At times, no browsing

External Since: Sep 13, 2005 Posts: 847

"John John (MVP)" <audetweld.RemoveThis@nbnet.nb.ca> wrote in
news:Oh$KoYSLJHA.5660@TK2MSFTNGP03.phx.gbl:

> ms wrote:
>
>> "John John (MVP)" <audetweld.RemoveThis@nbnet.nb.ca> wrote in
>
>>>It might help if you post the content of the most recent Event IDs
>>>7000 & 7001.
>>>I also notice that Events 20158 and 20159 are happening within
>>>seconds or minutes of each other, Event 20158 indicates that a Remote
>>>Connection was made and Event 20159 indicates that the connection was
>>>terminated, you may want to further investigate what is happening
>>>with this.
>>>
>>>John
>>
>>
>> I did that, copies below, XXX hides my username:
>> ---------------
>> Event Type: Information
>> Event Source: RemoteAccess
>> Event Category: None
>> Event ID: 20159
>> Date: 10/5/2008
>> Time: 3:10:44 PM
>> User: N/A
>> Computer: P2
>> Description:
>> The connection to copper made by user XXX.RemoveThis@copper.net using device
>> COM3 was disconnected.
>> ------------------
>> Event Type: Information
>> Event Source: RemoteAccess
>> Event Category: None
>> Event ID: 20158
>> Date: 10/5/2008
>> Time: 5:40:42 PM
>> User: N/A
>> Computer: P2
>> Description:
>> The user XXX.RemoveThis@copper.net successfully established a connection to
>> copper using the device COM3.
>
> I take it that copper.net is your ISP and that COM3 is your modem
> port.
> The above are not in chronological order. Make sure that the Event
> Log is sorted by date and check that Events 20159 are not happening
> almost immediately after Events 20158, that would indicate that your
> connection is being dropped almost as soon as it is made.
>

Thanks for the help.

I adjusted the Event Viewer as you suggested, new data:
----------------
Type Date Time Source Category User Computer Event
Information 10/13/2008 1:45:21 PM RemoteAccess None N/A P2
20159
Information 10/13/2008 1:44:56 PM RemoteAccess None N/A P2
20158
-------------------
Event Type: Information
Event Source: RemoteAccess
Event Category: None
Event ID: 20159
Date: 10/13/2008
Time: 1:45:21 PM
User: N/A
Computer: P2
Description:
The connection to copper made by user XXX.RemoveThis@copper.net using device COM3
was disconnected.
------------------
Event Type: Information
Event Source: RemoteAccess
Event Category: None
Event ID: 20158
Date: 10/13/2008
Time: 1:44:56 PM
User: N/A
Computer: P2
Description:
The user XXX.RemoveThis@copper.net successfully established a connection to copper
using the device COM3.

The data shows that on DUN, I connected to my ISP, tried to browse,
failed, and then I disconnected the DUN.

>> ---------------
>> Event Type: Error
>> Event Source: Service Control Manager
>> Event Category: None
>> Event ID: 7000
>> Date: 9/25/2008
>> Time: 6:51:38 AM
>> User: N/A
>> Computer: P2
>> Description:
>> The HWiNFO32 Kernel Driver service failed to start due to the
>> following error: The system cannot find the file specified.
>
> I'm not sure what the HWiNFO32 Kernel Driver is, you would have to
> search the internet to find out more about it, but that error dates
> from September 25th, it may just be an old one time only error.

That is just a utility I have, not normally running, no impact here IMO.

It
> might help if you clean out the log and work with a clean list of
> recent and current events. To clear the log right-click on System Log
> and select "Clear all Events", there is no need to save to log before
> you clear it.
> Reboot your computer and try connecting to the internet and then
> take
> a look at your log to see what is going on.
>
>
>> First, where is Event Viewer on the hard drive (search didn't find
>> it), is it a standalone exe?
>
> It's in the System32 folder, just launch it from the Run box or
> right-click on "My Computer" and select "Manage", or look in the Start
> Menu>Programs>Administartive Tools.
>
>
>> Then, how do you detect Event ID in Event Viewer? I was just lucky in
>> selecting the above, see no way view ID. I did not locate 7001.
>
> Look at the columns at the top. If you don't see the "Event" Column
> click on the View Menu and add the column to the displayed list.
>
> John
>

It is a simple executable, I copied it out of the System folder, still
works OK.

I posted data on 20158/9, that's all there is since I cleaned the log, I
guess events 7000/1 are old data, not needed?

Next step?

Thanks,

ms

External Since: Apr 11, 2008 Posts: 245

ms wrote:

> I adjusted the Event Viewer as you suggested, new data:
> ----------------
> Type Date Time Source Category User Computer Event
> Information 10/13/2008 1:45:21 PM RemoteAccess None N/A P2
> 20159
> Information 10/13/2008 1:44:56 PM RemoteAccess None N/A P2
>
> (sniped..)
>
> The data shows that on DUN, I connected to my ISP, tried to browse,
> failed, and then I disconnected the DUN.
> I posted data on 20158/9, that's all there is since I cleaned the log, I
> guess events 7000/1 are old data, not needed?

If there are no other new errors in the System log then you can forget
about the old events.

> Next step?

When you connect to the internet can you ping sites? Once connected
open a command prompt and try to ping google.com, do you get a reply?
Can you ping your ISP's DNS address?

Is the machine virus/spyware free? Is your firewall properly configured?

John