How to correct: InverseLaunchIPI error?

Hi All: Working on a friend's computer, clean up, had to delete a lot of virus, spyware, adware, etc. All clean now I think, but on start up, getting this error in "event viewer, applications ": Would like to try and fix it if possible.


Event Type: Error
Event Source: InverseLaunchIPI
Event Category: None
Event ID: 0
Date: 1/14/2005
Time: 9:56:16 AM
User: N/A
Computer: DFDSLQ31
Description:
The description for Event ID ( 0 ) in Source ( InverseLaunchIPI ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: InverseLaunchIPI error: 6, SetServiceStatus.

Don't understand fix instruction: use the /AUXSOURCE=flag

Also, immediately following this error message, I get these two warnings:

1.
Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1003
Date: 1/14/2005
Time: 9:56:40 AM
User: N/A
Computer: DFDSLQ31
Description:
TraceFileName parameter not located in registry; Default trace file used is .

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

2.Event Type: Warning
Event Source: EvntAgnt
Event Category: None
Event ID: 1015
Date: 1/14/2005
Time: 9:56:41 AM
User: N/A
Computer: DFDSLQ31
Description:
TraceLevel parameter not located in registry; Default trace level used is 32.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Help and support center says that these last two don't need to be fixed, but fix is adding registry entry. Problem I have is when I go to reg to add value, I have no idea which of the values displayed on right click they are talking about, so I'll just leave these last two alone.

If anybody can help me with the first error message, I would greatly appreciate it. I don't want to give him back his machine with error messages in event viewer.

Thanks in advance for any help.

Martin

 

Read these links to threads and see if it's of any use to you. Verizon DSL may be involved it seems although my gut feeling says you may still have some gremlin in there that has been orphaned by your clean-up efforts. Maybe try some other AV proggy to cover all bases. Check the event viewer back before you cleaned the drive to verify that thought. Might not be related.

http://groups-beta.google.com/group..._doneTitle=Back+to+Search&&d#fd59b9e14b433953

http://groups-beta.google.com/group..._doneTitle=Back+to+Search&&d#2f1e6552e875eeaf

Good luck.

 

Thanks Dude, any idea what this service is for or does? I hate to just disable it, not knowing what I'm disabling. I'm on my machine now, will go to his and see if any Verizon programs loaded.

Also, I'm still curious on how to use Auxsource=

Thanks again for the info.

Martin

 

No, I think that's an area of my most ignorance too.

BTW, check for the presence of ipinsight on that drive because it's a gremlin that may be causing this error. Please see:

http://sarc.com/avcenter/venc/data/adware.ipinsight.html

 

Hey Dude, thanks for the information. None of the programs or reg entries cited by Symantic were on the machine. But, poking around, it appears that it is some program installed by his ISP. It has a .exe file, but when clicked, the hard drive thrashes around and then nothing. So, soon as I talk to him about it I'll see what his ISP has to say.

Thanks again, but if anybody knows anything about that AUXSOURCE= deal, please chime in.

Martin

 

Martin - the first event is telling you the error is being generated by a program the PC does not have loaded (or maybe in this case, not loaded properly). Usually seen when an event is being reported based on an error from another PC on the network that does have the program. The event log details are normally pulled from a .dll file associated with the program.

The /AUXSOURCE= flag simply forces your PC to look to the other PC for details. This is usualy done via the Microsoft Management Console (MMC) so you'd have to figure out which PC actually has the app that spawned the error and then run a command like
mmc /a eventvwr.msc /auxsource=<server> where you would identify server (the other PC) by IP address, DNS name, or NetBIOS name

For example, I have two PCs at home. Mine is named NEWTVAIL and uses 192.168.1.101 and the other is named JAN using 192.168.1.100. If I wanted to see event log details on an error from an app that Jan has but I do not,
mmc /a eventvwr.msc /auxsource=192.168.1.100
would force that and give me details.

Note that while this usually works, there are items it cannot report via /auxsource= from a remote PC.

 

Hey Newt, thanks, very clearly explained and very understandable. But, of course, you have a knack for that.

After digging around, I'm beginning to believe that the error is related to something that reports back to his ISP, may be some sort of validation/authentication program. Since, for now at least, since his computer is at my house and not connected to his ISP, no way to discover if the conclusion I reached is correct.

Your explanation of the at hand computer reporting an error loading a program that resides on another PC on a network seems to fit this situation. Especially since the computer has never been networked, except through the ISP.

So, I won't pursue this any further until he takes it home and connects to his ISP. Then we will see if the error persists.

Thanks again for your input. I'll be saving a copy of that post for future reference.

Take care,

Martin