Can Autoruns or Disabled Services Cause Common DCOM Server Event Logs?

[Brenji25]

There's some DCOM Server errors in the System Event Log that asked about in the forum. Could these because by Autoruns or by disabling a lot of services with something like Black Viper's script? Is anyone else with these errors locking down their system at all?


--------------------------------------------------------------------------------------------------------


These two get posted a lot and they're pretty core Components. I'm running as a Standard User.


System Log

Event ID: 10000


Unable to start a DCOM Server: {0358B920-0AC7-461F-98F4-58E32CD89148}. The error:

"2147942767"

Happened while starting this command:

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}


{0358B920-0AC7-461F-98F4-58E32CD89148} = Wininet Cache task object

{3EB3C877-1F16-487C-9050-104DBCD66683} = WinInetCacheServer


--------------------------------------------------------------------------------------------------------


System Log

Event ID 10016


The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}

and APPID

{15C20B67-12E7-4BB6-92BB-7AFF07997402}

to the user COFFEELAKE\jc501 SID (S-1-5-21-326413882-3043305194-3057340273-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.



2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} = PerAppRuntimeBroker

{15C20B67-12E7-4BB6-92BB-7AFF07997402} = PerAppRuntimeBroker

Continue reading...