May Have Deleted RPCSS.EXE!

I may have deleted this program and it is resulting in not being able to boot. It did not cause any problems until I shut-down and tried to boot up again. Then it gave the following error:

[RPCSS caused an invalid page fault in module <unknown> at 0000:00000006
registers:
EAX=00000000 CS=0167 EIP=00000006 EFLGS=00010202
EBX=00000000 SS=016f ESP=0056e8ec EBP=0056f6c0
ECX=501d5bc1 DS=016f ESI=0056f364 FS=2937
EDX=8160f35c ES=016f EDI=0056f364 GS=0000
Bytes at CS:EIP:
00 00 00 00 69 d3 65 04 70 00 65 04 70 00 54 ff
Stack Dump:
10002c05 1000b060 0056f364 00000202 0056f6c0
00000000 00000000 00000000 00000000 00000200
00000000 00000000 00000000 00000000 00000000]


I have searched for info on this but everything pertains to NT and not '98 which is what I run. Any ideas?

Thanks in advance.

Azahel

(PS the initial error says that RPCSS has performed an Illegal Function and will be shut down. When I click on closed it just pops back up again and the start up goes no further.)

 

Hi Azahel and welcome to the boards. Win98SE also has this file in the C:\Windows\System directory. You can extract it from the Cab files on your Win98 setup CD or directory by using System File Checker. I am not sure on the commands if you need to do this from DOS is you can't get Windows started but I am sure someone will chime in here and help.

You could also extract it using Winzip or the DOS version of PKUNZIP and place it into the C:\Windows\System directory.

 

The program is not deleted, otherwise you would not be getting the error. The error is happening as the program is running.

Try booting to SAFE mode.

If you get there, use Explorer and browse to \Windows\System, select RPCSS.exe and rename the file.

If you can't get to Safe mode, boot to a Command prompt.

There enter the following commands:

Cd\Windows\System
Rename rpcss.exe rpcssexe.old

Restart to Windows and see if the error disappears.

**Rpcss is not required to run on a standard Windows platform

 

Lenghty but interesting reading with many possibilities:

http://www.computing.net/windows95/wwwboard/forum/3943.html

My guess:
You got something UNKNOWN running in background that is not "working or playing well with others ".

 

Thank you everyone for giving your ideas about this problem. I have tried starting in Safe Mode but the same error occurs but I will try the renaming and see if that does the trick. Thank you very much for the help. I will post the results.

Azahel

 

OK, I have renamed the file and that seemed to solve that problem. For some reason the MSGSRV32.exe ends up "Not Responding" at the very same point. If I wait long enough...and I mean LONG...then it finally goes nad I can log in then it claims that this program is running but it is not listed when I hit Ctrl-Alt-Delete so I am not sure what that is about. Thanks very much for the help. I am forever in debt.

Azahel

 

If you wish, you can try one more thing.

Rename RPCSS back to it's original name. Then run REGEDIT and browse to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE

and look for the string:

EnableRemoteConnect, and give it a value of N.

Exit Regedit, reboot

This setting is "supposed" to stop RPCSS from running. If it does, it may solve the Msgsrv issue.

 

Thanks for the suggestion. I feel like an idiot for asking this question but what are the exact steps to RUN REGEDIT? Do I do it from the command prompt like I do when I renamed the file or do I do it from START, RUN, etc.? The problem is if I have to do it from start that means the computer must be booted up which I can't do if I rename the file. I am a little confused and don't want to make things worse than they are. A little additional explanation would be helpful. Please suffer my ignorance. Thanks.

Azahel

 

Do it from Start > Run > REGEDIT

and after making the REG change, THEN rename the RPCSS file back to it's original name, reboot and see if it helps. If not, then just rename it from the command prompt again.

 

Thank you to everyone who has helped with htis situation. By following your ideas I have figured out that the rpcss.exe program wasn't the problem. It seems that every program I run that wants to connect to the internet (rpcss and including all browsers, all IM's, and file sharing programs, as well as ftps and even winamp for some reason) give the identical error that I listed in the first post. So I have no way to connect to the internet. Any ideas would be helpful or else I must break down and take it to a shop. Thanks again for all the help.

Azahel

 

"It seems that every program I run that wants to connect to the internet (rpcss and including all browsers, all IM's, and file sharing programs, as well as ftps and even winamp for some reason) give the identical error that I listed in the first post "

So, they all "try" to connect, and then fail on the above error??

You say "every ". I presume that things like NotePad, Word, Wordpad, Regedit, MSConfig do not try to connect? Do they??

(WinAmp does because it is checking for updates, and can be turned off in options).

Is this a Dialup, DSL, Cable connection?
After the connection, open a DOS windows and enter

PING www.yahoo.com

Is there a response?

Have you run a full virus scan with updated definitions?
Run a Spyware/Foistware checking progam like SpyBot?

 

Thank you all for your input. Yes it was only the programs that try to connect to the internet that had the error. I have discovered what it was. I had deleted a program called WHAgent (WebHancer). This is an info gathering program that uses the internet to send info to webpages. It is connected with every program that uses the internet. They all upon starting up were looking for this program and when they couldn't find it the shutdown. This was the problem fromt he beginning. I would have never found it if it hadn't been for this board. Thanks to all! All I had to do was reinstall this program and everything works perfectly now. What a releif.

Azahel

 

You really don't want to do that.

But, if you already have, now run SpyBot which will remove it completely!!

And, if you haven't, run SpyBot and see if it will detect and remove the pieces that are still lingering.