Re: Symantec Service Framework not responding NIS 2012

peppinl · ‎06-25-2012

Log Name: System
Source: Microsoft-Windows-WLAN-AutoConfig
Date: 25/06/2012 17:55:19
Event ID: 4001
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Callum-PC
Description:
WLAN AutoConfig service has successfully stopped.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
<EventID>4001</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2012-06-25T16:55:19.423071100Z" />
<EventRecordID>28936</EventRecordID>
<Correlation />
<Execution ProcessID="960" ThreadID="5864" />
<Channel>System</Channel>
<Computer>Callum-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>

peppinl · ‎06-25-2012

Not sure if this is related:

Log Name: System
Source: Service Control Manager
Date: 25/06/2012 17:47:56
Event ID: 7026
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Callum-PC
Description:
The following boot-start or system-start driver(s) failed to load:
cdrom
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7026</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2012-06-25T16:47:56.486233300Z" />
<EventRecordID>28834</EventRecordID>
<Correlation />
<Execution ProcessID="564" ThreadID="568" />
<Channel>System</Channel>
<Computer>Callum-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">
cdrom</Data>
</EventData>
</Event>

Topopurim47 · ‎02-21-2009

peppini, i have xpsp3,ie8,nis2012,emachinet3882(old unit). in april i upgraded to nis2012 from nis2011. after the first week i got the symantec service framework has stopped working, error code 8504,104. ran support auto-fix. auto fix said auto fix failed-internet connectivity-host file cleanup. nis2012 would not respond and system tray icon disappeared. turned off machine, waited 5 minutes, rebooted and norton started working again. this has happened 5 more times. now i get the microsoft error report request and nothing else. nis2012 stops working and thankfully a turnoff,wait, and reboot fixes it. event viewer log app error event id...1000 faulting application ccsvchst.exe version 11.2.2.4 faulting module symhtml.dll version 6.5.0.23 fault address 0x0012911d this error appears on 4-14, 4-19, 4-25, 5-30, 6-21, and today 6-26. also on 6-21 app error id 1001 fault bucket 1350621300 . thanks

TheSaber007 · ‎06-01-2012

I did some quick research and this was in the Microsoft social technet website

http://social.technet.microsoft.com/Forums/en-US/w7itprogeneral/thread/ede3b4ed-d535-407e-ab0d-46687...

This is the official microsoft technet article refered to in the above:

http://technet.microsoft.com/en-us/library/cc756373(WS.10).aspx

Try this and see if rememdies the issue. Something tells me however that this won't stop Norton from crashing.

Based on the following statement

The service cannot be started, either because it is disabled or because it has no enabled devices associated with it, I googled this and also came up with the following (I luckly found these at the very top of the searches)

http://answers.microsoft.com/en-us/windows/forum/windows_7-security/the-service-cannot-be-started-ei...

Based on these 2 forum entries it sounds like a virus is preventing Norton from working properly which is a sign as some virus designs disable your security software from working so you can't find and delete them.

Now this site I am putting next is a site where they will have you run 2 or 3 different programs and they will ask you to post those logs. They have people who more advanced than me in using these programs to locate and advise you on how to get rid of any virus/malware/spyware/rootkits that might be on your system somewhere that is possibly the cause of Norton not working. If you would prefer a second opinion I would have no problem as I am not the end all be all.

Here is that link:

http://forums.techguy.org/54-virus-other-malware-removal/

They do a great job of helping you to track down your problem if it is a virus type infection as well as being able to read the logs from the programs they will have you run.

Sorry I could not give you a definitive solution but hope this helped a little.

peppinl · ‎06-25-2012

Thank you for your help so far. I'll take a look at links you sent and let you know how I get on.

A couple of days ago when I got NIS working I managed to run a full system scan which detect 7 threats and cleaned them so I'd be surprised if it was a virus, but you never know!

TheSaber007 · ‎06-01-2012

I would then try to get the Norton Eraser tool to scan for rootkits as well.

This next step you have to be willing to do on your own as Norton will blame it if the program still doesn't work, but you can always uninstall once you have used it. Malwarebytes http://www.malwarebytes.org/ download the software and have it run a full scan of your system.

Are you loading or have connected to your USB or Firewire Ports anything to do with storage like flash drives/keys, external hard drive, a memory card with names like SDHC or Memory Stick, MMC, etc? If so you will want to scan them as well. If you only put them in every once a while, try no to use them during while you are trying to get Norton to work.

Malwarebytes might pick up anything that Norton perhaps left behind. Combine this with my last post and hopefully you can at least remove viruses/malware/spam/rootkits etc. from the list of possible causes.