Welcome to MalwareRemoval.com, What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.
MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.
Ok so just after I submitted that last post, the computer restarted all on its own with no warning. The screen would go black and then turn back on and then go black again and then it just restarted. I figured I would let you know about all that is going on.
I followed the instructions in Step 2 but I simply can't find "rpcss.dll" when I select browse from either website.
I looked up the file without using the browse from the websites and it is there. For some reason when I choose browse from either website, rpcss.dll, isn't there at all. So I looked up the file and tried to drag it into Jotti's file to scan box and hit submit but it just says "File is empty (0 bytes)!" Virus Total doesn't even recognize it.
That is a new one on me. Copy the file C:\Windows\System32\rpcss.dll to your desktop and then repeat step 2. Then it will work. This is what I had to do to get mine to work.
Your file has no valid signature from Microsoft so we will work on getting it replaced. But first we must find a good one. I will be asking you to check some others that we find.
I apologize, for some reason I didn't get any email notifications this time around that you had posted. Will post the results as soon as the scan finishes.
I need you to create a batch file, save it to your desk top and then run it. Then I need you to identify the C:\ drive letter in the Recovery Environment on your PC. It will be different. This is needed in order to replace the bad rpcss.dll file in the System32 folder.
Step 1. Create a batch file
Open Notepad.
Copy/paste the following text into the empty Notepad window.
@echo off copy C:\Windows\winsxs\Backup\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d_rpcss.dll_fd3e269b C:\rpcss.dll
Save the file as MoveDriver.bat on your desktop. Save it with the file type... all types *.*.
Right click the file MoveDriver.bat select "Run As Administrator" to run it. If prompted by UAC, please allow it.
Verify that the file rpcss.dll has copied to the root folder C:\
Step 2. Boot into Recovery Environment
Restart the computer and press F8 repeatedly until the Advanced Options Menu appears.
Select Repair your computer. (Should be the top entry already Highlighted)
Select Language and click Next
Enter password (if necessary) and click OK, you should now see the screen below ...
Take note of what drive Recovery Environment sees the Operating System on. RE sometimes sees drive allocations differently to how they are in Normal Mode, so it's important that you know so you can post appropriate instructions. It can be found at the top of the System Recovery Options window.
Hit Restart button to boot back into Normal Mode.
Post details of the Drive letter you've just noted down.
According to the Systemlook results the file we want has copied to the root folder C:\ Now I need you to create a batch file, save it to the root folder C:\ and then run it in Recovery Environment.
Step 1. Create a batch file
Open Notepad.
Copy/paste the following text into the empty Notepad window.
@echo off ren C:\Windows\System32\rpcss.dll rpcss.dll.vir copy C:\rpcss.dll C:\Windows\System32\rpcss.dll
Note: Step 3 is a 3 stage process prior to actually saving the file.
Save the file as ReplaceDriver.bat . Change location to Local Disk (C:). Save it with the file type... all types *.*.
Step 2. Boot into Recovery Environment again
At the System Recovery Options window select Command Prompt
A Command Window will open with the cursor flashing next to X:\Windows\System32>
Type C: and hit Enter
The cursor should now be flashing beside C:\>
Type ReplaceDriver.bat into the Command Window
You should get a 1 file copied reply in the Command Window.
Type Exit into the Command Window then hit Enter to re-boot into Normal Mode.
Step 3. SystemLook SystemLook should still be on your Desktop.
Right-click SystemLook.exe and select " Run as administrator " to run it.
Copy the content of the following codebox into the main textfield: Do not include the word Code or Select all:
Users browsing this forum: No registered users and 526 guests
Contact us:
Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.