[SOLVED] Event ID: 2 Errors

Container for RESOLVED incidents, queries SOLVED by the experts, EXPIRED topics or those that have been CLOSED by the users
Locked
Boldlygo
Registered user
Registered user
Posts: 3
Joined: Sat, 01 Feb 2014, 20:29
Location: Ontario Canada
Contact:

[SOLVED] Event ID: 2 Errors

Post by Boldlygo »

On 2 computers so far - mine (Win8.1 Pro - Protection v6.50.10.0000, Agent v6.81.00.0000) and one client (Win8 - Protection v6.50.10.0000, Agent v6.81.00.0000) the event log is logging the same errors continuously:

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 2/1/2014 1:11:31 PM
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: Eldon-Win8
Description:
Session "" failed to start with the following error: 0xC000000D
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2014-02-01T18:11:31.127490700Z" />
<EventRecordID>658829</EventRecordID>
<Correlation />
<Execution ProcessID="1952" ThreadID="3276" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Eldon-Win8</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">
</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225485</Data>
<Data Name="LoggingMode">276824069</Data>
</EventData>
</Event>

Uninstalling the protection stops the errors from occurring. What is causing this?
User avatar
bartblaze
Registered user
Registered user
Posts: 157
Joined: Thu, 04 Apr 2013, 13:56
Contact:

Re: Event ID: 2 Errors

Post by bartblaze »

Hi Boldlygo,

I can see the following in the event log:
Execution ProcessID="1952" ThreadID="3276

We would need to know which process has been causing this, but I suspect - since you mentioned this issue is solved after removing PCOP- it's one of our own Panda processes.

Can you install PCOP again and check if it's indeed one of our processes? (if the event occurs, check in the event log the process ID, then open Task Manager and check which process belongs to the ID)

Let me know should you need further help on this!

Regards
Twitter: @bartblaze
Personal blog: http://bartblaze.blogspot.com
Boldlygo
Registered user
Registered user
Posts: 3
Joined: Sat, 01 Feb 2014, 20:29
Location: Ontario Canada
Contact:

Re: Event ID: 2 Errors

Post by Boldlygo »

bartblaze wrote:Hi Boldlygo,

I can see the following in the event log:
Execution ProcessID="1952" ThreadID="3276

We would need to know which process has been causing this, but I suspect - since you mentioned this issue is solved after removing PCOP- it's one of our own Panda processes.

Can you install PCOP again and check if it's indeed one of our processes? (if the event occurs, check in the event log the process ID, then open Task Manager and check which process belongs to the ID)

Let me know should you need further help on this!

Regards
I have reinstalled PCOP and do not see any more errors.
User avatar
bartblaze
Registered user
Registered user
Posts: 157
Joined: Thu, 04 Apr 2013, 13:56
Contact:

Re: Event ID: 2 Errors

Post by bartblaze »

Hi Boldlygo,

Glad to hear the problem is solved! Which version are you using currently?
Twitter: @bartblaze
Personal blog: http://bartblaze.blogspot.com
Locked

Return to “Adaptive Defense and Endpoint Protection - Archive Issues”