 browsers work, but cannot use any software updates, Windows XP Pro, on a sony Vaio laptop, wired to internet |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.  |
 Jun 4 2009, 04:20 PM
Post
#1
|
|
|
New Member  Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837  |
My problem is with my wife's Sony VAIO laptop (series PCG-R505GL), running windows xp pro SP3. I am connected to the internet using a 100 MB/s cable connection to a working hub. My browsers (firefox / IE7) work OK, putty works OK. As my wife never used anything other than the browsers until recently, we don't know when this problem started. However, when I try to install new software (such as AVGfree) it cannot connect to the internet to download updates. The reported error is " no internet connectivity, please connect to internet and try again". What I have tried without successfully restoring full connectivity: ********************************************************** Disabled the firewall. Uninstalled and re-installed all network components except TCP/IP, which I do not appear to be allowed to uninstall. Downloaded and run "winsockfix.exe", but it does not fix the problem. Downloaded and run "AVGfree" without being allowed to update to the latest definitions, but that means definitions were only a few days out of date. After installing AVGfree, my browsers also lost connectivity (this happened before scanning, so appears to be a software conflict of some kind, not due to removal of spyware). AVGfree reported no viruses, but about 20 spyware programs which I removed. In this conditions, both browsers reported "Connection was reset while downloading information" Running IE7 caused a "connectivity problem" to be detected, running the wizard provided failed to fix the problem. After uninstalling AVGfree, browser connectivity was restored, but I still can't update anything. I have run the "automated network tests". The only test which is passed is "IP address", all other tests show either nothing, or failed. I tried downloading the latest drivers / utilities from the Sony website for anything which appeared to be related to networking for this machine. This did not resolve the situation. ********************************************************** I'm at the end of my comfort zone. All help would be most gratefully appreciated. Thank you for your time and interest... Acagone. |
 |
 
|
|
Jun 4 2009, 04:51 PM
Post
#2
|
|
 Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
Hello,
Sounds like an interesting problem. Can you do a tracert to google? Start=>run=>cmd=>tracert www.google.com Let us know what you find. -------------------- |
|
|
|
|
Jun 5 2009, 10:39 PM
Post
#3
|
|
|
New Member Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837 |
Dear Alan,
thanks for your interest. Using my browser I can connect to www.google.com with no problem (and I'm using the problem laptop now to type this). However, when I did the "tracert www.google.com" what I get is: __________________________________________________________ Microsoft Windows XP [Version 5.1.2600] © Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\Administrator>tracert www.google.com Tracing route to www.l.google.com [72.14.205.103] over a maximum of 30 hops: 1 * * * Request timed out. 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * * Request timed out. 6 * * * Request timed out. 7 * * * Request timed out. 8 * * * Request timed out. 9 * * * Request timed out. 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Trace complete. C:\Documents and Settings\Administrator> __________________________________________________________ Is this weird or what? Any further advice most gratefully received. best regards.... Acagone |
|
|
|
|
Jun 6 2009, 12:01 PM
Post
#4
|
|
|
Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
Hello Acagone,
The page may be cached, can you do any searches? If you load up google again and press CTRL + F5 does the page refresh properly? The tracert indicates that the computer can't connect at all to the www. Can you illustrate your network layout? for example Laptop=>router=>WWW. -------------------- |
|
|
|
|
Jun 6 2009, 03:23 PM
Post
#5
|
|
|
New Member Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837 |
Dear Alan,
I know it's weird. I have a fully functioning Internet. I am not looking at cached pages. My connection is Laptop->router->building internet. I have a second laptop connected to the same router, which has full connectivity, so I do not doubt my physical electronics. I believe this is a software / settings issue. Thanks for your continuing interest and help best regards... Acagone |
|
|
|
|
Jun 6 2009, 04:08 PM
Post
#6
|
|
|
Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
Hi Acagone,
I'm inclined to agree it does sound like software/settings. The event viewer may give some more information. 1. Click Start select run 2. Type eventvwr.exe 3. Press enter 4. Search through the groups for errors and warnings. 5. Double click on each error and or warning. 6. Locate the copy to clipboard button,  (under the two arrows)7. Let us know what you find. (paste the results) -------------------- |
|
|
|
|
Jun 7 2009, 01:18 AM
Post
#7
|
|
|
New Member Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837 |
Dear Alan,
below is a list of warnings and errors from eventvwr - there are hundreds, so I have just pasted those from this month. If you need the full list, I will do it, but I don't have time right now. I forgot to tell you that early on in this process, I disconnected a wireless internet connection on this laptop and went back to a patch cord. I uninstalled the drivers for the wireless network card, but it didn't help with this problem. Thanks for your continued help, best regards... Acagone. =============================================================================== Under the APPLICATION TAB: Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/6/2009 Time: 10:54:20 AM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/6/2009 Time: 10:54:19 AM User: JUYEAN\Administrator Computer: JUYEAN Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/6/2009 Time: 10:22:53 AM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/6/2009 Time: 10:22:52 AM User: JUYEAN\Administrator Computer: JUYEAN Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/6/2009 Time: 12:09:09 AM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/6/2009 Time: 12:09:08 AM User: JUYEAN\Administrator Computer: JUYEAN Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Windows Search Service Event Category: Gatherer Event ID: 3013 Date: 6/3/2009 Time: 1:12:04 PM User: N/A Computer: LIM-EA00226C10E Description: The entry <C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DESKTOP\AM-914150C02JB.EXE> in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Windows Search Service Event Category: Gatherer Event ID: 3024 Date: 6/2/2009 Time: 12:40:11 AM User: N/A Computer: LIM-EA00226C10E Description: The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again. Context: Windows Application, SystemIndex Catalog For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: crypt32 Event Category: None Event ID: 8 Date: 6/1/2009 Time: 12:37:58 AM User: N/A Computer: LIM-EA00226C10E Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Lavasoft Ad-Aware Service Event Category: None Event ID: 0 Date: 6/1/2009 Time: 12:35:23 AM User: N/A Computer: LIM-EA00226C10E Description: The description for Event ID ( 0 ) in Source ( Lavasoft Ad-Aware Service ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Failed to uninstall service. UNDER THE SECURITY TAB THERE ARE NO ENTRIES UNDER THE SYSTEM TAB: Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/3/2009 Time: 7:45:43 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {D9AF744D-0804-49C6-AA9C-2D0C507FB79C} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: driver:AvgTdiX Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/3/2009 Time: 7:45:43 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {E6420865-935B-4BDE-AC0B-11234DFA1CED} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: service:AvgTdiX Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/3/2009 Time: 7:45:43 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {E2F883B3-9F6E-42FC-BF3B-92C13505E035} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: driver:AvgMfx86 Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/3/2009 Time: 7:45:43 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {59D1F3F5-9B37-44AE-9564-66C01CC359CB} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: service:AvgMfx86 Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/3/2009 Time: 7:45:41 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {99B1F1B0-81E8-4BED-9AFA-8E12A22117A6} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: driver:avg8wd Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/3/2009 Time: 7:45:41 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {A13D0571-A3D4-4ABC-8BA3-E979DE7E83F6} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: driver:AvgLdx86 Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: E100B Event Category: None Event ID: 4 Date: 6/3/2009 Time: 1:26:45 PM User: N/A Computer: LIM-EA00226C10E Description: Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down Data: 0000: 00 00 04 00 02 00 58 00 ......X. 0008: 00 00 00 00 04 00 04 80 .......€ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 04 00 04 80 ...€ Event Type: Warning Event Source: USER32 Event Category: None Event ID: 1073 Date: 6/3/2009 Time: 1:08:06 PM User: NT AUTHORITY\SYSTEM Computer: LIM-EA00226C10E Description: The attempt to power off LIM-EA00226C10E failed For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 .... Event Type: Warning Event Source: E100B Event Category: None Event ID: 4 Date: 6/3/2009 Time: 11:59:07 AM User: N/A Computer: LIM-EA00226C10E Description: Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down Data: 0000: 00 00 04 00 02 00 58 00 ......X. 0008: 00 00 00 00 04 00 04 80 .......€ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 04 00 04 80 ...€ Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Date: 6/3/2009 Time: 7:15:17 PM User: N/A Computer: LIM-EA00226C10E Description: The IPSEC Services service terminated with the following error: The authentication service is unknown. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Date: 6/3/2009 Time: 7:06:45 PM User: N/A Computer: LIM-EA00226C10E Description: The IPSEC Services service terminated with the following error: The authentication service is unknown. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Server Event Category: None Event ID: 2505 Date: 6/1/2009 Time: 11:28:39 PM User: N/A Computer: LIM-EA00226C10E Description: The server could not bind to the transport \Device\NwlnkIpx because another computer on the network has the same name. The server could not start. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 34 00 00 00 4... Event Type: Error Event Source: Server Event Category: None Event ID: 2505 Date: 6/1/2009 Time: 11:28:39 PM User: N/A Computer: LIM-EA00226C10E Description: The server could not bind to the transport \Device\NwlnkNb because another computer on the network has the same name. The server could not start. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 34 00 00 00 4... Event Type: Error Event Source: DCOM Event Category: None Event ID: 10010 Date: 6/1/2009 Time: 12:38:16 AM User: NT AUTHORITY\SYSTEM Computer: LIM-EA00226C10E Description: The server {49BD2028-1523-11D1-AD79-00C04FD8FDFF} did not register with DCOM within the required timeout. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Windows Update Agent Event Category: Software Sync Event ID: 16 Date: 5/31/2009 Time: 11:19:48 PM User: N/A Computer: LIM-EA00226C10E Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 57 69 6e 33 32 48 52 65 Win32HRe 0008: 73 75 6c 74 3d 30 78 30 sult=0x0 0010: 30 30 30 30 30 30 30 20 0000000 0018: 55 70 64 61 74 65 49 44 UpdateID 0020: 3d 7b 30 30 30 30 30 30 ={000000 0028: 30 30 2d 30 30 30 30 2d 00-0000- 0030: 30 30 30 30 2d 30 30 30 0000-000 0038: 30 2d 30 30 30 30 30 30 0-000000 0040: 30 30 30 30 30 30 7d 20 000000} 0048: 52 65 76 69 73 69 6f 6e Revision 0050: 4e 75 6d 62 65 72 3d 30 Number=0 0058: 20 00 . there are no items showing under the tab INTERNET EXPLORER |
|
|
|
|
Jun 7 2009, 11:02 AM
Post
#8
|
|
|
Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
Hi Acagone,
I don't need the full list at this stage, it does look like there are a few problems. Lets start by running Advanced windows care found at http://www.iobit.com/advancedwindowscareper.html the install process is straight forward, you don't have to add yahoo or iobit to your browser. Once it has been installed, run the tool. 1. Cancel the scan it starts automatically 2. click the Diagnose system ball 3. check system optimisation and clear the check marks on the other boxes. 4. perform the scan. Only the system optimisation category will be scanned. 5. once it is complete, restart the system. Once the system has restarted have a look in the event viewer and search for errors and warnings in all the categories after the restart. Let us know what you find. -------------------- |
|
|
|
|
Jun 8 2009, 10:41 PM
Post
#9
|
|
|
New Member Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837 |
Dear Alan,
sorry for the slow reply. I have done as you suggest, and I summarise the warnings and errors below. I saw many incidences of the same warnings, so I have summarized where I can. All advice most gratefully received, best regards... Acagone APPLICATION ******* the following pair of warnings occurs about 40 times *********** Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/7/2009 Time: 11:30:30 PM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/7/2009 Time: 11:30:29 PM User: JUYEAN\Administrator Computer: JUYEAN Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/7/2009 Time: 11:15:42 PM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/7/2009 Time: 11:15:40 PM User: JUYEAN\Administrator Computer: JUYEAN Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/7/2009 Time: 8:29:11 PM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/2/2009 Time: 11:23:40 PM User: S-1-5-21-1004336348-2111687655-1343024091-1004 Computer: LIM-EA00226C10E Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Windows Search Service Event Category: Gatherer Event ID: 3036 Date: 6/2/2009 Time: 12:40:11 AM User: N/A Computer: LIM-EA00226C10E Description: The content source <outlookexpress://{s-1-5-21-1004336348-2111687655-1343024091-500}/{e3c6ab09-f225-4d2c-85f5-49c00b498519}/> cannot be accessed. Context: Windows Application, SystemIndex Catalog Details: (0x81270005) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. SECURITY no items to show SYSTEM ***********the following warning appears about 26 times ************ Event Type: Warning Event Source: WinDefend Event Category: None Event ID: 3004 Date: 6/7/2009 Time: 10:22:20 PM User: N/A Computer: JUYEAN Description: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=74409 Scan ID: {43A966DB-3E1D-4B36-970D-A3426174A504} User: JUYEAN\Administrator Name: Unknown ID: Severity: Not Yet Classified Category: Not Yet Classified Path Found: regkey:HKCU@S-1-5-21-1004336348-2111687655-1343024091-500\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 3;runkey:HKCU@S-1-5-21-1004336348-2111687655-1343024091-500\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 3;file:C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe Alert Type: Unclassified software Detection Type: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: E100B Event Category: None Event ID: 4 Date: 6/3/2009 Time: 1:26:45 PM User: N/A Computer: LIM-EA00226C10E Description: Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down Data: 0000: 00 00 04 00 02 00 58 00 ......X. 0008: 00 00 00 00 04 00 04 80 .......€ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 04 00 04 80 ...€ Event Type: Warning Event Source: USER32 Event Category: None Event ID: 1073 Date: 6/3/2009 Time: 1:08:06 PM User: NT AUTHORITY\SYSTEM Computer: LIM-EA00226C10E Description: The attempt to power off LIM-EA00226C10E failed For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 .... Event Type: Warning Event Source: Win32k Event Category: None Event ID: 240 Date: 6/1/2009 Time: 2:27:18 PM User: N/A Computer: LIM-EA00226C10E Description: A request to suspend power was denied by winlogon.exe. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 02 00 4e 00 ......N. 0008: 00 00 00 00 f0 00 00 80 ....ð..€ 0010: 00 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Date: 6/3/2009 Time: 7:15:17 PM User: N/A Computer: LIM-EA00226C10E Description: The IPSEC Services service terminated with the following error: The authentication service is unknown. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Server Event Category: None Event ID: 2505 Date: 6/1/2009 Time: 11:28:39 PM User: N/A Computer: LIM-EA00226C10E Description: The server could not bind to the transport \Device\NwlnkIpx because another computer on the network has the same name. The server could not start. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 34 00 00 00 4... Event Type: Error Event Source: DCOM Event Category: None Event ID: 10010 Date: 6/1/2009 Time: 12:38:16 AM User: NT AUTHORITY\SYSTEM Computer: LIM-EA00226C10E Description: The server {49BD2028-1523-11D1-AD79-00C04FD8FDFF} did not register with DCOM within the required timeout. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. |
|
|
|
|
Jun 10 2009, 01:32 PM
Post
#10
|
|
|
Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
Hi Agacone,
I can see a few issues that could cause the issue you are experiencing. I suggest we try fixing them one at a time. I found http://support.microsoft.com/kb/870910 "To resolve this issue, delete the following registry subkey and then rebuild the policy: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Local To do this, follow these steps. Note When you follow these steps, you delete the local policy. You must rebuild the local policy. Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756 (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows 1. Delete the local policy registry subkey. To do this, follow these steps: 1. Click Start, click Run, type regedit, and then click OK. 2. In Registry Editor, locate and then click the following subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local 3. On the Edit menu, click Delete. 4. Click Yes to confirm that you want to delete the subkey. 5. Quit Registry Editor 2. Rebuild a new local policy store. To do this, follow this step: 1. Click Start, click Run, type regsvr32 polstore.dll, and then click OK." -------------------- |
|
|
|
|
Jun 10 2009, 10:26 PM
Post
#11
|
|
|
New Member Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837 |
Dear Alan,
thank you for your continuing help and support. I truly appreciate it. At your command I followed your instructions, and deleted and rebuilt the policy key. This didn't fix my problem yet, so please tell me what the next error is that I need to fix. best regards... Acagone. |
|
|
|
|
Jun 14 2009, 05:15 PM
Post
#12
|
|
|
Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
Hello,
Sorry for the late reply, Can you post a fresh set of entries, from in between the latest startup and latest shut down please? -------------------- |
|
|
|
|
Jun 15 2009, 06:09 AM
Post
#13
|
|
 Member Group: Members Posts: 28 Joined: 1-January 07 Member No.: 104,050 |
QUOTE(acagone @ Jun 10 2009, 11:26 PM)  Dear Alan, thank you for your continuing help and support. I truly appreciate it. At your command I followed your instructions, and deleted and rebuilt the policy key. This didn't fix my problem yet, so please tell me what the next error is that I need to fix. best regards... Acagone. Did you eliminate the possibility that you are entering a bad address on the address line? If Google works and other addresses also, perhaps your address is incorrect. Google up AVGfree and see if you get another address choice that you can copy and paste into the address line. Usually when I screw up entering the address I get some of the same connectivity errors. http://free.avg.com/download-avg-anti-virus-free-edition Good luck. |
|
|
|
|
Jun 15 2009, 11:26 PM
Post
#14
|
|
|
New Member Group: Members Posts: 11 Joined: 28-January 07 Member No.: 108,837 |
Dear All,
This is not a bad address problem. It is not restricted to AVGfree, but to any program that attempts to contact the internet to download updates EXCEPT, windows update appears to be alive and well and not experiencing any problems. Alan, if I understood your instructions correctly, you want me to log the warning/errors since last machine shutdown. When I did this I noticed a lot of the errors appeared to be due to "Windows Search", which I have now uninstalled. The current errors/warnings since last machine shutdown (after unintstalling windows search) are only two (see below). Needless to say, I am still experiencing my strange loss of connectivity. All help gratefully received.... Acagone Application Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1517 Date: 6/16/2009 Time: 12:12:10 AM User: NT AUTHORITY\SYSTEM Computer: JUYEAN Description: Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: Userenv Event Category: None Event ID: 1524 Date: 6/16/2009 Time: 12:12:08 AM User: JUYEAN\Administrator Computer: JUYEAN Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. |
|
|
|
|
Jun 16 2009, 02:35 PM
Post
#15
|
|
|
Forum Addict Group: Members Posts: 4,371 Joined: 7-January 07 From: UK Member No.: 105,123 |
The other errors not being there this time is a very good sign, at this time I can think of two causes.
1. MTU is set too high 2. Hardware failure, specifically router or network card. What is the make and model number of your router, and do you know if you are using PPPoE or PPPoA? -------------------- |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 7th November 2009 - 09:00 PM |
© 2003-2009 All Rights Reserved Bleeping Computer LLC.