Event Viewer - Warning -Error-Information

NickH

unread,

Mar 26, 2005, 10:19:01 AM3/26/05

to

Looking through the event viewer I am observing continuous messages, staring
with a warning. See below

Text:Event Type: Warning
Event Source: COM+
Event Category: (105)
Event ID: 4445
Date: 26/03/2005
Time: 14:51:07
User: N/A
Computer: MYSELF-VH452NXI
Description:
An incompletely initialized CRM log file was detected. It has been
re-initialized. If this warning appears when the CRM log file is being
initially created then no further action is required.
Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID:
{3EAFD26A-9267-4D58-9159-A20AFB006E19}
Server Application Name: System Application

Then Error. See Below.
Event Type: Error
Event Source: COM+
Event Category: (98)
Event ID: 4822
Date: 26/03/2005
Time: 14:51:07
User: N/A
Computer: MYSELF-VH452NXI
Description:
A condition has occurred that indicates this COM+ application is in an
unstable state or is not functioning correctly. Assertion Failure:
SUCCEEDED(hr)

Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID:
{3EAFD26A-9267-4D58-9159-A20AFB006E19}
Server Application Name: System Application
The serious nature of this error has caused the process to terminate.
Error Code = 0x8000ffff : Catastrophic failure
COM+ Services Internals Information:
File: d:\qxp_slp\com\com1x\src\comsvcs\tracker\trksvr\trksvrimpl.cpp, Line:
3000
Comsvcs.dll file version: ENU 2001.12.4414.258 shp
Comsvcs.dll file version: ENU 2001.12.4414.258 shp

The Informatio. See Below.
Event Type: Information
Event Source: COM+
Event Category: (117)
Event ID: 778
Date: 26/03/2005
Time: 14:51:07
User: N/A
Computer: MYSELF-VH452NXI
Description:
Application image dump failed.
Server Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}
Server Application Instance ID:
{3EAFD26A-9267-4D58-9159-A20AFB006E19}
Server Application Name: System Application
Error Code = 0x80004005 : Unspecified error
COM+ Services Internals Information:
File: d:\qxp_slp\com\com1x\src\shared\util\svcerr.cpp, Line: 1259
Comsvcs.dll file version: ENU 2001.12.4414.258 shp

There is one Unknown Catagory Error see below.

Event Type: Error
Event Source: COM+
Event Category: Unknown
Event ID: 4689
Date: 26/03/2005
Time: 14:51:07
User: N/A
Computer: MYSELF-VH452NXI
Description:
The run-time environment has detected an inconsistency in its internal
state. This indicates a potential instability in the process that could be
caused by the custom components running in the COM+ application, the
components they make use of, or other factors. Error in
d:\qxp_slp\com\com1x\src\comsvcs\package\cpackage.cpp(1184), hr = 80080005:
InitEventCollector failed

Any help with the above

Thanks

Wesley Vogel

unread,

Mar 26, 2005, 11:00:17 AM3/26/05

to

CRM log is a WIN Registration file with a CRMLOG extension.

I.e. %SystemRoot%\registration\*.crmlog

Has something to do with Windows Product Activation.

None of your Warnings bring back anything here...

Windows XP Professional Events and Errors
http://www.microsoft.com/technet/support/ee/search.aspx?DisplayName=Windows%20XP%20Professional&ProdName=Windows%20Operating%20System&MajorMinor=5.1&LCID=1033

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:3E64822E-6545-4777...@microsoft.com,
NickH <Ni...@discussions.microsoft.com> hunted and pecked:

Peter Foldes

unread,

Mar 26, 2005, 11:18:17 AM3/26/05

to

If you right click on the Warning and select Properties then you get what
you posted. But if you click on the link below the error description and
then select yes you will get a more detailed explanation of the error. At
the bottom of all this is all the KB that is associated with this error.
Just expand the Knowledge Base there

--
Peter

Please reply to Newsgroup for the benefit of others.
"NickH" <Ni...@discussions.microsoft.com> wrote in message
news:3E64822E-6545-4777...@microsoft.com...

NickH

unread,

Mar 26, 2005, 1:35:01 PM3/26/05

to

I have already tried this, as has, Wes.
The result I receive back:
"We're sorry
There is no additional information about this issue in the Error and Event
Log Messages or Knowledge Base databases at this time. You can use the links
in the Support area to determine whether any additional information might be
available elsewhere."
The information sent from this PC to the link is displayed below.
Cat: [98]
Com Name: MS
Date: 26/03/2005
Event ID: 4822
Filename: COMRes.dll
File Ver: 2001.12.4414.258
Prod Name: COM Services
Prod Ver: 3.0.0.4414
Source: COM+
Time: 18:10:00
Type: Error

The problem appears if I go into Administration tools/Component
Services/console Root
Then select component services, as soon as this happens I receive three
blocks of Warning, Errors and Information, same messages.

Should I try to select "computer" after the component services, the window
closes and I am back at the Administration Tools directory.

Thanks for your help

Wesley Vogel

unread,

Mar 26, 2005, 7:13:54 PM3/26/05

to

Nick.

Sounds like DCOM is disabled. Mine sure is and on purpose too. ;-)

Enable DCOM

Edit the Registry
1. Start Registry Editor.
2. Locate the following path:
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
3. Change the EnableDCOM string value to Y to enable. Or Change the
EnableDCOM string value to N to disable.
4. Restart the operating system for the changes to take effect.

Use DCOMCNFG.EXE
1. Run Dcomcnfg.exe.
2. If you are running Windows XP or Windows Server 2003, perform these
additional steps:
a. Click the Component Services node under Console Root.
b. Open the Computers folder.
c. For the local computer, right-click My Computer, and then click
Properties.
d. For a remote computer, right-click Computers folder, point to New,
and then click Computer.
e. Type the computer name.
f. Right-click the computer name, and then click Properties.

3. Click the Default Properties tab.
4. Click to select the Enable Distributed COM on this Computer check box.
5. If you want to set more properties for the computer, click Apply to
enable (or disable) DCOM. Otherwise, click OK to apply the changes and
quit Dcomcnfg.exe.
6. Restart the operating system for the changes to take effect.

The following registry string value is used to enable or disable DCOM on all
operating systems:

HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\EnableDCOM

If you change this value to Y, you enable DCOM after you restart the
operating system.

If you change this value to N, you disable DCOM after you restart the
operating system.

From...

How to disable DCOM support in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;825750

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:E208167C-9746-4A15...@microsoft.com,

NickH <Ni...@discussions.microsoft.com> hunted and pecked:

NickH

unread,

Mar 27, 2005, 6:09:02 AM3/27/05

to

Wes

Went through the instructions, below for enabling DCOM , found it to be
already enabled, I therefore disable and re-boot the machine.
However, upon trying to carry out the second group of instructions, as soon
as I attempted to open the "Computers folder", the window disappears and I
have to run "DCOMCNFG.EXE", again but with the same results, I have tried
this operation looged on as administrator, but with the same results, I
cannot open the computers Folder.
I have reset the DCOM back to enabled and retried your instructions but
still with the same result.

Thanks

Nick

Wesley Vogel

unread,

Mar 27, 2005, 10:51:30 AM3/27/05

to

Nick,

Some things to try.

Is it started? If not click the Start button.
Is it set to Automatic? If not set to Automatic. Click Apply.
You may need to click the Start button again if it was Disabled.

Uninstall and reinstall COM+, instructions here...
How to clean up a damaged COM+ catalog
http://support.microsoft.com/default.aspx?scid=kb;en-us;315296

Register the following *.dll files.
Start | Run | Type or paste the following one at a time and hit your Enter
key. You should see a message telling if they registered or not.

regsvr32 comuid.dll

regsvr32 COMRes.dll

regsvr32 Comsvcs.dll

regsvr32 ole32.dll

regsvr32 oleaut32.dll

Long thread...
COM+ - Reinstalling COM+
http://www.tek-tips.com/viewthread.cfm?qid=758414&page=1

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:AD076C04-EE8D-45A6...@microsoft.com,

NickH

unread,

Mar 27, 2005, 1:49:03 PM3/27/05

to

Wes

I have had some luck and some, not so.
Carried out the Open Services...

It comes up with an ERROR,
COM+ systems application Service. Error - 1053 Did not respond to the start.

I went through the "How to clean up a damaged COM+ catalog. with some
varying results.
Had to go into "Safe Mode", to carry out the process, during the process
"ADD/Remove Windows Components", i received and error, shown below.

COM+ Setup Error
Sub-Component COM+ raised an eeception while processing the
OC_COMPLETE_INSTALLATION setup message.
d:\nt\com\com1x\src\complussetup\comsetup\ccompluscore.cpp
[Line 565]
Error Code: 0x80040206
An unexpected internal error was detected The COM+ event classes could not
be registered.

I ran the rmdir /s Resgistration command, in safe mode had no choice, access
denied in normal modes. other than selecting yes(Y), very little else
happened, then returned to the C prompt. So I assume this part is OK.

The "state of play", is now I am able to go into component services, My
computer, then there are three sub-trees, COM+ Applications(Comes up with an
error code 800440154 - Class not regsitered).
DCOM Config, this appears to be OK, Displays Bames and the Application ID.
Distribution Transaction Coordinator, displays Transaction List &
Transaction Statistics.

The event viewer the no erros now appear in the application log, however
there are 4 errors in the System log, these are shown here.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 27/03/2005
Time: 19:15:55

User: N/A
Computer: MYSELF-VH452NXI
Description:

Timeout (30000 milliseconds) waiting for the COM+ System Application service
to connect.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 27/03/2005
Time: 19:15:55

User: N/A
Computer: MYSELF-VH452NXI
Description:

The COM+ System Application service failed to start due to the following
error:
The service did not respond to the start or control request in a timely
fashion.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date: 27/03/2005
Time: 19:16:51

User: N/A
Computer: MYSELF-VH452NXI
Description:

Timeout (30000 milliseconds) waiting for the COM+ System Application service
to connect.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 27/03/2005
Time: 19:16:51

User: N/A
Computer: MYSELF-VH452NXI
Description:

The COM+ System Application service failed to start due to the following
error:
The service did not respond to the start or control request in a timely
fashion.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I hope the above is of some help

NickH

unread,

Mar 28, 2005, 7:11:05 AM3/28/05

to

Wes

A few more problems I have encountered since my last post, if these may help
then so much the better.

I am having problems with the Windows Installer.
From the Msilnstaller

Event Type: Warning
Event Source: MsiInstaller
Event Category: None
Event ID: 1015
Date: 28/03/2005
Time: 12:09:16
User: MYSELF-VH452NXI\Nick Hyde
Computer: MYSELF-VH452NXI
Description:
Failed to connect to server. Error: 0x800706BA

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Second problem is with NPROTECT.

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 28/03/2005
Time: 12:13:35

User: N/A
Computer: MYSELF-VH452NXI
Description:

Faulting application NPROTECT.EXE, version 15.3.0.36, faulting module
NPROTECT.EXE, version 15.3.0.36, fault address 0x00001699.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 4e 50 52 ure NPR
0018: 4f 54 45 43 54 2e 45 58 OTECT.EX
0020: 45 20 31 35 2e 33 2e 30 E 15.3.0
0028: 2e 33 36 20 69 6e 20 4e .36 in N
0030: 50 52 4f 54 45 43 54 2e PROTECT.
0038: 45 58 45 20 31 35 2e 33 EXE 15.3
0040: 2e 30 2e 33 36 20 61 74 .0.36 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 30 30 31 36 39 39 00001699

Third problem I am observing on the Event viewer.

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 28/03/2005
Time: 12:14:03

User: N/A
Computer: MYSELF-VH452NXI
Description:

Fault bucket 09754639.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 30 39 37 35 34 36 33 39 09754639
0010: 0d 0a ..

If I go into Control Panel/ Add or remove, select the Add/Remove Windows
Components, and run the add components, I obtain the following error.

Sub-component COM+ raised an exception while processing the
OC_COMPLETE_INSTALLATION setup message.
d:\nt\com\com1x\src\complussetup\comsetup\ccompluscore.cpp (line 565)
Error Code = 0x80040206

An unexpected internal error was detected
The COM+ event classes could not be registered.

I do not know if this has any bearing on the other problems I am
experiencing, but any help herer would be most appreciated.

Thanks

Wesley Vogel

unread,

Mar 28, 2005, 8:37:15 AM3/28/05

to

Nick,

from...
Windows XP Home/Professional Events and Errors
http://www.microsoft.com/technet/support/ee/search.aspx?DisplayName=Windows%20XP%20Professional&ProdName=Windows%20Operating%20System&MajorMinor=5.1&LCID=1033

Windows XP Professional Events and Errors Search Results
for "MsiInstaller 1015"
Sorry, no results returned.

NPROTECT.EXE Nprotect is part of Norton Utilities. (It replaces the default
recycle bin.)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:343BFA60-2884-4048...@microsoft.com,

Wesley Vogel

unread,

Mar 28, 2005, 9:01:34 AM3/28/05

to

Nick,

Do you actually need DCOM for anything? I sure don't.

Is there anything in C:\Program Files\ComPlus Applications ??

DCOM Windows XP Do You Need It?
[[Virtually no-one needs it, wants it or uses it! ]]
http://www.updatexp.com/dcom-windows-xp.html

[[COM+ System Application
You will receive, in the Event Log, an entry from "DCOM" complaining about
not having this service running if disabled. I am unaware of any application
that uses COM+, but if set to manual, many services report to it, so it will
start anyway. For the fun of it:

"C:\Program Files\ComPlus Applications"

On your system, see if you have any installed "COM+" Applications. If not,
you can probably disable this service with no side effects (besides the
Event Log complaining upon reboots). This service is required for System
Event Notification.

Default XP Home: Manual
Default XP Pro: Manual
Safe Setting: Manual]]
http://www.blackviper.com/WinXP/service411.htm#COM+_System_Application

COM+ System Application
[[Basically, this is the application that controls COM+ Event System. One of
the support files that you'll probably never have any use for, but if you
disable it, the warning notices you receive are worse than leaving it
enabled. Disabling this service will generate Event Log entries noting it
isn't running. An annoyance, but not harmful.
The Manual setting avoids the Event Log entries.]]
http://www.theeldergeek.com/com+_system_application.htm

[[System Event Notification
Used in conjunction with COM+ Event System, this service notifies particular
services when system events, such as logon and power events occur. I doubt
the average user really cares about this. I have also not seen any
applications that use this. You will receive, in the Event Log, an entry
complaining about not having this service running if disabled. I have yet to
find a side effect, though. For a "safe" configuration, leave this service
on automatic.

Default XP Home: Automatic
Default XP Pro: Automatic
Safe Setting: Automatic]]
http://www.blackviper.com/WinXP/service411.htm#System_Event_Notification

-----------

COM+ Setup Error
Sub-Component COM+ raised an eeception while processing the
OC_COMPLETE_INSTALLATION setup message.
d:\nt\com\com1x\src\complussetup\comsetup\ccompluscore.cpp
[Line 565]
Error Code: 0x80040206
An unexpected internal error was detected The COM+ event classes could not
be registered.

Do the following:
- open the command prompt
- change the directory to \windows\system32
- enter the following command lines
- regsvr32 ole32.dll
- regsvr32 oleaut32.dll
- Then do the add/remove windows components steps again. This will remove
the error.
http://www.mcse.ms/archive70-2004-10-1056773.html

ID: 7009
Source: Service Control Manager
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=Service+Control+Manager&EvtID=7009&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.0

ID: 7000
Source: Service Control Manager
http://www.microsoft.com/technet/support/ee/result.aspx?EvtSrc=Service+Control+Manager&EvtID=7000&ProdName=Windows+Operating+System&LCID=1033&ProdVer=5.2

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:764797F2-E3D1-4F34...@microsoft.com,

NickH

unread,

Mar 29, 2005, 7:45:04 AM3/29/05

to

Wes.

After reading your last email, , decided there is no reason run DCOM,
nothing in the \Program Files\ComPlus Applications, I changed the setting in
the Register (n) accordingly.
I came across a problem whilst in the Component Sevices, as suggested in:
http://www.updatexp.com/dcom-windows-xp.html, was unable to right click on
"My Computer" for Properties. I do not know if this has any significants, but
there is a small "Red Arrow" pointing down, this may just be to indicate the
sub-tree.

COM+ Setup Error:
Went through the procedure for as shown below, but I am still observing the
same problem as before.
Sub-component COM+ raised an exception while processing the
OC_COMPLETE_INSTALLATION setup message.

d:\nt\com\com1x\src\complussetup\comsetup\ccompluscore.cpp (line 565) Error

Code = 0x80040206 An unexpected internal error was detectedThe COM+ event

classes could not be registered.

Other problems still apparent are:
"Windows Installer" still malfunctioning....
"Norton Antivirus" problem with LiveUpdate. "LU1803", considered
re-installing, but without the "Windows Installers" the operation cannot be
carried out.
"WORD" .. message appears "This document could not be registered. It will
not be possible to create links from other documents to this document.
Second message appears. "This document could not be registered. It will not
be possible to create links from the other documents to this document.
(C:\...\Startup\jawsPDFCreateInit.dot), same message when opening any word
document.
Just to clarify I carried out the instructions as shown here:

Do the following:
open the command prompt

change the directory to \windows\system32

enter the following command lines

regsvr32 ole32.dll
regsvr32 oleaut32.dll

Then do the add/remove windows components steps again. This will remove
the error

But had no effect.

Wesley Vogel

unread,

Mar 29, 2005, 8:44:26 AM3/29/05

to

Nick,

Component Services, don't worry about it. DCOM was screwed already.

Workaround for Symantec/Windows Installer Program problems on XP SP2
http://www.networksecurityarchive.org/html/NTBugtraq/2004-12/msg00002.html

Error: "LU1803: LiveUpdate failed while getting your updates" or "LiveUpdate
had an internal error while getting your updates"
http://service1.symantec.com/SUPPORT/sharedtech.nsf/pfdocs/2002071909270613

For Word problem, do a Search for a file called Normal.dot. Delete it.
Word will create new file when you next start Word.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:CEFB6255-E271-4813...@microsoft.com,

NickH <Ni...@discussions.microsoft.com> hunted and pecked:

<snip>

NickH

unread,

Mar 30, 2005, 5:05:01 AM3/30/05

to

Wes.

Well, went through the processes yesterday and last night, and carried out
all the steps covered in:

"Workaround for Symantec/Windows Installer Program problems on XP SP2"

The outcome was very little in respect of resolving the problem of Symantec
and the Widows Installer, I deleted so I believe, everything in connection
with Norton Antivirus and the WMI which symantec provides as an
update.....however as far as XP is concerned, Norton antivirus is installed,
and apparently running well, although I have deleted the whole package, I
believe.
Unfortunately during this process I must have changed a few things or
deleted a few things possibly from the register, which has caused several
problems to appear.
1, the RPC server does not appear to be running, If I try to install
anything now, I obtain a message:
RunDll32 c:\program~1\Common~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup
"C:\Program files\ Installshield\ Installation
Information\{748F-4870~1}\Setup.exe" --MAIN -s - f2" c:\setup.log". An
installable Virtual Device Driver failed Dll initialization, Choose 'Close'
to terminate the application. If you attempt to run setup.exe from the
sub-directory, the following notice appears. The InstallShield Engine
(iKernel.exe) could not be launch. The RPC server is unavailable.
2, Should i try to open up help or to do a search, the left hand
window(Search Companion) remains blank.
3, From the 'Start' menu, the Help and Support, does not work when selected.
4, I saved a backup of the whole registry, before attempting any editing,
but I am having problems importing it back in, The Registry Editor window
appears with the following text.
Cannot inport C:\check\ Regbackup29032005.reg: Not all data was successfully
written to the register. Some keys are open by the systems or other process.
I have tried, importing in the "safe Mode" level, but exactly the same
result appears.

Note. One thing I have found, was I had another Anitvirus software
installed a while back, "AVG7", this I deleted/removed sometime ago however,
I have found the entry below:
\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall
\Directories
\Features
\TextCache.
I have tried to remove the above but with no success, both in normal mode
and Safe Mode I have checked to see if anything else, program or service may
still be running. An error Deleting Key Message appears "Cannot delete
AVG7Uninstall: Error while deleting key".

5. Carried out the instruction for removing the "normal.dot" file, however I
am stil l observing the same problem or messages previously.

At the moment, I am still running XP, with resources, and I am still able to
connect to the Internet, I have been able to install Mozilla, which allows me
to work with Outlook express. Connection is through a router, I have disabled
"Zone Alarm" firewall, temporarily since the article mentioned a problem with
this application and XP +SP2.

I would like to install some antivirus, I cannot install AVG7, because it
believes it he full application is already installed.

Any help would be on the above would be gratefully appreciated.

NickH

unread,

Apr 8, 2005, 6:35:03 AM4/8/05

to

Wes.

If you are still following this thread, I have been able to uninstall Norton
completely, and using another antivirus product, which appears to be running
quite well. However, I still have problems with XP, previously explained
before.

For the moment I am going to re-install, XP, onto another area of the disk,
and make it the active directory, I will not delete the original, since I
will look at the problems in the future... Just as well this isn't for
business use.

Thanks for your help.

Nick