Windows 2000 Server problem

By Razers
in Microsoft (Windows)

 Share

Recommended Posts

Rookie

Razers

Posted
Posted

Guys, i have this file server:

SERVER NAME ABCFILESERVER

MODEL IBM xSeries 235

PROCESSOR INTEL XEON 2.4GHz

MEMORY RAM 1GB RAM

HARDDISK 34GB, 34GB

OS WINDOWS 2000 SERVER SP3

Sometimes when opening a program,an error message appears saying "'Run-time error '7' out of memory" & the File Server's RPC Service has stopped running unexpectedly, the drag & drop can't function, copy&paste also can't function.

I need to restart the server to enable them back & it's really troublesome. This never happen before & it just happen lately. I tried scanning for viruses & spywares using latest updates but nothing found. Any ideas? :alien:

Link to comment
https://www.neowin.net/forum/topic/647735-windows-2000-server-problem/
Share on other sites
Mentor

timmmay

Posted
Posted

Well in that case do a full backup before upgrading and cross your fingers!

Otherwise, check the event logs for any specific error details. Runtime errors can be caused by too many things to put a finger on without more information. Although, the fact that the RPC service stops indicates that it's either a virus/trojan or most likely a system file issue.

Guest

Posted
Posted

Are all your client PC's protected against antivirus? The last time I saw RPC shutting down issues was the result of the Blaster virus. If your Windows 2000 Server is local only then maybe this server isn't patched to fix the RPC exploit. Is KB823980 listed as installed in Add/Remove Programs?

Veteran

bobbba

Posted
Posted

even on a lan a server should patched. maybe exercise caution and take your time and establish backups prior to applying patches but it still should be done regardless. your problem could quite easily caused by a viral attack or something similar attacking an open vulnerability.

after sp4 the very least should be to apply the post sp4 security rollup for win 2000 (sp5 by another name basically)

Mentor

timmmay

Posted
Posted

AFAIK that service is already configured on a default install to restart the computer.

I didn't mean restart the computer, I meant restart the service. Each service has recovery options that you can setup so if it crashes it will automatically try to start again.

Rookie

Razers

Posted
  • Author
Posted

Guys, i have updated the Server to Service Pack 4 yesterday. This morning the RPC service failed again. Looks like upgrading to service pack 4 didn't solve the RPC service failure. Even using Blaster removal tool didn't detect any virus. Got any other option except reinstalling windows? sigh...

Rookie

Razers

Posted
  • Author
Posted

The RPC shutting down message comes from other infected computers not the computer itself.

ur saying that the RPC failed on the server might be from other computer that connects to the server? But the other computer doesn't have this kind of problem.

I'm going to try out the anti-rootkit tools. I hope this will solve the problem for good.

Guest

Posted
Posted

I won't say for sure this is the problem your issue. But from past experiences its other infected PC's that broadcast the code that shuts down the RPC service. I guess if the other computers are patched against this then they won't be affected.

Have you installed that patch I posted on page 1? I guess installing this will eliminate the Blaster virus being the cause of the issue.

Veteran

bobbba

Posted
Posted
Guys, i have updated the Server to Service Pack 4 yesterday. This morning the RPC service failed again. Looks like upgrading to service pack 4 didn't solve the RPC service failure. Even using Blaster removal tool didn't detect any virus. Got any other option except reinstalling windows? sigh...

Take a backup and install all the MS updates. SP4 is a start but there's been many many bug fixes and patches since it was released.

Some caution regarding patches is good but it should be more on the lines of a good backup policy, waiting a few weeks after a patch has been released in case there are any issues with it when it goes public. Other than, a server should be kept up to date.

Rookie

Razers

Posted
  • Author
Posted

I won't say for sure this is the problem your issue. But from past experiences its other infected PC's that broadcast the code that shuts down the RPC service. I guess if the other computers are patched against this then they won't be affected.

Have you installed that patch I posted on page 1? I guess installing this will eliminate the Blaster virus being the cause of the issue.

If like that, i will have to check each 20+ clients.

Scanned using anti-rootkits i.e. F-Secure/McAfee/MS Malicious Removal Tool & nothing found except for McAfee the server goes BSOD.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • Microsoft releases major feature updates for stock Windows 11 apps

      By PurSpyk · Posted

      Anyway to download these versions without being on the Experimental builds?
    • Microsoft about to radically change how often your Edge browser updates

      By testman · Posted

      Nothing is stopping you from continuing with your testing cadence. If updates are released every 2 weeks instead of 4, and you test once every 4 weeks, the exact same amount of patches will still be available for you in those 4 weeks. For example: Before 4th week - patch 1, 2, 3, 4 After 2nd week - patch 1 and 2 4th week - patch 3 and 4 Still the same amount after 4.
    • Microsoft about to radically change how often your Edge browser updates

      By testman · Posted

      Everyone else has said it. I'm gonna say it - you don't know what you're talking about. I do. I have two laptops. One work, one personal. I have access to two more laptops - both personal. At home I manually update my personal laptop when I see on Neowin that there is an update - I carry on and only apply the updates when I am ready. My work one only updates when my workplace decides to send it - I carry on and only apply the updates (when they actually arrive, which is usually days after the release) when I switch off the laptop at the end of the day as usual. The two other personal laptops only get updated when I get to it which is rarely - the people who own them carry on using them until I get to it and update them. All of the browsers on all laptops are configured to restore the tabs when launched. Google and Microsoft have changed from 6 weeks to 4, and it looks like it's going to move to 2. None of these changes affect how any of these browsers on the laptops are used. Not one jot. My advice to you is stop panicking whenever you see an update. Just carry on with what you're doing. This even benefits you in a way - from your comment you sound like you don't like the changes or the frivolous new features - great - then carry on as before!
    • Lethal fake phone chargers are still being sold on Amazon and eBay, UK watchdog warns

      By Brian Miller · Posted

      AMAZON needs to take total accountability for this.
    • Windows Server gets DNS over HTTPS (DoH) support

      By binaryzero · Posted

      Server Summit had a heap of announcements, ADCS changes are baller.

  • Recent Achievements

    • Week One Done
      Jeroen Wilms earned a badge
      Week One Done
    • Week One Done
      rolfus earned a badge
      Week One Done
    • One Month Later
      Leroy Jethro Gibbs earned a badge
      One Month Later
    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later

  • Popular Contributors

    1. 1
      +primortal
      509
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      138
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      80
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!