Event ID 7000 -can't start the computer browser

[ChicagoTechNet]

XP with SP1 can't start the computer browser services. The event viewer lists event id 7000 - "The computer browser service failed to start due to the following error: the executable program that this service is configured to run in does not implement the service." Any suggestion.

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www.ChicagoTech.net

 

[bcastner]

1. Compare all the keys on the problem machine with a known good machine from this registry entry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser

2. There are 4 DLLs required, (\windows\system32) all show show in their Properties, Version, that they are 5.1.2600.1106, coming from Service Pack1, dated 8-29-2002:

browser.dll
browselc.dll
browseui.dll
browsewm.dll

3. Be sure the dependent services are running: Workstation and Server.

 

[ChicagoTechNet]

Bill,

Thank you. I did check above three things before posted. Any other suggestions?

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www.ChicagoTech.net

 

[bcastner]

Look for a possible malware version of svchost.exe. Use the search feature and see if there is a rogue svchost entry other than in the dllcache and \windows\system32.

 

[bcastner]

If svchost is clean, I would:

. Click Start, select Run, and type C:\WINDOWS\INF in the textbox.
. Click OK.
. Locate the Nettcpip.inf file.
. Right-click the file Nettcpip.inf and select Install from the menu.

Reboot.

Now run the WinsockFix tool:

http://members.shaw.ca/techcd/VB_Projects/WinsockFix.zip

 

[ChicagoTechNet]

Hii Bill,

I think it is SVCHOST. I am waiting for my client' permission to clean it. Last time when I clean the SVCHOST, I did it manually. Since I will not be there, do you have any suugestions how to do it?

By the way, this is the same computer has the browsing issue. After we importing a good registry, the computer browser can't start.

Thank you for the help.

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www.ChicagoTech.net

 

[bcastner]

Steps #2-#3
faq608-4650

 

[ChicagoTechNet]

didn't find the virus. But the svchost.exe dated is 8/29/02 and my and other XP's svchost is 8/23/01 (all are SP1a). How can I know it is virus?

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www.ChicagoTech.net

 

[bcastner]

My xp sp1 svchost.exe is 13kb, 8-23-01
Version 5.1.2600.0
(xpclient.010817-1148)

Right-click the other one you found, properties, Version. It should show the MS copyright, version number, and other information.

 

[bcastner]

I am curious if in Device Manager you show any "Deterministic Network Adapter Miniport" entries.