error 193 - Could not start Wingate engine service

[xaoc]

i'm using wgate 5.2.3 on Windows XP.

error 193 - Could not start Wingate engine service on local computer.

WGate engine does not start after Worm.Sasser was infect my computer.
Virus was removed, but wingate doesnot work - red monitor screen icon i see.

whats i need to do?

thank you.

[Pascal]

Error 193 (WIN32) means:

%1 is not a valid Win32 application.

It is possible that during the virus removal, the WinGate.exe file got corrupted. Re-run the installer with the /X parameter. That way, you'll be able to extract WinGate.exe from the installer and can replace the copy you have on your machine.

[xaoc]

i'm uninstall and install wingate, but it's no have effect.

i'm try to run installer with /x parameter, but it's say me extract files, but i dont know location for them.

[Pascal]

The default location is C:\Program Files\Wingate. You can just put the files in a temp folder, then manually copy them across.

If that still doesn't help you - try starting the service manually from the Service Control Manager. (Control Panel, Administrative Tools, Services)

[xaoc]

i'm put files in default wingate directory, but that doesn't help.

try to start service manually - "error 193 - Could not start Wingate engine service on local computer"

it's doesnot work :(

[Pascal]

The application you used to remove Sasser - did it give you a list of files it modified / deleted ?

[xaoc]

i'm using kaspersky antivirus

C:\WINDOWS\skynetave.exe обнаружен вирус Worm.Win32.Sasser.c
C:\WINDOWS\skynetave.exe объект с вирусом Worm.Win32.Sasser.c уничтожен.
C:\WINDOWS\system32\9833_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\9833_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\12531_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\12531_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\8988_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\8988_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\2548_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\2548_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\25051_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\25051_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\32031_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\32031_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\29979_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\29979_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\619_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\619_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\22857_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\22857_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\3548_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\3548_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\3590_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\3590_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\12559_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\12559_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\1366_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\1366_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\26631_up.exe обнаружен вирус Worm.Win32.Sasser.a
C:\WINDOWS\system32\26631_up.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
C:\WINDOWS\system32\27063_up.exe обнаружен вирус Worm.Win32.Sasser.c
C:\WINDOWS\system32\27063_up.exe объект с вирусом Worm.Win32.Sasser.c уничтожен.
C:\Documents and Settings\All Users\Documents\Setup.exe обнаружен вирус Worm.Win32.Dedler.f
C:\Documents and Settings\All Users\Documents\Setup.exe объект с вирусом Worm.Win32.Dedler.f уничтожен.
C:\Documents and Settings\Andrey\Local Settings\Temp\~DFA924.tmp PE_Patch неизвестный формат
C:\Documents and Settings\Andrey\Local Settings\Temp\~DF63D3.tmp PE_Patch неизвестный формат
C:\Documents and Settings\Andrey\Local Settings\Temporary Internet Files\Content.IE5\DOGBT1K1\wbk639.tmp подозрение на вирус типа Exploit.IFrame.FileDownload
C:\Documents and Settings\Andrey\Local Settings\Temporary Internet Files\Content.IE5\SLARSXQ7\mra[1].exe поврежден.
C:\Recycled\Dc1.exe обнаружен вирус Worm.Win32.Sasser.a
C:\Recycled\Dc1.exe объект с вирусом Worm.Win32.Sasser.a уничтожен.
E:\Program Files\Kaspersky Lab\AntiViral Toolkit Pro\Suspicious\Normal.dot/ThisDocument подозрение на вирус типа Type_Macro
E:\Program Files\Shared Resource Scanner 6.2\SCAN62.EXE поврежден.
E:\bufer\Setup.exe обнаружен вирус Worm.Win32.Dedler.f
E:\bufer\Setup.exe объект с вирусом Worm.Win32.Dedler.f уничтожен.
E:\System Volume Information\_restore{914C8B66-70E7-4BF9-A8B7-81259AF6C60D}\RP148\A0016531.exe Krypton неизвестный формат

[Pascal]

Gene requested that you send him the WinGate.exe you have on your machine. You can reach him at genie at qbik dot com.

[n0ticer]

xaoc,

u should try a second scan using this:
http://housecall.trendmicro.com/

and if found something download and run this:
http://www.grisoft.com/us/us_remtext.php?id=bagbugnet

or this:
http://www.trendmicro.com/download/dcs.asp

for more infos on removal of the virus / how to fix damaged windows file:
http://www.trendmicro.com/vinfo/virusen ... M_SASSER.B

i think ur windows service files where wingate.exe is dependent are the ones corrupted.

[xaoc]

i'm already scan by AVP and ftp://ftp.kaspersky.com/utils/clrav/
already patch by http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

but win gate isnot work :(

[genie]

Take a look here:
http://support.microsoft.com/default.as ... us;Q325680
or here:
http://support.microsoft.com/default.as ... us;Q812486

[genie]

Basically, it says that you might have a file named "Program" on your disk where Wingate is installed - check if there is any and remove or rename it.

[xaoc]

i'm get an error "error 193 - Could not start Wingate engine service on local computer." only if i try to start service, not if i try start wingate.exe!
in last case - nothin to do.

look this:

[Pascal]

"Wingate engine service" is WinGate.exe

[genie]

That's exactly the case I was referring to: make sure that there is no file E:\Program on your computer. If there is any - rename or delete it.

[xaoc]

ok. i'm set quotes and services start, but very slowly!
progress bar increased very slowly and status is always STARTING not started

Gate Keeper message "There was a problem connection to the server..."

[xaoc]

Error 1053 The service did not respond to the start or control request in a timely fashion

[Pascal]

Right. The next thing is - as you are running Kaspersky AV and you are using WinGate 5.2.3 (6.0 has this fixed) there is probably a conflict with PluginDKAV.

Refer to this post for more information:

http://forums.qbik.com/viewtopic.php?t=1383

[xaoc]

ok! it's work!
thank you very much! :)

[Pascal]

Excellent. Let us know if you have any other problems. You should also take a look at 6.0 Beta at some stage, if you're interested. It is a fairly significant improvement on 5.2.3.

[xaoc]

already install 6.0.0, becouse i'm need AVP Monitor working.

one question more:
need to use KAV plugin if i'm using AVP Monitor?
need to use both?

thank you

[Pascal]

I'm not familiar with AVP Monitor. (Haven't tried it myself)

However, KAV protects you against traffic coming in and going out from your WinGate Server. It scans HTTP, FTP and the mail protocols, incoming and outgoing.

Have a read of the Kaspersky Antivirus features (http://www.wingate.com/features-antivirus.php) and see if they suit your requirements.