MSBLAST etc... patch advice

[Jonathan Clements]

Hi all,

A friend's computer has recently been infected with the Lovsan worm (and
another one who's name I can't remember). So I copied tripwire (from NAI)
and the MS patch to a CD and went over. Tripwire has successfully removed
them, however I can't get the patch to run - it seems to come up with some
error about "Please ensure the cryptographic service is running"... So I
checked the services, and indeed it is running. I tried the patch again on
my own machine and it installed straight off. The only obvious differences
are that I'm on XP Pro, and they're on XP Home, but I don't think that
should make a difference. I enabled the ICF and am hoping that will hold off
for a little time while I find an answer as to why this patch won't
install.Oh, the error also mentions something about some .PIF not being
validated.... Sorry to be so vauge, I can't reproduce it on my system.

Thank you in advance,

Jon.

 

[Jibefan]

I have seen this on a few systems. Just out of curiousity, is your system a
Dell that came pre-loaded from the factory?

At any rate, try these steps and it should solve your problem:

Start-Run-cmd
net start cryptsvc
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
exit

Now reboot and try the patch again. This has worked for me on every
occasion. If it does not work, post here and I have a few other suggestions
that might help.

 

[Jonathan Clements]

Thank you for a prompt and informative post.

To satisfy your curiousity - Mine definately is not a Dell... theirs may
well be, I didn't play too close attention to that aspect when I was over
there. However, what concerns me is that if so many DLLs need to be
registered on that system (surely, they should be already!), then if you can
enlighten me to any other problems that have occured on such systems which
you've had to apply this course of action to - that'd be much appreciated.

Thanks again,

Jon.

 

[Jibefan]

Unfortunately I don't have much more information for you. The systems that I
did this on were not able to install the patch and showed a message that was
something like "Setup could not verify the integrity of the file update.inf.
Please ensure the cryptographic service is running". I did some research and
came across this suggestion in another discussion group. I tried the steps
and they worked on both systems. There is also a KB article that talks about
this same message when installing SP1. The two systems that I had worked on
were Dell's that came with SP1 installed. I thought there might be some sort
of pattern.

 

[Jonathan Clements]

Did the following last night and it worked a treat.

Many thanks,

Jon.