locked
Windows Live OneCare service won't start RRS feed

  • Question

  • Dear Sir/Madam,

     

    I seem not to be the first one in this forum to be complaining about the fact that OneCare can't startup becouse it can't get "Windows Live OneCare" service running. Somehow non of them seems to be able to solve this problem.

     

    This is what I already did:

    • I went to http://support.microsoft.com/kb/910659/ and I tried all the suggested methods.
    • I got rid of ALL the installations I EVER made on my computer (like AVG, etc).
    • I have uninstalled OneCare twice and (while uninstalled) executed the removal tool.

    Non of these options worked. I already had OneCare installed on my pc, but somehow a virus infected OneCare so I had to remove it. The virus is already removed. OneCare did worked once.

     

    I also checked the event viewer. It said something that might give a clue what is going on here. First I got:

    Event Type: Information
    Source of Event: MSFWSVC
    Catagory of event: (2)
    Event-ID: 1085
    Date:  26-5-2008
    Time:  14:15:29
    User:  N/A.
    Computer: ***********
    Discription:
    The Applicationdirectory can't be changed. The last known good directory stays in use.

    See Help and support on http://go.microsoft.com/fwlink/events.asp for more information.

     

    Notcice that the text above is translated and might not be 100% accurate. Then I got another Event. This one is a more serious warning:

    Event type: Warning
    Source of event: MSFWSVC
    Category of event: (2)
    Event-ID: 1058
    Date:  26-5-2008
    Time:  14:15:35
    User:  N/A.
    Computer: ***********
    Discription:
    OneCare Firewall does not contain any saved policydocuments and there is no policydocument executed. The service offers protection for the host when a policy is aplied.

    See Help and support on http://go.microsoft.com/fwlink/events.asp for more information.

    Once again: the text above is translated and might not be accurate.

     

    Could you please help me?

     

    Greetings,

    Hans

     

    Edit:
    I forgot to metion that when I try to activate this service manually in services.msc I get the following error:
    Error 193: 0xc1

    Thereby I'm using Windows XP Service Pack 3

    Monday, May 26, 2008 1:01 PM

Answers

  • Hello Hans, I suggest contacting support for help resolving this issue. How to reach support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    Monday, May 26, 2008 4:04 PM
    Moderator
  • I am glad to say that I just solved this issue. There was some spyware and some virusses on my pc that somehow weren't noticed by OneCare. I found it by downloading Spyware Doctor. I let him scan and it found all the problems.

    I don't prefer to let Spyware Doctor scan for my Spyware and Viruses because it can also damage important Windows files if they are infected and it hasn't got a "live protection" feature (unless you pay for it offcourse). But it did solve the problem.

    After the scan I removed OneCare from my pc, I ran the OneCare clean-up tool and I reinstalled OneCare. I restarted my pc and it worked again!

    I recomend to sugest this solution to everyone with the same problem.

     

    In any case I thank everyone for their help and especially the women that helped me at the custumer support. It is a fantastic support and has really clear steps to help you solve the problem.

     

    Again thank you for all your help .

     

    Hans.
    Friday, May 30, 2008 3:08 PM

All replies

  • Hello Hans, I suggest contacting support for help resolving this issue. How to reach support - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=2421771&SiteID=2

     

    Monday, May 26, 2008 4:04 PM
    Moderator
  • I am glad to say that I just solved this issue. There was some spyware and some virusses on my pc that somehow weren't noticed by OneCare. I found it by downloading Spyware Doctor. I let him scan and it found all the problems.

    I don't prefer to let Spyware Doctor scan for my Spyware and Viruses because it can also damage important Windows files if they are infected and it hasn't got a "live protection" feature (unless you pay for it offcourse). But it did solve the problem.

    After the scan I removed OneCare from my pc, I ran the OneCare clean-up tool and I reinstalled OneCare. I restarted my pc and it worked again!

    I recomend to sugest this solution to everyone with the same problem.

     

    In any case I thank everyone for their help and especially the women that helped me at the custumer support. It is a fantastic support and has really clear steps to help you solve the problem.

     

    Again thank you for all your help .

     

    Hans.
    Friday, May 30, 2008 3:08 PM
  • Hans, I am glad you were able to solve the problem. It would be most helpful if you were able to report the missed infections - 

    http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=662566&SiteID=2

    -steve

    Friday, May 30, 2008 3:45 PM
    Moderator
  • I don't have the file anymore. The virus worked as follows:

    It came in a file (which could be anything: from a .exe file to a .scr file accoarding to the internet). When you open it, it sais "Select file to crack". At that point you're infected. When you press any button it will install itselve and when you select a file it sais "Incorrect file version". Then it installs itselve somewhere in System32 and adds registrykeys to run itselve at startup, oddly though it can't be found at Run in HKLM.

    It then downloads and installs other virusses (which can be found by OneCare). I had the files hlcrrr.exe and flec006.exe.

    Here is more information about these kind of virusses and how they work:

    http://search.live.com/results.aspx?q=%22Select+file+to+crack%22&go=&form=QBHP

     

    Sorry that I can't do much more for you than this.

     

    Greetings,

    Hans

    Friday, May 30, 2008 7:10 PM
  • No troubles, Hans. Thanks for the additional information and sorry that OneCare wasn't able to stop the original infection.

    -steve

     

    Friday, May 30, 2008 11:53 PM
    Moderator