Event Errors 7000, 7023 and 5009

[moro2003]

In Event Vuewer>System after each restart under Source appers triplyctaed Event Error 7000 and another , only for one time- Event Error 7023.
In Applications under Source>Thrue Vector Sevice- appear Event Error 5009.
Don't know what is the reason for this and how to solve it.
MS instractions are insufficient and didn't help me at all
to fix this errors, please help.

 

[bcastner]

True Vector is the Zone Alarm service engine. The best thing to do is to:

. be certain no other firewall is running. If so, disable the other firewall and test.

. if no joy, download the newest update. Remove Zone Alarm from your system and update.

 

[Tels]

Go to

http://www.eventid.net

- a superb resource for this kind of question, try there and if this does not answer your question, come back to us.

Best Regards

Terry-Lee Blay
MCP, A+, Net+, Server+, APS, IBM Thinkpads/Portables

 

[moro2003]

I have dual boot -XP Pro SP2 and Windows 98SE.Try to solve the probs but no success.
1/ For Event Error ID 5009 disabled Widows firewall ,remain only Zone Alarm will reinstall prog leter, but seems that this is not so harmfull.
2/Error ID 7000
-The ScriptBlocker Service failed to start due to the following error:
the system cannot find the path specified
-The SYMTDI Service failed to start due to the following error:
The service cannot find the file specified
-The ICProg Service failed to star due to he following error:
The System cannot find the file specified
3/ Error ID 7023-The Computer Browser service terminated with the following error:
This operation returned because the timeout period expired
For all of them the source is Service Control Manager.
If this more specified details can help to find solution to fix this errors will be great if not, then....

 

[moro2003]

True Vector sorted ,according bcastner advice.
Other ID still appears i.e. ID 7000 and 7023.Please advice what should I do.
Thanks,

 

[moro2003]

Found that SYMTDI is in connection with Symantec and is located in system32 folder.
There I found three files, one exe and two dll file all of them pertaining to Symantec.
I deleted all keys in registry from Symantec and Norton AV, bacause I uninstalled Norton from my PC.
PLease let me know is it safe to delete those files from C:\Windows\system32 and Error for this service will stop to appear, or not.
Anotrher one is IC prog what I have deleted before from my PC and also canceled all entries in registry base , the search function cannot find any file from this program, but Error ID 7000 continuing appear for this program.
Finally regarding ScriptBlocking Service on Local Computer, after click on START the service receiving a message:
Error 3 : The system cannot find the path specified.
Any advice what i can do, please.....

 

[bcastner]

Go to the Symantec site and find and download navclean.exe. This will remove the registry entries and odd files for you.

Watch out for this issue:

http://www.bl.com/moshe/text/quiddities/norton_errors.html

 

[linney]

Event ID: 7023

The Computer Browser service terminated with the following error:
This operation returned because the timeout period expired.

Make sure the Security Center and the Windows Firewall Services are Started and set to Automatic as the Computer Browser Service requires them running.

To turn off the Windows Firewall use the Control Panel Firewall Icon and switch the Firewall off via that, but only if you have some other firewall in place.


ScriptBlocker Service
SYMTDI Service
ICProg Service

Launch Recovery Console and run the "Listsvc" command and see if you can see these services being run.
You can then use the "Disable" if you do not want them to run.

HOW TO: Install and Use the Recovery Console for Windows XP (Q307654)

http://support.microsoft.com/support/kb/articles/q307/6/54.asp

Unable to remove program
thread779-436044

 

[moro2003]

@bcastner, found only Rnav.exe -navclean.exe cannot find.
Will try to remove residues of Symantec a7 anorton using this tool.Checked the Registry- nothing found.Asking again is it safe to delete file SYMITDRg from System32 folder manualy.
@linney will try with Recovery Console.I have XP SP2 CD and I use it before for some repairs of XP partition.
If I do the repair again I know that all my programs and files will remain, but what about MS patches and updates-they will be lost or not ?
Thanks very much for your assistance and help.

NB. Are those Error wornigs harmful and dangerous for PC fuctionality or can be tolerated.

 

[bcastner]

If you have uninstalled NAV, then you can delete any of its leftover software. Just be sure there is no registry reference in a RUN key. Use MSCONFIG to check.

RNAV sounds fine, run it.

A repair install will lose hotfixes and service packs, but not user settings or data. Expect to spend some time at Windows Update.

 

[moro2003]

Yes Ser-Norton Removing Tool do the job-Rnav.exe and Rnis.exe-run both of them and one problem is sorted-this regarding SYMTDI.
Remain stil two-IC-Prog Driver Service -the system cannot find the file specified- because I uninstaled this program before due incompatibility with XP,but driver or IC-Prog Driver Service is somewhere in PC and I am unable to delete or desable it.Try to install and uninstal this program,but Error appears again.

The last problem-ScripBlocking Service is only one which seems to be serious and will be fine if we can do something without XP reinstall.

 

[bcastner]

Start, Run, services.msc

Find both services.
Stop them.
Set there startup state to disabled.

Then use the SC.EXE native command to remove the services.

 

[moro2003]

Found only ScriptBlocking and desabled the service using "services.msc"
IC-Prog Driver Service cannot find.Try also msconfig.exe, but this service is invisible.
Open SC.EXE native command to remove ScriptBlocking Service , but if press any key window disapears.

 

[bcastner]

Start, Run, CMD

sc

 

[bcastner]

or,
sc /?

 

[linney]

How to Disable a Service or Device that Prevents Windows from Starting

http://support.microsoft.com/default.aspx?scid=kb;en-us;310602&FR=1&PA=1&SD=HSCH

 

[moro2003]

Using RegCool (Kurt Zimmermann) found entries in Registry for famous IC-Prog and deleted all of them-no more error message in Event Vuewer,System.
I have one question more regarding ScripBlocking Service-is this service important for safe and regular PC work, or
can be stoped without consequnces.
In case that ScriptBlocking Service is esential and important can you please send me right keys or values for the Registry- if this is a reason why the Service cannot find specified path to be started.
Guess that Registry "hole" is guilty.....

 

[linney]

Services location in Registry. Use the Export function to backup anything before you delete any keys.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services





Here is an interesting listing and rare listing of the order in which Run keys are processed by the registry during startup and logon. Quoted from a since vanished article from this site

http://is-it-true.org/nt/xp/atips/atips26.shtml

RunServiceOnce subkey : designed to start service programs before user logs on and before other registry subkeys start.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce registry key

RunServices subkey : loads immediately after RunServicesOnce and before user logon.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices registry key

Run subkey : The Run subkey in HKLM runs immediately before the Run subkey in HKCU.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run registry key

RunOnce subkey : primarily used by Setup programs. The HKLM subkey version of RunOnce runs programs immediately after logon and before other registry Run entries. The HKCU subkey version of RunOnce runs programs after Run subkeys and after the Startup folder.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce registry key XP also has RunOnceEx:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx registry key

RunOnce\Setup subkey : specifies programs to run after the user logs on

Explorer\Run subkey :
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run registry key

Userinit subkey : there is an entry for userinit.exe but subkey can accept multiple comma- separated values. Can't find where program starting? Look here.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit registry key
load subkey :
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\load registry key

All Users Startup folder : very common place to find autostart programs for whoever logs on
Documents and Settings\All Users\Start Menu\Programs\Startup folder

Startup folder : the most common location for programs to automatically boot from
Documents and Settings\user\Start Menu\Programs\Startup folder If you migrated from NT, the path is Profiles\user\Start Menu\Programs\Startup

 

[moro2003]

Thanks linney ,very usefull hints.
My question was about importance of ScriptBlocking Service for the safe and optimal OS operation.Only this one is problematic now, as I told before because the system cannot find the path when Start up.
Maybe we can concentrate our efforts to fix this problem.

 

[bcastner]

A typical description:

Script blocking Service
Script Blocking stops script-based viruses. A script is a list of instructions that can be executed without user interaction. Scripts can be opened with text editors or word processing programs, so they are very easy to change. Script Blocking detects Visual Basic and Java script-based viruses without the need for specific virus definitions. It monitors the scripts for virus-like behavior and alerts you if it is found. Installed by Norton Anti Virus.
Recommend: Automatic


For any service, manage the beast through the service manager applet. Start, Run, services.msc

Stop the service.
Set its startup to disabled.