GFI ESM GFI ESM

Event ID: Event Source:

Event ID 3011 Source LoadPerf

Event ID3011
SourceLoadPerf
TypeError
DescriptionUnloading the performance counter strings for service <service> failed. The Error code is DWORD 0 of the Record Data.
English, please! Request a translation of the event description in plain English.
Concepts to understand What is a DWORD?
Comments Brooklyn98 (Last update 1/24/2007):
- Service: Outlook - I received this event along with events 3003 and 3009 from the same source. The issue was Outlook 2003 on a 2003 server. Deleting the "HKLM\System\Current Control Set\Services\Outlook\Performance" registry key fixed the issue.

Anonymous (Last update 2/14/2006):
When using Citrix\Terminal Services, if you install Office 2003 you must login as an administrator to complete the configuration of the Performance Counters. An event ID 1000 will confirm the load\unload of performance counters. After that, all users should be able to launch Outlook without any errors being written to the event log.

Mihai Andrei (Last update 10/16/2005):
As per Microsoft: "The performance counter could not unload the strings for the specified service. The registry might be corrupted". See MSW2KDB for additional information about this event.

Ionut Marin (Last update 10/19/2003):
From a newsgroup post: "Every time you install something that turns on a performance counter and then uninstall it, you get all these errors in the event log since the counters are not turned off with the uninstall. You usually can find where to shut them off in the registry".

Alex Rogachevsky (Last update 5/10/2003):
- Service: FileReplicaSet - This event was preceided by event 3012 (source LoadPerf) and event 41 (source WinMgmt). All performance counters were corrupted and not being loaded. Our solution was to reload default perfomance counters manually as per M300956. Please note, the Q article refers to registry Values: "FirstCounter", "FirstHelp", etc... should be "First Counter", "First Help" - there is a space in the Value Name. Also, use EXCTRLST.EXE to identify performance registry keys.

Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!

Tony Taylor
Reported as occuring after applying the suggestions in M267831

Fred Logan
This event occurred running Windows 2000 Server on a Dell Poweredge 4600. It was eliminated by running the following command:
lodctr /r: c:\winnt\system32\perfstringbackup.ini
LinksM267831, M300956, Event ID 3003 from source LoadPerf, Event ID 3009 from source LoadPerf, MSW2KDB
Search Google Web - Microsoft Support - Bing - EventID.Net Queue - More links...
Feedback Send comments - Notify me when updated
 Print version