DCOM server timeout and RPC server unavailable following virus cleaning.
Posted on 2008-02-11
The system is a home computer, Dell Optiplex GX110, 866 MHz, 512 MRam, XP Pro w/SP2. It is part of a home workgroup and shares out it's printer and an external USB Drive to a Laptop connected wirelessly. This system is connected via network cable to a DSL Gateway. This config has worked flawlessly for almost a year. Personal sidenote: This system belongs to my daughter who has multiple disabilities. It has a great deal of software and educational games that has been provided by friends and family. This system is her "lifeline" so to speak, and makes her feel 'good'. It allows her to interact with friends and help her to learn. She is terribly afraid of losing this system. Because of this, I am desperately trying to fix it for her and not have to do a re-install or repair install for fear of losing everything. I would not be able to replace even half of all the software. The only true "App" I have is Office XP Pro, fully licensed and registered.
Approximately 2 weeks ago, Norton Systemworks reported a virus, identifying the file as Fuwarxyus.dll and located in C:\windows\media. Norton could not remove or quarantine it. After some research, I found that it was the win32 Delf (sp?) virus. I further found that Avast Antivirus could handle it. Norton was due to expire in less than a month so I un-installed it and installed the free version of Avast. It detected and quarantined/removed the offending files. After a re-boot, the first problem presented itself as a long delay at startup. Welcome screen-long delay. Wallpaper-long delay. Desktop icons-long delay, etc. Try to open a folder - long delay. After trying various things, I looked at the event viewer and found the error listed above about DCOM. Timing the delays showed that it was 2 minutes. Exactly the timeout of the DCOM Process Launcher. I set the DCOM Launcher service to manually instead of Automatic and the system booted normally. Opened Office XP Word and received a warning that Word could not link to any external documents. I started to try other system level functions such as Defrag, un-install, etc. None would work. Research showed that this was because of an RPC (Remote procedure Call) problem. Looked in services, went to RPC, and when I clicked on Dependencies, it reported that the RPC server was unavailable. I don't know what happened. Whether it was the virus or a bad un-install of Norton. I cannot install anything that uses the Microsoft Installer or do many other system functions. I don't know if it is because DCOM is not starting and RPC needs it or what. I compared registry entries between this system and the Laptop (running XP Home w/sp2) and they appear the same. Otherwise, the system works great. The printer share, external folder shares, networking, etc. The workgroup stuff is all fine. I really need help to help my daughter keep her system intact. I have exhausted all my efforts. Everything I have found talks about servers. There is no server here... is there? No email account has ever been setup on this system as my daughter could not understand a "good" versus a "bad" email. I need help everyone... please.
Summary: DCOM Process Launcher will not start. RPC Server is Unavailable. Is one tied to the other?
I apologize for the length, but I needed to let everyone know where I am coming from on this and how important it is to me. Thanks to all of you for your help.