random()type

Can you explain the other DWORD entries and what they do, such as ErrorControl, FailureActions, and Type, and under Enum – Count and NextInstance, or, if not, can you post a link with explanations for those? Thank you.

i literally had to completely restore my hard drive after this, why would you post how to disable a critical system service?

i had no start bar and i couldnt right click the service to re-enable it, right clicking didnt work.

you should at least post instructions how to re-enable the service through the command prompt.

this page is evil.

hi guys,
let’s start from beginning :
when i wrote this post (26th may 2005) a likeable virus called Blaster (see reference on http://www.symantec.com/security_response/writeup.jsp?docid=2003-081113-0229-99)
infected a lot of WinXp machines all around the world.
one of the way to avoid the infection was to install a firewall and the blaster patch before connecting to
the internet for the first time.

if you had not it locally (on cdrom or something else) you were screwed.

so said, an alternative way to do that, was to temporarily stop the RPC service, to fix the system, then activate it again.
Stopping RPC service causes some problems to the regular behaviour of the OS, but it can still work!

the loss of settings of the taskbar is one of these problem, as well the bad display of service panel.

however, you can easily get back to the default settings for the RPC service (once stopped) through regedit.exe
or similar programs that come within your OS, following one of these routes:

1) go to taskmanager->new task and type in the edit box “regedit.exe”
2) create a .bat file and fill it with “regedit.exe” string.then save and launch it.
3) using “reg.exe” (the command_line version of regedit.exe) from cmd

after you have guaranteed access to system registry, simply set back the “Start” value to “2″.
restart the system and everything will get back to normality.

PS : i really don’t know what you meane with “fooled” or “i literally had to completely restore my hard drive” and
“Don’t do this! I did this and I it killed my whole system!”…
simply, don’t play with the system registry if you don’t know exactly what you are doing! :)
and, above all, make always a backup file of the key you are going to edit (File->Export in regedit.exe applcation)

last PS : this trick was useful when blaster was a real security problem (may 2005).
doing this stuff today with you SP2 installed, has no sense.
anyway, i did the trick (on my WinXp Pro Sp2) after reading your comments
and didn’t find any problem in starting the RPC service back.

last advice : if you want your WindowsXP (or Vista) never give you any problem again,
just shutdown your pc, buy a Mac and use OsX :)

saver

Hi Saver

Thanks for trying to help us “dabblers in matters we should leave alone”. I tried everythig you said above and still no joy (still unable to access properties page of rpc service) – tried changing the value to 2 (on the bat key and the start key)restarting on each occasion but still no change.
Could you explain a little more fully about how to create the bat file please and fill it with regedit.exe as I managed to create a key called regedit.exe but I didn’t know how to “Save and launch it”. I’m just reinstalling xp over my current system (which will hopefully retain all my programs/files) but I’d still be interested to know and it may save someone else the 1 hour 30 minutes required to reinstall (probably should have gone for the “repair” option but there ya go…

Really? You guys are complaining because you tried something that you know nothing about and don’t even know what it does?

If someone wrote a blog about how to hang yourself would you complain to the blogger that you accidentally died?

If you don’t know what it does then why would you even do it in the first place?

hi guys,

as i said, this trick was useful to patch WinXp against Blaster worm.

however, Blaster or anything else, playing with registry keys is ALWAYS a dangerous practice.

as most of specialized security weblogs say, is a good behavior to make a system restore point or, at least, data backup before playing with any OS.

i would like to say again that, after reading your comments (”this is evil”, “it killed my whole system” and so on), i did the trick and i was easily able to make WinXp back again to work perfectly following the options i gave in my previous post.

my last advice is to learn how to create and use a simple bat file before trying to spin yourself into ‘advanced’ actions.

hoping that you (after 4 years) will consider this post closed :)

if you can’t bring up your start menu you could also type “services.msc” in the new task in task manager; this brings up the services dialog

Hi everyone,

I’ll say this quickly, because obviously whoever wrote this blog is a noob.

DO NOT disable RPC. You have been warned.

Thanks.

ok ok you’re right,

I apologize… i will fix it now

DISCLAIMER : don’t try this at home if you are under 8, if you have never seen a pc before or, simply, your don’t know what you’re dealing with.

Jay, i m sorry if you accidentally destroyed your pc following my instructions.

PS : are you guys really still playing with RPC stuff ?
there’s a bunch of more interesting stuff to do out there.
this post is from MAY 2005.

:-) Guys, this just shows how sticky the stuff can be on the Internet! :-)

You people that are writing in are all fools. Why the hell would you play in the regrestry if you cannot even make a bat file? Why would you disable a service so important windows doesn’t allow it to be disabled if you don’t know what is going to happen.
I’m sorry mummy the computer is broken – the internet made me do it.
I suggest you all keep out of the regresty. Probably best to keep out of the services. In fact dont go on the internet either.
There are instructions to do all sorts of bad things in a cook book floating around that I wont name for fear of idots. Seasoned users will know it. I’d hate to see you make those things because you can but then not know how to use them at all let alone safely. As for you Saver good on you. You wrote instructions to do something and judging by all the idiots that have written in it works. Your post does exactly what you have said it will.
Tomorrows lessen. How to delete kernel32.dll

Rant over but stupid people piss me off!!

I came, I read, I LOLed.

good for Larry Dignan,

he wrote a great warning list!!

from my side, i have got a nicest one :

1 Windows Xp action everyone should do : uninstall it.

Registry is spelt ‘ r e g i s t r y ‘

before you go reinstalling your system over this ..
I have had this service disabled before and resolved the issue successfully in my case terminal services and remote access control was also disabled and in (control_panel\administrative_tools\services ) I was locked out completely from enabling the services listed
to fix the problem i set to default all start values in
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\]
the display name will tell you if you have the right service picked as according to
(control_panel\administrative_tools\services )from in here you can lookup
the start value defaults by right clicking a service and click help
2 for autostart 3 for manual 4 for disable
k then i restarted in safemode command prompt with admin access
ran regedt32 from run menu went to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\]
entered start value of “2″ or autostart
also in my case my start bar was gone so i had to get creative for navigation around the machine the easiest way for me was to right click the desktop and create a folder then i could open the folder to access iexplorer by clearing the text in the navigation bar i could type control panel and hit enter to get to administrative tools
ctrl alt delete will open the task manager from there i could go to file –>new task to get to my run terminal to access regedit.exe and also regedt32
please note it is regedt32 not regedit32

good luck and god bless

oh by the way after your service is started be sure to go back to
control_panel\administrative_tools\services
and enter the correct values in there as well you can do this by selecting the service right click and click properties