Services messed up from malware and/or "help" from friend

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

My husband's computer got some kind of virus/spyware/malware that really
messed it up. Someone else was "helping" earlier and he changed something in
the Local Services because it was different from the defaults defined in the
Help. Unfortunately he didn't keep the notes he made, so I don't know what he
changed. Everything else seems to be working OK, but the BITS service can't
run. The error is:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
"The Background Intelligent Transfer Service service failed to start due to
the following error:
The account specified for this service is different from the account
specified for other services running in the same process."

The computer:
Microsoft Windows XP Home Edition Version 2002 Service Pack 2
Compaq Presario Intel Celeron CPU 2.66GHz, 504 MB of RAM

It is connected to the Internet via a Linksys router. Accessing the Internet
is working OK, except that I can't do things like updating programs like
Spybot because they need to have BITS working.

There are several services different from the defaults defined in Help.
Here are the differences:

Name Status Startup Type Log On As
BITS Manual Network Service
(this matches the Help default)

Messenger Started Automatic Local System
(Help says Local Service is default for Messenger service)

(RPC) Started Automatic Network Service
(Help says Local System is default for RPC service)

UPnP Host Started Automatic Local Service
(Help says Local System is default for UPnP host)

Except for a few differences in startup type, everything else matches what
is given for the defaults.

Can anyone tell me what the defaults should be for these services? Or
rather, what makes sense for them such that BITS will work OK? I'm hesitant
to change them all in one fell swoop; if the machine is disabled, I don't
have enough knowledge to fix it. Another thing that makes me nervous is that
the guy said he thinks that whatever he changed was from "Network Service" to
"Local System" - it may still be messed up; how can I tell?

Any help would be appreciated!

--
Diane C.

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Awesome! I gotta run now, and although I didn't have a chance to look at
much of the rest of the website, it doesn't look like it has info about the
"Log On As" part of the services, which are apparently what is truly messed
up on this machine.

Any more clues?

"kovik" wrote:

> Dear Diane:
>
> check this link. it will bring services default and also explain every
> process.
> http://www.blackviper.com/WinXP/servicecfg.htm
>
> kovik
>
> "purplediane" <purplediane@discussions.microsoft.com> escribió en el mensaje
> news:4F82637C-7552-486C-B46A-5586D0E8D18D@microsoft.com...
> My husband's computer got some kind of virus/spyware/malware that really
> messed it up. Someone else was "helping" earlier and he changed something in
> the Local Services because it was different from the defaults defined in the
> Help. Unfortunately he didn't keep the notes he made, so I don't know what
> he
> changed. Everything else seems to be working OK, but the BITS service can't
> run. The error is:
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> "The Background Intelligent Transfer Service service failed to start due to
> the following error:
> The account specified for this service is different from the account
> specified for other services running in the same process."
>
> The computer:
> Microsoft Windows XP Home Edition Version 2002 Service Pack 2
> Compaq Presario Intel Celeron CPU 2.66GHz, 504 MB of RAM
>
> It is connected to the Internet via a Linksys router. Accessing the Internet
> is working OK, except that I can't do things like updating programs like
> Spybot because they need to have BITS working.
>
> There are several services different from the defaults defined in Help.
> Here are the differences:
>
> Name Status Startup Type Log On As
> BITS Manual Network Service
> (this matches the Help default)
>
> Messenger Started Automatic Local System
> (Help says Local Service is default for Messenger service)
>
> (RPC) Started Automatic Network Service
> (Help says Local System is default for RPC service)
>
> UPnP Host Started Automatic Local Service
> (Help says Local System is default for UPnP host)
>
> Except for a few differences in startup type, everything else matches what
> is given for the defaults.
>
> Can anyone tell me what the defaults should be for these services? Or
> rather, what makes sense for them such that BITS will work OK? I'm hesitant
> to change them all in one fell swoop; if the machine is disabled, I don't
> have enough knowledge to fix it. Another thing that makes me nervous is that
> the guy said he thinks that whatever he changed was from "Network Service"
> to
> "Local System" - it may still be messed up; how can I tell?
>
> Any help would be appreciated!
>
> --
> Diane C.
>
>
>