Perflib Warnings after Windows updates

Hi

I installed "SBS 2003 Std with SP1" yesterday and when I downloaded
installed the Microsoft update this morning and rebooted I started getting
the following errors.

Hardware: HP Proliant ML100 G3, 3HGz HT, 512Mb RAM, 80 SATA.

Why is this, why did they occur after a update? How can I fix them?

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 2003
Date: 2006/04/09
Time: 09:57:39
User: N/A
Computer: PORTAL
Description:
The configuration information of the performance library
"C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match the
trusted performance library information stored in the registry. The functions
in this library will not be treated as trusted.

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 1016
Date: 2006/04/09
Time: 09:57:40
User: N/A
Computer: PORTAL
Description:
The data buffer created for the "EXOLEDB" service in the "C:\Program
Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte boundary.
This may cause problems for applications that are trying to read the
performance data buffer. Contact the manufacturer of this library or service
to have this problem corrected or to get a newer version of this library.

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 1016
Date: 2006/04/09
Time: 09:57:45
User: N/A
Computer: PORTAL
Description:
The data buffer created for the "MSExchangeIS" service in the "C:\Program
Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on an 8-byte boundary.
This may cause problems for applications that are trying to read the
performance data buffer. Contact the manufacturer of this library or service
to have this problem corrected or to get a newer version of this library.

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 2003
Date: 2006/04/09
Time: 09:57:57
User: N/A
Computer: PORTAL
Description:
The configuration information of the performance library
"C:\WINDOWS\system32\inetsrv\w3ctrs.dll" for the "W3SVC" service does not
match the trusted performance library information stored in the registry. The
functions in this library will not be treated as trusted.

v-stezhu
Sun Apr 09 23:44:33 PDT 2006

Hi Francois,

Thanks for posting here.

From your post, my understanding on this issue is: you get the Event ID
1016 and 2003 error message after you applied Windows SBS 2003 update. If I
am off base, please feel free to let me know.

According to my research, the 1016 warning just indicates that the data
buffer isn't aligned. Actually this warning is harmless and it doesn't
adversely affect 32-bit platforms like Windows 2000 Server, however it
floods the event log. Therefore, to work around this issue, add the
following registry key that prevents Performance Monitor from testing for
data buffer alignment errors:

WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.

1. Start Registry Editor (Regedt32.exe).

2. Locate and click the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Perflib

3. On the Edit menu, click Add Value, and then add the following value:

Value Name: Configuration Flags
Data type: REGDWORD
Value: 0x01

4. Quit Registry Editor.

For more information, please refer to the following Knowledge Base article:

249138. KB.EN-US INFO: Controlling the Disabling of Performance Monitor
Extension
http://support.microsoft.com/default.aspx?scid=KB;EN-US;249138

For Event 2003 error message, please open Regedit, locate the
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Performance"
registry key and you will find the "Library Validation Code" value. The
data of the the registry value is checked against the file creation time
and the file size of the "%systemroot%\system32\inetsrv\w3ctrs.dll" DLL.
This error is posted if they do not match. To resolve this error, you may
remove and reinstall IIS. See the following Knowledge Base article for more
information:

320202 How to Remove and Reinstall IIS and Exchange
http://support.microsoft.com/?id=320202

Additional information:

Events for Performance Monitor Extensions
http://support.microsoft.com/?id=226494

152513 Troubleshooting Performance Monitor Counter Problems
http://support.microsoft.com/?id=152513

I hope the above information helps.

Have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================

mlopat_at_lunadevelopment_dot_com>
Mon Apr 10 07:29:03 PDT 2006

Hi Francois,
There are a number of things that may have happened. Can you recall what
Windows Update you installed? Was this O/S installed under the FAT32 file
system or NTFS?

The first thing to check is if you have a rogue DLL that may infact be virus
infected. Run a complete virus scan on the system with the latest virus
signatures. Next, use the Windows Search tool to find the .dll and verify
that it is version 6.0.2600.1 and is 10,240 by inspecting the properties of
the file.

Verify the file and let me know what file system you're using, and we'll go
from there.

-Mike
--
Micheal LoPatriello
Coordinator,
Luna Development
mlopat@lunadevelopment.com
http://www.lunadevelopment.com


"Francois" wrote:

> Hi
>
> I installed "SBS 2003 Std with SP1" yesterday and when I downloaded
> installed the Microsoft update this morning and rebooted I started getting
> the following errors.
>
> Hardware: HP Proliant ML100 G3, 3HGz HT, 512Mb RAM, 80 SATA.
>
> Why is this, why did they occur after a update? How can I fix them?
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 2003
> Date: 2006/04/09
> Time: 09:57:39
> User: N/A
> Computer: PORTAL
> Description:
> The configuration information of the performance library
> "C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match the
> trusted performance library information stored in the registry. The functions
> in this library will not be treated as trusted.
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 1016
> Date: 2006/04/09
> Time: 09:57:40
> User: N/A
> Computer: PORTAL
> Description:
> The data buffer created for the "EXOLEDB" service in the "C:\Program
> Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte boundary.
> This may cause problems for applications that are trying to read the
> performance data buffer. Contact the manufacturer of this library or service
> to have this problem corrected or to get a newer version of this library.
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 1016
> Date: 2006/04/09
> Time: 09:57:45
> User: N/A
> Computer: PORTAL
> Description:
> The data buffer created for the "MSExchangeIS" service in the "C:\Program
> Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on an 8-byte boundary.
> This may cause problems for applications that are trying to read the
> performance data buffer. Contact the manufacturer of this library or service
> to have this problem corrected or to get a newer version of this library.
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 2003
> Date: 2006/04/09
> Time: 09:57:57
> User: N/A
> Computer: PORTAL
> Description:
> The configuration information of the performance library
> "C:\WINDOWS\system32\inetsrv\w3ctrs.dll" for the "W3SVC" service does not
> match the trusted performance library information stored in the registry. The
> functions in this library will not be treated as trusted.
>
>

John
Mon Apr 10 08:56:25 PDT 2006

Hi

Thanks for your replies.

I have noticed it only happens the reboot after I have installed something.
After the MS update (too many to remember and list) and then I installed a
new tape drive, again these error messages came up. After the second reboot
they seem gone.

Strange...

Francois

"Francois" <Francois@discussions.microsoft.com> wrote in message
news:AE0B32EF-10FB-4359-B97A-90C073C540B6@microsoft.com...
> Hi
>
> I installed "SBS 2003 Std with SP1" yesterday and when I downloaded
> installed the Microsoft update this morning and rebooted I started getting
> the following errors.
>
> Hardware: HP Proliant ML100 G3, 3HGz HT, 512Mb RAM, 80 SATA.
>
> Why is this, why did they occur after a update? How can I fix them?
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 2003
> Date: 2006/04/09
> Time: 09:57:39
> User: N/A
> Computer: PORTAL
> Description:
> The configuration information of the performance library
> "C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match the
> trusted performance library information stored in the registry. The
> functions
> in this library will not be treated as trusted.
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 1016
> Date: 2006/04/09
> Time: 09:57:40
> User: N/A
> Computer: PORTAL
> Description:
> The data buffer created for the "EXOLEDB" service in the "C:\Program
> Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte
> boundary.
> This may cause problems for applications that are trying to read the
> performance data buffer. Contact the manufacturer of this library or
> service
> to have this problem corrected or to get a newer version of this library.
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 1016
> Date: 2006/04/09
> Time: 09:57:45
> User: N/A
> Computer: PORTAL
> Description:
> The data buffer created for the "MSExchangeIS" service in the "C:\Program
> Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on an 8-byte
> boundary.
> This may cause problems for applications that are trying to read the
> performance data buffer. Contact the manufacturer of this library or
> service
> to have this problem corrected or to get a newer version of this library.
>
> Event Type: Warning
> Event Source: Perflib
> Event Category: None
> Event ID: 2003
> Date: 2006/04/09
> Time: 09:57:57
> User: N/A
> Computer: PORTAL
> Description:
> The configuration information of the performance library
> "C:\WINDOWS\system32\inetsrv\w3ctrs.dll" for the "W3SVC" service does not
> match the trusted performance library information stored in the registry.
> The
> functions in this library will not be treated as trusted.
>
>

v-stezhu
Tue Apr 11 01:24:13 PDT 2006

Hi Francois,

Thanks for taking time to respond.

From your reply, I understand that you get the error message in event log
after you applied Windows update and you install new tape drive. But after
the second reboot all of them seems disappear and the server work great. If
I am off base, please feel free to let me know.

Based on my knowledge, this issue may occurred by temporary system problem.
Let's monitor this issue for several days, and please keep your application
log recently. If you found this problem again on your server in the
further, please do not hesitate to post back. It is my pleasure to be of
assistance.

Have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================