Windows Event Logs 2

[thaterrormessage]

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:09 AM
Event ID: 1023
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
Windows cannot load the extensible counter DLL "perf-MSSQL$CRM-sqlctr11.2.5058.0.dll" (Win32 error code The specified module could not be found.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1023</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:09.562193300Z" />
<EventRecordID>28914</EventRecordID>
<Correlation />
<Execution ProcessID="7132" ThreadID="6204" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">perf-MSSQL$CRM-sqlctr11.2.5058.0.dll</Data>
<Data Name="Win32Error">126</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-PerfNet
Date: 2/7/2022 11:19:02 AM
Event ID: 2004
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-PerfNet" Guid="{CAB2B8A5-49B9-4EEC-B1B0-FAC21DA05A3B}" EventSourceName="PerfNet" />
<EventID Qualifiers="49152">2004</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:19:02.857145600Z" />
<EventRecordID>28798</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Binary>220000C0</Binary>
</EventData>
</Event>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/25/2022 6:58:58 AM
Event ID: 8208
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: fhccxw10mp30077.
Description:
Acquisition of genuine ticket failed (hr=0x80072EE2) for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">8208</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:58.419978400Z" />
<EventRecordID>28960</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security />
</System>
<EventData>
<Data>hr=0x80072EE2</Data>
<Data>{99d92734-d682-4d71-983e-d6ec3f16059f}</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:09 AM
Event ID: 1017
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
Disabled performance counter data collection from the "Citrix User Profile Manager" service because the performance counter library for that service has generated one or more errors. The errors that forced this action have been written to the application event log. Correct the errors before enabling the performance counters for this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1017</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:09.294636000Z" />
<EventRecordID>28909</EventRecordID>
<Correlation />
<Execution ProcessID="1112" ThreadID="4600" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Service">Citrix User Profile Manager</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:09 AM
Event ID: 1022
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
Windows cannot open the 64-bit extensible counter DLL C:\Program Files\Citrix\User Profile Manager\upmperf.dll in a 32-bit environment (Win32 error code C:\Program Files\Citrix\User Profile Manager\upmperf.dll is not a valid Win32 application.). Contact the file vendor to obtain a 32-bit version. Alternatively if you are running a 64-bit native environment, you can open the 64-bit extensible counter DLL by using the 64-bit version of Performance Monitor. To use this tool, open the Windows folder, open the System32 folder, and then start Perfmon.exe.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1022</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:09.294575300Z" />
<EventRecordID>28908</EventRecordID>
<Correlation />
<Execution ProcessID="1112" ThreadID="4600" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Program Files\Citrix\User Profile Manager\upmperf.dll</Data>
<Data Name="Win32Error">193</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:09 AM
Event ID: 1022
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
Windows cannot open the 64-bit extensible counter DLL C:\Program Files\Citrix\ICAService\icaperf.dll in a 32-bit environment (Win32 error code C:\Program Files\Citrix\ICAService\icaperf.dll is not a valid Win32 application.). Contact the file vendor to obtain a 32-bit version. Alternatively if you are running a 64-bit native environment, you can open the 64-bit extensible counter DLL by using the 64-bit version of Performance Monitor. To use this tool, open the Windows folder, open the System32 folder, and then start Perfmon.exe.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1022</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:09.331356900Z" />
<EventRecordID>28910</EventRecordID>
<Correlation />
<Execution ProcessID="1112" ThreadID="4600" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Program Files\Citrix\ICAService\icaperf.dll</Data>
<Data Name="Win32Error">193</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:22:31 AM
Event ID: 1017
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: WIN10BASE
Description:
Disabled performance counter data collection from the "CitrixICA" service because the performance counter library for that service has generated one or more errors. The errors that forced this action have been written to the application event log. Correct the errors before enabling the performance counters for this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1017</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:31.488591700Z" />
<EventRecordID>28855</EventRecordID>
<Correlation />
<Execution ProcessID="124" ThreadID="8028" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Service">CitrixICA</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:22:55 AM
Event ID: 8198
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
License Activation (slui.exe) failed with the following error code:
hr=0x8007139F
Command-line arguments:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=32d2fab3-e4a8-42c2-923b-4bf4fd13e6ee;NotificationInterval=1440;Trigger=TimerEvent
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">8198</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:55.966041000Z" />
<EventRecordID>28870</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>hr=0x8007139F</Data>
<Data>RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=32d2fab3-e4a8-42c2-923b-4bf4fd13e6ee;NotificationInterval=1440;Trigger=TimerEvent</Data>
</EventData>
</Event>

Log Name: Application
Source: ProuNetCmdService
Date: 2/7/2022 11:22:49 AM
Event ID: 0
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
Failed to process service command. System.ArgumentException: unexpected command: 15
at LwL.ProfileUnity.Client.CmdService.Service.CmdService.OnCustomCommand(Int32 command)
at LwL.ProfileUnity.Client.CmdService.Framework.ServiceRunnerAsWindowsService.OnCustomCommand(Int32 command)
at System.ServiceProcess.ServiceBase.DeferredCustomCommand(Int32 command)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ProuNetCmdService" />
<EventID Qualifiers="0">0</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:49.841002200Z" />
<EventRecordID>28862</EventRecordID>
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>Failed to process service command. System.ArgumentException: unexpected command: 15
at LwL.ProfileUnity.Client.CmdService.Service.CmdService.OnCustomCommand(Int32 command)
at LwL.ProfileUnity.Client.CmdService.Framework.ServiceRunnerAsWindowsService.OnCustomCommand(Int32 command)
at System.ServiceProcess.ServiceBase.DeferredCustomCommand(Int32 command)</Data>
</EventData>
</Event>

Log Name: Application
Source: ProuNetCmdService
Date: 1/19/2022 10:44:38 AM
Event ID: 0
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
Failed to process service command. System.ArgumentException: unexpected command: 15
at LwL.ProfileUnity.Client.CmdService.Service.CmdService.OnCustomCommand(Int32 command)
at LwL.ProfileUnity.Client.CmdService.Framework.ServiceRunnerAsWindowsService.OnCustomCommand(Int32 command)
at System.ServiceProcess.ServiceBase.DeferredCustomCommand(Int32 command)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ProuNetCmdService" />
<EventID Qualifiers="0">0</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-01-19T16:44:38.451136500Z" />
<EventRecordID>28725</EventRecordID>
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>Failed to process service command. System.ArgumentException: unexpected command: 15
at LwL.ProfileUnity.Client.CmdService.Service.CmdService.OnCustomCommand(Int32 command)
at LwL.ProfileUnity.Client.CmdService.Framework.ServiceRunnerAsWindowsService.OnCustomCommand(Int32 command)
at System.ServiceProcess.ServiceBase.DeferredCustomCommand(Int32 command)</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:10 AM
Event ID: 1023
Task Category: None
Level: Error
Keywords:
User: NETWORK SERVICE
Computer: fhccxw10mp30077.
Description:
Windows cannot load the extensible counter DLL "perf-MSSQL11.CRM-sqlagtctr.dll" (Win32 error code The specified module could not be found.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1023</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:10.515954700Z" />
<EventRecordID>28921</EventRecordID>
<Correlation />
<Execution ProcessID="5764" ThreadID="4284" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="Library">perf-MSSQL11.CRM-sqlagtctr.dll</Data>
<Data Name="Win32Error">126</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:10 AM
Event ID: 1023
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code The specified module could not be found.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1023</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:10.305437600Z" />
<EventRecordID>28920</EventRecordID>
<Correlation />
<Execution ProcessID="1112" ThreadID="4600" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Windows\system32\sysmain.dll</Data>
<Data Name="Win32Error">126</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:10 AM
Event ID: 1023
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
Windows cannot load the extensible counter DLL "perf-MSSQL11.CRM-sqlagtctr.dll" (Win32 error code The specified module could not be found.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1023</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:10.516072300Z" />
<EventRecordID>28922</EventRecordID>
<Correlation />
<Execution ProcessID="7132" ThreadID="6204" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">perf-MSSQL11.CRM-sqlagtctr.dll</Data>
<Data Name="Win32Error">126</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:22:31 AM
Event ID: 1017
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: WIN10BASE
Description:
Disabled performance counter data collection from the "Citrix User Profile Manager" service because the performance counter library for that service has generated one or more errors. The errors that forced this action have been written to the application event log. Correct the errors before enabling the performance counters for this service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1017</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:31.483991300Z" />
<EventRecordID>28854</EventRecordID>
<Correlation />
<Execution ProcessID="124" ThreadID="8028" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Service">Citrix User Profile Manager</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-PerfNet
Date: 2/7/2022 11:22:31 AM
Event ID: 2004
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-PerfNet" Guid="{CAB2B8A5-49B9-4EEC-B1B0-FAC21DA05A3B}" EventSourceName="PerfNet" />
<EventID Qualifiers="49152">2004</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:31.831280800Z" />
<EventRecordID>28853</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Binary>220000C0</Binary>
</EventData>
</Event>


Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:17:49 AM
Event ID: 2003
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: WIN10BASE
Description:
The configuration information of the performance library "C:\Windows\System32\perfts.dll" for the "TermService" service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>2003</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:17:49.248247600Z" />
<EventRecordID>28769</EventRecordID>
<Correlation />
<Execution ProcessID="8628" ThreadID="5048" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Windows\System32\perfts.dll</Data>
<Data Name="Service">TermService</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:17:44 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: WIN10BASE
Description:
The Open procedure for service ".NETFramework" in DLL "C:\Windows\system32\mscoree.dll" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:17:44.313149800Z" />
<EventRecordID>28755</EventRecordID>
<Correlation />
<Execution ProcessID="4524" ThreadID="4552" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Service">.NETFramework</Data>
<Data Name="Library">C:\Windows\system32\mscoree.dll</Data>
<Data Name="Win32Error">2</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:17:47 AM
Event ID: 2003
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: WIN10BASE
Description:
The configuration information of the performance library "C:\Windows\System32\perfts.dll" for the "LSM" service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>2003</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:17:47.890624100Z" />
<EventRecordID>28765</EventRecordID>
<Correlation />
<Execution ProcessID="8628" ThreadID="5048" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Windows\System32\perfts.dll</Data>
<Data Name="Service">LSM</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:17:43 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: WIN10BASE
Description:
The Open procedure for service ".NETFramework" in DLL "C:\Windows\system32\mscoree.dll" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:17:43.983015300Z" />
<EventRecordID>28754</EventRecordID>
<Correlation />
<Execution ProcessID="5268" ThreadID="8732" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="Service">.NETFramework</Data>
<Data Name="Library">C:\Windows\system32\mscoree.dll</Data>
<Data Name="Win32Error">2</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:17:47 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: WIN10BASE
Description:
The Open procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:17:47.638645200Z" />
<EventRecordID>28760</EventRecordID>
<Correlation />
<Execution ProcessID="8628" ThreadID="5048" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Service">BITS</Data>
<Data Name="Library">C:\Windows\System32\bitsperf.dll</Data>
<Data Name="Win32Error">2</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:09 AM
Event ID: 2003
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
The configuration information of the performance library "C:\Windows\System32\perfts.dll" for the "LSM" service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>2003</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:09.518602800Z" />
<EventRecordID>28912</EventRecordID>
<Correlation />
<Execution ProcessID="1112" ThreadID="4600" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Windows\System32\perfts.dll</Data>
<Data Name="Service">LSM</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:06 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: fhccxw10mp30077.
Description:
The Open procedure for service ".NETFramework" in DLL "C:\Windows\system32\mscoree.dll" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:06.184588200Z" />
<EventRecordID>28902</EventRecordID>
<Correlation />
<Execution ProcessID="5764" ThreadID="4284" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="Service">.NETFramework</Data>
<Data Name="Library">C:\Windows\system32\mscoree.dll</Data>
<Data Name="Win32Error">2</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:17:47 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: WIN10BASE
Description:
The Open procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed with error code Access is denied.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:17:47.578464400Z" />
<EventRecordID>28757</EventRecordID>
<Correlation />
<Execution ProcessID="5268" ThreadID="8732" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="Service">BITS</Data>
<Data Name="Library">C:\Windows\System32\bitsperf.dll</Data>
<Data Name="Win32Error">5</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/25/2022 6:58:09 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: fhccxw10mp30077.
Description:
The Open procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed with error code The system cannot find the file specified.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-25T12:58:09.293079300Z" />
<EventRecordID>28907</EventRecordID>
<Correlation />
<Execution ProcessID="1112" ThreadID="4600" />
<Channel>Application</Channel>
<Computer>fhccxw10mp30077.</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Service">BITS</Data>
<Data Name="Library">C:\Windows\System32\bitsperf.dll</Data>
<Data Name="Win32Error">2</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:19:02 AM
Event ID: 8233
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
The rules engine reported a failed VL activation attempt.
Reason:0x800705B4
AppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = 4f414197-0fc2-4c01-b68a-86cbb9ac254c
Trigger=NetworkAvailable
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">8233</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:19:02.685241700Z" />
<EventRecordID>28797</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>0x800705B4</Data>
<Data>0ff1ce15-a989-479d-af46-f275c6370663</Data>
<Data>4f414197-0fc2-4c01-b68a-86cbb9ac254c</Data>
<Data>NetworkAvailable</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:22:19 AM
Event ID: 8225
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
The existing scheduler data does not match the expected data. The schedule will be re-evaluated.
Reason:0x8007000D
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">8225</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:19.028364500Z" />
<EventRecordID>28819</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>0x8007000D</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:18:57 AM
Event ID: 8233
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
The rules engine reported a failed VL activation attempt.
Reason:0x800705B4
AppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = d450596f-894d-49e0-966a-fd39ed4c4c64
Trigger=TimerEvent
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">8233</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:18:57.357150500Z" />
<EventRecordID>28791</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>0x800705B4</Data>
<Data>0ff1ce15-a989-479d-af46-f275c6370663</Data>
<Data>d450596f-894d-49e0-966a-fd39ed4c4c64</Data>
<Data>TimerEvent</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:22:31 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: WIN10BASE
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\Windows\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:22:31.960739200Z" />
<EventRecordID>28857</EventRecordID>
<Correlation />
<Execution ProcessID="4964" ThreadID="8164" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="Service">WmiApRpl</Data>
<Data Name="Library">C:\Windows\system32\wbem\wmiaprpl.dll</Data>
<Data Name="Win32Error">21</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2/7/2022 11:19:02 AM
Event ID: 1008
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: WIN10BASE
Description:
The Open procedure for service "WmiApRpl" in DLL "C:\Windows\system32\wbem\wmiaprpl.dll" failed with error code The device is not ready.. Performance data for this service will not be available.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1008</EventID>
<Version>1</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:19:02.905932000Z" />
<EventRecordID>28799</EventRecordID>
<Correlation />
<Execution ProcessID="5516" ThreadID="6340" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security UserID="S-1-5-20" />
</System>
<EventData>
<Data Name="Service">WmiApRpl</Data>
<Data Name="Library">C:\Windows\system32\wbem\wmiaprpl.dll</Data>
<Data Name="Win32Error">21</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:19:05 AM
Event ID: 8233
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
The rules engine reported a failed VL activation attempt.
Reason:0x800705B4
AppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = 6bf301c1-b94a-43e9-ba31-d494598c47fb
Trigger=NetworkAvailable
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">8233</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:19:05.060265300Z" />
<EventRecordID>28800</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>0x800705B4</Data>
<Data>0ff1ce15-a989-479d-af46-f275c6370663</Data>
<Data>6bf301c1-b94a-43e9-ba31-d494598c47fb</Data>
<Data>NetworkAvailable</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:18:47 AM
Event ID: 8233
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
The rules engine reported a failed VL activation attempt.
Reason:0x800705B4
AppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = 6bf301c1-b94a-43e9-ba31-d494598c47fb
Trigger=TimerEvent
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">8233</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:18:47.747748300Z" />
<EventRecordID>28788</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>0x800705B4</Data>
<Data>0ff1ce15-a989-479d-af46-f275c6370663</Data>
<Data>6bf301c1-b94a-43e9-ba31-d494598c47fb</Data>
<Data>TimerEvent</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 2/7/2022 11:18:45 AM
Event ID: 8233
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: WIN10BASE
Description:
The rules engine reported a failed VL activation attempt.
Reason:0x800705B4
AppId = 0ff1ce15-a989-479d-af46-f275c6370663, SkuId = 4f414197-0fc2-4c01-b68a-86cbb9ac254c
Trigger=TimerEvent
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">8233</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-02-07T17:18:45.325875200Z" />
<EventRecordID>28787</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>WIN10BASE</Computer>
<Security />
</System>
<EventData>
<Data>0x800705B4</Data>
<Data>0ff1ce15-a989-479d-af46-f275c6370663</Data>
<Data>4f414197-0fc2-4c01-b68a-86cbb9ac254c</Data>
<Data>TimerEvent</Data>
</EventData>
</Event>