Over 1 million tech questions and answers.

ATA - Event ID 7031 - The MS ATA Gateway service terminated unexpectedly (only on 2016 servers).

Q: ATA - Event ID 7031 - The MS ATA Gateway service terminated unexpectedly (only on 2016 servers).

ATA Version 1.9.7478.57683

This is only happening on our Server 2016 boxes (2012 R2 boxes are fine) where the service restarts on Monday's at 2:45 PM ONLY. We are trying to narrow down what is causing this. Has anyone seen behaviour like this before?
Thanks.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: ATA - Event ID 7031 - The MS ATA Gateway service terminated unexpectedly (only on 2016 servers).

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 153.6

Windows 7 Version 6.1.7601 Service Pack 1 Build 7601
The telephony service is randomly shutting down.  We have isolated the TAPISRV in its own SVCHOST but it is still terminating unexpectedly. 

Any advice on how to troubleshoot this problem would be appreciated.  I have the application and system event logs but so far we can't tie the failure to a specific event.

Debra Bahr

Read other answers
RELEVANCY SCORE 130.8


The Microsoft Advanced Threat Analytics Center service terminated unexpectedly.  It has done this 10 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service. error 7031
The service is keep restarting. When I'm using a new certificate generate from our CA with SAN(multiple IP addresses, DNS and CN).

If I select self-generate certificate, all working. at least, service is up.

Read other answers
RELEVANCY SCORE 129.2

Please Note: System worked perfectly with ATA prior to ATA 1.8 and ATA 1.8 Update 1.
Upgraded to 1.8 & Update 1. GW Service would not upgrade and constantly restarted. Event log errors 7031.
Uninstalled, Cleaned System (Certs, Files, etc.), Reinstalled. Same issues.  Uninstalled/Reinstalled both GW & Center. Same Issues.  Verified json files are correct and match Certs installed.
Certs are Enterprise Root CA issued with proper CSP and 2048 bits. (Remember, system worked perfectly prior to 1.8 or 1.8 Update 1).
ATA Version 1.8.6645.28499 (1.8 Update 1)


ATA Center: Windows Server 2012 R2
ATA GW: Windows Server 2012 R2 (AD Domain Controller)


ATA GW Event logs (7031 repeated):
The Microsoft Advanced Threat Analytics Gateway service terminated unexpectedly.  It has done this [x] time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
ATA Center Event Logs: No error


ATA GW file log (Microsoft.Tri.Gateway.Updater-Errors.log):


2017-08-17 19:49:54.3592 5620 17  14689fae-b5a6-4658-81d9-1468df0bd0b6 Error [GatewayConfigurationManager] Failed to get configuration, using default configuration
2017-08-17 19:49:55.5624 5620 16  38e075a2-44a1-4458-8892-20785b231106 Error [GatewayConfigurationManager] Failed to get configuration, using default configuration
(This line Repeats)



2017-08-17 19:49:55.6092 5620 15  e0d63b07-714a-4a77-b954-e698ce5949d2 Error [WebClient+... Read more

Read other answers
RELEVANCY SCORE 107.2

We are getting below error on Lightweight Gateway server repeatedly. Can anyone help on this?
Log Name:      System
Source:        Service Control Manager
Date:          7/30/2020 4:38:56 AM
Event ID:      7031
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Server.domain.net
Description:
The Microsoft Advanced Threat Analytics Gateway service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

Read other answers
RELEVANCY SCORE 107.2

The ATA Gateway service keep restating and i get the following in the log:
2015-05-12 10:24:48.8296 1340 5   28ddf5ea-a0e2-4f69-9d2e-2c8b6a0d3a10 Debug [DirectoryServicesClient] Starting

2015-05-12 10:24:49.0640 1340 14  28ddf5ea-a0e2-4f69-9d2e-2c8b6a0d3a10 Warn  [DirectoryServicesClient] LDAP search failed [DomainControllerDnsName=XXX.dk BaseDistinguishedName=CN=Sites,CN=Configuration,DC=XXX,DC=dk Scope=Subtree Filter=(&(objectClass=server)(dnsHostName=XXX.dk))
AttributeNames=canonicalName objectClass whenCreated displayName distinguishedName objectGUID isDeleted name objectSID whenChanged dnsHostName serverReference Options=NoResultsWarning]

2015-05-12 10:24:49.0640 1340 5   00000000-0000-0000-0000-000000000000 Error [DirectoryServicesClient]  System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.Tri.Gateway.Resolution.DirectoryServicesClient.OnStart()
   at Microsoft.Common.Framework.Module.Start()
   at Microsoft.Common.Framework.ModuleManager.OnStart()
   at Microsoft.Common.Framework.Service.<>c__DisplayClass2.<OnStart>b__0()
   at Microsoft.Common.Utils.ExceptionHandler.<>c__DisplayClass1.<Run>b__0()
   at Microsoft.Common.Utils.ExceptionHandler.Run[TResult](Func`1 function, Boolean shouldRethrow)

A:The Microsoft Advanced Threat Analytics Gateway service terminated unexpectedly

oh have forgot to put the intire FQDN name of the Domain Controller i was monitoring in the
Port Mirrored Domain Controllers (FQDN) 

Read other 2 answers
RELEVANCY SCORE 89.6

Hello all best wishes for us, this is my first post on this forum after searching fro to seek the help of some kind of malware attacks whether on my laptop.
Whether because of my careless causing virus attacks landed on my laptop.
After I turn on the laptop, the boot process was normal as usual. But as already in the process of logging on and has reached the desktop and there is no 10 second sudden pop up saying "Windows must now restart Because plug and play service terminated unexpectedly" also sometimes appears "Windows must now restart because power service terminated unexpectedly" so continuous thing happened this way.
But when I tried to enter in Safe Mode all of this run smoothly.
Can anyone help? I desperately need help for this problem.
Thank you.

A:Windows must now restart because plug and play service terminated unexpectedly , power service, and many more

You have already created a topic in malwarebytes forums.

Please do not create multiple topics for same issue.

Stick with them.

Read other 1 answers
RELEVANCY SCORE 89.2

Hey guys at Bleeping Computer, I saw other people having this issue and I can't figure out how to fix it myself so now I'm coming to you guys. Also the DCOM service is taking up about 20-50% CPU. I set it to only one processor and is still taking up this much CPU constantly. I was not able to install Microsoft's .NET framework 4.0, or 4.5. I was also not able to install any windows updates as it is giving me the error code 80070216. I ran a scan with Malwarebytes but nothing showed up infected. This is a pretty much freshly factory restored computer as my friend gave me this computer about a few months ago. I noticed this problem about a week or two ago but it has not been getting any better as I thought it would.
 
Here is the DDS log the preparation guide told me to use:
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 8.0.7600.16671  BrowserJavaVersion: 10.51.2
Run by Josh at 14:00:21 on 2014-02-10
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.3839.2060 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\... Read more

A:DCOM, Plug and Play, and Power Service Service Terminated Unexpectedly

Hi and Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.Type the following in the edit box on FRST, after "Search:".rpcss.dllIt then should look like:Search: rpcss.dllClick Search button and post the log (Search.txt) it makes on the USB drive in your next reply.

Read other 10 answers
RELEVANCY SCORE 89.2

This is the first time I've sought tech support online and I first went to bleepingcomputer.com. After two weeks and 108 views, there have been zero replies! Virtually every other question has at least one response, but nothing for me. Please tell me that my problem is not so hopeless! This is the question:

I was having problems with Windows updates not installing correctly, and I was getting a message that I was not running a genuine copy of Windows, before I got stuck in the current situation. Now I cannot do anything, such as run the SysInfo tool, because the computer restarts continuously. The restarts occur regardless of whether there is an internet connection, and it also occurs in safe mode. First I get the message:

"Windows based script host has stopped working"
I copied down some things from the details before the pc restarts:

Problem Signature
Problem Event Name: InPageCoFire
Error Status Code: c000009c
Faulting Media Type: 00000003
Damaged Filename: wbemprox.dll
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033
Additional Information 1: b688
Additional Information 2: b688e40ddee6555e26a47dbf0ad9b87b
Additional Information 3: ae63
Additional Information 4: ae63fd9c06abfa4442bb1441adaaeca9

After that the following message appears:

"Windows must now restart because the [Power service OR Plug and Play service OR DCOM server process] has terminated unexpectedly."

The pc restarts over and over, alternating between these three versions of the... Read more

A:Restart loop; Power service/Plug and Play service/DCOM terminated unexpectedly

Read other 8 answers
RELEVANCY SCORE 89.2

I was having problems with WIndows updates not installing correctly, and I was getting a message that I was not running a genuine copy of Windows, before I got stuck in the current situation. Now I cannot do anything, such as run the DDS tool, because the computer restarts continuously. The restarts occur regardless of whether there is an internet connection, and it also occurs in safe mode. First I get the message:
 
"Windows based script host has stopped working"
I copied down some things from the details before the pc restarts:
inpagecofire
wbemprox.dll
c000009c
00000003
 
After that the following message appears:
 
"Windows must now restart because the [Power service OR Plug and Play service OR DCOM server process] has terminated unexpectedly."
 
The pc restarts over and over, alternating between these three versions of the message.
 
Here is some information about my system:
MSI LGA1155/Intel P67 B3/DDR3/SATA3&USB3.0/A&GbE/ATX Motherboard P67A-GD65 (B3)
Intel Core i5-2500K Processor 3.3GHz 6 MB Cache Socket LGA1155
8GB Kit (4GBX2) DDR3 PC3-10600
EVGA GeForce GTX 560 Ti DS 1024 MB
Western Digital Caviar Black 1 TB WD1002FAEX
Antec EarthWatts 750 Watt ATX12v v2.3 Power Supply Unit
 
Also, the pc was at the point that it was not booting at all, and I had to clear the CMOS to get to where I'm at now. I don't know where to go from here.
 

A:Restart loop; Power service/Plug and Play service/DCOM terminated unexpectedly

Update: I never got a reply to this post and the computer has been sitting unused for about two months. Once in a while I turned it on and tried to quickly copy some files to a usb drive before it would restart. Since it restarted after only a minute or so, and it was carrying on other processes to start up, this was time consuming and annoying. I was planning on just getting some more files off of it, and then starting from scratch.
 
Well today it started up and has not restarted after a few hours. This is the first time it has done this after probably a hundred restarts. Perhaps it is a coincidence, but I used a different monitor with the pc this time. I still got the "Windows based script host has stopped working" message and these are the details:
 
Problem Signature
Problem Event Name: InPageCoFire
Error Status Code: c000009c
Faulting Media Type: 00000003
Damaged Filename: wbemprox.dll
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033
Additional Information 1: b688
Additional Information 2: b688e40ddee6555e26a47dbf0ad9b87b
Additional Information 3: ae63
Additional Information 4: ae63fd9c06abfa4442bb1441adaaeca9
 
Usually I got the restart message shortly after that, but not this time. I ran disk check and got this message:
 
"Windows Resource Protection found corrupt files but was unable to fix some of them."
 
It directed me to the CBS log for details, and I have a copy of the log, but I don't know if I should post it here.
 
Anyway, it sti... Read more

Read other 15 answers
RELEVANCY SCORE 89.2

Hi,

As title, lately in the event logs, it shows my Win XP Home Edition desktop is experiencing McAfee services terminating unexpectedly and then restarted.

1) I am using McaFee Internet Security 2010 and has it patched to the latest definition files.

2) The following six McAfee services are terminated and event logs shows the following:

"
Event ID 7031

The McAfee Anti-Spam Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
"

"
Event ID 7031

The McAfee Proxy Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
"

"
Event ID 7031

The McAfee Network Agent service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
"

"
Event ID 7031

The McAfee VirusScan Announcer service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

For more information, see Help... Read more

A:The McAfee Personal Firewall Service service terminated unexpectedly

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/419171 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 2 answers
RELEVANCY SCORE 87.6

Help!

Every 5 min or so I get a message saying that Windows must shut down because the RPC Service terminated Unexpectedly. It also says that the shut down was initiated by NT Authority/System. When It boots back up an error message says windows cannot open a file called tftp164. I can't find any info on this file and cant find it in my system. I don't even know if this is a bug or not. Any help would be appreciated here is my HJT log just incase it helps.

Logfile of HijackThis v1.95.1
Scan saved at 11:25:27 PM, on 8/11/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\msblast.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
C:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.EXE
C:\Program File... Read more

A:RPC Service terminated Unexpectedly

Run HJT again and check this item and have HJT fix it:

O4 - Global Startup: TFTP164

Next download Spybot - Search & Destroy (if you haven't got the program installed already)

After installing, first press Online, and search for, put a check mark at, and install all updates.

Next, close all Internet Explorer windows, hit 'Check for Problems', and have SpyBot remove/fix all it finds.

Reboot

Last, run HJT again and post your log again to see if anything was missed.

Thanks
 

Read other 2 answers
RELEVANCY SCORE 87.6

Ok first of all, I've been having this problem for over 3 months now.. nothing I have done has helped.

Every night, somehow if I lose connection to the router, or something else happens (it appears to be somewhat random.. but consistently every night).. I get a pop up message saying
"instruction at 0x7572eb3c referenced memory at 0x909090, the memory couldn't be written" or some such.
I click ok.. and then a new box pops up saying:
"RPC service terminated unexpectedly, system shutdown in 60 seconds"

I can bypass the shutdown by going to run and typing in "shutdown -a"... but then this seems to have the effect of making my computer act very funky.. clipbook (copy and paste) fails to work, dragging and dropping files won't work.. and various other very strange things.. until I restart. So every time this message pops up I am forced to restart.

I have run many various anti-malware tools and antivirus programs.
NOD32 says I am clean.
Avast! says I am clean.
Spybot says I am clean
Ad-Aware says I am clean
Trend Micro House call says I am clean

By all accounts... I DO NOT have the MSBLAST worm. At least it appears that way.
- I have tried manual uninstallation - files not found.
- I have used the Symantec MSBLAST remover tool (http://www.symantec.com/security_res...081119-5051-99) - MSBLAST not found on my PC
- I have followed the instructions here - http://kb.wisc.edu/helpdesk/page.php?id=2048 , no help

I have visited... Read more

A:RPC service terminated unexpectedly

Hi Shroomism and welcome to TSF,

You didn't say what type system you have. Some details might be helpful.
Try running a memory test and see what that shows.

You can get memtest86 at this link.
http://www.memtest86.com/

Hope this helps.
Mack1

Read other 11 answers
RELEVANCY SCORE 87.6

When i start up my computer i recieve an error that says "RPC service terminated unexpectedly" and then it gives me 60 seconds before it restarts and then the same things happens all over again. I know what the RPC service is and i know its needs to be started for windows to work properly. I did some research and everything points to the blaster worm. I have all windows updates and i was unable to find any suspicious processes in task manager. So i have come to believe that this error doesn't necessarily mean that i have the worm. I am unable to stop this error that pops up because i can't get into the services control panel to iniciate a fix to get rid of this error. It seems many functions in windows are disabled. any help to resolve this problem would be greatly appreciated. I am asking for help on my older computer.
 

A:RPC service terminated unexpectedly

You can abort the shutdown by going to start > run and entering:
shutdown -a

This should give you time to reconfigure the service. Do NOT under any cirmstance try to disable it.

See also further advice in this Sophos article:

http://www.sophos.com/support/disinfection/blastera.html

If you can get the opportunity post a HijackThis scanlog:

Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe
 

Read other 3 answers
RELEVANCY SCORE 87.6

Hi,
recently my mcafee got expired so i uninstalled that and then installed AVG.Then i also installed superantispyware and then malwarebytes. but there was a virus/malware win antivirus 2009 which kept bugging me.i removed that using malwarebytes and started using firfox and recently updated to firefox3.
i started getting one blue screen with error message stop error 0x00000070 and followed with some similar kind of no's ie 4 parameters .
to remove this i started doing lots of things and finally came to know that my AVG live update was not working and malware bytes is not working.i tried to uninstall and reinstall but the installation process itself hangs and i guess something is stoppponNow when i boot my system it comes with services.exe terminated unexpectedly with status code 2147483645.... something like that...im not able to do anything..even not able to connect to net..i thought of sending hijackthis log but i couldnt even run tht. before i try to that error message comes and i cannot perform anything..pls help
 

Read other answers
RELEVANCY SCORE 86.8

I'm running Windows XP SP2 with Zone Alarm and McAfee Anti-Virus 7.0. Every 2-3 minutes my computer freezes for about 1 minute before going back to work normally. This started on 8/6. I checked the event viewer and there is an error message "The Network Associates McShield service terminated unexpectedly. It has done this xx times". It's followed by informational messages that it's starting the service again. I've run Microsoft Anti-Spyware, Ad-Aware, Spybot and McAfee Online Virus scan without finding a possible cause. I uninstalled and reinstalled McAfee. The problem disappears when I remove the application. I also tried to install another AV program and got the same message regarding this AV program.

Here is the Hijackthis log.

Logfile of HijackThis v1.99.1
Scan saved at 7:58:18 PM, on 8/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\lexmvservice.exe
C:\WINDOWS\system32\lexwebservice.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS... Read more

A:McShield Service Terminated Unexpectedly

Any response from this post? The issue started with me yesterday and about 4 or 5 days ago I updated my Zone Alarm software and that was about it... Awhile back I even applied McAfee AV patch10 so thats been on my system for awhile. There isn't anything new I installed, but this just started yesterday and today the process that McAfee seems to be still scanning and not succeeding with is process 628 on my pc which is CSRSS.EXE file...
 

Read other 1 answers
RELEVANCY SCORE 85.6

Hi,
 
I searched the forums and didn't find anything about this topic.  Apparently, this termination has happened almost 1000 times. I have some files. If someone could help me, I would greatly appreciate it.
 
Minidump folder = empty
 
Speccy snapshot = http://speccy.piriform.com/results/CuQnAvmpJFhjhffewQLRJ0w
 
MiniTool file:
 
MiniToolBox by Farbar  Version: 13-07-2013
Ran by Arleen NEW (administrator) on 17-09-2013 at 08:47:01
Running from "C:\Users\Arleen NEW\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (09/17/2013 08:45:17 AM) (Source: Application Error) (User: )
Description: Faulting application name: SearchIndexer.exe, version: 7.0.7601.17610, time stamp: 0x4dc0d019
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18229, time stamp: 0x51fb1677
Exception code: 0xc0000005
Fault offset: 0x000000000000940d
Faulting process id: 0x1248
Faulting application start time: 0xSearchIndexer.exe0
Faulting application path: SearchIndexer.exe1
Faulting module path: SearchIndexer.exe2
Report Id: SearchIndexer.exe3
 
Error: (09/17/2013 08:45:08 AM) (Source: Application Error) (User: )
Description: Faulting application name: SearchIndexer.exe, version: 7.0.7601.17610, time stamp: 0x4dc0d0... Read more

A:Window Search Service terminated unexpectedly

You have 2 AVs installed...this will usually produce system problems.  I would uninstall one, then run chkdsk /r.
 
The Search errors and indexing are tied together.  I would turn off indexing...then reenable it at a later time, if you feel that you must.  Indexing, IMO, is one of the more useless services/processes included in any version of Windows.
 
Louis

Read other 6 answers
RELEVANCY SCORE 85.6

error event id: 7034

--------------------------------------------------------------------------------

It is driving me nuts! Please help. What can be the problem?

=====
Date: 22-nov-04 Source: Service Control Manager
Time: 4:40:35 PM Category: none
Type: Error Event ID:7034
User: N/A
Computer: me

The Print Spooler service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

==============

I tried deleting all my printers with Cleanspl.exe: (Spooler Cleaner). No luck with that. Then I thought of doing a selective startup but with almost nothing running still the same results, after a few minutes my printspooler went off. Help, help, this is so annoying!

A:The Print Spooler service terminated unexpectedly.

I had a similar problem. Upgrading to Service Pack 2 helped.

Read other 3 answers
RELEVANCY SCORE 85.6

Hi,
 
I am having a raft of issues here,first I couldn't complete an install of I-Tunes so I looked in the event viewer and saw The Windows Search service terminated unexpectedly several thousand times so I am guessing this is related. The machine is also hesitant at best now which it wasn't before.
 
I ran the Farbar recovery scan tool and attached the results:
 
I also ran ADW Cleaner which found nothing
 
Please can you help me to fix this and return my machine to its former glory.
 
Many thanks

A:The Windows Search service terminated unexpectedly

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/571804 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 2 answers
RELEVANCY SCORE 85.6

I got this error message in my event viewer yesterday : "The AVG Free8 WatchDog service terminated unexpectedly". My HJT is as below. Do I need to worry?Thanks,Logfile of Trend Micro HijackThis v2.0.2Scan saved at 16:35:04, on 11-22-2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\ProcessGuard\dcsuserprot.exeC:\WINDOWS\system32\slserv.exeC:\Program Files\CyberLink\PowerDVD\PDVDServ.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\WINDOWS\system32\igfxsrvc.exeC:\Program Files\ProcessGuard\pgaccount.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\PROGRA~1\AVG\AVG8\avgtray.exeC:\Program Files\ProcessGuard\procguard.exeC:\Program Files\WI... Read more

A:AVG Free8 WatchDog service terminated unexpectedly

Hello abanerjiWelcome to BleepingComputer ========================Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

Read other 1 answers
RELEVANCY SCORE 84.8

The Windows Image Acquisition (WIA) service terminated unexpectedly. It has done this 1 time(s).

That's the Event Viewer error message at every reboot (appears to occur during the shutdown phase).
There is a concurrent fault listed for the Canon scanner driver, CNC210C.DLL, which is not corrupted.

Clues on how to banish these errors? Or should they simply be ignored, as they do no apparent harm....

A:The Windows Image Acquisition (WIA) service terminated unexpectedly.

Ignore the problems until Microsoft provides a fix. It really does not cause problems that I could see, and windows still boots very fast using a SSD.

Read other 1 answers
RELEVANCY SCORE 84.8

Everytime i turn on my computer i use it for a about 5 - 10 minutes and a "Windows must now restart because the power service terminated unexpectedly" windows pops up and 30 seconds later the computer shuts down.
 

A:Windows must now restart because the power service terminated unexpectedly

Can anyone please help? I really have to fix this problem.
 

Read other 2 answers
RELEVANCY SCORE 84.8

hi
currently i am using win xp sp2 and some of my networked terminals are showing erro r code at the time the OS boots:
error message:
The system process 'C:\win\sys32\service.exe' terminated unexpectedly with status code -1

and then the system does not boot it hangs actually!!
it would be really appriciable if some one could assist me in fixing this error!
cheers:
up: X11
 

A:C;\win\sys32\service.exe terminated unexpectedly with status code -1

More info about your network?
 

Read other 2 answers
RELEVANCY SCORE 84.8

Hi,

This message keeps coming up on my computer and causes it to turn off. I have tried reading other posts about what to do to stop this but I really don't understand much about computers at all and so none of it makes sense to me!

Could anyone help me by giving me simple steps on how to fix this problem?

Thank you!!

Sophie
 

Read other answers
RELEVANCY SCORE 84

Recently I had some virus trouble- got rid of it with a few scans. After that, I have been getting a message- “Windows must now restart because a plug and play service terminated unexpectedly”. I Run “shutdown –a” to cancel the shutdown, which works…but my audio goes off. Any suggestions will be much appreciated
Thanks
 

A:Windows must now restart because a plug and play service terminated unexpectedly

Read other 9 answers
RELEVANCY SCORE 84

i know theres a thread for this on windows xp, but i wasnt sure if it would be different on vista.
basically this message about the DCOM comes up a lot and i dont know why.
also i get a message about the host process for windows service has stopped working.
then also the plug and play service has been terminated unexpectedly.
and right now norton keeps finding some kind of trojan. i may be rubbish with computers but i know thats bad.
oh also my computer crashed twice yesterday, like the screen just went black and blue.
iv also now done scans that have found things called networm and worm win and all sorts of other things. my laptop is pretty messed up at the moment!
please can someone help me!

i downloaded that hijack thing and here is the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:25:15, on 25/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\syste... Read more

Read other answers
RELEVANCY SCORE 84

Hi

When ever I start my Laptop, after 5 minutes a warning appears with a 60 seconds time saying " DCOM Server Process launcher service terminated unexpectedly" and my laptop shuts down.

I read the forums and did Run>cmd>shutdown -a

This helps, and warning message goes off. but whenever I restart my Laptop, message appears again.

Can someone tell me the solution.

Thanks
TAN

A:DCOM Server Process launcher service terminated unexpectedly

Hi -

Don't restart the laptop if possible.

Open notepad and copy/paste the text in the quotebox below into it:


Code:

@shutdown -a
Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:

Each time your machine threatens to shutdown, double click on fix.bat & it shall abort the shutdown procedure. That should ease some of your current difficulties.

------------------------------------------------------------------------------------------


Download DDS and save it to your desktop from here, here or here.
Disable any script blocker, and then double click dds to run the tool.When done, DDS will open two (2) logs: DDS.txt
Attach.txt

Save both reports to your desktop.
-----------------------------------------------------

Please include the following logs in your thread:Contents of the DDS.txt posted as text in your reply
Attach the Attach.txt to your post by clicking the Manage Attachments button under Additonal Options>Attach Files on the composition page. Browse to where you saved the file, and click Upload.


Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.
Double click the exe file.
The program will begin to run, and perform ... Read more

Read other 19 answers
RELEVANCY SCORE 84

Hello Techguy, this is my first time posting here,
I need your help removing this annoying virus, sometime after I start my computer ( usually 5 - 10 minutes ) I'll get an error saying that windows must be restarted because the plug and play service has terminated unexpectedly ( sometimes it's the DCOM service, others the Power service ), I type shutdown -a and the computer doesn't shut down, my sound won't work until I restart the computer again, any help would be much appreciated Here is the HJT log:

=============================================
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:21:48, on 05-11-2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\PRISMSVR.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\EXPERTool\TBPANEL.exe
C:\Program Files\DAEMON Tools11\daemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\O... Read more

A:Windows must now restart because plug and play service terminated unexpectedly

bump
 

Read other 1 answers
RELEVANCY SCORE 84

Hello people, I am in desperate need of some help here! I am running windows 7 Home Edition SP1 64bit on a 6month old ASUS laptop pc.

I turned on my computer last night after not using it all day and found out that it is restarting automatically right after you login or even you do not login (even I don't type password to login, for 30 sec, the windows went to shutting down by itself).
Once I login, here is the message that I got randomly (when you reboot and login you will get one of that).

WINDOWS MUST NOW RESTART BECAUSE DCOM SERVER PROCESS LAUNCHER SERVICE HAS TERMINATED UNEXPECTEDLY

WINDOWS MUST NOW RESTART BECAUSE THE PLUG AND PLAY SERVICE TERMINATED UNEXPECTEDLY.

WINDOWS MUST NOW RESTART BECAUSE POWER PROCESS SERVICE HAS TERMINATED UNEXPECTEDLY.
but in my case, I can not do anything after login:
I have 10 sec. after the windows show up but I can not make anything run. I can't get into "cmd" or any antivirus program. They won't just open up. Then, the windows restart so I can't follow the steps in that post at all.

1. I got to "Safe mode" but again right after login. The message shows up then restart. even before it restart, i can't make anything run, ie. "cmd" won't open up.

2. Safe mode with command prompt has the same problem also.

3. Start up repair for windows 7 won't work also.

Any recommendations or suggestions would be greatly appreciated. Thank you.
 

Read other answers
RELEVANCY SCORE 84

Hello all best wishes for us, this is my first post on this forum after searching the help of some kind of malware attacks whether on my laptop.
Whether because of my careless causing virus attacks landed on my laptop.
After I turn on the laptop, the boot process was normal as usual. But as already in the process of logging on and has reached the desktop and there is no 10 second sudden pop up saying "Windows must now restart Because plug and play service terminated unexpectedly" also sometimes appears "Windows must now restart because power service terminated unexpectedly" so continuous thing happened this way.
But when I tried to enter in Safe Mode all of this run smoothly.
Can anyone help? I desperately need help for this problem.
Thank you.

hijackthis.txt
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:24:59, on 06/02/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Safe mode with network support

Running processes:
C:\windows\Explorer.EXE
C:\windows\system32\ctfmon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\FixBlast.exe
D:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.inklineglobal.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.allgameshome.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Mic... Read more

A:Windows must now restart because plug and play service terminated unexpectedly

Read other 15 answers
RELEVANCY SCORE 84

Hello everyone,
I've seem to stumble this problem and i found your site on Google hopefully you guys can help me out Any who i thought this wasn't to serious at first, but now it happening quiet a bit at random times. So this happened about 3-4 times today according to event viewer and I'm really starting worry now. Could you guys please advise me what to do i want to reformat as a last resort if this cant be fixed thanks again!


DDS (Ver_10-03-17.01) - NTFSX64
Run by Johnny at 22:23:23.74 on Thu 07/29/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_20
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.4086.2390 [GMT -4:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exeFaulting application name: svchost.exe_DcomLaunch, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007feed130118
Faulting process id: 0x2f4
Faulting application start time: 0x01cb2f7a7ae8deb0
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: unknown
Report Id: 25b38777-9b76-11df-94d3-00241d8de11e
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\COMODO\COMODO livePCsupport\CLPSLS.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\... Read more

Read other answers
RELEVANCY SCORE 84

I have two laptops on my home network, which both seem to be infected with the same malware.
Both today received a message staying that the DCOM Server Process Launcher Service had terminated unexectedly and that my system would reboot in 60 seconds.

On laptop 1, I dumbly played along and let it reboot and now I can't get most of my automatic services started (tells me the file is missing) and I have no network connections either.

On laptop 2, which I booted when the first was not usable, gave me the same message, but after reading how you resolved this issue for someone else (on my phone), I quickly issued a shutdown -a to prevent it. So far so good, in that I still have internet here and that message hasn't come back.

Anyway, What do I have to do to restore these laptops to good health?
Thanks,
Doug

A:DCOM Server Process Launcher Service Terminated Unexpectedly

Hi Doug,

Do you have by any chance McAfee antivirus installed on those systems?

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.When done, DDS will open two (2) logs: DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

---

Download GMER here by clicking download exe -button and then saving it your desktop:Double-click .exe that you downloaded
Click rootkit-tab, uncheck files option and then click scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

Read other 2 answers
RELEVANCY SCORE 84

Every 40 Mins, My pc pops up. Windows must now restart because a plug and play service terminated unexpectedly..
And Boots it's self off I've tried .. Making a new account on my computer .. and same thing happen
Please help..
 

A:Windows must now restart because a plug and play service terminated unexpectedly

Please do not start more than one thread for the same issue.

Closing duplicate.
 

Read other 1 answers
RELEVANCY SCORE 84

Hi. I had put myself down as intermediate but reading here I can see I am a beginner.

I get the DCOM server launcher message and a 60 second timeout. Aware how to stop the timeout. Have tried Malwarebytes and AVG version 9 to no avail. Here is my logfile. Please can you help? It would be much appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:43:29, on 30/01/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Samsung\Samsung Battery Manager\BatteryManag... Read more

A:DCOM server process launcher service terminated unexpectedly

Read other 6 answers
RELEVANCY SCORE 84

Recently I had some virus trouble- got rid of it with a few scans. After that, I have been getting a message- “Windows must now restart because a plug and play service terminated unexpectedly”. I Run “shutdown –a” to cancel the shutdown, which works…but my audio goes off. Any suggestions will be much appreciated
Thanks
 

A:Windows must now restart because a plug and play service terminated unexpectedly

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:27:07 AM, on 2/6/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\SmartPCTools\Registry Repair Wizard\RCHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by... Read more

Read other 2 answers
RELEVANCY SCORE 84

Dcom Server Process Launcher Service Terminated Unexpectedly, PC shuts down in 60 seconds after th error message. Randomly searches are being redirected.

Windows XP Home SP3

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:26:19 AM, on 2/7/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\NO... Read more

Read other answers
RELEVANCY SCORE 84

I have a Windows XP desktop and currently use Firefox instead of IE. I run AVG and zonealarm . I am constantly being shutdown with the 1 minute warning. Attached is my hijack this log. Thank you in advance for your help.

Logfile of HijackThis v1.99.1
Scan saved at 3:32:31 PM, on 1/23/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
... Read more

A:DCOM server process launcher service terminated unexpectedly

Read other 16 answers
RELEVANCY SCORE 84

I didn't have any problems with my system until i let me sister use my computer and I don't know what she opened, downloaded, or looked at but when she was done I installed updates, installed new virus and restarted my computer to make everything work and windows would not start. It would pop up a message saying windows was unable to start correctly and gave an option to try to have it fixed. When I chose this it would pop up a message saying it was unable to fix and I needed to contact windows or my manunifactuar. When I finally figured out how to restore my computer to factory settings, redownloaded my anti virus and ran a scan, where AVG picked up 40 tracking cookies. I have no idea what that is but they fixed some and put others in the virus vault. Just when I was thinking all was well I started getting a message saying thtat my DCOM server process launcher service terminated unexpectedly and is now shuting down. I have no idea what the DCOM server is or why its doing this. It does not do this when i do anything inperticular, its done it while i IM with my husband, or checking email, or watching a movie on netflix. I have run a virus check with AVG everyday and it comes up with nothing. I believe my operating system is windows vista however when I ran hijack the log says something like windows/system32. Any help would be amazing, and i know some about computers but not a lot. here is my hijack log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:46:23 ... Read more

A:Dcom servier process launcher service terminated unexpectedly

Read other 16 answers
RELEVANCY SCORE 84

Everytime I turn on my Dell computer ( I have windows XP) I get an error stating "The system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. The shut down was initiated by NT AUTHORITY/SYSTEM.

Message: Windows must now restart becuase the DCOM Services Process Launcher Service terminated unexpectedly."

I also get another pop-up message stating: "Generic host process for WIN32 services has encountered a problem and needs to close. We are sorry for the inconvenience."

I have downloaded and ran AVG, Malwarebytes' Anti-Malware and Ad-Adware. All programs found viruses/infections which I deleted but the problem is still occuring. Any suggestions?
 

Read other answers
RELEVANCY SCORE 84

Cannot load windows xp. The message says "dcom server process launcher service terminated unexpectedly. Shutdown initiated..." and it gives a countdown. Then it restarts, takes a long time, and ultimately gives the same error message.
In am using Win xp-pro sp3 32-bit system and I do not have the original win xp install disk. I do have another win xp-pro install disk but when I put it in to boot up from it I cant find the recovery part.
P

A:dcom server process launcher service terminated unexpectedly

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/531681 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 2 answers
RELEVANCY SCORE 84

DCOM Server Process Launcher Service terminated unexpectedly
 
 
Here is the log from Security Check
 
 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 MVPS Hosts File  
 Spybot - Search & Destroy 
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Adobe Reader XI  
 Google Chrome 32.0.1700.102  
 Google Chrome 32.0.1700.107  
````````Process Check: objlist.exe by Laurent````````
 Spybot Teatimer.exe is disabled!
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 3% 
````````````````````End of Log``````````````````````
 
 
Farbar Service Scanner Version: 02-02-2014
Ran by Administrator (administrator) on 10-02-2014 at 11:06:00
Running from "C:\Users\Administrator\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
 
Internet Services:
============
 
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
 
 
Windows Firewall:
========... Read more

A:DCOM Server Process Launcher Service terminated unexpectedly

You're infected with Zekos malware.It'll require elevated help. Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 3 answers
RELEVANCY SCORE 84

I have received the message "Windows must now restart because the DCOM Server Process Launcher service terminated unexpectedly." My computer just continually restarted and restarted. I was used another computer to research the issue and was able to enter : shutdown -a in the cmd to stop the computer from restarting. I joined this website and downloaded HJT and ran a log. This is my log please let me know how to resolve this issue.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:52:51 AM, on 12/7/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CSHelper.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkc... Read more

A:DCOM Server Process Launcher service terminated unexpectedly

I have received the message "Windows must now restart because the DCOM Server Process Launcher service terminated unexpectedly." My computer just continually restarted and restarted. I was used another computer to research the issue and was able to enter : shutdown -a in the cmd to stop the computer from restarting. I joined this website and downloaded HJT and ran a log. This is my log please let me know how to resolve this issue.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:52:51 AM, on 12/7/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CSHelper.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkc... Read more

Read other 1 answers
RELEVANCY SCORE 84

Dear All

I heard you are the ones can see the problem at a glance to HJT logs

--

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:10:16, on 22.06.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20583)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\FreePDF_XP\fpassist.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AirTies\ADSL Hizmet Programý\AirTies_util3.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
... Read more

Read other answers
RELEVANCY SCORE 84

I have been trying to fix a Trojan viknok and after trying different approaches unsuccessfully, I finally used Kaspersky TDSS Killer.  When rebooting after "fixing", my system shuts down and reboots immediately after starting.  Keeps cycling starting up / shutting down / rebooting.
 
"This system is shutting down ... initiated by NT Authority/ System.
Windows must restart because Dcom server processes launcher service terminated unexpectedly"

Read other answers
RELEVANCY SCORE 84

Hi,
I followed a previous thread where you noted:

Disable Timer - DONE

I installed PC TOOLS - Spyware Dr. and it is currently running. I am only at 31% and have the following 4 threats:

Adware Advertising
Application. tracking Cookie
Rogue Antispyware security tool
Trojan. Malscript
plus 28 infections.

I don't know how to find the report to send back to you....plus I don't know how to remove these.
Can you please help?

Much appreciated!
 

Read other answers
RELEVANCY SCORE 84

Out of the blue I restarted my computer and started getting this message:
"DCOM server Process Launcher Service terminated unexpectedly."

Then the window counts down from 60 seconds and restarts. After searching, I've been able to stop the restarting and am considering disabling the DCOM service as others have mentioned, but I'm not sure if it's an essential "service" to keep my computer running normally. I ran HJT and here is the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:48:39 PM, on 12/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBKA.EXE
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.e... Read more

Read other answers