DCOM Server Process Virus?

I have several computers on my network that are rebooting. They report "Windows must now restart because the DCOM Server Process Launcher service terminated unexpectedly"

When they restart, there is no network card listed in the properties of Network Neighborhood. If you go to Device Manager, it lists a network adapter but, does not let you view properties.

Also, Event Viewer lists some errors but, will not let you view those either.
GubsterAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

acl-puzzCommented:
i got this error scanned system with antivirus programs did get anything may be in yours case there may be an virus do scan with malwarebytes or superantispyware in safe mode

but after testing every thing about this error presented on google nothing worked except an system restore!!

iam  sharing my personal exp on this error you may try this on one machine let see how it goes ;-)
0
JHCompVerdeCommented:
We are experiencing the same problem at our company.  So far 8 computers are affected.  
Computers degrade progressively after several restarts in that most common functions don't work (internet connection, IE won't open, firefox does open but can't connect, can't copy/paste, can't open items in event viewer, taksbar and windows are grey with "old school" look).
This is very serious.  Nothing we're trying is working, wer're not even sure how it's spreading.  I'll post more details later.  Thanks!
0
GubsterAuthor Commented:
Looks like it may be McAfee themselves causing the problem.

http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=265240#none
0
Redefine Your Security with AI & Machine Learning

The implications of AI and machine learning in cyber security are massive and constantly growing, creating both efficiencies and new challenges across the board. Check out our on-demand webinar to learn more about how AI can help your organization!

JHCompVerdeCommented:
Thanks for the lead Gubster!  We're going to try the items in the link and see what happens.  The info in the link so far looks like it closely matches our problems.  We'll post when we have results.
0
JHCompVerdeCommented:
McAfee cops to the problem on a recorded msg on one of their phone lines.  Virus definition 5958 was the problem, and they're now pushing 5959 via autoupdates.
The problem we're having is restoring the computers that have been affected.  The McAfee instructions say to go to the Quarantine manager (from the McAfee console) and right-click to restore files.  Unfortunately, so far all the computers we've tried to fix this way either show only old files, or they show none.  So - the computers are still broken.  Arg.
0
GubsterAuthor Commented:
Here is what you need to do:
To apply the McAfee Fix:

1.      Boot computer in Safe Mode (Press F8 repeatedly while computer is booting, before you see the "Starting Windows" logo).
2.      Insert the USB drive with the files extra.dat and svchost.exe in a USB port.
3.      Windows may ask to install the device. Select "not this time" for the first screen and "Install Automatically" on the next.
4.      Several prompts may come up indicating the software has not been approved by Microsoft. Click Continue Anyway on all prompts.
5.      Copy the EXTRA.DAT file to the following location:
C:\Program Files\Common Files\McAfee\Engine

NOTE: This may need to be done from a DOS window. If so, open a DOS command window, change to the drive letter of your USB disk, and type:
Copy extra.dat "C:\Program Files\Common Files\Mcafee\Engine"

6.      Copy the svchost.exe file to the following location before you exit DOS:
      C:\Windows\System32
      Select YES to overwrite the existing file.
7.      Reboot computer.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JHCompVerdeCommented:
Thanks for the instructions.  I just found it out from their updated KB page as well: http://vil.nai.com/vil/5958_false.htm
One bump in the road we ran into is that copy/paste functions are often disabled as well.  You can get around this by using cmd prompt to copy & paste.
What a crazy mess.  Thanks for your help!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.