting steps to see if you have any problems. Focus in the logs should be on repeat errors.

 

[0621sammy]

Performance is good I haven't really had any problems only these errors. I looked where your post told me to and I found this and I couldn't find any info really on it and my graphis driver is up to date:

This driver responded slower than expected to the resume request while servicing this device:
Driver File Name : \Driver\nvlddmkm
Driver Friendly Name : NVIDIA Windows Kernel Mode Driver, Version 285.62
Driver Version : 8.17.12.8562
Driver Total Time : 1497ms
Driver Degradation Time : 1097ms
Incident Time (UTC) : ‎2011‎-‎12‎-‎13T03:16:06.272665100Z
Device Name : PCI\VEN_10DE&DEV_1251&SUBSYS_204A1043&REV_A1\4&24dee14f&0&0008
Device Friendly Name : NVIDIA GeForce GTX 560M
Device Total Time : 1507ms
Device Degradation Time : 1107ms

"
- System

- Provider


[ Name] Microsoft-Windows-Diagnostics-Performance


[ Guid] {CFC18EC0-96B1-4EBA-961B-622CAEE05B0A}



EventID 351


Version 1


Level 2


Task 4003


Opcode 35


Keywords 0x8000000000010000

- TimeCreated


[ SystemTime] 2011-12-13T03:16:24.930425000Z



EventRecordID 109

- Correlation


[ ActivityID] {03709C40-F800-0000-AF98-38441BB9CC01}


- Execution


[ ProcessID] 1824


[ ThreadID] 5592



Channel Microsoft-Windows-Diagnostics-Performance/Operational


Computer iPwnGaming-PC

- Security


[ UserID] S-1-5-19

- EventData

StartTime 2011-12-13T03:16:06.272665100Z

NameLength 17

Name \Driver\nvlddmkm

FriendlyNameLength 51

FriendlyName NVIDIA Windows Kernel Mode Driver, Version 285.62

VersionLength 13

Version 8.17.12.8562

TotalTime 1497

DegradationTime 1097

PathLength 41

Path C:\Windows\system32\DRIVERS\nvlddmkm.sys

ProductNameLength 51

ProductName NVIDIA Windows Kernel Mode Driver, Version 285.62

CompanyNameLength 19

CompanyName NVIDIA Corporation

DeviceNameLength 63

DeviceName PCI\VEN_10DE&DEV_1251&SUBSYS_204A1043&REV_A1\4&24dee14f&0&0008

DeviceFriendlyNameLength 25

DeviceFriendlyName NVIDIA GeForce GTX 560M

DeviceTotalTime 1507

DeviceDegradationTime 1107"

 

[0621sammy]

Oh and another thing I thought I might mention is my BIOS is out of date by 1 update mine is 202 and the newest is 203. But I'm not really sure how to update it and if it's worth doing and if it's risky.

 

[gregrocker]

See if you can find information on the BIOS download page or in a ReadMe file in the BIOS download itself which tells you what the update is for. You may not need or want it. It's always safest to update from Windows, but I wouldn't update BIOS unless it's something you need.

You can turn off the Nvidia driver service at bootup as it's not needed unless you're using special controls therein to overclock your video. Enter msconfig as shown in the troubleshooting steps to turn it off in msconfig>startup and >Services following the exact steps given to achieve a clean boot.

 

[0621sammy]

You can turn off the Nvidia driver service at bootup as it's not needed unless you're using special controls therein to overclock your video. Enter msconfig as shown in the troubleshooting steps to turn it off in msconfig>startup and >Services following the exact steps given to achieve a clean boot.

That wont effect the GPU at all will it? And no I'm not overclocking.

But I just ran SFC /SCANNOW and it told me it found a corrupt file but it was unable to fix it or something. But here's the file log from it if it means anything. But it did say in the log "Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired"

 

[gregrocker]

Nvidia services are bloatware whose loss won't affect anything unless you need special settings only they have. You only need the Display driver.

Run SFC again to see if it finds anything else.

 

[0621sammy]

Do you know if any of these are problems:

"Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x4025C23C33AD. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server." (Error)

"The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 3667 seconds since the last report." (Warning, only happens when booting up or down.)

"Name resolution for the name <Domain.com> timed out after none of the configured DNS servers responded." (Warning, Happens often)


I just Ran SFC again and got

"Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of th
em.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log"

Not sure if the log is any diffrent from the last one but here it is anyways.

 

[0621sammy]

If you need any other info I'll post it ASAP just tell me. But now I'm going to go to bed but I'll check here tomorrow to see what you found out. Thanks for your help so far!

 

[gregrocker]

Hi Sammy -

Those errors are very common and harmless as I recall. You can still google their text and identifiers to understand them better and possibly learn what others have done to resolve them.

SFC is more of a concern. I'd run it a few more times to see if it can fix the broken file. PINTLGB.IMD can be damaged by uninstalling bloatware such as Office trial - have you done that?

The next elevation for irreparable System files is a Repair Install however I would probably go by performance when deciding how much of a priority that is.

 

[Wishmaster]

The leaked registry handles is somewhat common, and if no mistaken, nothing to be alarmed about.

it just means a app opened a registry hive, but didnt close it when you shutdown.

As GregRocker already mentioned, the sfc scan is the most important thing.

 

[Teerex]

I am having quite a few errors and warnings in event viewer. I don't really know enough to tell weather they're insignificant or not. This laptop is an ASUS G74SX-BBK8 and it is brand new.

Here are my computer specs via Speccy:
http://speccy.piriform.com/results/uIWqmVEJuKPxAQAVrLfmeT3

I'm not really sure if that's all the info I needed to post or not if I need to post something else just tell me and I'll do it.

Some of the warnings are:
"Name resolution for the name <domainname.com> timed out after none of the configured DNS servers responded."

"Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-4104312563-485125815-1487247760-1000_Classes:
Process 1844 (\Device\HarddiskVolume2\Program Files\Trend Micro\AMSP\coreServiceShell.exe) has opened key \REGISTRY\USER\S-1-5-21-4104312563-485125815-1487247760-1000_CLASSES"

"Possible Memory Leak. Application (C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 1240) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({3f31c91e-2545-4b7b-9311-9529e8bffef6}), Method number (20). User Action: Contact your application vendor for an updated version of the application."

And theres alot more

Some of the errors are:

"Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x4025C23C33AD. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server." (I get that one alot)

"ACPI: ACPI BIOS is attempting to write to an illegal PCI Operation Region (0x4), Please contact your system vendor for technical assistance." (I've had that one about 6 times so far)

And theres quite a few more than just those.


Thank you for your help in advance =).

As a fellow ASUS owner I'd like to soothe your nerves - every eevent is quite normal except the ACPI BIOS one.

The DNS is normal: this is just a report that an address was unreachable. If the domain name doesn't look familiar, not something you visited in your browser there's still nothing to worry about: most modern browsers will resolve almost every link they find on a webpage.

The second one is a Trend Micro coding sloppyness - they should release the handle on reboot/shutdown. Update Trend Micro, if it is not updated, or change your security vendor. There's nothing else you can do.

The DHCP event - your Bluetooth adapter. It sounds silly but it tries to find a network to connect to on startup. :sarc: I have it disabled when I don't use it.
It could also be your virtual access point created by Intel's Wireless suite.

Memory leak - some application is causing it - try searching for that UUID in the registry and find the application it refers to.

Finally - ACPI: BIOS. Try updating your BIOS to the latest version available on ASUS, 203.

 

[gregrocker]

Run a full scan with Malwarebytes.

You might want to replace your AV with the one most recommended here which is Microsoft Security Essentials with the Win7 firewall kept updated via Windows Update. Then run a full scan with it.

 

[0621sammy]

PINTLGB.IMD can be damaged by uninstalling bloatware such as Office trial - have you done that?

I have only uninstalled the Best Buy PC app, Trend Micro and the Bing Bar.

I ran SFC again twice with the same error saying it was unable to fix it. Once in Safe Mode and once just normally.

I'm running MBAM right now I'll tell you the results as soon as it finishes. But im 95% sure I don't have any viruses/trojans

Teerex, I'm not quite sure on how to update my BIOS because I have never done that before. And it just seems a little bit risky from what I've heard when googling how to do it.

Also I don't know if this has anything to do with any of this but some items had the like the weird icon when you can't open the file or whatever. But a reboot turned them back to normal it's harder to explain so I just took a screenie.

 

[0621sammy]

Nothing was found on the scan.

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: 8371

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

12/14/2011 3:38:42 PM
mbam-log-2011-12-14 (15-38-42).txt

Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 324328
Time elapsed: 20 minute(s), 40 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)