Re: messenger service

From: Alan Illeman (illemann_at_surfbest.net)
Date: 03/28/04


Date: Sun, 28 Mar 2004 06:19:17 -0500

Yes I agree. Maybe someone can help with regard to Kerio Personal
Firewall 4 with regard to this problem. I'm also a little confused with
setting up the 'packet filter' rules.

The other day I updated Internet Explorer to v.6 and couldn't get it to
work at all - clicking on its icon gave a permission denied message. I
eventually found that is was one of my settings in Kerio, that was
responsible. I'm still puzzled as to why.

I played around with the settings so much, to solve the above problem,
that this morning (yes it's early - my arthritis is playing up) that I
decided
to reset all the Kerio settings to 'my last good configuration' as per my
notes - but, surprise, surprise - after rebooting, I could apparently logon
only to find the logon dialog box reappearing, a few minutes later - in
a seemingly endless loop, with the only exit: to shutdown. Fortunately
I was able to edit Component Services from Safe Mode, and stop the
automatic starting of Kerio, to login.

Anyway, here are a few of warnings and error messages that I was
getting (Event Viewer) when IE6 was being stifled by Kerio:

----------------------------------------------------------------------
Updated Internet Explorer Browser to version 6

Outlook express working (is version 6)

Clicking on Internet Explorer:
"Access to the specific device, path, or file is denied"

Event Viewer : Application
==========================

(12 warnings from 3/27/04 5:58:20 to 8:14:44)
(----- == computer name)

Event Type: Warning
Event Source: EventSystem
Event Category: Firing Agent
Event ID: 4100
Date: 3/27/2004
Time: 8:14:44 AM
User: N/A
Computer: -----
Description:
The COM+ Event System failed to create an instance of
the subscriber {6295DF2D-35EE-11D1-8707-00C04FD93327}.
CoCreateInstanceEx returned HRESULT 80070005.

Event Viewer : System
=====================

(60 errors from 3/26/04 6:07:41 to 3/27/04 8:50:30)

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10001
Date: 3/26/2004
Time: 5:58:20 AM
User: NT AUTHORITY\SYSTEM
Computer: -----
Description:
Unable to start a DCOM Server:
{6295DF2D-35EE-11D1-8707-00C04FD93327} as /.
The error:"Access is denied. "
Happened while starting this command:
mobsync.exe -Embedding

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10000
Date: 3/26/2004
Time: 8:49:12 AM
User: -----\Administrator
Computer: -----
Description:
Unable to start a DCOM Server:
{D45FD2FC-5C6E-11D1-9EC1-00C04FD7081F}.
The error: "Access is denied. "
Happened while starting this command:
C:\WINNT\msagent\AgentSvr.exe -Embedding

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10000
Date: 3/26/2004
Time: 9:28:28 AM
User: -----\Administrator
Computer: -----
Description:
Unable to start a DCOM Server:
{0002DF01-0000-0000-C000-000000000046}.
The error: "Access is denied. "
Happened while starting this command:
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding

----------------------------------------------------------------------

Can you tell me what the "-Embedding" parameter does?
I'm puzzled that there is a DCOM error, as I'm not on a network?

It certaily seems that updating to v.6 was 'good thing to do' as
there is not now, anthing like the number of intrusions that I was
getting before.

Alan

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:e2vBugBFEHA.240@tk2msftngp13.phx.gbl...
> By default, any decent firewall should block *all* inbound traffic, and
> allow you to configure/control outbound traffic as well...
>
> Alan Illeman wrote:
> > Yes I was. I'm using Kerio Personal Firewall (licenced copy) and
> > couldn't find
> > any other way to stop it, but there again, I'm a little new to
> > firewalling. Up until
> > a few weeks ago, was using Win95 since its inception - and never had a
> > problem with viruses.
> >
> > "Lanwench [MVP - Exchange]"
> > <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> > message news:ORmFIwzEEHA.1376@TK2MSFTNGP10.phx.gbl...
> >> Then you probably aren't getting messenger spam ;-)
> >>
> >> Alan Illeman wrote:
> >>> Yes, I should have said that I have a firewall.
> >>>
> >>> "Lanwench [MVP - Exchange]"
> >>> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> >>> message news:#VxlkXtEEHA.2600@TK2MSFTNGP09.phx.gbl...
> >>>> ....this doesn't cure the underlying problem, which is that this
> >>>> computer has ports open from the Internet. A firewall is the
> >>>> answer.
> >>>>
> >>>> Alan Illeman wrote:
> >>>>> "tim reeves" <anonymous@discussions.microsoft.com> wrote in
> >>>>> message news:132f501c41266$1a4e4dc0$a501280a@phx.gbl...
> >>>>>> How can I protect myself against these messenger service
> >>>>>> popups? I have popup protection through AOL but that
> >>>>>> doesn't halt the messenger service stuff. They're a pain.
> >>>>>> Thanks and God Bless.
> >>>>>
> >>>>> Control Panel -> Administrative Tools -> Component Services
> >>>>> Double-click Messenger
> >>>>>
> >>>>> Look at Dependencies, i.e. no programs depend upon it.
> >>>>> Click General, Click 'Stop'
> >>>>> Select 'Startup type' as 'disabled'
>
>



Relevant Pages

  • Re: Lexmark Z35 in an XPSP2 home network using WinME clients
    ... (as well as other suggestiones including cleanly removing Lexmark drivers). ... > It's an issue with the DCOM communication interface. ... We did some investigation with DCOMCNFG and noticed that we ... the allow and deny settings for Remote Access were ...
    (microsoft.public.windowsxp.print_fax)
  • Re: Urgent:- Reading event log files using Win32_NTLogevent class
    ... The problem that you are have is with the connection string. ... following values change for different OSs and if the settings for Dcom ... Very few change dcom and com settings. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Sygate Personal Firewall Pro 5.0, Slow outbound bandwidth
    ... In your Intel NIC ... If you do not have this settings then you will need to upgrade to the ... Kerio 3 a bit better for its leak prevention. ... Looking forward to Kerio 3 once it's out of beta, ...
    (comp.security.firewalls)
  • Re: DCOM Identity: This User
    ... settings are consulted, the activation request needs to come ... However, unless DCOM is globally ... security and obtain a logon token. ... COM Security Default Launch Permissions: ...
    (microsoft.public.win32.programmer.ole)
  • Re: DCOM Identity: This User
    ... settings are consulted, the activation request needs to come ... However, unless DCOM is globally ... security and obtain a logon token. ... COM Security Default Launch Permissions: ...
    (microsoft.public.vb.general.discussion)