Comments on: Fixing the Background Intelligent Transfer Service (BITS)

By: PURPLE

PURPLE — Sat, 05 Dec 2009 10:02:06 +0000

oops changed Image path value to “C:\WINDOWS\system32\svchost.exe -k netsvcs”

By: PURPLE

PURPLE — Sat, 05 Dec 2009 09:59:50 +0000

sorry that I’m not good at English(I’m Korean)

I didn’t fix my problem about BITS

even I typed ” C:\WINDOWS\system32\qmgr.dll”

But I found this

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Imagepath”%fystemRoot%\system32\svchost.exe -k netsvcs”

I chaged Image path value to”"%fystemRoot%\system32\svchost.exe -k netsvcs”

finally It works well

Thank you so much for your hint

^-^

By: Dave H

Dave H — Sun, 22 Nov 2009 14:08:08 +0000

Below are the files that were changed on my machine by a Trojan acording to McAfee. Tooke me forever to get rid of the thing.
Many thanks for the super article and comments. Required reading..

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BITS (ImagePath=%fystemRoot%\System32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\wuauserv (ImagePath=%fystemroot%\system32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\BITS (ImagePath=%fystemRoot%\System32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\wuauserv (ImagePath=%fystemroot%\system32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\BITS (ImagePath=%fystemRoot%\System32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\wuauserv (ImagePath=%fystemroot%\system32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS (ImagePath=%fystemRoot%\System32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv (ImagePath=%fystemroot%\system32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\controlset001\Services\BITS (ImagePath=%fystemRoot%\System32\svchost.exe -k netsvcs)
HKEY_LOCAL_MACHINE\SYSTEM\controlset001\Services\wuauserv (ImagePath=%fystemroot%\system32\svchost.exe -k netsvcs)

By: daks

daks — Thu, 12 Nov 2009 13:21:04 +0000

Thank you Rob that worked great!!!

By: palehorse

palehorse — Fri, 06 Nov 2009 21:10:05 +0000

Thanks for the tip Mark! Good to know!

By: Mark

Mark — Fri, 06 Nov 2009 20:57:29 +0000

In my case I had conficker worm.

I exported these keys from a known working machine, then imported on the broken machines. After this I started the BITS and Windows AutoUpdate Services and all was well:

HKLM\System\ControlSet001\Services\BITS
HKLM\System\CurrentControlSet\Services\BITS
HKLM\System\ControlSet001\Services\WUAUSERV
HKLM\System\CurrentControlSet\Services\WUAUSERV

Mark

By: Chris

Chris — Fri, 16 Oct 2009 01:30:56 +0000

I finally got access to windows update and could not install updates. Microsoft solutions left me with a “system cannot find file” error for finding the background intelligent transfer service. Searched the registry for Bits and found a single %fystemroot% item.
Changed it to %Systemroot% and updates work like a charm.
(it might be faster to search for %fystemroot%
Thanks

By: Brian M

Brian M — Fri, 11 Sep 2009 00:28:48 +0000

I have the exact same problem. I’ve read through this whole page and everything else I could get my hand on from the internet…but since castlecops is down I wasn’t able to get the registry key…

I tried to add in the one that Chris F gave, namely:

“HKLM\SYSTEM\ControlSet001\Services\BITS\ParametersServiceDll REG_EXPAND_SZ C:\WINDOWS\system32\qmgr.dll”

but I’m not sure if I did it correctly because I went back to Services in the Administrative Tools and tried to start BITS but it couldn’t find the specified file again. I too didn’t have Parameters in my registry, only Enum and Security…but again, I don’t know if I edited the registry correctly as it is my first time…I know that it’s potentially dangerous if I don’t know what I’m doing but I think I can do it on my own…If you could just walk me through it though since you just got yours fixed 3 days ago and you seemed to have the exact same problem that I have…that would be fantastic as I’ve now had this problem for months!

Thanks

By: Chris F

Chris F — Mon, 07 Sep 2009 15:37:27 +0000

That was awesome! I had spent a couple of days searching for an answer and I had tried numerous suggestions until stumbling on this site.

Adding…

HKLM\SYSTEM\ControlSet001\Services\BITS\Parameters
ServiceDll REG_EXPAND_SZ C:\WINDOWS\system32\qmgr.dll

…to the registry was all it took! I was missing the Parameters entry completely and all I had was the Enum and Security entries in my registry.

Thanks again!

By: zyxy

zyxy — Thu, 27 Aug 2009 20:49:59 +0000

thanks u save my ass, i looked over 1 day for solution
%fystemRoot%\System32\svchost.exe -k netsvcs

thats was trojan , damn him , after changing to %System all was working great !!

thanks !thanks !thanks !thanks !thanks !