After installing the SP1 for Exchange server 2003 I keep getting a pattern of errors in my application log. The errors appears in the same order 1-2 times every hour. What went wrong. The system seems to work. These are the errors

Error nr. 1

Event Type: Erro
Event Source: Microsoft Exchange Serve
Event Category: Non
Event ID: 100
Date: 31-05-200
Time: 07:35:5
User: N/
Computer: MYSERVE
Description
Faulting application exwmi.dll, version 6.5.7226.0, stamp 406d1e86, faulting module hmonitor.dll, version 2.11.2061.0, stamp 3e6fb1f5, debug? 0, fault address 0x000490b2

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Data
0000: 41 00 70 00 70 00 6c 00 A.p.p.l
0008: 69 00 63 00 61 00 74 00 i.c.a.t
0010: 69 00 6f 00 6e 00 20 00 i.o.n.
0018: 46 00 61 00 69 00 6c 00 F.a.i.l
0020: 75 00 72 00 65 00 20 00 u.r.e.
0028: 20 00 65 00 78 00 77 00 .e.x.w
0030: 6d 00 69 00 2e 00 64 00 m.i...d
0038: 6c 00 6c 00 20 00 36 00 l.l. .6
0040: 2e 00 35 00 2e 00 37 00 ..5...7
0048: 32 00 32 00 36 00 2e 00 2.2.6..
0050: 30 00 20 00 34 00 30 00 0. .4.0
0058: 36 00 64 00 31 00 65 00 6.d.1.e
0060: 38 00 36 00 20 00 69 00 8.6. .i
0068: 6e 00 20 00 68 00 6d 00 n. .h.m
0070: 6f 00 6e 00 69 00 74 00 o.n.i.t
0078: 6f 00 72 00 2e 00 64 00 o.r...d
0080: 6c 00 6c 00 20 00 32 00 l.l. .2
0088: 2e 00 31 00 31 00 2e 00 ..1.1..
0090: 32 00 30 00 36 00 31 00 2.0.6.1
0098: 2e 00 30 00 20 00 33 00 ..0. .3
00a0: 65 00 36 00 66 00 62 00 e.6.f.b
00a8: 31 00 66 00 35 00 20 00 1.f.5.
00b0: 66 00 44 00 65 00 62 00 f.D.e.b
00b8: 75 00 67 00 20 00 30 00 u.g. .0
00c0: 20 00 61 00 74 00 20 00 .a.t.
00c8: 6f 00 66 00 66 00 73 00 o.f.f.s
00d0: 65 00 74 00 20 00 30 00 e.t. .0
00d8: 30 00 30 00 34 00 39 00 0.0.4.9
00e0: 30 00 62 00 32 00 0d 00 0.b.2..
00e8: 0a 00 ..

Error nr. 2

Event Type: Informatio
Event Source: Microsoft Exchange Serve
Event Category: Non
Event ID: 100
Date: 31-05-200
Time: 07:35:5
User: N/
Computer: MYSERVE
Description
Bucket 109075417, bucket table 1, faulting application exwmi.dll, version 6.5.7226.0, stamp 406d1e86, faulting module hmonitor.dll, version 2.11.2061.0, stamp 3e6fb1f5, debug? 0, fault address 0x000490b2

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Data
0000: 42 00 75 00 63 00 6b 00 B.u.c.k
0008: 65 00 74 00 3a 00 20 00 e.t.:.
0010: 31 00 30 00 39 00 30 00 1.0.9.0
0018: 37 00 35 00 34 00 31 00 7.5.4.1
0020: 37 00 0d 00 0a 00 42 00 7.....B
0028: 75 00 63 00 6b 00 65 00 u.c.k.e
0030: 74 00 54 00 61 00 62 00 t.T.a.b
0038: 6c 00 65 00 20 00 31 00 l.e. .1
0040: 0d 00 0a 00 ....

Error nr. 3

Event Type: Informatio
Event Source: Microsoft Exchange Serve
Event Category: Non
Event ID: 101
Date: 31-05-200
Time: 07:35:5
User: N/
Computer: MYSERVE
Description
Bucket 109075417, bucket table 1

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Data
0000: 4e 00 6f 00 20 00 72 00 N.o. .r
0008: 65 00 73 00 70 00 6f 00 e.s.p.o
0010: 6e 00 73 00 65 00 0d 00 n.s.e..
0018: 0a 00 ..

Error nr. 4

Event Type: Erro
Event Source: Application Erro
Event Category: (100
Event ID: 100
Date: 31-05-200
Time: 07:36:0
User: N/
Computer: MYSERVE
Description
Faulting application wmiprvse.exe, version 5.2.3790.0, faulting module HMonitor.dll, version 2.11.2061.0, fault address 0x000490b2

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Data
0000: 41 70 70 6c 69 63 61 74 Applica
0008: 69 6f 6e 20 46 61 69 6c ion Fai
0010: 75 72 65 20 20 77 6d 69 ure wm
0018: 70 72 76 73 65 2e 65 78 prvse.e
0020: 65 20 35 2e 32 2e 33 37 e 5.2.3
0028: 39 30 2e 30 20 69 6e 20 90.0 in
0030: 48 4d 6f 6e 69 74 6f 72 HMonitor
0038: 2e 64 6c 6c 20 32 2e 31 .dll 2.1
0040: 31 2e 32 30 36 31 2e 30 1.2061.0
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 34 39 et 00049
0058: 30 62 32 0b2

Error nr. 5: (This error apears twice)

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 31-05-2004
Time: 07:36:06
User: NT AUTHORITY\SYSTEM
Computer: MYSERVER
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Re: Errors after upgrading Exchange Server 2003 with SP1 by Evan

Evan
Mon May 31 10:09:57 CDT 2004

Zoodiaq -

If this is causing a problem with your system, I would definitely call into
PSS and get a case opened. The watson bucket number will give support a good
starting point to investigate what's going on with your server.

Is this an Exchange 2003 Server, or is it SBS running Exchange 2003?

--
Evan Dodds
Microsoft Exchange Support

****** Disclaimer ******
This posting is provided "AS IS" with no warranties, and confers no rights.

Note: Please do not reply to this e-mail address. It is used for newsgroup
purposes only.

"Zoodiaq" <anonymous@discussions.microsoft.com> wrote in message
news:9C493B90-7309-4A53-BA4A-4B0AA61D5944@microsoft.com...
> After installing the SP1 for Exchange server 2003 I keep getting a pattern
of errors in my application log. The errors appears in the same order 1-2
times every hour. What went wrong. The system seems to work. These are the
errors:
>
> Error nr. 1:
>
> Event Type: Error
> Event Source: Microsoft Exchange Server
> Event Category: None
> Event ID: 1000
> Date: 31-05-2004
> Time: 07:35:56
> User: N/A
> Computer: MYSERVER
> Description:
> Faulting application exwmi.dll, version 6.5.7226.0, stamp 406d1e86,
faulting module hmonitor.dll, version 2.11.2061.0, stamp 3e6fb1f5, debug? 0,
fault address 0x000490b2.
>
> For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
> 0008: 69 00 63 00 61 00 74 00 i.c.a.t.
> 0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
> 0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
> 0020: 75 00 72 00 65 00 20 00 u.r.e. .
> 0028: 20 00 65 00 78 00 77 00 .e.x.w.
> 0030: 6d 00 69 00 2e 00 64 00 m.i...d.
> 0038: 6c 00 6c 00 20 00 36 00 l.l. .6.
> 0040: 2e 00 35 00 2e 00 37 00 ..5...7.
> 0048: 32 00 32 00 36 00 2e 00 2.2.6...
> 0050: 30 00 20 00 34 00 30 00 0. .4.0.
> 0058: 36 00 64 00 31 00 65 00 6.d.1.e.
> 0060: 38 00 36 00 20 00 69 00 8.6. .i.
> 0068: 6e 00 20 00 68 00 6d 00 n. .h.m.
> 0070: 6f 00 6e 00 69 00 74 00 o.n.i.t.
> 0078: 6f 00 72 00 2e 00 64 00 o.r...d.
> 0080: 6c 00 6c 00 20 00 32 00 l.l. .2.
> 0088: 2e 00 31 00 31 00 2e 00 ..1.1...
> 0090: 32 00 30 00 36 00 31 00 2.0.6.1.
> 0098: 2e 00 30 00 20 00 33 00 ..0. .3.
> 00a0: 65 00 36 00 66 00 62 00 e.6.f.b.
> 00a8: 31 00 66 00 35 00 20 00 1.f.5. .
> 00b0: 66 00 44 00 65 00 62 00 f.D.e.b.
> 00b8: 75 00 67 00 20 00 30 00 u.g. .0.
> 00c0: 20 00 61 00 74 00 20 00 .a.t. .
> 00c8: 6f 00 66 00 66 00 73 00 o.f.f.s.
> 00d0: 65 00 74 00 20 00 30 00 e.t. .0.
> 00d8: 30 00 30 00 34 00 39 00 0.0.4.9.
> 00e0: 30 00 62 00 32 00 0d 00 0.b.2...
> 00e8: 0a 00 ..
>
> Error nr. 2:
>
> Event Type: Information
> Event Source: Microsoft Exchange Server
> Event Category: None
> Event ID: 1001
> Date: 31-05-2004
> Time: 07:35:57
> User: N/A
> Computer: MYSERVER
> Description:
> Bucket 109075417, bucket table 1, faulting application exwmi.dll, version
6.5.7226.0, stamp 406d1e86, faulting module hmonitor.dll, version
2.11.2061.0, stamp 3e6fb1f5, debug? 0, fault address 0x000490b2.
>
> For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 42 00 75 00 63 00 6b 00 B.u.c.k.
> 0008: 65 00 74 00 3a 00 20 00 e.t.:. .
> 0010: 31 00 30 00 39 00 30 00 1.0.9.0.
> 0018: 37 00 35 00 34 00 31 00 7.5.4.1.
> 0020: 37 00 0d 00 0a 00 42 00 7.....B.
> 0028: 75 00 63 00 6b 00 65 00 u.c.k.e.
> 0030: 74 00 54 00 61 00 62 00 t.T.a.b.
> 0038: 6c 00 65 00 20 00 31 00 l.e. .1.
> 0040: 0d 00 0a 00 ....
>
> Error nr. 3:
>
> Event Type: Information
> Event Source: Microsoft Exchange Server
> Event Category: None
> Event ID: 1010
> Date: 31-05-2004
> Time: 07:35:57
> User: N/A
> Computer: MYSERVER
> Description:
> Bucket 109075417, bucket table 1.
>
> For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 4e 00 6f 00 20 00 72 00 N.o. .r.
> 0008: 65 00 73 00 70 00 6f 00 e.s.p.o.
> 0010: 6e 00 73 00 65 00 0d 00 n.s.e...
> 0018: 0a 00 ..
>
> Error nr. 4:
>
> Event Type: Error
> Event Source: Application Error
> Event Category: (100)
> Event ID: 1000
> Date: 31-05-2004
> Time: 07:36:00
> User: N/A
> Computer: MYSERVER
> Description:
> Faulting application wmiprvse.exe, version 5.2.3790.0, faulting module
HMonitor.dll, version 2.11.2061.0, fault address 0x000490b2.
>
> For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 77 6d 69 ure wmi
> 0018: 70 72 76 73 65 2e 65 78 prvse.ex
> 0020: 65 20 35 2e 32 2e 33 37 e 5.2.37
> 0028: 39 30 2e 30 20 69 6e 20 90.0 in
> 0030: 48 4d 6f 6e 69 74 6f 72 HMonitor
> 0038: 2e 64 6c 6c 20 32 2e 31 .dll 2.1
> 0040: 31 2e 32 30 36 31 2e 30 1.2061.0
> 0048: 20 61 74 20 6f 66 66 73 at offs
> 0050: 65 74 20 30 30 30 34 39 et 00049
> 0058: 30 62 32 0b2
>
> Error nr. 5: (This error apears twice)
>
> Event Type: Warning
> Event Source: WinMgmt
> Event Category: None
> Event ID: 63
> Date: 31-05-2004
> Time: 07:36:06
> User: NT AUTHORITY\SYSTEM
> Computer: MYSERVER
> Description:
> A provider, PerfProv, has been registered in the WMI namespace,
ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, to use the LocalSystem account.
This account is privileged and the provider may cause a security violation
if it does not correctly impersonate user requests.
>
> For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



Re: Errors after upgrading Exchange Server 2003 with SP1 by anonymous

anonymous
Mon May 31 14:06:04 CDT 2004

I'm running a SBS2003

The probl. about running a case is, that it's too expensive, so I'd rather look for a solution on the web.