While checking over my system health I ran into some errors that concern me in the Application event viewer of my windows system. It started on feb 27 2007 and has been happening ever since. Whenever the screen saver activates and boinc runs, it starts filling my log with "The COM+ Event System failed to fire the ConnectionLost method on subscription {xxxxxxxxxxxxxxxxxxx}" errors.

Searching for that subscription in the registry points to "Boinc Subscription to SENS ConnectionLost Event"

I have tried uninstalling boinc and rebooting my machine before reinstalling, but it still causes these errors. Any ideas? Attached is the most recent error from the app logs and the exported registry key.

This happens with both the newer version 5.8.15 and the older 5.2.13.

Event Type: Warning
Event Source: EventSystem
Event Category: (52)
Event ID: 4354
Date: 3/10/2007
Time: 11:42:14 AM
User: N/A
Computer: *****
Description:
The COM+ Event System failed to fire the ConnectionLost method on subscription {A8EDB33C-55FF-4D5D-965A-27769CC279AD}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The subscriber returned HRESULT 80010105.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


--------------------------------------
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscriptions\{A8EDB33C-55FF-4D5D-965A-27769CC279AD}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}]
"Active"=dword:00000001
"SubscriptionID"="{A8EDB33C-55FF-4D5D-965A-27769CC279AD}"
"SubscriptionName"="BOINC Subscription to SENS ConnectionLost Event"
"EventClassID"="{D5978620-5B9F-11D1-8DD2-00AA004ABD5E}"
"MethodName"="ConnectionLost"
"PerUser"=dword:00000000
"OwnerSID"="S-1-5-21-1801674531-573735546-839522115-1005"
"Enabled"=dword:ffffffff
"EventClassPartitionID"="{00000000-0000-0000-0000-000000000000}"
"EventClassApplicationID"="{00000000-0000-0000-0000-000000000000}"
"SubscriberPartitionID"="{00000000-0000-0000-0000-000000000000}"
"SubscriberApplicationID"="{00000000-0000-0000-0000-000000000000}"

Welcome to the club. I was ahead of you though. :)

And so far I haven't been able to knack it yet.
But what you can do so far to check if it fixes things for you is read My FAQ here.

Please keep this thread alive. Do tell what seemed to have worked for you, what really didn't.
I am trying to figure it out with Rom Walton on the other side.

Which Windows version do you use?
And can you check if it's happening to you as well when you aren't active on your computer?
(For me it only shows when I am not active on my computer).

---

I use windows XP SP2.

The only other thing that I think was that my zonealarm anti-spyware accidentally deleted a necessary .dll. In middle feb sometime it caught a trojan and deleted a dll which it thought was infected, but I can't seem to find the log enries for the treatment to even tell you which file. The trojan was 'Win32.Trojan.Downloader.banload.bjs' or something of the sort. It might have even been a false positive. Who knows. But I can't seem to find the name of the file it deleted.

It's the only help I can give for the moment.

Edit:
Here is the info on the file that zonealarm deleted. I found the archived logs and made it barf up the info. It happened 5 days before boinc started making com+ services cough up errors. I may not have been using boinc in that time as well. At least it's something:

ASW 2007/02/22 11:31:18 -6:00 GMT Win32.Trojan.Downloader.Banload.bjs Trojan Auto
File Name-C:WINDOWSsystem32wmv9vcm.dll
RegistryKey-HKEY_LOCAL_MACHINE-SOFTWARE-Microsoft-Windows NT-Current Version-drivers.desc-RegValueName-wmv9vcm.dll

It's apparently a video dll used by windows media player and windows messenger. But it wouldn't surprise me if windows COM+ had a hook in there either.

Just to follow up on Jord's post, Rom has asked for a few pieces of additional information.

And which version of IE is installed on your machine.

SENS.DLL is a windows component that has shipped with IE in the past, and it is responsible for maintaining the
{A8EDB33C-55FF-4D5D-965A-27769CC279AD} COM+ subscription updates.
What version of SENS.DLL is on your machine?
Was the System Event Notification service restarted right before the errors?

----- Rom

---

Kathryn :o)

I have Internet Exploiter V6.0.2900.2180.xpsp_sp2_gdr.050301-1519

Although I never use it for anything but windows update. I use firefox instead.
No windows updates have failed in the last 6 months, either. Nor did the error start occurring until at least two weeks after the last windows update.

windowssystem32Sens.dll version 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Last modified Wednesday, August 4, 2004.

No, it hadn't been restarted or reported any errors. The only regularly logged system errors are from Media Player and DCOM saying that my UPNP service is disabled. Which it is. Deliberately. And has been for over a year now since I don't trust Microsoft not to leave a semi-sized hole open for exploitation. There was a "The ASInsHelp service failed to start due to the following error: The system cannot find the file specified." error three days prior to the first appearance of the boinc issue, but that's all for system errors. The only system warnings are that every few days W32Time croaks on trying to sync the clock, yet on others it succeeds.

How common is ZoneAlarm among people getting this message? The reason I ask is that I had it (I have ZoneAlarm SS), then Ageless got it (I don't know if he has ZoneAlarm or not), then finally you got it, and you've got ZoneAlarm. That's at least two out of three.

I also disabled uPnP (so there's another 'at least two out of three').

(PS As far as I can see it's a harmless message. Perhaps only the people paranoid about security will be checking the event log, using zonealarm, and disabling things like uPnP! :-) ).

---

I'm not using Zone Alarm of any sort.
I've got a Sygate firewall solution.

---

No Zone Alarm for me.

One system is using Kaspersky Internet Security Suite and the other Avast/XP Firewall.

The only thing I've manually changed on either computer is to make MS let me know what updates are going to be installed and I choose which and when to install.

One computer has IE6 and the other IE7 (like I use them for anything... FF is my friend).

---

Kathryn :o)

triggered by this post I checked the eventlog too. I see the same messages in the eventlog, starting just after a reboot yesterday, and continued for almost an hour. then it stopped...

I do not use the screensaver, and running XPSP2

-----
Het COM+-gebeurtenissysteem is er niet in geslaagd de methode ConnectionLost op abonnement {A8EDB33C-55FF-4D5D-965A-27769CC279AD}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} te starten. De abonnee retourneert HRESULT 80010105.
------
24-3-2007 18:39:21||Starting BOINC client version 5.8.15 for windows_intelx86
24-3-2007 18:39:21||log flags: task, file_xfer, sched_ops
24-3-2007 18:39:21||Libraries: libcurl/7.16.0 OpenSSL/0.9.8a zlib/1.2.3
24-3-2007 18:39:21||Executing as a daemon
24-3-2007 18:39:21||Data directory: C:\Program Files\BOINC
24-3-2007 18:39:21||Processor: 2 AuthenticAMD AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ [x86 Family 15 Model 75 Stepping 2] [fpu tsc pae nx sse sse2 3dnow mmx]
24-3-2007 18:39:21||Memory: 959.48 MB physical, 2.26 GB virtual
24-3-2007 18:39:21||Disk: 113.27 GB total, 102.47 GB free