Terminal Server issue

G

Guest

I would like to have an opinion on this extract from the tsoc.log file.

*******Initializing Message Log:tsoc.dll 06/30/06 03:26:38
*******Version:Major=5, Minor=1, Build=2600, PlatForm=2, CSDVer=Service Pack
2, Free

hydraoc.cpp(188)Entering OC_PREINITIALIZE
hydraoc.cpp(189)Component=terminalserver, SubComponent=???????
hydraoc.cpp(297)OC_PREINITIALIZE Done. Returning 1


hydraoc.cpp(188)Entering OC_INIT_COMPONENT
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
state.cpp(1006)Setup Parameters ****************************
state.cpp(1007)We are running on Wks
state.cpp(1008)Is this adv server No
state.cpp(1009)Is this Personal (Home Edition) Yes
state.cpp(1010)Is this SBS server No
state.cpp(1011)IsStandAloneSetup = Yes
state.cpp(1012)IsFreshInstall = No
state.cpp(1013)IsTSFreshInstall = No
state.cpp(1014)IsUnattendSetup = No
state.cpp(1015)IsUpgradeFromTS40 = No
state.cpp(1016)IsUpgradeFromNT50 = No
state.cpp(1017)IsUpgradeFromNT51 = No
state.cpp(1018)IsUnattended = No
state.cpp(1020)Original State ******************************
state.cpp(1021)WasTSInstalled = Yes
state.cpp(1022)WasTSEnabled = Yes
state.cpp(1023)OriginalPermMode = WIN2K
state.cpp(1040)Original TS Mode = Personal TS
state.cpp(1050)Current State ******************************
state.cpp(1065)New TS Mode = Personal TS
state.cpp(1075)New Permissions Mode = PERM_WIN2K
state.cpp(1084)New Connections Allowed = False
hydraoc.cpp(297)OC_INIT_COMPONENT Done. Returning 0


hydraoc.cpp(188)Entering OC_EXTRA_ROUTINES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_EXTRA_ROUTINES Done. Returning 0


hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(704)Query State Asked For terminalserver, Original. Returning
SubcompOff
hydraoc.cpp(297)OC_QUERY_STATE Done. Returning 2


hydraoc.cpp(188)Entering OC_CALC_DISK_SPACE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
subcomp.cpp(153)In OCMSubComp::OnCalcDiskSpace for TerminalServices
hydraoc.cpp(297)OC_CALC_DISK_SPACE Done. Returning 0


hydraoc.cpp(188)Entering OC_CLEANUP
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(263)Error:StandAlone:TSOC Did not get OC_COMPLETE_INSTALLATION.
hydraoc.cpp(297)OC_CLEANUP Done. Returning 0


logmsg.cpp(42)********Terminating Log

I was advised on the Microsoft WGA forum to post it on the Microsoft Support
forum and thought this forum was the best suited as some posts I read on the
net hinted that this might be due to a trojan, although I am not sure about
that.

Any assistance on this is appreciated. Thanks in advance.
 
W

Wesley Vogel

What is the problem?

Do you have the Terminal Services service?

Open a command prompt...
Start | Run | Type: cmd | Click OK |
Type:

sc query termservice

Hit your Enter key.

You can also look in Services to see if the Terminal Services service is
listed, running and what it's set to; Disabled, Automatic or Manual.

Start | Run | Type: services.msc | Click OK |

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
G

Guest

I have Windows XP Home and I remember reading somewhere that terminal
services are available only in Windows XP Pro and not Home. In addition, I
also happened to come across postings from 2005 indicating that this might be
a terminal services trojan. A Microsoft representative, Phil Liu, on the WGA
forum indicated that -
"That seems to be something related with terminal services and may actually
be a bad thing (doing a quick internet search on the term "hydraoc.cpp") -
but definitely out of the scope of WGA. I would recommend looking deeper into
it with www.support.microsoft.com (it seems to be hardware related - memory,
obviously :). )"
I need to know whether this is normal, or is something going wrong and needs
fixing. I hope this makes it a lot clearer.
 
W

Wesley Vogel

Terminal Services Service exists on both XP Home and Pro.

Terminal Services Service Appears in All Versions of Windows XP
http://support.microsoft.com/?kbid=281311

C:\WINDOWS\tsoc.log is the Terminal Services Optional Component log.
Created by tsoc.dll, Terminal Server Optional Component Setup.

I do not know if you have a trojan or not.

I have absolutely no idea what WGA has to do with any of this.

I just opened Add/Remove Windows Components from Add or Remove Programs in
the Control Panel to create the C:\WINDOWS\tsoc.log. Here it is. You can
compare it with yours if you like.

I have XP Pro, hence the: state.cpp(1009)Is this Personal (Home Edition) No
line.

*******Initializing Message Log:tsoc.dll 07/01/06 12:58:17
*******Version:Major=5, Minor=1, Build=2600, PlatForm=2, CSDVer=Service Pack
1, Free

hydraoc.cpp(188)Entering OC_PREINITIALIZE
hydraoc.cpp(189)Component=terminalserver, SubComponent=?????????
hydraoc.cpp(297)OC_PREINITIALIZE Done. Returning 1


hydraoc.cpp(188)Entering OC_INIT_COMPONENT
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
state.cpp(1006)Setup Parameters ****************************
state.cpp(1007)We are running on Wks
state.cpp(1008)Is this adv server No
state.cpp(1009)Is this Personal (Home Edition) No
state.cpp(1010)Is this SBS server No
state.cpp(1011)IsStandAloneSetup = Yes
state.cpp(1012)IsFreshInstall = No
state.cpp(1013)IsTSFreshInstall = No
state.cpp(1014)IsUnattendSetup = No
state.cpp(1015)IsUpgradeFromTS40 = No
state.cpp(1016)IsUpgradeFromNT50 = No
state.cpp(1017)IsUpgradeFromNT51 = No
state.cpp(1018)IsUnattended = No
state.cpp(1020)Original State ******************************
state.cpp(1021)WasTSInstalled = Yes
state.cpp(1022)WasTSEnabled = Yes
state.cpp(1023)OriginalPermMode = WIN2K
state.cpp(1040)Original TS Mode = Personal TS
state.cpp(1050)Current State ******************************
state.cpp(1065)New TS Mode = Personal TS
state.cpp(1075)New Permissions Mode = PERM_WIN2K
state.cpp(1084)New Connections Allowed = False
hydraoc.cpp(297)OC_INIT_COMPONENT Done. Returning 0


hydraoc.cpp(188)Entering OC_EXTRA_ROUTINES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_EXTRA_ROUTINES Done. Returning 0


hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_QUERY_STATE Done. Returning 0


hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(704)Query State Asked For terminalserver, Original. Returning
SubcompOff
hydraoc.cpp(297)OC_QUERY_STATE Done. Returning 2


hydraoc.cpp(188)Entering OC_CALC_DISK_SPACE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(1029)Query Disk Space return: 1
hydraoc.cpp(196)OC_CALC_DISK_SPACE Done. Returning 0


hydraoc.cpp(188)Entering OC_CALC_DISK_SPACE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
subcomp.cpp(153)In OCMSubComp::OnCalcDiskSpace for TerminalServices
hydraoc.cpp(297)OC_CALC_DISK_SPACE Done. Returning 0


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 4


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0


hydraoc.cpp(188)Entering OC_REQUEST_PAGES
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_REQUEST_PAGES Done. Returning 0


hydraoc.cpp(188)Entering OC_WIZARD_CREATED
hydraoc.cpp(189)Component=terminalserver, SubComponent=(null)
hydraoc.cpp(297)OC_WIZARD_CREATED Done. Returning 0


hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=tswebclient
hydraoc.cpp(957)Entering WebClient Setup
hydraoc.cpp(196)OC_QUERY_STATE Done. Returning 0


hydraoc.cpp(188)Entering OC_QUERY_STATE
hydraoc.cpp(189)Component=terminalserver, SubComponent=terminalserver
hydraoc.cpp(704)Query State Asked For terminalserver, Current. Returning
SubcompUseOcManagerDefault
hydraoc.cpp(297)OC_QUERY_STATE Done. Returning 0

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
G

Guest

Wesley,
Thanks for clearing it up. I had a WGA installation problem yesterday and in
the process of sorting that out, came across this log file. I was concerned
about the error message that appears towards the end and as it appeared at
the same time as I was correcting that problem, I asked the Microsoft
representative handling that issue and was advised to post it here as he
thought it might be a serious issue. I ran an internet search on the file
hydraoc.cpp and the postings that came up were mainly about a terminal
services trojan. A search on Microsoft for the file did not throw up any
result, as a consequence of which, I was worried about what it might mean. I
have had a lot of problems with my PC of late, including a Stop: 0x0A error
and a found new hardware wizard that keeps popping up every time I boot up,
trying to install drivers for a non-existent printer and which I haven't been
able to get rid of. I was frankly worried about the reliability of the PC and
decided to post this query.

Thanks once again for clearing it up.

Badrinath
 
W

Wesley Vogel

Keep having fun. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

HELP! Terminal Service Trojan?? 34
questionable files - imsins.log, imsins.bak, iis 2
What are these .log files in my Windows folder? (Win XP Pro SP 3) 14
YACE: Yet Another COM+ Error 1
8004155 error in COM+ configuration 1
The COM+ event classes could not be registered 0
was I hacked? 8
FWT Newsletter - Weekly - October 25, 2004 8

Top