BITS Service won't start

BITS won't start.

"Error: 1068 The dependency service or group failed to start"

Traced back to not being able to start the service "System Event Notification" (SENS)...

Error 1083: The executable program that this service is configured to run in does not
implement the service.

Both; qmgr.dll and qmgrprxy.dll have been registered.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

ALso have had that problem.

I solved mine by re-registering es.dll.

Check on the esen*.dll files as well if the above does not work.


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23104eAzCHHA.4404@TK2MSFTNGP06.phx.gbl...
> BITS won't start.
>
> "Error: 1068 The dependency service or group failed to start"
>
> Traced back to not being able to start the service "System Event
> Notification" (SENS)...
>
> Error 1083: The executable program that this service is configured to run
> in does not
> implement the service.
>
> Both; qmgr.dll and qmgrprxy.dll have been registered.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

From: "NewScience" <newscience83@usadatanet.net>

| ALso have had that problem.
|
| I solved mine by re-registering es.dll.
|
| Check on the esen*.dll files as well if the above does not work.
|

Thanx !
I did re-register that DLL earlier and it allowed me to start the "Automatic Updates"
service.

Reference the Post subject: error 0x8007041d
Posted in; microsoft.public.windowsupdate
Posted; Saturday, November 18, 2006

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Did you solve the BITS problem?

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:u7pgY8zCHHA.1012@TK2MSFTNGP04.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | ALso have had that problem.
> |
> | I solved mine by re-registering es.dll.
> |
> | Check on the esen*.dll files as well if the above does not work.
> |
>
> Thanx !
> I did re-register that DLL earlier and it allowed me to start the
> "Automatic Updates"
> service.
>
> Reference the Post subject: error 0x8007041d
> Posted in; microsoft.public.windowsupdate
> Posted; Saturday, November 18, 2006
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

From: "NewScience" <newscience83@usadatanet.net>

| Did you solve the BITS problem?
|

Unfortunately, no.
I seem to have come up against a brick wall. :-(

I have tried registering a myriad of DLL files to no avail.
Maybe I missed one ? I don't know.

Lookups in the MS Knowledge Base cross-referencing "System Event Notification" didn't help
and that's where the problem is due to the dependency BITS has upon this service.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

I don't know if you did this:

1. Open Regedit
2. Open Registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS
3. Look at DependOnService in right panel, you should see Rpcss SENS Wmi
4. Open each key, e.g.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS\Parameters
5. Look at the vlaue for the ServiceDll in the right panel.
6. Try re-register that DLL, e.g., regsvr32 c:\winnt\system32\sens.dll
7. Reboot normally

The three for this particular problem are:

sens.dll
rpcss.dll

WMI service does not have a support DLL

Let me know.

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:up48h52CHHA.3916@TK2MSFTNGP06.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | Did you solve the BITS problem?
> |
>
> Unfortunately, no.
> I seem to have come up against a brick wall. :-(
>
> I have tried registering a myriad of DLL files to no avail.
> Maybe I missed one ? I don't know.
>
> Lookups in the MS Knowledge Base cross-referencing "System Event
Notification" didn't help
> and that's where the problem is due to the dependency BITS has upon this
service.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

Ok ... that's OK. That just means that it does not have a self-registering
entry in it's library.

The last thing I can think of since it also happened to me is to check the
following registry key:

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eVF0eZADHHA.3928@TK2MSFTNGP03.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | I don't know if you did this:
> |
> | 1. Open Regedit
> | 2. Open Registry key:
> | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS
> | 3. Look at DependOnService in right panel, you should see Rpcss SENS
Wmi
> | 4. Open each key, e.g.
> | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS\Parameters
> | 5. Look at the vlaue for the ServiceDll in the right panel.
> | 6. Try re-register that DLL, e.g., regsvr32 c:\winnt\system32\sens.dll
> | 7. Reboot normally
> |
> | The three for this particular problem are:
> |
> | sens.dll
> | rpcss.dll
> |
> | WMI service does not have a support DLL
> |
> | Let me know.
> |
>
> Can't Register those DLL's. "DLLRegisterServer was not found"
>
> Example attached...
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost

You should have under this key:

BITSgroup
netsvcs
wugroup

Within the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Svchost key you should see in the right panel:

BITSGroup REG_MULTI_SZ BITS
netsvcs REG_MULTI_SZ EventSystem Ias Iprip
Irmon Netman Nwsapagent

Rasauto Rasman Remoteaccess SENS Sharedaccess

Tapisrv Ntmssvc
rpcss REG_MULTI_SZ RpcSs
wugroup REG_MULTI_SZ wuauserv

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eVF0eZADHHA.3928@TK2MSFTNGP03.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | I don't know if you did this:
> |
> | 1. Open Regedit
> | 2. Open Registry key:
> | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS
> | 3. Look at DependOnService in right panel, you should see Rpcss SENS
Wmi
> | 4. Open each key, e.g.
> | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS\Parameters
> | 5. Look at the vlaue for the ServiceDll in the right panel.
> | 6. Try re-register that DLL, e.g., regsvr32 c:\winnt\system32\sens.dll
> | 7. Reboot normally
> |
> | The three for this particular problem are:
> |
> | sens.dll
> | rpcss.dll
> |
> | WMI service does not have a support DLL
> |
> | Let me know.
> |
>
> Can't Register those DLL's. "DLLRegisterServer was not found"
>
> Example attached...
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

From: "NewScience" <newscience83@usadatanet.net>

| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
|
| You should have under this key:
|
| BITSgroup
| netsvcs
| wugroup
|
| Within the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
| NT\CurrentVersion\Svchost key you should see in the right panel:
|
| BITSGroup REG_MULTI_SZ BITS
| netsvcs REG_MULTI_SZ EventSystem Ias Iprip
| Irmon Netman Nwsapagent
|
| Rasauto Rasman Remoteaccess SENS Sharedaccess
|
| Tapisrv Ntmssvc
| rpcss REG_MULTI_SZ RpcSs
| wugroup REG_MULTI_SZ wuauserv
|


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"rpcss"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"BITSgroup"=hex(7):42,00,49,00,54,00,53,00,00,00,00,00
"wugroup"=hex(7):77,00,75,00,61,00,75,00,73,00,65,00,72,00,76,00,00,00,00,00
"netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
6d,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\BITSGroup]
"DefaultRpcStackSize"=dword:00000008

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs]
"CoInitializeSecurityParam"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\wugroup]
"CoInitializeSecurityParam"=dword:00000001




--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Ah, poop!

I would suggest downloading the BITS 2.0 update and re-install. Hopefully
that will but everything back.
Make sure you clean out the BITS temp folder:

C:\Documents and Settings\All Users\Application
Data\Microsoft\Network\Downloader

and remove all *.dat files.

And make sure that the BITS 2.0 is for Windows 2000.

I know I had some heavy cleaning up to do with WIndows 2000 in order to get
the Automatci Updates to work again.

I had to clean out all temp files, remove C:\Winnt\SoftwareDistribution
folder, clean out the C:\WINNT\system32\wbem\Repository folder, cleanout the
BITS temp area, and re-register a ton of DLLS.

net stop wuauserv
regsvr32 wuapi.dll /s
regsvr32 wups.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 urlmon.dll /s
net start wuauserv
regsvr32 softpub.dll /s
regsvr32 initpki.dll /s
regsvr32 mssip32.dll /s
regsvr32 wintrust.dll /s
regsvr32 dssenh.dll /s
regsvr32 rsaenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 sccbase.dll /s
regsvr32 slbcsp.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 jscript.dll /s

under c:\winnt\system32 folder

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%237O4wcBDHHA.1012@TK2MSFTNGP04.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
> |
> | You should have under this key:
> |
> | BITSgroup
> | netsvcs
> | wugroup
> |
> | Within the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> | NT\CurrentVersion\Svchost key you should see in the right panel:
> |
> | BITSGroup REG_MULTI_SZ BITS
> | netsvcs REG_MULTI_SZ EventSystem Ias
Iprip
> | Irmon Netman Nwsapagent
> |
> | Rasauto Rasman Remoteaccess SENS Sharedaccess
> |
> | Tapisrv Ntmssvc
> | rpcss REG_MULTI_SZ RpcSs
> | wugroup REG_MULTI_SZ wuauserv
> |
>
>
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
> "rpcss"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
> "BITSgroup"=hex(7):42,00,49,00,54,00,53,00,00,00,00,00
>
"wugroup"=hex(7):77,00,75,00,61,00,75,00,73,00,65,00,72,00,76,00,00,00,00,00
>
"netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00
,\
> 6d,00,00,00,00,00
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Svchost\BITSGroup]
> "DefaultRpcStackSize"=dword:00000008
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Svchost\netsvcs]
> "CoInitializeSecurityParam"=dword:00000001
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Svchost\wugroup]
> "CoInitializeSecurityParam"=dword:00000001
>
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

From: "NewScience" <newscience83@usadatanet.net>

PS:

I downloaded and executed...

"Update for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP 5.1 Windows 2000
(KB842773)"

It didn't help :-(

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Any additional errors in EVENTWVR?

Are these services started and running in SERVICE.MSC:

COM+ Event System

Found more information at:
http://www.kbalertz.com/kbNamed_910337/910337.aspx

After you have re-registered and made changes, you are rebooting, correct?

The last thing you can do is use an application like FileMon
(www.sysinternals.com) and start it (it logs everything that is going on
dealing with files on your system ... you can selectively turn off filtering
some monitoring by right-clicking a process and set it to exclude). You
want to monitor services.exe and svchost.exe.

While FileMon is running, try and start BITS. File Mon will show everything
the system is doing to accomodate your request. Eventually you should see a
winlogon that shows putting out that error message you are seeing.

You can also use RegMon (another free tool from the same place), that
basically monitors access to the registry. You can see what goes on as far
as getting registry information to try and start BITS.


"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:ughvpIEDHHA.3660@TK2MSFTNGP06.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> PS:
>
> I downloaded and executed...
>
> "Update for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP
5.1 Windows 2000
> (KB842773)"
>
> It didn't help :-(
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

From: "NewScience" <newscience83@usadatanet.net>

| Any additional errors in EVENTWVR?

Do'h !
I haven't even looked !

SYSTEM:
Since 11/4 I get Event ID: 7001
"The Remote Access Connection Manager service depends on the Telephony service which failed
to start because of the following error:
The executable program that this service is configured to run in does not implement the
service."

APPLICATION:
Event ID: 4097
"The COM+ Event System attempted to fire the EventObjectChange::ChangedSubscription event
but received a bad return code. HRESULT was 80040201."



|
| Are these services started and running in SERVICE.MSC:
|
| COM+ Event System


Starts fine !


|
| Found more information at:
| http://www.kbalertz.com/kbNamed_910337/910337.aspx


I have read that already at Microsoft. That why I posted...
"Both; qmgr.dll and qmgrprxy.dll have been registered."
in the beginning of this thread.


|
| After you have re-registered and made changes, you are rebooting, correct?
|
| The last thing you can do is use an application like FileMon
| (www.sysinternals.com) and start it (it logs everything that is going on
| dealing with files on your system ... you can selectively turn off filtering
| some monitoring by right-clicking a process and set it to exclude). You
| want to monitor services.exe and svchost.exe.
|
| While FileMon is running, try and start BITS. File Mon will show everything
| the system is doing to accomodate your request. Eventually you should see a
| winlogon that shows putting out that error message you are seeing.
|
| You can also use RegMon (another free tool from the same place), that
| basically monitors access to the registry. You can see what goes on as far
| as getting registry information to try and start BITS.
|

Sysinternals is NOW Microsoft !

I tried the new Process Monitor but got information overload.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

I'd check out those errors. COM+ may have started, but may not be running
correctly.
I remember having problem with Remote Access .... getting the same error. I
had to re-register tapi*.dll files.

Did you by chance ever run a Windows 2000 Repair on this system. That is
how I caused my problems which seem almost identical to yours.

The only way I was able to track them down was with the FileMon and RegMon
(which are on Microsoft now), and running a sfc /scannow (not necessarily in
that order).

Something IS wrong internally with your system. I'm on Windows 2000 now,
and I use Process Explorer all the time. This is my system (which is dual
booted with Windows XP Pro):

Pentium MMX
128 MB Ram
128 Cache
2 40GB drives
8MB Jaton Video card
USB PCI card
Logitech Optical PCI mouse
PS/2 Logitech MultiMedia Keyboard
C-Media 6.1 Sound Card
HP CD/DVD Dual Layer RW drive
350 Power Supply (just installed -- old was 230 -- after new supply -- all
my crashes have disaeared)

So Process Explorer can handle my system (as well as still being able to use
Windows XP Pro on it), I'm sure Process Explorer should be able to run on
yours. You should not be getting 'information overload'.

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eZr5w4EDHHA.1220@TK2MSFTNGP04.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | Any additional errors in EVENTWVR?
>
> Do'h !
> I haven't even looked !
>
> SYSTEM:
> Since 11/4 I get Event ID: 7001
> "The Remote Access Connection Manager service depends on the Telephony
service which failed
> to start because of the following error:
> The executable program that this service is configured to run in does not
implement the
> service."
>
> APPLICATION:
> Event ID: 4097
> "The COM+ Event System attempted to fire the
EventObjectChange::ChangedSubscription event
> but received a bad return code. HRESULT was 80040201."
>
>
>
> |
> | Are these services started and running in SERVICE.MSC:
> |
> | COM+ Event System
>
>
> Starts fine !
>
>
> |
> | Found more information at:
> | http://www.kbalertz.com/kbNamed_910337/910337.aspx
>
>
> I have read that already at Microsoft. That why I posted...
> "Both; qmgr.dll and qmgrprxy.dll have been registered."
> in the beginning of this thread.
>
>
> |
> | After you have re-registered and made changes, you are rebooting,
correct?
> |
> | The last thing you can do is use an application like FileMon
> | (www.sysinternals.com) and start it (it logs everything that is going on
> | dealing with files on your system ... you can selectively turn off
filtering
> | some monitoring by right-clicking a process and set it to exclude). You
> | want to monitor services.exe and svchost.exe.
> |
> | While FileMon is running, try and start BITS. File Mon will show
everything
> | the system is doing to accomodate your request. Eventually you should
see a
> | winlogon that shows putting out that error message you are seeing.
> |
> | You can also use RegMon (another free tool from the same place), that
> | basically monitors access to the registry. You can see what goes on as
far
> | as getting registry information to try and start BITS.
> |
>
> Sysinternals is NOW Microsoft !
>
> I tried the new Process Monitor but got information overload.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

From: "NewScience" <newscience83@usadatanet.net>

| I'd check out those errors. COM+ may have started, but may not be running
| correctly.
| I remember having problem with Remote Access .... getting the same error. I
| had to re-register tapi*.dll files.
|
| Did you by chance ever run a Windows 2000 Repair on this system. That is
| how I caused my problems which seem almost identical to yours.


No.


|
| The only way I was able to track them down was with the FileMon and RegMon
| (which are on Microsoft now), and running a sfc /scannow (not necessarily in
| that order).
|
| Something IS wrong internally with your system. I'm on Windows 2000 now,
| and I use Process Explorer all the time. This is my system (which is dual
| booted with Windows XP Pro):
|
| Pentium MMX
| 128 MB Ram
| 128 Cache
| 2 40GB drives
| 8MB Jaton Video card
| USB PCI card
| Logitech Optical PCI mouse
| PS/2 Logitech MultiMedia Keyboard
| C-Media 6.1 Sound Card
| HP CD/DVD Dual Layer RW drive
| 350 Power Supply (just installed -- old was 230 -- after new supply -- all
| my crashes have disaeared)
|
| So Process Explorer can handle my system (as well as still being able to use
| Windows XP Pro on it), I'm sure Process Explorer should be able to run on
| yours. You should not be getting 'information overload'.
|


ASUS P2B-2, PIII 700MHz PC w/384MB.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm