Thanks for your suggestions. Below (embedded in your reply) is the
information that I have gathered so far. I do not have in-depth expertise
in this area, so further guidance would be appreciated.
- David
On Tue, 7 Jun 2005 08:27:53 -0400, "David D."
http://msdn.microsoft.com/library/d...ock/winsock/windows_sockets_error_codes_2.asp
Look in the system log for any messages in relation.
==>>> There are no logged error codes in the 10xxx or 11xxx range.
However, there are other codes that may be suspicious. I have included
snips from the system log and application log at the end of this post. If
you have time, I would appreciate your glancing over it to see what you
spot.
Is any network card or any network device on a shared interrupt?
==>>> This might be my biggest problem. All of the hardware loves IRQ 11.
Which of the hardware components listed below need to be re-assigned to an
IRQ other than 11 ? And how do I accomplish re-assigning them? My ethernet
card, display adaptor, additional IDE controller adaptor card, USB 2.0
adaptor card and on-mobo USB 1.0 all use IRQ 11. My USB devices include
mouse, printer, card reader-writer, scanner, rarely-used analog modem, and
rarely used IDE-to-USB external adaptor. I am not sure what IRQs my mobo's
IDE RAID controller uses because I currently have it diabled (and I may keep
it disabled).
IRQ Device
9 Microsoft ACPI-Compliant System
11 RADEON 7500
11 NEC PCI to USB Open Host Controller
11 NEC PCI to USB Open Host Controller
11 NEC PCI to USB Enhanced Host Controller
11 Win2000 Promise Ultra133 TX2 (tm) IDE Controller
11 CMI8738/C3DX PCI Audio Device
11 VIA USB Universal Host Controller
11 VIA USB Universal Host Controller
11 VIA USB Universal Host Controller
11 Realtek RTL8139/810x Family Fast Ethernet NIC
14 Primary IDE Channel
15 Secondary IDE Channel
8 System CMOS/real time clock
13 Numeric data processor
6 Standard floppy disk controller
4 Communications Port (COM1)
3 Communications Port (COM2)
1 Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
10 MPU-401 Compatible MIDI Device
Disable anything in startup, run keys... etc...
==>>> I removed the items that I am not actively using. If need be, I can
strip it more bare. Also, I do not want to inadvertantly cause additional
problems by removing applications or services that I do not recognize or
understand.
spyware? It "phones home" frequently maybe it's blocking network traffic.
==>>> I do run the scans on a quiet system, although it is possible that
there are other, background, chatty processes that I am unaware of.
Restore "defaults" in Advanced Internet Options dialog.
==>>>I have not tried that yet. I will try it later.
Reinstall ALL of the network components, including dialup stuff...
==>>> Are you talking about uninstalling all protocols and all
adaptors/hardware components, and reinstalling them? What is the best
approach to doing that? What resouces do I need to gather before starting
those procedures?
Thanks for the suggestions that you have given me so far, and for any
procedural guidance that you can offer regarding my next steps.
My system log and appl log fragments are listed below. In this particular
example, Norton AntiVirus was running up until the "Socket Error 0" lockup.
I also get the "Socket Error 0" lockup during spyware scans, and,
occassionally, just during normal interactive computer usage.
- David D.
SYSTEM LOG:
Type Date Time Source Event Data
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85973720
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85975e00
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 8597ccc0
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85b529b0
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85b52bc0
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85bd0500
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85bd0860
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85bd1bd0
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85bce450
Warning 6/17/2005 3:31:45 PM Wmi 12103 0000: 85bce720
Info 6/17/2005 3:31:01 PM eventlog 6005
Info 6/17/2005 3:31:01 PM eventlog 6009
Info 6/17/2005 3:31:01 PM Save Dump 1001
Warning 6/17/2005 1:32:35 PM NAVAP 1001 See data in legend
Error 6/17/2005 1:31:31 PM Srv 2020 See data in legend
Error 6/17/2005 1:31:19 PM Srv 2000 See data in legend
Error 6/17/2005 1:31:19 PM Srv 2000 See data in legend
Error 6/17/2005 1:31:19 PM Srv 2000 See data in legend
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85974ce0
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85978600
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 8597c9e0
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85b51bf0
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85b51e00
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85bcdac0
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85bcde00
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85bd1d90
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85bcea10
Warning 6/17/2005 11:52:21 AM Wmi 12103 0000: 85bcece0
Info 6/17/2005 11:51:20 AM eventlog 6005
Info 6/17/2005 11:51:20 AM eventlog 6009
Error 6/17/2005 11:35:53 AM Srv 2000
Error 6/17/2005 11:35:53 AM Srv 2000
Error 6/17/2005 11:35:53 AM Srv 2000 See data in legend
Info 6/15/2005 2:53:17 PM Windows File Protection 64004
Warning 6/15/2005 2:52:24 PM Wmi 12103 0000: 859794a0
LEGEND
1001 The computer has rebooted from a bugcheck.The bugcheck was: 0x00000024
(0x0019025e, 0xb7425000, 0xb7424c58, 0x8044d859).Microsoft Windows 2000
[v15.2195].A dump was saved in: C:\WINNT\Minidump\Mini061705-01.dmp.
1001-NAVAP System memory is running very low. Norton AntiVirus Realtime
Protection may not be able to function properly.
0000: 00000000 00540001 00000000 800703e9
0010: 00000000 00000000 00000000 00000000
0020: 00000000 00000000
2000 The server's call to a system service failed unexpectedly.
0000: 00040000 00540001 00000000 c00007d0
0010: 00000000 c0000017 00000000 00000000
0020: 00000000 00000000 00aa0334
2020 The server was unable to allocate from the system paged pool because
the pool was empty.
0000: 00040000 00540001 00000000 c00007e4
0010: 00000000 c000009a 00000000 00000000
0020: 00000000 00000000 00000002
6005 The Event log service was started.
6009 Microsoft (R) Windows 2000 (R) 5.0 2195 Service Pack 4 Uniprocessor
Free.
12103 The registry path () passed by a kernel mode driver is invalid. The
driver device object is in the additional data.
64004 The protected system file ntshrui.dll could not be restored to its
original, valid version.The file version of the bad file is 5.0.2134.1 The
specific error code is 0x800b0003[The form specified for the subject is not
one supported or known by the specified trust provider.]
APPLICATION LOG:
Type Date Time Source Event User
Info 6/17/2005 3:31:46 PM Norton AntiVirus 14 N/A
Info 6/17/2005 3:31:45 PM Norton AntiVirus 23 N/A
Info 6/17/2005 3:31:33 PM NProtectService 3 SYSTEM
Info 6/17/2005 3:31:10 PM GhostStartService 0 N/A
Info 6/17/2005 3:31:08 PM asKernel 0 N/A
Info 6/17/2005 3:31:07 PM dcfssvc 105 N/A
Warning 6/17/2005 1:32:39 PM Norton AntiVirus 6 N/A
[Additional Event #6 messages removed from this posting]
Warning 6/17/2005 1:18:11 PM Norton AntiVirus 6 N/A
Info 6/17/2005 1:18:10 PM Norton AntiVirus 3 N/A
Info 6/17/2005 11:52:20 AM Norton AntiVirus 23 N/A
Info 6/17/2005 11:52:18 AM Norton AntiVirus 14 N/A
Info 6/17/2005 11:51:51 AM NProtectService 3 SYSTEM
Info 6/17/2005 11:51:28 AM GhostStartService 0 N/A
Info 6/17/2005 11:51:26 AM asKernel 0 N/A
Info 6/17/2005 11:51:25 AM dcfssvc 105 N/A
Info 6/17/2005 11:17:19 AM Norton AntiVirus 3 N/A
Info 6/17/2005 11:01:24 AM Norton AntiVirus 7 N/A
Info 6/17/2005 11:00:44 AM Norton AntiVirus 16 N/A
Info 6/17/2005 9:25:56 AM SceCli 1704 N/A
Info 6/16/2005 10:08:56 AM SceCli 1704 N/A
Info 6/15/2005 2:52:26 PM Norton AntiVirus 14 N/A
Info 6/15/2005 2:52:24 PM Norton AntiVirus 23 N/A
Info 6/15/2005 2:52:00 PM NProtectService 3 SYSTEM
Info 6/15/2005 2:51:41 PM GhostStartService 0 N/A
Info 6/15/2005 2:51:39 PM asKernel 0 N/A
Info 6/15/2005 2:51:39 PM dcfssvc 105 N/A
Info 6/15/2005 2:49:03 PM Norton AntiVirus 14 N/A
Info 6/15/2005 2:49:00 PM Norton AntiVirus 23 N/A
Info 6/15/2005 2:48:37 PM NProtectService 3 SYSTEM
Info 6/15/2005 2:48:07 PM GhostStartService 0 N/A
LEGEND:
3 The service was started.
6 Scan could not open file <filename> [00000003]
14 Norton AntiVirus services startup was successful.
16 Security policy in the Group policy objects are applied successfully.
23 Norton AntiVirus Realtime Protection Loaded.
105 The description for Event ID ( 105 ) in Source ( dcfssvc ) cannot be
found. The local computer may not have the necessary registry Info or
message DLL files to display messages from a remote computer. The following
Info is part of the event: The event log file is corrupt..
1704 Security policy in the Group policy objects are applied successfully.
