Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

dcom server process launcher service terminated unexpectedly windows xp


  • This topic is locked This topic is locked
79 replies to this topic

#1 busboss

busboss

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 15 January 2014 - 12:54 PM

Hi!  I just started getting an error message in an alert window:

 

"dcom server process launcher service terminated unexpectedly windows xp. The system is shutting down. Please save all work in process and log off (which it does not allow me to do). Any unsaved changes will be lost. This shut down was initiated by NT Authority DCOM server proces launcer service terminated unexpectedly."

 

My computer then shuts down.  It happens about every twenty minutes.  Thanks in advance for your help.  I really appreciate it.

 

Moderator Edit: Moved from the Malware logs forum due to the absence of any logs

Roger


Edited by rotor123, 15 January 2014 - 01:54 PM.


BC AdBot (Login to Remove)

 


#2 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 15 January 2014 - 04:22 PM

Thank you for moving this to the correct place.  I apologize for posting in the wrong place.  I would provide logs but now my computer will not boot and has a blank screen that reads:

"NTLDR is missing

Press CTRL+ALT+DEL to restart"

 

I am at a complete loss.  Thanks again!



#3 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,699 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:07:53 PM

Posted 15 January 2014 - 05:35 PM

I'll report this topic to appropriate helpers.

1. Please let us know what Windows version you have and if it's 32- or 64-bit.
2. Is the computer bootable in any mode?

Hold on there....


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#4 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 15 January 2014 - 07:32 PM

Hello and thank you.

 

1) Windows XP Home Edition.  I'm not sure of its 32 or 64.  How can I tell?

 

2) No.  However, I do  have the Windows install CD.  When I try to do a repair it asks for password and I don't recall it or recall setting one.



#5 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,115 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:53 AM

Posted 16 January 2014 - 02:52 AM

Hello busboss, can you please see if the following works?
  • Insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.
  • If your PC is not booting from the CD, you need to change the boot order:
    • Restart your PC
    • As soon as you get an image, press the Setup key. This is usually F2, or Del. On some machines the key can also be a different one. It should, however, be stated on the screen which key is the setup key.
    • Once you enter the computer's BIOS, use the arrow keys and tab key to move between elements. Press enter to select an item to change.
    • Navigate to the tab, where you can set the boot order. It should be called Boot or Boot order
    • The tab should now show your current boot order.
      If the CD-drive is not at the top, please navigate to the CD-Rom drive with the keys arrows. Then move it to the top of the list. The keys for switching boot position are usually + to move up and - to move down. However they can be different, but they should be stated in the help, so that you can find them easily.
    • Once the CD-drive is on top of the boot order, navigate to Exit and select Exit saving changes.
  • Your PC should now boot from your XP-CD.
    Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted.
  • When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
  • When prompted to choose a windows installation, type 1 and press enter.
  • When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.
  • A command prompt will open
Let me know if you're able to get this far and if you see a c:\windows> prompt. We'll continue from there.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#6 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 16 January 2014 - 11:56 AM

Elise,

 

Thank you.  Yes I did get it to boot from CD and I am now at the windows prompt.

 

c:\windows>



#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,115 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:53 AM

Posted 16 January 2014 - 01:08 PM

Since this is commandline-only, it may take a bit of time. Lets start with ntldr:

Type the following lines and press enter after each.

cd system32

ren rpcss.dll rpcss.vir

expand d:\i386\rpcss.dl_ c:\windows\system32


You should now see "1 file(s) expanded"

 

Next, lets check ntldr. Type cd c:\ and press enter.

You will now see c:\> as prompt, type dir and press enter. Let me know if ntldr is present in the list.


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#8 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 16 January 2014 - 06:37 PM

Ok.

 

I typed the above as requested.

 

When I get to this line "ren rpcss.dll rpcss.vir", here is the result:

 

The system cannot find the file or directory specified.

 

When I got to this line " expand d:\i386\rpcss.dl_ c:\windows\system32 ", I'm not sure if there is a space after the underscore and before the c:\".

 

When I include a space, here is the result:

 

The system cannot find the file or directory specified.

 

 

 

When I do not include the space; here is the result:

 

The file name, directory name, or volume label syntax is incorrect.

Edited by busboss, 17 January 2014 - 02:46 AM.


#9 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,115 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:53 AM

Posted 17 January 2014 - 03:21 AM

At the windows prompt type map and press enter. Please list me what you get back.


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#10 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 17 January 2014 - 11:12 AM

Here are the results:

 

C: NTFS      238465MB      \Device\Harddisk0\Partition1

?   FAT16             39MB      \Device\Harddisk0\Partition1

D:  NTFS     148994MB      \Device\Harddisk0\Partition2

F:   FAT32       3585MB      \Device\Harddisk0\Partition3

A:                                         \Device\Floppy0

E:                                         \Device\CdRom0

 

and then back to the windows> prompt.



#11 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,115 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:53 AM

Posted 17 January 2014 - 11:33 AM

Great, that explains why it didn't work. :)

Please execute the following:

cd system32

expand e:\i386\rpcss.dl_ c:\windows\system32


There is a space between _ and c


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#12 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 17 January 2014 - 11:37 AM

1 file(s) expanded.

 

Then

 

Next, lets check ntldr. Type cd c:\ and press enter.

You will now see c:\> as prompt, type dir and press enter. Let me know if ntldr is present in the list.

 

NTLDR is not on the list.


Edited by busboss, 17 January 2014 - 11:39 AM.


#13 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,115 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:53 AM

Posted 17 January 2014 - 12:27 PM

Can you please tell me if boot.ini and ntdetect.com are present?


regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#14 busboss

busboss
  • Topic Starter

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:06:53 PM

Posted 17 January 2014 - 09:52 PM

Can you please tell me if boot.ini and ntdetect.com are present?

 boot.ini YES

ntdetect.com  NO



#15 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,115 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:05:53 AM

Posted 18 January 2014 - 03:32 AM

At the prompt execute the following commands:

 

copy e:\i386\ntldr c:\
 
copy e:\i386\ntdetect.com c:\
 
After each line you should see: 1 file(s) copied.
 
If this worked, type exit and press enter to restart your computer. Let me know if you can boot successfully now.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users