the transfer mode for device 0 is DMA if available.
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 8/21/2008
Time: 12:42:36 PM
User: N/A
Computer: SCOTTY
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 3b 07 00 00 ò...;...
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3012
Date: 8/21/2008
Time: 12:42:36 PM
User: N/A
Computer: SCOTTY
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 37 07 00 00 38 14 00 00 7...8...
0008: 00 00 00 00 ca 03 00 00 ....Ê...
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 8/21/2008
Time: 3:35:07 AM
User: N/A
Computer: SCOTTY
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 3b 07 00 00 ò...;...
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3012
Date: 8/21/2008
Time: 3:35:07 AM
User: N/A
Computer: SCOTTY
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 37 07 00 00 1e 14 00 00 7.......
0008: 00 00 00 00 ca 03 00 00 ....Ê...
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 8/21/2008
Time: 12:35:39 AM
User: N/A
Computer: SCOTTY
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The Error code is the first DWORD in Data section.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: f2 03 00 00 3b 07 00 00 ò...;...
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3012
Date: 8/21/2008
Time: 12:35:39 AM
User: N/A
Computer: SCOTTY
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. BaseIndex value from Performance registry is the first DWORD in Data section, LastCounter value is the second DWORD in Data section, and LastHelp value is the third DWORD in Data section.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 37 07 00 00 04 14 00 00 7.......
0008: 00 00 00 00 ca 03 00 00 ....Ê...
there's many more errors, i mean alot, im not sure if i should paste all of them, its gonna take a while, for now i'll paste some warnings too
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 8/20/2008
Time: 4:12:54 PM
User: NT AUTHORITY\SYSTEM
Computer: SCOTTY
Description:
Windows saved user SCOTTY\Scott registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 8/20/2008
Time: 12:45:12 PM
User: NT AUTHORITY\SYSTEM
Computer: SCOTTY
Description:
Windows saved user SCOTTY\Scott registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: LoadPerf
Event Category: None
Event ID: 2006
Date: 8/20/2008
Time: 11:07:50 AM
User: N/A
Computer: SCOTTY
Description:
LastCounter and LastHelp values of performance registry is corrupted and needs to be updated. The first and second DWORDs in Data Section are the original values while the third and forth DWORDs in Data Section are the updated new values.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1c 14 00 00 cf 13 00 00 ....Ï...
0008: 6a 14 00 00 cf 13 00 00 j...Ï...
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 8/20/2008
Time: 11:06:50 AM
User: NT AUTHORITY\SYSTEM
Computer: SCOTTY
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 8/20/2008
Time: 11:06:50 AM
User: NT AUTHORITY\SYSTEM
Computer: SCOTTY
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
there's a whole lot more warnings and errors. if you need more of them i will be happy to do my part to help. thank you.