Event ID 1008, 4005 with Missing TCP/IP Performance Counters

This article was previously published under Q193899
This article has been archived. It is offered "as is" and will no longer be updated.
The Windows NT Event Viewer Application log may generate multiple Event ID1008 and 4005 logs every few seconds. The event descriptions are:
   Event ID:  1008   Source:    Perflib   Description:   The Open Procedure for service "Tcpip" in DLL "Perfctrs.dll" failed.   Performance data for this service will not be available. Status code   returned is DWORD 0.   Data: 0000: 0000007F (in words)				
   Event ID:  4005   Source:    perfctrs   Description:   Load of INETMIB1.DLL failed. Make sure the DLL file is in the PATH.   WIN32 Error number is returned in the data.				
This problem is caused by the failure of Inetmib1.dll to initializeproperly upon loading where memory is allocated during initialization, butnot de-allocated during clean-up.
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in theMicrosoft Knowledge Base:
152734 How to Obtain the Latest Windows NT 4.0 Service Pack

Microsoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.
memory leak TCPIP perfmon SNMP

Article ID: 193899 - Last Review: 10/10/2013 22:26:56 - Revision: 2.2

  • Microsoft Windows NT Server 4.0, Terminal Server Edition
  • Microsoft Windows NT Server 4.0 Standard Edition
  • kbnosurvey kbarchive kbhotfixserver kbqfe kbbug kbfix KB193899