:
My Reply in-line under each error message:
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 12/30/2007
Time: 9:57:53 PM
User: N/A
Computer: HOME-D0F4A760E8
Description:
Faulting application ftlegend.exe, version 3.0.0.0, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x00001010.
Is this agame "ftlegend.exe" or screensaver?.
======================================================
Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1023
Date: 12/30/2007
Time: 6:15:21 PM
User: HOME-D0F4A760E8\Owner
Computer: HOME-D0F4A760E8
Description:
Product: Microsoft .NET Framework 2.0 Service Pack 1 - Update '.NET
Framework PreXP' could not be installed. Error code 1603. Additional
information is available in the log file
C:\DOCUME~1\OWNER~2.HOM\LOCALS~1\Temp\dd_NET_Framework20_Setup7911.txt.
Heath Stewar
http://blogs.msdn.com/heaths/archiv...-2-0-service-pack-1-and-how-to-detect-it.aspx
Aaron Stebner's WebLog
http://blogs.msdn.com/astebner/archive/2007/11/19/6408888.aspx
When you try to install an update for the .NET Framework 1.0, 1.1, or 2.0
http://support.microsoft.com/kb/923100/
How to locate the cause of error code 1603 in a verbose MSI log file
http://blogs.msdn.com/astebner/archive/2005/08/01/446328.aspx
You may be need the latest windows installer
http://www.microsoft.com/downloads/...FC-5F56-4A38-B838-DE776FD4138C&displaylang=en
How to resolve Common "Windows Installer" Problems
http://support.microsoft.com/kb/555175
=====================================================
Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 11714
Date: 12/30/2007
Time: 6:10:02 PM
User: HOME-D0F4A760E8\Owner
Computer: HOME-D0F4A760E8
Description:
Product: Microsoft .NET Framework 2.0 Service Pack 1 -- Error 1714.The older
version of Microsoft .NET Framework 2.0 Service Pack 1 cannot be removed.
Contact your technical support group. System Error 1635.
Again the Microsftt Installer causing trouble try the clean up tool from here:
Updated version of the .NET Framework cleanup tool that can remove the .NET
Framework 3.5 RTM
http://blogs.msdn.com/astebner/archive/2007/12/04/6659905.aspx
=========================================================
Event Type: Error
Event Source: Ci
Event Category: CI Service
Event ID: 4126
Date: 12/29/2007
Time: 2:24:50 PM
User: N/A
Computer: HOME-D0F4A760E8
Description:
Cleaning up corrupt content index metadata on c:\system volume
information\catalog.wci. Index will be automatically restored by refiltering
all documents.
Stopping and Restarting the Index Service will solve the error.
Open a run command and type in:
services.msc click [OK]
On the services control panel locate the service and Stop, reboot your
machine and then Restart the service.
Indexing Service
Backup and Recovery Guidelines for Index Server Catalog
http://support.microsoft.com/default.aspx?scid=kb;[LN];247093
================================================
Event Type: Error
Event Source: Ci
Event Category: CI Service
Event ID: 4124
Date: 12/29/2007
Time: 11:00:10 AM
User: N/A
Computer: HOME-D0F4A760E8
Description:
Content index on c:\system volume information\catalog.wci is corrupt. Please
shutdown and restart the Indexing Service (cisvc).
============================================
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3009
Date: 12/28/2007
Time: 10:31:23 PM
User: N/A
Computer: HOME-D0F4A760E8
Description:
Installing the performance counter strings for service WmiApRpl (%2) failed.
The Error code is the first DWORD in Data section.
SCOM 2007 - Error's installing OpsMgr 2007 Agent on remote DC
http://blogs.technet.com/edwalt/archive/2007/09/11/1941207.aspx
WMI Performance Adapter
http://www.blackviper.com/WinXP/Services/WMI_Performance_Adapter.htm
WMI Windows Management Instrumentation
http://www.microsoft.com/whdc/system/pnppwr/wmi/default.mspx
http://smallvoid.com/article/winnt-services-winmgmt.html
=========================================================
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3013
Date: 12/28/2007
Time: 10:31:23 PM
User: N/A
Computer: HOME-D0F4A760E8
Description:
Unable to update the performance counter strings of the 009 language ID. The
Win32 status returned by the call is the first DWORD in Data section.
Multiple Event ID 3009 and 3003 Events Appear After You Install Service Pack
http://support.microsoft.com/kb/325727
How to manually rebuild Performance Counter Library values
http://support.microsoft.com/kb/300956
FIX: RegOpenKeyEx May Fail With Status 1450
http://support.microsoft.com/support/kb/articles/Q237/3/04.ASP
<Quote::>
Adrian Grigorof
From a newsgroup post: "The 009 subkey is:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009.
There is a multi-string value there called Counter. All performance counters
have to be listed there. One can remove the counter for the service by typing
on the command line: unlodctr <service_name>. (I did not misspell it,
"UNLODCTR" is the file name). This of course should be done only if the
performance counters for that service are not required. See also the links
below."
From another post: "The Performance Monitor object and counter names are
stored in the "Counters" in this Registry Key:
HKEY LOCAL MACHINE\Software\Microsoft\WindowsNT\
CurrentVersion\Perflib\<LangID> (Lang ID 009 = U.S. English)
If the list of objects and counters available to chart in Performance
Monitor is incomplete or blank, it may be because Perflib subkeys other than
the 009 subkey exist. Performance Monitor only uses the contents of one
<LangID> subkey. Additional subkeys under the Perflib subkey are created when
the Language setting in Control Panel is modified.
</Quote::>
=======================================================
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 12/28/2007
Time: 9:34:01 AM
User: N/A
Computer: HOME-D0F4A760E8
Description:
Hanging application Ad-Aware.exe, version 6.2.0.236, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Uninstall Adaware and reinstall the latest version for it.
Make sure the machine is clean from malwre and viruses:
Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
After the scan run disk cleanup on your drive.
You may want to Repair the WMI as follow:
MS:: <Quote>
Stopping and Starting the WMI Service
If you are experiencing problems with the WMI service you might need to
manually stop and restart the service. Before doing so you should enable
WMI’s verbose logging option. This provides additional information in the WMI
error logs that might be useful in diagnosing the problem. To enable verbose
logging using the WMI control, do the following:
1.Open the Computer Management MMC snap-in and expand Services and
Applications.
2.Right-click WMI Control and click Properties.
3.In the WMI Control Properties dialog box, on the Logging tab, select
Verbose (includes extra information for Microsoft troubleshooting) and then
click OK.
Alternatively, you can modify the following registry values:
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging to 2.
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging File Max Size
to 4000000.
After enabling verbose logging try stopping the WMI service by typing the
following
Open a run command prompt:
net stop winmgmt
If the net stop command fails you can force the service to stop by typing
this:
winmgmt /kill
Important. If you are running Windows XP or Windows Server 2003 the WMI
service runs inside a process named Svchost; this process contains other
services as well as WMI. Because of that, you should not try to stop
Svchost;
if you succeed, you’ll stop all the other services running in that process
as
well. Instead, use net stop winmgmt or winmgmt /kill in order to stop just
the WMI service.
You can then restart the service by typing the following command:
net start winmgmt
If the service does not restart try rebooting the computer to see if that
corrects the problem.
If it does not, then continue reading.
MS:: </Quote>
Open a run command and try to re-register these DLLs:
regsvr32 hnetcfg.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
regsvr32 atl.dll
regsvr32 netshell.dll
"WMI Diagnosis Utility"
http://www.microsoft.com/technet/scriptcenter/topics/help/wmidiag.mspx
Systems that have changed the default Access Control List permissions on the
%windir%\registration directory may experience various problems after you
install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC
http://support.microsoft.com/kb/909444
Also you can download the DiagWMI from here and some good solutions on the
page:
http://windowsxp.mvps.org/repairwmi.htm.
<Ramesh Quote>:
* Insert your Windows XP CD into the drive.
Important note: If you've installed Service Pack 1 or 2, you need to
insert your Windows XP CD (with Service Pack integration, called as the
Slipstreamed Windows XP CD). If you don't have one, you may point to the
%Windir%\ServicePackFiles\i386 folder for the updated DLLs required during
WMI repair. Or, you may create a Slipstreamed XP CD, and insert it when
prompted.
* Click Start, Run and type the following command, and press enter:
rundll32.exe setupapi,InstallHinfSection WBEM 132 %windir%\inf\wbemoc.inf
* Repair process should take few minutes to complete.
Then, restart Windows for the changes to take effect
</End of Quote>
HTH.
Let us know.
nass
