Event Viewer, several critical errors - Please help!
I normally don't check the Windows XP event viewer, but I sure did today and I noticed a lot of errors that I am unfamiliar with.
I also noticed that Kerio Personal Firewall 2.1.5 was causing the system to crash. A few critical errors in the event viewer refer to that. The firewall uses its own driver named "fwdrv". When I wake up in the mornings (I leave my computer on over night), I notice my system is frozen and there is a caution symbol in the system tray with a bubble coming from it with the following error:
"Windows - Fatal Application Exit - Kerio Personal Firewall Driver - ApiInsertEventIntoQueue - Unable to allocate memory for event struct"
I realize Kerio has nothing to do with my initial inquiry, but I figured it would offer some insight as to the cause of most of these errors.
I will list below all of the critical errors I'm getting. I hope everyone can reply with solutions to at least one of them, because I don't like getting these. They completely flood the event viewer:
This error is not very frequent in the event log, although it does occur!
Code:
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2019
Date: 9/21/2005
Time: 6:22:22 AM
User: N/A
Computer: MDM
Description:
The server was unable to allocate from the
system nonpaged pool because the pool was empty.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 04 00 01 00 54 00 ......T.
0008: 00 00 00 00 e3 07 00 c0 ....ã..À
0010: 00 00 00 00 9a 00 00 c0 ....š..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 02 00 00 00 ....
This error is the one that completely floods the event log. I notice the time between each of the occurances of this error is exactly 1 minute.
Code:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7006
Date: 9/21/2005
Time: 6:26:56 AM
User: N/A
Computer: MDM
Description:
The ScRegSetValueExW call failed for Start
with the following error:
Access is denied.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
This is the error related to the Kerio problem. Hopefully someone can help out with this one as well.
Code:
Event Type: Error
Event Source: fwdrv
Event Category: None
Event ID: 4000
Date: 9/21/2005
Time: 6:30:03 AM
User: N/A
Computer: MDM
Description:
The description for Event ID ( 4000 ) in Source ( fwdrv )
cannot be found. The local computer may not have the
necessary registry information or message DLL files to display
messages from a remote computer. You may be able to use
the /AUXSOURCE= flag to retrieve this description; see Help
and Support for details. The following information is part of
the event: \Device\FWDRV, ApiInsertEventIntoQueue: Unable
to allocate memory.
Data:
0000: 00 00 00 00 02 00 4c 00 ......L.
0008: 00 00 00 00 a0 0f 00 c0 .... ..À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
This error is pretty rare, but it does happen. I think this occurs every time I boot up the PC
Code:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 9/21/2005
Time: 8:08:54 AM
User: N/A
Computer: MDM
Description:
The ASP.NET Admin Service service failed to start
due to the following error:
The system cannot find the path specified.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
This one is simply a warning, not an error, but it worries me as well. I notice sometimes that while running eMule (P2P Program), my system tray will flash the "Network Cable Unplugged" bubble for barely 25% of a second. It only happens with eMule open. I don't know if this is because of the program, or because of something wrong with Windows XP preventing it to operate properly.
Code:
Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 9/21/2005
Time: 10:45:56 AM
User: N/A
Computer: MDM
Description:
TCP/IP has reached the security limit imposed on the
number of concurrent TCP connect attempts.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
I highly suspect most of these errors have a lot to do with eMule running, although I can't be positive. Kerio works perfectly fine when eMule is not running, and my system doesn't freeze over night because of Kerio crashing when eMule is not running. Perhaps the best solution is to not use eMule at all, which I'll probably end up doing. But, in the meantime, I would like some translations for the above errors and warnings. This would help better my understanding of what exactly is causing these errors.
Thanks guys.
