Internal security problem with RPCSS

From: needlove (needlove_at_aw.are)
Date: 07/18/05

  • Next message: Adobird: "Some programs do not run unless run as is used" 
    Date: Sun, 17 Jul 2005 22:17:10 -0600

    My computer is not part of a network! I am the ADMINISTRATOR. I installed
    Windows XP home sp1 OEM CD I got off ebay. I installed it on a WD raptor
    serial ATA hard drive using an ATA CD drive and installed the unsigned
    Sil3112 SATA drivers when prompted. I installed SP2 before accessing the
    internet to download the latest updates. The repair installations, one from
    the recovery console, one from an active windows session, were done using a
    "slipstream CD" (merging sp2 with my original sp1 version).

    This is my sceRoot log for all installations:

    Saturday, February 19, 2005 9:29:26 PM

    C:\ is a NTFS volume.

    Security for C:\ is not changed because it is not the default set by
    Windows. The current security is
    D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICIIO;GA;;;CO)(A;OICI;0x1200a9;;;BU)(A;CI;LC;;;BU)(A;CIIO;DC;;;BU)(A;;0x1200a9;;;WD).

    First attempted repair!
    Thursday, July 07, 2005 2:36:55 PM

    C:\ is a NTFS volume.

    Security for C:\ is not changed because it is not the default set by
    Windows. The current security is
    D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICIIO;GA;;;CO)(A;OICI;0x1200a9;;;BU)(A;CI;LC;;;BU)(A;CIIO;DC;;;BU)(A;;0x1200a9;;;WD).

    Second attempted repair!
    Sunday, July 17, 2005 5:51:32 PM

    C:\ is a NTFS volume.

    Security for C:\ is not changed because it is not the default set by
    Windows. The current security is
    D:(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICIIO;GA;;;CO)(A;OICI;0x1200a9;;;BU)(A;CI;LC;;;BU)(A;CIIO;DC;;;BU)(A;;0x1200a9;;;WD).

    Do you see anything wrong with this? Compare it to your sceRoot log please.

    I cannot make changes to RPCSS! I tried from CMD.exe, safe mode
    administrator account and unable to access it through MMC or component
    services. I can't even access the help file to editing security templates!
    RPCSS is run by NTAUTHORITY/SYSTEM and and when I tried to change it to
    local account it locked itself up. WMI, DTC, Help and Support, to name a
    few, can't comunicate with it but its running by golly!

    Here is my most recent setuperr log:

    Error:
    Setup encountered an error while trying to set system security.

    An extended error has occurred.

    Error:
    Setup could not register the OLE Control C:\WINDOWS\system32\swprv.dll
    because of the following error:
    DllInstall returned error 2147549183 (8000ffff).

    I ran regsvr32 swprv.dll (VSCs) and it registered ok.

    I have tons of log files which ones would you need to make a diagnosis?

  • Next message: Adobird: "Some programs do not run unless run as is used"

    Relevant Pages

    • Re: Security Center disabled
      ... "Norton Internet Security has its own Security Control Center ... NIS firewall and it does turn off the Windows firewall, ... All the installations of NIS I've seen have their own Security Center. ... If you are sure the computer is malware-free, do clean-boot troubleshooting ...
      (microsoft.public.windowsxp.security_admin)
    • RE: Security Update KB956572 wants to be installed continuously...
      ... service for security related updates. ... I also did "Security Update for Windows XP "; ...
      (microsoft.public.windowsupdate)
    • Re: Reinstalled 2nd copy of WindowsXP but now cant read files from 1st Copy
      ... Access is Denied" Error Message When You Try to Open a Folder ... How to take ownership of a file or folder in Windows XP ... I have two installations of XP on the same partition ... Get Windows XP Service Pack 2 with Advanced Security Technologies: ...
      (microsoft.public.windowsxp.security_admin)
    • Re: P2P software is security?
      ... he was talking about linux... ... > reliable than Windows and therefore has more Net installations. ... > secure facilities as it has more security built in. ...
      (comp.security.misc)
    • [NT] Cumulative Security Update for Internet Explorer (MS04-025)
      ... Get your security news from a reliable source. ... * Microsoft Windows NT Workstation 4.0 Service Pack 6a ... Navigation Method Cross-Domain Vulnerability ...
      (Securiteam)