NetBT Event ID 4311
morog
Product: Windows Operating System
ID: 4311
Source: NetBT
Version: 5.2
Symbolic Name: EVENT_NBT_CREATE_DEVICE
Message: Initialization failed because the driver device could not be
created.
To solve this problem there is hotfix ( should be included in SP-1 or 2 ) kb
833747.
Besides all atempts to obtain this hotfix since now I am unable to get it.
Please if anyone can help me to solve this error.
--
morog
nass
"morog" wrote:
What SP? service pack you have installed on your system now?.
Do you have other machines sharing the connection with? and what the
connection type?.
http://support.microsoft.com/kb/811113
http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=4311&EvtSrc=NetBT&LCID=1033
http://support.microsoft.com/kb/833747/en-us
Disable NetBios Over TCP/IP on your NIC properties:
NetBIOS over TCP/IP
Open a run command and type in:
netsh int ip reset
Reboot your machine and monitor the log, does reoccurs again?.
Or download the Winsock from here:
http://www.nasstec.co.uk/downloads/winsockfix.exe
Here are lots of Issues like yours and solutions:
http://www.eventid.net/display.asp?eventid=4311&eventno=910&source=NetBT&phase=1
HTH.
nass
---
http://www.nasstec.co.uk
morog
Connection ADSL.
Try to fix the error following your tutorial:
" Disable NetBios Over TCP/IP on your NIC properties:
NetBIOS over TCP/IP
Open a run command and type in:
netsh int ip reset "
What I can do next, please.
--
morog
nass
Either contact Microsoft by opening a support ticket to get the HotFix.
Or try to Reinstall your Network but try to run a clean up for malware and
viruses then run disk cleanup to clear all debris and install the connection
and see if that will help eliminate the error.
Per MS Quote you can ignore the error message as the NIC or your logging
this when it think the connection duplicated or another connection with the
same name?.
Run this command:
sfc /scannow
morog
--
morog
"morog" wrote:
> Running Win XP Pro SP-2 with all MS Updates over AU installed.
> Connection ADSL.
> Try to fix the error following your tutorial:
> " Disable NetBios Over TCP/IP on your NIC properties:
> NetBIOS over TCP/IP
> Open a run command and type in:
> netsh int ip reset "
> Reboot, but error appear again.
> What I can do next, please.
> --
> morog
In meantime try with Winsokexe
morog
PC is 100% clean, no viruses, trojans or other sorts of malwares.
SFC /Scannow - all system files are intact and in their original places
--
morog
Gerry
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
morog wrote:
> Allready asked hotfix from MS-nothing received.
> PC is 100% clean, no viruses, trojans or other sorts of malwares.
> SFC /Scannow - all system files are intact and in their original
> places
>
>>
morog
Very strange , after so many efforts and attemptsm I am still unable to
solve this error and find correspondent help from the whole ciber community
--
morog
Gerry
http://www.eventid.net/display.asp?eventid=4311&eventno=910&source=NetBT&phase=1
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
morog wrote:
> Yes, I have installed all Windows XP SP2 through AU .
> Very strange , after so many efforts and attemptsm I am still unable
> to solve this error and find correspondent help from the whole ciber
> community
>
morog
http://www.eventid.net/display.asp?eventid=4311&eventno=910&source=NetBT&phase=1, but nothing solved my case.
Probably problem solution lies in the Registry, but where and what to
change for NetBT ?
hotfix for 32- bit x86 mentioned in MS , should be this file:
Windows XP, 32-bit editions
Date Time Version Size File name
--------------------------------------------------------------
09-Dec-2003 21:51 5.1.2600.1325 149,248 Netbt.sys
--
morog
Gerry
No. The version you have here C:\WINDOWS\system32\drivers should be
5.1.2600.2180 from the SP2 update.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
morog wrote:
> Try all from
> http://www.eventid.net/display.asp?eventid=4311&eventno=910&source=NetBT&phase=1,
> but nothing solved my case. Probably problem solution lies in the
> Registry, but where and what to
> change for NetBT ?
> hotfix for 32- bit x86 mentioned in MS , should be this file:
> Windows XP, 32-bit editions
> Date Time Version Size File name
> --------------------------------------------------------------
> 09-Dec-2003 21:51 5.1.2600.1325 149,248 Netbt.sys
>
nass
Hi Morog,
Please check the entries for this Key and report back with info provided on
the CLSID:
[-]HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}\{07570370-3108-4DCE-8B41-A6807609026D}
= What info in the right Pane?.
HTH.
nass
morog
I can not find "Network" in the key you've mentoned.
I finde "Netvork" here:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}
In the right Pane there is next info:
Default REG_SZ Network Protokol
Class REG_SZ NetTrans
In meantime try to Uninstall and Reinstall Internet Protokol (TCP/IP) using
MS tool in hope this will solve the problem, but same error 4311 appear again
in EV afetr reboot.
Thanks for your assistance and help,
N.B. In right Pane for the "Network" itself , found this info:
Default REG_SZ
Config REG_BINARY 00 00 00 00 1d 00 00 00 cb 93 3f 6b 34 6...
Filter Classes REG_MULTI_SZ scheduler loadbalance failover
morog
nass
Morog,
I have the same entry in my registry!, you may need to uninstall your NIC
(network interface card) and then reboot, that may correct the problem.
Note: create a restore point, if any thing gone wrong you can restore from
it. Windows will detect your NIC on reboot and install the driver or prompt
you to insert the CD software if you have one.
Or else MS KB said user action not required :).
Good luck.
nass
morog
Probably you didn't notice in my previous post I mentioned , using MS tool
299357 to reset TCP/IP I have done this what you suggest ( if we think for
the same isue) i. e. uninstalled TCP/IP - rebooted and Windows recreate the
NIC, but Error 4311 appears again.
Now I am considering at a command prompt type:
netsh int ip reset c:\resetlog.txt
What is your opinion about this attempt, please
--
morog
nass
Hi Morog,
Sorry, I missed that bit!!!, yes try the command and reboot your machine and
see if that will correct the error.
I really have no idea what could be other than you missed an update.
Good luck.
morog
difference and after reboot, famous Error 4311 appear again in EV.
After so many attempts I don't know what I can do else more.I am realy
desperate
and very dissapointed--
morog
Gerry
I posted this earlier and I suspect you may haved missed the post.
Morog
No. The version you have here C:\WINDOWS\system32\drivers should be
5.1.2600.2180 from the SP2 update.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
morog
I 've noticed your post and confirm what you stated, the version I have is
5.1.2600.2180 , from the SP-2 update.
I repeat I have all updates through AU.
I suspect something is wrong in my Registry regardin NetBT.
Regards,
--
morog
"Gerry" wrote:
> Morog
>
> I posted this earlier and I suspect you may haved missed the post.
>
> Morog
>
> No. The version you have here C:\WINDOWS\system32\drivers should be
Gerry
That clears up that point.
Have you worked through KB Article 842715? The Article number has not
been mentioned and I do not have the time now to see whether any of the
suggestions by Nass originate from the Article.
Overview of problems that may occur when administrative shares are
missing
http://support.microsoft.com/kb/842715
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
morog wrote:
> Hi Gerry,
> I 've noticed your post and confirm what you stated, the version I
> have is
> 5.1.2600.2180 , from the SP-2 update.
> I repeat I have all updates through AU.
> I suspect something is wrong in my Registry regardin NetBT.
> Regards,
>
morog
"problems that may occur when administrative shares are missing"- this can
not be applied to my case.
Following tutorials from http://support.microsoft.com/kb/842715, all results
were O.K. after worked out what is suggested in a/m Article, meaning
administrative shares not missing.
--
morog
Gerry
Finished work for the day so I have now done some more research.
You have not posted a complete copy of the Error Report and I have seen
several variations of the basic report. Can you post a complete report.
A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event Viewer.Now
start your message (email) and do a paste into the body of the message.
Make sure this is the first paste after exiting from Event Viewer.
Certain versions of the Error Report say "No User Action required". This
is because the system keeps trying until it suceeds. Does it eventually
suceed in your case?
I then tried to find out what contribution NetBIOS makes to the way a
computer works. What I discovered was that there are suspicions that the
service may be a left over from a past redundant arrangement. The
default Start Up type for the TCP/IP NetBIOS Helper Service is automatic
but there is a recommendation to set it to Manual.
http://www.theeldergeek.com/tcp_ip_netbios_helper.htm
My own computer is running without error with the service set to
Automatic. You could see if setting it to Manual has any adverse affect
and whether the errors cease.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
morog wrote:
> Gerry
> "problems that may occur when administrative shares are missing"-
> this can not be applied to my case.
> Following tutorials from http://support.microsoft.com/kb/842715, all
> results were O.K. after worked out what is suggested in a/m Article,
> meaning administrative shares not missing.
>
>
morog
Details
ID: 4311
Source: NetBT
Version: 5.2
Symbolic Name: EVENT_NBT_CREATE_DEVICE
Message: Initialization failed because the driver device could not be
created.
This is a transient condition that can be safely ignored.
NetBIOS over TCP/IP (NetBT) temporarily could not start but it continues
trying to start until it succeeds.
User Action
No user action is required.
--------------------------------------------------------------------------------
Related Knowledge Base articles
You can find additional information on this topic in the following
Microsoft Knowledge Base articles:
• Event ID 4311 appears in the system log when you reinstall a network
adapter in Windows XP
Describes a problem where Windows incorrectly generates Event ID 4311 when
you remove and then reinstall a Plug and Play network adapter.
My Start Up type for the TCP/IP NetBIOS Helper Service is set to automatic
.I'll try to change it to "Manual".
--
morog
Gerry
That is the version of the Error, which says it can be safely ignored.
Select Start, Control Panel, Administrative Tools, Services, right cick
on TCP/IP NetBIOS Helper and select Properties, General tab. Use the
scroll bar to change from Automatic to Manual, click on Apply and OK.
Exit and restart your computer and the change will have been made.
--
Hope this helps.
> . Event ID 4311 appears in the system log when you reinstall a network
> adapter in Windows XP
> Describes a problem where Windows incorrectly generates Event ID 4311
> when you remove and then reinstall a Plug and Play network adapter.
>
> My Start Up type for the TCP/IP NetBIOS Helper Service is set to
> automatic .I'll try to change it to "Manual".
>
>
>
>
>
>
morog
appear again at usual place.
--
morog
nass
Morog,
Can you check the dependencies on the TCP/IP NetBios Helper?, also what
under the Log On tab, is it running local or on a profile NT Auth?.
Dependencies :
AFD Networking Support Enviro
NetBIOS over TCP
morog
Dependencies :
+AFD Networking Support Enviro
+ NetBIOS over TCP
+TCP/IP Protocol Driver
Under Log On is running on : this account ..... NT AUTHORITY\Local Service
--
morog
nass
show.
I have only two dependencies on this service.
AFD and NetBIOS over TCP
morog
--
morog
nass
Hi Morog,
Read the info here then can you please send me your hijackthis log.
How to determine and to recover from Winsock2 corruption in Windows Server
2003, in Windows XP, and in Windows Vista
http://support.microsoft.com/kb/811259
TCP/IP and NBT configuration parameters for Windows XP
http://support.microsoft.com/kb/314053
Search for this file and see the properties for it, what the size the date
of the creation and the date modified..etc.
tcpip.sys
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
Can you please send me a copy at to_you_ros...@yahoo.co.uk , remove
the obvious to email me.
morog
After running the tool 811259, nothing better happend, reboot and Error
NetBT 4311 appear again.
Shall I rollback using the same tool , or keep new Registry setting ( if any
).
Make hijackthis log file, but please send me your e-mail addres, because I
didn't understand this what you wright.
Sorry
--
morog