Judging by the ever-increasing number of posts here in the past few months
that are similar to yours, the behavior may be due to a Vundo-ZLOB-SDBot
infection, all protected by a rootkit infection.
Unexplained computer behavior may be caused by deceptive software
Run a thorough check for hijackware, including posting your hijackthis log
to an appropriate forum.
Checking for/Help with Hijackware
When all else fails, HijackThis v2.0.2
) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
, or other appropriate forums for review
by an expert in such matters, not here.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
Start a free Windows Update support incident request:
Support for Windows Update:
For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
> Thanks, but I tried that last week. Tried it agin just now. I still have
> Cryptographic Service available. It won't start as per below.
> "ridgerunner" wrote:
>> Method 1 from http://support.microsoft.com/kb/943144 just worked for me.
>> am running Windows XP Professional and had just installed SP3 after
>> formatting my hard drive and re-loading. Good luck!
>> "Alberto" wrote:
>>> I am running XP Home and recently have been unable to install a number
>>> updates. They seem to be security related; when automatic updates
>>> finishes it displays the list that cannot be installed.
>>> I read here that sometimes it works to download each update separately
>>> directly for the site and bypass automatic updates. I tried that today
>>> failed and got the message that I should check the Cryptographic
>>> It is set to automatic but not started. I tried to start it and got the
>>> error message: *Error 2: The system cannot find the file specified.*
>>> The path to the executable for the service reads;
>>> *C:\WINDOWS\system32\svchost.exe -k netsvcs*
>>> When I check through Task Manager svchost.exe is running in the Local
>>> Service, on the Network Service (twice) and the System.
>>> Any suggestions would be welcome.
>>> Thank you