Jump to content

Cryptographic Services will not start


retired1

Recommended Posts

I was referred here by Advanced Setup in the Malware forum for my problem. "Vbalgrid problem. Need help. Post #29" I hope you can help. I had some serious infections which appear to be gone, but now Cryptographic Services will not start. I used Exile360's reg file (see post #27 referenced above) which restored Cryptographic Services, but it will not start. Thanks for any replies.

Link to post
Share on other sites

Greetings :)

I'm exile360. Let us see if we can't get your PC running right again:

Please download Dial-a-fix

  • Unzip it and double click on Dial-a-fix.exe to run it.
  • Click on the Policies button on the bottom of the window, and when the second window opens up there should be a list of restrictions,
  • make sure there is a check mark next to each one (there should be by default) and click the Remove button on the lower left.
  • Click the box under SSL/HTTPS/Cryptsvc that resides next to where it says Fix SSL/HTTPS/Cryptsvc which should automatically check the 4 boxes beneath it as well
  • Click the Go button on the lower left (please be patient while it's running, it may take a while to complete)
  • Once it finishes, click on Exit to close Dial-a-fix
  • Restart your computer and see if it is now functioning as it should and the Cryptsvc is running

Please let me know if you have any questions about my instructions and let me know how the fix went.

Thanks :)

Link to post
Share on other sites

Yes, you will get errors, but only because some of the dll files it attempts to register no longer exist, it should still work to fix the issue and the errors can safely be ignored:

Internet Explorer 8 is not supported by Dial-a-fix at this time. If you have IE 8 installed and run Dial-a-fix, you may receive many "Error 127" messages because Internet Explorer 8 replaces a lot of registerable components with non-registerable ones. This is OK - simply ignore all of the errors. Dial-a-fix is still able to do its thing on other files, and the no damage has been done to your system during these error messages. A future version of Dial-a-fix will support Internet Explorer 8 by ignoring those unregisterable components.
From here :) .
Link to post
Share on other sites

Hi Exile360. Thanks for your help.

There were no restrictions listed on the second window and the Remove button was greyed out. I followed the rest of your instructions successfully. However, after the reboot, I still have Cryptographic Services listed and not Cryptsvc. And Cryptographic Services is not started and will not start.

What should I try next?

Link to post
Share on other sites

Also, one of the many issues (going back to my malware posts) is that when you go to Control Panel / User Accounts, the User Accounts window pops up but except for the header, it is blank. And you cannot add any new accounts. Same thing with Network Connections. The window is blank and will not allow a new connection. You can run through the new connection wizard, but it produces nothing. I'm sure these things are related.

Link to post
Share on other sites

Create a batch file:

  • Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
    @echo off
    reg query HKLM\SYSTEM\CurrentControlSet\Services\CryptSvc /s>"%userprofile%\desktop\CryptoInfo.txt"
    echo+>>"%userprofile%\desktop\CryptoInfo.txt"
    echo=======================================================================>>"%userprofile%\desktop\CryptoInfo.txt"
    echo+>>"%userprofile%\desktop\CryptoInfo.txt"
    sc query type= service>>"%userprofile%\desktop\CryptoInfo.txt"
    start "info" "%userprofile%\desktop\CryptoInfo.txt"
    del /f /q %0

    Once you've done that click on File and select Save As...

  • In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  • Name the file CryptoCheck.bat (the .bat extension is very important)
  • Save the file to your desktop and double click it to run it.
  • Once it finishes it will open the file it created in notepad, please copy and paste the file's contents into your next reply.

Thanks ;)

Link to post
Share on other sites

Okay, here are the results:

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc

DependOnService REG_MULTI_SZ RpcSs\0\0

Description REG_SZ Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

DisplayName REG_SZ Cryptographic Services

ErrorControl REG_DWORD 0x1

ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

ObjectName REG_SZ LocalSystem

Start REG_DWORD 0x2

Type REG_DWORD 0x20

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Enum

0 REG_SZ Root\LEGACY_CRYPTSVC\0000

Count REG_DWORD 0x1

NextInstance REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Parameters

ServiceDll REG_EXPAND_SZ %SystemRoot%\System32\cryptsvc.dll

ServiceMain REG_SZ CryptServiceMain

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Security

Security REG_BINARY 00000E0001

======================================================================

SERVICE_NAME: AOL ACS

DISPLAY_NAME: AOL Connectivity Service

TYPE : 110 WIN32_OWN_PROCESS (interactive)

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: AOL TopSpeedMonitor

DISPLAY_NAME: AOL TopSpeed Monitor

TYPE : 110 WIN32_OWN_PROCESS (interactive)

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Apple Mobile Device

DISPLAY_NAME: Apple Mobile Device

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Browser

DISPLAY_NAME: Computer Browser

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: clr_optimization_v2.0.50727_32

DISPLAY_NAME: .NET Runtime Optimization Service v2.0.50727_X86

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: DcomLaunch

DISPLAY_NAME: DCOM Server Process Launcher

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Dhcp

DISPLAY_NAME: DHCP Client

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Eventlog

DISPLAY_NAME: Event Log

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(NOT_STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: JavaQuickStarterService

DISPLAY_NAME: Java Quick Starter

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Kodak AiO Network Discovery Service

DISPLAY_NAME: Kodak AiO Network Discovery Service

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: KodakSvc

DISPLAY_NAME: Kodak AiO Device Service

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: lanmanserver

DISPLAY_NAME: Server

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: lanmanworkstation

DISPLAY_NAME: Workstation

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: McDetect.exe

DISPLAY_NAME: McAfee WSC Integration

TYPE : 110 WIN32_OWN_PROCESS (interactive)

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: MpfService

DISPLAY_NAME: McAfee Personal Firewall Service

TYPE : 110 WIN32_OWN_PROCESS (interactive)

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Nla

DISPLAY_NAME: Network Location Awareness (NLA)

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: NVSvc

DISPLAY_NAME: NVIDIA Display Driver Service

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: PlugPlay

DISPLAY_NAME: Plug and Play

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(NOT_STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Pml Driver HPZ12

DISPLAY_NAME: Pml Driver HPZ12

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: PrismXL

DISPLAY_NAME: PrismXL

TYPE : 110 WIN32_OWN_PROCESS (interactive)

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: seclogon

DISPLAY_NAME: Secondary Logon

TYPE : 120 WIN32_SHARE_PROCESS (interactive)

STATE : 4 RUNNING

(STOPPABLE,PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: SNMP

DISPLAY_NAME: SNMP Service

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: Themes

DISPLAY_NAME: Themes

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

SERVICE_NAME: W32Time

DISPLAY_NAME: Windows Time

TYPE : 20 WIN32_SHARE_PROCESS

STATE : 4 RUNNING

(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

Link to post
Share on other sites

Step 1:

There seem to be quite a few necessary services that aren't running.

Reset Services:

  • Download the attached reg file and extract itReset_All_Services.zip
  • Double click on it to merge it with the registry and answer Yes when prompted
  • Answer Ok when it completes, noting if you had any errors and writing them down to let me know in your next post
  • Reboot your computer

Step 2:

Create a batch file to gather more info:

  • Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
    @echo off
    reg query HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC /s>"%userprofile%\desktop\CryptoInfo2.txt"
    reg query HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\System\cryptsvc /s>>"%userprofile%\desktop\CryptoInfo2.txt"
    echo+>>"%userprofile%\desktop\CryptoInfo2.txt"
    echo============================================================================>>"%userprofile%\desktop\CryptoInfo2.txt"
    echo+>>"%userprofile%\desktop\CryptoInfo2.txt"
    sc queryex state= all type= service>>"%userprofile%\desktop\CryptoInfo2.txt"
    echo EOF>>"%userprofile%\desktop\CryptoInfo2.txt"
    del /f /q %0

    Once you've done that click on File and select Save As...

  • In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  • Name the file CryptoCheck2.bat (the .bat extension is very important)
  • Save the file to your desktop and double click it to run it.
  • Once it finishes you will find a file on your desktop called CryptoInfo2.txt
  • Right click on it and hover your mouse over Send To and select Compressed (zipped) Folder
  • Attach the CryptoInfo2.zip file you just created to your next reply

Be sure to let me know if you have any errors with the reg file and check the status of the Cryptographic Service again to see if it's now running.

Thanks :)

Link to post
Share on other sites

Hello again ;)

I found the real root of the problem, it's not the Cryptographic Service behind this, it's the RPC (Remote Procedure Call) service. Almost all other Windows services depend on RPC in order to be able to run, including Cryptographic Service so we need to see if we can correct the issue with RPC.

Create another batch file:

  • Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
    @echo off
    reg query HKLM\SYSTEM\CurrentControlSet\Services\RpcSs /s>"%userprofile%\desktop\RPCInfo.txt"
    reg query HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RPCSS /s>>"%userprofile%\desktop\RPCInfo.txt"
    start "RPCInfo" "%userprofile%\desktop\RPCInfo.txt"
    del /f /q %0

    Once you've done that click on File and select Save As...

  • In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  • Name the file RPCCheck.bat (the .bat extension is very important)
  • Save the file to your desktop and double click it to run it.
  • Once it finishes it will open the file it created in notepad, please copy and paste the file's contents into your next reply.

Link to post
Share on other sites

One other observation that I've forgotten to mention, the Extended tab on the Services panel is also blank except for a couple of small gears at the top of the window. I've been checking the services on the Standard tab which appears normal. However, the Cryptographic and RPC Services will still not start.

Here is the txt file:

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs

Description REG_SZ Provides the endpoint mapper and other miscellaneous RPC services.

DisplayName REG_SZ Remote Procedure Call (RPC)

ErrorControl REG_DWORD 0x1

Group REG_SZ COM Infrastructure

ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost -k rpcss

ObjectName REG_SZ NT Authority\NetworkService

Start REG_DWORD 0x2

Type REG_DWORD 0x10

FailureActions REG_BINARY 00000000000000000000000001000000000000000200000060EA0000

ServiceSidType REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Parameters

ServiceDll REG_EXPAND_SZ %SystemRoot%\System32\rpcss.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security

Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F0001010000

00000001000000000200600004000000000014008D00020001010000000000050B00000000001800

F

F010F0001020000000000052000000020020000000014009D0000000101000000000005040000000

0

0018009D000000010200000000000520000000210200000101000000000005120000000101000000

0

0000512000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Enum

0 REG_SZ Root\LEGACY_RPCSS\0000

Count REG_DWORD 0x1

NextInstance REG_DWORD 0x1

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RPCSS

NextInstance REG_DWORD 0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RPCSS\0000

Service REG_SZ RpcSs

Legacy REG_DWORD 0x1

ConfigFlags REG_DWORD 0x20

Class REG_SZ LegacyDriver

ClassGUID REG_SZ {8ECC055D-047F-11D1-A537-0000F8753ED1}

DeviceDesc REG_SZ Remote Procedure Call (RPC)

Link to post
Share on other sites

Step 1:

Cryptographic Service fix batch file:

  • Download the attached zip file and extract the batch file it contains. Cryptographic_Service_Fix_2.zip
  • Double click the batch file to run it and wait while it processes.
  • Once it completes you will be notified to save any open documents and press a key to let it reboot your system. Allow it to do so when ready
  • Once your computer restarts check to see if things are now working as they should be. If they are not, proceed to Step 2.

Step 2:

Download the attached zip file but don't run it yet, it must be run from Safe Mode. Reg_Fix2__Safe_Mode_Required_.zip

You should either print or save these instructions because in Safe Mode you don't have internet access.

To boot into Safe Mode:

  • Restart your computer.
  • When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with the Windows XP Advanced Options menu.
  • Select the option for Safe Mode using the arrow keys.
  • Then press Enter on your keyboard to boot into Safe Mode.

You should then be presented with the Windows XP Login screen. Log in to Windows and when it prompts you about Safe Mode and asks if you'd like to continue click Yes.

Once you've done that extract the reg file and double click it to merge it with the registry and answer Yes and Ok to the prompts. Once it completes reboot your computer and let it start normally.

Let me know if the services are running as they should

Thanks :D

Link to post
Share on other sites

I'm sorry, Exile360, but no joy!

Step 1 produced the following:

Could not find c:\wutemp

The automatic update service is not started.

More help is available by typing NET HELPMSG 3521.

The Automatic Updates service is starting.

The Automatic Updates service could not be started.

A system error has occurred.

System error 1722 has occurred.

The RPC server is unavailable.

System error 1068 has occurred.

The dependency service or group failed to start.

The Computer will now reboot.

Save any open documents and press a key when ready.

Press any key to continue . . .

On the reboot, nothing changed.

Step 2 accepted the registry change in safe mode. On reboot from safe mode, nothing changed.

At this point, unless you have something else to try, I'm thinking about trying a Windows Repair Install per instructions in this link: http://michaelstevenstech.com/XPrepairinstall.htm

This computer also has a restore partition (if it works?). I have been avoiding these drastic steps up to this point.

I really appreciate your time and help. And certainly if you'd like me to try something else, I'll give it a shot. What do you think?

Link to post
Share on other sites

Yes, a repair install might fix it, just note that you'll likely need to reinstall some of your software after you're done for the software to work. Also, create a System Restore point before doing the repair install just in case.

Create a fresh Restore Point

  • Click on Start and right click My Computer and select Properties
  • Click on the System Restore tab
  • Click the box next to Turn off System Restore to enable it again
  • Reboot your computer
  • Once your PC is booted again click on Start and select Control Panel
  • Click on Performance and Maintenance (Note: if you do not see Performance and Maintenance listed click on the Switch to Category View link on the left pane of the window)
  • Click on System Restore on the left pane of the window
  • Once the System Restore interface opens select Create a restore point and click on the Next button
  • In the Restore point description: box type Repair Install Restore Point and click on the Create button
  • Once it says Restore Point Created click on the Close button

Also, if you have or can find a Windows XP disc matching your version (Home, Pro, MCE etc) and current service pack level (Service Pack 3 as I recall) you can use sfc as detailed in this tutorial. If you can find an actual XP with the same version but a different service pack level you can slipstream it as detailed here.

To tell the truth, I suspect the issue is some level of corruption of system files as we've already tried pretty much everything else. A reinstall/repair install or SFC would be the only ways to potentially correct it if that is indeed the case.

Link to post
Share on other sites

If you're still around, I just got a bit of additional info and I think there's one more thing we should check as it may fix your issues and is fairly simple to fix:

Please open notepad and click on Format and make sure that Word Wrap is NOT checked then close notepad then proceed with the following:

  • Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
    @echo off
    reg query "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot" /s>"%userprofile%\desktop\SafeModeCheck.txt"
    reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /s>>"%userprofile%\desktop\SafeModeCheck.txt"
    del /f /q %0

    Once you've done that click on File and select Save As...

  • In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  • Name the file smc.bat (the .bat extension is very important)
  • Save the file to your desktop and double click it to run it.
  • Once it finishes a file will be created on your desktop called SafeModeCheck.txt, please zip and attach it to your next reply.

Thanks :)

Link to post
Share on other sites

Well, I wish I had seen your last post in time. I didn't. Unfortunately, disaster has struck!

One of the things that I have not been able to do with this PC is create a Restore Point. I could not open the Restore Point screen. Probably related to one of the many services which would not run.

So I tried the repair install from a SP3 slipstreamed CD. It appeared to re-install XP perfectly. However on the re-boot at the WinXP logo screen with the words "please wait..." the PC hung and would do nothing. After 30 mins, I forced a shutdown and restart. This time it booted to the user logins screen. When I selected the main user, a message pops up that says this computer must be activated with Microsoft (yes or no). When I hit "Yes", the eMachines (I know, but it's not my PC) logo screen comes up and hangs. Almost to the desktop, but not quite. It will not boot into normal mode. I can boot nicely into Safe mode. And it seems like many of the services are running okay now in safe mode. But I cannot get it to boot to normal mode.

So I decided to try the System Recovery partition. What a joke! Pressing F11 on boot opens the Recovery application screen which immediately demands the two recovery disks (which I had burned previously) and also produces an error stating, "the System Restore environment is incomplete!" It reads disk 1 and then disk 2, then demands disk 1 again and starts all over in an endless cycle. This was the last ace I was hiding up my sleeve. Guess I'll sleep on it and try again in the morning.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.