Author Topic: RPC error ?!  (Read 24265 times)

0 Members and 1 Guest are viewing this topic.

RonaldLeussink

  • Guest
RPC error ?!
« on: February 04, 2003, 08:22:23 AM »
At home I've installed Avast! 4 home edition, but when I press the "a-sign" in the system tray I get the error-message: "The AAVM subsystem detected a RPC error". There is also a sort of traffic sign upon the "a-sign" in the system tray. It is white and round with a red border and a diagonal red line in it.
 
For your information: My PC: Windows XP Home edition SP1. I updated the latest virusprotectionfiles and programs from Avast!

Offline Roman Svihalek

  • Avast team
  • Full Member
  • *
  • Posts: 138
  • I'm a llama!
Re:RPC error ?!
« Reply #1 on: February 04, 2003, 10:47:38 PM »
The stop sign signals that avast! service is not running. It means that resident protection of avast! is not working!!!
Check your task manager for ashServ process - it won't be probably on process list. If this is the case check Services administrative tool for avast! service and start it...

RonaldLeussink

  • Guest
Re:RPC error ?!
« Reply #2 on: February 06, 2003, 09:56:01 PM »
Roman, thanks for your comment, but it didn't help. When I try to start the service "avast! Antivirus" I get an error-message. It is (translated from dutch XP-version): "Cannot start avast! ...... Error 1068: dependency-service or -group cannot be started". Of course I've look at the dependencies but could not see anything strange (RPC... was started). What is wrong with my PC?

Offline Roman Svihalek

  • Avast team
  • Full Member
  • *
  • Posts: 138
  • I'm a llama!
Re:RPC error ?!
« Reply #3 on: February 07, 2003, 10:41:41 AM »
It looks quite interesting. avast! service has only one dependency - on RPC service. So problem is probably with starting this service..
Check status for this service in your system, it should be enabled and running. avast! uses RPC for multiprocess communication...
« Last Edit: February 07, 2003, 10:42:33 AM by Roman Svihalek »

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:RPC error ?!
« Reply #4 on: February 08, 2003, 02:57:36 PM »
Quote
avast! service has only one dependency - on RPC service. So problem is probably with starting this service..

Well, not really, it has dependency on the avast! filter driver as well. Please check if you have the files aavmker4.sys and aswmon2.sys present in the <windows>\system32\drivers folder.

Vlk
If at first you don't succeed, then skydiving's not for you.

RonaldLeussink

  • Guest
Re:RPC error ?!
« Reply #5 on: February 09, 2003, 09:11:31 PM »
I've checked both statements; the one from Roman on feb. 7th and the one from Vlk on feb. 8th. But without any result. I do have RPC running as a service and I do have both mentioned files in \windows\system32\drivers. On another partition on my PC I have the same OS and installed Avast! 4 as well. On that partition everything is running well and I cannot see any difference.

Any more suggestions?

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:RPC error ?!
« Reply #6 on: February 13, 2003, 05:46:05 PM »
I'd suggest to attempt to reinstall avast... it doesn't take more than a couple of minutes and is likely to help...

Vlk
If at first you don't succeed, then skydiving's not for you.

RonaldLeussink

  • Guest
Re:RPC error ?!
« Reply #7 on: February 14, 2003, 07:42:51 AM »
I've already reinstalled Avast! 4 two times but with no success.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:RPC error ?!
« Reply #8 on: February 14, 2003, 01:25:09 PM »
What about the Event Viewer? Doesn't it show anything suspicious?

If the RPC Service is actually running, there is probably only one possibility - that the avast! Kernel mode filter driver (aswmon2.sys) could not be started... In this case, there should be an entry in the event log (a new one for every start of the computer)...

Vlk
If at first you don't succeed, then skydiving's not for you.

RonaldLeussink

  • Guest
Re:RPC error ?!
« Reply #9 on: February 15, 2003, 04:15:22 PM »
Indeed...the event viewer shows an error at every start of the computer. The error is: The avast! Standard Shield Support-service cannot be started because of the following error:
The system cannot find the mentioned file.
For help and support http://go.microsoft.com/fwlink/events.asp.

Because I have a dutch version of XP Home I had to translate the error message. At the microsoft URL nothing helped me to solve the problem.

Which file should be missing? There must be one because of this error message?

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:RPC error ?!
« Reply #10 on: February 15, 2003, 06:25:28 PM »
Since you have the aswMon2.sys file there (you already checked that), there must be something very odd in the settings. Please open the registry editor and look up the HKLM\System\CurrenControlSet\Services\aswMon2 key. What does it contain? Is it there at all?

Thanks,
Vlk
If at first you don't succeed, then skydiving's not for you.

RonaldLeussink

  • Guest
Re:RPC error ?!
« Reply #11 on: February 17, 2003, 09:44:07 PM »
The aswMon2key is there, as you described. The name, type and values for the aswMon2key are:

(Standaard)  REG_SZ  (no value...)
DisplayName REG_SZ  avast! Standard Shield Support
ErrorControl  REG_DWORD  0x00000001 (1)
Start  REG_DWORD  0x00000002 (2)
Type  REG_DWORD  0x00000002 (2)

The aswMon2key contains one "subfolder", named "Enum" with the following:
Standaard)  REG_SZ  (no value...)
Count  REG_DWORD  0x00000000 (0)
INITSTARTFAILED  REG_DWORD  0x00000001 (1)
NextInstance REG_DWORD  0x00000000 (0)



Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:RPC error ?!
« Reply #12 on: February 19, 2003, 07:42:04 PM »
What happens if you execute the following command:

net start aswMon2

(from the command line)??
Also, you may want to check the AavmKer4 key is well (at the same location as aswMon2).

Thanks,
Vlk
If at first you don't succeed, then skydiving's not for you.

RonaldLeussink

  • Guest
Re:RPC error ?!
« Reply #13 on: February 19, 2003, 09:19:03 PM »
When I start a dos command prompt and go to c:\windows\system32 I give the command "net start drivers\aswmon2". Than I receive the following message:

Systemerror 123.
The syntaxis of the filename, mapname or volumename is incorrect.

I receive the same message at aavmker4.

kubecj

  • Guest
Re:RPC error ?!
« Reply #14 on: February 19, 2003, 11:48:28 PM »
Try the exact thing Vlk wrote:

net start aswMon2

(not drivers\).