Windows 10: Event Manager Errors

Hi folks,

These all started mid January 2020. Multiple error codes 2002, 2003, 3002, etc that say the Microsoft Security Client cannot be found. They repeat roughly every 10 days to two weeks. After they happen there is a .net Runtime error and an application error in wmiprvse.exe.

I use Eset NOD 32 if that matters. Have run SFC. Have Googled and read dozens of thread. No changes.

Any insight into these errors and what to do if anything? And see the bottom for a System error that occurs just before these and could be a coincidence - or not.

Thanks!

~Bob

Win 10 latest updated version. 1909 18363.592

Here are samples:

Log Name: Application
Source: NVWMI
Date: 2/18/2020 1:51:19 AM
Event ID: 3
Task Category: 16
Level: Warning
Keywords: Classic
User: N/A
Computer: P51S
Description:
display profile manager not initialized

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NVWMI" />
<EventID Qualifiers="16640">3</EventID>
<Level>3</Level>
<Task>16</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:51:19.595176600Z" />
<EventRecordID>17730</EventRecordID>
<Channel>Application</Channel>
<Computer>P51S</Computer>
<Security />
</System>
<EventData>
<Data>display profile manager not initialized
</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft Security Client
Date: 2/18/2020 1:52:05 AM
Event ID: 2002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: P51S
Description:
The description for Event ID 2002 from source Microsoft Security Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0x80041003

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Security Client" />
<EventID Qualifiers="0">2002</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:52:05.107166100Z" />
<EventRecordID>17731</EventRecordID>
<Channel>Application</Channel>
<Computer>P51S</Computer>
<Security />
</System>
<EventData>
<Data>0x80041003</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft Security Client
Date: 2/18/2020 1:52:05 AM
Event ID: 2003
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: P51S
Description:
The description for Event ID 2003 from source Microsoft Security Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0x80041003

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Security Client" />
<EventID Qualifiers="0">2003</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:52:05.107166100Z" />
<EventRecordID>17732</EventRecordID>
<Channel>Application</Channel>
<Computer>P51S</Computer>
<Security />
</System>
<EventData>
<Data>0x80041003</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft Security Client
Date: 2/18/2020 1:52:05 AM
Event ID: 3002
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: P51S
Description:
The description for Event ID 3002 from source Microsoft Security Client cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

0x80041001

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft Security Client" />
<EventID Qualifiers="0">3002</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:52:05.107166100Z" />
<EventRecordID>17733</EventRecordID>
<Channel>Application</Channel>
<Computer>P51S</Computer>
<Security />
</System>
<EventData>
<Data>0x80041001</Data>
</EventData>
</Event>

Log Name: Application
Source: .NET Runtime
Date: 2/18/2020 1:52:05 AM
Event ID: 1025
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: P51S
Description:
Application: wmiprvse.exe
Framework Version: v4.0.30319
Description: The application requested process termination through System.Environment.FailFaststring message.
Message: Unexpected exception thrown from the provider:
System.IO.FileLoadException:
File name: 'Microsoft.AppV.AppvClientComConsumer, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'
at Microsoft.AppV.AppvPublishingServerWMI.AppvPublishingServer.EnumeratePublishingServers


Stack:
at System.Environment.FailFastSystem.String
at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsyncSystem.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name=".NET Runtime" />
<EventID Qualifiers="0">1025</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:52:05.843657400Z" />
<EventRecordID>17741</EventRecordID>
<Channel>Application</Channel>
<Computer>P51S</Computer>
<Security />
</System>
<EventData>
<Data>Application: wmiprvse.exe
Framework Version: v4.0.30319
Description: The application requested process termination through System.Environment.FailFaststring message.
Message: Unexpected exception thrown from the provider:
System.IO.FileLoadException:
File name: 'Microsoft.AppV.AppvClientComConsumer, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'
at Microsoft.AppV.AppvPublishingServerWMI.AppvPublishingServer.EnumeratePublishingServers


Stack:
at System.Environment.FailFastSystem.String
at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsyncSystem.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink
</Data>
</EventData>
</Event>

Log Name: Application
Source: Application Error
Date: 2/18/2020 1:52:05 AM
Event ID: 1000
Task Category: 100
Level: Error
Keywords: Classic
User: N/A
Computer: P51S
Description:

version: 10.0.18362.1, time stamp: 0x2b37314e
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0x80131623
Fault offset: 0x00007ffc7ace200f
Faulting process id: 0x2904
Faulting application start time: 0x01d5e6410ef1e31b
Faulting application path: C:\WINDOWS\system32\wbem\wmiprvse.exe
Faulting module path: unknown
Report Id: 3e52ae85-ad8d-4605-b05a-df08f249a48c
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:52:05.968631300Z" />
<EventRecordID>17742</EventRecordID>
<Channel>Application</Channel>
<Computer>P51S</Computer>
<Security />
</System>
<EventData>
<Data>wmiprvse.exe</Data>
<Data>10.0.18362.1</Data>
<Data>2b37314e</Data>
<Data>unknown</Data>
<Data>0.0.0.0</Data>
<Data>00000000</Data>
<Data>80131623</Data>
<Data>00007ffc7ace200f</Data>
<Data>2904</Data>
<Data>01d5e6410ef1e31b</Data>
<Data>C:\WINDOWS\system32\wbem\wmiprvse.exe</Data>
<Data>unknown</Data>
<Data>3e52ae85-ad8d-4605-b05a-df08f249a48c</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>

*****Just before this happens, there are 3 or 4 of this system event:

Log Name: System
Source: Application Popup
Date: 2/18/2020 1:52:05 AM
Event ID: 26
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: P51S
Description:
Application popup: Windows - Application Error : The instruction at 0x00007FFCEF66A0C2 referenced memory at 0x0000000000000000. The memory could not be read.

Click on OK to terminate the program
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Popup" Guid="{47bfa2b7-bd54-4fac-b70b-29021084ca8f}" />
<EventID>26</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2020-02-18T09:52:05.445439000Z" />
<EventRecordID>10440</EventRecordID>
<Correlation />
<Execution ProcessID="640" ThreadID="1440" />
<Channel>System</Channel>
<Computer>P51S</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Caption">Windows - Application Error</Data>
<Data Name="Message">The instruction at 0x00007FFCEF66A0C2 referenced memory at 0x0000000000000000. The memory could not be read.

Click on OK to terminate the program</Data>
</EventData>
</Event>

I never see a popup. And Windows manages virtual memory - a


Thanks.nd in a odd way if I must say. 16MB min, currently used 16GB!

:)

 

Error in Event Viewer

Hi,



Thank you for writing to Microsoft Community Forums.



As you have mentioned, you have performed a repair installation on the computer and you see Event 508, 510 and 533 in Event Viewer.



I would like to inform that if you see any critical error in Event Viewer, please share the event logs with us to help you with the appropriate troubleshooting steps. Please follow the steps mentioned below to share the event logs:

1. Press Windows + X from the keyboard, select
   Event Viewer.
   
2. Expand Windows Logs from the left pane and select
   Applications.
   
3. Click Filter Current Log from extreme right pane. Then in the new windows check the box beside
   Error and click OK.
   
4. Now, look for a critical Error in the list and note down the message/information from the
   General Tab in the lower section.
   

Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator

 

update KB3194496 : new error 10 in event log. AppReadiness/Admin

When I tried to follow those steps and used the Troubleshooter, not only did it not eliminate the event ID 10 and event ID 214 errors with every boot, but, since doing so, I'm also getting new event ID 10010 errors with every boot that I was not getting before using the troubleshooter.

 

Error: No work available to process

Hmm. Either it's put out errors and WCG is limiting the work units available, or the project list may not be set to supply other WU when one runs out. (if the problem lies here and not on your end)

On the options to your left, if you go into Results Status, select the computer from Device Name and then look through results see if either they were returned late, errors or any other kind of issue that would stop the servers supplying WU from that perspective.

If there are no errors then it's maybe down to your project list. So selecting Device Manager from the left menu and then clicking on the profile assigned to that computer and make sure that it's assigned to receive WU for other projects if they run out.

At least those steps will rule out problems from the WCG end.