1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Blue Screen & Hangup

Discussion in 'Legacy Windows' started by oldbear, 2003/12/27.

Thread Status:
Not open for further replies.
  1. 2003/12/27
    oldbear

    oldbear Inactive Thread Starter

    Joined:
    2003/10/11
    Messages:
    133
    Likes Received:
    0
    98SE loads to desktop. Then my firewall asks for permission to let RPCSS.exe go on line. Shortly after I get the message: OE has occured at 0028:C0049810 in VxD VFar (01) plus 0007838. This was called from 0028:C1837EBOin Vxd Voltrack (04) plus 0000043. It may be possible to continue etc.
    I can start in Safe Mode. Alt-Cont-Del after OE shows Explorer, Pdisk, Stimon and systray as active. After awhile Explorer or msgsrv not responding comes up.
    I installed a CD RW and everything was fine. I deleted . after bachking up the files to CD a number of directories and files. They were pictures. I ran Adaware and found a number of items. McAfee 7.0 was installed and found one trojan and cleaned it. Stinger found nothing. Spy Bot found some items. Sys File Checker found one file setupX and it was replaced.
    Before the above OE and checks all ran OK The last thing I did was delete a directory called C (C:\C) and go on liine to AOL Com. The problem started after that.
    I have a second computer 98SE that I can use. I need to make a boot disk w\cd support in case I have to replace the C directory (C:\C). I also need to get Emergency dats to use with McAfee 7.0
    Any help on any of the above will be greatly appreciated.
     
  2. 2003/12/28
    merlin

    merlin Inactive

    Joined:
    2003/01/07
    Messages:
    1,111
    Likes Received:
    0
    If you do not allow McAffee to load at start-up, do the errors
    not occur ?
    regards
     

  3. to hide this advert.

  4. 2003/12/28
    oldbear

    oldbear Inactive Thread Starter

    Joined:
    2003/10/11
    Messages:
    133
    Likes Received:
    0
    Mc Afee isnot in the start. I removed the check matks from all the McAfee entries. The Directory C (C:\C) that I deleted was 168 Meg
    and appeared to be a duplicate or ghost of the original HD. I get the System busy Blue screen. Then black screem when I press any key. Is it possible that Win98 is working on the hard drive to do what ever for the deleted 168 <eg. I appreciate your help.
     
  5. 2003/12/28
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Oldbear
    "RPCSS.exe" is not even Win 98 process. What kind of firewall do you have? What would happen, if you don't allow that process to proceed? Do you have it in "msconfig/startup "?
     
  6. 2003/12/29
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    98 really doesn't need Windows Remote Procedure Call, if RPCSS.exe is not called from Msconfig, go to this page, and get the DCOMbobulator, free, it will disable it for you.
     
  7. 2003/12/29
    oldbear

    oldbear Inactive Thread Starter

    Joined:
    2003/10/11
    Messages:
    133
    Likes Received:
    0
    Thank you all. It appears to be fixed. I DL from McAfee the file dailyscan opened it and ADDED scan32.exe from my exisating McA files. Ran the progeam from DOS and sweep one found one Trojan and cleaned it. Sweep two found three more and cleaned them. Sweep three came up clean.
    It was my daughters computer and she had downloaded a bunch of .exe files and they were all over the place. She had Dir My Documents, sub to it Directory My Docments and sub Director three My Docs. Her desktop had icons for 30 DL exe programs for screensavers, fonts you name it. My guess is that the Firewall tried to stop a lot of outgoing traffic and just stoped Win98.
    In any event all seems OK now and so far I have cleaned over 1.5 gig of "stuff" off her machine. She even DL and opened stuff in a directory called C (C:\C).
    She thought she was protected by a AV program, but it wasn't updated for virus infoprmation since Jan 2000.
    I got the machine running then Word wouldn.t start, so deleted normal.dot and it is OK.
    Thank you for your help.
     
  8. 2003/12/29
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    oldbear
    Thank you for posting back.
    I noticed that you removed a lot of stuff detected by McAffee, along with the icons for installing things on the desktop. There may be something else still there.
    You might be interested in SpyBot Search & Destroy, free. It looks for spyware/adware/malware that McAffee will not detect. After you download Spybot and install, update and then do the scan.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.