Iphutha "RPC Iseva ayitholakali ': Amakhambi

Imbangela ukwehluleka eziningi Windows Service - isevisi RPC. Sokuqonda izifinyezo - akude inqubo ucingo, futhi yokuqala - Remote Inqubo Call. I sihloko sigxile version esakhelwe we-Windows ezisebenza uhlelo ubuchwepheshe evumela izicelo kumakhompyutha ezahlukene NT based OS (okuyinto zihlanganisa 2000 / XP / 2003/2008 / Vista / Seven) ukushintshashintsha ukusakaza idatha ngokusebenzisa zonke izinhlobo yezifiso. Ezingeni eliphezulu nokuxhumana okujwayelekile phakathi isicelo esetshenziswa isikhombi - DCOM (okuthiwa MSRPC). Isendlalelo ezokuthutha ngokuvamile eziqhutshwa yilo Mnyango usebenzisa zenethiwekhi yezifiso TCP / IP, kanye UDP. Umlayezo "RPC Iseva ayitholakali" service RPC elihlobene ne ukungasebenzi kungenzeka ngenxa ngezenzo ezahlukahlukene. Ngokuvamile kuba ukufakwa zephrinta, uzame ukufinyelela server eyihlane, isizinda, manipulation umshayeli isiqophi ikhadi, nokunye.

Ukuze uqale ukubuka log umcimbi ( "Qala" menu, khetha lomzila wesibili, futhi "Control Panel", bese "Isimiso Sokuqondisa", kahle lapha futhi "Izinkundla Viewer"). It ngokuvamile liyasiza ukucacisa umthombo wenkinga. iphutha Ngezinye izikhathi wabonisa has a uhlamvu elintantayo, okungukuthi, wonke umsebenzi ebusuku, futhi ekuseni ukuze. Khona-ke qiniseka ukuthi uyibheka yonke amakhompyutha inethiwekhi-anti-virus iphakheji izibuyekezo zakamuva. Izimpawu zingase zibe ibonakalisa adumile "malware" Conficker, ukusizakala izakhiwo sengozini RPC. Zama futhi ukuhlola ukucushwa kwe-firewall ngokumelene amaphakethe ngokusebenzisa izimbobo 135 445 (ungakwazi ukuvimbela umyalo sc sharedacess stop okwesikhashana) futhi ubuyekeze uhlelo usebenzisa nezimagqabhagqabha kusukela kusevisi Server ( "Isibuyekezo okuzenzakalelayo").

Kukhona ngendlela lelula e esikhathini esifishane ukuqeda umyalezo "RPC Iseva ayitholakali" - esikhundleni UHLELO ebhukwini isidleke lapho kungekho le nkinga. Phela kwemigomo wonke amasevisi kanye nabashayeli zigcinwa khona. Isevisi eziphukile - imbangela evamile yokwenza le nkinga. Lokhu kungasiza uma igciwane Kuye yethulwa ngokuthi inkonzo, kunokuba okukhona esitshalweni, njengoba ngokuvamile kwenzeka. Kungcono prodelyvat lo msebenzi ngokusebenzisa yokutakula Console. Kodwa ungasebenzisa isevisi "System Buyisela" (yiya ku le yokutakula Console , ungasebenzisa ukusatshalaliswa), buchaza usuku ngaphambi kwalokho, ngesikhathi kwehla le nkinga, noma ngokusebenzisa Isimondawo Sokubuyisa Console ukukopisha ifayela kufolda QONDISA UHLELO esikhundleni kwekhona. Kufanele kuqashelwe ukuthi isenzo sokugcina phinda ulwazi zezingxenyekazi zekhompyutha igcwele ukulahlekelwa isikhathi ku perenahozhdenie wonke amadivayisi uhlelo. Ngokuvamile lena indlela esheshayo futhi ephumelela kunazo ukubhekana nobunzima ezihlobene RPC, ngaphandle kokuba lokumba nkinga futhi lokudlela namasevisi ngobugebengu.

Uma ngasizathu simbe ungafuni ukuqeda imiyalezo, "Server RPC ayitholakali" indlela vysheoboznachennyh, ubuze nombuzo umyalo sc, uthayiphe console (ukuze uveze console, khetha u- "Qala"> "Run" e kokutholakala faka ewindini elisha cmd), uma amasevisi DcomLaunch ezisebenzayo. RpcSS, yendawo yokuphrinta. Uma zingekho ohlwini, zama ukusebenzisa nabo imiyalo SC uqale DcomLaunch; SC uqale RpcSS; SC uqale yendawo yokuphrinta. Uma konke kwahamba kahle futhi nombuzo ithimba sc lezi zinsiza ukuboniswa, ungakwazi manje uwaqophe e ezifanele lokubhalisa subkey ngokusebenzisa imiyalo sc wokumisa DcomLaunch uqale = auto; sc wokumisa RpcSs uqale = auto, sc wokumisa yendawo yokuphrinta isiqalo = auto.

Namanje unika nephutha "RPC asitholakali"? Hlola Spoolss.exe Spoolss.dll namafayela ku lwemibhalo C: \ Windows \ SYSTEM32. Sicela sebenzisa umyalo SFC / scannow ukuqinisekisa amafayela system futhi esikhundleni zacekela yasekuqaleni. Phela, angabangela umonakalo kusistimu yefayela. Ngaphezu kwalokho yezinkinga uxhumano kwimodi ukuphela nge RDP ushaye ejwayelekile ngaphezulu ezisebenza odlule isizukulwane izinhlelo - Windows 2000 / XP / 2003/2008, ngokuvamile inkinga, obonakaliswe isitatimende "Server RPC ayitholakali", ezihlobene yokuntuleka umsindo e-Windows 7 . umehluko yesistimu yokusebenza ukuthi inkonzo Windows Audio ngqo interfaced nesevisi, "Amandla." Yingakho ngithola nephutha "iseva RPC ayitholakali." Windows 7, inothi, has umehluko omkhulu ekuphathweni kohlelo, zibaluleke ngaphezu umehluko, uthi, i-Windows XP kanye Winodws 2000. Ngaphezu kwalokho kutuswa uhlole ubukhona namafayela Spoolss.exe Spoolss.dll lwemibhalo C: \ Windows \ SYSTEM32.