Resolved WMP and other issues

I have recently cleaned my computer of malware, and it's been basically verified clean. Ever since then however, I'm getting a few errors that I was hoping I could get some help with.

Windows Media Player refuses to run. Initially said that it was installed improperly and recommended reinstall. Since rolling it back and attempted reinstall, it now says that it has an "internal application error" and further attempts to remove to reinstall are being prevented by my Zune software dependencies on WMP.
Repeated svchost.exe errors during shutdown saying "memory could not be written" or something along those lines. When this happens, the computer doesn't shut down fully and must be manually powered off.
Upon restart, the computer does a disk check for consistency. When windows boots up, Data Execution Prevention shuts down "Generic Host Services for win32" or something like that.

Any help will be appreciated. From the beginning of the problem can be followed from the other post in Malware removal where I was referred to here.
http://www.windowsbbs.com/malware-v...active-repairing-virus-damage.html#post468332

 

One additional problem. Normally I am able to connect to a network location on another computer in my house, but I have recently kept getting a problem of the location "not accessible. The network connection could not be reached" instead of getting prompted for a password

 

Yet one more, which I think may in part explain some of the others. When attempting windows update, the updates fail.

 

Hi, prompt. Welcome to Windows BBS!

There are two things you can do that will give us more information to work with. These may seem like a "hassle" but these two things will increase your chances of receiving worthwhile suggestions.

First, please provide your hardware and OS specifications.
===========================================
Go to the *Edit Options* page of your user profile, and under *Thread Display Options* set *System Specifications* to *Yes*.

Next fill in the details of your system on the *Edit System Specs* page.

Your computer's specifications will be shown in your Profile (under a drop-down menu) when you post a message.

For help with completing this task, read *Adding System Specifications to your Profile*.


Second, please paste some details from Event Viewer that appear to be related to your issues.
========================================================

Instructions About How to Access and Use "Event Viewer ":

1. Click Start.
2. Right-click My Computer.
3. Select "Manage" to open the "Computer Management" window.
   (Event Viewer will be displayed under the "System Tools" directory item.)
4. Expand "Event Viewer" and then select "Application ", "Security ", and "System" to view the logs.
5. Look for "error" events that occurred around the time your problem occurred.
   • These events will be displayed as icons with either a white X on red background or a black exclamation point on yellow background.
   • In the security section of Event Viewer, events of possible concern are ones that display a padlock icon instead of a key icon.
6. Double-click on an individual event to open the "Event Properties" window which shows details about the event.
   • You can use the up/down arrow buttons in the "Event Properties" window to move your focus to other events in the list.
   • Use the button below the up/down arrows to copy the details for an event to your clipboard for pasting elsewhere.
   • Click on the "http://go.microsoft.com/fwlink/events.asp" link in the "Event Properties" window to view more information from Microsoft about the event.

Alternatively, Event Viewer may be accessed as follows.

• Click Start > Run...
• Type [FONT= "Courier New"][SIZE= "3"]eventvwr.msc[/SIZE][/FONT] in the "Open:" field.
• Click the OK button.

 

My specs are updated. Right now when I try to install windows media player, I get an error: "You've encountered error message 8007F0DA while using Windows Media Player. Additional information is not currently available for this error. "
The event is logged in system under several entries.
"ID: 7000
Source: Service Control Manager
Version: 5.2
Symbolic Name: EVENT_SERVICE_START_FAILED
Message: The %1 service failed to start due to the following error:
%2
Explanation
Service Control Manager (SCM) could not start the specified service, probably because the service is not configured correctly. "
There are literally dozens of error messages relating to SCM over the course of the last few hours I've had my computer on.

One of the other errors I'm getting is:
Source: NetBT
Version: 5.2
Symbolic Name: EVENT_NBT_CREATE_DEVICE
Message: Initialization failed because the driver device could not be created.
Explanation
This is a transient condition that can be safely ignored.
NetBIOS over TCP/IP (NetBT) temporarily could not start but it continues trying to start until it succeeds.

 

When running windows update by going to the site, it attempts to download Windows Genuine Advantage Validation Tool (KB892130), but says that installation failed.

 

Thank you, prompt.

First of all, my disclaimer...

I suggest you proceed with caution regarding the information below. I do not want to feel responsible in any way if you muck up your computer. Any steps you take are to be done AT YOUR OWN RISK.

I'm guessing you have listed three errors.

Error #1:

I Googled You've encountered error message 8007F0DA while using Windows Media Player and came up with only 7 results.

One of those results seems to implicate your Cryptographic Services as a likely culprit.

That search result also offers a suggestion for addressing your "Windows Genuine Advantage" issue as well.

Error #2:

The "%1" and "%2" are variable names. While looking at the event in Event Viewer, an actual service should be named in place of the %1 variable. An actual error and/or error code should be named in place of %2. Did you use the button below the up/down arrows to copy the details for an event to your clipboard for pasting into your message? (Looks to me you copied/pasted from the Microsoft web site you were linked to instead.)

I have a hunch the "specified service" in Event Viewer is your "Cryptographic Services ". Please check and let us know.

Error #3:

I'm not sure what suggestions to offer about this error. Perhaps it will clear up after you have fixed the other errors.

===========

I suggest you wait until you have input from those more experienced than me before you try anything such as resetting your Cryptographic Services.

 

I did actually copy from the linked site. Here is the event as copied from event viewer. It does seem to indicate Cyptographic services. A little background on my issues, I was having a few problems after a malware program and someone helped me on the malware forums. I fear that I possibly caused these issues due to some of the steps I was instructed to take to clean my computer.

"Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 7/31/2009
Time: 8:45:46 PM
User: N/A
Computer: HAMLET
Description:
The CryptSvc service failed to start due to the following error:
%%1290

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. "

 

I suspect the malware you had in your computer is responsible for your current problems, NOT the steps you were instructed to take to clean your computer.

I have a feeling the root of most/all your current problems lies with your failing Cryptographic Services (CryptSvc) issue.

I guess we'll patiently wait for further instructions from someone more knowledgeable than me regarding your CryptSvc service.

 

Here is a currently ongoing thread at the Malwarebytes forum that appears may be related to your issue.

• Malwarebytes Forum > Computer Help > PC Help
  Cryptograhic Service won't start

That thread might be worth studying and keeping our eye on.


Edit: BTW, that thread also involves editing the registry, so...

==========
DISCLAIMER/CAUTION: Editing/cleaning/repairing your computer's registry is potentially dangerous. You might render your computer unstable or even unbootable. Before you edit/clean/repair your registry with any method, be sure you make a backup of your registry and you know how to access and use that backup in case you muck up your computer.

If you decide to manually edit your registry, then be sure you are comfortable with editing the registry and I suggest you save a backup of at least the key you edit ahead of time in case you need/want to reverse your changes. Editing the registry can produce serious undesirable consequences if done incorrectly.

In any case, you should know ahead of time how to restore your original registry settings and prepare to do so in case the need arises.

• MVPS.org (Ramesh's Site): How to backup the Windows XP Registry?
• Microsoft KB322756: How to back up, edit, and restore the registry in Windows XP and Windows Server 2003
• Symantec: Backing up the Windows registry

I also suggest you create a System Restore point before making any changes (regardless of what method you use). System Restore may be accessed as follows.

• Click Start > All Programs > Accessories > System Tools > System Restore

==========

 

I'm following that thread too, but will still appreciate any help that I get here too.

 

I noticed you just posted a message in that thread saying,

I never instructed you to post in that thread. I simply suggested we should study it and keep an eye on it.

That's generally considered bad manners to post about one's own problem in someone else's thread (commonly called "thread hijacking ") unless one offers a potential solution (which we have not arrived at with any kind of certainty). Besides, we cannot be certain you have the "same" problem as "eldo ".

Since you have registered and posted in their thread, perhaps you can EDIT your message to include a link to this thread at Windows BBS so they would not have to hunt for it. They might benefit from the links we provided in this thread. If they do not allow you to edit your message, then you could post a link to this thread in an immediate follow-up message.

 

Understood. I'm not trying to derail their topic, I'm just looking for whatever I can to get my computer running normally again.

 

My problem appears to be getting progressively worse. Norton seems to have just suffered an error and recommend reinstallation. I doubt if it *will* reinstall at this point.

 

Norton reinstalled successfully. I really need some help getting my computer up and running - I almost wish I just lived with the malware my computer had instead of what it's doing now.

Edit: I'm up to method five on the link posted by Evan. It doesn't seem to address the issue of cryptographic services simply not starting.

 

Have you considered a Repair at the second R.

 

Hawk, since prompt has an HP Pavilion, prompt may not have a regular Windows XP CD (which may be necessary for a repair install???).

prompt, I searched the Microsoft Knowledge Base a little and found an article that addresses error code 0x8007F0DA mentioned in your WMP error ( "Error #1 ") above although the Microsoft article addresses Windows Update/Microsoft Update failures instead of WMP.

• Microsoft KB958050: You receive error code 0x8007F0DA when use the Windows Update Web site or the Microsoft Update Web site to install updates:

That article also seems implicate Cryptographic Services. It offers a batch file similar to the batch file in the first article I found and referenced in post #7 above. I do not know what the functions of the /s and /u switches (and "start /wait" in in the first article I referenced) are.

I would be inclined to try at least the proposed resolution in the Microsoft KB958050 article. If that doesn't improve your Windows Media Player, Windows Update, and/or Genuine Advantage issues, then I would be inclined to research the "start /wait" switch a little more (and perhaps try the batch file in the first article I referenced).

 

The error code problem is similar to what was already posted but I did run through the sequence described :
Method 4: Reregister DLL files that are associated with Cryptographic Services
To register .dll files that are associated with Cryptographic Services, follow these steps:
1. Click Start, click Run, type cmd in the Open box, and then OK.
Note On a Windows Vista-based computer, click Start, type cmd in the Start Search box, right-click cmd.exe, and then click Run as administrator.
2. At the command prompt, type the following commands, and press ENTER after each command:
regsvr32 /u softpub.dll
regsvr32 /u wintrust.dll
regsvr32 /u initpki.dll
regsvr32 /u dssenh.dll
regsvr32 /u rsaenh.dll
regsvr32 /u gpkcsp.dll
regsvr32 /u sccbase.dll
regsvr32 /u slbcsp.dll
regsvr32 /u mssip32.dll
regsvr32 /u cryptdlg.dll
exit
Note Click OK if you are prompted.
Note Microsoft Windows 2000 does not include the Sccbase.dll file. If you are running a version of Windows 2000, omit the Sccbase.dll file.
3. Restart your computer.
4. Click Start, click Run, type cmd in the Open box, and then click OK.
5. At the command prompt, type the following commands, and press ENTER after each command:
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 mssip32.dll
regsvr32 cryptdlg.dll
exit
Note Click OK if you are prompted.
Note Microsoft Windows 2000 does not include the Sccbase.dll file. If you are running a version of Windows 2000, omit the Sccbase.dll file.
6. Restart the computer.

Cryptographic services still will not start.

 

Additionally, I do not have a repair CD and as part of my cleaning my computer my system restore points were deleted.