Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Spoolsv keeps corrupting on Boot - error 1053 (?)

Started by chapinwales , Aug 19 2011 04:02 AM

  • Please log in to reply

#16
Jacee
Posted 19 September 2011 - 05:13 PM

Jacee

    Malware Expert

  • Expert
  • 994 posts
  • MVP
First, let's see if flushing the DNS cache and restoring MS's Hosts file resolves the problem. Symantec likes to 'own' your computer :)

Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself.

This item, is also something to look at ...

Log: 'System' Date/Time: 16/09/2011 15:07:54
Type: Warning Category: 0
Event: 16393 Source: Microsoft-Windows-Bits-Client
BITS has encountered an error communicating with an Internet Gateway Device. Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: 0x80072EFD.

See this:
http://technet.micro.../cc734731(WS.10).aspx

If you need to "Enable the Hidden Built-in Administrator Account", scroll down in this tutorial:
http://www.sevenforu...le-disable.html
  • 0

Advertisements

#17
chapinwales
Posted 23 September 2011 - 06:27 AM

chapinwales

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Hi Jacee
I thought you had solved my problem with by ‘start/stopping Bits’
The laptop was ok for 20 – 30 starts – then it happened again
Reset spoolsv – then ok for 20+ starts – then it happened again
Reset spoolsv – then ok for 14 starts – then it happened again
Reset spoolsv – then ok for 5 starts – then it happened again
Reset spoolsv – then ok for 4 starts – then it happened again
Now the ‘corruption’ happens every time – running the bits start/stop does not work (the warning is not there in VEW)
This has happened in a similar way before in that a change/fix has been made which works for a period but the problem creeps back over time with the reapplication of the fix not now working!
I have copied the latest VEW log, it may help:
0000000000000000000000000000000000000000000000000
Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 23/09/2011 13:07:53

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 23/09/2011 11:47:38
Type: Information Category: 0
Event: 903 Source: Microsoft-Windows-Security-SPP
The Software Protection service has stopped.

Log: 'Application' Date/Time: 23/09/2011 11:44:42
Type: Information Category: 0
Event: 1000 Source: Microsoft-Windows-LoadPerf
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.

Log: 'Application' Date/Time: 23/09/2011 11:44:42
Type: Information Category: 0
Event: 1001 Source: Microsoft-Windows-LoadPerf
Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.

Log: 'Application' Date/Time: 23/09/2011 11:42:38
Type: Information Category: 0
Event: 902 Source: Microsoft-Windows-Security-SPP
The Software Protection service has started. 6.1.7601.17514

Log: 'Application' Date/Time: 23/09/2011 11:42:38
Type: Information Category: 0
Event: 1003 Source: Microsoft-Windows-Security-SPP
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status=
1: 01f5fc37-a99e-45c5-b65e-d762f3518ead, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
2: 2e7d060d-4714-40f2-9896-1e4f15b612ad, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
3: 3b965dfc-31d9-4903-886f-873a0382776c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
4: 586bc076-c93d-429a-afe5-a69fbc644e88, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
5: 5e017a8a-f3f9-4167-b1bd-ba3e236a4d8f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
6: 5e35dc43-389b-47c5-b889-2088b06738cb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
7: 6a7d5d8a-92af-4e6a-af4b-8fddaec800e5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
8: 9ab82e0c-ffc9-4107-baa1-c65a8bd3ccc3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
9: 9f83d90f-a151-4665-ae69-30b3f63ec659, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
10: a63275f4-530c-48a7-b0d3-4f00d688d151, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
11: b8a4bb91-69b1-460d-93f8-40e0670af04a, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
12: d2c04e90-c3dd-4260-b0f3-f845f5d27d64, 1, 1 [(0 [0x00000000, 1, 0], [(?)(?)( 1 0x00000000 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)(?)(?)])(1 )(2 )]
13: e68b141f-4dfa-4387-b3b7-e65c4889216e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
14: ee4e1629-bcdc-4b42-a68f-b92e135f78d7, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
15: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]
16: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )]



Log: 'Application' Date/Time: 23/09/2011 11:42:37
Type: Information Category: 0
Event: 1066 Source: Microsoft-Windows-Security-SPP
Initialization status for service objects. C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000


Log: 'Application' Date/Time: 23/09/2011 11:42:35
Type: Information Category: 0
Event: 1 Source: SecurityCenter
The Windows Security Center Service has started.

Log: 'Application' Date/Time: 23/09/2011 11:42:34
Type: Information Category: 0
Event: 900 Source: Microsoft-Windows-Security-SPP
The Software Protection service is starting.

Log: 'Application' Date/Time: 23/09/2011 11:40:42
Type: Information Category: 1
Event: 1003 Source: Microsoft-Windows-Search
The Windows Search Service started.


Log: 'Application' Date/Time: 23/09/2011 11:40:41
Type: Information Category: 3
Event: 302 Source: ESENT
Windows (2304) Windows: The database engine has successfully completed recovery steps.

Log: 'Application' Date/Time: 23/09/2011 11:40:39
Type: Information Category: 3
Event: 301 Source: ESENT
Windows (2304) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.

Log: 'Application' Date/Time: 23/09/2011 11:40:39
Type: Information Category: 3
Event: 300 Source: ESENT
Windows (2304) Windows: The database engine is initiating recovery steps.

Log: 'Application' Date/Time: 23/09/2011 11:40:39
Type: Information Category: 1
Event: 102 Source: ESENT
Windows (2304) Windows: The database engine (6.01.7601.0000) started a new instance (0).

Log: 'Application' Date/Time: 23/09/2011 11:40:35
Type: Information Category: 0
Event: 5617 Source: Microsoft-Windows-WMI
Windows Management Instrumentation Service subsystems initialized successfully

Log: 'Application' Date/Time: 23/09/2011 11:40:32
Type: Information Category: 0
Event: 5615 Source: Microsoft-Windows-WMI
Windows Management Instrumentation Service started sucessfully

Log: 'Application' Date/Time: 23/09/2011 11:40:32
Type: Information Category: 0
Event: 35 Source: NIS
The 'NIS' service has started.

Log: 'Application' Date/Time: 23/09/2011 11:40:32
Type: Information Category: 0
Event: 34 Source: NIS
The 'NIS' service is starting.

Log: 'Application' Date/Time: 23/09/2011 11:40:29
Type: Information Category: 0
Event: 6000 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.

Log: 'Application' Date/Time: 23/09/2011 11:40:29
Type: Information Category: 0
Event: 4101 Source: Microsoft-Windows-Winlogon
Windows license validated.

Log: 'Application' Date/Time: 23/09/2011 11:40:26
Type: Information Category: 0
Event: 1531 Source: Microsoft-Windows-User Profiles Service
The User Profile Service has started successfully.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 23/09/2011 09:31:55
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-2742660404-3765029268-2200134315-500:
Process 820 (\Device\HarddiskVolume3\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-2742660404-3765029268-2200134315-500


Log: 'Application' Date/Time: 16/09/2011 14:38:04
Type: Warning Category: 7
Event: 508 Source: ESENT
wuaueng.dll (948) SUS20ClientDataStore: A request to write to the file "C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log" at offset 519680 (0x000000000007ee00) for 512 (0x00000200) bytes succeeded, but took an abnormally long time (22693 seconds) to be serviced by the OS. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.

Log: 'Application' Date/Time: 13/09/2011 16:27:25
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Application Requested}.


Log: 'Application' Date/Time: 13/09/2011 16:24:31
Type: Warning Category: 0
Event: 6004 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.

Log: 'Application' Date/Time: 05/09/2011 23:02:50
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Application Requested}.


Log: 'Application' Date/Time: 05/09/2011 20:38:46
Type: Warning Category: 0
Event: 6004 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.

Log: 'Application' Date/Time: 04/09/2011 13:22:36
Type: Warning Category: 3
Event: 3036 Source: Microsoft-Windows-Search
The content source <C:\ProgramData\Microsoft\Windows\Start Menu\> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
The URL was already processed during this update. If you received this message while processing alerts, then the alerts are redundant, or else Modify should be used instead of Add. (HRESULT : 0x80040d0d) (0x80040d0d)


Log: 'Application' Date/Time: 04/09/2011 12:28:17
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-2742660404-3765029268-2200134315-1000:
Process 472 (\Device\HarddiskVolume3\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-2742660404-3765029268-2200134315-1000


Log: 'Application' Date/Time: 04/09/2011 12:20:01
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Full Index Reset}.


Log: 'Application' Date/Time: 04/09/2011 12:14:50
Type: Warning Category: 1
Event: 1008 Source: Microsoft-Windows-Search
The Windows Search Service is starting up and attempting to remove the old search index {Reason: Full Index Reset}.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/09/2011 12:07:34
Type: Information Category: 0
Event: 206 Source: Microsoft-Windows-Application-Experience
The Program Compatibility Assistant service successfully performed phase two initialization.

Log: 'System' Date/Time: 23/09/2011 12:07:30
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Application Information service entered the running state.

Log: 'System' Date/Time: 23/09/2011 12:07:06
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Multimedia Class Scheduler service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:58:34
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.

Log: 'System' Date/Time: 23/09/2011 11:50:35
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Application Experience service entered the stopped state.

Log: 'System' Date/Time: 23/09/2011 11:47:38
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Software Protection service entered the stopped state.

Log: 'System' Date/Time: 23/09/2011 11:45:37
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Multimedia Class Scheduler service entered the stopped state.

Log: 'System' Date/Time: 23/09/2011 11:42:39
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Windows Update service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:42:34
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Security Center service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:42:34
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Software Protection service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:42:33
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Windows Font Cache Service service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:43
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The HomeGroup Provider service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:43
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Function Discovery Provider Host service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:43
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Windows Media Player Network Sharing Service service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:42
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Windows Search service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:42
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Computer Browser service entered the stopped state.

Log: 'System' Date/Time: 23/09/2011 11:40:42
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The IPsec Policy Agent service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:43
Type: Information Category: 0
Event: 14204 Source: Microsoft-Windows-WMPNSS-Service
Service 'WMPNetworkSvc' started.

Log: 'System' Date/Time: 23/09/2011 11:40:42
Type: Information Category: 0
Event: 7036 Source: Service Control Manager
The Network Connections service entered the running state.

Log: 'System' Date/Time: 23/09/2011 11:40:41
Type: Information Category: 7005
Event: 20003 Source: Microsoft-Windows-UserPnp
Driver Management has concluded the process to add Service tunnel for Device Instance ID ROOT\*ISATAP\0000 with the following status: 0.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 23/09/2011 11:40:24
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 11:37:36
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 10:56:03
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name liveupdate.symantecliveupdate.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 23/09/2011 10:56:01
Type: Warning Category: 0
Event: 1014 Source: Microsoft-Windows-DNS-Client
Name resolution for the name dns.msftncsi.com timed out after none of the configured DNS servers responded.

Log: 'System' Date/Time: 23/09/2011 10:15:20
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 10:14:32
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 10:07:08
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 10:06:19
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 09:46:10
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 09:45:26
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 09:39:28
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 09:38:06
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 09:33:02
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 09:31:59
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 09:06:11
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 09:05:11
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 23/09/2011 08:44:07
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 22/09/2011 22:57:54
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 22/09/2011 22:56:58
Type: Warning Category: 0
Event: 4 Source: k57nd60a
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 22/09/2011 19:42:07
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.
0000000000000000000000000000000000000000000000000000000000
Once again I am really grateful for your help.
  • 0

#18
Jacee
Posted 23 September 2011 - 09:59 AM

Jacee

    Malware Expert

  • Expert
  • 994 posts
  • MVP
Well, I dunno ....

A couple more things to check:

*Event: 6004 Source: Microsoft-Windows-Winlogon
The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.
http://support.microsoft.com/kb/947215


*Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.
*Driver Management has concluded the process to add Service tunnel for Device Instance ID ROOT\*ISATAP\0000 with the following status: 0.

http://digitalmediap...-windows-vista/
  • 0

#19
chapinwales
Posted 23 September 2011 - 11:18 AM

chapinwales

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Hi Jacee
Did the Winlogin fix by using the Microsoft Fix it 50446 – and guess what Problem solved again, so far 3 successful close/starts – I’ll keep playing over the weekend to see what happens.
Don’t quite understand the ‘error 4001’ since it is only disabling IPv6, which does not seem right?
I’ve done it, after the first fix seemed to work
I’ll let you know how it goes next week.
Thanks and keep your fingers crossed.
  • 0

#20
Jacee
Posted 23 September 2011 - 07:17 PM

Jacee

    Malware Expert

  • Expert
  • 994 posts
  • MVP
Fingers and eyes crossed for you. Posted Image
  • 0

#21
chapinwales
Posted 28 September 2011 - 05:40 AM

chapinwales

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Hi Jacee
I forgot to cross my fingers!
After 4 stop/starts the problem is back
After a bit of fiddling – its OK but for only 4 stop/starts
I created a new user account as well as the existing one
Everything is OK for 19 stop/starts then the problem is back
Reinstated spoolsv and its OK again – it’s been OK now 30 stop/starts and still counting!!!!!!!!!!! The problem is that I’m expecting the problem to reappear at anytime like in the past, so it would be nice to know the cause (and solution)
The only thing I can think that is now different is that the boot is now longer since I now have to select the user instead of booting straight in. This thinking comes from the error message ‘Error 1053: The service did not respond to the start or control request in a timely manner’. Does that make sense or am I clutching at straws?
I’m not the only person with the problem there are a few occurrences I have found on the net but with no solution – see the last post
http://en.community....spx?PageIndex=2
(Incidentally have you any idea what “Instant <3 ....” means in Barneyboy48 reply?)
There is a recommendation from Microsoft to cure Error 1053 is to install .NET Framework 1.1 Service Pack 1. I’m not sure about this since I don’t have 1.1 installed but later versions.
Have you any thoughts?
I’m indebted to you for your help and in keeping everything crossed – thanks.
  • 0

#22
Jacee
Posted 29 September 2011 - 12:30 PM

Jacee

    Malware Expert

  • Expert
  • 994 posts
  • MVP
Sheesh! My expertise isn't in printers ... Posted Image
See if a startup repair might lead you to the answer http://technet.micro.../cc734033(WS.10).aspx
  • 0

#23
chapinwales
Posted 07 October 2011 - 05:05 AM

chapinwales

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Hi Jacee
Thanks for your tireless help (and Dakeyras previously) it has been really appreciated – g2g is the best forum I have found by far!
To update you on what has happened since my last post:
I managed to do a stop/start for 39 times – then the problem reappeared – after correction it was good for only 4 times.
Then no good every time.

After fiddling with users and passwords I got it to be good for 9 times, then 6 times and then no good at all which is where I am now.

I am now totally lost – my laptop is not far away from being binned!

I don’t think it is truly a print problem but something causing spoolev to change /corrupt on boot. A ‘solution’ cures the problem for a time then the problem creeps back with the ‘solution’ not then working. It seems a change solves the problem but only for a time.

I appreciate that this problem is probably outside of your expertise, but if you have any other ideas or where else I may get help I would really be grateful.
Once again thank you very much for your help and I understand if you choose to withdraw from this ‘conversation’
  • 0

#24
Jacee
Posted 07 October 2011 - 08:36 AM

Jacee

    Malware Expert

  • Expert
  • 994 posts
  • MVP
You might try searching the printer's forum for answers ... depending on which printer you're using.
  • 0

#25
chapinwales
Posted 07 October 2011 - 10:11 AM

chapinwales

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Trouble is I do not have a printer connected (except for the default printers Fax & Microsoft XPS doc writer) - this has been the case since re-installing Windows. Still its worth a try. Thanks
  • 0

Advertisements

#26
Schu
Posted 26 January 2012 - 11:17 AM

Schu

    New Member

  • Member
  • Pip
  • 1 posts
We have the same experience with a Dell Inspiron; I've formatted the system, loaded Windows 7 Pro, Home and Windows XP SP3 all with the same results. The original MSFT spoolsv becomes renamed to spoolsv.exe.org and a Phoenix Technologies one replaces it. I'm assuming it has to be something on the BIOS/MB that is doing this; like the users above this device has no LPT port, etc. CRAZY
  • 0

#27
chapinwales
Posted 27 January 2012 - 04:25 AM

chapinwales

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Hi Schu
I'm afraid I still have the same problem and reluctantly living with it at the moment but it is a pesky nuisance. If you find an answer could you let me know? Thanks
  • 0
Back to Windows Vista and Windows 7 · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Retired Forums
  3. → Windows Vista and Windows 7

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP