:
Hi Olen,
Please make sure the machine malware and virus free, also you can run the
system file checker (sfc) to repair any corrupt/damaged system files/folders,
but I'm sure you will get a grasp of the problem after you read carefully the
info o the links below.
Good luck.
Please find My reply under each error message:
Application
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 1/2/2008
Time: 9:47:25 PM
User: N/A
Computer: HOME-BASE
Description:
Failed auto update retrieval of third-party root list sequence number from:
<
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network
connection does not exist.
Event ID 8 is logged in the Application log
http://support.microsoft.com/kb/317541
==========================================================
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3011
Date: 1/2/2008
Time: 3:56:36 PM
User: N/A
Computer: HOME-BASE
Description:
Unloading the performance counter strings for service WmiApRpl (WmiApRpl)
failed. The Error code is the first DWORD in Data section
http://www.microsoft.com/communitie...5dc71973d43c&lang=en&cr=US&sloc=en-us&m=1&p=1
SCOM 2007 - Error's installing OpsMgr 2007 Agent on remote DC
http://blogs.technet.com/edwalt/archive/2007/09/11/1941207.aspx
WMI Performance Adapter
http://www.blackviper.com/WinXP/Services/WMI_Performance_Adapter.htm
WMI Windows Management Instrumentation
http://www.microsoft.com/whdc/system/pnppwr/wmi/default.mspx
http://smallvoid.com/article/winnt-services-winmgmt.html
You may be need the latest windows installer:
http://www.microsoft.com/downloads/...FC-5F56-4A38-B838-DE776FD4138C&displaylang=en
How to resolve Common "Windows Installer" Problems
http://support.microsoft.com/kb/555175
You may want to Repair the WMI as follow:
MS:: <Quote>
Stopping and Starting the WMI Service
If you are experiencing problems with the WMI service you might need to
manually stop and restart the service. Before doing so you should enable
WMI’s verbose logging option. This provides additional information in the WMI
error logs that might be useful in diagnosing the problem. To enable verbose
logging using the WMI control, do the following:
1.Open the Computer Management MMC snap-in and expand Services and
Applications.
2.Right-click WMI Control and click Properties.
3.In the WMI Control Properties dialog box, on the Logging tab, select
Verbose (includes extra information for Microsoft troubleshooting) and then
click OK.
Alternatively, you can modify the following registry values:
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging to 2.
•Set HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging File Max Size
to 4000000.
After enabling verbose logging try stopping the WMI service by typing the
following
Open a run command prompt:
net stop winmgmt
If the net stop command fails you can force the service to stop by typing
this:
winmgmt /kill
Important. If you are running Windows XP or Windows Server 2003 the WMI
service runs inside a process named Svchost; this process contains other
services as well as WMI. Because of that, you should not try to stop
Svchost;
if you succeed, you’ll stop all the other services running in that process
as
well. Instead, use net stop winmgmt or winmgmt /kill in order to stop just
the WMI service.
You can then restart the service by typing the following command:
net start winmgmt
If the service does not restart try rebooting the computer to see if that
corrects the problem.
If it does not, then continue reading.
MS:: </Quote>
Open a run command and try to re-register these DLLs:
regsvr32 hnetcfg.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
regsvr32 atl.dll
regsvr32 netshell.dll
"WMI Diagnosis Utility"
http://www.microsoft.com/technet/scriptcenter/topics/help/wmidiag.mspx
Systems that have changed the default Access Control List permissions on the
%windir%\registration directory may experience various problems after you
install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC
http://support.microsoft.com/kb/909444
Also you can download the DiagWMI from here and some good solutions on the
page:
http://windowsxp.mvps.org/repairwmi.htm.
<Ramesh Quote>:
* Insert your Windows XP CD into the drive.
Important note: If you've installed Service Pack 1 or 2, you need to
insert your Windows XP CD (with Service Pack integration, called as the
Slipstreamed Windows XP CD). If you don't have one, you may point to the
%Windir%\ServicePackFiles\i386 folder for the updated DLLs required during
WMI repair. Or, you may create a Slipstreamed XP CD, and insert it when
prompted.
* Click Start, Run and type the following command, and press enter:
rundll32.exe setupapi,InstallHinfSection WBEM 132 %windir%\inf\wbemoc.inf
* Repair process should take few minutes to complete.
Then, restart Windows for the changes to take effect
</End of Quote>
==========================================================
Event Type: Error
Event Source: LoadPerf
Event Category: None
Event ID: 3012
Date: 1/2/2008
Time: 3:56:36 PM
User: N/A
Computer: HOME-BASE
Description:
The performance strings in the Performance registry value is corrupted when
process Performance extension counter provider.
BaseIndex value from Performance registry is the first DWORD in Data
section, LastCounter value is the second DWORD in Data
section, and LastHelp value is the third DWORD in Data section.
How to manually rebuild Performance Counter Library values
http://support.microsoft.com/kb/300956
======================================================
Event Type: Information
Event Source: SecurityCenter
Event Category: None
Event ID: 1800
Date: 1/2/2008
Time: 3:52:35 PM
User: N/A
Computer: HOME-BASE
Description:
The Windows Security Center Service has started.
If you have an anti-virus with firewall turn the WIn firewall OFF.
Windows Security Center – Managing the State of Security
http://www.microsoft.com/windowsxp/sp2/wscoverview.mspx
Note: what your Anti-virus and anti-malware arrangement?.
If you have an AV with Firewall you don't want Windows Firewall ON at all.
==========================================================
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 12/30/2007
Time: 10:55:27 AM
User: N/A
Computer: HOME-BASE
Description:
Faulting application ipe.exe, version 2.0.0.0, faulting module treectl.dll,
version 2.0.0.0, fault address 0x00002da9.
Do you have Scanner installed or you Ulead Photoimpact?, try to uninstall
the drivers/software for it then reinstall after solving the updates issue.
Located here:
c:\program files\ulead systems\ulead photoimpact 11\treectl.dll
http://phpbb.ulead.com.tw/EN/viewtopic.php?p=95163&sid=d9f961a3900d484985f7c210f5bd72bf
==========================================================
Security
Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 1/2/2008
Time: 9:58:16 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: HOME-BASE
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a
potential security hazard to the machine since some of the network
interfaces may not get the protection as desired by the
applied IPSec filters. Please run IPSec monitor snap-in to further diagnose
the problem.
Is this XP Home or Pro, if it is XP Home I will not be worried about the
error as it is a Network minor error and can be corrected
by the Network Card or the two network establishing communications.
IPSec Service" running and set to Automatic
Make sure the Power savings for the NIC is unchecked>
Internet Protocol security (IPSec) overview
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ipsec.mspx
IPSec Policy Agent service
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_ipsec_und13.mspx
==========================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 1/2/2008
Time: 3:52:35 PM
User: NT AUTHORITY\SYSTEM
Computer: HOME-BASE
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Olen Cross
Domain: HOME-BASE
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: HOME-BASE
So this machine in a Domain..hmmm!, you need to see the Audit security are
all set up correctly, it looks like all of it concern about the Security
settings, either
security set up or Protections software and Root Certificates!.
Security Event for Associating Service Account Logon Events
http://support.microsoft.com/kb/274176
Event ID: 529
http://www.chicagotech.net/troubleshooting/event529a.htm
http://publib.boulder.ibm.com/infoc...opic=/com.ibm.itcim.doc/tcim80_install95.html
==========================================================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 1/2/2008
Time: 3:52:35 PM
User: NT AUTHORITY\SYSTEM
Computer: HOME-BASE
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Olen Cross
Source Workstation: HOME-BASE
Error Code: 0xC000006A
The user Entered the Password incorrectly, so the Audit issued a failure
event log under security in the Event Log.
http://www.eventid.net/display.asp?eventid=680&eventno=2267&source=Security&phase=1
Monitoring Important Security Events
http://www.windowsitpro.com/Article/ArticleID/40046/40046.html
http://thelazyadmin.com/blogs/thelazyadmin/archive/2005/07/27/Troubleshooting-Event-ID-680.aspx
===================================================================================================
System
Event Type: Error
Event Source: incdrm
Event Category: None
Event ID: 7
Date: 1/2/2008
Time: 5:12:38 PM
User: N/A
Computer: HOME-BASE
Description:
The description for Event ID ( 7 ) in Source ( incdrm ) cannot be found. The
local computer may not have the necessary
registry information or message DLL files to display messages from a remote
computer. You may be able to use the /AUXSOURCE=
flag to retrieve this description; see Help and Support for details. The
following information is part of the event:
\Device\MrwR00000000.
The description for Event ID ( 7 ) in Source ( incdrm ) cannot be found.
http://www.eventid.net/display.asp?eventid=7&eventno=7153&source=incdrm&phase=1
=============================================================================================
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 1/2/2008
Time: 3:52:35 PM
User: N/A
Computer: HOME-BASE
Description:
The Icatch(V) Video Camera Device service failed to start due to the
following error:
The system cannot find the file specified.
Image capture program for modified 1004x camera
http://www.geocities.com/jgroveuk/iCatch.html
=======================================================================================================
Event Type: Error
Event Source: Windows Update Agent
Event Category: Software Sync
Event ID: 16
Date: 1/2/2008
Time: 12:22:53 AM
User: N/A
Computer: HOME-BASE
Description:
Unable to Connect: Windows is unable to connect to the automatic updates
service and therefore cannot download and install
updates according to the set schedule. Windows will continue to try to
establish a connection.
http://www.updatexp.com/0x80072efd.html
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2010809&SiteID=17
http://support.microsoft.com/kb/836941
HTH.
nass
