Microsoft-Windows CAPI2 failed extract of third-party root list from auto update cab

Hi Martin, I am wondering whetheryou noticed my above email that a 

" Microsoft-created Certificate Trust List is out of date or faulty, yet Microsoft refuses to issue a current certificate and has yet to reply to dozens of online posts seeking answers, yet another known Vista issue Microsoft ignores. Can Microsoft please explain why? Moreover, will Microsoft please update its Trust List for its own Windows Update site? "  (I found this on another Forum through Google). Will above fix this problem or not?  I do not have any problem with Microsoft Updates and when I go to Windows Updates in the Control Panel everything seems to be uptodate.  I only noticed that the above problem seems to occur, when Windows checks for Updates.

My problem clearly refers to a Certificate that is invalid. Confuseduser P.S. I have the Microsoft Updates in my trusted sites.   P.S. I also found Microsoft TechNet Even ll and I followed some of it, however, I do not know how to handle a web browser that requires an Automatic Root Certificate.   Confuseduser

Hi Martin, I found out the following: Every  day after 4 pm the Certificate Services Client starts, afterwards the Security Centre starts and then I get the error with the CAPI2 as above.  I have now gone back to the Windows Security log.  I found even 5038 audit failure, System Integrity (it happened at the same time as the CAPI2 message).  I get error message: Device/HarddiskVolume1\Windows\System32\drivers\mchInjDrv.sys is the cause.

I looked around on the Internet and it could be a Rootkit and it could be Malware.  What do I do now.  I really don't even know, what it all means. However, I think that it is all linked.  Confuseduser

04 June, 2009

Hello Everyone,

I too started experiencing CAPI2 11 errors on 27May2009 - the day Windows Vista SP2 appeared on my Windows Update list.  At that time however, I only set Windows Update to 'hide' Vista SP2 for the meantime to allow it time to go through the usual debugging process for newly issued software. 

But after noticing the CAPI2 11 errors a few days later, I decided to install Vista SP2 immediately to see if the CAPI2 11 errors will go away.  So now with deep foreboding I am using Vista SP2 and the CAPI2 11 errors still haven't gone away.

What I noticed though is that:

(a) The CAPI2 11 errors occur only during pc start-up and only when my internet connection is enabled prior to pc start-up - my usual pradtice ever since;

(b) I have tried disabling my internet connection is disabled prior to start-up - by disabling the on-board LAN prior to shutdown - and discovered that no CAPI2 11 error occurs during the next pc start up.

Aside from Windows Vista, the only other software I have that has automatic update enabled is Norton 360 v2.  By experimentation, I have determined that the CAPI2 11 errors still occur during pc start up when the on-board LAN is enabled, whether N360 v2 automatic update is enabled or disabled.

To Martin:  I do not think the problem is Vista SP2.  I think it was Windows Update on 27May2009 - all CAPI2 11 errors started occuring on that date!  The last time something like this happened to me with automatic Windows Update, I lost access to my Security Center.  Back then, I was also directed to run SFC and to check my start-up programs one by one - to no avail.  I have forgotten the prescribed solution for that problem, but it I think it involved fixing a corrupted configuration file(?) that could not be detected by SFC.

Alex_PH