Svchost.exe crashes - rpcss.dll

[Guest]

Hey,

I just replaced a whole bunch of equipment in my mother's PC and to get it
back up and running - i just did a repair of windows XP.

Now - when the Pc starts up, there is an error message stating the the
svchost.exe has crashed unexpectedly. Then you click send / dont send error
report and it bring up the message saying that the RPC service is dead and
the system will restart in 1 minute.

I have been able to stop these messages from appearing (under services.msc)
but obviously... the problem isnt fixed.


I have had many people tell me it is the Blaster worm or the sasser worm -
but i have run the cleaning tools for those and i also ran stinger (or
something along those lines) which is supposed to clean a whole bunch of
viruses - and havent found anything.


What is the best way to go about clearing this up? I would prefer to not
have to format the pc.


Thanks in advance,

Will

 

[MowGreen [MVP]]

Answers inline:

Hey,

I just replaced a whole bunch of equipment in my mother's PC and to get it
back up and running - i just did a repair of windows XP.

All of the updates previously installed will need to be reinstalled.
Stop the Automatic Update service via the Servies console
Then show hidden files, folders, and system files:
http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

Using Windows Explorer, navigate to WINDOWS\SoftwareDistribution
Delete ALL of the *subfolders* of SoftwareDistribution
Close Windows Explorer

Now - when the Pc starts up, there is an error message stating the the
svchost.exe has crashed unexpectedly. Then you click send / dont send error
report and it bring up the message saying that the RPC service is dead and
the system will restart in 1 minute.

I have been able to stop these messages from appearing (under services.msc)
but obviously... the problem isnt fixed.

http://support.microsoft.com/kb/932494
Download and SAVE the latest version of the Windows Update Agent and
KB927891 from the links on the above page.
Install the WUA first, then KB927891 and restart the system.

I have had many people tell me it is the Blaster worm or the sasser worm -
but i have run the cleaning tools for those and i also ran stinger (or
something along those lines) which is supposed to clean a whole bunch of
viruses - and havent found anything.

What is the best way to go about clearing this up? I would prefer to not
have to format the pc.


Thanks in advance,

Will

YW

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============