IIS6 W3SVC won't start

W3svc doesn't start at boot.
These four messages are in the logs (same as when I attempt to manually
start).

Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1063
Date: 1/31/2005
Time: 9:15:31 AM
User: N/A
Computer: APPLUS-WEB1
Description:
The World Wide Web Publishing Service encountered a failure requesting
metabase change notifications. The data field contains the error number.

For more information, see Help and Support Center at
<a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp." target="_blank">http://go.microsoft.com/fwlink/events.asp.</a>
Data:
0000: 02 40 00 80 .@.?


Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1036
Date: 1/31/2005
Time: 9:15:31 AM
User: N/A
Computer: APPLUS-WEB1
Description:
A failure occurred while initializing the configuration manager for the
World Wide Web Publishing Service. The data field contains the error number.

For more information, see Help and Support Center at
<a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp." target="_blank">http://go.microsoft.com/fwlink/events.asp.</a>
Data:
0000: 02 40 00 80 .@.?

Event Type: Error
Event Source: W3SVC
Event Category: None
Event ID: 1005
Date: 1/31/2005
Time: 9:15:31 AM
User: N/A
Computer: APPLUS-WEB1
Description:
The World Wide Web Publishing Service is exiting due to an error. The data
field contains the error number.

For more information, see Help and Support Center at
<a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp." target="_blank">http://go.microsoft.com/fwlink/events.asp.</a>
Data:
0000: 02 40 00 80 .@.?


And this is the last error
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7024
Date: 1/31/2005
Time: 9:15:32 AM
User: N/A
Computer: APPLUS-WEB1
Description:
The World Wide Web Publishing Service service terminated with
service-specific error 2147500034 (0x80004002).

For more information, see Help and Support Center at
<a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp." target="_blank">http://go.microsoft.com/fwlink/events.asp.</a>


"Ken Schaefer" wrote:

 > Can you please post the full event log entries you are seeing. Event ID,
 > Source, Description etc
 >
 > Cheers
 > Ken
 >
 > "Andrew Jones" <Andrew Jones RemoveThis @discussions.microsoft.com> wrote in message
 > news:F6256F5B-D17D-47AD-8464-5255ADD209B4@microsoft.com...
  > > When system starts I get 3 W3SVC errors, 1063, 1036, 1005
  > > SMTP does starts
  > > When I try and start it starts and then immediatey fails
  > > error 2147500034 (ID 7024)
  > >
  > > I removed an old sharepoint trial that wasn't being used since it seemed a
  > > possible culprit from searches
  > > I have removed/reinstalled IIS but I get the same thing
  > >
  > > Done some searching and haven't found anything that works.
 >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS6 W3SVC won't start 

Hi Andrew,

Can you please tell us if one or more of these registry keys does not
exists in your registry:

HKEY_CLASSES_ROOT\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}
HKEY_CLASSES_ROOT\Interface\{B196B285-BAB4-101A-B69C-00AA00341D07}
HKEY_CLASSES_ROOT\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}
HKEY_CLASSES_ROOT\Interface\{B196B287-BAB4-101A-B69C-00AA00341D07}



--
Regards,
Kristofer Gafvert
<a style='text-decoration: underline;' href="http://www.gafvert.info" target="_blank">www.gafvert.info</a> - My Articles and help
<a style='text-decoration: underline;' href="http://www.ilopia.com" target="_blank">www.ilopia.com</a>


Andrew Jones wrote:

 > W3svc doesn't start at boot.
 > These four messages are in the logs (same as when I attempt to manually
 > start).
 >
 > Event Type: Error
 > Event Source: W3SVC
 > Event Category: None
 > Event ID: 1063
 > Date: 1/31/2005
 > Time: 9:15:31 AM
 > User: N/A
 > Computer: APPLUS-WEB1
 > Description:
 > The World Wide Web Publishing Service encountered a failure requesting
 > metabase change notifications. The data field contains the error number.
 >
 > For more information, see Help and Support Center at
<font color=purple> > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
 > Data:
 > 0000: 02 40 00 80 .@.?
 >
 >
 > Event Type: Error
 > Event Source: W3SVC
 > Event Category: None
 > Event ID: 1036
 > Date: 1/31/2005
 > Time: 9:15:31 AM
 > User: N/A
 > Computer: APPLUS-WEB1
 > Description:
 > A failure occurred while initializing the configuration manager for the
 > World Wide Web Publishing Service. The data field contains the error
number.
 >
 > For more information, see Help and Support Center at
<font color=purple> > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
 > Data:
 > 0000: 02 40 00 80 .@.?
 >
 > Event Type: Error
 > Event Source: W3SVC
 > Event Category: None
 > Event ID: 1005
 > Date: 1/31/2005
 > Time: 9:15:31 AM
 > User: N/A
 > Computer: APPLUS-WEB1
 > Description:
 > The World Wide Web Publishing Service is exiting due to an error. The
data
 > field contains the error number.
 >
 > For more information, see Help and Support Center at
<font color=purple> > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
 > Data:
 > 0000: 02 40 00 80 .@.?
 >
 >
 > And this is the last error
 > Event Type: Error
 > Event Source: Service Control Manager
 > Event Category: None
 > Event ID: 7024
 > Date: 1/31/2005
 > Time: 9:15:32 AM
 > User: N/A
 > Computer: APPLUS-WEB1
 > Description:
 > The World Wide Web Publishing Service service terminated with
 > service-specific error 2147500034 (0x80004002).
 >
 > For more information, see Help and Support Center at
<font color=purple> > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
 >
 >
 > "Ken Schaefer" wrote:
 >
  > > Can you please post the full event log entries you are seeing. Event
ID,
  > > Source, Description etc
  > >
  > > Cheers
  > > Ken
  > >
  > > "Andrew Jones" <Andrew Jones RemoveThis @discussions.microsoft.com> wrote in
message
  > > news:F6256F5B-D17D-47AD-8464-5255ADD209B4@microsoft.com...
   > > > When system starts I get 3 W3SVC errors, 1063, 1036, 1005
   > > > SMTP does starts
   > > > When I try and start it starts and then immediatey fails
   > > > error 2147500034 (ID 7024)
   > > >
   > > > I removed an old sharepoint trial that wasn't being used since it
seemed a
   > > > possible culprit from searches
   > > > I have removed/reinstalled IIS but I get the same thing
   > > >
   > > > Done some searching and haven't found anything that works.
  > >
  > >
  > ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS6 W3SVC won't start 

Hello Gentlemen,

I am facing the exact same issue with a fresh install of a Windows 2003 Web
Edition system which was fresh out of the box. This box has no other apps,
just a clean vanilla install. I do have the four keys that you mention below
in that path, and I have also looked at the following KB articles but no
help:
KB 884872
<a style='text-decoration: underline;' href="http://support.microsoft.com/kb/234429/EN-US" target="_blank">http://support.microsoft.com/kb/234429/EN-US</a>

One thing I did notice was that I did notice in the metabase.xml file was
that the nodes 'w3svc' and 'w3svc/1' do not exist and the file size is 2kb.

Would appreciate any other ideas that you can shed on this and if I do need
to reinstall IIS what would be the cleanest possible way to make sure any/all
corrupted files are removed.

Please feel free cc the following email address in your reply to this post,
hsidhu.TakeThisOut@chicagogsb.edu

Thanks,
Harpreet

"Kristofer Gafvert" wrote:

 > Hi Andrew,
 >
 > Can you please tell us if one or more of these registry keys does not
 > exists in your registry:
 >
 > HKEY_CLASSES_ROOT\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}
 > HKEY_CLASSES_ROOT\Interface\{B196B285-BAB4-101A-B69C-00AA00341D07}
 > HKEY_CLASSES_ROOT\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}
 > HKEY_CLASSES_ROOT\Interface\{B196B287-BAB4-101A-B69C-00AA00341D07}
 >
 >
 >
 > --
 > Regards,
 > Kristofer Gafvert
 > <a style='text-decoration: underline;' href="http://www.gafvert.info" target="_blank">www.gafvert.info</a> - My Articles and help
<font color=purple> > <a style='text-decoration: underline;' href="http://www.ilopia.com</font" target="_blank">www.ilopia.com</font</a>>
 >
 >
 > Andrew Jones wrote:
 >
  > > W3svc doesn't start at boot.
  > > These four messages are in the logs (same as when I attempt to manually
  > > start).
  > >
  > > Event Type: Error
  > > Event Source: W3SVC
  > > Event Category: None
  > > Event ID: 1063
  > > Date: 1/31/2005
  > > Time: 9:15:31 AM
  > > User: N/A
  > > Computer: APPLUS-WEB1
  > > Description:
  > > The World Wide Web Publishing Service encountered a failure requesting
  > > metabase change notifications. The data field contains the error number.
  > >
  > > For more information, see Help and Support Center at
<font color=green>  > > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
  > > Data:
  > > 0000: 02 40 00 80 .@.?
  > >
  > >
  > > Event Type: Error
  > > Event Source: W3SVC
  > > Event Category: None
  > > Event ID: 1036
  > > Date: 1/31/2005
  > > Time: 9:15:31 AM
  > > User: N/A
  > > Computer: APPLUS-WEB1
  > > Description:
  > > A failure occurred while initializing the configuration manager for the
  > > World Wide Web Publishing Service. The data field contains the error
 > number.
  > >
  > > For more information, see Help and Support Center at
<font color=green>  > > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
  > > Data:
  > > 0000: 02 40 00 80 .@.?
  > >
  > > Event Type: Error
  > > Event Source: W3SVC
  > > Event Category: None
  > > Event ID: 1005
  > > Date: 1/31/2005
  > > Time: 9:15:31 AM
  > > User: N/A
  > > Computer: APPLUS-WEB1
  > > Description:
  > > The World Wide Web Publishing Service is exiting due to an error. The
 > data
  > > field contains the error number.
  > >
  > > For more information, see Help and Support Center at
<font color=green>  > > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
  > > Data:
  > > 0000: 02 40 00 80 .@.?
  > >
  > >
  > > And this is the last error
  > > Event Type: Error
  > > Event Source: Service Control Manager
  > > Event Category: None
  > > Event ID: 7024
  > > Date: 1/31/2005
  > > Time: 9:15:32 AM
  > > User: N/A
  > > Computer: APPLUS-WEB1
  > > Description:
  > > The World Wide Web Publishing Service service terminated with
  > > service-specific error 2147500034 (0x80004002).
  > >
  > > For more information, see Help and Support Center at
<font color=green>  > > <a style='text-decoration: underline;' href="http://go.microsoft.com/fwlink/events.asp.</font" target="_blank">http://go.microsoft.com/fwlink/events.asp.</font</a>>
  > >
  > >
  > > "Ken Schaefer" wrote:
  > >
   > > > Can you please post the full event log entries you are seeing. Event
 > ID,
   > > > Source, Description etc
   > > >
   > > > Cheers
   > > > Ken
   > > >
   > > > "Andrew Jones" <Andrew Jones.TakeThisOut@discussions.microsoft.com> wrote in
 > message
   > > > news:F6256F5B-D17D-47AD-8464-5255ADD209B4@microsoft.com...
   > > > > When system starts I get 3 W3SVC errors, 1063, 1036, 1005
   > > > > SMTP does starts
   > > > > When I try and start it starts and then immediatey fails
   > > > > error 2147500034 (ID 7024)
   > > > >
   > > > > I removed an old sharepoint trial that wasn't being used since it
 > seemed a
   > > > > possible culprit from searches
   > > > > I have removed/reinstalled IIS but I get the same thing
   > > > >
   > > > > Done some searching and haven't found anything that works.
   > > >
   > > >
   > > >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS6 W3SVC won't start 

And I got the same problem.

"Andrew Jones" wrote:

 > When system starts I get 3 W3SVC errors, 1063, 1036, 1005
 > SMTP does starts
 > When I try and start it starts and then immediatey fails
 > error 2147500034 (ID 7024)
 >
 > I removed an old sharepoint trial that wasn't being used since it seemed a
 > possible culprit from searches
 > I have removed/reinstalled IIS but I get the same thing
 >
 > Done some searching and haven't found anything that works.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS6 W3SVC won't start 

I have the same problem and have been working to resolve it for 3 weeks now.
I thought I had it licked by using KB Q278381. Norton Antivirus had
identified the Backdoor.HackDefender virus. I ran Microsoft's new Malicious
Software Removal Tool and it too found HackDefender but indicated that it had
cleaned it. A reboot and IIS began working. About 5 days later, it stopped
again. Re-ran the removal tool, rebooted, and no luck.


"Andrew Jones" wrote:

 > When system starts I get 3 W3SVC errors, 1063, 1036, 1005
 > SMTP does starts
 > When I try and start it starts and then immediatey fails
 > error 2147500034 (ID 7024)
 >
 > I removed an old sharepoint trial that wasn't being used since it seemed a
 > possible culprit from searches
 > I have removed/reinstalled IIS but I get the same thing
 >
 > Done some searching and haven't found anything that works.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS6 W3SVC won't start 

Geoff,

While you are diagnosing the problem you might want to
take advantage of our server restarter, ReJuvin8. It's
free for the first 15-days. That's enough for some.
Its all software, you can download and use it today.

It monitors both websites and processes generally. It
sends out phone and e-mail alerts when things hang
up. It can also restart and optionally re-boot your
server. Also has neat HTML graphic status views.


For ReJuvin8, Version 4.1 of June 2005:
<a style='text-decoration: underline;' href="http://www.rejuvin8.net?ac=ch1" target="_blank">http://www.rejuvin8.net?ac=ch1</a>




Also, see it, with ratings, at
<a style='text-decoration: underline;' href="http://www.hotscripts.com/Detailed/29029.html" target="_blank">http://www.hotscripts.com/Detailed/29029.html</a>




==========================================


"geoff" <geoff.RemoveThis@discussions.microsoft.com> wrote in message
news:D20732BF-527F-4585-B685-96FF4EB18EF7@microsoft.com...
 > I have the same problem and have been working to resolve it for 3 weeks
now.
 > I thought I had it licked by using KB Q278381. Norton Antivirus had
 > identified the Backdoor.HackDefender virus. I ran Microsoft's new
Malicious
 > Software Removal Tool and it too found HackDefender but indicated that it
had
 > cleaned it. A reboot and IIS began working. About 5 days later, it
stopped
 > again. Re-ran the removal tool, rebooted, and no luck.
 >
 >
 > "Andrew Jones" wrote:
 >
  > > When system starts I get 3 W3SVC errors, 1063, 1036, 1005
  > > SMTP does starts
  > > When I try and start it starts and then immediatey fails
  > > error 2147500034 (ID 7024)
  > >
  > > I removed an old sharepoint trial that wasn't being used since it seemed
a
  > > possible culprit from searches
  > > I have removed/reinstalled IIS but I get the same thing
  > >
  > > Done some searching and haven't found anything that works.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS6 W3SVC won't start