Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Services Failed to Start, Is it VIRUS or something else?


  • Please log in to reply
12 replies to this topic

#1 aicarian

aicarian

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 26 November 2009 - 09:42 AM

I am having genuine Windows XP Home, Service PAck 2,

Using Kaspersky Internet security 7.0.125 running for 1 year

Just a little while ago I suffered some sort of attack.

Now I have the following problems.

File Anti-Virus = running

Mail Anti-Virus = failed

Web Anti-Virus = partially running
* HTTP-traffic scan = failed
* Script scan = green check mark

Proactive Defense = running

Firewall = partially running
* Filtration System = failed
* Intrusion Detection system = failed
* Anti-publicity = green check mark
* Anti-banner = failed

Privacy Control = partially running
* Anti-phishing = failed
* Anti-Dialer = green check mark
* Protection of confidential data = green check mark

Anti-Spam = failed

After this i uninstalled my Kaspersky and install another antivirus software but these software didn't intiallize once installation is over instead of that it shows error basIntLibrary failed to start or check INI file(avast); Internet monitor requires Winsock version 2.0 or higher.(NOD32). Besides this i am unable to sart my windows firewall,

showing error 1068: The associated service or group failed to start;
error10093: Application not called WSAStartup,
media player classic failed to start (Error: AfxSocketInit failed), bonjour services for ITunes/IPod failed to start.

All this happens on 25 Nov when i shut down my laptop after surfing the net and updated my KIS 7.0.125

So that sums up where I am at.

I have tried a system reboot, Started system in safe mode and tried to start service through Administrator Tools in Control Panel.

I have also tried to manually restart the affected services.

Nothing has worked yet.

I need some expert advice on what next. I hope that u guys will solve my problem. Waiting for ur prompt Response

Regards,
AICARIAN

Edit: Moved topic from XP to the more appropriate forum, at the recommendation of staff. ~ Animal

Edited by Animal, 10 December 2009 - 06:25 PM.

Thanks & Regards
aicarian

BC AdBot (Login to Remove)

 


#2 Romeo29

Romeo29

    Learning To Bleep


  • Members
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:05:56 PM

Posted 26 November 2009 - 02:06 PM

All the error messages indicate Winsock failure.
You may try to repair system files by running sfc /scannow (Start Menu > Run, type sfc /scannow)
You may try to follow Microsoft's advice on Winsock corruption : http://support.microsoft.com/kb/811259

#3 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 27 November 2009 - 03:38 AM

Thank You Romeo for ur kind suggestion, I'll try this .....and post the outcome

Bro. cud u tell me that wht r d reasons behind this error
Thanks & Regards
aicarian

#4 rosiesdad

rosiesdad

  • Members
  • 220 posts
  • OFFLINE
  •  
  • Local time:06:56 PM

Posted 27 November 2009 - 06:38 AM

Malware imbeds itself in the Operating System and when removed by the anti virus/malware programs, it is removed sometimes along with necessary/critical windows files that have been corrupted by the virus.
Thus the need for a repair or fix installing missing or corrupted files.

#5 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 28 November 2009 - 10:18 AM

I've tried to run this command sfc /scannow (Start Menu > Run) but it shows the message: please insert the recovery disk in drive to check the files of windows. somebody suggested me to run a cmd netsh winsock reset
Thanks & Regards
aicarian

#6 Romeo29

Romeo29

    Learning To Bleep


  • Members
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:05:56 PM

Posted 28 November 2009 - 09:50 PM

You can use that command as well, but I wanted to make sure that all files are okay on your hard disk.
That command is next step as mentioned in the Windows article I posted earlier.

#7 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 29 November 2009 - 08:47 AM

Alright!!!

I am making a PC recovery Disk,,,,afterthat i'll run the command sfc/sannow
Thanks & Regards
aicarian

#8 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 04 December 2009 - 09:04 AM

Hi

Buddy system restore works & most of the problems resolved.......but the security centre is still showing Kaspersky Firewall is on and Kaspersky Antivirus is On even though i've uninstall it.

Still unaware of what had happened to my laptop.........i am making recovery cd's(14) coz my HP RECOVERY DISC CREATOR software is unable to detect DVDR facility in my laptop.......It takes lot of time ..

Busy with my office work also........
Thanks & Regards
aicarian

#9 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 06 December 2009 - 09:50 AM

Sorry to bother u ppl again but need some favor.....

After system restore of a day before my Laptop malfunctioned, i've found that in Safe Mode i am still unable to run Windows Firewall and the issues i discussed in previous post. One thing i noticed that Task Manager doesn't shows the User Name before the running sevices e.g. svchost.exe in Safe Mode. At the same point in Normal Start Up (after system restore) all the running services in task manger display user name like Local Service, System etc...

Besides this i have a simple doubt........if i make recovery discs, will it remove the recovery files from my D: Drive which is a recovery drive provided by HP. My Laptop is HP Pavillion dv2002TU with Windows XP Home Service Pack2 version 5.1.2600
Processor: Genuine Intel ® CPU T1350 @1.86GHz
Thanks & Regards
aicarian

#10 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 08 December 2009 - 10:44 AM

Hi,

Some new findings

Antivirus detected some files in C:Drive. It has also quarantined 3 files named- wsock32dll(5.1.2600.5512 xpsp.080413-0852), winsock.dll(3.10.0.103),kernel32.dll(986112 bytes)

Below files are attached with patches and cracks for some antiviruses and softwares
Win32:Rootkit-gen
Win32:Dropper-BCN
Win32:QHOST-BXO
Win32:Agent-ABNW
Win32:Hupigon-LZW
Win32:Generic-DZ
Win32:DOwnloader-KI
Win32:IRCBOT-DFI
SwSetup\Hpgob\CH\setup.exe\data\presetup\magic_ball_2-setup.exde\data\
oberonmedia\magicball2\magicball2.exe{Armadillo} is infected by IRCBOT-DFI


So what do u say now........
Thanks & Regards
aicarian

#11 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 10 December 2009 - 08:14 AM

Hi to all!!

I think that no one is interested to reply my problem......i am posting questions and then solutions to those problems by my own......Lol

But this attitude helped me to learn new things!

ThankYou Bleeping Computer
Thanks & Regards
aicarian

#12 Romeo29

Romeo29

    Learning To Bleep


  • Members
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:05:56 PM

Posted 10 December 2009 - 12:52 PM

I was hoping the admins/moderator would redirect this thread in Am I Infected Section.
Because you have found out trojan and virus on your computer, BC does not advise anybody else to answer to such problems except the HJT Team.
You can post about the problem and your discovery of the viruses in this Am I Infected forum starting a new topic and in the post please give a link to this thread as well.

#13 aicarian

aicarian
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:56 PM

Posted 14 December 2009 - 09:28 AM

Alrite!!

i have posted a new topic under "Malware Problem" in Am I Infected forum

Thanks 4 ur guidance :thumbsup:
Thanks & Regards
aicarian




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users