Tim
It would help if you posted complete copies of the Error reports.
You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer.
A tip for posting copies of Error Reports! Right click on the Report in
the list and select Properties. In the window, which appears are three
buttons towards the top right of the window. The top one has an arrow
up, underneath is an arrow down and third is a button resembling two
pages. Click the button and close Event Viewer. It is not obvious but
this action places a copy of the report in your Clipboard. Now start
your message (email) and do a paste into the body of the message. Make
sure this is the first paste after exiting from Event Viewer.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
TimButton wrote:
> Thanks for the swift reply.
>
> Believe it or not, still same problem. Repair install ran right way
> through and I had to reactivate at end. Wouldn't get IP address so
> ran "winsh int ip reset" then "winsh winsock reset" & rebooted.
>
> Still not getting an IP address from DHCP server: first of a few
> messages is "Event id 1004. The DHCP Client service is shutting down.
> The following error occurred: the system cannot find the file
> specified."
>
> Wish I knew what file it was- have copied over ipnat.sys though was
> already right time-stamp & size. Still nfg.
>
> Anyone know how to get "MSAFD TCPIP" onto a system once it's
> disappeared?
TCPIP missing!
Moderators: DllAdmin, DLLADMIN ONLY
-
braindamage73
- Posts: 1
- Joined: 17 May 2009, 23:00
Re: TCPIP missing!
It might be a problem with WinSoc:
1. Go to microsoft.com and look for Microsoft Knowledge Database
article 91509.
2. Go to Watchtower site and search for "Corrupted/Damaged TCP/IP
stack.
Note: Internal TCP/IP fixes in XP are often hidden in the GUI
(Graphical User Interface) and are therefore hard to get at. And when
you do get to them the fixes don't often work, so I don't use them,
except for a very limited number of things- and they have to be 'bad'
things.
Before you tied anything did you runa good registry cleaner like System
Mechanic?
I'd get rid of SP3 for now. Its a business download and lots of people
have problems with it. Learn more about SP3 with a Google search.
Then there's tech $upport.
--
braindamage73
------------------------------------------------------------------------
braindamage73's Profile: http://forums.techarena.in/members/99153.htm
View this thread: http://forums.techarena.in/windows-xp-s ... 181603.htm
http://forums.techarena.in
1. Go to microsoft.com and look for Microsoft Knowledge Database
article 91509.
2. Go to Watchtower site and search for "Corrupted/Damaged TCP/IP
stack.
Note: Internal TCP/IP fixes in XP are often hidden in the GUI
(Graphical User Interface) and are therefore hard to get at. And when
you do get to them the fixes don't often work, so I don't use them,
except for a very limited number of things- and they have to be 'bad'
things.
Before you tied anything did you runa good registry cleaner like System
Mechanic?
I'd get rid of SP3 for now. Its a business download and lots of people
have problems with it. Learn more about SP3 with a Google search.
Then there's tech $upport.
--
braindamage73
------------------------------------------------------------------------
braindamage73's Profile: http://forums.techarena.in/members/99153.htm
View this thread: http://forums.techarena.in/windows-xp-s ... 181603.htm
http://forums.techarena.in
-
patrick keenan
- Posts: 23
- Joined: 05 Mar 2009, 00:00
Re: TCPIP missing!
"TimButton" <TimButton.3sc6bb@DoNotSpam.com> wrote in message
news:TimButton.3sc6bb@DoNotSpam.com...>
> Win XP Home SP3
>
> Had on it "VirusRemover 2009" which is malware. It had removed a load
> of Services. Believe now completely gone: registry entries and program
> groups deleted by putting drive in another machine and virus checking
> too. Reapplied SP3, "sff / scannow" completes successfully, Registry
> Mechanic fixed a load of errors too.
>
> When run "winmsd" under Components/ Network/ Protocol there are no
> "MSAFD TCPIP" entries, just load of "MSAFD NetBIOS" preceded by 2 "RSVP
> TCPIP" entries . on other machines I have first in list 2 "MSAFD TCPIP"
> entries . getting these 2 back would seem to be the solution I'm looking
> for.
>
> Have run "Netsh in tip reset" & "Netsh winsock reset"
>
> Also, under Device Manager, Show hidden devices, Non PnP drivers, the
> "TCP/IP Protocol Driver" had red "X" through so I uninstalled,
> restarted, didn't show to start with but now back.
>
> As if TCP/IP not installed.
> Have copied, individually & manually, load of dll files to system32
> folder, and load of sys files to drivers folder.
>
> If anyone knows how to get back the 2 "MSAFD TCPIP" entries please
> enlighten me!
>
> Thanks in advance!
>
>
> --
> TimButton
You may find it faster and more reliable to back up your data, wipe the
drive, and start over.
How many hours have you spent on this so far?
It's likely that there are subtle registry problems that were caused by both
the maware and registry repair apps, and these types of problems are often
not addressed by repair installs.
What it comes down to is whether you are using the PC for some work, or as a
science project.
HTH
-pk
news:TimButton.3sc6bb@DoNotSpam.com...>
> Win XP Home SP3
>
> Had on it "VirusRemover 2009" which is malware. It had removed a load
> of Services. Believe now completely gone: registry entries and program
> groups deleted by putting drive in another machine and virus checking
> too. Reapplied SP3, "sff / scannow" completes successfully, Registry
> Mechanic fixed a load of errors too.
>
> When run "winmsd" under Components/ Network/ Protocol there are no
> "MSAFD TCPIP" entries, just load of "MSAFD NetBIOS" preceded by 2 "RSVP
> TCPIP" entries . on other machines I have first in list 2 "MSAFD TCPIP"
> entries . getting these 2 back would seem to be the solution I'm looking
> for.
>
> Have run "Netsh in tip reset" & "Netsh winsock reset"
>
> Also, under Device Manager, Show hidden devices, Non PnP drivers, the
> "TCP/IP Protocol Driver" had red "X" through so I uninstalled,
> restarted, didn't show to start with but now back.
>
> As if TCP/IP not installed.
> Have copied, individually & manually, load of dll files to system32
> folder, and load of sys files to drivers folder.
>
> If anyone knows how to get back the 2 "MSAFD TCPIP" entries please
> enlighten me!
>
> Thanks in advance!
>
>
> --
> TimButton
You may find it faster and more reliable to back up your data, wipe the
drive, and start over.
How many hours have you spent on this so far?
It's likely that there are subtle registry problems that were caused by both
the maware and registry repair apps, and these types of problems are often
not addressed by repair installs.
What it comes down to is whether you are using the PC for some work, or as a
science project.
HTH
-pk
Re: TCPIP missing!
Tim
I appreciate you have reinstalled but I felt your sequence of Event
Viewer reports a challenge I could not ignore.
Event ID: 4311 is the error giving rise to the TCP/IP. The service is
dependent on two services:
AFD
and
NetBios over Tcp/IP
http://technet.microsoft.com/en-us/libr ... 27013.aspx
NetBios over Tcp/IP is in turn dependent on the Tci/IP Protocol Driver
and IPSEC driver.
http://www.blackviper.com/WinXP/Service ... ervice.htm
Event ID: 7026
Event Source: Service Control Manager
Drivers failing to load
hotcore3.sys
Paragon Software
I cannot think of an obvious connection to the other problems.
ohci1394
openHCI port driver -Windows System file -this failure could be an
explanation for those errors coming from Event Source: SimpTcp
RCFOX
Sonicwall IPsec driver -Background VPN & Firewall Hardware - another
failure that could be an explanation for those errors coming from Event
Source: SimpTcp
Event ID: 1
Event Source: SimpTcp
http://technet.microsoft.com/en-us/libr ... 75041.aspx
The other Event Warnings from Event Source: SimpTcp are likely to mean
something similar.
Event ID: 4311
Event Source: NetBT
http://www.eventid.net/display.asp?even ... BT&phase=1
This might be an important problem to resolve.
Event Source: Dhcp
Event ID: 1004
This occured because the Service is dependent on the NetBT service which
failed.
--
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
TimButton wrote:
> Thanks for that- not noticed the "copy to clipboard button" before!
> 'scuse all the text but may be useful to have the lot ... fyi have
> used AVG when drive in another machine and it reckons it's clean.
> Cannot install on the problem machine. Installed Spybot ok though
> and it found and cleaned AntiSpywareMaster and App.FirewallBypass.
> Run since rebooting and it's showing clean. This was before running
> the repair install. Many thanks for the help, I can always reinstall
> from scratch but would be good to fix. Here's all the Event info:-
>
> Event Type: Warning
> Event Source: Dhcp
> Event Category: None
> Event ID: 1004
> Date: 17/05/2009
> Time: 20:15:50
> User: N/A
> Computer: SID
> Description:
> The DHCP Client service is shutting down. The following error occurred
>>
> The system cannot find the file specified.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 02 00 00 00 ....
>
> Event Type: Error
> Event Source: NetBT
> Event Category: None
> Event ID: 4311
> Date: 17/05/2009
> Time: 20:15:47
> User: N/A
> Computer: SID
> Description:
> Initialization failed because the driver device could not be created.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 00 00 00 00 01 00 58 00 ......X.
> 0008: 00 00 00 00 d7 10 00 c0 ....?
I appreciate you have reinstalled but I felt your sequence of Event
Viewer reports a challenge I could not ignore.
Event ID: 4311 is the error giving rise to the TCP/IP. The service is
dependent on two services:
AFD
and
NetBios over Tcp/IP
http://technet.microsoft.com/en-us/libr ... 27013.aspx
NetBios over Tcp/IP is in turn dependent on the Tci/IP Protocol Driver
and IPSEC driver.
http://www.blackviper.com/WinXP/Service ... ervice.htm
Event ID: 7026
Event Source: Service Control Manager
Drivers failing to load
hotcore3.sys
Paragon Software
I cannot think of an obvious connection to the other problems.
ohci1394
openHCI port driver -Windows System file -this failure could be an
explanation for those errors coming from Event Source: SimpTcp
RCFOX
Sonicwall IPsec driver -Background VPN & Firewall Hardware - another
failure that could be an explanation for those errors coming from Event
Source: SimpTcp
Event ID: 1
Event Source: SimpTcp
http://technet.microsoft.com/en-us/libr ... 75041.aspx
The other Event Warnings from Event Source: SimpTcp are likely to mean
something similar.
Event ID: 4311
Event Source: NetBT
http://www.eventid.net/display.asp?even ... BT&phase=1
This might be an important problem to resolve.
Event Source: Dhcp
Event ID: 1004
This occured because the Service is dependent on the NetBT service which
failed.
--
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
TimButton wrote:
> Thanks for that- not noticed the "copy to clipboard button" before!
> 'scuse all the text but may be useful to have the lot ... fyi have
> used AVG when drive in another machine and it reckons it's clean.
> Cannot install on the problem machine. Installed Spybot ok though
> and it found and cleaned AntiSpywareMaster and App.FirewallBypass.
> Run since rebooting and it's showing clean. This was before running
> the repair install. Many thanks for the help, I can always reinstall
> from scratch but would be good to fix. Here's all the Event info:-
>
> Event Type: Warning
> Event Source: Dhcp
> Event Category: None
> Event ID: 1004
> Date: 17/05/2009
> Time: 20:15:50
> User: N/A
> Computer: SID
> Description:
> The DHCP Client service is shutting down. The following error occurred
>>
> The system cannot find the file specified.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 02 00 00 00 ....
>
> Event Type: Error
> Event Source: NetBT
> Event Category: None
> Event ID: 4311
> Date: 17/05/2009
> Time: 20:15:47
> User: N/A
> Computer: SID
> Description:
> Initialization failed because the driver device could not be created.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 00 00 00 00 01 00 58 00 ......X.
> 0008: 00 00 00 00 d7 10 00 c0 ....?