MonitorMagic - Tools4Ever.com

FAQ's
When performance counters are monitored, application event log messages with event ID 1008
can be generated. The event is always related to a specific service and the description has the
following contents:
The Open Procedure for service "InetInfo" in DLL "D:\WINNT\system32\infoctrs.dll" failed.
Performance data for this service will not be available. Status code returned is data
DWORD 0
In this example, the service is InetInfo. The problem that has to do with the installation of the
operating system or other applications as described below.
The event may occur for various applications. When the performance monitor reads all counters
for the first time, the extension's Open procedure is called. A typical task for the Open procedure
is to read what range of object indexes it supports from the registry. These index values are
stored in the First Counter, First Help, Last Counter, and Last Help registry values under the
application's performance key. If this Open procedure fails to read the data (i.e. those entries
don’t exist or have been deleted by an uninstall procedure) the 1008 event is recorded in the
event log (see Microsoft's knowledgebase article Q247226 for more details).
In order to remove such orphaned entries typically one has to follow these steps.
Start Registry Editor (Regedt32.exe or Regedit.exe)and go to the following subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\:\Performance
Delete the value Open.
Restart the remote registry service
361