Removing Registry Access Failure Messages

nateh
Removing Registry Access Failure Messages

As far as I understand, the registry access failure messages occur because an event log requires an associated dll or other file to be able to interpret a log message, and this file or registry entry just cannot be found. As a result, these messages show up:

0x007f02: 03/02/2009 15:40:34 [Lasso v4.0.5](1948): Warning: XP-VM-01: Registry Access Failure: C:\WINDOWS\System32\Drivers\TosIde.sys ==> The system cannot find the file specified.
0x007f02: 03/02/2009 15:40:34 [Lasso v4.0.5](1948): Warning: TransportFile::copyFileLocal( TosIde.sys, ... ): Remote(src) file(C:\WINDOWS\System32\Drivers\TosIde.sys) NOT retrieved due to: The system cannot find the file specified.

We were going to use Lasso for host logging on several servers, but unfortunately the messages above cause much anxiety for some people involved (regardless of whether they are harmless or not) and they don't want them to show up at all.

So my question is, can they be hidden or removed in the actual Windows Event Viewer? I attempted to find in the code where they are generated, but unfortunately my C++ skills aren't what they should be and I was having difficulties. I also began to suspect that they were actually generated by Windows somewhere and changing the Lasso code would have no effect. I also discovered that by setting the SkipInitDLLScan to 1, these messages wouldn't occur, but Lasso would not know how to interpret the log messages either. Plus, if a new program is added that required a new DLL file, the same problem would result.

So is there anything I can do to get these messages to disappear? Thanks in advance!

0
Your rating: None