Internet locked out a few times each day

Posted on 2006-04-03
Last Modified: 2008-02-01
I am encountering a problem with my main Win XP Pro system which occurs a few times each day.  Without any use, I will return to find Internet access dropped.

The only Event Viewer entries I  see are these:

The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM within the required timeout.

I also see a trio of meesages saying "The LiveUpdate service was successfully sent a start control." followed by "The LiveUpdate service entered the running state." followed by "The LiveUpdate service entered the stopped state.".   These repeat for an hour or more.  I suspect Norton so I'll dis

But I also wonder after reading messages if my WINS setup (which I do not specifically have) may play into this.

Please advise.

Question by:dettore
    LVL 18

    Expert Comment

    during outages can you ping your DNS server?  are you on a domain?
    can you ping your ISP's DNS servers during outages
    can you ping other hosts (external )durning outage?
    I suspect it is either DNS related, or spyware.

    Author Comment


    Thx for fast turnaround and support.  I am upping the points becuase this is now a business problem for me (MOnday and staff coming back to office).

    Not on a domain ... setup as a workgroup with about 6 PCs (2 desktops, 4 laptops) all running Win XP Pro.
    I have 2 DNS servers setup up in TCP/IP settings and expect they will respond to a ping but will try next time before I reboot.

    The DCOM message just was logged again and I now am locked out from Internet access.  I do not know what server this message is referencing.  I am running an Apache server with mySQL and also an FTP service.  

    I am not in office but can remotely connect to the server when this occurs so I have enough connection into the system to do a Windows task manager and select Restart.

    PLEASE ADVISE FAST!  I am rebooting every few hours.

    I have cleared all spyware tests and found nothing.  


    Author Comment

    I am running a Sokkit stack including Apache and MySQL for past 6 weeks and usually can see that the web is down which alerts me to my PC not servicing.  The Apache keeps running but my Sokkit control panel which is not a service (runs under my login) fails and I think that is due to same problem that keeps IE from working.
    LVL 18

    Expert Comment

    so no 'server' but a firewall/gateway box (linksys or similar) tell us about the DNS settings and be willing to change them to ISP provided .

    Author Comment


    I just added a third DNS server to my TCP/IP.  The other two are provided by my office complex.
    I use a Linksys router.

    I just read a lot about dcomcnfg.exe and ran it.  When I navigated down through Console Root > Component Services > Computer > My Computer > DCOM Config, it prompted me for about 6 CLSID that had the named value AppID but is not recorded under \\HKEY_CLASSES_Root\AppID.  It then asks "Do you want to record it?".  I clicked YES on each one and it then displayed a long icon list.

    But when I run dcomcnfg again, same prompts.  I wonder if Norton is blocking the registry from updating?  I have NO idea what this DCOMregistering is all about.
    LVL 18

    Expert Comment

    DCom reg events are common, Distributed COM is programming stuff allowing software to access OS shared code and it usually does not indicate anthing wrong.  I see them on happy systems.

    Author Comment



    Are you saying that this error/warning is acceptable and not the cause of any problem?

    Here are the two entries I got before the system locked up earlier this afternoon.

    Event Type:      Error
    Event Source:      DCOM
    Event Category:      None
    Event ID:      10010
    Date:            4/3/2006
    Time:            10:12:11 AM

    The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM within the required timeout.
    For more information, see Help and Support Center at\\

    Then this showed up later:

    Event Type:      Error
    Event Source:      Windows Update Agent
    Event Category:      Software Sync
    Event ID:      16
    Date:            4/3/2006
    Time:            1:09:38 PM
    User:            N/A
    Computer:      SESOFFICE1
    Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    For more information, see Help and Support Center at
    0000: 57 69 6e 33 32 48 52 65   Win32HRe
    0008: 73 75 6c 74 3d 30 78 30   sult=0x0
    0010: 30 30 30 30 30 30 30 20   0000000
    0018: 55 70 64 61 74 65 49 44   UpdateID
    0020: 3d 7b 30 30 30 30 30 30   ={000000
    0028: 30 30 2d 30 30 30 30 2d   00-0000-
    0030: 30 30 30 30 2d 30 30 30   0000-000
    0038: 30 2d 30 30 30 30 30 30   0-000000
    0040: 30 30 30 30 30 30 7d 20   000000}
    0048: 52 65 76 69 73 69 6f 6e   Revision
    0050: 4e 75 6d 62 65 72 3d 30   Number=0
    0058: 20 47 3d 35 2e 34 2e 33    G=5.4.3
    0060: 37 39 30 2e 32 31 38 32   790.2182
    0068: 20 4a 3d 38 38 39 20 4b    J=889 K
    0070: 3d 50 68 6f 65 6e 69 78   =Phoenix
    0078: 20 52 4f 4d 20 42 49 4f    ROM BIO
    0080: 53 20 50 4c 55 53 20 56   S PLUS V
    0088: 65 72 73 69 6f 6e 20 31   ersion 1
    0090: 2e 31 30 20 41 30 33 20   .10 A03
    0098: 4c 3d 32 30 30 34 2d 31   L=2004-1
    00a0: 30 2d 31 31 54 30 30 3a   0-11T00:
    00a8: 30 30 3a 30 30 20 00      00:00 .
    LVL 18

    Accepted Solution

    it has been my experience that
    1. there will be weird logging of dcom stuff
    2. the people who fully understand dcom are the ones useing it for there benefit, the rest of us in the dark.
    3. if you stop the services, you will find that everything stays running happily (unless a 3rd party application uses it, in which case it would already be unstable and spewing it's own entries, ) you will get more spew in the log.

    however I've been wrong before.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    Suggested Solutions

    Most of the time we are in fix when all of sudden our systems behave weirdly.  Such problems cost time and effort... so it's best to take some preventive actions so that we can avoid such issues or overcome such problems more easily. Preventive M…
    If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now