event viewer don't work fine

[Guest]

I've some Windows 2000 Pro client SP3 in my domain that from about a week are showing this problem
when i attempt to view property page on every entry in Application, Security or System it's impossible to do this
At the same time in system properties continuosly is logged an error " DCOM ..... 10006"
I've scanned the client machine with Symantec Antivirus Client (with last updated virus definitio at 09 May 2004) and no virus are found
Furthermore I've installed all MS Security bulletin Updates (using Windows Update feature) included MS04-011 (aganist Sasser Worm)
In addition on one of this client machine is installed Outlook Express and in the last two days there is a problem to retrive mails from pop3 server
There is anyone that can help me
Thanks you.
Cosimo MERCURO

 

[Jason Hall [MSFT]]

--------------------

From: =?Utf-8?B?Y29zaW1v?= <[email protected]>
Subject: event viewer don't work fine
Date: Wed, 12 May 2004 06:51:02 -0700

I've some Windows 2000 Pro client SP3 in my domain that from about a week

are showing this problem:
when i attempt to view property page on every entry in Application,
Security or System it's impossible to do this.
At the same time in system properties continuosly is logged an error " DCOM
..... 10006".
I've scanned the client machine with Symantec Antivirus Client (with last
updated virus definitio at 09 May 2004) and no virus are found!
Furthermore I've installed all MS Security bulletin Updates (using Windows
Update feature) included MS04-011 (aganist Sasser Worm).
In addition on one of this client machine is installed Outlook Express and
in the last two days there is a problem to retrive mails from pop3 server.
There is anyone that can help me?
Thanks you.
Cosimo MERCURO---------------------

This is how you can register a class to resolve the DCOM error:
1) From the description field in Event ID 10006, look for the GUID of the
class
responsible for the error and make a note of it or copy it (Ctrl+C) to the
clipboard.

2) Launch REGEDIT.EXE and search the HKEY_CLASSES_ROOT\CLSID registry
container for
the GUID found in step one above.

3) Determine the dll responsible for registering this class object by
double-clicking the GUID, and then clicking once on the InprocServer32
folder to
reveal the dll name. The dll name can be found on the right hand pane.

4) Using the following command, re-register the class object:
REGSVR32.EXE <dll_name.dll>

If corrupt event logs are the problem, check out the following articles:
Q829246: Event logs are corrupted
Q172156: How to Delete Corrupt Event Viewer Log Files

If non of this works, then it would help if you described exACTly what
happens when attempting to view the log properties. Has this ever worked?
When did you first notice it? Does it happen in Safe Mode?

--
~~ JASON HALL ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.