Log Name: Application
Source: Microsoft-Windows-LoadPerf
Date: 10/27/2011 9:39:32 PM
Event ID: 3012
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Thomas-PC
Description:
The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-LoadPerf" Guid="{122EE297-BB47-41AE-B265-1CA8D1886D40}" />
<EventID>3012</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2011-10-28T04:39:32.711919000Z" />
<EventRecordID>27318</EventRecordID>
<Correlation />
<Execution ProcessID="4764" ThreadID="4840" />
<Channel>Application</Channel>
<Computer>Thomas-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<EventXML xmlns:auto-ns2="
http://schemas.microsoft.com/win/2004/08/events" xmlns="LoadPerf">
<param1>Performance</param1>
<binaryDataSize>16</binaryDataSize>
<binaryData>37070000000000000000000009030000</binaryData>
</EventXML>
</UserData>
</Event>