Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Shuting Down On Me.


  • Please log in to reply
17 replies to this topic

#1 leran

leran

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 11 August 2007 - 08:43 AM

Hello, i have a problem with my windows, it comes up error on windows/32 system and it shuts me down with in 1 min. what is happening?? do i miss some file on my windows or is it just some windows files that just can't follow the others.
'

this is a pic of it http://img410.imageshack.us/img410/4653/utennavnla1.png, i am from norway so you might not understand the text :S


translate, System shutdown,copy all you work and log, unsaved work will be lost, this shut down was started by NT-myndighet\system. dcoom server pocesser launcher shut down.
Games:Games:Games|and ofc MORE games.

BC AdBot (Login to Remove)

 


#2 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 12 August 2007 - 07:24 AM

Is there any tool i can use to fix files on windows?

this error comes and then shuts down my computer, szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : rpcrt3.dll
szModVer : 0.0.0.0 offset : 00001b3d.
Games:Games:Games|and ofc MORE games.

#3 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:04:21 PM

Posted 12 August 2007 - 07:44 AM

Could you check the Event Viewer for more details about the error message? When you locate the error, right click and select Properties to view the details about the error message. Only list the last 4 error messages, and details, for now.
"2007 & 2008 Windows Shell/User Award"

#4 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 12 August 2007 - 11:20 AM

This is what stands on error list when i go on log on this problem.


C:\DOCUME~1\ALEKSA~1\LOKALE~1\Temp\WER4e2a.dir00\svchost.exe.mdmp
C:\DOCUME~1\ALEKSA~1\LOKALE~1\Temp\WER4e2a.dir00\appcompat.txt
Games:Games:Games|and ofc MORE games.

#5 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 12 August 2007 - 11:36 AM

Okay i have copyed the last error messages i got from the help of the event page, the text you see on this errors are not English and i am sorry for that but i hope you have seen this before and you know what it's going on.



Hendelsestype: Feil
Hendelseskilde: Application Error
Hendelseskategori: (100)
Hendelses-ID: 1000
Dato: 12.08.2007
Klokkeslett: 18:17:02
Bruker: I/T
Datamaskin: ALEKSAND-303838
Beskrivelse:
Feilende program svchost.exe, versjon 5.1.2600.2180, feilende modul rpcrt3.dll, versjon 0.0.0.0, feiladresse 0x00001b3d.

Hvis du vil ha mer informasjon, se Hjelp og støtte på http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 72 70 63 72 74 33 n rpcrt3
0038: 2e 64 6c 6c 20 30 2e 30 .dll 0.0
0040: 2e 30 2e 30 20 61 74 20 .0.0 at
0048: 6f 66 66 73 65 74 20 30 offset 0
0050: 30 30 30 31 62 33 64 0001b3d


Hendelsestype: Feil
Hendelseskilde: Application Error
Hendelseskategori: (100)
Hendelses-ID: 1000
Dato: 12.08.2007
Klokkeslett: 16:50:42
Bruker: I/T
Datamaskin: ALEKSAND-303838
Beskrivelse:
Feilende program svchost.exe, versjon 5.1.2600.2180, feilende modul rpcrt3.dll, versjon 0.0.0.0, feiladresse 0x00001b3d.

Hvis du vil ha mer informasjon, se Hjelp og støtte på http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 72 70 63 72 74 33 n rpcrt3
0038: 2e 64 6c 6c 20 30 2e 30 .dll 0.0
0040: 2e 30 2e 30 20 61 74 20 .0.0 at
0048: 6f 66 66 73 65 74 20 30 offset 0
0050: 30 30 30 31 62 33 64 0001b3d


Hendelsestype: Feil
Hendelseskilde: Application Error
Hendelseskategori: Ingen
Hendelses-ID: 1001
Dato: 12.08.2007
Klokkeslett: 16:23:57
Bruker: I/T
Datamaskin: ALEKSAND-303838
Beskrivelse:
Feil i minneområdet 484105355.

Hvis du vil ha mer informasjon, se Hjelp og støtte på http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20 Bucket:
0008: 34 38 34 31 30 35 33 35 48410535
0010: 35 0d 0a 5..


Hendelsestype: Feil
Hendelseskilde: Application Error
Hendelseskategori: (100)
Hendelses-ID: 1000
Dato: 12.08.2007
Klokkeslett: 16:22:36
Bruker: I/T
Datamaskin: ALEKSAND-303838
Beskrivelse:
Feilende program svchost.exe, versjon 5.1.2600.2180, feilende modul rpcrt3.dll, versjon 0.0.0.0, feiladresse 0x00001b3d.

Hvis du vil ha mer informasjon, se Hjelp og støtte på http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 73 76 63 ure svc
0018: 68 6f 73 74 2e 65 78 65 host.exe
0020: 20 35 2e 31 2e 32 36 30 5.1.260
0028: 30 2e 32 31 38 30 20 69 0.2180 i
0030: 6e 20 72 70 63 72 74 33 n rpcrt3
0038: 2e 64 6c 6c 20 30 2e 30 .dll 0.0
0040: 2e 30 2e 30 20 61 74 20 .0.0 at
0048: 6f 66 66 73 65 74 20 30 offset 0
0050: 30 30 30 31 62 33 64 0001b3d


Thos are the last 4 i got about the same error which shuts down my windows with in 1 min

Edited by leran, 12 August 2007 - 02:03 PM.

Games:Games:Games|and ofc MORE games.

#6 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:04:21 PM

Posted 12 August 2007 - 01:55 PM

Leran I am out of my depth. It would be wrong of me to try and solve this problem, since I cannot read German (I assume this is German). I am going to attempt to find a members who can read this and ask if they would take over. I am very sorry, but my limitations would only make thing worst I believe.
"2007 & 2008 Windows Shell/User Award"

#7 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 12 August 2007 - 02:01 PM

I am from norway, maybe i should i have told that sorry. i would like to translate it from Norwegian to English, but the words are to hard for me to explain on English am so sorry.

Edited by leran, 12 August 2007 - 02:04 PM.

Games:Games:Games|and ofc MORE games.

#8 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:04:21 PM

Posted 12 August 2007 - 02:10 PM

It is not your fault. If you can give us a little time and we will attempt to solve this issue. I apologize for mistaking the language.
"2007 & 2008 Windows Shell/User Award"

#9 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:21 PM

Posted 13 August 2007 - 05:54 AM

The "feilende modul rpcrt3.dll" in the error messages refers to a file that may be a Trojan virus. I would suggest scanning your system with one of these free, online scans:

http://safety.live.com
http://housecall.trendmicro.com

Go to this link to read more about the Trojan: http://www.sophos.com/security/analyses/trojbuzzita.html
Click on the Advanced tab to see the reference to rpcrt3.dll

Edited by usasma, 13 August 2007 - 05:55 AM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#10 Cavillas

Cavillas

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:11:21 PM

Posted 13 August 2007 - 06:44 AM

This shutdown message reminds me of the Blaster Worm and derivatives. Your machine could be infected.

#11 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 13 August 2007 - 07:20 AM

Now i do have mcafee as virus program, so will this mean i haft to delete my old virus program??
Games:Games:Games|and ofc MORE games.

#12 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 13 August 2007 - 07:52 AM

One care can not be installed at my computer, my windows pack is Norwegian and this virus program dose not accept that.
Games:Games:Games|and ofc MORE games.

#13 arcman

arcman

  • Members
  • 706 posts
  • OFFLINE
  •  
  • Location:Michigan
  • Local time:06:21 PM

Posted 13 August 2007 - 08:07 AM

See if you can download and install this. http://www.clamwin.com/content/view/18/46/
I would recommend turning McAfee off while you're scanning with Clamwin, but you shouldn't need to uninstall it entirely. Also, once you have it installed and updated I would recommend running the file scan in safemode (press F8 during boot).
Posted Image

#14 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 13 August 2007 - 08:09 AM

Seems that i have got some good news the last 5 days of trying to fix my computer.

New image showing that this worm has been removed. http://img393.imageshack.us/img393/9138/virusremovedep2.png

However i do fair that this virus i have been fighting has spread true my system to much, it start with a Ntkrnl virus which i have posted on forum link:http://www.bleepingcomputer.com/forums/t/103301/ntkrnl/

somehow i believe that this virus has ruined my protection on my computer, which as you see has become to shutting me down.

Edited by leran, 13 August 2007 - 08:17 AM.

Games:Games:Games|and ofc MORE games.

#15 leran

leran
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 13 August 2007 - 08:44 AM

This is what the homcall scanner what it found was this http://img408.imageshack.us/img408/5500/malewaregl6.png.


as you see i like to post image of what is happening i hope that it will make it easier for you guys to help me out more.

However it seems that this malware that it found can not be removed, it's located on a file named: C:\Windows\system32\libsns.dll

Edited by leran, 13 August 2007 - 08:46 AM.

Games:Games:Games|and ofc MORE games.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users