Author Topic: Windows RPC server question continued in a topic  (Read 10082 times)

0 Members and 1 Guest are viewing this topic.

Offline Coolmario88

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1554
  • Bronies make the web go round
Re: Windows RPC server question continued in a topic
« Reply #15 on: January 14, 2012, 06:07:42 PM »
I continued with the rest and got errors when I ran the commands "regsvr32 nsisvc.dll
regsvr32 bfe.dll"  I reran Farbar also.. farbar log in attached and the screenshots of the errors i got.

Edit: What is with these errors  like that i got when i ran those commands? 
« Last Edit: January 14, 2012, 06:25:28 PM by Coolmario88cp »
OS: Windows 10 64-bit
Webbrowser: Mozilla Firefox

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40604
  • Dragons by Sasha
    • Malware fixes
Re: Windows RPC server question continued in a topic
« Reply #16 on: January 14, 2012, 07:51:40 PM »
Could you attach the farbar please and I will check that out

Farbar Service Scanner
Ran by Ray (administrator) on 14-01-2012 at 12:05:14
 Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Nsi Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open Nsi registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open Nsi registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open Nsi registry key. The service key does not exist.

nsiproxy Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open nsiproxy registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open nsiproxy registry key. The service key does not exist.
Checking LEGACY_nsiproxy: Attention! Unable to open LEGACY_nsiproxy\0000 registry key. The key does not exist.

tdx Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open tdx registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open tdx registry key. The service key does not exist.
Checking LEGACY_tdx: Attention! Unable to open LEGACY_tdx\0000 registry key. The key does not exist.


Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.

bfe Service is not running. Checking service configuration:
The start type of bfe service is OK.
The ImagePath of bfe service is OK.
The ServiceDll of bfe service is OK.

mpsdrv Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open mpsdrv registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open mpsdrv registry key. The service key does not exist.
Checking LEGACY_mpsdrv: Attention! Unable to open LEGACY_mpsdrv\0000 registry key. The key does not exist.


Firewall Disabled Policy:
==================


File Check:
========
C:\WINDOWS\system32\nsisvc.dll
[2012-01-14 11:59] - [2010-06-23 05:55] - 0019456 ____A (Microsoft Corporation) C1C48F6496FE20AB17C93ACC5FB51230

C:\WINDOWS\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\nsiproxy.sys
[2012-01-14 11:58] - [2009-07-14 07:12] - 0016896 ____A (Microsoft Corporation) E9A0A4D07E53D8FEA2BB8387A3293C58

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tdx.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
Attention! C:\WINDOWS\system32\mpssvc.dll is missing.
C:\WINDOWS\system32\bfe.dll
[2012-01-14 11:59] - [2010-06-23 05:47] - 0494592 ____A (Microsoft Corporation) F52F01B7010D916E90C97EEBF4B35082

C:\WINDOWS\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit


**** End of log ****
« Last Edit: January 14, 2012, 08:13:00 PM by essexboy »

Offline Coolmario88

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1554
  • Bronies make the web go round
Re: Windows RPC server question continued in a topic
« Reply #17 on: January 14, 2012, 07:57:01 PM »
Could you attach the farbar please and I will check that out
The farbar log is attached
http://forum.avast.com/index.php?action=dlattach;topic=91780.0;attach=74388
OS: Windows 10 64-bit
Webbrowser: Mozilla Firefox

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40604
  • Dragons by Sasha
    • Malware fixes
Re: Windows RPC server question continued in a topic
« Reply #18 on: January 14, 2012, 08:43:34 PM »
I forgot to add one file to the zip folder  :-[

mpssvc.dll I have uploaded a copy to my site - same link as before the file is to be copied here C:\WINDOWS\system32\mpssvc.dll
I cannot find the other registry entries on my system, whether that is because it is a VM I do not know


What are the problems now ?
 

Offline Coolmario88

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1554
  • Bronies make the web go round
Re: Windows RPC server question continued in a topic
« Reply #19 on: January 14, 2012, 08:58:44 PM »
well I still get the RPC server is unavailable..  but i guess its ok for now.. If i run into any more problems with this windows xp computer.. i might just install ubuntu to replace windows xp.. also I'm marking this topic was resolved.. :-\

but anyways

Thank you essexboy for the help! :)


Edit: Unmarking topic as resolved since it is still getting some replys.. :P
« Last Edit: January 14, 2012, 09:29:33 PM by Coolmario88cp »
OS: Windows 10 64-bit
Webbrowser: Mozilla Firefox

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40604
  • Dragons by Sasha
    • Malware fixes
Re: [Resolved]Windows RPC server question continued in a topic[Resolved]
« Reply #20 on: January 14, 2012, 09:00:07 PM »
The answer will lie in the registry keys I am unable to find

So I will need to determine why they are not on my VM

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 86916
  • No support PMs thanks
Re: Windows RPC server question continued in a topic
« Reply #21 on: January 14, 2012, 09:10:59 PM »
Registry key/entries for what ?

I did a registry search for mpssvc.dll Keys, Values and Data and found no occurrence for mpssvc.dll
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.9.6034 (build 22.9.7554.734) UI 1.0.728/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40604
  • Dragons by Sasha
    • Malware fixes
Re: Windows RPC server question continued in a topic
« Reply #22 on: January 14, 2012, 09:57:57 PM »
I wonder if that is system specific then

Offline Coolmario88

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1554
  • Bronies make the web go round
Re: Windows RPC server question continued in a topic
« Reply #23 on: January 14, 2012, 11:11:52 PM »
What are the chances of a ubuntu install not installing on a computer?  My dad just brought this question to my mind,  like if the live cd runs well (which it is does)  would it install right on the computer?
OS: Windows 10 64-bit
Webbrowser: Mozilla Firefox

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40604
  • Dragons by Sasha
    • Malware fixes
Re: Windows RPC server question continued in a topic
« Reply #24 on: January 14, 2012, 11:19:24 PM »
If the live CD runs then ther should be no problems - he says  ;D