1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Process error and Windows Firewall Error

Discussion in 'Windows XP' started by shakdude, Sep 17, 2006.

Thread Status:
Not open for further replies.
Advertisement
  1. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    While browsing the Internet, I came across a website while searching
    for
    something. A message came up from IE warning me this could be a
    phising
    site. I quickly left the site. I cleared cookies and ran Ad-Aware. PC
    seemed
    fine. Recently, I could not get onto the Internet with either IE or
    Firefox.
    I ran WinsockXPFix and was able to get onto the Internet. This error
    message
    comes up right away when the PC gets to the desktop: Generic Host
    Process for
    Win32 Services has encountered a problem and needs to close. For
    Windows
    Firewall, the message is could not start the Windows Firewall/Internet
    Connection Sharing service on Local Computer. Error 5: Access is
    denied. I
    ran Ad-Aware again and used Trend Micro's Online program. They both
    just
    found cookies. I have followed the steps from these websites:
    http://windowsxp.mvps.org/sharedaccess.htm ,
    http://support.microsoft.com/kb/892199/en-us

    I still am having issues. Any suggestions will be greatly appreciated.

    From the first website, this is what I did:
    Download sharedaccess.reg (only for systems running Windows XP Service Pack 2) and save to Desktop. Then double-click the file to merge the contents to the registry. The Services entry will be created. Restart Windows (mandatory step, otherwise the following NETSH command will display an error message).

    After restarting Windows, run this from Command Prompt (cmd.exe)

    NETSH FIREWALL RESET

    Launch firewall applet from Control Panel, and then configure your Windows Firewall settings.

    If none of the above methods help, as a last-resort solution (before reinstalling Windows XP Service Pack 2), give these two commands a try. Click Start, Run and type:

    rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

    Restart Windows, and then run this command (from Command Prompt):

    NETSH FIREWALL RESET

    Attempt to start Firewall applet. Start the Windows Firewall service when prompted.

    Second website:
    SYMPTOMS
    After you install Microsoft Windows XP Service Pack 2 (SP2), you cannot start the Windows Firewall service. You may experience one or more of the following symptoms: • When you click Windows Firewall in Control Panel, you may receive the following error message:
    Windows Firewall settings cannot be displayed because the associated service is not running. Do you want to start the Windows Firewall/Internet Connection Sharing (ICS) service?
    If you click Yes, you receive the following error message:
    Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS) service.
    • If you try to manually start the Windows Firewall service by using Services, you may receive the following error message:
    Could not start the Windows Firewall/Internet Connection Sharing (ICS) service on Local Computer.
    Error 0x80004015: The class is configured to run as a security id different from the caller
    Note To open Services, click Start, click Control Panel, double-click Administrative Tools, and then double-click Services. For information about using Services, on the Action menu in Services, click Help.
    • The following events may appear in the system event log:
    Event ID: 7036
    Event Source: Service Control Manager
    Event Type: Information
    Event Category: None
    Description:
    The Windows Firewall/Internet Connection Sharing (ICS) service entered the stopped state.

    Event ID: 7023
    Source: Service Control Manager
    Type: Error
    Description:
    The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error:
    The class is configured to run as a security id different from the caller

    • When you use the SC query command to determine the status for the Windows Firewall/Internet Connection Sharing service, you see the following output:
    C:\>sc query sharedaccess
    SERVICE_NAME: sharedaccess
    TYPE : 20 WIN32_SHARE_PROCESS
    STATE : 1 STOPPED
    (NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
    WIN32_EXIT_CODE : -2147467243 (0x80004015)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0


    • If you try to start the Windows Firewall/Internet Connection Sharing (ICS) service at the command prompt by using the net start sharedaccess command, you see the following output:
    C:\>net start sharedaccess
    The Windows Firewall/Internet Connection Sharing (ICS) service is starting.
    The Windows Firewall/Internet Connection Sharing (ICS) service could not be started.
    A system error has occurred.
    System error 16405 has occurred.
    The system cannot find message text for message number 0x4015 in the message file for BASE.


    Note The Windows Firewall feature of Windows XP SP2 is a replacement for the Internet Connection Firewall (ICF) in earlier versions of Windows XP.
    Back to the top

    CAUSE
    This problem may occur if certain Administrative Templates from the Windows XP Security Guide were applied to the computer before Windows XP SP2 was installed. The problem occurs because of a problem in some of the security templates that were published as part of the Windows XP Security Guide.

    In Windows XP SP2, remote procedure call (RPC) runs using the NT Authority\NetworkService account. The default security descriptor for services in Windows XP SP2 gives Read access to the Authenticated Users group, which includes the NT Authority\NetworkService account.
    Back to the top

    RESOLUTION
    To resolve this problem, use one of the following methods:
    Back to the top

    Method 1: Restore the default security descriptor for the SharedAccess service
    The service that controls the Windows Firewall/Internet Connection Sharing (ICS) service is named SharedAccess. The default security descriptor (SD) gives READ access to LocalSystem (SY), PowerUsers (PU), and AuthenticatedUsers (AU), and it gives Full Control access to Administrators (BA).

    To view the SD of SharedAccess, type SC sdshow SharedAccess at the command prompt, and then press ENTER. The default SD appears and is similar to the following:
    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

    Note For more information about how to interpret the strings, visit the following MSDN Web site and search for SDDL or "ACE strings": http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/ace_strings.asp (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/ace_strings.asp)
    Note To open the command prompt, click Start, click Run, in the Open box, type CMD, and then click OK.
    If you see any other output as illustrated in this example, you can reset the SD using the SC command with the sdset option. To restore the default SD for the SharedAccess service, type the following command at the command prompt, and then press ENTER:
    SC sdset SharedAccess D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)
    For more information about the SC sdset command, see Windows Help.

    I am still getting the same error messages. Any suggestions will be greatley appericated.
     
  2. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    Generic Host Process for WIN32 Services has encountered a problem and needs to close. We are sorry for the inconvenience.

    This issue was due to:
    SYMPTOMS
    When you start your computer, you may receive the following error message:
    Generic Host Process for WIN32 Services has encountered a problem and needs to close. We are sorry for the inconvenience.
    If you click Click Here at the bottom of the message box, the following error signature information may appear:
    App name App version Module name Module version Offset
    ---------------------------------------------------------------------
    Svchost.exe 5.1.2600.0 Hpgtpusd.dll 1.1.0.56 00008d0d
    When you click Start, and then click My Computer, or when you double-click My Computer on your Windows desktop, Windows may search, and a flashlight icon may appear, for a long time (for example, five minutes) before files appear. A list of files and folders may not appear.
    Back to the top

    CAUSE
    This behavior may occur if use an old HP printer driver or an old HP scanner driver.
    Back to the top

    RESOLUTION
    To resolve this problem, follow these steps: 1. Turn off the computer and the printer or the scanner.
    2. Disconnect the printer or the scanner from the computer.
    3. Restart the computer.
    4. Install the compatible drivers and software for the printer or the scanner, and then reconnect the printer or the scanner to the computer.
    Contact HP to obtain compatible drivers for the printer or scanner. For information about how to contact HP, click the appropriate article number in the following list to view the article in the Microsoft Knowledge Base:
    65416 (http://support.microsoft.com/kb/65416/EN-US/) Hardware and Software Third-Party Vendor Contact List, A-K

    60781 (http://support.microsoft.com/kb/60781/EN-US/) Hardware and Software Third-Party Vendor Contact List, L-P

    60782 (http://support.microsoft.com/kb/60782/EN-US/) Hardware and Software Third-Party Vendor Contact List, Q-Z
    The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products. Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
    Back to the top
    http://support.microsoft.com/?id=821690
     
  3. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    I am having a hard time with getting Windows Firewall to come up. I am logged in with the admin account.
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You've posted rather a lot of information there and need to simplify what your current problem or goal is.

    If it is to restore the Firewall service, start by following the advice on this site:

    http://windowsxp.mvps.org/sharedaccess.htm

    Download and run the sharedaccess.reg file and follow the rest of the instructions.
     
  5. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    I was having two issues. The process error has been resolved. The issue that is left is with the firewall. The link you mentioned, I had went there but that did not work. I then tried the suggestion from this link: http://support.microsoft.com/kb/892199/en-us. That did not work either. Sorry for the information overload.:)
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
  7. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    When you ran the sharedaccess.reg file did you get a message that it was successfully merged to the registry?

    I did. I followed rest of the instructions, but it did not work. Here is the log. Thank you very much for your assitance. :)

    Logfile of HijackThis v1.99.1
    Scan saved at 5:54:33 PM, on 9/17/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5700.0006)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\devldr32.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Mixer.exe
    C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe
    C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
    C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Athan\Athan.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\Google Talk\googletalk.exe
    C:\WINDOWS\system32\crypserv.exe
    C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\WINDOWS\system32\tcpsvcs.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
    C:\WINDOWS\System32\WLTRYSVC.EXE
    C:\WINDOWS\System32\bcmwltry.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\CA\eTrust Internet Security Suite\caissdt.exe"
    O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
    O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [iPigClient] G:\Client\ipigclient.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
    O4 - Global Startup: Device Detector 2.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
    O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
    O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
    O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
    O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/install/cli/1.0.0971.12/WinSSWebAgent.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/pthalo/us/win/QuickTimeInstaller.exe
    O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
    O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gateway.com/support/serialharvest/gwCID.CAB
    O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{FE953E40-FCF2-4532-BBBA-2D198037CBAE}: NameServer = 192.168.11.1
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
    O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
    O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\SYSTEM32\ICDSPTSV.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
    O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
    O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Would you run regedit navigate to these locations and select File > Export, and export these keys as TEXT file types (not .reg files) and then upload them here as attachments:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center


    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess

    And verify whether this key exists; if it does, delete it:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
     
  9. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    Files are attached
     

    Attached Files:

  10. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
    This was not in registry.
     
  11. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Run regedit and navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center

    Right click on and delete "FirstRunDisabled":

    Value 0
    Name: FirstRunDisabled
    Type: REG_DWORD
    Data: 0x1

    Right click on and modify the FirewallDisableNotify data value to 0

    Value 2
    Name: FirewallDisableNotify
    Type: REG_DWORD
    Data: 0x1

    Reboot and verify that the changes have held up.
     
  12. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    The changes have held up. The Process error message came up though. Clicked okay and it went away.
     
  13. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Ok, we need to be clear about just what problem we are trying to solve now.

    Is the firewall enabled, or can you start the service without error?

    Svchost.exe errors are rather a strange lot.

    I've seen a number of them lately associated with Windows Automatic Updates. If that is the error you are getting, try disabling the automatic updates in the Security Center and also run services.msc and set to disabled the "automatic updates" service there, reboot, and see if these errors continue.
     
  14. shakdude

    shakdude Thread Starter

    Joined:
    Jul 8, 2005
    Messages:
    47
    I am sorry for going in different directions, the problem is the firewall will not start up. Anytime I try to start it in services.msc, get Could not start the Windows Firewall/Internet Connection Sharing (ICS) service on Local Computer. Error 5: Access is denied. After making the changes in the registry, I was getting the process error message that I had posted earlier. Windows Automatic update is disabled.
     
  15. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    So even after making the registry changes and verifying that they held up you are still getting both an "access denied" error when trying to start the firewall and an svchost.exe error?

    Do you get the svchost error at other times, such as rebooting?

    Neither of these is going to be easy to sort out then.

    >> verify that the service covered here is not disabled: http://support.microsoft.com/kb/892504/

    >> Let's take a more thorough look at what is enabled in terms of services and policies.

    Download and run this startuplist program and upload the results as a text file attachment:

    http://www.thespykiller.co.uk/forum/index.php?action=tpmod;dl=get10

    Also:

    > > Download the application Tasklist.exe and copy it to your c:\windows\system32 folder.

    http://www.computerhope.com/download/winxp.htm

    Then go to Start > Run, enter cmd

    At the command prompt copy/paste this into the window and hit "enter":

    cd %userprofile%\desktop
    tasklist /svc /fi "imagename eq svchost.exe" >> taskservlist.txt



    A text file should appear on your desktop. Copy/paste the contents of that here also.

    Note: if you have XP PRO, you already have tasklist.exe – no need to download
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/501908

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice