Over 1 million tech questions and answers.

ATAcenter and ATAConsole cert expired > unable to start any services

Q: ATAcenter and ATAConsole cert expired > unable to start any services


We've installed ATA in our demo environemnt more than a year ago.
When I verified the config, I noticed that the ATAcenter and ATACOnsole certificate are expired.

Because of this, none of the ATA services can start, and I'm not able to renew the certs from the ATA console.

Is there a way to manually update the certificate, without the need to use the console?

Read other answers
Preferred Solution: ATAcenter and ATAConsole cert expired > unable to start any services

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)


Hello All,

I just found out the the self signed cert I was using on the center machine has expired. I figured no big deal I will change out the cert and everything will be fine. I tried to go to the web page to login to ATA and found not page available. I notice the
service was not running on the center machine. I tried to start the service and the service will not start. I found the following error in the error logs:

2018-02-12 17:58:17.7830 1948 5   00000000-0000-0000-0000-000000000000 Error [SecretManager] Microsoft.Tri.Infrastructure.ExtendedException: Certificate is invalid [CertificateThumbprint=C2C1B90EE5CFDBFB6F2A0352EC88864029740A25]
   at Microsoft.Tri.Infrastructure.Framework.SecretManager.UpdateMutableConfiguration(SecretManagerConfiguration configuration)
   at Microsoft.Tri.Infrastructure.ActionExtension.<>c__DisplayClass1_0`1.<ToAsync>b__0(TItem _)
   at Microsoft.Tri.Infrastructure.Framework.ConfigurationManager`2.<>c__DisplayClass17_0`1.<<RegisterConfigurationAsync>b__0>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at Microsoft.Tri.Infrastructure.Framework.ConfigurationManager`2.<RegisterConfigurationAsync>d__19.MoveNext()
---... Read more

Read other answers

So, like many of us who dont have resources to monitor every little detail of our network/infrastructure, and rely on products being self-sustaining, i did not know i would lose my ATA investment because a cert expired.  Where else does that happen? 
How can there not be any kind of recovery option for ATA Admins if they didnt catch the cert renewal in time?  
That said, since it already happened, it looks like my only option is to start over from scratch.  Does anyone have all the steps needed to remove my current ATA infrastructure completely, and then build a new one in its place?  I know where the
docs are for deploying a new ATA, but my scenario includes an existing, dead ATA deployment that cant be undone normally because i cant get into the system to "undo it".  I would appreciate any guidance on the best approach for removing an ATA
Center and two Lightweight Gateways (and anything else i've forgotten that i would need to know).  And then for starting over, is there anything i should know when about deploying a new ATA Center when an existing one was present.  Finally, is there
anything i can salvage from my dead ATA?

Read other answers

See below Mongo db error log.  Could this be related?

2018-12-05 22:59:22.5294 4872 1234 Error [CommandWireProtocol`1] MongoDB.Driver.MongoCommandException: Command collStats failed: Collection [ATA.ServiceInstalledEvent_20180608051637] not found..
   at MongoDB.Driver.Core.WireProtocol.CommandWireProtocol`1.ProcessReply(ConnectionId connectionId, ReplyMessage`1 reply)
   at async MongoDB.Driver.Core.WireProtocol.CommandWireProtocol`1.ExecuteAsync[](?)
   at async MongoDB.Driver.Core.Servers.Server.ServerChannel.ExecuteProtocolAsync[](?)
   at async MongoDB.Driver.Core.Operations.CommandOperationBase`1.ExecuteProtocolAsync[](?)
   at async MongoDB.Driver.Core.Operations.ReadCommandOperation`1.ExecuteAsync[](?)
   at async MongoDB.Driver.OperationExecutor.ExecuteReadOperationAsync[](?)
   at async MongoDB.Driver.MongoDatabaseImpl.ExecuteReadOperationAsync[](?)
   at async Microsoft.Tri.Center.Database.MongoDatabaseExtension.RunAsync(?)
   at async Microsoft.Tri.Center.Database.CappedCollection`1.UpdateCurrentCollectionEntityCountAsync[](?)
   at async Microsoft.Tri.Infrastructure.Extensions.TaskExtension.<>c__DisplayClass33_0.<RunPeriodic>b__0(?)

Read other answers


Hi, I Faced below Error in all my virtual machines in our Domain, how can I fix it?its a big headache for me.

note:We don't use template in office and also CA cert was done till 2020.

Error 0xc800042d

Read other answers

Hi Techguys!

I recently installed Windows 7 64 bit on a brand new build. (Asus X79 PRO Intel i7 3930k 16 GB Corsair Vengeance Low Profile Quad Samsung 830 SSD)

After installing all the software I need (Windows Updates, Avast, Music Production, iTunes, Flash etc...)
The system performed as aspected.

Then, a few things went wrong :
- after opening Internet Explorer 64 bits a sudden BSOD (can't remember the errors)
- I had to do a system restore
- I really like this system to be stable and wanted it to be as clean as possible, so I uninstalled Asus Suite (didn't use it to overclock)
- Several boot sequences were succesful
- One time I didn't have internet connection
- Next time Avast starts asking me for a license registration, which I am not fond of.. Couldnt really get it licensed
- Got another BSOD during Idle
- Next boot the windows firewall was unable to start
- Other windows applications wouldn't start
- Started looking in the Event Viewer and noticed a few returning errors:
- BFE Acces denied
- Microsoft Security Client OOBE Acces denied
- Firewall Acces Denied via BFE
- Diagnostic Policy Service Acces Denied
- ICS Acces Denied
- WMI :
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this f... Read more

A:Services unable to start

Read other 6 answers

Whenever I long on to my computer Ikeep getting a message poping up"unable to start bluetooth services".What is the problem and how do I get rid of the message.Your help would be much appreciated.
os vista

A:unable to start bluetooth services

Hello Dats and Welcome to TSF,

It might be that the Bluetooth unit is inproperly installed or that the drivers can not be called for. Lets uninstall the unit and reinstall it again.

Go to Start > Search.
Type "devmgmt.msc" without the quotes > Hit ENTER.
Find and mark the bluetooth unit > Rightclick > Uninstall > Confirm uninstall.

When that is done, go to the top of the device management, where your computername is listed(I.E "NAME-PC"). Rightclick that name > Scan for hardware changes. Windows will then reinstall the bluetooth device with the previous driver.

(You could also just uninstall the unit from the device manager > Reboot the system. Windows would then reinstall the device upton startup)

Read other 3 answers

Error is .

Windows could not start the WLAN AutoConfig services on Local Computer
Error 1114: A dynamic link library(DLL) initialization routine failed.

Need help.

Read other answers

I recently cleaned most of a fairly large infection involving Vundo, XP AntiVirus, and a couple others. Most of them attempted to download other viruses, so it multiplied quickly. So I don't know which one caused it exactly, but it shut down the ability to start services for AV programs I tried to reinstall (Windows Defender and PCTools Spyware).

The HiJackThis log probably won't show much. The only remaining threat seems to be the Fvijaa.exe process. All other services start normally, including those that make RPC calls. PCTools will fail to run/install in standard mode (though Safe Mode works). Defender will fail to install, giving a 1053 error (fails to start the service). Any idea how to restore the services without a reinstall? I'm guessing it has to do with the dll linked to the services being tampered with.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:53:16 PM, on 3/11/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Common Files\Apple\Mobi... Read more

Read other answers

The computer cannot start the Windows Firewall, Microsoft Security Essentials, ActiveX installer, Windows Update, etc Services.
Unable to install certain anti-virus programs such as Avira because it says it requires the new Service Pack.
I ran Malwarebytes which was already on the computer, but it came up with no threats.
Ran Roguekiller x64 and it found a few registry issues and an edited hosts file, which were fixed. But the issue still remains.
DDS Log:
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 9.0.8112.16448  BrowserJavaVersion: 10.15.2
Run by LChubaty at 10:35:48 on 2013-04-27
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3838.2427 [GMT -7:00]
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
============== Running Processes ===============
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C... Read more

A:Unable to start vital Windows services

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: http://www.bleepingcomputer.com/combofix/how-to-use-combofixLink 1Link 2IMPORTANT !!! Save ComboFix.exe to your Desktop1. Close any open browsers.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.3. Do not install any other programs until this if fixed.How to : Disable Anti-virus and Firewall...http://www.bleepingcomputer.com/forums/topic114351.htmlDouble click on ComboFix.exe and follow the prompts.When finished, it will produce a report for you.Please post the C:\ComboFix.txt Note: Do not mouse click ComboFix's window while it's running. That may cause it to stallNote: If you have difficulty properly disabling your protective programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.htmlNote: If after running ComboFix you get this error message "Illegal operation attempted on a registry key that has been marked for deletion." when attempting to run a program all you need to do is restart the computer to reset the registry.===Third party programs if not up to date can be the cause of infiltration an infection.Please run this security ... Read more

Read other 5 answers

Hi All,
I am new to this forum and If I am not supposed to ask this question here, kindly excuse me... I have a problem. I am not able to log in to Yahoo Messenger because it says that internet connection is down when it is up and running. I started all the relevant services - Appllication Layer Gateway, Remote Procedure Call etc restarted the system - yet no luck...
Kindly let me know if any such problems were resolved earlier..


Read other answers

I am not able to connect to my Wireless Network. When tried to connect, it just shows 'Cannot connect.'I have the Intel WiFiLink 5100 adapter with the latest driver for Windows 7 Enterprise 32bit installed. The laptop doesn't have a wireless connection manager and I am trying to connect using the Windows Wireless Connection Manager.I checked in Services and found that WLAN AutoConfig and Extensible Authentication Protocol services are not running.When I tried to start WLAN AutoConfig service, I get the following error...     Windows could not start the WLAN AutoConfig service on Local Computer.     Error 1068: The dependency service or group failed to start.When I tried to start Extensible Authentication Protocol service, I get this error...     Windows could not start the Extensible Authentication Protocol service on Local Computer.     Error 1053: The service did not respond to the start or control request in a timely manner.I have found that all the dependent services for EAP are running. And all the dependent services for WLAN AutoConfig are running except EAP service.I have madly searched the internet for solution before posting here. Any help is greatly appreciated!

A:Unable to start WLAN AutoConfig and EAP services

This issue can occur if the service is corrupted. Please perform the following steps to troubleshoot the issue.
1. Access the link below to download the EAP.txt file:
http://cid-6df3bca839e981ef.skydrive.live.com/self.aspx/.Public/EAP.txt ;
2. Rename the EAP.txt file to EAP.reg file.
3. Click Start, input "REGEDIT" (without quotation marks) in the open box and press Enter. Please click Yes.
4. Expand to Computer key, Click "File" menu and click "Export".
5. Please name the file as "RegBackup" (without quotation marks) and then save it to the C:\ drive as a backup.
Note: In case we need to undo the modification, we can double click this RegBackup.reg file to restore the registry key.
6. Double click the EAP.reg file and Click Yes to import it to the computer.
Then, please verify the following services again: Extensible Authentication Protocol, CNG Key Isolation
If the issue persists, you may perform an In-place Upgrade to repair the system.
1. Start the computer by using the current Operating System.
2. Insert the Windows 7 DVD in the computer's DVD drive.
3. Use one of the following procedures, as appropriate:
If Windows automatically detects the DVD, the Install now screen appears. Click Install now.
If Windows does not automatically detect the DVD, follow these steps:
a. Click the Start Button, type Drive:\setup.exe in the start search box and then click OK.
Note: Drive is the dr... Read more

Read other 10 answers

A little background first, I downloaded a file and started to install it when Defender caught the virus, but didn't contain it. So I downloaded Malwarebytes to scan and remove the virus.

After I loaded Malwarebytes I noticed I wasn't getting anymore Windows Defender definitions but I noticed the Windows Defender services were stopped and I figured Malwarebytes stopped it and that was the reason I wasn't getting anymore updates on Defender.

I uninstalled Malwarebytes but now I can't restart Windows Defender.

If I got to Control Panel then Security and Maintenance window. Both buttons to turn on Defender are grayed out.

If I search for Windows Defender in the search window on the task bar. This is the result I get.

And lastly, if I go into Task Manager Services, there are 2 entries for Windows Defender, both are stopped. If I try to restart them this is the message I get.

So is there anything I can do to restart the app or does it require more drastic steps such as reload 9926?

A:Unable to Re-Start Windows Defender Services

Head over to Services and make sure windows defender service is on. Not sure if the virus could have altered any settings in there, but worth a look.

Read other 17 answers

I've been having this problem since I installed this Heliobar program (A taskbar tool btw) and rebooted my box. I'm not really sure why this is happening...
I'd recently installed/removed a couple of other small programs too, but this one seems the most suspicious anyway.

I see a red x mark on my soundmax control icon on my system tray and I'm unable to use sound. and my firewall Zonealarm is not automatically executed at startup.
i can't connect to my wireless network. when I doubleclick on the network icon it says 'wireless zero configuration service is not started'. I tried to manually start it in control panel, but it says something like: 'failed : error 1068 - subordinate service or group can't be started.'

If I let my computer on for some time, a popup window comes up it says some system file is replaced by an unknown version, asks me to insert Windows setup cd. I did so but to no use. System restore doesn't work, either.

So, what seems to be the problem here?

fortunately I had made a list of all files on my hard drive in a txt file some month ago
so is there no other way than comparing date&size of all driver files with the current ones?

I'd greatly appreciate it if someone powerful enough could look inside this Heliobar setup archive and tell what files it installs... but maybe this is asking too much.

Read other answers

Hello sevenforums

After having absolutely no issues when I shut the computer down, to the computer acting strange and having several issues at the next startup. The issues are mainly related to the network, but not limited to it, so I decided to post it here, but unsure if it is the correct forum.

Note: I'm translating all messages from Danish to English, so they might not be completely accurate.

Issues are currently that I am not able to connect to the internet with the message: "service or group dependency failed to start". I'm unable to turn on the firewall with the following error: "Error 0x8007042c". Several services are't starting and I am unable to start them, I get "Error 5: Access denied", I was able to fix this on the diagnostic politic service, by editing permission in the registry editor at two folders called WMI and DPS. I'm currently scanning the computer with MSE, but I somewhat feel this is going to be a waste of time, but it is currently my last resort, except repair with Win7 CD or formatting of course. In my my task manager there is currently nothing taking CPU power at all, yet CPU use is at 30-50%, I'm guessing MSE is using CPU power, but why is it not listed?

So far I have tried the following:
sfc /scannow (Found no issues)
netsh reset
Changing permission in registry to get diagnostic tools working (Which then found no issues or where unable to fix it)

Any ideas or suggestions?

A:Services disabled and unable to start, no internet, no firewall, etc.

Do you have a Restore Point from before the issue? It sounds like it can't hurt to run it if so. Also I would try a full scan with Malwarebytes Antimalware if the Restore Point doesn't eliminate the problem.

Edit: MBAM free version is just fine for scanning.

Read other 3 answers

When attempting to start Windows defender or Microsoft security services, getting error 5 access denied.  I think this was caused by some malware which has been removed from my pc, but can't get either of these working again.  I have run RKill and MBAM also run McAfee virus scan. Thinking it's some sort of permissions issue in the registry from other posts.

A:Unable to start Microsoft security services or WinDefender

Welcome aboard  Please download Farbar Service Scanner Download Link and run it on the computer with the issue.Make sure the following options are checked:

Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.

Read other 6 answers

Hi All, Over the past few weeks I have been fighting with my computer to regain connectivity to the internet. Every time I boot the computer, my network connections disappear. I believe I have isolated the problem to the 'Network Connections' service (Netman) not starting properly. My theory is that when I removed a bunch of malware from the computer that some of the system files were corrupted as well. I am completely stuck on trying to figure this out and really want to try avoiding formatting the hard drive if at all possible. So far I have attempted the following: Running SFCRunning CHKDSKRemoving the hardware and letting Windows automatically detect it and reinstall.Attached are some screen shots of the errors I am getting. Any help/suggestions would be greatly appreciated.

A:Windows XP SP2: Unable to start Network Connections Services

It's a manual start for that service.

I would just go through the process of setting up the connection, using the Network Connection Wizard...and that should solve (if I'm thinking correctly).


Read other 6 answers

I think that a friends computer has a nasty lurking somewhere on it. XP SP3 with the latest updates

She was suddenly unable to connect to the internet. I have looked at here machine and it seems to be a winsock problem (tried the netsh winsock reset without success).

I then noticed that her firewall wasn't running. I checked this and found that the firewall/ics service wasn't running. Tried to start it and got error 2 missing file.

So off to do an XP repair. Unable to do that as it asks for administrator password (I built this computer so I know there isn't one set) hit enter and it drops me to the command prompt.

This is the hijackthis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:28:44, on 27/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\Program Files\Google\Update\\GoogleCrashHandler.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\vsnpstd2... Read more

A:No firewall no internet connection unable to start services or run XP repair


Is there anything in the Highjackthis log file or should I just re-install XP?

Read other 1 answers

Hi all,
Thanks in advanced for your advises :D!
The situation is as follow:
- Our AD server is 2012 R2 v. 6.3 Build 9600.
- Users below are using Windows 7 Professional and joined domain.
- I created new certificate in Public Key Policy/ Encrypting File System as Administrator and push down to the domain group
- We started doing encryption EFS for our users...most are ok, except one PC A.
- User A who is using PC A we cant encrypt his files. Pop up is 'The Parameter is Incorrect' when doing EFS encryption.
- if User B log in to PC A, his files on PC A can be encrypted. If user A log in to user B PC, his file can be encrypted as well.

- So seems like issue is only at PC A and only with user A
so my 1st Question: Why is this happening and how to prevent this? (possibility is user profile corrupted but why and where it's corrupted?


- I decided to copy all User A files (including Outlook pst), delete his profile and recreated new profile with same name
- Copy all his file over, set up outlook with old pst file again. And start doing encryption include outlook files.

- Encryption went smoothly.
- Next day (or may be when user restart etc..) when open, Outlook prompt Access denied for his pst file.
- All other files that was encrypted together with pst files (doc, xls etc.) are able to open and use normally
- At the same time, one more user reported having this Outlook access denied... Read more

Read other answers

Hello there!

Just to let you know the context: I have recovered from a severe malware (Trojan.Vundo) infestation with the kind help of
SifuMike from this very forum.
Before I decided to turn myself towards a helping hand, I had to tackle with the infestation myself and namely had to dapple with/into services.msc and msconfig to disable some programs that would load at startup. This in order to try to prevent further spread of the infestation.

Though the infestation is gone my PC running under Windows XP Professional SP2 still has some malfunctions
- one of the most troubling facts is that if I put on the password protected screensaver, when it resumes to fast switching user welcome page, the password I type in to log in does not work... Note that I run an administrator account. I need to shut down and restart the computer to be able to log in...

- When I try to install/uninstall software, I have to start manually the Windows Installer Service and nonetheless receive he following error message "the RPC server is unavailable" although the Remote Procedure Call (RPC) service is started...

- in the System section of the Event Viewer, I can see numerous errors pointing to services that fail to start: e.g. and to name a few, Remote Access Connection Manager, Application Layer Gateway Service, Workstation service, Computer browser service, Routing and Remote Access, SSDPSRV service, SSDP Discovery Service, etc.

- ditto in the Application section of the Event Vie... Read more

A:System And Applications Failures (unable To Initialize) In The Event Viewer - Services Will Not Start

Hello,It sounds like that the system has been through a lot. Download advanced windows care, the free version http://www.iobit.com/advancedwindowscareper.html this should solve quite a few of the problems and provide a solid foundation to diagnose further problems.In services.msc you mention that the dependencies list are greyed out, how long have you left the list to populate? the list takes anything from a few seconds to a minute to usually load. open the dependencies tab of installer and leave it for a while.Let us know how it goes.

Read other 16 answers

Hi all.

I'm running Windows 7 Professional x64 as a Parallels virtual machine on my Mac (part of my requirements to work for replacing my Windows-based laptop with a Mac). As such, I still run quite a few Windows applications because either 1) there is no Mac equivalent, or 2) the Mac equivalent sucks.

Today there was a message on my Windows VM stating:

"Your password has expired and must be changed"

I click OK, the standard password change screen comes up asking for my current password, and the new password twice.

I fill this out, it says "Changing password..." for 5 seconds or so, then comes up with an error stating:

"Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied."

The problem is, this (virtual) machine is not a member of a domain. I personally installed the OS from DVD in the virtual machine, and at no time was it joined to the domain (I don't even have permission to do so).

My only choice on this screen is to click OK again, which takes me back to the change password prompt again.

In another thread on the forum, there was another person with a similar issue and they resolved it by booting into Safe Mode and changing their password. Unfortunately this did not work for me ... rebooting into safe mode with networking support generates the same error, and normal safe mode states this:

"An attempt was made to logon, but the network logo... Read more

A:Password expired and unable to change it

FYI, I was able to resolve this by trying a bunch of different things. The working solution was using the ntpasswd utility posted in Need to bypass 'Your password has expired' using recovery CLI prompt

I cleared the password for my account, unlocked the account. Interestingly enough, the "password does not expire" flag was already set. After this, I rebooted into Windows, logged in using no password, and all was fine.

Read other 1 answers

I have the GA installed and working, and would like to add a few more ATA administrators.
Problem is they don't have passwords, just smartcards. Can I set up the ATA Console for Windows authentication, Smartcard auth or Kerberos Constrained instead of the (albeit very pretty) username/password only configuration that's default?

Read other answers

I get the message "Windows\system32\services\services.exe" at start up twice. Browser previously hijacked by coolsearch, etc. I already ran CWShredder. Below is my log. (Note: I altered the domain name in last 3 values for security reasons.)

Also, Acrobat 6 no longer opens *.PDF files within Internet Explorer.

Thank you in advance!

Logfile of HijackThis v1.97.7
Scan saved at 6:24:21 PM, on 5/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe
C:\Program Files\Sharp\Sharpdesk\SharpTray.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Sharp\Sharpdesk\sdFTP.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program File... Read more

A:[Solved] Windows\system32\services\services.exe message at start up

Read other 6 answers

I have a problem that started randomly where I was suddenly unable to access files encrypted with EFS. I get access denied errors and am unable to move or copy the files.
The files that were encrypted using a user's domain-issued certificate, the certificate is expired but still viewable if you search in certmgr.msc. There are subsequent self-issued certificates which I assume should have taken over but they don't seem to
have. The certificate with the relevant thumbprint expired over 12 months ago (15 months to the day).
The expired certificate with the correct thumbprint shows as having a private key but will not allow me to export with private key.

Read other answers

We have a fleet of about 400 thin client devices and approximately 30 of them are T510s.   Recently we upgraded to XD 7.6 and as part of this I upgraded the firmware on the T510s and Smart Client Services to Ever since then users are not able to change an expired password on this device (there is no issue in doing the same on the remaining 350 Wyse devices). When a user attempts to login when their password has expired they are first prompted to enter in their current password and then a new one.  After entering the details a message will pop up saying that the Old Password was invalid and told to try again.  The error message includes a CharlotteBadCredentialsError statement.  There are no other issues with the system - if a user with a non-expired password attempts to login, they pass through fine. I've been looking through the documentation for the Profile Manager, in case there is a setting out there, but I've not found anything that seems to be relevant to this.  I have seen suggested elsewhere that allowing Smart Card logins might be a fix, but this does not seem to be the case here. If anyone has any advice, it would be greatly appreciated.

A:Unable to reset expired user passwords on T510

Did you try to upgrade to this Citrix Receiver Add-On?http://h20564.www2.hp.com/hpsc/swd/public/detail?sp4ts.oid=5226532&swItemId=vc_160006_1&swEnvOid=408... According to the Citrix Release Notes there is a fix for the invalid old password error included in there.

I am an HP Employee.My opinions are my own and do not express those of HP.**Click the Thumps Up Button on the right to say Thanks**

Read other 4 answers

Hi, I hope someone can help. Many family member surf the web on this computer and I thought it was well protected (too many to list) but I have some strange things going on. I get the message "Windows\system32\services\services.exe" at start up twice. Browser hijacked and other fringe benefits, LOL here is my log and Thanks in advance.
Logfile of HijackThis v1.97.7
Scan saved at 11:19:02 PM, on 4/30/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\QuickTime\qttask.exe

A:Windows\system32\services\services.exe message at start up

Read other 7 answers

I have a semi-wireless (apparently) connection with a receiver on my terrace from which a cable is sourced to my Laptop.
My ISP authenticates users through a "web dialer" wherein once connection to their Login web page is established, I can login using my credentials and then continue to access the internet..

Now for the past two weeks I've been unable to access even this login page; I assumed it was a problem with my ISP and harangued with them as long as I could, till I found that my neighbor (who also has his receiver on the terrace) had minimal problems in connecting via the same ISP.

Now coming to the Browser specific issues, Today I was just playing around with the 'Security' and 'Content' options of IE7 and I reset all settings to default values.. Soon after, I was able to connect to the login page successfully, albeit with a security certificate error and after ignoring the warning I'm able to connect to the Login page.

In specific , whenever I try to reach my Login page now (through which my ISP provides internet access), I get the following error:

"There is a problem with this website's security certificate.
The security certificate presented by this website has expired or is not yet valid.
Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpag... Read more

Read other answers

on the computer start up a IE window pops up, with an ad for trend-micro to buy a expiring program that I do not have.

I have had to restart my computer 10 times from fresh in the past two weeks, last week I had to use the two disk to start it again, I also just had to go into user accounts and create a new account because windows would only open in temporary run, and I would loose it all when i turned it off, just did the new account a little while ago, have not turned it off since, I google "cannot find local profile" and was given the directions to create a new account.

running XP
running avast
I use firefox
tried malwarebytes,
some times they find things like doubleclick, redo, faxclick, ad revolver, bluestreak.

they remove them, and next time there will be more.

I did print screen when IE opened last time,


PS< I just saw that the title is wrong I have IR instead of IE, Internet Explorer. can not figure out how to delete it or edit it???

A:on start up IR pops up with a trend-micro ad to buy an expired program

Hi,I'm sorry for the late reply. Please do the following:Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back a... Read more

Read other 1 answers

64 bit emachines desktop PC running Home Premium, direct wire connection to a modem.

It boots normally, it just doesn't connect to the internet. Many of the services are disabled.

I have done a startup repair with and without a disk (the CD we have is NOT from emachines - it's a standard Windows 7 Home Premium 64 bit disk. The repairs never find a problem. I have done an sfc /scannow. No intefgrity violations were detected.

When I run services.msc I see that DHCP Client is not running. When I attempt to start it, I get that it could not start because the dependency service or group failed to start. If I go to properties and click on Dependencies I get a Win32 error - the service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

I get the exact behavior when I try to start DNS Client.

There are no restore points available. There are no viruses or malware according to TDSSKiller, Malwarebytes and ComboFix. When I try to use Internet Explorer I get the 'page cannot be displayed' . When I then click on 'Diagnose Connection Problems', I get 'Troubleshooting Couldn't Identify the Problem.'

There's about 50GB worht of music and videos on this PC and the idea of saving all that externally, plus the drivers, reinstalling and putting everything back is a lot of time and work.

I was looking for something that used to be available in Windows XP, where you'd pop in the CD, boot from it, hit enter to do an insta... Read more

A:How do I Fix the Windows Services - Many in services.msc won't start

You might be at the point where a Repair Install is in order:

Repair Install

A Guy

Read other 4 answers

I have two outstanding work orders with this message. One is for incoming mail, and the other is for outgoing mail. Our network admin ran some tests once we received the first ticket in connection with outgoing mail and has deduced that the recipient has our mail blocked. Shortly after, another work order came in but is a client trying to email a staff person here.

The entire bounce back from the outgoing mail:

Delivery has failed to these recipients or distribution lists:

*Recipient email address*
Microsoft Exchange has been trying to deliver this message without success and has stopped trying. Please try sending this message again, or provide the following diagnostic text to your system administrator.


Sent by Microsoft Exchange Server 2007

Diagnostic information for administrators:

Generating server: *servername.domainname*.local

*Client's email address*
#550 4.4.7 QUEUE.Expired; message expired ##

Original message headers:

Received: from *servername11.domainname*..local ( by
*servername.domainname*..local ( with Microsoft SMTP Server (TLS) id; Wed, 10 Nov 2010 10:25:36 -0500
Received: from rldk-exch-mbox.domainname.local ([]) by
*servername21.domainname*.local ([]) with mapi; Wed, 10 Nov 2010
10:25:37 -0500
From: *sender email address*
To: client email address Date: Wed, 10 Nov 2010 10:25:34 -0500
Subject: =?iso-8859-1?Q?FW:_ST....E4rung_?=
Thread-Topic: =?iso-8859-1?Q?.ST..E4rung_?=
Thread-In... Read more

Read other answers

We have a very important client who when they attempt to mail a user on our domain irregularly get's bounce backs with the message:

#550 4.4.7 QUEUE.Expired; message expired ##

The client in question does not appear to have issues mailing anyone else on our domain or any other. I receive all E-mail they send to me. The user here also has no other issues with his mail. As I said, the issue occurs irregularly: some days it's fine, others it's not.

Does anyone know if this is an issue our end or theirs please?

A:550 4.4.7 QUEUE.Expired; message expired

I did a Google search for 550 4.4.7 QUEUE.Expired and most of the found pages seem to suggest the problem is most likely with Microsoft Exchange Server on the sending end.

Read other 1 answers

My brand new Dell laptop keeps losing its active window focus. I have tried to pinpoint the problem to a service or startup and did not find anything specific.
I am now checking the System logs and I see things like :
The Windows Modules Installer Service changes every couple of seconds its start mode from demand to auto and from auto to demand. There are almost 20 changes from one state to the other in 2 minutes.
The Computer browser service starts/stops several times in a few minutes.
The Multimedia Class Scheduler service starts/stops every 3 or 4 minutes.
Is this normal ? How do I troubleshoot this ?

Following with my previous post, here is from my log just a couple of minutes ago


Information 24-Jul-11 06:42:02 AM Service Control Manager 7036 None
Information 24-Jul-11 06:37:01 AM Service Control Manager 7036 None
Information 24-Jul-11 06:32:51 AM Service Control Manager 7036 None
Information 24-Jul-11 06:27:50 AM Service Control Manager 7036 None
Information 24-Jul-11 06:24:28 AM Service Control Manager 7036 None
Information 24-Jul-11 06:19:26 AM Service Control Manager 7036 None
Information 24-Jul-11 06:15:08 AM Service Control Manager 7036 None
Information 24-Jul-11 06:10:06 AM Service Control Manager 7036 None
Information 24-Jul-11 06:09:57 AM Service Control Manager 7036 None

Each one of this is the Multimedia Class Scheduler service that enters the stopped state and the following is the same service entering the running state. Here is the full ... Read more

A:services start/stop or change from autostart to demand start

You might want to check in Event Viewer for some clues, but as it's a brand new computer I think you need to contact Dell Support as well.

If you want more information on any particular event, just select the Details tab.

Read other 3 answers


i have xp home running on another laptop and someone in my family was messing around with itunes and ipods and tried to remove these programs.

When they restarted the computer the internet was not connecting and when i looked into it i found that basically all the services in computer managment are now disabled.

When i try to start any, including network connections for the internet i get the message:

Configuration manager: The plug and play service or another required service is not available.

There are no system restores before this happened so how can i get these services working again?


A:No services start including network connections and cant get them to start!!

Read other 12 answers

start>control panel>administrative Tasks>Services

So I went there after some suggestions by some members on here, and tried to turn a few programs automatic(not the delayed start) but when I tried to start some of them, I got this message:

Error 1068: the dependency service or group failed to start

So is there a way to fix this?

A:Error 1068 failed to start when trying to start services

Yes, possibly possible! What are the names of the services you are dealing with?

Double click the service - go to the "Dependencies" tab - Check the service names list under "This service depends on the following system components" and then make sure that all the services listed there are already started.

For example, if you're trying to start a service which has dependency on "Windows firewall" service, you need to first make sure Windows firewall service is STARTED.

Read other 5 answers

Hi Team,

I am getting below error when I try to install an application.
Application installed fine on my local Win 10. Issue is with the Virtual Machine I have setup using VirtualBox.

VM OS I am using is win 7 and win 8. Both have the same issue.
I tried running the application as "Run as Administrator" but still no luck.
below is the event log of windows.























Product: ScaleOut
StateServer x64 Edition -- Error 1920. Service 'ScaleOut StateServer' (SOSS)
failed to start. Verify that you have sufficient privileges to start system



... Read more

Read other answers

This has been bleeping bugging me for a while now. No matter how hard I try, I can't seem to configure msconfig to start to Normal Startup. This is what happens: If I select "Normal Startup", "/safeboot" and "minimal" are automatically selected. If I deselect "/safeboot", then "Selected Startup" is automatically selected. Furthermore, some of my services -- primarily my printer -- do not start and when try to start it manually, nothing happens. Does anyone have any suggestions?

A:Can't Start in Normal Mode, Services Won't Start

Sorry, I'm confused. Why are you messing with msconfig in the first place? And EXACTLY what have you done so far?

Read other 5 answers

I am not able to host anything what so ever on my computer. At first I thought it a router problem (since the flash upgrade appeared to fry my D-Link) so I got a LinkSys. Well that did not work so I went straight to the source and plugged the Cisco 678 into the NIC. Well, turns out was never a hug/switch/router problem. I am totally invisible to everything, and realize it is either a)something in the Cisco 678 or b)something in WinXP that needs to be configged. I attempted everything under the sun. I was thinking that since when connected direct to the 678 I have an "IP" address of for the modem, and for my computer, that maybe the modem has to use port forwarding? I am not sure, and the really bad thing is that I have misplaced my management cable. I was hoping there was something I could do without it, if that is even my problem in the first place.

I mainly want to host things, such as games and emulators and the like, however, I am totally invisible to the outside world. I must be one of the few humans who cannot be touched by the outside world who desperately wants to. Any help would be very appriciated. I would even be so kind to praise and thank you to all my millions of on-line friends Thanks for your time...

So the bottom line

-using WinXP home
-have DSL with cisco 678 modem
-no ports shown open to anyone for anything
-IPCONFIG /all shows following:

Windows IP Configuration

Host Name . . . . . . . . . . . . : Link
Primary Dns Suffix .... Read more

A:Unable to host any services

Read other 16 answers

Shouldn't I be able to modify a service via Computer Management? The Description and "Path to Executable" fields seem to be protected. This is my own personal PC, so I should have privs to do any damn thing I want. I can start and stop services and change the Startup type, but if I want to add a command line switch, I have to edit the registry since I am not allowed to modify these fields.

I VAGUELY remember some problem like this a couple of years ago, and it had something to do with file protections or security or ACL's or some weird and obscure thing. Or maybe I'm just having a blond moment and it's something obvious that I'm just not seeing.

Thanks in advance for any help or suggestions.

BTW, I am running WinXP Pro.


A:Unable to modify services


Tip! Notice that Microsoft provides no way to edit any of the previous fields. The reasons are as follows: the Service and Display names are hard coded within the executable of the service executable itself. So, only the program developer is capable of changing these strings by compiling a new executable (EXE).

There is no method provided by Microsoft to remove or install services. Similarly there is no way to change the path of a service (field is shown as read-only). The justification of this decision is that the application should provide its own method of installation and removal. Many third party service management applications provide for the mass installation and removal of services as well as ways of modifying the name and path to the service executable.


Is this really true? I could SWEAR I've been able to modify those fields before. Just my imagination? So how ARE they changed? Regedit?

Read other 2 answers

Shouldn't I be able to modify a service via Computer Management? The Description and "Path to Executable" fields seem to be protected. This is my own personal PC, so I should have privs to do any damn thing I want. I can start and stop services and change the Startup type, but if I want to add a command line switch, I have to edit the registry since I am not allowed to modify these fields.

Windows XP Professional.

I VAGUELY remember some problem like this a couple of years ago, and it had something to do with file protections or security or ACL's or some weird and obscure thing. Or maybe I'm just having a blond moment and it's something obvious that I'm just not seeing.

Thanks in advance for any help or suggestions.


A:Unable to modify services

Tip! Notice that Microsoft provides no way to edit any of the previous fields. The reasons are as follows: the Service and Display names are hard coded within the executable of the service executable itself. So, only the program developer is capable of changing these strings by compiling a new executable (EXE).

There is no method provided by Microsoft to remove or install services. Similarly there is no way to change the path of a service (field is shown as read-only). The justification of this decision is that the application should provide its own method of installation and removal. Many third party service management applications provide for the mass installation and removal of services as well as ways of modifying the name and path to the service executable.Click to expand...


Is this really true? I could SWEAR I've been able to modify those fields before. Just my imagination? So how ARE they changed? Regedit?

Read other 1 answers

I had a problem after installing sp2 so I deleted it. This did not solve problem and ended up re-installing under the R configuration now it will not do such things as drag and drop, send to, download, open short cuts or run some programs, and so on. I have tried the re-install 3 times and each time I get error code 0x80040206 com+ event classes could not be registered plus a problem installing HP printer 840c. When I run adm. services a number of services required that are on automatic are not started and I am unable to manually start them. If I try to install any thing I get a message stating install cannot proceed because I am either in safe mode (which I am not) or windows installer service is not available and I should check with tec. support. I re-activated with MS the first time I ran R configuration but now I get a message saying I have 25 days to register. Please advise if there is a solution that does not involve a clean install as I have data on this drive I need but current problems do not allow me to save this data.

A:Unable To Enable Services In Xp Pro Sp1

Microsoft Security Product Support PolicyTechnical support is available from Microsoft Product Support Services at 1-866-PC SAFETY (1-866-727-2338). There is no charge for support calls associated with security updates. International customers can get support from their local Microsoft subsidiaries. Phone numbers for international support can be foundat: http://support.microsoft.com/common/international.aspxFrom the:Microsoft Security Bulletin - Summary for August, 2006http://www.net-security.org/advisory.php?id=6606Being that you are having a problem with authentication and if you reach the thirtieth day without getting that straightened out and you are having problems as a result of the re-installation of SP2 as well, I suggest you call the number above or take advantage of the email method of contacting Microsoft Support from the Microsoft or Windows Update pages IMMEDIATELY!

Read other 1 answers

have a 7520 all in one... it says im connected to internet, but when i go to scan to email, i get message saying.. unable to connect to web services... i did the whole enter in printers ip address, entered the 8888 and 8844.. and still get the same message

A:unable to connect to web services

I receive the error message: SlimCleanerPlus.exe - System Errorcan't start because COMCTL32.dll is missing from your computer. Try reinstalling the program to fix this problem.When I trying to reinstall or delete the program the computer freezes up.... Please help

Read other 2 answers


I have just got a new Dell mini 1018 with Windows 7 starter 32 bit edition. Each time I tried to access Services I get a pop-up window saying - Windows can't open this file: To open this file, Windows needs to know what program you want to use to open it. Windows can go online to look it up...

I have no idea how to resolve this issue. The 2 options of selecting a web service or an installed program do not seem suitable to resolve this.

Any ideas on how to resolve this?



A:Unable to open services.msc

See if restoring the "msc" default association from this list helps at all.

Default File Type Associations - Restore

Read other 5 answers

K, so I was lazy and neglected to install an anti-virus program for about 3 weeks after I re-installed Windows 7 while not decreasing my download activity :D. Now I can't open services.msc and I can't open the registry editor...trying to open regedit gives an error about ulib.dll in system32 not being compatible with windows and upon further investigation found that my ulib.dll was 0 bytes when it should be around 106 kb...the services.msc gives no error at all, it just wont open. I have run bitdefender, spyware doctor, and ad-aware and removed all ailments that were available to be fixed but the problem still persists and i cant replace ulib.dll with a fresh copy because I get Access Denied errors...I have run HiJackThis on my computer and will attach the log...any help would be greatly appreciated. Thanks.
 hijackthis.log   11.06KB

*EDIT* Also, WF.msc (Windows Firewall with Advanced Security) won't open.

A:Unable to open services.msc and regedit

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for postin... Read more

Read other 2 answers

So after running an Avast scan on my computer it tells me that i have virus, but I am unable to move it to the virus chest or delete it. The infected file is C:\Windows\System32\services.exe and the threat status is Win32:Patched-AKC[Trj]. Any help anyone has would be great as i have been trying to deal with problem for a while.

A:Avast, Services.exe infected but am unable to do anything.

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and

Having problems with spyware and pop-ups? First Steps

a link at the top of each page.

Please follow our pre-posting process outlined below.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers

My computer is another recent victim to the msblaster worm. I did download nortons msblaster remover and successfully removed the virus from the computer and i think also the registry. However, i cannot install the patch from microsoft because of the update.inf file setup error. Ive read alot of the other threads about restarting cryptographic services in order to do that but i cant even do that because there is an error when i try to restart it. Not only that but i also cannot view the properties of the cryptographic services. Any ideas of how to restart this service another way or what could be wrong? I really need to patch my computer because I still cannot cut paste, and certain websites have been blocked(hotmail is one of them) and other important functions on my computer no longer work properly. This crap is really pissing me off and i need help ASAP. Any helpo would be greatly appreciated. Im lucky that my friggin browser works rite now so that i can even create this new thread.

Read other answers

So after running an Avast scan on my computer it tells me that i have virus, but I am unable to move it to the virus chest or delete it. The infected file is C:\Windows\System32\services.exe and the threat status is Win32:Patched-AKC[Trj]. Any help anyone has would be great as i have been trying to deal with problem for a while.

I have completed the steps requested here are the results of the scan

DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
Run by Daniel at 13:08:16 on 2012-09-14
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.3836.2306 [GMT 1:00]
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Common Files\Apple\Mobile Device ... Read more

A:Avast, Services.exe infected but am unable to do anything.

Hello Dan,

You're infected with what's more commonly known as ZAccess or Sirefef. Before we begin the cleaning process, I'd like to gather a bit more info to ensure it's 'alone' and we're not also dealing with a bootkit.

Download TDSSKiller.exe and save it to your desktopExecute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt

Please post the contents of that log in your next reply.

Read other 5 answers