Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The description for Event ID ( 4000 ) in Source ( fwdrv ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: <error description>
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is a DLL?
What is causing the “The description for Event ID ( … ) in Source ( …. ) cannot be found… “?
How do I use the /AUXSOURCE switch?
I experienced exactly the same error, and it appeared to be caused by a dialer that was attempting to dial a Premium call rate website. Adaware and Spybot Search&Destroy did not fully remove the problem, but a scan by CA EZ antivirus detected and removed Win32.SilentCaller.N and Win32.Rbot.DAR viruses and solved the problem.
Various reported errors:
- \Device\FWDRV, FwDrvProtGetMediumConnected: FwDrvProtInit error: .. - no info
- Anther TDI hook handler detected - please remove i. - no info
- PersFwDrv: MsgDigestCalculate: Unable to allocate memory for file. - no info
This is caused by Tiny Personal Firewall. Uninstalling and reinstalling with updated version seems to resolve the issue.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (1) - More links...|
Send comments or solutions
- Notify me when updated