Re: NT service "System Event Notification" won't start

From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>

| Error 1083: The executable program that this service is configured to run in does not
| implement the service.
|
| Both; qmgr.dll and qmgrprxy.dll have been registered.
|


Problem resolved !

The problem was in;
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost

Reference:
http://support.microsoft.com/kb/250320


BEFORE:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
6d,00,00,00,00,00

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost:
netsvcs: Reg_Multi_SZ: EventSystem



AFTER:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
6d,00,00,00,49,00,61,00,73,00,00,00,49,00,70,00,72,00,69,00,70,00,00,00,49,\
00,72,00,6d,00,6f,00,6e,00,00,00,4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00,\
4e,00,77,00,73,00,61,00,70,00,61,00,67,00,65,00,6e,00,74,00,00,00,52,00,61,\
00,73,00,61,00,75,00,74,00,6f,00,00,00,52,00,61,00,73,00,6d,00,61,00,6e,00,\
00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,61,00,63,00,63,00,65,00,73,00,73,\
00,00,00,53,00,45,00,4e,00,53,00,00,00,53,00,68,00,61,00,72,00,65,00,64,00,\
61,00,63,00,63,00,65,00,73,00,73,00,00,00,54,00,61,00,70,00,69,00,73,00,72,\
00,76,00,00,00,4e,00,74,00,6d,00,73,00,73,00,76,00,63,00,00,00,00,00

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost:
netsvcs: Reg_Multi_SZ: EventSystem Ias Iprip Irmon Netman Nwsapagent Rasauto Rasman
Remoteaccess SENS Sharedaccess Tapisrv Ntmssvc


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David:

Wasn't that in one of my checks? Let me know so if not, I can add to my
help/cheat sheet.

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:ODRDAxNFHHA.5004@TK2MSFTNGP03.phx.gbl...
> From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
>
> | Error 1083: The executable program that this service is configured to
> run in does not
> | implement the service.
> |
> | Both; qmgr.dll and qmgrprxy.dll have been registered.
> |
>
>
> Problem resolved !
>
> The problem was in;
> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
>
> Reference:
> http://support.microsoft.com/kb/250320
>
>
> BEFORE:
>
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
> "netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
> 6d,00,00,00,00,00
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost:
> netsvcs: Reg_Multi_SZ: EventSystem
>
>
>
> AFTER:
>
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
> "netsvcs"=hex(7):45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,00,74,00,65,00,\
>
> 6d,00,00,00,49,00,61,00,73,00,00,00,49,00,70,00,72,00,69,00,70,00,00,00,49,\
>
> 00,72,00,6d,00,6f,00,6e,00,00,00,4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00,\
>
> 4e,00,77,00,73,00,61,00,70,00,61,00,67,00,65,00,6e,00,74,00,00,00,52,00,61,\
>
> 00,73,00,61,00,75,00,74,00,6f,00,00,00,52,00,61,00,73,00,6d,00,61,00,6e,00,\
>
> 00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,61,00,63,00,63,00,65,00,73,00,73,\
>
> 00,00,00,53,00,45,00,4e,00,53,00,00,00,53,00,68,00,61,00,72,00,65,00,64,00,\
>
> 61,00,63,00,63,00,65,00,73,00,73,00,00,00,54,00,61,00,70,00,69,00,73,00,72,\
> 00,76,00,00,00,4e,00,74,00,6d,00,73,00,73,00,76,00,63,00,00,00,00,00
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost:
> netsvcs: Reg_Multi_SZ: EventSystem Ias Iprip Irmon Netman Nwsapagent
> Rasauto Rasman
> Remoteaccess SENS Sharedaccess Tapisrv Ntmssvc
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

From: "NewScience" <newscience83@usadatanet.net>

| David:
|
| Wasn't that in one of my checks? Let me know so if not, I can add to my
| help/cheat sheet.
|

No, it wasn't.

Please add. That's why I posted this update to the thread.

Thanx again for the time and assistance you did provide.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

My fault. Looking back in the posts, I did send you that and you did reply.
It was on a RE: Cont'd....
post, but I really hadn't read your reply.

You did check the registry key AND you gave me the data (in hex). I hate
hex and that is probably why I didn't really look at the reply. For the
amount of data that should have been in the netsvcs key, you should have had
more data.

Sorry, I should have caught that.

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23E4AV3YFHHA.924@TK2MSFTNGP02.phx.gbl...
> From: "NewScience" <newscience83@usadatanet.net>
>
> | David:
> |
> | Wasn't that in one of my checks? Let me know so if not, I can add to my
> | help/cheat sheet.
> |
>
> No, it wasn't.
>
> Please add. That's why I posted this update to the thread.
>
> Thanx again for the time and assistance you did provide.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>