• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Event Viewer=Error Codes

#1
Hi I seem to have a few errors in my Event Viewer.

I am here>Event Viewer (Local)>Window Logs>Applications.
I shall process one error code at a time.

Error>WMI>10>None?

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 3/12/2010 8:32:22 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Charlie Brown
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-12-03T00:32:22.000Z" />
<EventRecordID>96981</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Charlie Brown-PC</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>


Coments.

This item seems to be the problem.
TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Is this a Security privileges issue?

As I had a look here.WMI MGMT-(Console Root)


Right click WMIMGMT>Properties>Root>Security

Authenticated Users
Local Service
Network Services
Administrators Charlie Brown



None of these services or administrator have inherited privliges?
Is that the reason for the WMI error code 10
?

Example.

Type>Allow

Name>Administrator Charlie Brown

Permissions>Special

Inherited From>Not Inherited?

Apply To>This Names Space And Sub Names Space



Thanks.
 

Lorien

Account Suspended
#3
Hi Conrad,

Welcome to Vista Forums!

The above procedure does seem applicable; however, I notice you have SP2. Has this been a problem since you installed SP1 and you just noticed or is this something new that occurred or did you just do a massive update installation including both service packs? Before you try this procedure, create a System Restore point AND backup the registry (just to be on the safe side in case this makes things worse - I'm a bit concerned that SP2 is installed and yet you still have this issue and I'm not completely certain how this will affect the system given all the subsequent updates). I'd give it a try and then test your system thoroughly (not just for that error message but to make sure everything else works as it should). Be prepared to restore if you encounter any problems.

If that doesn't work, try the following (which also has risks, so take the same System Restore and Registry Backup precautions first):

Boot into safe mode. First, open services and stop the Windows Management Instrumentation Service. Take ownership and give yourself full rights of the folder and the contents of the folder "C:\Windows\System32\wbem\Repository." Copy the entire Repository folder and make a backup folder called Repository-old in the wbem directory. Go to the Repository folder and delete the contents of the folder - but not the folder itself. Reboot. When you boot into Vista, you might notice a half dozen or so application errors...it's OK.

Reboot again, and Event ID 10 should be gone, along with the afore mentioned application errors.

If this doesn't work or causes more or different problems, then replace the Repository folder with the Repository-old folder you saved before you started and reboot and things should return to normal (though the Event 10 problem will not yet have been solved). If you can't get in to do that, then do the System Restore to get back to how it was before you started.

I hope this helps. If not, post back and we'll examine some other options after further research.

Good luck!
 
Last edited:
#5
Hi Conrad,

Welcome to Vista Forums!

The above procedure does seem applicable; however, I notice you have SP2. Has this been a problem since you installed SP1 and you just noticed or is this something new that occurred or did you just do a massive update installation including both service packs? Before you try this procedure, create a System Restore point AND backup the registry (just to be on the safe side in case this makes things worse - I'm a bit concerned that SP2 is installed and yet you still have this issue and I'm not completely certain how this will affect the system given all the subsequent updates). I'd give it a try and then test your system thoroughly (not just for that error message but to make sure everything else works as it should). Be prepared to restore if you encounter any problems.

If that doesn't work, try the following (which also has risks, so take the same System Restore and Registry Backup precautions first):

Boot into safe mode. First, open services and stop the Windows Management Instrumentation Service. Take ownership and give yourself full rights of the folder and the contents of the folder "C:\Windows\System32\wbem\Repository." Copy the entire Repository folder and make a backup folder called Repository-old in the wbem directory. Go to the Repository folder and delete the contents of the folder - but not the folder itself. Reboot. When you boot into Vista, you might notice a half dozen or so application errors...it's OK.

Reboot again, and Event ID 10 should be gone, along with the afore mentioned application errors.

If this doesn't work or causes more or different problems, then replace the Repository folder with the Repository-old folder you saved before you started and reboot and things should return to normal (though the Event 10 problem will not yet have been solved). If you can't get in to do that, then do the System Restore to get back to how it was before you started.

I hope this helps. If not, post back and we'll examine some other options after further research.

Good luck!
That WMI error code 10 was in SP1 also.

Thanks.
 
#7
Ok thanks for the info on WMI Error code 10.


This Error Code 1530 was in SP1 also. Details 1 user registry handles leaked.
Now SP2 1530 has increased. Details 17 user registry handles leaked.

Warning 1/12/2010 11:02:03 PM User Profile Service 1530 None

Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 1/12/2010 11:02:03 PM
Event ID: 1530
Task Category: None
Level: Warning
Keywords: Classic
User: SYSTEM
Computer: Charlie Brown-PC
Description:
Windows detected your registry file is still in use by other applications or services.
The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
17 user registry handles leaked from \Registry\User\S-1-5-21-1211916979-2642572776-351638372-1003:
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\My
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\CA
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\Root
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\TrustedPeople
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\trust
Process 1600 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1600 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\Disallowed

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
<EventID Qualifiers="32768">1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-12-01T15:02:03.000Z" />
<EventRecordID>96897</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Charlie Brown-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">17 user registry handles leaked from \Registry\User\S-1-5-21-1211916979-2642572776-351638372-1003:
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\My
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\CA
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\Root
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\TrustedPeople
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\trust
Process 1600 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1600 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Policies\Microsoft\SystemCertificates
Process 2848 (\Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE) has opened key \REGISTRY\USER\S-1-5-21-1211916979-2642572776-351638372-1003\Software\Microsoft\SystemCertificates\Disallowed
</Data>
</EventData>
</Event>


This Error Code 1530 seems aggressive in action.
 
#9
Hi & thank you for the reply.

So where does that leave you?

Do you need further assistance or are you sorted? You have left me :confused:
Ok thanks for the information to repair Error Code WMI 10.
At the moment i will not do anything.
As its not to serious.
There is 9 error codes i want to get sorted in Event Viewer.
I have posted the second one>Error Code 1530
When i can gather all the information about the Error Codes.
I will do the most serious one first.

Till then be patient thanks.
 
Last edited:
#10
Ok well that's interesting Microsoft Quotes :shock:>> Note: Event ID 1530 is logged as a Warning event. However, this behavior is expected. Usually, you can safely ignore this event.
According to Microsoft it's ok.
Sort makes me wonder why? though.
Must be like crossing live electrical wires>causes a spark'
Hence user application in use? causes 1530 error code.
Would a restore point? fix Error Code 1530
Okay well at he moment i shall leave that as it's not serious.
 
#11
Ok well that's interesting Microsoft Quotes :shock:>> Note: Event ID 1530 is logged as a Warning event. However, this behavior is expected. Usually, you can safely ignore this event.
According to Microsoft it's ok.
Sort makes me wonder why? though.
Must be like crossing live electrical wires>causes a spark'
Hence user application in use? causes 1530 error code.
Would a restore point? fix Error Code 1530
Okay well at he moment i shall leave that as it's not serious.
It is fine because this warning is caused by a poorly coded application. However, Windows then stops any damage that may be caused. So, for you, it makes no difference. It is just telling code developers that there is a very slight issue in the application that Windows had to deal with rather than the application. However, because Windows deals with it, it is not an issue to you, an end user, only the original developer.
 
#12
Hi ok thanks for your information on the other error codes.

This is a new one below.

Log Name: Application
Source: Application Error
Date: 2/12/2010 9:56:58 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Charlie Brown-PC
Description:
Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module SynTPCpl.dll, version 10.1.7.0, time stamp 0x474f6876, exception code 0xc0000005, fault offset 0x0002e29f, process id 0x1110, application start time 0x01cb91c42c94d5b6.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-12-02T01:56:58.000Z" />
<EventRecordID>96941</EventRecordID>
<Channel>Application</Channel>
<Computer>Charlie Brown-PC</Computer>
<Security />
</System>
<EventData>
<Data>rundll32.exe</Data>
<Data>6.0.6000.16386</Data>
<Data>4549b0e1</Data>
<Data>SynTPCpl.dll</Data>
<Data>10.1.7.0</Data>
<Data>474f6876</Data>
<Data>c0000005</Data>
<Data>0002e29f</Data>
<Data>1110</Data>
<Data>01cb91c42c94d5b6</Data>
</EventData>
</Event>


Log Name: Application
Source: Application Error
Date: 2/12/2010 9:56:58 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Charlie Brown-PC
Description:
Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module SynTPCpl.dll, version 10.1.7.0, time stamp 0x474f6876, exception code 0xc0000005, fault offset 0x0002e29f, process id 0x1110, application start time 0x01cb91c42c94d5b6.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-12-02T01:56:58.000Z" />
<EventRecordID>96941</EventRecordID>
<Channel>Application</Channel>
<Computer>Charlie Brown-PC</Computer>
<Security />
</System>
<EventData>
<Data>rundll32.exe</Data>
<Data>6.0.6000.16386</Data>
<Data>4549b0e1</Data>
<Data>SynTPCpl.dll</Data>
<Data>10.1.7.0</Data>
<Data>474f6876</Data>
<Data>c0000005</Data>
<Data>0002e29f</Data>
<Data>1110</Data>
<Data>01cb91c42c94d5b6</Data>
</EventData>
</Event>

Thanks.
 
#13
Ok well that's interesting Microsoft Quotes :shock:>> Note: Event ID 1530 is logged as a Warning event. However, this behavior is expected. Usually, you can safely ignore this event.
According to Microsoft it's ok.
Sort makes me wonder why? though.
Must be like crossing live electrical wires>causes a spark'
Hence user application in use? causes 1530 error code.
Would a restore point? fix Error Code 1530
Okay well at he moment i shall leave that as it's not serious.
It is fine because this warning is caused by a poorly coded application. However, Windows then stops any damage that may be caused. So, for you, it makes no difference. It is just telling code developers that there is a very slight issue in the application that Windows had to deal with rather than the application. However, because Windows deals with it, it is not an issue to you, an end user, only the original developer.
Okay thanks thats a relief ;)
 
#15
Whenever I try to access the advanced settings option in my "TouchPad"
Hi,

Try this:- (post #6 & #7)

"windows host process rundll32 has stopped working"

This is for a HP laptop but the principal is the same!
Okay thanks we have a fix to do.
I tried to check the Synaptic's Pointing device driver.
And got this error message.
Unable to connect to the Synaptic's Pointing Device driver.

Okay so i use the touch-pad.
Plus i have Microsoft Notebook Optical mouse 3000.
If i follow the error message suggestion.
Will the touch-pad pointer still work after.

Both drivers need to be re-installed?
Or just the Synaptic's driver.


PS:Attachment.
Thanks

 
Last edited:

Lottiemansion

Vista Guru
Gold Member
#16
Okay so i use the touch-pad.
Plus i have Microsoft Notebook Optical mouse 3000.
If i follow the error message suggestion.
Will the touch-pad pointer still work after.

Both drivers need to be re-installed?
Or just the Synaptic's driver.
Hi,

If you don't have the Synaptic hardware you don't need the driver so un-install it.

If you feel the need, you also could re-install both mouse & touch-pad drivers.

Please ensure you have the latest versions & they are applicable to your
manufacturer, system & Windows version etc!

You could also "Deactivate" the touch-pad in the BIOS if it's not really used but I would not have thought that was neccassary, they should just run side by side.
 
#17
Okay so i use the touch-pad.
Plus i have Microsoft Notebook Optical mouse 3000.
If i follow the error message suggestion.
Will the touch-pad pointer still work after.

Both drivers need to be re-installed?
Or just the Synaptic's driver.
Hi,

If you don't have the Synaptic hardware you don't need the driver so un-install it.

If you feel the need, you also could re-install both mouse & touch-pad drivers.

Please ensure you have the latest versions & they are applicable to your
manufacturer, system & Windows version etc!

You could also "Deactivate" the touch-pad in the BIOS if it's not really used but I would not have thought that was neccassary, they should just run side by side.
Ok well i use the Touch-pad Plus Mouse so i need to replace both drivers.
I shall attempt that now as its a urgent fix.
 
#18
Hi ok i have changed the SynapticTouch-Pad Driver plus the Microsoft Notebook Optical mouse 3000 Driver through the Device Manager Update Drivers.

Touch-Pad plus Mouse is all working okay now.
:)
 
Last edited:
#19
Hi thanks for help fixing the SynapticTouch-Pad Plus Microsoft Mouse driver.

The next one is Application Hang Error Code 1002


Log Name: Application
Source: Application Hang
Date: 6/12/2010 10:26:37 AM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: Charlie Brown-PC
Description:
The program msiexec.exe version 4.5.6002.18005 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: 15f8 Start Time: 01cb94ecc3471ee9 Termination Time: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</EventID>
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-12-06T02:26:37.000Z" />
<EventRecordID>97387</EventRecordID>
<Channel>Application</Channel>
<Computer>Charlie Brown-PC</Computer>
<Security />
</System>
<EventData>
<Data>msiexec.exe</Data>
<Data>4.5.6002.18005</Data>
<Data>15f8</Data>
<Data>01cb94ecc3471ee9</Data>
<Data>4</Data>
<Binary>55006E006B006E006F0077006E0000000000</Binary>
</EventData>
</Event>



Log Name: Application
Source: Application Hang
Date: 6/12/2010 10:26:37 AM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: Charlie Brown-PC
Description:
The program msiexec.exe version 4.5.6002.18005 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: 15f8 Start Time: 01cb94ecc3471ee9 Termination Time: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</EventID>
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-12-06T02:26:37.000Z" />
<EventRecordID>97387</EventRecordID>
<Channel>Application</Channel>
<Computer>Charlie Brown-PC</Computer>
<Security />
</System>
<EventData>
<Data>msiexec.exe</Data>
<Data>4.5.6002.18005</Data>
<Data>15f8</Data>
<Data>01cb94ecc3471ee9</Data>
<Data>4</Data>
<Binary>55006E006B006E006F0077006E0000000000</Binary>
</EventData>
</Event>


Thanks.
 

Lottiemansion

Vista Guru
Gold Member
#20
Hi,

This error appears to be associated with installation or removal of software.

What software did you try to install/ remove?

There is no associated software in the message to indicate what else caused the error?