Jump to content

Cannot enable service center in windows xp3.


Recommended Posts

A routine scan using free version of MBAM found and deleted trojan.agent one week ago. An immediate check on my firewall got the following response (error): "the security center is currently unavailable because the security center service has not started or was stopped". I didnt tamper with the firewall at all, and I have not been able to enable the firewall since a week now. Windows Update is OK. Have tried worthwhile suggestions offered by Microsoft MVP's related to wscfix and wscsvc, but to no avail. The computer functions normally otherwise, but have to disconnect from the internet most of the time for obvious reasons. Would greatly appreciate some advice from this respected forum.

Many thanks in advance.

Sweeneyj7th

Link to post
Share on other sites

download Farbar Service Scanner from the following link:

http://www.bleepingcomputer.com/download/farbar-service-scanner/dl/62/ and run it on the computer with the issue.

Make sure the following options are checked:

  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center/Action Center
  • Windows Update
  • Windows Defender
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

Kevin

Link to post
Share on other sites

Thanks for taking my case Kevin.

Here is the Farbar report:

Ran by HP_Administrator (administrator) on 16-12-2012 at 16:01:33

Running from "C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\4BW0YEZS"

Microsoft Windows XP Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************

Internet Services:

============

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo IP is accessible.

Yahoo.com is accessible.

Windows Firewall:

=============

sharedaccess Service is not running. Checking service configuration:

Checking Start type: ATTENTION!=====> Unable to retrieve start type of sharedaccess. The value does not exist.

Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of sharedaccess. The value does not exist.

Unable to retrieve ServiceDll of sharedaccess. The value does not exist.

Checking LEGACY_sharedaccess: ATTENTION!=====> Unable to open LEGACY_sharedaccess\0000 registry key. The key does not exist.

Firewall Disabled Policy:

==================

System Restore:

============

System Restore Disabled Policy:

========================

Security Center:

============

wscsvc Service is not running. Checking service configuration:

The start type of wscsvc service is OK.

The ImagePath of wscsvc service is OK.

The ServiceDll of wscsvc service is OK.

Windows Update:

============

wuauserv Service is not running. Checking service configuration:

Checking Start type: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.

Checking ImagePath: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.

Checking ServiceDll: ATTENTION!=====> Unable to open wuauserv registry key. The service key does not exist.

Checking LEGACY_wuauserv: ATTENTION!=====> Unable to open LEGACY_wuauserv\0000 registry key. The key does not exist.

BITS Service is not running. Checking service configuration:

Checking Start type: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.

Checking ImagePath: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.

Checking ServiceDll: ATTENTION!=====> Unable to open BITS registry key. The service key does not exist.

Checking LEGACY_BITS: ATTENTION!=====> Unable to open LEGACY_BITS\0000 registry key. The key does not exist.

Windows Autoupdate Disabled Policy:

============================

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

C:\WINDOWS\system32\netman.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\srsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

C:\WINDOWS\system32\qmgr.dll => MD5 is legit

C:\WINDOWS\system32\es.dll => MD5 is legit

C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

C:\WINDOWS\system32\svchost.exe => MD5 is legit

C:\WINDOWS\system32\rpcss.dll => MD5 is legit

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:

=======

Avgtdix(8) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)

0x080000000400000001000000020000000300000008000000050000000600000007000000

IpSec Tag value is correct.

**** End of log ****

Link to post
Share on other sites

Hi Kevin,

Here is the 2nd FSS log:

Farbar Service Scanner Version: 10-12-2012

Ran by HP_Administrator (administrator) on 16-12-2012 at 17:27:20

Running from "C:\Documents and Settings\HP_Administrator\Desktop"

Microsoft Windows XP Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************

Internet Services:

============

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo IP is accessible.

Yahoo.com is accessible.

Windows Firewall:

=============

Firewall Disabled Policy:

==================

System Restore:

============

System Restore Disabled Policy:

========================

Security Center:

============

wscsvc Service is not running. Checking service configuration:

The start type of wscsvc service is OK.

The ImagePath of wscsvc service is OK.

The ServiceDll of wscsvc service is OK.

Windows Update:

============

Windows Autoupdate Disabled Policy:

============================

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

C:\WINDOWS\system32\netman.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\srsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

C:\WINDOWS\system32\qmgr.dll => MD5 is legit

C:\WINDOWS\system32\es.dll => MD5 is legit

C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

C:\WINDOWS\system32\svchost.exe => MD5 is legit

C:\WINDOWS\system32\rpcss.dll => MD5 is legit

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:

=======

Avgtdix(8) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)

0x080000000400000001000000020000000300000008000000050000000600000007000000

IpSec Tag value is correct.

**** End of log ****

Link to post
Share on other sites

Sorry for the delay Kevin.

I just received a windows security alert asking for permission to 1. keep blocking 2.unblock or 3.tell me later a site called DSH, Digital Stream Hub.The alert says windows firewall has blocked certain features of DSH. At first I opted for 3 (tell me later) but after Googling, I didnt think DSH was that essential so I gave permission to Block. But the initial error re the security center service been unavailable still stands, and I cannot start Firewall yet.

Link to post
Share on other sites

You confuse me somewhat, In your last reply you say the following:

The alert says windows firewall has blocked certain features of DSH

Further on you say:

I cannot start Firewall yet

How can the Windows FW block items if it aint started?

Can you select start > run > In the open box type > services.msc > hit the enter key, Services should open, scroll to > Remote Procedure Call (RPC) Is that service "started" and its startup type "Automatic"

Also scroll to Security Center is that service "started" and startup type set to "Automatict"

Also scroll to Windows Management Instrumentation is that service "started" and its startup type set to "Automatic"

Link to post
Share on other sites

Re the windows security alert,it said quote:"windows firewall has blocked certain features"of DSH, so I was hopeful problem solved, but attempts to restart the firewall were fruitless.

Remote Procedure Call is started-type is automatic

Security Center is missing! Not there at all.

RPC is started type automatic(RPC-locator - manual, also started)

WMIis started and set to automatic

Link to post
Share on other sites

Presto Kevin, Security Centre is back. Start type: manual. Service status:stopped. When I pressed start to enable the service I got the following: "could not start security centre on local computer. Error:1290:0x50a.

But the Firewall can be switched on & off now.As I said earlier, there are no other apparent issues with the machine apart from this serious one. Over to Kevin.

Sweeneyj

Link to post
Share on other sites

What is the staus now, are you OK and ready to close or do you still have issues? Regarding Security Center open the Services window by typing services.msc into Run via the start function. Scroll to Security Center, Right click on that entry and select "Properties" In the new window change the "Start up" type to Automatic. Select > Apply > OK. Close down Services and Re-Boot your system.

Is that issue now ok?

Link to post
Share on other sites

Do you still see that error 1290:0x50a with Security Center? If so can you Open Regedit, Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv Right click on Tapisrv folder and select "Export" name the file tapisrv and save as file type "registration files"

Close doen regedit. Go to the saved file, right click on that file > select > send to > Compressed (zipped) folder. In next reply use "More Reply Options" attach that zipped file so I can have a look at it.

You mention a driver issue being attributed to that error, can you tell me what that is please..

Link to post
Share on other sites

mmm that reg file is correct, OK do the following:

Download Windows Repair Tool by Tweaking.com from here :- http://majorgeeks.com/Tweaking.com_-_Windows_Repair_Portable_d7222.html and unzip the contents into a newly created folder on your desktop.

  • Now open Repair_Windows.exe in the folder
  • Go to Step 4 and create a Restore Point
  • Go to Start repairs tab then select Start
  • In the Custom Mode window, only select the following repair options:
  • Reset Registry Permissions
  • Reset File Permissions
  • Register System Files
  • Repair WMI
  • Repair Windows Firewall
  • Repair Internet Explorer
  • Remove Policies Set By Infections
  • Repair Windows Updates
  • Repair MSI (Windows Installer)
  • Click the Start button.

Be patient while the tool repairs the selected items.

If prompted reboot the computer for the changes to take affect, make sure other tasks in the program are not still running before re-booting..

Let me see the log which will be found in this folder:

C:\Tweaking.com_windows_Repair_Logs

What issues remain?

Link to post
Share on other sites

Had to use Windows Search to dig up the repair logs:

Tweaking.com - Windows Repair Change Log.

v1.9.2

Per user request the main repair window is now resizable.

Added 11 new file association repairs. What makes these repairs different than just clicking a reg file is on vista and newer some of the keys are locked. Since the program runs the repairs under the system account these repairs have access to those locked keys.

Added a "Tips" button that loads a page on the site with some tips on which repairs to run and tricks you can do with the program.

Changed the list in the program to a treeview.

I have some repairs unchecked by default now instead of all repairs checked.

Many code changes.

v1.9.1

Changes to the user interface.

v1.9.0

Minor Interface changes.

Program now pulls the information of each repair from a txt file instead of being directly in the program.

Added the BITS service to the Repair Windows Updates.

Added the wuauserv service to the Repair Windows Updates

Added a few more things to the Repair Windows Updates.

Added more support for Windows 8 repairs.

Added more dll files to the register system files repair.

Added new repair - "Repair Windows Safe Mode". This will put the default reg keys in order to boot into safe mode. Some viruses remove these reg keys. This will simply put the defaults back and allow safe mode to boot again.

Added more to the "Remove Policies Set By Infections" repair.

Multiple Code changes and improvements.

v1.8.0

Replaced Erunt registry backup with Tweaking.com - Registry Backup

Some new viruses have been adding programs to the Image File Execution Options in the registry. Keeping those programs from running. I have added 773 more items to the Remove Policies Set By Infections.

Added new repair "Repair Windows Snipping Tool". This will run on vista or newer and replace the reg keys needed for the snipping tool.

Added new repair "Repair .lnk (Shortcuts) File Association" This will run on vista or newer.

Updated the "Repair CD/DVD Missing/Not Working" to see if iTunes is running (Looks for ituneshelper.exe is running). If it is it puts the iTunes "UpperFilters" for the cd/dvd rom drive so iTunes wont give the error "Warning the registry setting used for importing CD are missing". More info here http://support.apple.com/kb/TS2372?viewlocale=en_US

Multiple code improvements.

v1.7.5

Improved operating system detection code. What does this mean? Some repairs need to know what version of Windows it is running run to run the correct code. The program used WMI to pull this info. But if WMI was broken it didn't pull the info. I now have it use the Windows API to pull the Windows version, and if for any reason it fails it will fall back to using WMI to pull the info.

v1.7.4

The program is now Terminal Server Aware. When you ran the program on a Windows server that had Terminal Services installed the Windows API returned the wrong path to the windows dir. This is now fixed.

v1.7.3

Updated the Repair Windows Firewall. It now restores the reg keys for the BFE, MPSSVC and WSCSVC services. Before it only put back the shared access service. Which in XP is all the firewall needed. But in Vista and 7 it required more services. They are now part of the repair :-)

v1.7.2

Small bug fixes to the log creation of the program.

I have removed the 3 options "Basic" "Advanced" and "Custom" before you start the repairs. Nearly all users that I have talk to, and myself included always choose custom anyways. No need for these other options and they have been removed. Should cut down on the confusion for new users on which to use.

New interface changes to the repair window in the program.

Added "Always On Top" option for the repair window.

Added a minimize button to the repair window. With the always on top option if something opens behind the window and the user needs to get to it they can now minimize the window.

Added a minimize button to the main window in the program for the heck of it :-)

Code improvements.

v1.7.1

Updated the Repair WMI to better handle the commands needed for the different version of Windows. While the WMI works great on XP, Vista and 7 it didn't work correctly on 2003 thus breaking WMI. I have added the commands need to have it run properly on 2003 :-)

v1.7.0

Small improvements to a few repairs.

Better support when running the program through a script. I have a good amount of repair shops that use this repair tool. Some like to run the repair tool with the silent command and from a script in a bat file. The old version of the program would close any cmd.exe window before running the repairs. This of course defeated the purpose of running through a script. So I have changed the way the program waits for a repair to finish. Instead of waiting for cmd.exe to close, each repair will now make a file. When the repair is finished it will delete the file, then the program will know to move onto the next repair.

I now have the cmd.exe windows change to a gray background with black text. This way when running the program through a script you will know which cmd.exe window belongs to the windows repair :-)

The program will now save any errors from the repairs into a txt file on the Windows drive in a folder. Example: "C:\Tweaking.com_Windows_Repair_Logs\" Multiple log files are made for the permission repairs. This is because the MS tool doesn't append to the log file, so a new file has to be made for each section. Since this could create a fair amount of log files I have the program cleanup any empty log files after the repairs are ran.

v1.6.5

Program detects if you are running in safe mode and warns that some repairs may not work in safe mode.

I have also made a few changes for all repairs to run better in safe mode. No guarantees but should definitely run better in safe mode than it has before.

Per user request you can now choose to restart or shutdown the computer after repairs.

I have the repair window resized to 750 x 550 pixels (Now bigger than before). This is the max size to fit on the screen in safe mode which is normally 800 x 600.

v1.6.4

Add ERUNT Registry backup tools. This is another option to backup the system registry before doing repairs. Also very helpful when a users system restore isn't working properly.

v1.6.3

Major improvement for the Reset File Permissions repair. On vista and newer the repair would allow access to folders windows normally blocked. Such as "C:\ProgramData\Application Data". Normally with this folder you would get an access denied. After you ran the reset file permissions repair you could access it. The side effect was that this folder points back to the C:\ProgramData folder. So it made an endless loop! The repair now checks if your on anything newer than XP. If you are then it runs a batch of commands after the repair that puts back the deny permissions on all the folders that are supposed to be blocked. This stops that endless loop from happening. 46 folders total. :-)

v1.6.2

Per user request I have added a silent command option to the program. Set the options in the setting.ini file and run the program with /silent. The program will run in custom mode running the repairs set in the settings and then close it self. Will even reboot when done if set in the settings. (Perfect option for my fellow network admins) :-)

Small code changes.

v1.6.1

Added new repair "Repair Missing Start Menu Icons Removed By Infections" This repair will put back the missing icons in the start menu, quick launch, and desktop that are moved by a rogue virus.

v1.6.0

Added new repair "Repair MSI (Windows Installer)"

Added exe fix (when a virus hijacks the exe section in the registry) to the "Remove Policies Set By Infections" repair.

Improved "Repair Windows Updates".

Small interface changes.

v1.5.8

Bug Fix: I found a very odd bug where some of the repairs were not working right. All repairs run under the system account (because of the trusted installer in vista and newer). For some reason the repairs that set registry keys by a .reg file and with regedit would run but the changes wouldn't take. The fix was to have those repairs run as the logged in account. Still scratching my head on that one, but at least now they work again :-D

Bug Fix: The repair windows firewall wasn't running all the repairs needed for it. This has now been fixed.

The Reset File Permissions now skips the "Users" folder in Vista and newer and "Documents and Settings". The reason for this is in Vista and newer there is a bug where if the file permissions are changed in the user profile then Windows thinks the file is shared when it isn't and you get a shared icon on it. More information is here http://www.tweaking.com/forums/index.php/topic,69.0.html

Small code improvements.

v1.5.7

Changed Windows Image Acquisition (WIA) from "stisvc start= demand" to "stisvc start= auto" in the windows services repair.

v1.5.6

The "Remove Policies Set By Infections" repair wasn't working properly. The commands where deleting the Reg file before it had been applied. I added the start /wait command to the regedit. "Remove Policies Set By Infections" Now works correctly :-)

v1.5.5

Removed "WwanSvc start= demand" from the windows services repair.

The program no longer defaults to the C:\ for repairs. The program now looks at the location of the Windows dir and uses the drive that Windows is on.

v1.5.4

On users machines who's "Path" variable was corrupt none of the repairs would work. To fix this I have added "set path=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem" to all the repairs. Now on users systems with a corrupt "path" variable the repairs will still work properly :-)

v1.5.3

Changed 4 service defaults from manual to auto in the set services to default startup repair. Media Center Receiver Service, Media Center Scheduler Service, Windows Media Center Service Launcher and Windows Media Player Network Sharing Service.

Removed Panda cloud antivirus from the program and put Avast as a recommendation (Step 2 Window).

Added ComboFix to the recommendation page (Step 2 Window).

v1.5.2

Interface changes.

v1.5.1

Blackvipers site listed the Windows 7 wireless service startup state as manual. But when it is set to manual it will not start and thus the user has no wireless. I have updated the services startup repair tool to put the wireless to auto instead of manual.

v1.5.0

Added a new repair "Set Windows Services To Default Startup". (Currently 194 services) This will set the Windows services to their default startup state. Special thanks to http://www.blackviper.com/ for having all the default information handy. This will set the services startup by the "sc config" command and not by the registry. The information on the repair in the program lists all the services that are set.

1.4.3

The new setup file for the program was missing some of the repair files it needed. The setup has been updated and I made this new version so people who downloaded the last version will update and get the rest of the files they need.

1.4.2

Removed moving arrow from the repair window. Since the list of repairs is growing and the list is scrollable the arrow didn't work well.

In a past update I removed the custom buttons because they would cause the program to crash. The program then used the default old ugly buttons. I have made a new button control and updated the buttons so they look better, and it doesn't cause the program to crash like the old ones.

Program now asks the user if they want to create a restore point before doing repairs if they didn't have the program create one.

The program now comes in a setup program and the portable version. The new setup is larger because it contains the VB6 SP6 runtimes the program needs in case they are corrupt on the system that is being repaired.

More Code tweaks and changes.

v1.4.1

Added more files to the register system files repair that will fix "Class not registered" when trying to open a .mmc file. Such as Task scheduler, Device Manager, Computer Management and more.

Program now starts the Windows Sidebar after the Windows Sidebar repair.

Removed the security zones in IE being reset with the sidebar repair.

More code tweaks and improvements.

v1.4.0

Removed the custom buttons from the program. It was causing the program to crash on some systems. Program is meant to repair, not look pretty, so ugly standard safe buttons it is :-)

Add new repair "Repair Windows Sidebar/Gadgets"

Changed the window size of the repair window, making it smaller and easier to fit on screen for smaller resolutions.

More code tweaks.

v1.3.1

Minor GUI and code Tweaks.

v1.3.0

If you ran an older version of this repair program and it caused problems on your system, download and run this version and it will fix any problems it caused :-)

Added new repair "Repair Volume Shadow Copy Service"

Major update to the program making it safer and better at repairs. Make sure to use this new version and not the old versions.

v1.2.0

Per user request - Added a new repair "Repair CD/DVD Missing/Not Working"

Fixed bug where when repairing WMI the WMI tester would open and the program wouldn't move forward till the WMI tester was closed. Most users didn't know to close this. I have made the program now look for and close the WMI tester if it pops up during the WMI repair.

v1.1.1

Remove some files from the Register System Files repair. While this repair worked great on a lot of some systems on a few ones it would create more problems. The repair now has a much smaller list of only known good files to register.

Updated Repair IE section.

Updated Repair MDAC Section.

v1.1.0

Major changes to how the program launches the repairs. It now shows the command window doing the repair in the task bar. Also should work better with the UAC enabled and running the commands as administrator. This will also keep the program from not responding during repairs.

Updated the file permissions repair to include everyone and users full rights. It use to do just Administrators & System. But on some machines they needed more to get things working right again. This should fix that.

Replaced some of the controls in the program so the program & zip file is smaller in size.

v1.0.2

Fixed bug in Repair WMI (Hopefully got it this time)

Added link to help fix any problems someone might have with the file permissions repair.

v1.0.1

Fixed bug in Repair WMI

GUI Changes.

v1.0.0

First Release

End.

You have brought me a long way, Kevin. Couldn't be happier.For all practical purposes,the error(1290) I referred to is now immaterial.Initial complaint re my Firewall,is resolved. Very grateful.

Link to post
Share on other sites

That is the change log, not the repair log from Windows Repair Tool, no big deal if all is well. Are you indicating all is now OK. If that is the case you can delete all zip files etc that have been saved to your Desktop, also the the Windows repair tool by Tweaking tool.

If you have no remaining issues or concerns are you ok for a moderator to close out the thread...

Kevin.... :D

Link to post
Share on other sites

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.