Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Windows Police Pro


  • Please log in to reply

#91
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
I entered the commands as indicated. After entering the last command (net start cryptsvc) I got the following message:
The Cryptsvc service is starting.
The Cryptsvc service could not be started.
A system error has occurred.
System error 193 has occurred.
*** is not a valid win32 application.


Editing the registry? No, I've not done it before. But I'm sure I could do it with a little guidance.

Thanks again!
  • 0

Advertisements


#92
noahdfear

noahdfear

    Malware Expert

  • Expert
  • 1,316 posts
  • MVP
Before we do any editing, first verify for me that the following files are present in C:\windows\system32

cryptsvc.dll
cryptui.dll
certcli.dll
  • 0

#93
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
Yes, I have all three of the above-mentioned files.
  • 0

#94
noahdfear

noahdfear

    Malware Expert

  • Expert
  • 1,316 posts
  • MVP
Click Start>Run type regedit and hit Enter to open the registry editor.
Click the + signs to expand the following path

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\System\CurrentControlSet\Enum\ROOT

Under the ROOT key there are several keys that begin with LEGACY_
See if there is one named LEGACY_RPCSS
If present, click it once to select it, then right click it and select Delete.
Close the registry editor and restart the computer.

Open a command window and type sc query cryptsvc
Let me know if it is stopped or running.
  • 0

#95
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
I navigated to the specified path. When I got to the ROOT key I did not see anything that began with LEGACY_. Instead, I saw the following:
MS_L2TPMINIPORT
MS_NDISWANIP
MS_PPOEMINIPORT
MS_PPTPMINIPORT
MS_PSCHEDMP
MS_PTIMINIPORT
  • 0

#96
noahdfear

noahdfear

    Malware Expert

  • Expert
  • 1,316 posts
  • MVP
Thanks - confirms that is not the problem.

Please download this file and run it on the affected computer.
Save the log created and post it here.
  • 0

#97
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
Here's the log you requested:
-------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is F48F-490D

Directory of C:\WINDOWS\ERDNT\cache

04/14/2008 07:00 AM 62,464 cryptsvc.dll
1 File(s) 62,464 bytes

Directory of C:\WINDOWS\system32

04/14/2008 07:00 AM 62,464 cryptsvc.dll
1 File(s) 62,464 bytes

Total Files Listed:
2 File(s) 124,928 bytes
0 Dir(s) 27,060,264,960 bytes free
  • 0

#98
noahdfear

noahdfear

    Malware Expert

  • Expert
  • 1,316 posts
  • MVP
Another file to download and run here then post the resulting log.

Reboot and open a command window then type the following and hit Enter.

sc query cryptsvc

Is the State running or stopped?
  • 0

#99
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
"State" is stopped. Below, you'll find the log file.
------------------------------------------------------
1 file(s) copied.

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC
NextInstance REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC\0000
Service REG_SZ CryptSvc
Legacy REG_DWORD 0x1
ConfigFlags REG_DWORD 0x20
Class REG_SZ LegacyDriver
ClassGUID REG_SZ {8ECC055D-047F-11D1-A537-0000F8753ED1}
DeviceDesc REG_SZ Cryptographic Services

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC\0000\Control
ActiveService REG_SZ CryptSvc
------------------------------------------------------------------------
  • 0

#100
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
Hope your holiday went well. Have you had a chance to see my last post?
  • 0

Advertisements


#101
noahdfear

noahdfear

    Malware Expert

  • Expert
  • 1,316 posts
  • MVP
Hi Jay,

Got busy with the holidays and frankly, forgot about you. My sincere apologies.

If your flash drive is big enough, I'd like to see if you can re-install Service Pack 3. The download package is just over 316 MB.

http://www.microsoft...;displaylang=en
  • 0

#102
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
I downloaded the service pack 3 and tried to install it both in safe mode (though there was a message saying that this was not recommended) and in regular mode. Here's the message I got for both attempts:

"Setup could not verify the integrity of the file Update.inf. Make sure the cryptographic service is running on this computer."

Thanks, and hope you had a good holiday.
  • 0

#103
noahdfear

noahdfear

    Malware Expert

  • Expert
  • 1,316 posts
  • MVP
Hi Jay,

Grrrr ..... should have guessed it would fail without cryptsvc running. :)

Please download and run AccessEnum from SysInternals.
When started, it should already be displaying C:\Windows - if not, please use the Directory button to browse to and select the C:\Windows folder.
Click Scan
When it completes, click Save and save the log.
Attach that log here.
  • 0

#104
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
OK, here's the log. I don't know if this is worth saying, but just FYI, I'm still getting the error box saying "The application failed to initialize properly (0xc000007b). Please click OK to terminate the program."

Hmm, I tried to attach the file, but apparently it's too large (greater than the max allowed of 500K). So I split the file up into two parts, hope that's OK. You'll see both text files attached.

Attached Files


  • 0

#105
jay_sohhn

jay_sohhn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 92 posts
And here's part two of the log

Attached Files


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP