Event ID - 5118

Event Id	5118
Source	Microsoft-Windows-WAS
Description	After recovering from an unexpected termination of the inetinfo process, Windows Process Activation Service (WAS) did not identify records that require deletion from the metadata cache. The data field contains the error number.
Event Information	According to Microsoft : Cause : This event is logged when recovering from an unexpected termination of the inetinfo process, Windows Process Activation Service (WAS) did not identify records that require deletion from the metadata cache. Resolution : Stop and restart WAS Stopping the WAS service will also stop the World Wide Web Publishing Service (W3SVC) if W3SVC is running. Thus, you may also have to start W3SVC. To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To stop and restart WAS: Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . At the command prompt, type net stop was /y . At the command prompt, type net start was . To restart W3SVC, from the command prompt, type net start w3svc . Also, start any other services that were stopped when WAS was shut down. Verify : To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To verify that the WAS service is running: Open an elevated Command Prompt window. Click Start , point to All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator . Type sc query was , and press ENTER. WAS is running if the state reported for the service is 4 RUNNING .
Reference Links	Event ID 5118 from Microsoft-Windows-WAS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught