Windows 2003 SP2 perflib event id 2003

i have multiple windows 2003 sp2 servers throwing perflib event id 2003 in application event logs. errors vary between servers, take similar formats:

aug 28 07:06:38 server01 perflib: 2003: the configuration information of the performance library "c:\windows\system32\aspperf.dll" for the "asp" service does not match the trusted performance library information stored in the registry. the functions in this library will not be treated as trusted.

aug 28 07:06:43 server01 perflib: 2003: the configuration information of the performance library "c:\windows\system32\perfts.dll" for the "termservice" service does not match the trusted performance library information stored in the registry. the functions in this library will not be treated as trusted.

aug 28 07:06:43 server01 perflib: 2003: the configuration information of the performance library "c:\windows\system32\inetsrv\w3ctrs.dll" for the "w3svc" service does not match the trusted performance library information stored in the registry. the functions in this library will not be treated as trusted.

this began when started monitoring these systems opennms. no changes made servers - opennms self-contained application running on separate host. affected servers running snmp informant. collecting data via cacti no errors, opennms queries many more oids out of box cacti.

servers running sp1 not affected. have not been able manually reproduce error, doing full snmpwalk.

this happens no more once day per server, not every day , not @ same time each day.

i've tried unloading , reloading performance libraries unlodctr , lodctr (followed reboot), forcing trusts lodctr /t, has not yielded change.

i'm baffled. appreciated.

-hks

 

hi,

 

according research, these might generated performance monitor extensions. harmless our system. however, floods our event log.

 

therefore, work around issue, add following registry key prevents performance monitor testing data buffer alignment errors:

warning: if use registry editor incorrectly, may cause serious
problems may require reinstall operating system. microsoft
cannot guarantee can solve problems result using
registry editor incorrectly. use registry editor @ own risk.

1. start registry editor (regedt32.exe).

2. locate , click following registry key:

hkey_local_machine\software\microsoft\windows nt\currentversion\perflib

3. on edit menu, click add value, , add following value:

value name: configuration flags
data type: regdword
value: 0x01

4. quit registry editor.

for event 2003 error message, please open regedit, locate the
"hkey_local_machine\system\currentcontrolset\servi ces\w3svc\performance"
registry key , find "library validation code" value.

 

the data of the registry value checked against file creation time
and file size of "%systemroot%\system32\inetsrv\w3ctrs.dll" dll.
this error posted if not match. resolve error, may
remove , reinstall iis. see following knowledge base article more
information:

320202 how remove , reinstall iis , exchange
http://support.microsoft.com/?id=320202
for more information, please refer following knowledge base article:

249138. kb.en-us info: controlling disabling of performance monitor
extension
http://support.microsoft.com/default...b;en-us;249138

additional information:

events performance monitor extensions
http://support.microsoft.com/?id=226494

152513 troubleshooting performance monitor counter problems
http://support.microsoft.com/?id=152513

 

Windows Server  >  Windows Server General Forum