Faulting application wmiprvse.exe, version 5.1.2600.5755, faulting module shell32.dll, version 6.0.2900.5622, fault address 0x00030f1e
Hi , I am getting the following two errors on my domain machines and is causing lot of concern. Can someone help in detrming what might be casuing these to show in events logs. Error- 1 Event Type: Error Event Source: Application Error Event Category: (100) Event ID: 1000 Date: 3/19/2010 Time: 2:42:37 AM User: N/A Computer: JCLAYTON-DS Description: Faulting application wmiprvse.exe, version 5.1.2600.5755, faulting module shell32.dll, version 6.0.2900.5622, fault address 0x00030f1e. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 41 70 70 6c 69 63 61 74 Applicat 0008: 69 6f 6e 20 46 61 69 6c ion Fail 0010: 75 72 65 20 20 77 6d 69 ure wmi 0018: 70 72 76 73 65 2e 65 78 prvse.ex 0020: 65 20 35 2e 31 2e 32 36 e 5.1.26 0028: 30 30 2e 35 37 35 35 20 00.5755 0030: 69 6e 20 73 68 65 6c 6c in shell 0038: 33 32 2e 64 6c 6c 20 36 32.dll 6 0040: 2e 30 2e 32 39 30 30 2e .0.2900. 0048: 35 36 32 32 20 61 74 20 5622 at 0050: 6f 66 66 73 65 74 20 30 offset 0 0058: 30 30 33 30 66 31 65 0030f1e Error -2 : Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 3/19/2010 Time: 2:43:15 AM User: NT AUTHORITY\SYSTEM Computer: JCLAYTON-DS Description: Windows saved user NBTTECH\adwritelansw registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
March 27th, 2010 12:44am

For issue 2, you may want to check out the User Profile Hive Cleanup Service. For issue 1, do you happen to have a user.dmp from Dr. Watson? The fault code isn't identified anywhere, is it (0xc0000005, 0xc00000fd, etc.)?
Free Windows Admin Tool Kit Click here and download it now
March 28th, 2010 1:48am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics