XP SP3 RPC service not starting


Yesterday while browsing Ebay I message popped up on the screen warning me that the system is shutting down and will restart.

Once restarted nothing is working as it should:

no internet connection. looking in network connections no icons are visible
system restore says it is no longer protecting my computer so cannot restore
most of the windows services are no loading automatically or manually
I cannot view properties of a service or even an event in event viewer

I have run mcafee anti virus which reports nothing
I have run stinger and again nothing
I tried to install a couple of other malware products but get a windows installer error
I performed an inplace install of xp which was successful until i logged in and received that wretched shutdown error again.
I have completely run out of ideas.

Please help!!


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Did you try to go to safe mode?
press f8 at bootup. it should able to toggle to advance and boot to safe mode.
do a full scan from there. or you should be able to do a system restore from there.
osxmanAuthor Commented:

Yes, did scans in safe mode.

still cannot start system restore, or services and still cannot view properties of event viewer events.

have u try a repair console to repair the OS?
OWASP Proactive Controls

Learn the most important control and control categories that every architect and developer should include in their projects.

osxmanAuthor Commented:
yes, but when i login after the repair the same message comes up about shutting down and problems still persist.
Never come across this much corruption before.

it definitely has the markings of a worm or trojan

It's more likely the opposite, somewhat "death by friendly fire":
False positive detection of w32/wecorl.a in 5958 DAT
Check %Systemroot%\system32\svchost.exe; if it has a size of 0, you're another victim of th botched signature update.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
If you are comfortable in editing registry, you can go to safe mode and find the suspicious line and remove them. most probably in the local machine and current user , software>microsoft>windows>currentversion>run
otherwise, you can backup ur important document and do a full format and installation if you want to save the trouble.
osxmanAuthor Commented:

first question EE!

Thank you so much for your brilliant support!!!

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.