|
Post by irvsp on Nov 21, 2013 2:02:53 GMT
I just happened to notice a DTCINSTALL.LOG dated today in my WINDOWS folder: ================= 11-16-2013 08:08 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-17-2013 09:37 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-18-2013 08:17 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-19-2013 09:02 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-19-2013 14:36 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-20-2013 07:44 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) ================= Those are my BOOT times? I assume since the last failure which was an UPDATE maybe, I had a lot installed on the 13th, but not sure when I rebooted? Either that or the Adobe Flash 11 that was installed on the 15th could be the cause? I have NOT noticed any system degradation? Don't have a COM folder? The WINDOWS\SYSTEM32\MSDTC folder is not accessible? Googling this I see others might have hit it? It is for "Microsoft Distributed Transaction Coordinator Service". One post said run SFC, which I did and it was fine, no problems? I do have the service, Distributed Transaction Coordinator, but it is set to MANUAL. STARTING it works OK? THIS LINK which is quite OLD suggests uninstalling and reinstalling. Doesn't seem to be for a Desktop either? Confused? Anyone else have this file in the Windows Folder?
|
|
|
Post by warlock on Nov 21, 2013 2:23:53 GMT
Are you having a problem with your computer Irv? Or are you just asking what This log message means? Looked at my windows folder no such file there, at least on this machine W7.
Not running W8.1 so that's all I can do here.
|
|
|
Post by GuiltySpark on Nov 21, 2013 3:03:17 GMT
Does it have a file path such as DTC Install error = 0, IN CILogWriteAsynch::Init, com\ d:nt\... for example?
|
|
|
Post by irvsp on Nov 21, 2013 14:24:13 GMT
Are you having a problem with your computer Irv? Or are you just asking what This log message means? Looked at my windows folder no such file there, at least on this machine W7. Not running W8.1 so that's all I can do here. Not that I know of? Wondering why the error has happened all of a sudden? Looking back at install dates I can see only Adobe installed the day before. The log indicated that at boot it tries to install it, and I don't know why it is failing? I assume the 173 is an error code but I can't find it documented? Only see two mentions of it in posts, both OLD: forums.iis.net/t/1181294.aspx?Cannot+Install+IIS6+on+Windows+Server+2003+SP2go4answers.webhost4life.com/Example/msdtc-broken-unfixable-136952.aspxBoth have a LONG LIST of errors, I've got only one? I guess I generated more entries last night when I actually started the service? ============== 11-20-2013 07:44 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-20-2013 20:51 : DTC Install error = 0, going to do CreateMutexW, com\complus\dtc\shared\util\security.cpp (1104) 11-20-2013 20:51 : DTC Install error = 0, successfully done CreateMutexW, com\complus\dtc\shared\util\security.cpp (1144) 11-20-2013 20:51 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) 11-20-2013 21:05 : DTC Install error = -2147467259, failed in z_pTrace->Trace, com\complus\dtc\dtc\msdtc\src\msdtc.cpp (2348) 11-21-2013 08:22 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173) ============== You see yesterday's boot with the 173 error, then at almost 9PM when I messed with starting the service, and last one is today's boot. Funny thing is I can't find the first file? ============ C:\>dir ilgwrta.cpp /s Volume in drive C is OS Volume Serial Number is 1C5C-DD5E File Not Found C:\>k: K:\>dir ilgwrta.cpp /s Volume in drive K is Drive_K Volume Serial Number is 5ABD-5B29 File Not Found ============== C: is my OS, K: is my D/L drive. I've scoured my EVENT VIEWER for errors either at that time or slightly before that. Only one is for the Cannon printer on my desk that is OFF so the print driver fails to locate it and load... and it has been off for ages, it is a back-up printer. Something made this start recently, just don't know what?
|
|
|
Post by irvsp on Nov 21, 2013 14:34:56 GMT
Does it have a file path such as DTC Install error = 0, IN CILogWriteAsynch::Init, com\ d:nt\... for example? Nope, what you see is the full contents of the file, it is 'relative' to whatever is running and the location it is running from. I've searched for the path and folders names like the above, none exist on my OS or data drive? I assume these are TEMP folders that are deleted after install, pass or fail? I am not too sure how to proceed? Maybe use PROCESS EXPLORER to watch for this? However how to get it started and looking BEFORE the install is tried? Looked on my wife's W8.1 there is that file, but with only 3 dates, and the last one was the day W8.1 was installed on her system? No (173) on her's though? I'm wondering if it is even an error? 0 is indicated? But why is it being reported now and not on my wife's system?
|
|
|
Post by irvsp on Nov 21, 2013 14:54:01 GMT
Checking the Event Viewer for ALL entries at the same time as the last entry in the log I found this:
----------- Log Name: Application Source: Microsoft-Windows-Perflib Date: 11/21/13 8:23:05 AM Event ID: 1008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Irv-XPS435 Description: The Open Procedure for service "MSDTC" in DLL "C:\WINDOWS\system32\msdtcuiu.DLL" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" /> <EventID Qualifiers="49152">1008</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2013-11-21T13:23:05.000000000Z" /> <EventRecordID>500748</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Irv-XPS435</Computer> <Security /> </System> <UserData> <EventXML xmlns="Perflib"> <param1>MSDTC</param1> <param2>C:\WINDOWS\system32\msdtcuiu.DLL</param2> <binaryDataSize>4</binaryDataSize> <binaryData>02000780</binaryData> </EventXML> </UserData> </Event> ---------------
So what? A lot of errors exist like this for the Perf data?
Now why my wife's computer doesn't have this and why it started on 11/16, that is the real question?
|
|
|
Post by warlock on Nov 21, 2013 15:45:54 GMT
Hi Irv. I think your running a Symantec suite, is your wife using the same thing. Just trying to find a difference.
|
|
|
Post by irvsp on Nov 21, 2013 16:10:05 GMT
Yes, we're both running Norton ISS 2014.
I'm not even SURE why MS DTC is running at all, the service is set to MANUAL?
|
|
|
Post by warlock on Nov 21, 2013 21:45:04 GMT
|
|
|
Post by irvsp on Nov 22, 2013 15:00:54 GMT
No, not getting that error and no Virtual machine involved?
There are TWO files called 'log' for this it seems. One in WINDOWS folder called DTCINSTALL.LOG and another in the application folder, WINDOWS\SYSTEM32\MSDTC called MSDTC.LOG.
The stop, reset, and start commands resets the app log MSDTC.LOG.
On boot today of course I got another entry in DTCINSTALL.LOG:
11-22-2013 09:09 : DTC Install error = 0, IN CILogWriteAsynch::Init, com\complus\dtc\dtc\log\logmgr\src\ilgwrta.cpp (173)
I now thing that ERROR is 0, that is NOT A PROBLEM. Although I can't find the path indicated above (wonders if it is hidden but I run as Administrator and can see all folders, just not able to get access to all?) it could have been a TEMP folder used for install? Why I see these NOW and what prompted the start of that log I have no ideas?
|
|
|
Post by GuiltySpark on Nov 22, 2013 15:17:31 GMT
I can't even find any info on ilgwrta.cpp that's the source find what that's associated with and you may get somewhere, but 'evidence' is pretty scarce in meaning.
|
|
|
Post by irvsp on Nov 22, 2013 18:18:33 GMT
You see that is what is bothering me. The LOG file, DTCINSTALL is real, but I've mostly seen it related too XP or a SERVER version. The other logs I see do have many .CPP file, however, this extension normally is for C++ source files?
Again, why did this log file get created, or at least the first entry was, on 11/16? Only thing installed was CCLeaner on the 15th? However, I might have tried a GAME from GAMEHOUSE and deleted it. My wife ran the same games though? I did run CCLeaner on the 15th though, twice, once it found a lot of stuff and then again to get some more out.
I think I'll try a MALWARE (AntiBytes) scanner and possibly put back what CCLeaner took out. See if either of those solve it.
I now suspect there was a setting for it in what CCLeaner took out and basically it enable the logging to that file. This was the first and ONLY time I ran it under 8.1. I looked at the .REG files it saved but didn't see ANYTHING relating to the above?
|
|
|
Post by irvsp on Nov 22, 2013 20:18:00 GMT
Checking stuff is turning into a big waste of time.
Looked at the CCLeaner .REG files, about 5K worth of bytes. Nothing unusual to me at least.
HIJACK HUNTER displayed nothing unusual.
SpyBotSearchAndDestroy, the few 'normal' adware stuff you get from surfing.
Malware Antibytes, a DEEP SCAN on a few terabytes is taking forever. 43 minutes so far and 29 objects, with probably another hour or so to go. Those are normally cookies and adware stuff.
Sooooo... I'll assume I'm malware free, the computer is working fine as far as I can tell.
If I want, I can RESTORE the drives prior to 11/15, but even if I do, I'll stand to lose some data, such as progress in some games, and files I forgot I added. If something that was an update, it will just happen again.
I think I might just RESTORE the CCLeaner .REG files. That would be the easiest.
|
|
|
Post by irvsp on Nov 22, 2013 20:26:46 GMT
Antibytes finished, and ALL problems are with the NIRSOFT UTILITIES...
So guess I am MALWARE clean?
|
|
|
Post by irvsp on Nov 22, 2013 22:26:01 GMT
Put back the .REG files and re-booted, nope, still get the log entry on boot.
Oh well, got to remove them now...
|
|