Event Viewer, several critical errors - Please help!

[MrDoomMaster]

I normally don't check the Windows XP event viewer, but I sure did today and I noticed a lot of errors that I am unfamiliar with.

I also noticed that Kerio Personal Firewall 2.1.5 was causing the system to crash. A few critical errors in the event viewer refer to that. The firewall uses its own driver named "fwdrv". When I wake up in the mornings (I leave my computer on over night), I notice my system is frozen and there is a caution symbol in the system tray with a bubble coming from it with the following error:

"Windows - Fatal Application Exit - Kerio Personal Firewall Driver - ApiInsertEventIntoQueue - Unable to allocate memory for event struct"

I realize Kerio has nothing to do with my initial inquiry, but I figured it would offer some insight as to the cause of most of these errors.

I will list below all of the critical errors I'm getting. I hope everyone can reply with solutions to at least one of them, because I don't like getting these. They completely flood the event viewer:

This error is not very frequent in the event log, although it does occur!

Event Type:	Error
Event Source:	Srv
Event Category:	None
Event ID:	2019
Date:		9/21/2005
Time:		6:22:22 AM
User:		N/A
Computer:	MDM
Description:
The server was unable to allocate from the 
system nonpaged pool because the pool was empty.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 04 00 01 00 54 00   ......T.
0008: 00 00 00 00 e3 07 00 c0   ....ã..À
0010: 00 00 00 00 9a 00 00 c0   ....š..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 02 00 00 00               ....

This error is the one that completely floods the event log. I notice the time between each of the occurances of this error is exactly 1 minute.

Event Type:	Error
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7006
Date:		9/21/2005
Time:		6:26:56 AM
User:		N/A
Computer:	MDM
Description:
The ScRegSetValueExW call failed for Start 
with the following error: 
Access is denied. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This is the error related to the Kerio problem. Hopefully someone can help out with this one as well.

Event Type:	Error
Event Source:	fwdrv
Event Category:	None
Event ID:	4000
Date:		9/21/2005
Time:		6:30:03 AM
User:		N/A
Computer:	MDM
Description:
The description for Event ID ( 4000 ) in Source ( fwdrv ) 
cannot be found. The local computer may not have the 
necessary registry information or message DLL files to display 
messages from a remote computer. You may be able to use 
the /AUXSOURCE= flag to retrieve this description; see Help 
and Support for details. The following information is part of 
the event: \Device\FWDRV, ApiInsertEventIntoQueue: Unable 
to allocate memory.

Data:
0000: 00 00 00 00 02 00 4c 00   ......L.
0008: 00 00 00 00 a0 0f 00 c0   .... ..À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

This error is pretty rare, but it does happen. I think this occurs every time I boot up the PC

Event Type:	Error
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7000
Date:		9/21/2005
Time:		8:08:54 AM
User:		N/A
Computer:	MDM
Description:
The ASP.NET Admin Service service failed to start
due to the following error: 
The system cannot find the path specified. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This one is simply a warning, not an error, but it worries me as well. I notice sometimes that while running eMule (P2P Program), my system tray will flash the "Network Cable Unplugged" bubble for barely 25% of a second. It only happens with eMule open. I don't know if this is because of the program, or because of something wrong with Windows XP preventing it to operate properly.

Event Type:	Warning
Event Source:	Tcpip
Event Category:	None
Event ID:	4226
Date:		9/21/2005
Time:		10:45:56 AM
User:		N/A
Computer:	MDM
Description:
TCP/IP has reached the security limit imposed on the 
number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00   ......T.
0008: 00 00 00 00 82 10 00 80   ....‚..€
0010: 01 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

I highly suspect most of these errors have a lot to do with eMule running, although I can't be positive. Kerio works perfectly fine when eMule is not running, and my system doesn't freeze over night because of Kerio crashing when eMule is not running. Perhaps the best solution is to not use eMule at all, which I'll probably end up doing. But, in the meantime, I would like some translations for the above errors and warnings. This would help better my understanding of what exactly is causing these errors.

Thanks guys.

[liam858]

ID 4226 ---- http://blog.davidkaspar.com/archives...nt_id_4226.php

ID 7000 ---- http://support.microsoft.com/default...&Product=winxp

ID 2019 ---- http://www.microsoft.com/technet/pro...2a17f662a.mspx

ID 7006 ---- http://www.eventid.net/display.asp?eventid=7006

ID 4000 ---- http://www.eventid.net/display.asp?eventid=4000


Liam

[MrDoomMaster]

Thanks for the help!

[liam858]

You're Welcome.



Liam

[MrDoomMaster]

Event ID 7006 is pretty much the onlyone left I'm confused about, the others just "magically" stopped appearing.

This error is spamming my event viewer, and it's getting very annoying and frustrating.

The link you provided, liam, to event 7006 makes you pay for the information regarding that error... very weird.

Anyhow, if someone could provide some more input on this error I would greatly appreciate it, I really want it to stop.

I'll post the error information again below:

Event Type:	Error
Event Source:	Service Control Manager
Event Category:	None
Event ID:	7006
Date:		9/28/2005
Time:		11:19:26 AM
User:		N/A
Computer:	MDM
Description:
The ScRegSetValueExW call failed for Start with the following error: 
Access is denied. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

[liam858]

Sorry about the link, didn't realise it costs, bit stupid really, the only things i can seem to find either point to: "A service with the same name already exists on the system." or an internet service error: "7006 tcp/udp afs3-errors interpretation service" and there is no resolution shown, AFAIK it could be numerous problems, one example was someone who fixed this by reinstalling some corrupt printer drivers. Good luck.


Liam

[MrDoomMaster]

Sorry about the link, didn't realise it costs, bit stupid really, the only things i can seem to find either point to: "A service with the same name already exists on the system." or an internet service error: "7006 tcp/udp afs3-errors interpretation service" and there is no resolution shown, AFAIK it could be numerous problems, one example was someone who fixed this by reinstalling some corrupt printer drivers. Good luck.


Liam

I found this exact same information on google, although it wasn't very helpful

Thanks for helping!