Problems due to disabling RPC Services. Please Help

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi

I have a Windows 2000 Advanced Server installed on my laptop. My machine was attacked by a RALEKA.B worm a couple of days ago when I connected to internet. To recover from it, I disabled RPC Services and RPC Locator Services from Services MMC Console. I was trying to see if disabling RPC Services and RPC Locator services would fix the problem. When I clicked to disable these services, "Remote Procedure Call (RPC)" window mentioned that a group of dependent services will also be disabled. Not knowing that RPC is a very essential service for Windows to function normally, I said Yes.

After rebooting, I figured out I made a costly mistake. I had problems restarting from that point on. However, I was able to tweak the registry settings for the "Remote Procedure Call (RPC)" and "Remote Procedure Call (RPC) Locator" and made sure they are set to Automatic and Manual respectively

I fixed the worm problem, only to discover I have a different one now. I am able to start "Remote Procedure Call (RPC) Locator" service from Services window. But when I try to start "Remote Procedure Call (RPC)", it complains

"Could not start the Remote Procedure Call (RPC) Service on the local computer. Error 1058: The Service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

When I try starting other services which are dependent on RPC, obviously, they would not start either. They say "Error 1068: The dependency service or group failed to start.

Neither the property windows in Services screen open, nor do the Events Log display windows. Everytime I start the machine (Laptop), after windows load up, it gives me "System error &H800706BA (-2147023174). The RPC Server is unavailable."

Give this scenario, I figured if I manually restarted the RPC Sevices, it might fix the problems. (Executed C:\WinNT\System32\svchost -k rpcss

How can I come out this mess? What do I have to do to restore all my services normally, as I had before? I cannot connect to Internet, cannot browse files.

Would repairing the Windows OS from the Windows Advanced Server fix this mess? Please help.
 
You might boot into the Recover Console (install CDROM, choose Repair, then
recovery console) and use the "ENABLE" command.

You will likely need to first use the "ListSvc" command to get the "official
names
of the services.

--
Herb Martin
Srikanth said:
Hi,

I have a Windows 2000 Advanced Server installed on my laptop. My machine
was attacked by a RALEKA.B worm a couple of days ago when I connected to
internet. To recover from it, I disabled RPC Services and RPC Locator
Services from Services MMC Console. I was trying to see if disabling RPC
Services and RPC Locator services would fix the problem. When I clicked to
disable these services, "Remote Procedure Call (RPC)" window mentioned that
a group of dependent services will also be disabled. Not knowing that RPC is
a very essential service for Windows to function normally, I said Yes.
After rebooting, I figured out I made a costly mistake. I had problems
restarting from that point on. However, I was able to tweak the registry
settings for the "Remote Procedure Call (RPC)" and "Remote Procedure Call
(RPC) Locator" and made sure they are set to Automatic and Manual
respectively.
I fixed the worm problem, only to discover I have a different one now. I
am able to start "Remote Procedure Call (RPC) Locator" service from Services
window. But when I try to start "Remote Procedure Call (RPC)", it complains
:
"Could not start the Remote Procedure Call (RPC) Service on the local
computer. Error 1058: The Service cannot be started, either because it is
disabled or because it has no enabled devices associated with it."
When I try starting other services which are dependent on RPC, obviously,
they would not start either. They say "Error 1068: The dependency service or
group failed to start."
Neither the property windows in Services screen open, nor do the Events
Log display windows. Everytime I start the machine (Laptop), after windows
load up, it gives me "System error &H800706BA (-2147023174). The RPC Server
is unavailable."
Give this scenario, I figured if I manually restarted the RPC Sevices, it
might fix the problems. (Executed C:\WinNT\System32\svchost -k rpcss)
How can I come out this mess? What do I have to do to restore all my
services normally, as I had before? I cannot connect to Internet, cannot
browse files.
Would repairing the Windows OS from the Windows Advanced Server fix this
mess? Please help.
 
Back
Top