Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Errors in Event Viewer


  • Please log in to reply
26 replies to this topic

#1 candt

candt

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 15 August 2005 - 11:59 AM

Hello. I am having some isues in Event Viewer. When I look under "System" in Event Viewer, I see a number of warning and error messages. For example, here are a few of the warning messages:

"The time service has not been able to synchronize the time system for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized. " The source for this one is W32Time. Event ID 36.

"Your computer has automatically configured the IP address for the network card with network address xxxxxxxxx. The IP address being used is xxxxxx." The source for this one is Dhcp. Event ID is 1007.

"Timed out sending notification of device interface change to window of "Connections Tray." The source for this one is PlugPlayManager. Event ID 256.


There a few of each of those warnings. Here is an error message.

"Unable to connect: Windows is unable to connect to the Windows update service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection." The source for this one is Windows Update Agent. Event ID 16.


Those are all of the warning and error messages that appear in my system file in event viewer. Any idea of what is going on with them?

My OS is Windows XP, the computer is a HP laptop with 1.1 GHZ AMD Duron processor.

Edited by candt, 16 August 2005 - 10:12 AM.


BC AdBot (Login to Remove)

 


m

#2 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:05:20 PM

Posted 16 August 2005 - 07:07 AM

Please supply the Event Source & Event ID #.
They don't look like anything serious but will need the Source & ID # to look them up.

#3 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 16 August 2005 - 10:13 AM

Sorry about that lack of info. I edited my original post.

Something I experienced last night: My computer was bogging down heavily, so I brought up the Task Manager to see what was going on. It said CPU usage was 100%, and 99% of that was "svchost.exe", and the username for this was "SYSTEM" Any idea what was going on?

#4 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:05:20 PM

Posted 16 August 2005 - 12:21 PM

W32Time

The time service has not been able to synchronize the system time for 49152 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized. (nothing to worry about)

Dhcp

Your computer has automatically configured the IP address for the Network Card with network address <MAC address>. The IP address being used is <ip address within the 169.254.0.0 range>. (nothing to worry about)

PlugPlayManager

Timed out sending notification of device interface change to window of "<application name>"

This event is typically caused by applications that by design want to be notified when a new device is connected to the system. For example, some graphic-processing applications might want to know when a scanner is attached to the system so they can offer the option to import an image from the scanner. Such applications, register with the Plug and Play Manager (a Windows subsystem) saying basically that "when you detect this type of hardware, let me know". When the hardware is connected (or disconnected), the Plug and Play Manager sends a notification, expecting an answer to confirm that the notification is received. Since the application might be busy, the P&PM waits for up to 30 seconds for the application to respond. After that, it stops waiting and records this event.
Since at boot time, the plug&play is really busy, an application's (could be a service) failure to confirm the notification may cause a (frustrating) delay during the computer startup (the 30 seconds multiplied by the number of applications that do not respond).

So what may cause the applications to behave like this (i.e. not responding)? There could be several reasons:
- software bugs (in the application or in the Plug and Play Manager itself)
- overloaded system - the computer may be too busy for the application to have a chance to respond within the 30 seconds waiting time
- improper detection of the device (caused by faulty hardware or faulty drivers) - may have many unexpected effects on both the Plug and Play Manager and the notified applications

Windows Update Agent

Unable to connect: Windows is unable to connect to the Automatic Updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

Lets do a complete cleaning and reset the security settings and see if it helps.

Start>Control Panel>Internet Options>Security Tab>Custom Level>Reset to Medium
Click Trusted Sites>Sites>make sure there is no strange looking sites listed.
While there you can Add "windowsupdate.com" without the quotes>remove the check mark from requires https

It said CPU usage was 100%, and 99% of that was "svchost.exe"

This can be caused by adware &/or malware.

See this article:
Taking out the Trash

Show all Files & Folders
http://www.bleepingcomputer.com/forums/ind...showtutorial=62
Try these free tools.
Trendmicro (free virus scan only)
http://housecall.trendmicro.com/
Adware SE (update after installing)
http://www.lavasoftusa.com/software/adaware/
Spybot S&D (update after installing)
http://www.download.com/Spybot-Search-Dest...4-10122137.html

Report back with your progress.

#5 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 16 August 2005 - 01:29 PM

Thanks for your help. This site is wonderful for someone like me who knows little about computers. I installed a new hard drive in my laptop just recently with the help of this site.

I followed your instructions on resetting the security settings, and there were no websites listed in trusted sites. I added windowsupdate.com.

Regarding the svchost.exe, it has not yet done it today. The first and only time it happened was last night, and I have since run Ad-Aware. Hopefully that is fixed. However, I notice it is still in the list of processes in the Task Manager. In fact, there are a few svchost.exe listed in the proccesses tab, but with different usernames. They are LOCAL SERVICE, NETWORK SERVICE, and SYSTEM. There are 3 of them listed with SYSTEM as a username, so a total of 5 svchost.exe processes. Thanks for the taking out the trash article. I did what the article said (was unable to find the first temp folder). I also ran Ad-Aware, like I said, as well as ccleaner.

The link under "Show and files and folders" did not work for me.

#6 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:05:20 PM

Posted 16 August 2005 - 01:41 PM

svchost.exe

This process is normal and it is also normal to have several of them running at once.
See:
http://windowsxp.mvps.org/svchost.htm

The link under "Show and files and folders" did not work for me.

Thanks for letting me know, I will report it to Lawrence.
Here is one that will work.
http://service1.symantec.com/SUPPORT/tsgen...002092715262339

I fixed my link, it isn't BleepingComputers problem it was mine.
http://www.bleepingcomputer.com/forums/ind...showtutorial=62

I followed your instructions on resetting the security settings, and there were no websites listed in trusted sites. I added windowsupdate.com.

Were you able to download your windows updates now?

Edited by River_Rat, 16 August 2005 - 01:43 PM.


#7 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 16 August 2005 - 04:48 PM

Thanks for the info on svchost.exe. About the hidden files.....even if I configured my PC to show them, I wouldnt know what was supposed to be there and what wasnt. How would I tell what to delete?

I am not sure if windows update will work or not. I had it set to automatically download and install the updates, and I went and changed it to notify me before doing those operations. When I did that, the little globe in the system tray (?) went away.

#8 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:05:20 PM

Posted 16 August 2005 - 04:58 PM

The main purpose of showing these files are when doing the adware scans this will allow the removal tools to find trash in these folders. After cleaning your computer you can set them to hidden again.

You can check for windows updates by opening your browser (home page) go to Tools>Windows Update.

#9 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:05:20 PM

Posted 16 August 2005 - 09:40 PM

If you are using Win XP and do not have SP2 installed as yet I don't believe you can get any more updates unless you set it to update automatically.

Microsoft SP 2
Microsoft - Steps to take before SP 2 installation

These are the steps you are advised to take before installing SP2:

1. Back up all your data.

2. Check out the Web site of your hardware manufacturers to see if SP2-related software updates are available for download.

3. Purge your system of all spyware and adware you may have accumulated.

From Microsoft:
Programs that are known to experience a loss of functionality when they run on a Windows XP Service Pack 2-based computer
http://support.microsoft.com/default....wsxpsp2

Some programs seem to stop working after you install Windows XP Service Pack 2
http://support.microsoft.com/kb/842242/

I would suggest running AdAware and Spybot Search and Destroy BEFORE you install SP2.
Download, install, update and run
*AdAware SE: http://www.lavasoftusa.com/software/adaware/

*Spybot S&D:
http://www.safer-networking.org/en/index.html

Also download, install, update and run the Microsoft Anti-Spy beta:
Microsoft Antispyware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx

Do you have a dialup or a broadband connection?
Microsoft offers a free CD to install SP 2 and if you are on a dialup it is highly recommended.

In fact, even using broadband, it is a large file and you may get better results and an easier install using the CD.

Order it here (free)
:
http://www.microsoft.com/windows....lt.mspx


If you encounter difficulties or have questions, call 888-SP2-HELP for assistance.

Microsoft Security Product Support Policy

Microsoft Policy
Technical support is available from Microsoft Product Support
Services at 1-866-PC SAFETY (1-866-727-2338).

There is no charge by Microsoft for support calls associated with security updates.

International customers can get support from their local Microsoft subsidiaries. Phone numbers for international support can be found at: http://support.microsoft.com/common/international.aspx

There are a few programs you need to install and run BEFORE you update to SP2. These will insure that spyware and other malware which will cause malfunctions after or during installation of SP2 are removed prior to your installing SP2.

Of course, a frequently updated resident anti-virus program is absolutely necessary. If you do not have one installed, AVG, freeware you can download at the following link will provide excellent AV protection:

AVG: http://www.grisoft.com/us/us_index.php

or you can choose Avast Anti-virus freeware
http://www.komando.com/bestshareware.asp

or any of the major brand paid AV programs that are available.

Also absolutely necessary:
Anti-malware protection (freeware) (You can run as many of these as you wish. Generally there is no conflict between these and you should always run several as each will find things the others will not.)

*AdAware SE: http://www.lavasoftusa.com/software/adaware/

*Spybot S&D: http://www.safer-networking.org/en/index.html
*the two most important to have!

Microsoft Antispyware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx

If you find spyware or viruses and have a problem removing them come back here and we will assist you as SP2 will not install properly with malware on your system.

Posted below are a few web based AV, anti-malware and anti-trojan scans to run. Set them to clean any infection they find and if you find anything with the first couple, keep going until you have run them all.

Web based online Antivirus and anti-malware scans: (these can be run regardless of whatever else you are using. You must use Internet Explorer to run these.)

Windows Security Trojanscan
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Panda Activescan (IE only)
http://www.pandasoftware.com/activescan/co...n_principal.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Kaspersky Anti-Virus Web Scanner
http://www.kaspersky.com/service?chapter=161739400#betatest

online trojan scans here -
http://scan.sygatetech.com/pretrojanscan.html
http://windowsecurity.com/trojanscan

SP2 is primarilly involved with adding critically needed security to Windows XP, and all the "bugs" it originally were purported to exist have been corrected. Most problems experienced by those who installed were the fault of third party code that was not compliant with Microsoft's published requirements or the result of malware infections existing on the systems, so that is why it is critical that your system be completely clean before installing SP2. Most third party vendors have already updated their drivers so as to become compliant with the requirements made by SP2. Go to their sites and update whatever software applies to your system.

#10 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 16 August 2005 - 11:52 PM

I tried using windows update, and it worked. It installed SP2 for me, and it took quite a while with my dial up connection but it worked. I cleaned up the computer earlier today, so that was already done. Thanks for the help guys.

#11 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 27 August 2005 - 01:01 AM

Another error message in Event Viewer....

Source is ntfs. Event ID is 55.
"The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C."

I ran chkdsk, and everything is working fine, was just wondering about the error message. Is it a sign of something serious?

Another thing I noticed, the last couple days...there are a lot of error messages in Event Viewer. They are all repeats of the ones I posted in prior posts, but there are several of them. For example, out of a block of 18 events, 15 of them were error messages. They are all the W32Time error messages. I know its nothing serious by itself, I am wondering if the frequency of it is something to worry about.

#12 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 29 August 2005 - 01:15 AM

For some reason I am unable to find the edit button to edit my post?

Heres an update.....the error message telling me to run chkdsk never showed up again, so that must be fixed. However, two new messages have showed up. Here they are in no particular order:

Source is W32Time. Event ID is 17.
"Time provider NtpClient: An error occured during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)"

Source is ACPIEC. Event ID is 1.
"\Device\ACPIEC: The embedded controller (EC) hardware didnt respond within the time out period. This may indicate an error in the EC hardware or firware, or possibly a poorly designed BIOS which accesses the EC in an unsafe manner. The EC driver will retry the failed transaction if possible."

Those were the two new error messages I received. I now see a new warning message, which relates to the last error message....

Source is ACPIEC. Event ID is 3.
"\Device\ACPIEC: The embedded controller (EC) hardware returned data when none was requested. This may indicate that the BIOS is incorrectly trying to access the EC without synchronizing with the OS. The data is being ignored."


This might as well be a different language to me. I also click on the links provided to help me solve the problem, but I am still confused after reading the solutions. I am not noticing any performance problems. Any idea on these River Rat, or anybody else?

#13 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:05:20 PM

Posted 29 August 2005 - 07:54 AM

Hello Candt
Sorry to be so long getting back to you.
Glad SP2 install went good.

Source is ntfs. Event ID is 55.
"The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C."

This is an error generated from a bad or corrupt cluster on your HDD and Checkdisk should have fixed it if not the HDD may be going bad.

Source is W32Time. Event ID is 17.
"Time provider NtpClient: An error occured during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)"

This happens on Windows XP.
There is a problem synchonizing the time clock, nothing to worry about.
To fix: go to "Date and Time Properties" and under "Internet Time" uncheck "Automatically synchronize with an Internet timeserver".

Source is ACPIEC. Event ID is 1.
"\Device\ACPIEC: The embedded controller (EC) hardware didnt respond within the time out period. This may indicate an error in the EC hardware or firware, or possibly a poorly designed BIOS which accesses the EC in an unsafe manner. The EC driver will retry the failed transaction if possible."


Source is ACPIEC. Event ID is 3.
"\Device\ACPIEC: The embedded controller (EC) hardware returned data when none was requested. This may indicate that the BIOS is incorrectly trying to access the EC without synchronizing with the OS. The data is being ignored."

This is due to the ACPI power feature drivers have been corrupted or damaged.

Lets try this:
Go to your computer manufactures website and check for updates for your model.

Then if still not fixed:
Go to the Device Manager and remove ACPI Fixed Feature Button then restart and let Windows reinstall it from the driver cache.

Device Manager:
Right Click My Computer>Properties>Hardware Tab>Device Manager Button>Click the + by System Devices>Right Click ACPI Fixed Feature Button>Uninstall>Restart Computer

#14 candt

candt
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:06:20 PM

Posted 29 August 2005 - 12:12 PM

I have no reason to believe that checkdisk did not fix it. I just replaced this hard drive less than a month ago, so I am a bit surprised to see a bad cluster. Any ideas why this would have happened?

Took care of the time synchronization. The W32Time error messages were all over the place in event viewer, so those should be gone now.

As for the ACPI power feature drivers, I am unsure of what to look for on their website. I did a search for my model number, and this website came up...

http://h10025.www1.hp.com/ewfrf/wc/softwar...n&cc=us&os=228#

Do you recognize anything on that list that I should be downloading?

If it is of any help, I right clicked on ACPI fixed feature and selected properties, and it said the device was working properly.


Would any of these errors be because of my firewall? I am using Zone Alarm.

Edited by candt, 29 August 2005 - 12:24 PM.


#15 River_Rat

River_Rat

  • Members
  • 773 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Oklahoma - USA
  • Local time:05:20 PM

Posted 29 August 2005 - 01:36 PM

I would download the BIOS updates, if you feel confortable doing so.
You will need a floppy disk.

If it is of any help, I right clicked on ACPI fixed feature and selected properties, and it said the device was working properly.

After doing the SP2 upgrade this may have caused the error to show in the Event Viewer, and the device to show to working OK in the device manager.

Right Click My Computer>Properties>Hardware Tab>Device Manager Button>Click the + by System Devices>Right Click ACPI Fixed Feature Button>Uninstall>Restart Computer

This will update the driver if it is corrupt.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users