XP-Client4.6-cvpnd.exe Validation failed for C:\Windows\system32\vsinit.dll

[joshuagray]

Windows XP Home SP2 - Started failing with the "Warning 201. Necessary VPN sub-system not available. Can't connect to remote VPN server." According to the Cisco documentation it says to reinstall the Client.

I uninstalled the old client and reinstalled v4.6 and now the C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe (which is the Cisco Systems, Inc. VPN Service) fails at startup with the following error message: Validation failed for C:\Windows\system32\vsinit.dll

I have completely uninstalled and reinstalled the client and still the VPN service will not start and get the same error message. If I try to start it manually I get the same error message.

Any clues on where to look?

[ehirsel]

Do you have Zone Alarm installed on your XP system?

See if you have vsinit.dll in locations other that c:\windows\system. You may want to clear out c:\windows\temp and all other temp folders as well.

I have done some searches on vsinit and Zone Alarm seems to match most of them. So I am placing some hints that I found to this post to see if it fixes your issue?

Let me know if this helps.

[joshuagray]

Cisco installs this dll as part of it's stateful firewall. The Cisco VPN service that runs in Windows is dependent on that file. I have already cleared out all temp files and reinstalled.

Zone Alarm has never been installed on this PC.

[ehirsel · Accepted solution]

Here is some info I found from this URL:

http://forum.zonelabs.org/zonelabs/board/message?board.id=inst&message.id=24113#M24113

Even though you do not use the Zone Alarm product I think you may need to follow these steps anyway. Try it and let me know how it proceeds.

Here is the message contents:

Reregister DLL files that are associated with Cryptographic Services

To register .dll files that are associated with Cryptographic Services, follow these steps:

1. Click Start, and then click Run.

2. In the Open box, type cmd, and then click OK.

3. At the command prompt, type the following commands, pressing ENTER after each line:

Note Click OK if you are prompted.

Note Microsoft Windows 2000 does not include the Sccbase.dll file. If you are running a version of Windows 2000, omit the Sccbase.dll file.

regsvr32 softpub.dll

regsvr32 /u wintrust.dll

regsvr32 /u initpki.dll

regsvr32 /u dssenh.dll

regsvr32 /u rsaenh.dll

regsvr32 /u gpkcsp.dll

regsvr32 /u sccbase.dll

regsvr32 /u slbcsp.dll

regsvr32 /u cryptdlg.dll

regsvr32 /u softpub.dll

exit

4. Restart your computer.

5. Click Start, click Run, type cmd in the Open box, and then click OK.

6. At the command prompt, type the following commands (press ENTER after each command).

Note Click OK if you are prompted.

Note Microsoft Windows 2000 does not include the Sccbase.dll file. If you are running a version of Windows 2000, omit the Sccbase.dll file.

regsvr32 softpub.dll

regsvr32 wintrust.dll

regsvr32 initpki.dll

regsvr32 dssenh.dll

regsvr32 rsaenh.dll

regsvr32 gpkcsp.dll

regsvr32 sccbase.dll

regsvr32 slbcsp.dll

regsvr32 cryptdlg.dll

regsvr32 softpub.dll

exit

[joshuagray]

Sorry it took so long to get back to you. I completely uninstalled the VPN Client, ran the steps you provided for the dll files, ran a full spyware sweep, and then reinstalled the VPN Client. The problem is now completely resolved! Thanks for your help!

[ehirsel]

Just following up to see if my prior post was of any help.

[joshuagray]

I will hopefully be going there this afternoon to attempt the fixes. I will let you know. : )

[jclem]

I have had two remote users that have gotten this error in the past two weeks. Neither were running up to date anti-virus, and both were loaded with spyware. That being said correcting those issues did not solve the problem. After many hours trying to find a solution, including uninstalling/reloading the VPN client, had to format and reload Windows OS. Both PC's were XP home edition. The problem is related to the vsinit.dll not registering. I've gone through most of the same you steps you have mentioned and found the same results.

Jason

[ehirsel]

I take it that your issue is resolved then, once you reinstalled win xp home edition. Or do you still have the issue?

What version of 4.6 are the clients using? 4.6.00.0045, 4.6.00.0049, or 4.6.01.0019? Note that 4.6.01.0018 is no longer available on CCO due to bugs that 0019 fixes.

[jclem]

Yes, the problem was resolved with a reload of the OS. The VPN client we're using is 4.0.3(D).

Update: One of our remote users that had their PC reloaded is now experiencing the same problem once again within 1 week of the reload. I have their PC in my possession and will be looking at it today to try and determine what has happened. Will post results if anything specific is found.

Jason

[ehirsel]

Some helpful tools to troubleshoot malware on the win pc are DllCompare and KillBox as some spyware is so sophisticated that they run under different processes that are hard to catch.

Also look in this part of the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

to see if there are any entries that should not be present. There may be subfolders under that key, usually they should not be present.

This key is valid for win xp as well as win nt/2000.

[jclem]

Well, there is nothing new to report, just like taking an ill child to the doctor, the PC worked fine when it was brought in. No problems to report after it was taken back home. Virus scan came back clean, and only a few tracking cookies detected. Thanks for the info on things to check for. I'll look into the registry if the problem returns.

Jason

[ehirsel]

One other item to check. This url descibes a virus that could cause the issue that you see:

http://www.sophos.com/virusinfo/analyses/w32argdoora.html

[milan.kulik]

Good point!

The client upgrade fixed my problem with Cisco VPN client not able to see a certificate saved into the Microsoft store after XP SP2 installation.

Thanks,

Milan