| Event Id | 3002 |
| Source | LoadPerf |
| Description | The performance counter explain text string value in the registry is incorrectly formatted. The last valid index value is DWORD 0 in the Record Data. |
| Event Information | CAUSE: If you use RegEdt32.exe to edit a value of type REG_MULTI_SZ that has more than 1,024 characters in a single string, it splits the string into multiple strings of 1,024 characters or less. In this case, a NULL character is embedded between the strings. Because the performance counter Help string is modified, error code 1010 (ERROR_BADKEY) results when you attempt to unload the performance counter text strings through a call to the UnloadPerfCounterTextStrings API. In response to this error, UnlodCtr.exe logs the event. |
| Reference Links | UnlodCtr.exe May Fail with Event ID 3002 on Windows 2000 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.