RPC endpoint mapper stopped working help plz

[markshim]

hi guys,

i was playing star war the old republic online for about 3 mins just setting my graphic settings, then i logged out and ended the game back to desktop. then about 30 later i get a windows error message saying the RPC Endpoint Mapper stopped working. i couldn`t do anything with my pc at this point so i have to push my reset button to reboot.

in eventviewer it say event id 1000

Faulting application name: svchost.exe_RpcEptMapper, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: rpcss.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c970
Exception code: 0xc0000005
Fault offset: 0x000000000000612e
Faulting process id: 0x30c
Faulting application start time: 0x01cd01b2b32152f7
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: c:\windows\system32\rpcss.dll
Report Id: 52d2033d-6daa-11e1-8fc3-90e6ba4e14fc




- Provider

[ Name] Application Error

- EventID 1000

[ Qualifiers] 0

Level 2

Task 100

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2012-03-14T07:50:10.000000000Z

EventRecordID 2000

Channel Application

Computer Mark-PC

Security


- EventData

svchost.exe_RpcEptMapper
6.1.7600.16385
4a5bc3c1
rpcss.dll
6.1.7601.17514
4ce7c970
c0000005
000000000000612e
30c
01cd01b2b32152f7
C:\Windows\system32\svchost.exe
c:\windows\system32\rpcss.dll
52d2033d-6daa-11e1-8fc3-90e6ba4e14fc

i have no idea what this means or why it happened, its a fresh install of windows 7 with all the updates and SP1.

i just seen this in event viewer as well it happened at the same time event id 0

The description for Event ID 0 from source SDWinSec.exe cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

The RPC server is unavailable

i think this is spybot search and destory i installed it 3 days ago, do you think it could be the problem ?

these are the only other 2 event id that come after the rpc mapper stopping

The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

then its only the SDWinSec.exe one

any help plz

 

[Vir Gnarus]

Spybot itself doesn't really have this issue, but its Tea Timer does cause this predicament for people if it ends up getting corrupted and bugged somehow. You probably will need to uninstall Spybot completely and then reinstall it. When installing it again, I personally would not advise you to opt to install Tea Timer. Windows already has something similar built in (UAC, User Account Control) and Tea Timer is prone to have bugs.

 

[markshim]

tea timer is not active nor is the sdhelper. i only use spybot for on demand scans once every 2 weeks. the sbsd security centre service is active tho. should i just uninstall it ?

or is it not even to do with spybot ?

 

[Vir Gnarus]

It's been a while since I've used Spybot, so the whole "Security Center" thing is new to me. I personally don't believe you need to reduce the functionality of Spybot to get it to stop bugging. Rather, a simple complete uninstall of all its components and a clean reinstall should suffice. I still wouldn't go with Tea Timer though (make sure not to opt to install).

It does appear to be related to Spybot. Googling this came up with similar instances with people dealing with it, and yours did mention SDWinSec.exe, which is part of Spybot. If this diagnosis doesn't provide an answer to the problem, you can provide us a JCGriff Report, which contains a good bit of data on your PC that isn't just BSOD-related.

 

[markshim]

is this what you mean ?

View attachment 202768

 

[Vir Gnarus]

Um, not quite. Follow the instructions in the article and it should end up with you having a folder with a bunch of various files in it which you can zip up and send on over.

 

[markshim]

ok is this right ?

View attachment 202770

 

[Vir Gnarus]

Muuuuch better. I'll look through it.

 

[markshim]

ok thank you. i tried to play swtor again and did the same thing i did b4 and i still have spybot installed but it hasn`t done it again ?

 

[markshim]

any news on the file i posted for you ?

 

[Vir Gnarus]

K I perused the logs, Spybot is the only thing I can find at the moment that I can associate with those crashes.

 

[markshim]

ok i have uninstalled spybot as i have a full version of avira premium anti virus. if i get more of these RPC problems can i post back for help please ?

 

[Vir Gnarus]

No problem. You can keep to this one thread since it's the same issue. Remember, you don't have to have Spybot uninstalled. Reinstalling may very well resolve the issue just as much (of course if Spybot was originally the problem to begin with).

 

[markshim]

hiya,

i have been looking abit more into my eventviewer and found that this happened about 1 secs before i got the RPC crash, it must of been when i ended the game swtor. would this be the cause ?

Fault bucket 2287316114, type 5
Event Name: RADAR_PRE_LEAK_WOW64
Response: Not available
Cab Id: 0
Problem signature:
P1: swtor.exe
P2: 1.0.0.0
P3: 6.1.7601.2.1.0


P4:
P5:
P6:
P7:
P8:
P9:
P10:
Attached files:
C:\Users\Mark\AppData\Local\Temp\RDR36E8.tmp\empty.txt
These files may be available here:
　
Analysis symbol:
Rechecking for solution: 0
Report Id: 2dde4b2b-6daa-11e1-8fc3-90e6ba4e14fc
Report Status: 0

it was in the windows log application, and the source was windows error reporting

 

[markshim]

any news on this please ?

 

[Vir Gnarus]

SWTOR should not really be involved with crashing the RPC service. It will most likely call the RPC service using the necessary APIs, but not even giving it bad parameters in those APIs would it crash the service. Only when the service itself attempts to do something with unexpected results would it terminate itself. In this case, the errors I see from the RPC service is c0000005 errors, which are attempts to access invalid memory. Plus, SWTOR is only shows up for like one or a couple of those crashes. I see them occurring a number of times in the syslog.

While I can't see SWTOR doing this, I could see Spybot being involved. Spybot utilizes drivers to perform a number of its activities, and if any of those drivers happens to get in the way of or send the RPC service some bad data, the RPC will crash (as opposed to a user mode application like SWTOR, in which RPC service will just respond to the bad request saying it was erroneous).

The SWTOR error also does not appear to be involved. It's a different error, a RADAR_PRE_LEAK_WOW64 one. I'm not particularly familiar with this kind of error, but from the name it involves WOW64 (32-bit compatibility environment for 64-bit Windows), and looks like its saying SWTOR attempted to perform something that would've caused a leak (most likely some form of memory leak). Googling this I've found it relates to other 32-bit games ran in 64-bit Windows as well. There is no involvement with the RPC service from these other scenarios.

 

[markshim]

ok thank you, i haven`t had anymore rpc crashes. i uninstalled spybot, i might reinstall it at a later date. as far as swtor goes i haven`t had any probelms with it so i will just stop looking in eventviewer for now untill something happens again. if i keep looking i could be going on for ever with the errors and warnings that pop up lol.

thanks for your help i will see how it goes

 

[Vir Gnarus]

Glad to hear of it. If ever you feel confident things are looking snazzy, you should go ahead and mark this thread as solved for future reference for others. Thanks!