[LJ_June]

I can not get my cryptographic servises to start.... it keeps giving me error code 126

[Claymore]

Hello,

Take a look here
Scroll down to "error 126".

[LJ_June]

It will not let me type anything in the "cmd" box

[Claymore]

Sorry, but just to get this straight.
You click on Start, then on Run, and type in cmd
The Command window opens - usually a black window with white writing.
When you try to type something, nothing happens?

[LJ_June]

correct..... it just closes

[Claymore]

You may have a virus of some kind. Have you run a scan?

[LJ_June]

yes i ran avg and it didnt find anything......it was suggested to reinstall windows.... would that work?

[oshwyn5]

Originally Posted by LJ_June

It will not let me type anything in the "cmd" box

Instead of the cmd box type it in start/ run
IE you go to start/ run and type
regsvr32 softpub.dll
Hit enter and wait for it to finish and say entry successful
Proceed with next entry.


Alternatively open notepad
Copy all of what they have in one of those

regsvr32 softpub.dll
regsvr32 /u wintrust.dll
regsvr32 /u initpki.dll
regsvr32 /u dssenh.dll
regsvr32 /u rsaenh.dll
regsvr32 /u gpkcsp.dll
regsvr32 /u sccbase.dll
regsvr32 /u slbcsp.dll
regsvr32 /u cryptdlg.dll
regsvr32 /u softpub.dll
exit

into it
Name it
"firstfix.bat"
with the quotes and all files as type and desktop as location and click save
Then go to it and double click
It should run and close.

Restart and repeat for second batch

regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
regsvr32 softpub.dll
exit

If a window opens and asks you to , click "OK"

[Claymore]

Probably, but that's pretty drastic. You would have to save all your data first. After re-installing you would then have to do all the Windows updates and re-install all your programs.
Just to be sure, I suggest you download HiJackThis here.
Run it in it's own folder, genearte the log, and post the log in the HiJackThis forum here.
In your post, mention that the Command window closes as soon as you try to access it.
One of the experts will read it and advise you.

[Claymore]

Just saw oshwyn5's reply. I was thinking of the same thing, so go ahead and do it.
But you want to take care of the Command window problem.

[LJ_June]

Ok i tried that.... when i went to the services it said stopping for a few seconds. then i clicked start and i gave me the same error: #126

[oshwyn5]

Did you run system File Checker?
Go to start/ run and type
sfc /scannow
hit enter
If prompted insert your Xp install cd.

Also did you do all the steps (in order) specified at the previous link?

ERROR 126

Some folks get the message:

Error 126: The specified module could not be found

This is a very "general" error code, however in this instance the following may help:

a) Delete the contents of the "Windows\System32\catroot2" folder and see if that helps resolve the issue.

b) If that fails, then check all the root directories and see if any are set as "Read Only"... this is a common symptom of an incomplete SP1 install. If they are then uncheck them! and try again...

C) Make sure cryptui.dll is in system32 folder and is NOT corrupt!

d) Make sure certcli.dll is in system32 folder and is NOT corrupt!

Use the sfc /scannow utility to check for file corruption in c) and d) http://www.updatexp.com/scannow-sfc.html

e) Re-register DLL Files That Are Associated With the Cryptographic Service
To register .dll files that are associated with Cryptographic Services, follow these steps: (NB - you may have used the batch file in the article above... however this may not have worked so we need to manually un-register then register them...)

Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type the following commands, pressing ENTER after each line:

Note Click OK if you are prompted to do so.
regsvr32 softpub.dll
regsvr32 /u wintrust.dll
regsvr32 /u initpki.dll
regsvr32 /u dssenh.dll
regsvr32 /u rsaenh.dll
regsvr32 /u gpkcsp.dll
regsvr32 /u sccbase.dll
regsvr32 /u slbcsp.dll
regsvr32 /u cryptdlg.dll
regsvr32 /u softpub.dll
exit

Restart your computer.
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type the following commands (press ENTER after each command):

Note Click OK if you are prompted to do so.
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
regsvr32 softpub.dll
exit

Now check to see if the service will now start.

Next option would be to run this from KellysKorner Tips and tweaks item 288 left
[url-=http://www.kellys-korner-xp.com/xp_tweaks.htm]http://www.kellys-korner-xp.com/xp_tweaks.htm[/url]

http://www.kellys-korner-xp.com/regs_edits/cryptsvc.reg

To use the Regedits: Save the REG File to your hard disk. Double click it and answer yes to the import prompt. REG files can be viewed in Notepad by right clicking on the file and selecting Edit.

Finally if you have not done so you should post a hijackthis log on the hijackthis board and have it checked since there are a couple malware which will do this to prevent you from running windows update and getting the latest malicious software removal tool

[Claymore]

The following is usually a fix if the service is missing, but it won't do any harm to try:

Copy the code below. Open Notepad and paste it in. Save the result in a suitable location as crypto.reg - making sure that the default .txt extension doesn't appear in the file name (Save as type = All Files).
Double-click on the saved .reg file to merge the contents.
Restart

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc]
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"Description"="Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."
"DisplayName"="Cryptographic Services"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"ObjectName"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  63,00,72,00,79,00,70,00,74,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,\
  00
"ServiceMain"="CryptServiceMain"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Security]
"Security"=hex:00,00,0e,00,01

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Enum]
"0"="Root\\LEGACY_CRYPTSVC\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

But I'm still concerned about no Command window.

[vladypus]

Alright, this was driving me mad, and it took all day to fix. I hope this post helps people, and that I have added as many hooks into this issue as possible, so that the thread moves up in search results.

Most of the posts I saw in researching this issue referred to people having trouble with XP pre service pack 2 (SP2) versions of windows. I am running windows XP SP2.

Synopsis: sfc /scannow did not replace missing certcli.dll, if it's not there get it from somewhere else.


The trouble started after my computer crashed in the middle of and update. Subsequent updates did not work. Automatic update kept trying to install the same updates over and over. It would download an update, start installing, and then spit out an error saying, "Some updates could not be installed". The second I dismissed the error dialog, automatic update would pop up a prompt asking me to download the same update again. The particular update was KB933729, though I think this is incidental.

C:\WINDOWS\SYSTEM32\KB933729.log
2.844:==============================================================
2.844: 2007/10/24 18:08:33.250 (local)
2.844: C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\u pdate\update.exe (version 6.2.29.0)
2.844: Failed To Enable SE_SHUTDOWN_PRIVILEGE
2.860: Hotfix started with following command line: -q -z -er /ParentInfo:e8cd14bab9cab1488c45628ff9b9c858
903.547: PrepareToTrustInfFile: MySetupCopyOEMInf failed: 0x426
903.547: IsInfFileTrusted: PrepareToTrustInfFile Failed: 0x426
903.610: InstallInfCatalogFile: Installing c:\windows\softwaredistribution\download\28d74bdac17e30d3a4336176766f2e4a\u pdate\KB933729.cat as _000000_.cat...
903.625: VerifyTargetFileSize: Unable to verify size as Source = NULL for file c:\windows\_000000_.cat
903.641: InstallCatalogFile: InstallCatalog failed for c:\windows\_000000_.cat; error=0x00000426.
903.641: InstallInfCatalogFile: Installation failed; error=0x00000002.
903.641: UdpStopService: ControlService failed :0x426
903.641: IsInfFileTrusted: ValidateSingleFileSignature Failed: STR_FAILED_INF_INTEGRITY
903.672: KB933729 Setup encountered an error: Setup could not verify the integrity of the file Update.inf. Make sure the Cryptographic service is running on this computer.
903.672: DeleteCatalogFile _000000_.cat failed with ERROR 1062
903.703: Setup could not verify the integrity of the file Update.inf. Make sure the Cryptographic service is running on this computer.
903.703: Update.exe extended error code = 0xf0da

Another log with a bunch of errors, of which I'm guessing these are the most significant.

C:\WINDOWS\SYSTEM32\WindowsUpdate.log
2007-10-25 04:21:49:062 420 554 Handler Updateci: WinSEUpdateHandler::_Inventory: Installer returned 0xf0da (61658)
2007-10-25 04:21:49:078 420 554 Handler FATAL: UH: 0x8007f0da: Inventory failed in CUHWindowsPatchHandler::GetNextRequiredFiles
2007-10-25 04:21:49:078 420 554 Handler FATAL: UH: 0x8007f0da: GetNextRequiredFiles failed in CUHWindowsPatchHandler::GetRequiredFilesForSandboxState
2007-10-25 04:21:49:078 420 554 Handler FATAL: UH: 0x8007f0da: GetRequiredFilesForSandboxState failed in CUHWindowsPatchHandler::GenerateDownloadRequest
2007-10-25 04:21:49:078 420 554 DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x8007f0da.
2007-10-25 04:21:49:078 420 554 DnldMgr Error 0x8007f0da occurred while downloading update; notifying dependent calls.

So I checked the cryptographic service and indeed its not running. Upon trying to start it I get the "Error 126: The specified module could not be found". So I search and found the info over at http://www.updatexp.com/cryptographic-service.html and at the microsoft support page http://support.microsoft.com/kb/822798. I went through almost everything they had to no success. As I tried the updatexp.com solution where you have to run gpedit.msc and go to to Computer Configuration>Windows Settings>Security Settings>Software Restriction Policies, I received the following errors:

1) Snap-In failed to initialize
Name: Public Key Policies
CLSID{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}

2)Snap-In failed to initialize
Name: Software Restriction Policies
CLSID{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}

This guy had the same problem: http://www.pctools.com/forum/showthread.php?t=18382

At this point, having run regsvr32 and sfc /scannow umpteen times, I was going crazy. The only solution that seemed it might still work was a repair install to XP SP1a and get all the updates [http://usenet.p2preactor.com/index-t-1496715.html] . This seemed unacceptable to me, but it was getting to the point where I had few options remaining. Since it seemed like all this stuff must have something something to do with certificates and/or public keys, I decided I would just copy over all the system32 files that seemed to be related to those subjects from another computer [by the way: I'm sure there are many more files than the ones it occurred to me to grab].

So I grabbed certcli.dll, certmgr.dll, certmgr.msc, crypt32.dll, cryptdlg.dll, cryptdll.dll, cryptext.dll,cryptnet.dll, cryptsvc.dll, cryptui.dll, initpki.dll off of a working XP SP2 computer, made backups of the old versions on the broken machine, and copied the new files over. What I discovered as it prompted me whether or not to overwrite each file, is that certcli.dll was missing!!! Checking for this file was right in updatexp.com guide in the ERROR 126 section, on point d. But I had assumed (mistakenly I guess) that since sfc /scannow would replace corrupt versions of the files, that it would also replace missing files. I'm not sure what it was supposed to do, but I certainly did not have the certcli.dll in my system32 directory despite having run sfc numerous times.

With the file replaced everything is back to normal.