DHCP Will Not Auto Start

Ran into an issue after getting a computer booting from a virus infection DHCP would not auto start even though it was set to automatic. If you went into services you could start it manually. The fixed turned out to be changing afd start from system to automatic.

60 Second shutdowns and Sirefef.Y

Recent just got in a computer that was claimed to be infected. Nothing obvious popping up but as soon as I ran D7 its new user mode rootkit cleaner jumped into action. Cool, everything else scanned without a trace of infection Malwarebytes, TDSS Killer, aswmbr, and malware scan no infections found anywhere. Then I notice their av was broken so I re-installed MSE and the the horror began. MSE finds Sirefef.Y linked to services.exe and removes and reboots. Every boot after that comes with another detection of Sirefef.Y and a popup saying critical error system shutting down in one minute. After a long search on the internet I come across a post talking about FRST (Farbar Recovery Scan Tool) this tool will only run in PE environment like Vista/7 start-up repair. It produces a log file with lots of information. The important part is the location of the rootkit and idea of what files like services.exe have been tampered with. You then can run a search for a particular file name to find a replacement for the hijacked file. Then to create a fixlist.exe containing the fixes that particular system needs. Such as:


SubSystems: [Windows] ==> ZeroAccess
C:\Windows\System32\consrv.dll
C:\Windows\Installer\{0cdfab67-65d2-56df-4b88-d692edc7ee5f}
Replace: C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe C:\Windows\System32\services.exe

Now remember this was created specifically for the computer in the link below, but gives you a good idea of what is needed to be put in the file to create one for your own situation. After running the fix the reboots have disappeared for me and everything appears to be smooth sailing.

Warning: Information is used at your own risk and is only a guide for an experience tech.

Source: http://www.techspot.com/community/topics/sirefef-removal-60-seconds-reboot.181609/

Failed to Connect to Windows Service

Just had a laptop reporting "Failed to connect to a windows service: Windows could not connect to the System Event Notification Service service". I have seen this error before and was unable to repair it without clean loading windows. This time however I was able to find the solution.

1. Boot to Safe Mode
2. Log-in to an account with administrator privileges.
3. Run Cmd as Administrator
4. type "netsh winsock reset" enter
5. reboot and enjoy

Source: http://www.techspot.com/community/topics/failed-to-connect-to-a-windows-service-problem.97813/

Post #12

Quickbooks 2010 on Windows 7 Locking Up

Had a computer come in with Windows 7 and Quickbooks 2010. Quickbooks would look up every time you tried to connect to the bank to import transactions. The strange part was the customer had an identical computer running the same version of Quickbooks connecting without an issue. Turns out the computer had updated to IE9 the month and Quickbooks 2010 was not playing well with the new version of IE.

Error 1402 Could not open key UNKNOWN\Components

If you ever get "Error 1402 Could not open key UNKNOWN\Components\... trying to install a program the solution is fairly simple once you know where to go. The issue is that the permissions on certain registry keys are missing and trying to search for them is useless do to the lack of permission. The location however is as follows:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components

Note: the S-1-5-18 maybe a different set n here you will find the the key and sub key listed in the error after Components. On these keys you will have to take Ownership and grant Administrators full permissions. The order of those two steps may be reversed. After repairing the permissions the program should install without an issue.

Source: http://www.okino.com/conv/changing_windows_registry_permissions.htm

Slow Epson Print Screen

Just had a computer that took forever to load the print screen when an Epson Workforce 610 was set as default. If any other print was the default the screen would come right up but take forever to switch to the Epson in the drop-down box. The solution appears to be common to a variety of Epson printers and is to remove the following file: "C:\ProgramData\EPSON\PRINTER\EPAUDSO1.AUD". The next time you hit print it will still be a bit slow as the file is recreated but after that the print screen will come right up.

Source:http://forums.adobe.com/message/2654753

Office Activation Issues

Ran across some issues activating office 2010 on a XP computer today that had a corrupt install of office 2003. First the CD drive was missing easy enough fix clear the filters and now we can run setup from the disk. Not so fast setup wouldn't run because of a corrupt install of office 2003. Tried the windows resource kit and fix-it to remove but no luck. Finally ended up having to manually remove and run windows installer cleanup now 2010 would start up the installer but would fail at the very end of the install and roll off with a generic error and no helpful code to look up. After looking at the error logs in %temp% I found a code of 1603. First couple post about 1603 link to permission errors and problems with WMI/WBEM. So I ran a permission fix and WMI/WBEM repair from my trust D7 by foolishit.com after verifying the was an issue. And now for the first time office 2010 is successfully installed but complaining out about licensing and closing office. The final solution to this saga was to use the ospp.vbs to install and activate the product key. Now the office is activated and running like a dream. What a way to end the day! For more info on opps.vbs check out the Microsoft documentaion here.