Internet locked out a few times each day

I am encountering a problem with my main Win XP Pro system which occurs a few times each day.  Without any use, I will return to find Internet access dropped.

The only Event Viewer entries I  see are these:

The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM within the required timeout.

I also see a trio of meesages saying "The LiveUpdate service was successfully sent a start control." followed by "The LiveUpdate service entered the running state." followed by "The LiveUpdate service entered the stopped state.".   These repeat for an hour or more.  I suspect Norton so I'll dis

But I also wonder after reading messages if my WINS setup (which I do not specifically have) may play into this.

Please advise.



dettoreAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

carl_legereCommented:
during outages can you ping your DNS server?  are you on a domain?
can you ping your ISP's DNS servers during outages
can you ping other hosts (external )durning outage?
I suspect it is either DNS related, or spyware.
dettoreAuthor Commented:
Carl,

Thx for fast turnaround and support.  I am upping the points becuase this is now a business problem for me (MOnday and staff coming back to office).

Not on a domain ... setup as a workgroup with about 6 PCs (2 desktops, 4 laptops) all running Win XP Pro.
I have 2 DNS servers setup up in TCP/IP settings and expect they will respond to a ping but will try next time before I reboot.

The DCOM message just was logged again and I now am locked out from Internet access.  I do not know what server this message is referencing.  I am running an Apache server with mySQL and also an FTP service.  

I am not in office but can remotely connect to the server when this occurs so I have enough connection into the system to do a Windows task manager and select Restart.

PLEASE ADVISE FAST!  I am rebooting every few hours.

I have cleared all spyware tests and found nothing.  

dettoreAuthor Commented:
I am running a Sokkit stack including Apache and MySQL for past 6 weeks and usually can see that the web is down which alerts me to my PC not servicing.  The Apache keeps running but my Sokkit control panel which is not a service (runs under my login) fails and I think that is due to same problem that keeps IE from working.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

carl_legereCommented:
so no 'server' but a firewall/gateway box (linksys or similar) tell us about the DNS settings and be willing to change them to ISP provided .
dettoreAuthor Commented:
Carl,

I just added a third DNS server to my TCP/IP.  The other two are provided by my office complex.
I use a Linksys router.

I just read a lot about dcomcnfg.exe and ran it.  When I navigated down through Console Root > Component Services > Computer > My Computer > DCOM Config, it prompted me for about 6 CLSID that had the named value AppID but is not recorded under \\HKEY_CLASSES_Root\AppID.  It then asks "Do you want to record it?".  I clicked YES on each one and it then displayed a long icon list.

But when I run dcomcnfg again, same prompts.  I wonder if Norton is blocking the registry from updating?  I have NO idea what this DCOMregistering is all about.
carl_legereCommented:
DCom reg events are common, Distributed COM is programming stuff allowing software to access OS shared code and it usually does not indicate anthing wrong.  I see them on happy systems.
dettoreAuthor Commented:

Carl,

Are you saying that this error/warning is acceptable and not the cause of any problem?

Here are the two entries I got before the system locked up earlier this afternoon.

Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10010
Date:            4/3/2006
Time:            10:12:11 AM

Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM within the required timeout.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.\\

Then this showed up later:

Event Type:      Error
Event Source:      Windows Update Agent
Event Category:      Software Sync
Event ID:      16
Date:            4/3/2006
Time:            1:09:38 PM
User:            N/A
Computer:      SESOFFICE1
Description:
Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 69 6e 33 32 48 52 65   Win32HRe
0008: 73 75 6c 74 3d 30 78 30   sult=0x0
0010: 30 30 30 30 30 30 30 20   0000000
0018: 55 70 64 61 74 65 49 44   UpdateID
0020: 3d 7b 30 30 30 30 30 30   ={000000
0028: 30 30 2d 30 30 30 30 2d   00-0000-
0030: 30 30 30 30 2d 30 30 30   0000-000
0038: 30 2d 30 30 30 30 30 30   0-000000
0040: 30 30 30 30 30 30 7d 20   000000}
0048: 52 65 76 69 73 69 6f 6e   Revision
0050: 4e 75 6d 62 65 72 3d 30   Number=0
0058: 20 47 3d 35 2e 34 2e 33    G=5.4.3
0060: 37 39 30 2e 32 31 38 32   790.2182
0068: 20 4a 3d 38 38 39 20 4b    J=889 K
0070: 3d 50 68 6f 65 6e 69 78   =Phoenix
0078: 20 52 4f 4d 20 42 49 4f    ROM BIO
0080: 53 20 50 4c 55 53 20 56   S PLUS V
0088: 65 72 73 69 6f 6e 20 31   ersion 1
0090: 2e 31 30 20 41 30 33 20   .10 A03
0098: 4c 3d 32 30 30 34 2d 31   L=2004-1
00a0: 30 2d 31 31 54 30 30 3a   0-11T00:
00a8: 30 30 3a 30 30 20 00      00:00 .
carl_legereCommented:
it has been my experience that
1. there will be weird logging of dcom stuff
2. the people who fully understand dcom are the ones useing it for there benefit, the rest of us in the dark.
3. if you stop the services, you will find that everything stays running happily (unless a 3rd party application uses it, in which case it would already be unstable and spewing it's own entries, ) you will get more spew in the log.

however I've been wrong before.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.