How to install deleted services

XP Killer trojan has deleted following services from my PC( was trying it against BZ beta).

Application layer gateway services
System Restore service
Windows firewall/ ICS service

Is there a way to install these services again, short of a full image restore?

Thanks

 

Hi aigle,

An XP Repair Install will probably do that for you. My preference would be to restore my most recent image.

Nick

 

Or someone can extract those from the registry, send it to you and you can merge them.
I did this 1-2 times and it worked for me and one person, who got his missing services back.

 

Thanks foe replies, so can anybody send the reg enteries to me?

aiglehawk@hotmail.com

 

To reinstall System Restore, try this method: How to reinstall System Restore in Windows XP?. To reinstall ICS, try Method 1 described here: You cannot start the Windows Firewall service in Windows XP SP2.

Nick

 

Hi Nick thanks a lot. Very interesting. I got both these services back.
Now only I need Application layer gateway service. Anyone?

Thanks.

 

Here's the reg patch for your Application Layer Gateway Service. Change the extension from .txt to .reg. After merging it, I would then run Sfc /Scannow to verify your system files.

Nick

 

Thanks a lot nick. U are so nice!

Take care

 

Do I need to change the name from alg repair to alg or not?

 

Done as u said but service still not appearing in the list.

 

Does it show in regedit? Have you rebooted? (The patch name itself does not matter).

 

First time I merged, then checked services.msc, ALG service was not there. I run sfc scannow, rebooted, checked services.msc, ALG service was not there. Again merged teh registry, rebooted, service not there.

 

Hi Aigle,

Try this patch instead. The previous pointed to ControlSet001. This one points to CurrentControlSet. I tested it here and it should work for you. It does require a reboot.

Nick

 

Thanks, it worked.

Just one last Q. Why services reg is divided into control set 001, 002, 003, and current control set? If I want to defend these, I will have to defend all these reg enteries or only Current Control set?

Thanks.

 

Glad it worked. Here's a brief explanation of Control Sets: What are Control Sets? What is CurrentControlSet?. I generally protect all control sets.

Nick

 

Thanks, will see this link.
BTW what u use to defend them?

 

SSM or ProSecurity (paid versions).

 

Thanks.

 

Nick,

Do you think I can get a fix for MS Software Shadow Copy Provider Service, please?

This service was also deleted from my system a while ago and I've been looking for a way to restore it for ages as I do not have an XP installation CD.

Using XP Home, sp2

Many thanks!

 

Hi Birdman,

Try this one. It's just a reg patch though...if you have system file issues (missing or corrupt files), it may not solve your problem. Check your event logs for errors.

Nick

 

Thanks for your prompt reply Nick. Unfortunately it looks like it did not solve my problem. When I clicked to start the service, I received the following error message:

"Could not start the MS Software Shadow Copy Provider service on Local Computer.

ERROR 1053: The service did not respond to the start or control request in a timely fashion"

Is there another way to fix/restore this service without an XP CD installation?

Thanks.

 

Hi Birdman,

This thread at MSFN should give you an idea of what's involved in repairing the Shadow Copy services: Restore "Volume Shadow Copy" (VSS) and "MS Software Sha, Without re-install? To make backup system partition!.

Nick

 

Will check out the thread. Thanks for all your help Nick.