Windows NT / 2000 / XP RSS Windows NT / 2000 / XP RSS

Patrickske: svchost/rpc crashes

Reply
1 2

•
•
Join Date: May 2004
Posts: 10
Reputation: Patrickske is an unknown quantity at this point 
Solved Threads: 0
Patrickske's Avatar
Patrickske Patrickske is offline Offline
Newbie Poster

Re: computer turns off by itself

 
0
  #1
May 17th, 2004
I got the same problem on my very freshly installed Windows 2003.
SVCHOST.EXE crashes, whitch results in a reboot.
I know I can cancel the shutdown by shutdown /a and I know I can disable the reboting by setting it in the RPC service.
The question is not how to prevent the rebooting, but how the hell can I fix this problem?
I've installed Win2k3, and reinstalled it to be sure that it wasn't Win2k3. also tried several virus scanners to be sure it wasn't a virus.
My system is always connected to Internet via a LAN & router.

Event log:
•
•
•
•
Faulting application svchost.exe, version 5.2.3790.0, faulting module rpcss.dll, version 5.2.3790.0, fault address 0x0002eb3c.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Reply With Quote Quick reply to this message  
•
•
Join Date: Dec 2003
Posts: 2,414
Reputation: alc6379 has a spectacular aura about alc6379 has a spectacular aura about alc6379 has a spectacular aura about 
Solved Threads: 123
Team Colleague
alc6379's Avatar
alc6379 alc6379 is offline Offline
Cookie... That's it

Re: computer turns off by itself

 
0
  #2
May 17th, 2004
It is probably the blaster or sasser worm. Most likely blaster, because of the rpcss.dll message there.

Try running Stinger-- it detects and removes both viruses, along with about 40 others
Alex Cavnar, aka alc6379
Reply With Quote Quick reply to this message  
•
•
Join Date: May 2004
Posts: 10
Reputation: Patrickske is an unknown quantity at this point 
Solved Threads: 0
Patrickske's Avatar
Patrickske Patrickske is offline Offline
Newbie Poster

Re: computer turns off by itself

 
0
  #3
May 17th, 2004
I doubt it is a virus, but I'm willing to scan my system for the 4th time. I don't have anything to lose ;-)

I'm scanning right now!
Reply With Quote Quick reply to this message  
•
•
Join Date: Dec 2003
Posts: 6,439
Reputation: DMR will become famous soon enough DMR will become famous soon enough 
Solved Threads: 363
Team Colleague
DMR's Avatar
DMR DMR is offline Offline
Wombat At Large

Re: computer turns off by itself

 
0
  #4
May 17th, 2004
•
•
•
•
Originally Posted by alc6379
Try running Stinger-- it detects and removes both viruses, along with about 40 others
You might also want to check your system for spyware/adware/malware if you haven't already. Read through some of the posts in our Security forum for instructions on downloading and using a few of the useful (and free) detection/removal utilities:

Ad Aware
SpyBot
SpywareBlaster
HijackThis
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing

Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.

However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
Reply With Quote Quick reply to this message  
•
•
Join Date: Feb 2002
Posts: 626
Reputation: MAD_DOG is on a distinguished road 
Solved Threads: 13
MAD_DOG's Avatar
MAD_DOG MAD_DOG is offline Offline
Practically a Master Poster

Re: Patrickske: svchost/rpc crashes

 
0
  #5
May 18th, 2004
So what are your results everything cool now or not?
Jimmy
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
Reply With Quote Quick reply to this message  
•
•
Join Date: May 2004
Posts: 10
Reputation: Patrickske is an unknown quantity at this point 
Solved Threads: 0
Patrickske's Avatar
Patrickske Patrickske is offline Offline
Newbie Poster

Re: Patrickske: svchost/rpc crashes

 
0
  #6
May 18th, 2004
Reply to alc6379: My system was clean, no virus found

Reply to DMR: I don't have any spyware installed, unless by some magical reason it got my system within 10 minutes. I had just installed my computer with Windows 2003 when the SVCHOST started to crash (and the computer started to reboot).

I changed the RPC-service settings for when it crashes. It no longer reboots now. Also I downloaded all updates from the M$ site.

I don't know if the service had crashed today, since I'm not home to log in and look at the event log.

I do know that the system is up and running the whole day now, but that's all I know at the moment.
Reply With Quote Quick reply to this message  
•
•
Join Date: Feb 2002
Posts: 626
Reputation: MAD_DOG is on a distinguished road 
Solved Threads: 13
MAD_DOG's Avatar
MAD_DOG MAD_DOG is offline Offline
Practically a Master Poster

Re: Patrickske: svchost/rpc crashes

 
0
  #7
May 18th, 2004
Pat you have a legal copy of Win2K3 Server?
Jimmy
E-Mail - jimmy@fiberops.net
Chief Information Officer (CIO) of FiberOps
Reply With Quote Quick reply to this message  
•
•
Join Date: May 2004
Posts: 86
Reputation: JR85023 is an unknown quantity at this point 
Solved Threads: 6
JR85023's Avatar
JR85023 JR85023 is offline Offline
Junior Poster in Training

Re: Patrickske: svchost/rpc crashes

 
0
  #8
May 22nd, 2004
It is definitely the blaster or sasser worm. These are worms, not viruses that you have to download. Worms just run around in the net looking for vulnerable machine then sneak in, no install or download required. I installed Windows in a couple of systems and got the same error after being connected to the internet for only 10 minutes. Now, I always install a firewall and turn on Windows firewall before I put a system on the net. In addition, keep your system updated. If all you did was turn of your RPC then you still could be infected and are hosting the worm to the rest of the world, Thankz.
Before God we are all equally wise - and equally foolish. - Albert Einstein
Reply With Quote Quick reply to this message  
•
•
Join Date: May 2004
Posts: 10
Reputation: Patrickske is an unknown quantity at this point 
Solved Threads: 0
Patrickske's Avatar
Patrickske Patrickske is offline Offline
Newbie Poster

Re: Patrickske: svchost/rpc crashes

 
0
  #9
May 25th, 2004
•
•
•
•
Originally Posted by MAD_DOG
Pat you have a legal copy of Win2K3 Server?
Uhm... :o no...
btw.... I don't have any problems... it seems that the problems stopped after I installed updates.
Reply With Quote Quick reply to this message  
•
•
Join Date: May 2004
Posts: 10
Reputation: Patrickske is an unknown quantity at this point 
Solved Threads: 0
Patrickske's Avatar
Patrickske Patrickske is offline Offline
Newbie Poster

Re: Patrickske: svchost/rpc crashes

 
0
  #10
May 25th, 2004
•
•
•
•
Originally Posted by JR85023
It is definitely the blaster or sasser worm. These are worms, not viruses that you have to download. Worms just run around in the net looking for vulnerable machine then sneak in, no install or download required. I installed Windows in a couple of systems and got the same error after being connected to the internet for only 10 minutes. Now, I always install a firewall and turn on Windows firewall before I put a system on the net. In addition, keep your system updated. If all you did was turn of your RPC then you still could be infected and are hosting the worm to the rest of the world, Thankz.
Sasser is indeed a worm, but I don't think it was a worm. I tried the latest virus removal tools from symantec and mcaffee. Those tools should also kill the sasser worm, if it was on my system, but the tools didn't found anything.

I didn't turn off the RPC, I just configured in a way that it would not reboot when the service crashed.
I still should see an entry in the event-viewer when that service crashes, but my event-log is clean. (read: No wierd things)

Greets
Patrick
Reply With Quote Quick reply to this message  
Reply
1 2

Quick Reply to Thread
This thread is more than three months old.
Perhaps start a new thread instead?
•
•
•
•
•
•
•
•
Message:
•
•
•
•



Similar Threads
Other Threads in the Windows NT / 2000 / XP Forum
Thread Tools Search this Thread



.net 64bit 2007 2010 a.exe address apache appstore arm automatically black blue book bsod bulletin canonical cellphones chkdsk codeplex computer crash cursor deployment deployments desktop desktops dns dotnetnuke drive eartlink error errors explorer fax features folder fontmanagers format framework freeze hardware home internet interoperability laptop linux load login mac memory microsoft monitor motionle1600 netbooks novell nvidia open operatingsystems options osx palm partition patch printer product program proxy reformat remotedesktop repair replacingraiddrive retail retrieve screen security sharepoint simplifiedchinese sitetositevpn slowperformance technology update usb verizon videodrivers videogames virus vista visual vpn vulnerability wab win win32/heur windows windows7 windowsxp windowsxpnotstartingup. worm xp xpde
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC