Faulting application wmiprvse.exe, version 5.1.2600.5755, faulting module shell32.dll, version 6.0.2900.5622, fault address 0x00030f1e
Hi ,
I am getting the following two errors on my domain machines and is causing lot of concern. Can someone help in detrming what might be casuing these to show in events logs.
Error- 1
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 3/19/2010
Time: 2:42:37 AM
User: N/A
Computer: JCLAYTON-DS
Description:
Faulting application wmiprvse.exe, version 5.1.2600.5755, faulting module shell32.dll, version 6.0.2900.5622, fault address 0x00030f1e.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 77 6d 69 ure wmi
0018: 70 72 76 73 65 2e 65 78 prvse.ex
0020: 65 20 35 2e 31 2e 32 36 e 5.1.26
0028: 30 30 2e 35 37 35 35 20 00.5755
0030: 69 6e 20 73 68 65 6c 6c in shell
0038: 33 32 2e 64 6c 6c 20 36 32.dll 6
0040: 2e 30 2e 32 39 30 30 2e .0.2900.
0048: 35 36 32 32 20 61 74 20 5622 at
0050: 6f 66 66 73 65 74 20 30 offset 0
0058: 30 30 33 30 66 31 65 0030f1e
Error -2 :
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/19/2010
Time: 2:43:15 AM
User: NT AUTHORITY\SYSTEM
Computer: JCLAYTON-DS
Description:
Windows saved user NBTTECH\adwritelansw registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
March 27th, 2010 12:44am
For issue 2, you may want to check out the User Profile Hive Cleanup Service.
For issue 1, do you happen to have a user.dmp from Dr. Watson? The fault code isn't identified anywhere, is it (0xc0000005, 0xc00000fd, etc.)?
Free Windows Admin Tool Kit Click here and download it now
March 28th, 2010 1:48am