Event ID 11

[chimpy]

I noticed in my event viewer I had this issue hxxp://technet.microsoft.com/en-us/library/cc734018%28WS.10%29.aspx so I clicked on the link in the EV to DL the file from here

"Failed extract of third-party root list from auto update cab at: <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file" it opened up in Winrar

I check in EV like it says "You can verify that the Automatic Root Certificates Update component is working properly by using a Web browser to open a Web site that requires the Automatic Root Certificates Update component. When you open this Web site, a new root certificate is downloaded from the Microsoft Windows Update Web site. If the certificate is downloaded successfully, Event ID 1 in the Microsoft-Windows-CAPI2 event source will be written to the event log.

To perform this procedure, you must be a member of the local Administrators group, or you must have been delegated the appropriate authority.

To verify that Event ID 1 is being written to the event log:"

I find nothing in source for CAP12 so im clueless as to what this is, it seems important and I have alot of them as errors in the EV.

I dont seem to be able to work out how to log CAP12 either.

Can anyone help?

Thanks.

[chimpy]

No one have any ideas?

[exile360]

Hi chimpy

Please make sure the date and time are set correctly on your system then please do the following and post the results:

• Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
  

  @echo off
  net start>"%userprofile%\desktop\services.txt"
  del "%userprofile%\desktop\services.txt"
  del /f /q %0

  Once you've done that click on File and select Save As...
  

• In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  
• Name the file ServiceCheck.bat (the .bat extension is very important)
  
• Save the file to your desktop and double click it to run it.
  
• Once it finishes it will open the file it created in notepad, please copy and paste the file's contents into your next reply.
  

[chimpy]

Hi exiles thanks for this, My date and time are correct and I did your instructions but I do not know how long it takes for it to create a report, so after ten mins I tried it again and still no pop up of a open file to see, When I double click it it just flashes up a little black box then disapears.

This is in limited account does that make a difference?

[exile360]

Yes, I believe you need to be logged in as an administrator. If need be, simply right-click the ServiceCheck.bat file and select Run as administrator and it should work correctly .

[chimpy]

Hi Exile, I tried it in admin and it did not work so I logged on in admin and tried again and still nothing is produced.

[exile360]

Hehe, I made a minor error. I wanted the batch file to clean up after itself but forgot to include the line that actually opens the text file it creates before deleting everything . Try this one instead please, it should work from any user account (try it from your normal user account first):

• Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
  

  @echo off
  net start>"%userprofile%\desktop\services.txt"
  "%userprofile%\desktop\services.txt"
  del "%userprofile%\desktop\services.txt"
  del /f /q %0

  Once you've done that click on File and select Save As...
  

• In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  
• Name the file ServiceCheck.bat (the .bat extension is very important)
  
• Save the file to your desktop and double click it to run it.
  
• Once it finishes it will open the file it created in notepad, please copy and paste the file's contents into your next reply.
  

[chimpy]

Thanks Exile it worked

These Windows services are started:

Andrea RT Filters Service

Application Experience

Application Information

AVG Free E-mail Scanner

AVG Free WatchDog

Background Intelligent Transfer Service

Base Filtering Engine

Bluetooth Support Service

CNG Key Isolation

COM+ Event System

Cryptographic Services

DCOM Server Process Launcher

Desktop Window Manager Session Manager

DHCP Client

Diagnostic Policy Service

Diagnostic System Host

Distributed Link Tracking Client

DNS Client

Extensible Authentication Protocol

Group Policy Client

IKE and AuthIP IPsec Keying Modules

IP Helper

IPsec Policy Agent

KtmRm for Distributed Transaction Coordinator

Multimedia Class Scheduler

Network Connections

Network List Service

Network Location Awareness

Network Store Interface Service

NVIDIA Display Driver Service

NVIDIA Stereoscopic 3D Driver Service

Plug and Play

PnkBstrA

Portable Device Enumerator Service

Print Spooler

Program Compatibility Assistant Service

Protected Storage

ReadyBoost

Remote Access Connection Manager

Remote Procedure Call (RPC)

Roxio Hard Drive Watcher 9

Sandboxie Service

SBSD Security Center Service

Secondary Logon

Secure Socket Tunneling Protocol Service

Security Accounts Manager

Security Center

Server

Shell Hardware Detection

Software Licensing

SSDP Discovery

Superfetch

System Event Notification Service

Tablet PC Input Service

Task Scheduler

TCP/IP NetBIOS Helper

Telephony

Terminal Services

Themes

UPnP Device Host

User Profile Service

WebClient

Windows Audio

Windows Audio Endpoint Builder

Windows Driver Foundation - User-mode Driver Framework

Windows Error Reporting Service

Windows Event Log

Windows Firewall

Windows Image Acquisition (WIA)

Windows Management Instrumentation

Windows Mobile-2003-based device connectivity

Windows Mobile-based device connectivity

Windows Search

Windows Time

Windows Update

WLAN AutoConfig

Workstation

The command completed successfully.

[exile360]

Good, that's what I needed. I suspected a Cryptographic Service related problem as it is what's used for verifying certificates. It looks like it's running so the issue is likely related to corruption in one of its databases. Please follow the steps in the Resolution section of this Microsoft Knowledgebase article. If you have any trouble with any of the steps let me know and I'll assist you .

[chimpy]

I looked at method 2 and tried that so far and it was already on auto so its not that. The others I will try tomorrow and get back to you!

[exile360]

Yes, I don't think the issue is with the service settings, that's what I wanted to check with the batch file . I believe it's one of the folders\databases that article mentions that's the problem but go through all of the steps just to be sure.

[chimpy]

Hi Exile I noticed on http://social.answers.microsoft.com/Forums...3d-cb961c1031cc that last year at least some people had this problem after or around the time that SP2 for vista was DL'd, I noticed that when I checked it started on the day I got SP2 too which was 02-06-09 and I have had 31 errors since then, the last on the 28-01-10 so its not all the time like it is for the people in that thread I posted.

Should I still do the things in the thread you posted and just keep a eye on the Event Viewer? If so I will have to do that later in the week if thats ok with you?

Thanks.

[exile360]

Yes, it's still worth a shot. In fact, the error occurring after installing SP2 could still easily indicate that the data in those folders was corrupted because they are closely tied to updates installed via Windows Update, including SP2 . This might just be the fix for it and it can't hurt anything to try it . You can do this whenever you feel like it, it's your PC and it's entirely up to you . Just please keep me posted on your progress and the results.

Thanks