Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

google redirects and everything


  • Please log in to reply

#16
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,797 posts
  • MVP
I left off the /s at the end of the command so it didn't show me what was in:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Security

It should have said:
reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc /s > \junk.txt

The service depends on the existence of wscsvc.dll in the \windows\system32\ so check and see if you have it. What version number is it?

Have you rebooted since you did the merge?

I'm going on a trip tomorrow for about 10 days. Not sure when I'll have Internet access so replies will be delayed.
  • 0

Advertisements


#17
jokerbane

jokerbane

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
sorry i was away i redid it and this is what it says now and yes i did reboot after i did the merge


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc
Type REG_DWORD 0x20
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x1
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
DependOnService REG_MULTI_SZ RpcSs\0WinMgmt
ObjectName REG_SZ NT AUTHORITY\LocalService
RequiredPrivileges REG_MULTI_SZ SeChangeNotifyPrivilege\0SeImpersonatePrivilege
DelayedAutoStart REG_DWORD 0x1
FailureActions REG_BINARY 805101000000000000000000030000001400000001000000C0D4010001000000E09304000000000000000000
DisplayName REG_SZ @%SystemRoot%\System32\wscsvc.dll,-200
Description REG_SZ @%SystemRoot%\System32\wscsvc.dll,-201
ServiceSidType REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Enum
0 REG_SZ Root\LEGACY_WSCSVC\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Parameters
ServiceDll REG_EXPAND_SZ %SystemRoot%\System32\wscsvc.dll
ServiceDllUnloadOnStop REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Security
Security REG_BINARY 01001480C8000000D4000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020098000600000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014009D010200010100000000000504000000000014008D010200010100000000000506000000000014000001000001010000000000050B000000000028001500000001060000000000055000000049599D779156E555DCF4E20EA78BEBCA7B421356010100000000000512000000010100000000000512000000
  • 0

#18
jokerbane

jokerbane

    Member

  • Topic Starter
  • Member
  • PipPip
  • 11 posts
a couple of other things i have found i cant play video files i have windows media player installed but when i goto play a video i have on my pc it says no such interface supported and i am having trouble installing things even i cant even install adobe reader maybe i should just throw it out the window lol
  • 0

#19
RKinner

RKinner

    Malware Expert

  • Expert
  • 19,797 posts
  • MVP
Go into regedit and find HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc\Enum then right click on Enum and Delete.

That key should not be there and it refers to another key which does not exist or should not anyway. Look at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum and click on the + in front of Enum. Do you see LEGACY_WSCSVC? If so, right click on LEGACY_WSCSVC and Delete.

Then reboot and try

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after each line:

sc  start  wscsvc

command again. Does it still say the service does not exist?

For your Adobe Problem:
Could be your IE settings are too restrictive. Try Running IE, then Tools, Internet Options, Advanced. Find the RESET button and hit it then OK. Close IE. Delete the old download and restart IE then try a new download. Right click on the downloaded file and check Properties. Does it say anything about being BLOCKED? Unblock it if does and then try to install it by right clicking and Run As Administrator.

We can also try resetting the registry permissions to default.

Download SubInACL.exe

http://www.microsoft...&displaylang=en

By default it installs the tool in C:\Program Files\Windows Resource Kits\Tools\

Please allow it to do so.


Download and Save the attached file, reset.zip, right click on it and Extract all and copy the reset.cmd file to C:\Program Files\Windows Resource Kits\Tools\.
Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after each line:


cd  \Program Files\Windows Resource Kits\Tools

reset.cmd


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP