Jump to content

Strange problems with networking

golobar

By golobar
in Windows Vista

 Share

Recommended Posts

golobar

golobar

Posted
Posted (edited)

Hi!

I'm using Vista x64 sp1. Some days ago, i started it, and i didn't had network connection. In Network and sharing center i read this: "The dependency service or group failed to start."

And the starter service was the network location awareness service (error message when i try to manually start it in services:"Windows could not start the (this) service, blabla service specific error code: -1073741288"), so the most of the network services didn't start, because they depend from this service (some of them says they are depend on this service, some just say error code 5 Access denied).

So i looked in event viewer.

There was an error a day before this happened:

Log Name:	  System
Source:		Microsoft-Windows-Kernel-General
Date:		  2009.06.09. 18:17:56
Event ID:	  5
Task Category: None
Level:		 Error
Keywords:	  
User:		  SYSTEM
Computer:	  xxxxxxxx
Description:
{Registry Hive Recovered} Registry hive (file): '\SystemRoot\System32\Config\RegBack\SYSTEM' was corrupted and it has been recovered. Some data might have been lost.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
	<Provider Name="Microsoft-Windows-Kernel-General" Guid="{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}" />
	<EventID>5</EventID>
	<Version>0</Version>
	<Level>2</Level>
	<Task>0</Task>
	<Opcode>0</Opcode>
	<Keywords>0x8000000000000000</Keywords>
	<TimeCreated SystemTime="2009-06-09T16:17:56.722Z" />
	<EventRecordID>13128</EventRecordID>
	<Correlation />
	<Execution ProcessID="4" ThreadID="56" />
	<Channel>System</Channel>
	<Computer>xxxxxxxx</Computer>
	<Security UserID="S-1-5-18" />
  </System>
  <EventData>
	<Data Name="FinalStatus">0x8000002a</Data>
	<Data Name="ExtraStringLength">42</Data>
	<Data Name="ExtraString">\SystemRoot\System32\Config\RegBack\SYSTEM</Data>
  </EventData>
</Event>

The strange, is just the registry get corrupted? Nothing else? Because there wasn't more errors (i did't noticed this error at that time when it happened, there wasn't power failure, freeze, bsod or any exeptional happening). BTW the HDD has no errors, smart says everything is ok (100%), no viruses or spywares, and i didn't do anything with system, i just listened for music, play a game, and surf on web.

And here are the network problems after this:

Log Name:	  System
Source:		Microsoft-Windows-Dhcp-Client
Date:		  2009.06.10. 17:21:26
Event ID:	  1004
Task Category: None
Level:		 Warning
Keywords:	  Classic
User:		  N/A
Computer:	  xxxxxxxxx
Description:
The DHCP Client service is shutting down. The following error occurred : 
Access is denied.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
	<Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" EventSourceName="Dhcp" />
	<EventID Qualifiers="0">1004</EventID>
	<Version>0</Version>
	<Level>3</Level>
	<Task>0</Task>
	<Opcode>0</Opcode>
	<Keywords>0x80000000000000</Keywords>
	<TimeCreated SystemTime="2009-06-10T15:21:26.000Z" />
	<EventRecordID>13142</EventRecordID>
	<Correlation />
	<Execution ProcessID="0" ThreadID="0" />
	<Channel>System</Channel>
	<Computer>xxxxxxxxx</Computer>
	<Security />
  </System>
  <EventData>
	<Data>%%5</Data>
  </EventData>
</Event>

^^

(That's why i can only connect to network, with fixed ip)

Log Name:	  System
Source:		Microsoft-Windows-HttpEvent
Date:		  2009.06.10. 17:21:26
Event ID:	  15016
Task Category: None
Level:		 Error
Keywords:	  Classic
User:		  N/A
Computer:	  xxxxxxxx
Description:
Unable to initialize the security package Kerberos for server side authentication.  The data field contains the error number.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
	<Provider Name="Microsoft-Windows-HttpEvent" Guid="{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}" EventSourceName="HTTP" />
	<EventID Qualifiers="49152">15016</EventID>
	<Version>0</Version>
	<Level>2</Level>
	<Task>0</Task>
	<Opcode>0</Opcode>
	<Keywords>0x80000000000000</Keywords>
	<TimeCreated SystemTime="2009-06-10T15:21:26.467Z" />
	<EventRecordID>13153</EventRecordID>
	<Correlation />
	<Execution ProcessID="4" ThreadID="52" />
	<Channel>System</Channel>
	<Computer>xxxxxxxx</Computer>
	<Security />
  </System>
  <EventData>
	<Data Name="DeviceObject">\Device\Http\ReqQueue</Data>
	<Data Name="SecurityPackage">Kerberos</Data>
	<Binary>000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980</Binary>
  </EventData>
</Event>

Log Name:	  System
Source:		Microsoft-Windows-Time-Service
Date:		  2009.06.10. 17:22:21
Event ID:	  54
Task Category: None
Level:		 Error
Keywords:	  Classic
User:		  N/A
Computer:	  xxxxxxxx
Description:
The time service encountered an error while refreshing its configuration in the registry and cannot start. The error was: Access is denied. (0x80070005)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
	<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" EventSourceName="W32Time" />
	<EventID Qualifiers="49754">54</EventID>
	<Version>0</Version>
	<Level>2</Level>
	<Task>0</Task>
	<Opcode>0</Opcode>
	<Keywords>0x80000000000000</Keywords>
	<TimeCreated SystemTime="2009-06-10T15:22:21.000Z" />
	<EventRecordID>13154</EventRecordID>
	<Correlation />
	<Execution ProcessID="0" ThreadID="0" />
	<Channel>System</Channel>
	<Computer>xxxxxxxxx</Computer>
	<Security />
  </System>
  <EventData Name="MSG_CONFIG_REFRESH_FAILED">
	<Data Name="ErrorMessage">Access is denied. (0x80070005)</Data>
  </EventData>
</Event>

Log Name:	  System
Source:		Service Control Manager
Date:		  2009.06.10. 17:22:21
Event ID:	  7001
Task Category: None
Level:		 Error
Keywords:	  Classic
User:		  N/A
Computer:	  xxxxxxxx
Description:
The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
The service has not been started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
	<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
	<EventID Qualifiers="49152">7001</EventID>
	<Version>0</Version>
	<Level>2</Level>
	<Task>0</Task>
	<Opcode>0</Opcode>
	<Keywords>0x80000000000000</Keywords>
	<TimeCreated SystemTime="2009-06-10T15:22:21.000Z" />
	<EventRecordID>13206</EventRecordID>
	<Correlation />
	<Execution ProcessID="0" ThreadID="0" />
	<Channel>System</Channel>
	<Computer>xxxxxxxxx</Computer>
	<Security />
  </System>
  <EventData>
	<Data Name="param1">Network List Service</Data>
	<Data Name="param2">Network Location Awareness</Data>
	<Data Name="param3">%%1062</Data>
  </EventData>
</Event>

Log Name:	  System
Source:		Service Control Manager
Date:		  2009.06.10. 17:22:22
Event ID:	  7024
Task Category: None
Level:		 Error
Keywords:	  Classic
User:		  N/A
Computer:	  xxxxxdxx
Description:
The Network Location Awareness service terminated with service-specific error 3221226008 (0xC0000218).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
	<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
	<EventID Qualifiers="49152">7024</EventID>
	<Version>0</Version>
	<Level>2</Level>
	<Task>0</Task>
	<Opcode>0</Opcode>
	<Keywords>0x80000000000000</Keywords>
	<TimeCreated SystemTime="2009-06-10T15:22:22.000Z" />
	<EventRecordID>13218</EventRecordID>
	<Correlation />
	<Execution ProcessID="0" ThreadID="0" />
	<Channel>System</Channel>
	<Computer>xxxxxxxx</Computer>
	<Security />
  </System>
  <EventData>
	<Data Name="param1">Network Location Awareness</Data>
	<Data Name="param2">3221226008 (0xC0000218)</Data>
  </EventData>
</Event>

And a lot more of these access denied errors from various services.

The major problem for me, is that my router don't forward my ports, if my machine isn't in dhcp client list (and because the dhcp client service also can't start, i use "forced" fix ip. Or the win firewall (what also depends from that network awereness), still working without running firewall service, i don't know.

The other things (no time syncronization, no network sharing center, etc) are minor problems.

How can i fix this? And why it happened?

Edited by golobar

Kotuku

Kotuku

Posted
Posted

Can you do a System Restore to the day before the errors happened?

Can you do a Repair from the OS Disk?

WHat happens if you run

sfc /scannow

You can read up on that here

http://support.microsoft.com/kb/929833

Is the Modem working properly with other computers on the Network? In other words not a Modem at fault as well.

Have you run CHKDSK /R/F

cluberti

cluberti

Posted
Posted

Well, considering the error code it gave you was the below, I'd say yes, it's a registry problem (as to what, hard to say - probably need to run a process monitor log logging only registry accesses when attempting to start the service manually to see what's actually happening). Here's what the error means:

# for decimal -1073741288 / hex 0xc0000218
  STATUS_CANNOT_LOAD_REGISTRY_FILE							   ntstatus.h
# {Registry File Failure}
# The registry cannot load the hive (file):
# %hs
# or its log or alternate.
# It is corrupt, absent, or not writable.

golobar

golobar

Posted
  • Author
Posted

I can't do system restore, cuz some people said, win is sooo stable, and can't be problems with it :D BTW when i tried to fix a problem with sys restore, starting with xp, it never was effective in solving problem, so i disable it since years.

sfc scan errors:

2009-06-12 20:52:50, Error				 CSI	0000010e (F) STATUS_OBJECT_NAME_NOT_FOUND #2323127# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowSharingViolation), handle = {provider=NULL, handle=0}, da = (STANDARD_RIGHTS_READ|FILE_READ_ATTRIBUTES), oa = @0x1bed0a0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[124]"\??\C:\Windows\WinSxS\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.6001.18000_ar-sa_c225f582a3cec90c"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0x1bed080, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = 0x00004000, eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000034]
2009-06-12 20:52:50, Error				 CSI	0000010f@2009/6/12:18:52:50.766 (F) d:\rtm\base\wcp\sil\merged\ntu\ntsystem.cpp(1817): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2009-06-12 20:52:50, Error				 CSI	00000110 (F) STATUS_OBJECT_NAME_NOT_FOUND #2323126# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingDirectory(...)[gle=0xd0000034]
2009-06-12 20:52:50, Error				 CSI	00000111 (F) STATUS_OBJECT_NAME_NOT_FOUND #2323125# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingDirectory(flags = 0, da = (SYNCHRONIZE), oa = @0x1bed988->SIL_OBJECT_ATTRIBUTES {s:40; on:"amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_5.82.6001.18000_ar-sa_c225f582a3cec90c"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT|FILE_OPEN_FOR_BACKUP_INTENT), dir = NULL, disp = Invalid)
[gle=0xd0000034]

I didn't try repair from disk, but when i tried in the past it worked not too good :D but i'll try it.

Forget about modem, or network, the problem is with windows, and only with it. BTW everything with network is ok.

I'll run chkdsk on next restart, but hdd errors not happen without reason, and as i said there wasn't hard errors on hdd, as the s.m.a.r.t says.

Kotuku

Kotuku

Posted
Posted (edited)

Oh you can get CHKDSK errors without SMART showing them. I would still run it, as that may have been the cause of the original corruption

If there are errors found via SFC that didn't get fixed, it is a little more complex.

http://social.technet.microsoft.com/Forums...15-7eeb73d43165

There is an explanation here on how to run the repair install with the Vista Disk.

Good luck!

As to the Hive problem, you maybe able to use this trick

http://forums.techarena.in/windows-vista-p...nce/1145863.htm

And I hate to ask, but I assume it is a Legit copy of Vista, as I see some threads where pirated copies have the hive corrupted so they can't run <smile>

Edited by Kotuku
golobar

golobar

Posted
  • Author
Posted

As i saw chkdsk did't found any errors (btw where can i re-open the result of the test?)

I read that trick, but there arent registry copies for me, and even the originals not there where it should.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...