Automatic Updates service and BITS service will not start.  Get a message from both:<br>Could not start (either above) server on local computer.  Error 2: The system cannot find the file specified.<br><br>These began after cleaning out the VUNDO worm.  These services are not running.  How do I repair them to run?<br>© 2009 Microsoft Corporation. All rights reserved.Fri, 06 Mar 2009 17:11:58 Z3610b930-c366-435c-b539-0134e2a72db3http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#3610b930-c366-435c-b539-0134e2a72db3http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#3610b930-c366-435c-b539-0134e2a72db3chogyehttp://social.technet.microsoft.com/Profile/en-US/?user=chogyeAutomatic Updates service and BITS service will not start.  Get a message from both:<br>Could not start (either above) server on local computer.  Error 2: The system cannot find the file specified.<br><br>These began after cleaning out the VUNDO worm.  These services are not running.  How do I repair them to run?<br>Wed, 04 Mar 2009 17:51:16 Z2009-03-04T17:51:16Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#79514fea-a7df-4e55-96b3-8a845b55b4dahttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#79514fea-a7df-4e55-96b3-8a845b55b4daKurt Faldehttp://social.technet.microsoft.com/Profile/en-US/?user=Kurt%20Falde you may want to look at running SFC /SCANNOW to check to make sure that all your files are intact for core windows files.  Could be the files were too corrupted to clean or something.<hr class="sig">CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfaldeThu, 05 Mar 2009 19:51:12 Z2009-03-05T19:51:12Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#ff4c3153-f6ff-4bae-b708-180d2619192bhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#ff4c3153-f6ff-4bae-b708-180d2619192bchogyehttp://social.technet.microsoft.com/Profile/en-US/?user=chogyeI ran SFC /SCANNOW at the command prompt.  After about 2 minutes it completed.  I still cannot get either service to start. Thu, 05 Mar 2009 20:22:57 Z2009-03-05T20:22:57Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#597fe128-2ebf-4966-8537-65e7be1249dfhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#597fe128-2ebf-4966-8537-65e7be1249dfKurt Faldehttp://social.technet.microsoft.com/Profile/en-US/?user=Kurt%20Falde Well for WUA you might want to try installing the client over again.. get the right one at <a href="http://support.microsoft.com/kb/949104">http://support.microsoft.com/kb/949104</a> and also try running the installer with the /wuforce command line option..<br><br>For BITS I'm not sure. I would check the %SystemRoot%\System32\qmgr.dll file to make sure it exists.. may want to make a copy of it from a similar OS/system you have and copying it into the system.<br><br><hr class="sig">CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfaldeThu, 05 Mar 2009 21:34:24 Z2009-03-05T21:34:24Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#9a256a9f-9e2e-4a11-8dca-f643711ab23chttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#9a256a9f-9e2e-4a11-8dca-f643711ab23cchogyehttp://social.technet.microsoft.com/Profile/en-US/?user=chogyeI reinstalled WUA success fully.  BITS has this path to executable:<br><br>%fsystemRoot%\system32\svchostexe -k netsvcs<br><br>Looks like the trojan corrupted the BITS path.  How do I delete this path?  I cannot in the Services window.  Can I deleted BITS completely from Services and re-install?<br><br><img alt=""><br> Fri, 06 Mar 2009 14:08:28 Z2009-03-06T14:08:28Zhttp://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#75785b95-a7c3-4b91-af08-e7db0795c0e9http://social.technet.microsoft.com/Forums/en-US/ForefrontclientMTR/thread/3610b930-c366-435c-b539-0134e2a72db3#75785b95-a7c3-4b91-af08-e7db0795c0e9Kurt Faldehttp://social.technet.microsoft.com/Profile/en-US/?user=Kurt%20Falde HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS is the reg location for the BITS service.. I would compare what is there to whats on a good machine<br><br>ImagePath should be %SystemRoot%\System32\svchost.exe -k netsvcs<br><br><br>Under Parameters subkey the ServiceDll should be %SystemRoot%\System32\qmgr.dll  (this is the actual BIT's file svchost.exe is just a shared container process for multiple services to utilize less resources on the system)<hr class="sig">CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response) Check out my blog http://blogs.technet.com/kfaldeFri, 06 Mar 2009 17:11:55 Z2009-03-06T17:11:55Z