IIS W3SVC service due to performance counter error and crashed

just chatting in the group, friend Q I said that in recent days he has a web server access is not very fast, and one day Once the machine is used, the server system resource consumption is not very large. When the machine is down, the page can hardly be opened. According to the pathping and tracert statistics, each hop is not large, and there is no time out. After restarting IIS, the speed recovered, but it took another half day.

Because this server security has always been my responsibility, huh, huh, it should be less likely to be hacked. Then the server:
check the application log found a warning message as follows:
event type: warning
event source: Perflib
event type: no
event ID: 2003
date: 2005-11-18
Event: 20:49:08
User: N/A
Computer: SERVER00
Description:
"W3SVC" service performance library "C:\\WINDOWS\\ The configuration information for system32\\inetsrv\\w3ctrs.dll" does not match the trusted performance library information saved in the registry. Functions in this library are not treated as trusted functions. For more information, see the Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Oh, find the answer, is the performance of the data recorder is doing, huh, huh. Search for it again:

SYMPTOMSAfter you install Windows 2000 on a drive that uses the FAT or FAT32 file system (that was formatted during the installation process) and install Internet Information Services (IIS) in the same Setup process, Event ID 2003 warning messages may appear in the Application event log when you start System Monitor and add counters. This issue does not occur with NTFS drives that do not have a service pack, if the FAT or FAT32 drive is formatted before you run Windows 2000 Setup, or if you add IIS later. The event ID 2003 warning message has the following text:
The configuration information of the performance library "C:\\\\WINNT\\\\system32\\\\w3ctrs.dll" for the "W3SVC" Service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted. //This article comes from the computer software and hardware application network www.45it.com

The configuration information of The performance library "C:\\\\WINNT\\\\system32\\\\ Infoctrs.dll" for the "InetInfo" service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted.

The configuration information of the performance library "C :\\\\WINNT\\\\system32\\\\aspperf.dll" for the "ASP" service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted. RESOLUTIONTo resolve this problem, run The following commands at a command prompt in the %SystemRoot%\\\\System32 folder to unload and reload the IIS performance dynamic-link libraries (DLLs). After you run these commands, the warning messages are not logged:

Unlodctr w3svc
unlodctr msftpsvc
unlodctr asp
unlodctr inetinfo
lodctr w3ctrs.ini
lodctr ftpctrs.ini
lodctr axperf.ini
lodctr infoctrs.ini

Edit several commands in the back (red part) into bat or vbs batch file, and the website access speed is quickly restored. complex.
Later, after observing one day, it is determined that the access page is difficult to open because of this problem; after a few days of observation, the server is running stably.