albertodepaola

Hi,

I'm having some trouble with my computer, The RpcSs service is not starting and Dcom Server Process Launcher hungs initializing.

I was infected by vundo trojan, and followed this instructions to deleted:

http://www.aux.uwm.edu/compop/Vundo.php

but I think I missused KillBox, because after restart RpcSs didn't start and Dcom was stalled...
Obviosly, the trojan wass still there.

After surfing a while I found out that vundo was indeed infecting a lot of machines, but none had an RPCss/DCOM problem while or after fixing....

I manged to remove Vundo with a very simple program: AutoRuns. I just marked out the registry entrys for every dll that I've found related to vundo in my system, and also the one that was starting with winlogon, and that let me erase the files from system32 in my already limping system.

But that dind't solved my services problem.

The only forum where i found a similar situation to mine was this one, in a thread named "Trojan causing big problems - mllmm.dll/exe", solved by sUBs.

In that thread the solution was to restore the system. I runned the srdiag.exe in %SystemRoot%\system32\restore and saw that the last restore point was previous to all my trouble, but the thread didn't explained how to restore with out normal windows functions. The part I'm talking about is this: Trojans causing big problems - mllmm.dll/exe

Further down sUBs send a PM to the original poster, where, I assume, explains how to run a System Restore with RPCss stopped.

I some one could give me a hint!!

Thank you for your time,

Alberto de Paola.

albertodepaola

I've already solved the problem by formatting my machine, but I've would really like to know how, or with what, does a System Restore without accessing directly the rstrui.exe.

Thanks!