Over 1 million tech questions and answers.

The system process 'C:\WINDOWS\System32\services.exe' terminated unexpectedly with status code -1073740972.

Q: The system process 'C:\WINDOWS\System32\services.exe' terminated unexpectedly with status code -1073740972.

The system process 'C:\WINDOWS\System32\services.exe' terminated unexpectedly with status code -1073740972. The system will now shut down and restart
This malware keeps shutting down the computer. It started by hiding ALL of the files.
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Run by Administrator at 16:48:53 on 2011-08-25
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.242 [GMT -4:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Proxy Networks\Proxy Host\phsvc.exe
C:\Program Files\Pervasive Software\PSQL\bin\w3dbsmgr.exe
C:\WINDOWS\system32\StacSV.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Program Files\WatchGuard\WatchGuard Authentication Client\wgssoclient.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\KADxMain.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\AcroDist.exe
C:\PROGRA~1\SHOREL~1\SHOREW~1\STCLogin.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Proxy Networks\Proxy Host\phtray.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Aspect Software\SIP Phone\SIPphone.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre6\bin\javaws.exe
C:\Program Files\Java\jre6\bin\javaw.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/?fr=fp-yie8
uSearch Page = hxxp://www.google.com/hws/sb/dell-usuk-rel/en/side.html?channel=us
uDefault_Page_URL = hxxp://www.yahoo.com/?fr=fp-yie8
uWindow Title = Windows Internet Explorer provided by Yahoo!
mSearchAssistant =
mWinlogon: Userinit=c:\windows\system32\userinit.exe
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\bae\BAE.dll
BHO: Ask.com Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\supertoolbar\GenericAskToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn1\YTSingleInstance.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll
TB: Ask.com Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\supertoolbar\GenericAskToolbar.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [AdobeBridge]
uRun: [SIP Phone] "c:\program files\aspect software\sip phone\SIPphone.exe"
mRun: [Apoint] c:\program files\apoint\Apoint.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [Document Manager] c:\program files\wave systems corp\services manager\docmgr\bin\docmgr.exe
mRun: [SecureUpgrade] c:\program files\wave systems corp\SecureUpgrade.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [KADxMain] c:\windows\system32\KADxMain.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [RoxioDragToDisc] "c:\program files\roxio\drag-to-disc\DrgToDsc.exe"
mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe"
mRun: [Acrobat Speed Launch] "c:\program files\adobe\acrobat 8.0\acrobat\acrobat_sl.exe"
mRun: [ToolBoxFX] "c:\program files\hp\toolboxfx\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /systrayIcon:on /fl:on /fr:on /appData:on
mRun: [StatusClient 2.6] c:\program files\hewlett-packard\toolbox\statusclient\StatusClient.exe /auto
mRun: [TomcatStartup 2.5] c:\program files\hewlett-packard\toolbox\hpbpsttp.exe
mRun: [Acrobat Assistant 7.0] "c:\program files\adobe\acrobat 7.0\distillr\Acrotray.exe"
mRun: [<NO NAME>]
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [BlackBerryAutoUpdate] c:\program files\common files\research in motion\auto update\RIMAutoUpdate.exe /background
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [PeachtreePrefetcher.exe] "c:\progra~1\sageso~1\peacht~1\PeachtreePrefetcher.exe" /configfile:peachtreeprefetcher.winstart.config
mRun: [ProxyHostTrayIcon] "c:\program files\proxy networks\proxy host\phtray.exe"
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
LSP: c:\windows\system32\biolsp.dll
DPF: WebSignature Control - hxxps://horan.easyappsonline.com/employee/enrollment/Files/WebSign.x86.CAB
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.16.12 192.168.16.47
TCP: Interfaces\{C6FC0F88-1884-4A4A-84D6-B673B3B75310} : DhcpNameServer = 192.168.16.12 192.168.16.47
TCP: Interfaces\{F1A39A80-D1A8-456B-96E3-328F695B1CAC} : DhcpNameServer = 192.168.16.12 192.168.16.47
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: wxvault.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 wvauth
mASetup: {A509B1FF-37FF-4bFF-8CFF-4F3A747040FF} - c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,launchinfsectionex c:\program files\internet explorer\clrtour.inf,DefaultInstall.ResetTour,,12
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath -
.
============= SERVICES / DRIVERS ===============
.
R2 ASFIPmon;Broadcom ASF IP and SMBIOS Mailbox Monitor;c:\program files\broadcom\asfipmon\AsfIpMon.exe [2006-12-19 79432]
R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2011-7-19 108456]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2011-7-19 108456]
R2 psqlWGE;Pervasive PSQL Workgroup Engine;c:\program files\pervasive software\psql\bin\w3dbsmgr.exe [2007-9-5 455968]
R2 Symantec AntiVirus;Symantec Endpoint Protection;c:\program files\symantec\symantec endpoint protection\Rtvscan.exe [2011-7-19 1839888]
R2 WatchGuard Authentication Client;WatchGuard Authentication Client;c:\program files\watchguard\watchguard authentication client\wgssoclient.exe [2009-4-23 192512]
R2 Wave UCSPlus;Wave UCSPlus;c:\windows\system32\dllhost.exe [2004-8-11 5120]
R3 DXEC01;DXEC01;c:\windows\system32\drivers\dxec01.sys [2006-11-2 97536]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-8-17 105592]
R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20110825.002\NAVENG.SYS [2011-8-25 86136]
R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20110825.002\NAVEX15.SYS [2011-8-25 1576312]
R3 ProxyHostInputFilter;Proxy Host Input Filter;c:\windows\system32\drivers\ph32ifil.sys [2007-8-8 14336]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2011-7-19 23888]
.
=============== Created Last 30 ================
.
2011-08-25 20:43:18 -------- d-----w- c:\documents and settings\administrator.vianda\local settings\application data\Symantec
2011-08-25 20:41:23 302592 ----a-w- C:\gmer.exe
2011-08-25 20:38:56 607017 ------r- C:\dds.scr
2011-08-19 19:23:54 14848 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2011-08-19 19:23:54 14848 ----a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-08-17 17:43:43 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2011-08-17 17:43:43 125488 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-08-17 17:24:35 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-08-17 17:24:35 411368 ----a-w- c:\windows\system32\deployJava1.dll
2011-08-17 17:24:35 411368 ----a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll
2011-08-17 15:47:28 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-08-17 15:47:28 -------- d-----w- c:\windows\system32\wbem\Repository
2011-08-17 15:27:08 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes
2011-08-17 15:27:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-08-17 14:06:21 -------- d-----w- c:\program files\Trend Micro
2011-08-16 18:26:07 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-08-16 18:26:07 -------- d-----w- c:\documents and settings\all users\application data\Spybot - Search & Destroy
.
==================== Find3M ====================
.
2011-07-19 17:21:08 89600 ----a-w- c:\windows\system32\atl71.dll
2011-07-19 17:21:08 87456 ----a-w- c:\windows\system32\FwsVpn.dll
2011-07-19 17:21:08 625032 ----a-w- c:\windows\system32\SymNeti.dll
2011-07-19 17:21:08 242056 ----a-w- c:\windows\system32\SymRedir.dll
2011-07-19 17:21:08 107936 ----a-w- c:\windows\system32\SymVPN.dll
2011-07-19 17:21:04 43768 ----a-w- c:\windows\system32\drivers\srtspx.sys
2011-07-19 17:21:04 321016 ----a-w- c:\windows\system32\drivers\srtspl.sys
2011-07-19 17:21:04 287352 ----a-w- c:\windows\system32\drivers\srtsp.sys
2011-07-19 17:20:56 39856 ----a-w- c:\windows\system32\drivers\symids.sys
2011-07-19 17:20:56 38448 ----a-w- c:\windows\system32\drivers\symndisv.sys
2011-07-19 17:20:56 35120 ----a-w- c:\windows\system32\drivers\symndis.sys
2011-07-19 17:20:56 26416 ----a-w- c:\windows\system32\drivers\symredrv.sys
2011-07-19 17:20:56 188080 ----a-w- c:\windows\system32\drivers\symtdi.sys
2011-07-19 17:20:56 145968 ----a-w- c:\windows\system32\drivers\symfw.sys
2011-07-19 17:20:56 12720 ----a-w- c:\windows\system32\drivers\symdns.sys
2011-07-19 17:20:54 23888 ----a-w- c:\windows\system32\drivers\COH_Mon.sys
.
============= FINISH: 16:49:09.50 ===============

RELEVANCY SCORE 200
Preferred Solution: The system process 'C:\WINDOWS\System32\services.exe' terminated unexpectedly with status code -1073740972.

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: The system process 'C:\WINDOWS\System32\services.exe' terminated unexpectedly with status code -1073740972.

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/417821 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system. If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.Thank you for your patience, and again sorry for the delay.*************************************************** We need to see some information about what is happening in your machine. Please perform the following scan again: Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results. Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE We also need a new log from the GMER anti-rootkit Scanner. Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step. Please first disable any CD emulation programs using the steps found in this topic: Why we request you disable CD Emulation when receiving Malware Removal Advice Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here: How to create a GMER logAs I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

Read other 2 answers
RELEVANCY SCORE 216.8

I am running Windows XP. My laptop came preinstalled with Vista this past August but I removed it and installed XP as my OS.

I started getting this error msg today: C:\windows\system32\services.exe terminated unexpectedly with status code 1073740972 and will restart in 60 seconds. It seems related to my HP Deskjet 6980 printer. If the printer isn't plugged in, the error doesn't appear. I uninstalled the printer, downloaded the most current drivers from the hp website, reinstalled and still get the error.

I am also getting this msg as well: Data Execution Prevention Services and Controller App. I am running CA antivirus, firewall, and keep my CA updated regularly. I am up to date on all XP updates from MS. I have scanned my system several times and have found nothing. I know that the data execution prevention is likely related to a virus but I can't locate anything!!

Can anyone help???

A:C:\windows\system32\services.exe terminated unexpectedly with status code 1073740972

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

Read other 1 answers
RELEVANCY SCORE 168.8

Hi,

I am getting this error message

The system process
C:\\WINDOWS\system32\services.exe'
terminated unexpectedly with
status code 203. The system will
now shut down and restart.

After which my computer shuts down after 60 seconds. Does anyone have any ideas about what might be causing the problem? Im running Windows XP.

Read other answers
RELEVANCY SCORE 163.6

Hi,

About a week ago my computer randomly started rebooting itself, no error messages were appearing, and only happened maybe once a day. However, it has now started happening more and one time the following message was dipslayed before the computer rebooted:

The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. The shutdown was initiated by NT AUTHORITY\SYSTEM

The system process 'C:\WINDOWS\system32\services.exe' terminated unexpectedly with status code - 1073741819. The system will now shut down and restart.

Any help would be greatly appreciated. Thank you.

Here is the DDS report:

DDS (Ver_09-12-01.01) - NTFSx86
Run by James Honeysett at 11:00:56.54 on 27/12/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1023.721 [GMT 0:00]

AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

============== Running Processes ===============

C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.e... Read more

A:Computer restarting - c:\windows\system32\services.exe terminated unexpectedly with status code - 1073741819

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 75 answers
RELEVANCY SCORE 156.8

Can anyone out there help me with the following message:

?The system process c:\windows\system32\services.exe terminated unexpectedly with status code -2147483645?

The message window also informs me that the message was initiated by the ?NT Authority\System?.

My PC is running slower than a turtle! Your help is appreciated!

Thank you!

A:“The system process c:\windows\system32\services.exe terminated unexpectedly with s

I'm not sure this applies to you, since it's a different exe but I found
this on google It's not much tho and aboutg the only thing I can find, maybe one of the more advanced people can explain more. Oh and check for viruses at www.trendmicro.com

Read other 2 answers
RELEVANCY SCORE 153.6

I get after being on windows xp Prof for a few minutes the following error message and the pc shuts down 60 seconds.

The system process "C:\WINDOWS\system32\services.exe" terminated unexpectedly with status code -2147483641. The system will now shut down and restart. I have use typed in the run section "shutdown -a to stop the pc from shutting down to run corrective software but it still shows up.

I have not been able to locate my status code shown above.

A:"C:\WINDOWS\system32\services.exe" terminated unexpectedly status code 2147483641

are you behind a firewall?
do you have p2p programs open (winmx, kazaa, morpheus, ares)
also are you a static IP or dhcp?

Read other 8 answers
RELEVANCY SCORE 140.8

Hello all. I've tried several things to no avail. I need some extra help.A friends PC is getting this error: STOP: c000021a [fatal system error]Windows Logon Process system process terminated unexpectedly with a status of 0x00000080' (0x00000000 0x00000000).The System has been shut down.What occurred before this error popped up:1. Upgraded dvd43 software, booted, and this error came up.I have tried multiple things.1. Ran the bootfix2. Tried the Recovery Console with their diagnostics3. Tried to get to Safe Mode and it will not load, goes back to this message.4. Tried to overlay the XP image (refresh it), no avail, back to the same message.I haven't found anything on the web that can help me so far. Looking to take the next step and ask for help.

A:Windows Logon Process system process terminated unexpectedly with a status of 0x00000080

0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATEDThis occurs when Windows switches into kernel mode and a user-mode subsystem, such as Winlogon or the Client Server Runtime Subsystem (CSRSS), is compromised. Security can no longer be guaranteed. Because Win XP can?t run without Winlogon or CSRSS, this is one of the few situations where the failure of a user-mode service can cause the system to stop responding. This Stop message also can occur as a result of malware infestation or when the computer is restarted after a system administrator has modified permissions so that the SYSTEM account no longer has adequate permissions to access system files and folders.I've never gotten this particular error...but if I did, i would treat it as a malware situation until proven otherwise.Louis

Read other 3 answers
RELEVANCY SCORE 137.2

Hello all, thank you for any help in advanced.

The computer I'm running has Windows XP Professional 32 bit running. I do know there are 2 250gig hard drives in the computer but I don't think they had a raid setup. Motherboard is nVidia n force 4 7900 GTX SLI Intel and the processor is an Intel Pentium® D LGA775 socket type. I'm unsure about the video cards but I believe they are some type of nVidia.

The first point at which I noticed something was wrong was after a long day of working I go to turn off my computer using the start menu and, I get what seems to be a windows popup stating the computer will restart in 60 seconds and a code which goes like this:

C:\system32\services.exe terminated unexpectedly with a status code of 1073741571

I thought it was weird but dismissed it as nothing since it was the end of the day and I wanted to go home. I figured it would have been a one time thing. So now it seems it happens every time I turn off the computer. The computer eventually restarts "Since this error the restart process takes about 20 min until I can use it again." So I havne't been able to turn it off without holding the power button down for 5 or so seconds. I got frustrated and since everything on the computer wasn't important I decided to reinstall Windows XP Professional 32 bit. I have a copy of windows 7 64 bit upgrade version which I was going to use since I was going through the process anyway (I havn't got... Read more

A:services.exe terminated unexpectedly: status code of 1073741571

One thing I left out, I didn't have this information at the time of my original post. But, the services.exe error - The message came from NT AUTHORITY\SYSTEM. There may or may not have been a space between NT and AUTHORITY, I can't tell from the way I wrote it down. And if there is a post about this same issue (the services.exe error upon restart/shutdown) please direct me to it. Like I said I looked but did not find the same problem anywhere.

Read other 25 answers
RELEVANCY SCORE 137.2

hi! a few days ago i was infected with the freddy46.exe virus which i thought i managed to get rid of, the computer was running fine again, but then suddenly since yesterday, when i log into windows (which now takes about 5 minutes and is very slow), when it's finally finished loading, i get a message that says "Services and Controller app has encountered a problem and needs to close." when i click on "don't send", a "system shutdown" message comes up, which says "The system process 'C:\WINDOWS\system32\services.exe' terminated unexpectedly with status code -1073741819. The system will now shut down and restart.", it is apparently initiated by NT AUTHORITY\SYSTEM. i can cancel the shutdown (by going to start/run and typing 'shutdown -a') but after this the system runs almost impossibly slowly and internet explorer becomes unusable within about 5 minutes. here is my log, thanks so much in advance for any help: DDS (Ver_09-05-14.01) - NTFSx86 Run by Feargal at 20:56:17.06 on 18/06/2009Internet Explorer: 7.0.5730.13Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.3574.3063 [GMT 1:00]AV: Norton Internet Security *On-access scanning enabled* (Outdated) {... Read more

A:services.exe terminated unexpectedly status code 1073741819

Hi,* Please download Malwarebytes' Anti-Malware from Here or HereDouble Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.In case you already used MBAM previously, please update it before proceeding with the scan. To do this, click the "Update" tab and click the "Check For updates" button.Once the program has loaded and updates were downloaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Read other 14 answers
RELEVANCY SCORE 135.6

I'm running WinXP SP2 and just started getting this C:\windows\system32\services.exe terminated unexpectedly with status code 1073741819. The system will now shut down and restart. I can use the run command shutdown /a to stop it. It seems to shut down my windows firewall and auto updater as well. The computer now runs very slowly. I've tried to scan with AVG and nothing is found. I also scanned with Ad-Aware and it only found a couple of things that I went ahead and got rid of, didn't save the list that it got rid of though. I am attaching the Hijackthis log. Any help getting rid of this problem would be greatly appreciated, thanks.

Logfile of HijackThis v1.99.1
Scan saved at 1:12:31 AM, on 7/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.... Read more

A:Solved: services.exe terminated unexpectedly with status code 1073741819. need help please

I was able to restore to a previous date. I had turned all the System Restore stuff to maximum so it makes a restore point everyday, so I just restored to a day before I received the error. I know this is the easy way out but it worked and I didn't lose anything of value.

Dixiechick66 you may want to start your own thread so someone can give you a hand, I just marked this thread as complete.
 

Read other 1 answers
RELEVANCY SCORE 124.8

Hi,
Since April I I am facing the problem where my audio service show a red X.  I did all the what the forum states and I just tried to ensure all the dependencies services are started.  However, the audio service does not start but shows the error
1067.I have even installed the driver for my sound card SB Live! 24.
I have run out of option but to ask for your help.  Can you please help me to resolve this issue.  My computer was running smoothly without any problem and suddenly i am facing this issue.
Help, Help!!!!

4Lobos

Read other answers
RELEVANCY SCORE 119.2

For the past several days my computer has been completely useless. It generally has been indicating ("C:\WINDOWS\system32\services.exe" terminated unexpectedly), error code -1073741482. (I'm typing this from another computer, fyi).

I have tried a few things. I was going to install McAfee Total Protection to see if that would clean it up, but McAfee would not install completely because of some sort of problem apparently.

I am able to get into Safe Mode and have burned combofix to a CD on another computer, and was hoping to run it on my infected(?) computer to see if that would help, but see that the instructions say to post here first.

Any help is greatly appreciated.

A:Error Message ("C:\WINDOWS\system32\services.exe" terminated unexpectedly), and it happens during start...

Hello please try running MBAM.If you cannot use the Internet,you will need access to another computer that has a connection.From there save mbam-setup.exe to a flash,usb,jump drive or CD. Now transfer it to the infected machine, then install and run the program. If you cannot transfer to or install on the infected machine, try running the setup (installation) file directly from the flash drive or CD by double-clicking on mbam-setup.exe so it will install on the hard drive.***Manually Downloading Updates: Manually download them from HERE and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, fo... Read more

Read other 1 answers
RELEVANCY SCORE 113.2

I started having this problem a couple of days ago, and haven't been able to run my computer in normal mode since then. I've tried system restore and ran Malwarebytes anti-malware, it found a few things but when it prompted me to reboot I got the NT Authority error message again. (I also can't update Hijack This because it won't let me reinstall it in safe mode...) Before this happened I was having problems with massive computer slowdown, random clicks in the background, and the occasional IE popup even though my primary browser is firefox. I tried posting on another forum but they take over a week to respond at times, and my job sort of depends on my getting my computer working as soon as possible. :/ Any assistance would be much appreciated.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:34:46 PM, on 7/27/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R3 - URLSearchHook: AIM Toolbar Search Class - {03402f96-3dc7-4285-bc50-9e... Read more

A:ervices.exe terminated unexpectedly and Status Code -1073741819

*bump
 

Read other 1 answers
RELEVANCY SCORE 113.2

hi
currently i am using win xp sp2 and some of my networked terminals are showing erro r code at the time the OS boots:
error message:
The system process 'C:\win\sys32\service.exe' terminated unexpectedly with status code -1

and then the system does not boot it hangs actually!!
it would be really appriciable if some one could assist me in fixing this error!
cheers:
up: X11
 

A:C;\win\sys32\service.exe terminated unexpectedly with status code -1

More info about your network?
 

Read other 2 answers
RELEVANCY SCORE 111.6

To preface this: I installed software yesterday on my Dell Inspiron 9400 w/ Windows XP Home and since then I cannot log on. I have a bit of a background in computer repair and I'm familiar with the recovery console so I was hoping I could activate the system restore from there. Safe mode is not an option. What I believe happened is that I had SP2 and not SP3 and the software was only compatible with SP3, though I can't verify right now or I don't know how. Is that possible without booting to find out? I have a good deal of my machine backed up but I am fighting for the most recent two months' work. Would very much appreciate any help!

- Windows XP Home on Dell Inspiron 9400 with SP2* I think
- Error: "STOP: c000021a" Windows logon process system terminated unexpectedly at 0xc0000022.
- Software installed was Avid Pro Tools SE

I don't have access to an XP disc right now but I can within a day or two thanks to my school. As I mentioned I have an external with 90% of my critical data on it already; if it were possible to manually extract the files I want to salvage by copying them to the external I would love to try that also. However, the problem I've encountered is "Access Denied" when trying to navigate to the documents and settings folder. Is having an XP cd a prerequisite for going into recovery console and trying this stuff? I will work on getting one. Thanks ahead of time.

A:windows logon process system terminated unexpectedly

Hi and welcome to TSF you could try hooking up to a usb external caddy and connecting to another computer or even this Use Ubuntu Live CD to Backup Files from Your Dead Windows Computer - How-To Geek

Read other 5 answers
RELEVANCY SCORE 111.6

how do correct this, if i can't access any of my user accounts, including the administrator user account as well? The user account logons but terminates unexpectedly on my eMachine...I am using Windows XP. Thank you for any help at all!

Computneticz
 

A:Windows Logon System Process terminated unexpectedly

If you can boot to safe mode, you might be able to fix the problem. If you can't, you might need to do a repair install of Windows XP.
 

Read other 1 answers
RELEVANCY SCORE 111.6

ok my pc has been getting BSODs quite often and i havent been able to fix it yet.. but today i got a different type of BSOD. im not big in computer tech so i didnt have a clue on what it is and disregarded the numbers..:/

Also i have been getting regular BSODs for about 2-3 months now and i even tried reformatting which didnt help...

im running free avg antivirus and some people say thats the cause.. but i run the same antivirus on my laptop and it works just fine

i have uploaded the file from C:\windows\minidump

im running win7 home premium 64bit original (full retail)
comp is about 6months old
latest re-format was about a month
anyhelp will be greatly appreciated

A:The Windows Subsystem system process terminated unexpectedly

The only memory dump dates from 16 Jan 2012.

No Windows Updates after SP1 - most systems have 70 or more. Please visit Windows Update and get all available updates.

We've seen a number of BSOD issues with SSD's recently. Here's the information that I've compiled:





Quote:
There's not a whole bunch available to test SSD's. The "easiest" test is to remove the SSD, install a platter-based hard drive, install Windows and test for stability that way.

Here's some suggestions:
- Update the SSD's firmware to the latest available version (VERY IMPORTANT!!!)
- Slow the memory (RAM) down to the next slower speed (I've only seen one person who claimed that this worked for them).
- Use any manufacturer's utilities that you may have. If you don't have any, then try this free one (I haven't used it myself): Crystal Dew World
- Update chipset and storage controller drivers to the latest available from the manufacturer of the device (not the manufacturer of the motherboard). Be sure to update ALL controllers on the motherboard!
....NOTE: Recently (Nov 2011) we had BSOD issues with the Marvell 91xx controller and an SSD. You may have to switch controllers also.-
Replace the SSD with a platter based hard drive and see if that stops the BSOD's. If it does, then it's likely that there's a problem with the SSD OR an incompatibility with your system.
It's my opinion that SSD's aren't reliable enough (with current hardware) to be used on a system that needs... Read more

Read other 1 answers
RELEVANCY SCORE 108

Hi All,
I am a newbie here
I get a bluescreen error on my computer:
stop:c000021a{Fatal System Error}The Windows Subystems process terminated unexpectedly with a status of c0000005 (0x7c9106c3 0x0069f36c) Beginning dump of physical memory Physical memory dump complete contact you system administrator or technical support group for further assistance
Any idea what is happening, please help

A:c000021a{Fatal System Error}The Windows Subystems process terminated unexpectedly wit

Boot off of the XP CD and get to the Recovery Console here type chkdsk /R and hit enter. The Check Disk utility will try and fix any errors. If that fails do a Repair Install.

Read other 3 answers
RELEVANCY SCORE 108

Recently my small business computer which uses Microsoft Windows Server 2003 software started displaying the message c\windows\system32\services.exe and shutting down every 5-10 minutes. Is this a virus or some other problem? Please help.
 

Read other answers
RELEVANCY SCORE 107.6

Hello all!
I'm running Windows XP Professional on my eee901 laptop and randomly within a couple hours I'll always get a:

"C:\Windows\System32\services.exe terminated unexpectedly with status code -1073741819"

This text is within a shutdown timer that gives me a minute before it restarts. After aborting the shutdown (through "shutdown -a") my computer is still operational, however there are a lot of things I cannot do (such as run an ipconfig or a netstat, or view my event viewer). If I let the machine restart and note the exact time the shutdown popup happened, the event viewer shows nothing happening during such time.

The main problem with this issue is I cannot replicate it, so I never can test if it is fixed, and I only find out that it is not fixed by leaving the machine on for quite some time, then noticing it restarted on its own. I've run various freeware scans and cleanup utilities such as AVG, Ad-Aware, CCleaner, and have googled this exact error code extensively. From one page I found, a solution involved HP software, but I have nothing HP-related on this machine.

A HijackThis log is attached, note that the log was taken before the eee901 laptop aborted the shutdown. I'll try to take another snapshot after executing a shutdown -a next time the error occurs.

System Specs:
Windows XP Professional SP2 (I cannot fit SP3 on the 4 gb C drive)
Note: C-drive = windows installation, D-drive = personal programs and data
CPU = Inte... Read more

A:services.exe terminated status code -1073741819

Run this please and check ALL results for security updates and microsoft malicious software removal tools

http://technet.microsoft.com/en-us/security/cc184923.aspx
Additionally SP3 is VITAL to the health of your computer. Support for XP with SP2 has finished and you will not receive security updates, very likely the cause of this problem.
 

Read other 3 answers
RELEVANCY SCORE 106.8

Dell Inspiron Windows 7 SP1 continue to get the BSOD window. Tried reset system to factory default, update BIOS and all available Hardware drivers on the system and still having this problem. Any help would be greatful.

Thank you in advance

Read other answers
RELEVANCY SCORE 104.4

Hi,

I'm trying to fix a problem with a friends computer and i'm a bit stumped. Here's what's going on.

He says he was downloading a bunch of stuff the day before the problem occured and now cannot start the computer. When the computer boots up, An error occurs while windows is starting. Here's the message:

The instruction at '0x7c914d14' referenced memory at '0x0000000'. The memory could not be 'read'.Click to expand...

I hit ok on that error and this error message then appears:

This system is shutting down. Please save all work... Shutdown initiated by NT Authority\System

Time before shutdown: 60secs

Message:
System process 'C:\Windows\System32\lsass.exe' terminated unexpectedly with status code -1073741819. The system will now shut down and restart.Click to expand...

This same things occurs when i try to boot the machine into safe mode, so I am stuck. What should I do next?
 

A:System Process C:\Windows\System32\lsass.exe terminated unexpexctedly

Read other 9 answers
RELEVANCY SCORE 104

I wanted to install the printer software (network printer) but during the process the system hangs. I had to force restart then while booting a message is appearing that
"The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.

The system process C:\WINNT\SYSTEM32\SERVICES.EXE terminated unexpectedly with status code 128. The system will shut down and restart."

it keeps on doing this. Pls help me to resolve this.

A:Services.exe teminated unexpectedly. Status code 1282

Quote:




C:\WINNT\SYSTEM32\SERVICES.EXE




Is this computer Windows XP or 2000? Or has it been updated from 2000? the only OS with C:\WINNT is Windows 2000?
What is the make and model# of the printer you are trying to install? What driver are you using? Have you tried to go to the printer manufacturers download drivers site and download an updated driver for the printer?

Read other 2 answers
RELEVANCY SCORE 101.6

BSOD: The session manager initialization system process terminated unexpectedly with a status of 0xc000003a (0x00000000, 0x00000000)

I'm getting this on a shop system running Win 7 Home Premium 32 bit. The last thing I did was shutdown before going home and I believe it installed an update then shutdown, so I'm suspecting the update caused the problem.

I can't get into the F8 Safe Mode screen to try Last known good configuration so I think I'll try a System Restore from the install DVD. Does that sound like a good approach?

Any other suggestions?

Sorry I don't have the specs with me but I think it's a 2.8Ghz Dual core Intel with 4GB RAM and two SATA drives. It's been running fine for about a year.

A:session manager initialization system process terminated unexpectedly

If you can boot into the computer by what ever means just delete the last update and re boot and see if that helps.

Read other 9 answers
RELEVANCY SCORE 100.4

I keep experiencing BSOD "A process or thread crucial to system operation has unexpectedly exited or been terminated."
Windows 2003 Standard Edition.
I have a lot of applications on it that is hard to get the setups.
Can Setup repair solve this problem?
I will be glad if you can be of help pls

Read other answers
RELEVANCY SCORE 100.4

Hey All,

I'm having problems upgrading from win 98 to xp. The install seems to go through ok however on the reboot the system makes it to the XP splash screen and then I get the message:

the session manager initialization system process terminated unexpectedly with a status of 0xc0000034

Does anyone have any ideas? The system meets the min requirements.

Joe
 

Read other answers
RELEVANCY SCORE 100.4

Hello,
My computer has been showing the following blue screen error for a few months now,



***start of error message****
A problem has been detected and windows has been shut down to present damage to your computer.




A process or thread crucial to system operation has unexpectedly exited or been terminated.



If this is the first time you've seen this stop error screen.



restart your computer. If this screen appears again. follow these steps:



Check to make sure any new hardware or software is properly installed.



If this is a new installation, ask your hardware or software manufacturer For any windows updates you might need.



If problems continue, disable or remove any newly installed hardware or software. Disable BIOS memory options such as caching or shadowing.



If you need to use safe Mode to remove or disable components, restart your computer, press F8 to select Advanced startup options, and then select safe Mode.



Technical information:



*** S"color:#222222;font-family:Arial, Helvetica, sans-serif;font-size:small;">


collecting data for crash dump ...



Initializing disk for crash dump ... 



Beginning dump of physical memory.


Dumping physical memory to disk: 75




*****end of error message******
*
On restarting the computer I received the following problem details :


***start of problem details****
Problem signature:
  Problem Event Name: BlueScreen
&... Read more

Read other answers
RELEVANCY SCORE 100

I constantly have system shutdowns from c:/windows/system32/services.exe with the message "status code 128". The system restarts afterwards.

I scanned with updated AdAware SE Personal, AVG7.5, Free Registry Fix unlimited, and with Spybot S&D which would not update (bad checksum).
I also scanned with Trend House (web scan, which took over 3 hours and wouldn't complete), cwshredder (against cool web search), FxSasser (against sasser worm) and FixBlast (against blast worms).

Nothing seems to be of any help.

I lately fixed my pc and found out that, what i thought to be a pentium 4 IBM pc with legit Windows XP, is really a big hoax. the Windows isn't legit and the pc was a pentium 4 with a pentium 3 processor, almost no IBM equipment, and the 512MB RAM was a combination of a 400 DDR and a 266 DD. The 266 was removed, and now my RAM memory is only 256 MB. I suspect the shutdowns are either caused by the lack of RAM or because one of the two:
* I lately installed 3 softwares - AVG 7.5 and 2 games, that my friends also installed with no problems.
* I heard that Microsoft scans the pc for updates, and if the software isn't legal, they install some kind of malware that can make the system shut down.

Ofcourse, I'm not an expert, and I would really appreciate any help.

This is the HijackThis log (I can also give the scanning logs of the other programs if nescesary):

Logfile of HijackThis v1.99.1
Scan saved at 19:24:31, on 06/04/2007
Platform: Windo... Read more

Read other answers
RELEVANCY SCORE 98.4

I have a problem that I have seen has occurred to others in this forum. I have tried to follow some of the advice, but without complete success.

About a week ago one of my PCs started showing this RUNDLL message on startup - "Error loading ruyopaku.dll" - and 10-15 minutes later the system would shut itself down. I would get the message "System Shutting Down. Shutdown Initiated By NT Authority System" and "DCOM Server Process Launcher Service Terminated Unexpectedly". The computer would then shut down after the 60 second countdown timer expired. For a while I was successful in stopping the shutdown by going to START/RUN/ and typing "shutdown -a". I ran an AVG antivirus scan and it found some things that I quarantined, but that did not solve the problem.

So on a recommendation from this forum, I downloaded, installed, and ran Malwarebytes which found quite a few additional viruses and trojans which I also quarantined. I no longer get the missing DLL message on startup, but the system continues to reboot itself and now even the "shutdown -a" does not stop it. I also tried hitting F8 on startup and selecting the option for "No automatic reboot on system failure" but that seems to have no effect either - the system continues to shut itself down and reboot, typically every 5 minutes or so. It's not enough time to do anything - download software, run a scan, etc.

So, the situation is that before I can downl... Read more

Read other answers
RELEVANCY SCORE 96.8

A little over a week ago I started receiving two errors, one saying that the DCOM Server Process Terminated Unexpectedly, the other saying Windows Plug and Play stopped working. Each message will pop up after my computer has been on for a few hours, and afterwards it's forced to restart. I ran a Malwarebytes virus scan, but it detected no problems, so any help on this would be appreciated.
I posted a topic in the "Am I infected?" boards, but was redirected here for help. 
 
Here are the DDS.txt logs:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 10.45.2
Run by William at 18:58:53 on 2014-01-12
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8086.5257 [GMT -8:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files... Read more

A:Windows 7 - DCOM Server Process Terminated Unexpectedly

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/520634 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 26 answers
RELEVANCY SCORE 96.8

My computer is running on Windows 7 Ultimate 64-bit.
Since a few days ago, I've been starting to receive a message stating that the "DCOM Server Process Terminated Unexpectedly." A minute or so after the message shows up my computer is forced to restart. 
The message will come up after my computer has been on for a few hours, it's happened while playing games, or just browsing on Chrome.
Sometimes I'll receive a message saying "Windows must now restart because the Plug and Play service terminated unexpectedly." I'm not sure what triggers this one, but as with the other error, windows is forced to restart in a short period of time.
I've ran a Malwarebytes virus scan on both of my drives, but it showed that there were no viruses. It's strange that this is happening now, because I've been using this computer for well over a year with no troubles.

A:Windows 7 - DCOM Server Process Terminated Unexpectedly

Hello GH, this is a newer malware and we need a deeper look.Please follow this Preparation Guide and post in a new topic.Let me know if all went well.

Read other 2 answers
RELEVANCY SCORE 95.6

OS Version: Microsoft Windows 7 Ultimate, 64 bitProcessor: Intel® Core™ i7-3930K CPU @ 3.20GHz, Intel64 Family 6 Model 45 Stepping 7Processor Count: 12RAM: 16325 MbGraphics Card: NVIDIA GeForce GTX 780x2, -1024 MbHard Drives: C: Total - 114369 MB, Free - 48449 MB; D: Total - 1907726 MB, Free - 1273973 MB; E: Total - 99 MB, Free - 59 MB; F: Total - 2097050 MB, Free - 588597 MB;Motherboard: ASUSTeK COMPUTER INC., SABERTOOTH X79Antivirus: AVG Internet Security 2013, Updated and Enabled
 
Hey guys, I was redirected here after being helped by Broni Here's my previous topic.
http://www.bleepingcomputer.com/forums/t/519518/windows-must-now-restart-because-the-dcom-server-process-terminated-unexpectedly/
 
I'm here now because somehow the same problem has shown up again twice. Skype ends up crashing with some kind of ActiveX error then I eventually get the old error I was producing which was either: "Windows must now restart because the DCOM server process terminated unexpectedly." or "Windows must now restart because the Plug and Play service terminated unexpectedly."
 
I quickly ran rKill to see if the problem I had before returned. Sure enough:
Searching for Missing Digital Signatures: 
 
 * C:\Windows\System32\rpcss.dll : 510,464 : 07/13/2009 06:41 PM : fe2360da5601f06f0dc30c62e0a4860c [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll : 509,440... Read more

A:Windows must now restart because the DCOM server process terminated unexpectedly

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/521277 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 3 answers
RELEVANCY SCORE 95.6

Another issue i have: when in google chrome and i click on a link, it takes me to a different site and tries to get me to download their stuff.

A:Windows must now restart because the DCOM server process terminated unexpectedly

Hi,You got hit with the latest version of Zekos. One of your system files (rpcss.dll) has been patched.You'll need more advanced tools to replace that file. Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.xXToffeeXx~ 

Read other 4 answers
RELEVANCY SCORE 95.6

Not sure if this is in the right section! Move it if need be because it may or may not be virus related!
 
OS Version: Microsoft Windows 7 Ultimate, 64 bitProcessor: Intel® Core™ i7-3930K CPU @ 3.20GHz, Intel64 Family 6 Model 45 Stepping 7Processor Count: 12RAM: 16325 MbGraphics Card: NVIDIA GeForce GTX 780x2, -1024 MbHard Drives: C: Total - 114369 MB, Free - 48449 MB; D: Total - 1907726 MB, Free - 1273973 MB; E: Total - 99 MB, Free - 59 MB; F: Total - 2097050 MB, Free - 588597 MB;Motherboard: ASUSTeK COMPUTER INC., SABERTOOTH X79Antivirus: AVG Internet Security 2013, Updated and Enabled
 
 
 
Yesterday night the game (DayZ) I was playing froze and both my screens went black and then came back on. No error
Today I play the same game and both screens go black and I finally got the "Windows must now restart because the Plug and Play service terminated unexpectedly" error and my computer proceeds to restart. Keep in mind, I've been playing this game for weeks without this problem and have not installed any programs or touched my hardware. I eventually decided on wiping my OS for a clean install instead of posting just to see if that would fix the problem.
Once I got everything up and running again I eventually started having problems again except this time with a similar but different error message. "Windows must now restart because the DCOM server process terminated unexpectedly." But at this point it doesn't seem tied to the games I'... Read more

A:Windows must now restart because the DCOM server process terminated unexpectedly

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Ant... Read more

Read other 20 answers
RELEVANCY SCORE 95.6

My computer has been randomly rebooting, and I just got this message before the most recent reboot.
 
Windows must now restart because the DCOM server process terminated unexpectedly

A:Windows must now restart because the DCOM server process terminated unexpectedly

Hello, this is usually an infection so run these and see.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double-click on AdwCleaner.exe to run the tool.Vista/Window... Read more

Read other 5 answers
RELEVANCY SCORE 95.6

Another issue i have: when in google chrome and i click on a link, it takes me to a different site and tries to get me to download their stuff.
 
I have windows 7 ultimate 64-bit
This problem started about 2-3 weeks ago. It happens randomly and it gets frustrating because I would be in the middle of gaming or on the web and my computer would just restart randomly. Also i have started using another web browser (firefox) because its harder to navigate google chrome because chrome takes me to different websites frequently asking me to download a software. For example if i wanted to download itunes at itunes.com, instead google would take me to http://itunes.softwaredl.net/
 
I have tried following steps on another post concerning the samet thing, but unfortunately nothing happened. I downloaded CCleaner and superantispyware + malwarebytes trials to do scanning. It removed threats, but i still have the problem with my computer force restarting and my google chrome being screwed up.
 
So, I have been told by xXToffeeXx in my original post http://www.bleepingcomputer.com/forums/t/521186/windows-must-now-restart-because-the-dcom-server-process-terminated-unexpectedly/ to download DDS and post them in a new topic. There are two notepad logs so I will post both just to make sure. I put the attached file attach.txt in this post instead of copy pasting. Thank you for the help in advance
 
 
DDS.txt file
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Interne... Read more

A:Windows must now restart because the DCOM server process terminated unexpectedly

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Read other 48 answers
RELEVANCY SCORE 95.6

Hi, posting this as requested by xXToffeeXx
 
The computer is restarting every few minutes with the DCOM error.
 
Malware bytes is also blocking IP 66.45.56.109 
 
I posted some logs from rkill over at my original post http://www.bleepingcomputer.com/forums/t/520237/windows-must-now-restart-because-the-dcom-server-process-terminated-unexpectedly/
 
Here is the dds log, attached is the attach file, as requested.
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 8.0.7600.16722
Run by bmullican at 11:35:53 on 2014-01-09
Microsoft Windows 7 Professional   6.1.7600.0.1252.1.1033.18.3548.2008 [GMT -7:00]
.
AV: Trend Micro OfficeScan Antivirus *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro OfficeScan Anti-spyware *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.e... Read more

A:Windows must now restart because the DCOM server process terminated unexpectedly

Feel free to close this topic, system restore worked. 

Read other 2 answers
RELEVANCY SCORE 95.6

Over the past couple weeks I've been trying to figure out what's wrong and have even reformatted my computer to a different hard drive trying to fix it. Then it came back today. It's been maybe a week since reformat.
 
I've received several error messages:
Windows must now restart because the DCOM server process launcher service terminated unexpectedly
Windows must now restart because the Plug and Play service terminated unexpectedly
 
symptoms include computer slowing down and svchost.exe (hosting Plug and Plan and DCOM) climbs stealing in memory use form 10k when it starts to over 3,000k when it tries to restart my computer after closing either DCOM or Plug and Play
 
I'm Running Windows 7 Ultimate 64 bit
12gb RAM
 
Help me out guys! I can't do anything for more than 3 or 4 hours until this pops up

A:Windows must now restart because the DCOM server process terminated unexpectedly

Welcome aboard  Please download Rkill (courtesy of BleepingComputer.com) to your Desktop.There are 2 different versions. If one of them won't run then download and try to run the other one.You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/Double-click on the Rkill desktop icon to run the tool.If using Vista or Windows 7 right-click on it and choose Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.Do not reboot until instructed.If the tool does not run from any of the links provided, please let me know.If normal mode still doesn't work, run the tool from safe mode.When the scan is done Notepad will open with rKill log.Post it in your next reply.NOTE. rKill.txt log will also be present on your desktop.

Read other 7 answers
RELEVANCY SCORE 95.6

Not sure if this is in the right section! Move it if need be because it may not be virus related!

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Ultimate, 64 bit
Processor: Intel(R) Core(TM) i7-3930K CPU @ 3.20GHz, Intel64 Family 6 Model 45 Stepping 7
Processor Count: 12
RAM: 16325 Mb
Graphics Card: NVIDIA GeForce GTX 780x2, -1024 Mb
Hard Drives: C: Total - 114369 MB, Free - 48449 MB; D: Total - 1907726 MB, Free - 1273973 MB; E: Total - 99 MB, Free - 59 MB; F: Total - 2097050 MB, Free - 588597 MB;
Motherboard: ASUSTeK COMPUTER INC., SABERTOOTH X79
Antivirus: AVG Internet Security 2013, Updated and Enabled
~Windows 7 64bit~
Running AVG as my antivirus.
Yesterday night the game (DayZ) I was playing froze and both my screens went black and then came back on. No error
Today I play the same game and both screens go black and I finally got the "Windows must now restart because the Plug and Play service terminated unexpectedly" error and my computer proceeds to restart. Keep in mind, I've been playing this game for weeks without this problem and have not installed any programs or touched my hardware. I eventually decided on wiping my OS for a clean install instead of posting just to see if that would fix the problem.
Once I got everything up and running again I eventually started having problems again except this time with a similar but different error message. "Windows must now restart because the DCOM server process term... Read more

Read other answers
RELEVANCY SCORE 95.6

Hello, I recently have came across this same exact problem with my computer. I just have one question, would I be able to follow these steps in order to get my computer clean? If you could get back to me I would really appreciate it. Thank you in advance. I actually tried doing the same process you used for conor1123 and once you got to BlitzBlank, I didn't know if the file you put down for him to copy and paste into the script was unique for his computer only. Hello, I've just recently came across this message while playing Borderlands 2 and it put my computer into a restart. I don't know what could be wrong and how to go about fixing this problem. It has been occurring for around 3-4 days now. Thank you to anyone who can guide me through identifying the problem and helping me remove it. Thank you in advance! Mod Edit:  Merged posts from another member's topic - Hamluis.

Read other answers
RELEVANCY SCORE 95.6

I believe I have an infected computer. I have run malware bytes and malware bytes antirootkit to no avail.
 
I saw another post here http://www.bleepingcomputer.com/forums/t/519518/windows-must-now-restart-because-the-dcom-server-process-terminated-unexpectedly/ and tried some of the logging tools, I'll post rkills logs to start out with because that seemed to be the only one to report any kind of issue.
 
 
 
 
Rkill 2.6.5 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html
 
Program started at: 01/09/2014 10:45:29 AM in x86 mode.
Windows Version: Windows 7 Professional 
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * No malware processes found to kill.
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * No issues found.
 
Checking Windows Service Integrity: 
 
 * No issues found.
 
Searching for Missing Digital Signatures: 
 
 * C:\Windows\System32\rpcss.dll : 376,320 : 07/13/2009 06:16 PM : f2e8f3e59d3a11c3030a859aa4a0ca2e [NoSig]
 +... Read more

A:Windows must now restart because the DCOM server process terminated unexpectedly

Hi,You got hit with the newest infection. One of your system files (rpcss.dll) has been patched.You'll need more advanced tools to replace that file. Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.xXToffeeXx~

Read other 4 answers
RELEVANCY SCORE 94.8

Hi!  I just started getting an error message in an alert window:
 
"dcom server process launcher service terminated unexpectedly windows xp. The system is shutting down. Please save all work in process and log off (which it does not allow me to do). Any unsaved changes will be lost. This shut down was initiated by NT Authority DCOM server proces launcer service terminated unexpectedly."
 
My computer then shuts down.  It happens about every twenty minutes.  Thanks in advance for your help.  I really appreciate it.
 
Moderator Edit: Moved from the Malware logs forum due to the absence of any logs
Roger

A:dcom server process launcher service terminated unexpectedly windows xp

Thank you for moving this to the correct place.  I apologize for posting in the wrong place.  I would provide logs but now my computer will not boot and has a blank screen that reads:
"NTLDR is missing
Press CTRL+ALT+DEL to restart"
 
I am at a complete loss.  Thanks again!

Read other 79 answers
RELEVANCY SCORE 93.6

I am using XP Pro and the automated update just downloaded the recent updates so i told it to install them. Then it restarted the computer after prompting me to.

I am now getting a "c000021a The Windows Logon Process terminated unexpectedly with a status of 0xc0000018 The system has been shutdown"

I have tried to get into Safe Mode, but it still give the error to go into safe mode, I went into the Recovery Console, but not sure if I can do anything useful in here. I was thinking of trying a repair, but would prefer not. Is there a command line version of the XP roll-back feature, or does anyone know how to fix this problem in general? Or is the only solution as it stands to do a Repair Install?

Thanks, James
 

A:Solved: Blue Screen & Reboot - Windows Logon Process Terminated Unexpectedly

Read other 14 answers
RELEVANCY SCORE 93.6

Randomly getting a pop-up window stating DCOM Server Process Launcher Service terminated unexpectedly.  My computer then shuts down and immediately restarts.  Happens while gaming, surfing the internet, and while computer is on but not is use.  Have done the steps from: 
http://www.bleepingcomputer.com/forums/t/519518/windows-must-now-restart-because-the-dcom-server-process-terminated-unexpectedly/
 
Link to original thread:
http://www.bleepingcomputer.com/forums/t/523847/dcom-server-process-launcher-service-terminated-unexpectedly/

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium 
Boot Device: \Device\HarddiskVolume1
Install Date: 6/7/2013 2:39:28 PM
System Uptime: 2/10/2014 1:10:24 PM (1 hours ago)
.
Motherboard: ASUSTeK COMPUTER INC. |  | H61M-PLUS
Processor: Intel® Core™ i5-3350P CPU @ 3.10GHz | LGA1155 | 3101/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 931 GiB total, 471.681 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP64: 2/9/2014 9:00:49 PM - Scheduled Checkpoint
.
==== Installed Programs ======================
.
Adobe Reader XI (11.0.03)
Age of Wonders: Shadow Magic
Akamai NetSession Interface
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
DC Universe Online
Dynasty Warriors Online
Eve... Read more

A:DCOM Server Process Launcher Service terminated unexpectedly Windows 7 Logs

Hi and Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.Type the following in the edit box on FRST, after "Search:".rpcss.dllIt then should look like:Search: rpcss.dllClick Search button and post the log (Search.txt) it makes on the USB drive in your next reply.

Read other 13 answers
RELEVANCY SCORE 91.2

I have just been trying to install a new HP Photosmart D7360 on a computer running Windows XP Home (with all latest service packs/updates). There came a time during the install when the software asked me to plug in the USB cable. When I did so, I received the following error:

"This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM

Time before shutdown: 00:00:XX

Message
The system process
'C:\WINDOWS\system32\services.exe' terminated unexpectedly with status code - 1073741819. The system will now shut down and restart."

The system rebooted. The same thing happened the next time that I tried. The time after that, I elected not to plug in the printer immediately, but install the driver software first. The driver software finished installing, but, as soon as I plugged in the printer, the same error occurred.

If I leave the printer plugged in after I restart, then the error sometimes appears some time after I first log on. The computer is also unusually slow (whether or not I receive that error message) to respond, and some things simply fail to work: bringing up system properties, for example, has no effect, and selecting "add printer" in the "printers and faxes" dialogue is wholly non-responsive. Running most software other than things like Windows Explorer and the Task Manager will result in that software freezing after a short t... Read more

A:Services.exe terminated unexpectedly...

Read other 15 answers
RELEVANCY SCORE 91.2

I have a server randomly restarting. Sometimes the server restarts cleanly and other times it hangs with no video, which requires a hard shut down. Not sure if this is virus/malware related.

The error that appears is "The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM. Shutdown will begin in 58 seconds. Shutdown message: The system process C:\Windows\System32\services.exe terminated unexpectedly with a status code -1073741819. The system will now shut down and restart"

So far, I have applied all current windows updates and uninstalled all unnecessary programs from the system.

OS: Windows Server 2003 SP2 X32
Antivirus: Trend Office Scan 10.0 SP1

A:Services.exe terminated unexpectedly

Hello and welcome, are you able to run these next.Please DownloadTDSSkillerLaunch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well. Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message.

Read other 7 answers