BleepingComputer.com: browsers work, but cannot use any software updates

Hi, I tried searching for an answer to this problem, but apologies if I am duplicating a known topic. This is my first post, so also apologies if I am failing to use the system properly.

My problem is with my wife's Sony VAIO laptop (series PCG-R505GL), running windows xp pro SP3. I am connected to the internet using a 100 MB/s cable connection to a working hub.

My browsers (firefox / IE7) work OK, putty works OK. As my wife never used anything other than the browsers until recently, we don't know when this problem started.

However, when I try to install new software (such as AVGfree) it cannot connect to the internet to download updates. The reported error is " no internet connectivity, please connect to internet and try again".

What I have tried without successfully restoring full connectivity:
**********************************************************
Disabled the firewall.

Uninstalled and re-installed all network components except TCP/IP, which I do not appear to be allowed to uninstall.

Downloaded and run "winsockfix.exe", but it does not fix the problem.

Downloaded and run "AVGfree" without being allowed to update to the latest definitions, but that means definitions were only a few days out of date.

After installing AVGfree, my browsers also lost connectivity (this happened before scanning, so appears to be a software conflict of some kind, not due to removal of spyware).

AVGfree reported no viruses, but about 20 spyware programs which I removed.

In this conditions, both browsers reported "Connection was reset while downloading information"
Running IE7 caused a "connectivity problem" to be detected, running the wizard provided failed to fix the problem.

After uninstalling AVGfree, browser connectivity was restored, but I still can't update anything.

I have run the "automated network tests". The only test which is passed is "IP address", all other tests show either nothing, or failed.

I tried downloading the latest drivers / utilities from the Sony website for anything which appeared to be related to networking for this machine. This did not resolve the situation.
**********************************************************

I'm at the end of my comfort zone. All help would be most gratefully appreciated.

Thank you for your time and interest... Acagone.

Hello,

Sounds like an interesting problem. Can you do a tracert to google?

Start=>run=>cmd=>tracert www.google.com

Let us know what you find.

Dear Alan,
thanks for your interest. Using my browser I can connect to www.google.com with no problem (and I'm using the problem laptop now to type this). However, when I did the "tracert www.google.com" what I get is:
__________________________________________________________
Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Administrator>tracert www.google.com

Tracing route to www.l.google.com [72.14.205.103]
over a maximum of 30 hops:

1 * * * Request timed out.
2 * * * Request timed out.
3 * * * Request timed out.
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 * * * Request timed out.
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

C:\Documents and Settings\Administrator>
__________________________________________________________

Is this weird or what?

Any further advice most gratefully received.
best regards.... Acagone

Hello Acagone,

The page may be cached, can you do any searches? If you load up google again and press CTRL + F5 does the page refresh properly?
The tracert indicates that the computer can't connect at all to the www. Can you illustrate your network layout? for example Laptop=>router=>WWW.

Dear Alan,
I know it's weird. I have a fully functioning Internet. I am not looking at cached pages.
My connection is
Laptop->router->building internet.

I have a second laptop connected to the same router, which has full connectivity, so I do not doubt my physical electronics.
I believe this is a software / settings issue.

Thanks for your continuing interest and help

best regards... Acagone

Hi Acagone,

I'm inclined to agree it does sound like software/settings. The event viewer may give some more information.

1. Click Start select run
2. Type eventvwr.exe
3. Press enter
4. Search through the groups for errors and warnings.
5. Double click on each error and or warning.
6. Locate the copy to clipboard button, (under the two arrows)
7. Let us know what you find. (paste the results)

Dear Alan,

below is a list of warnings and errors from eventvwr - there are hundreds, so I have just pasted those from this month. If you need the full list, I will do it, but I don't have time right now.

I forgot to tell you that early on in this process, I disconnected a wireless internet connection on this laptop and went back to a patch cord. I uninstalled the drivers for the wireless network card, but it didn't help with this problem.

Thanks for your continued help, best regards... Acagone.

===============================================================================
Under the APPLICATION TAB:

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/6/2009
Time: 10:54:20 AM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/6/2009
Time: 10:54:19 AM
User: JUYEAN\Administrator
Computer: JUYEAN
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/6/2009
Time: 10:22:53 AM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/6/2009
Time: 10:22:52 AM
User: JUYEAN\Administrator
Computer: JUYEAN
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/6/2009
Time: 12:09:09 AM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/6/2009
Time: 12:09:08 AM
User: JUYEAN\Administrator
Computer: JUYEAN
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Windows Search Service
Event Category: Gatherer
Event ID: 3013
Date: 6/3/2009
Time: 1:12:04 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The entry <C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DESKTOP\AM-914150C02JB.EXE> in the hash map cannot be updated.

Context: Application, SystemIndex Catalog

Details:
A device attached to the system is not functioning. (0x8007001f)


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Windows Search Service
Event Category: Gatherer
Event ID: 3024
Date: 6/2/2009
Time: 12:40:11 AM
User: N/A
Computer: LIM-EA00226C10E
Description:
The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again.

Context: Windows Application, SystemIndex Catalog


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 6/1/2009
Time: 12:37:58 AM
User: N/A
Computer: LIM-EA00226C10E
Description:
Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Lavasoft Ad-Aware Service
Event Category: None
Event ID: 0
Date: 6/1/2009
Time: 12:35:23 AM
User: N/A
Computer: LIM-EA00226C10E
Description:
The description for Event ID ( 0 ) in Source ( Lavasoft Ad-Aware Service ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Failed to uninstall service.


UNDER THE SECURITY TAB THERE ARE NO ENTRIES

UNDER THE SYSTEM TAB:
Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/3/2009
Time: 7:45:43 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {D9AF744D-0804-49C6-AA9C-2D0C507FB79C}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver:AvgTdiX
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/3/2009
Time: 7:45:43 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {E6420865-935B-4BDE-AC0B-11234DFA1CED}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: service:AvgTdiX
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/3/2009
Time: 7:45:43 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {E2F883B3-9F6E-42FC-BF3B-92C13505E035}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver:AvgMfx86
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/3/2009
Time: 7:45:43 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {59D1F3F5-9B37-44AE-9564-66C01CC359CB}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: service:AvgMfx86
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/3/2009
Time: 7:45:41 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {99B1F1B0-81E8-4BED-9AFA-8E12A22117A6}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver:avg8wd
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/3/2009
Time: 7:45:41 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {A13D0571-A3D4-4ABC-8BA3-E979DE7E83F6}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver:AvgLdx86
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 6/3/2009
Time: 1:26:45 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 6/3/2009
Time: 1:08:06 PM
User: NT AUTHORITY\SYSTEM
Computer: LIM-EA00226C10E
Description:
The attempt to power off LIM-EA00226C10E failed

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....

Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 6/3/2009
Time: 11:59:07 AM
User: N/A
Computer: LIM-EA00226C10E
Description:
Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 6/3/2009
Time: 7:15:17 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The IPSEC Services service terminated with the following error:
The authentication service is unknown.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 6/3/2009
Time: 7:06:45 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The IPSEC Services service terminated with the following error:
The authentication service is unknown.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Server
Event Category: None
Event ID: 2505
Date: 6/1/2009
Time: 11:28:39 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The server could not bind to the transport \Device\NwlnkIpx because another computer on the network has the same name. The server could not start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 34 00 00 00 4...

Event Type: Error
Event Source: Server
Event Category: None
Event ID: 2505
Date: 6/1/2009
Time: 11:28:39 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The server could not bind to the transport \Device\NwlnkNb because another computer on the network has the same name. The server could not start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 34 00 00 00 4...

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 6/1/2009
Time: 12:38:16 AM
User: NT AUTHORITY\SYSTEM
Computer: LIM-EA00226C10E
Description:
The server {49BD2028-1523-11D1-AD79-00C04FD8FDFF} did not register with DCOM within the required timeout.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Windows Update Agent
Event Category: Software Sync
Event ID: 16
Date: 5/31/2009
Time: 11:19:48 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 69 6e 33 32 48 52 65 Win32HRe
0008: 73 75 6c 74 3d 30 78 30 sult=0x0
0010: 30 30 30 30 30 30 30 20 0000000
0018: 55 70 64 61 74 65 49 44 UpdateID
0020: 3d 7b 30 30 30 30 30 30 ={000000
0028: 30 30 2d 30 30 30 30 2d 00-0000-
0030: 30 30 30 30 2d 30 30 30 0000-000
0038: 30 2d 30 30 30 30 30 30 0-000000
0040: 30 30 30 30 30 30 7d 20 000000}
0048: 52 65 76 69 73 69 6f 6e Revision
0050: 4e 75 6d 62 65 72 3d 30 Number=0
0058: 20 00 .

there are no items showing under the tab INTERNET EXPLORER

Hi Acagone,

I don't need the full list at this stage, it does look like there are a few problems. Lets start by running Advanced windows care found at http://www.iobit.com/advancedwindowscareper.html the install process is straight forward, you don't have to add yahoo or iobit to your browser. Once it has been installed, run the tool.

1. Cancel the scan it starts automatically
2. click the Diagnose system ball
3. check system optimisation and clear the check marks on the other boxes.
4. perform the scan. Only the system optimisation category will be scanned.
5. once it is complete, restart the system.

Once the system has restarted have a look in the event viewer and search for errors and warnings in all the categories after the restart.

Let us know what you find.

Dear Alan,
sorry for the slow reply. I have done as you suggest, and I summarise the warnings and errors below. I saw many incidences of the same warnings, so I have summarized where I can.

All advice most gratefully received,
best regards... Acagone
APPLICATION

******* the following pair of warnings occurs about 40 times ***********

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/7/2009
Time: 11:30:30 PM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/7/2009
Time: 11:30:29 PM
User: JUYEAN\Administrator
Computer: JUYEAN
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/7/2009
Time: 11:15:42 PM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/7/2009
Time: 11:15:40 PM
User: JUYEAN\Administrator
Computer: JUYEAN
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/7/2009
Time: 8:29:11 PM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/2/2009
Time: 11:23:40 PM
User: S-1-5-21-1004336348-2111687655-1343024091-1004
Computer: LIM-EA00226C10E
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Windows Search Service
Event Category: Gatherer
Event ID: 3036
Date: 6/2/2009
Time: 12:40:11 AM
User: N/A
Computer: LIM-EA00226C10E
Description:
The content source <outlookexpress://{s-1-5-21-1004336348-2111687655-1343024091-500}/{e3c6ab09-f225-4d2c-85f5-49c00b498519}/> cannot be accessed.

Context: Windows Application, SystemIndex Catalog

Details:
(0x81270005)


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

SECURITY
no items to show

SYSTEM

***********the following warning appears about 26 times ************
Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 6/7/2009
Time: 10:22:20 PM
User: N/A
Computer: JUYEAN
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {43A966DB-3E1D-4B36-970D-A3426174A504}
User: JUYEAN\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: regkey:HKCU@S-1-5-21-1004336348-2111687655-1343024091-500\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 3;runkey:HKCU@S-1-5-21-1004336348-2111687655-1343024091-500\Software\Microsoft\Windows\CurrentVersion\Run\\Advanced SystemCare 3;file:C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: E100B
Event Category: None
Event ID: 4
Date: 6/3/2009
Time: 1:26:45 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 04 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 04 00 04 80 ...€

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 6/3/2009
Time: 1:08:06 PM
User: NT AUTHORITY\SYSTEM
Computer: LIM-EA00226C10E
Description:
The attempt to power off LIM-EA00226C10E failed

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....

Event Type: Warning
Event Source: Win32k
Event Category: None
Event ID: 240
Date: 6/1/2009
Time: 2:27:18 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
A request to suspend power was denied by winlogon.exe.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 4e 00 ......N.
0008: 00 00 00 00 f0 00 00 80 ....ð..€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 6/3/2009
Time: 7:15:17 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The IPSEC Services service terminated with the following error:
The authentication service is unknown.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: Server
Event Category: None
Event ID: 2505
Date: 6/1/2009
Time: 11:28:39 PM
User: N/A
Computer: LIM-EA00226C10E
Description:
The server could not bind to the transport \Device\NwlnkIpx because another computer on the network has the same name. The server could not start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 34 00 00 00 4...


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 6/1/2009
Time: 12:38:16 AM
User: NT AUTHORITY\SYSTEM
Computer: LIM-EA00226C10E
Description:
The server {49BD2028-1523-11D1-AD79-00C04FD8FDFF} did not register with DCOM within the required timeout.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Hi Agacone,

I can see a few issues that could cause the issue you are experiencing. I suggest we try fixing them one at a time. I found

http://support.microsoft.com/kb/870910
"To resolve this issue, delete the following registry subkey and then rebuild the policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Local
To do this, follow these steps.

Note When you follow these steps, you delete the local policy. You must rebuild the local policy.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows

1. Delete the local policy registry subkey. To do this, follow these steps:
1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and then click the following subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local
3. On the Edit menu, click Delete.
4. Click Yes to confirm that you want to delete the subkey.
5. Quit Registry Editor
2. Rebuild a new local policy store. To do this, follow this step:
1. Click Start, click Run, type regsvr32 polstore.dll, and then click OK."

Dear Alan,
thank you for your continuing help and support. I truly appreciate it.

At your command I followed your instructions, and deleted and rebuilt the policy key.

This didn't fix my problem yet, so please tell me what the next error is that I need to fix.

best regards... Acagone.

Hello,

Sorry for the late reply, Can you post a fresh set of entries, from in between the latest startup and latest shut down please?

acagone, on Jun 10 2009, 11:26 PM, said:

Did you eliminate the possibility that you are entering a bad address on the address line? If Google works and other addresses also, perhaps your address is incorrect. Google up AVGfree and see if you get another address choice that you can copy and paste into the address line. Usually when I screw up entering the address I get some of the same connectivity errors.

http://free.avg.com/download-avg-anti-virus-free-edition

Good luck.

Dear All,

This is not a bad address problem. It is not restricted to AVGfree, but to any program that attempts to contact the internet to download updates EXCEPT, windows update appears to be alive and well and not experiencing any problems.

Alan, if I understood your instructions correctly, you want me to log the warning/errors since last machine shutdown.
When I did this I noticed a lot of the errors appeared to be due to "Windows Search", which I have now uninstalled.

The current errors/warnings since last machine shutdown (after unintstalling windows search) are only two (see below).

Needless to say, I am still experiencing my strange loss of connectivity.

All help gratefully received.... Acagone

Application

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 6/16/2009
Time: 12:12:10 AM
User: NT AUTHORITY\SYSTEM
Computer: JUYEAN
Description:
Windows saved user JUYEAN\Administrator registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 6/16/2009
Time: 12:12:08 AM
User: JUYEAN\Administrator
Computer: JUYEAN
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

The other errors not being there this time is a very good sign, at this time I can think of two causes.

1. MTU is set too high
2. Hardware failure, specifically router or network card.

What is the make and model number of your router, and do you know if you are using PPPoE or PPPoA?