COM+ / RPC Reboot Problem

Discussion in 'other security issues & news' started by tensor, Oct 30, 2004.

Thread Status:
Not open for further replies.
  1. tensor

    tensor Registered Member

    Joined:
    Oct 20, 2004
    Posts:
    7
    First off, here's what I'm running:
    WinXP Pro SP2, all patches
    NOD32, latest
    ZAP, latest

    This problem started today...nothing installed, no email opened, NOD and ZAP running...I get an RPC error and the system reboots after 60 secs. Everything comes up normally. Here's the entry from my event viewer:

    Event Type: Error
    Event Source: EventSystem
    Event Category: (50)
    Event ID: 4609
    Date: 10/30/2004
    Time: 7:21:32 PM
    User: N/A
    Computer: ENTERPRISE
    Description:
    The COM+ Event System detected a bad return code during its internal
    processing. HRESULT was 800706BA from line 44 of
    d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Please
    contact Microsoft Product Support Services to report this error.
    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    I know this sounds like the Blaster virus, but there's no trace of it or any related worm on my system. WallWatcher shows no unusual port activity. Nothing strange in my firewall logs.

    Has anyone run into this lately? Can't seem to find any info on google, google groups, or ms. Thanks alot.
     
  2. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    Hi Tensor, and Welcome to Wilder's!

    I can't assist tech wise, but have a look at this page at Experts-Exchange.
    You'll need to scroll at least 2/3rd's of the page for the discussion.

    The processing line is slightly different though, like this;
    HRESULT was 8007043C from line 44 of d:\nt_qxp\com\com1x\src\events\tier1\eventsystemobj.cpp.

    Here's another page with the exact error message at MSN Groups, something to do with Office updates.
    Hope you find something.....

    GF
     
    Last edited: Oct 30, 2004
  3. Marja

    Marja Honestly, I'm not a bot!!

    Joined:
    Mar 8, 2004
    Posts:
    4,553
    Location:
    In the Vast Fields of My Mind
    Tensor,

    Hi! I have had that same Event on my System ever since SP2 got downloaded on my machine. One of my AV's says I have a virus, Apocalipse (that's the spelling AV gives it), but after Jotti's on-line scanner and two other scans, no one else has found anything, either.

    That said, all of those error messages were also followed by an error from Volume Shadow Copy Service, did you have the SP Security Center turned off? Did you have a firewall and the XP firewall on? I was looking on the Application log and it seems to coincide with the XP firewall hanging and not having Windows UpDate on Automatic, when I put it back on auto, all that seems to have stopped. Still, would feel better with a more professional answer, as would you, I am sure.

    SO, maybe we ought to "contact MicroSoft...." ? Let me know what they say! :D

    Wish I could give you more help, I am sure someone will come around and give more professional advice.

    Cheers!

    Marja:cool:
     
  4. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    The Netherlands
  5. tensor

    tensor Registered Member

    Joined:
    Oct 20, 2004
    Posts:
    7
    Thanks guys. The error has not come back since I posted here...maybe that was the fix ;)

    From all the posts I've seen it seems to be a bug related to SP2...I'm pretty sure at this point it's not a virus or a worm...It seems to affect XP, 2000 and 2003 servers but it doesn't seem chronic or widespread enough to warrant some kind of hot fix. Posts with this problem seem to drop off after a while with no real solution.

    If I find anymore useful info, I'll post it here.

    tensor
     
  6. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    Maybe you can find some "professional advice" on sp2 here.
    Read the options carefully.....

    GF
     
Loading...
Thread Status:
Not open for further replies.