| Event Id | 1010 |
| Source | Perflib |
| Description | The Collect Procedure for the "Tcpip" service in DLL "C:\WINNT\system32\Perfctrs.dll" generated an exception or returned an invalid status. Performance data returned by counter DLL will be not be returned in Perf Data Block. Exception or status code returned is data DWORD 0. Data: 0000: 05 00 00 c0 ...A |
| Event Information | From the Microsoft Knowledge Base Cause: When you use Performance Monitor to view TCP/IP performance counters, the counters may not appear. This behavior may occur if you use certain types of network adapters. The network adapter driver may return description strings to the CollectTcpIpPerformanceData function that do not contain null terminators. The sprintf function copies the description strings to a local variable. However, the sprintf function does not check to make sure that the strings are not too large for the local variable to hold. As a result, a buffer overflow may occur. Because the buffer is stored on the stack, the stack becomes corrupted. This corruption causes an access violation. Resolution: Apply the supported fix only to systems that are experiencing this specific problem. |
| Reference Links | TCP/IP Performance Counters May Not Appear in Performance Monitor |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.